last executing test programs: 17.168223108s ago: executing program 1 (id=782): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328a01004ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff05000050"}, 0x38) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000500000000000500fffe0900010073797a30000000002c000000030a0102000000000000000005"], 0xc8}}, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00\x00\x00\x00'], 0x70}, 0x80) (fail_nth: 3) 17.012222491s ago: executing program 3 (id=785): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001fc0)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b12d25a80648c2594f90124fc60100c03400f000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 16.500224713s ago: executing program 4 (id=786): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) r1 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x779a, 0x80, 0x2000004, 0x3ce}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd64485", 0x39, 0x2400c0c7, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x69, 0x0, 0x0) 13.902457396s ago: executing program 0 (id=787): capset(&(0x7f00000003c0)={0x20080522, 0xffffffffffffffff}, &(0x7f00000000c0)={0x200000, 0x240001, 0x8, 0x1007, 0xfffffffd}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x24000054}, 0x4004011) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$packet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0xc7}, 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000004080)=@newtfilter={0x90, 0x2c, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0xfff2}, {0x7fef, 0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x7}}, @filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e24}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0xf}, @TCA_FLOWER_INDEV={0x14, 0x2, 'syz_tun\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0xeab8}, @TCA_RATE={0x6, 0x5, {0x1, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0xfffffffb}, @TCA_RATE={0x6, 0x5, {0xfc, 0xf5}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r6, &(0x7f0000002c80)={0x2020}, 0xfffffdb2) ioctl$KVM_RUN(r6, 0xae80, 0x0) read$FUSE(r6, &(0x7f0000000a40)={0x2020}, 0x2020) 12.87499924s ago: executing program 1 (id=788): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x7, 0x20, 0x1d, 0x9, {{0x5, 0x4, 0x2, 0x17, 0x14, 0x67, 0x0, 0x5, 0x4, 0x0, @empty, @multicast2}}}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000ad8000/0x3000)=nil, 0x3000, 0x4000002, 0x4010, r1, 0xfe) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) get_mempolicy(0x0, &(0x7f0000000440), 0x4000, &(0x7f0000fff000/0x1000)=nil, 0x2) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$BLKTRACESETUP(r1, 0x40081271, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x7ffffffe, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mmap(&(0x7f00009e3000/0x1000)=nil, 0x1000, 0x7, 0x10010, 0xffffffffffffffff, 0x9122000) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000000)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYBLOB="56d94f18058485e7e5f4d07abf2cf64284d58a7685b76318bea1cd2518921942628415942589ae3cdf0ee7d043031f2f535048fe80a46dd1aa2f991d328b392e5ff3376fd5fc290da1e64284009f89feaf1a2f52656b62e936171568961b00ee9346a2cff8b7182a51c8561d18b56c27"], 0x0) 12.787143144s ago: executing program 3 (id=790): r0 = socket$nl_rdma(0x10, 0x3, 0x14) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x10) pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="184f48ed0f7a", 0x6}, {0x0}], 0x2, 0xc9, 0x2009) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000101401002cbd7000fedbdf25080003000100000008004a0001000000080001000000000008004be43b9bdadf"], 0x30}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e683d66642c800000006f3d5597e8ba48524fa146b631555597d443e49f1cbe1a46eb2c77481e67044e90aa087aa99edba1f8dfc2f8d20e58342d7460a7cccc4d7dbb38ffa4d63d4554a6cb471ef5e6744cf47d", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',k']) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x50, r7, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r11, &(0x7f0000001480)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[], 0x590}}], 0x1, 0x8008801) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r12}, 0x10) 11.259845744s ago: executing program 2 (id=791): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r7, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="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", 0x2b3}], 0x1}, 0x20000044) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x3c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) splice(r9, 0x0, r10, 0x0, 0x4, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000080010a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a90000000000000000000000000000000000000000000000f100000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000900000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c0000"], 0xfc}}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x184}}, 0x0) 11.177954368s ago: executing program 0 (id=792): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000001a00010000730ce0a3308e71bb0000000000000a002cd2fc003a2a5e272ad3c51c1cb947f34dd0b7ae6cf20f3cc30978c2651055e058f90c72740743468a1a671a63f122e406405ba853b028034b59b3d5868de23e74fcbb63ea16c36750586c35cdf383525ea6c45b0581ab13b135414d83a2f3e07a42975dc188519d7a6b537ae0256653ebe3f02ef2dcd36d52406a978c"], 0x28}], 0x1}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) writev(r5, &(0x7f0000000880)=[{0x0}, {0x0}, {0x0}], 0x3) shutdown(r5, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 11.017016084s ago: executing program 4 (id=793): rseq(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="cf9f957e4ef47ae04f29e39dfb081c0000001000010700000000000000000a0000000800010007000000"], 0x1c}}, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80146, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000700)=@newtaction={0x18, 0x30, 0x9, 0x100, 0x25dfdbff, {}, [{0x4}]}, 0x18}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f000039f000/0x1000)=nil}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r4, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x10e, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113200000000008510000002000000b7000000000000009700c200000000009500001200000000"], &(0x7f00000006c0)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000240)={0xf0003, 0x0, [0x680, 0x3, 0x7, 0x0, 0x0, 0x0, 0x2b, 0x40000000]}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000867700000000000000000000850000002700000018010000786c6c2500000000000920207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000f9ff0000b703000000000000850000007b00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f0000000740)='attr\x00') r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r8, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x50, 0x13, 0x84, 0x87f3}]}) move_mount(r7, &(0x7f0000000500)='./file0\x00', r7, 0x0, 0x60) ioctl$NS_GET_PARENT(r7, 0xb702, 0x0) r9 = getpgid(0x0) syz_open_procfs$namespace(r9, &(0x7f0000000380)='ns/time_for_children\x00') ioctl$vim2m_VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f00000005c0)={0x0, @win={{0xfc, 0x1, 0x7, 0xc9}, 0x8, 0xc7, &(0x7f0000000340)={{0x4, 0x0, 0x8, 0x2}, &(0x7f00000000c0)={{0x0, 0x200, 0x6652719f, 0xa}, &(0x7f0000000080)={{0x7, 0x4, 0x0, 0xc}}}}, 0x8001, &(0x7f0000000780)="96a24da9e8d26324a5b6a9481cb2088d2f49d52c00b6160eae70304dbd79c555a9f764c8e84c53414337607b9bdc722f09c3370a0700d7758d03dc3276656d2cc52c86d5cfc54ef9a0251b962af307ffccb15996ffe1deceba5f3d2b1ccba547f9a804113b1af62ee783ad43ed52bcdd9e72d27d1e714707de52af1879342c3fc726004cd5c5d7e7dd2a6be3bb931410ef5ffbf98eb2337bc2c3d13c8081b199de2a5ddcc0b130ad9894fc53a187d30af550fd3ec4706242c4fe156e7b3300ccf685cb6eb10ec38e0338f63990e36ffbcfe338a1fa2ac439318f7f04823f81916a00"/240, 0xbd}}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="400000001200050100000000ffdbdf2505001900ff00080028001a000a010102008000000000000000000000fe8000000000000000000000000000aa02"], 0x40}}, 0x20040810) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x3, 0x0, 0x240000, 0x0, 0x51, 0x0, 0x4}, 0x9c) 10.93140874s ago: executing program 3 (id=794): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000700)={0x0}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000740)={r0, 0x3}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000780), 0x4100, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000007c0)={'tunl0\x00', @random="7fa749b84cbf"}) recvmmsg(r2, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000008c0)=""/244, 0xf4}, {&(0x7f00000009c0)=""/91, 0x5b}, {&(0x7f0000000a40)=""/49, 0x31}, {&(0x7f0000000a80)=""/109, 0x6d}, {&(0x7f0000000b00)=""/20, 0x14}, {&(0x7f0000000b40)=""/32, 0x20}], 0x6, &(0x7f0000000c00)=""/156, 0x9c}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000cc0)=""/30, 0x1e}], 0x1, &(0x7f0000000e00)=""/52, 0x34}, 0x8}], 0x2, 0x40002002, 0x0) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r5 = socket$key(0xf, 0x3, 0x2) sendmmsg(r5, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000000c0)="02c3", 0x2}, {0x0}], 0x2}}], 0x1, 0x0) getgroups(0x3, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r8 = socket(0x2b, 0x80801, 0x1) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x1d0, 0x290, 0x290, 0x390, 0x0, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0xff, 'netdevsim0\x00', '\x00', {0xff}, {0xff}, 0xb8, 0x0, 0x40}, 0x0, 0x70, 0x428}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="81b035711ec5", 0xfc00, 0xe, [0xa, 0x27, 0x1b, 0x3d, 0x1e, 0xb, 0x2b, 0x0, 0x30, 0x1a, 0x23, 0x6, 0x31, 0x33, 0x36, 0x18], 0x2, 0x4, 0x9}}}, {{@ip={@local, @local, 0xff, 0xffffff00, 'netpci0\x00', 'wg1\x00', {}, {}, 0xc, 0x1, 0xa}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x6}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2b}, @loopback, 0xff000000, 0xff000000, 'wg1\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x11e, 0x6, 0x4b}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xdc}}}, {{@ip={@multicast2, @rand_addr=0x64010101, 0xff000000, 0xffffffff, 'ipvlan1\x00', 'veth0_macvtap\x00', {0xff}, {}, 0x6c, 0x0, 0x41}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x3, 0xc, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x9b, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) read$FUSE(r7, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x4a276012}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="50010000000000000000000000000000060000000000000002000000000000000600000000000000060000000000000005000000ffffffff090000000000000003000000000000000e010000000000000400000000000000000000000000000008000000000000000001000003000000040000000020000005000000", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0300000007000000000000000400000000000000000003000000000008"], 0x0, 0x0, 0x0}) write$P9_RSTATu(r4, &(0x7f0000000340)={0x6d, 0x7d, 0x2, {{0x0, 0x56, 0x9, 0x140, {0x1, 0x4, 0x1}, 0x100000, 0x7, 0x4, 0x8000000000000000, 0x0, '', 0x1, '.', 0x13, '^[}{]\'@(*:$*!\\,^)#$', 0xf, '/dev/cpu/#/msr\x00'}, 0x2, '+/', 0x0, r6, r10}}, 0x6d) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3ff}) r12 = add_key$user(&(0x7f0000000040), &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000080)="bc5b71c2", 0xfffffffffffffd21, 0xfffffffffffffffe) syz_open_dev$MSR(&(0x7f0000000280), 0xfffffffffffffffb, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r12, 0x0, r12}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 10.158269712s ago: executing program 2 (id=795): socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = memfd_secret(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/custom0\x00', 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) unshare(0x2c060000) unshare(0x24020400) r2 = syz_io_uring_setup(0x1bdc, &(0x7f0000000240)={0x0, 0xd80f, 0x8, 0x41, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600), 0x0, 0xb}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000540)=""/102400, 0x19000) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x30, 0x0, 0x30, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000600)=[@in6={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x1}, @in={0x2, 0x0, @remote}], 0x1e) fchownat(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) mount$bind(&(0x7f0000019540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r8, &(0x7f0000000400)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) unshare(0x18000100) 8.721460574s ago: executing program 1 (id=796): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000700)={0x5, @win={{0x101, 0x10, 0x2eb671fd, 0x4}, 0x8, 0x6, &(0x7f0000000600)={{0x8, 0x2, 0x5, 0x5}, &(0x7f00000005c0)={{0xfffff0a3, 0x3, 0xfffffbc2, 0x17}, &(0x7f0000000580)={{0xd9, 0xcd, 0x47638a74, 0x5d981a0d}}}}, 0x8, &(0x7f0000000640)="e85648a4fd5aee7f1a57ec677f297b9a5258b26d829b00afd15aac958bfc6ba785eb320c4534e367e0f6db18a75b5d0569f52f17e25f1b50127007b2eaebb2e2e160e343bd46dfcf1063eff408705990be4c06db7bf19456c1420280204ea5cc90f7066c60c9", 0x67}}) syz_open_procfs(0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r3, 0x0, 0x20048805) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 8.583556538s ago: executing program 2 (id=797): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000002140)={0x0, 0x0, &(0x7f000001c800)=[{&(0x7f00000020c0)=""/50, 0x32}, {&(0x7f000001b700)=""/4096, 0x1000}], 0x2}, 0x40000100) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000c, 0x8010, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c697000140007800800084000002f5408000640"], 0x60}}, 0x0) 8.531114115s ago: executing program 0 (id=798): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000000)={0xab3, 0x9}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0) 8.277881626s ago: executing program 0 (id=799): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80080, 0x4) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c040, 0x104) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=@newtfilter={0x2cc, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x8, 0x3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x2a0, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x4}, @TCA_U32_SEL={0x234, 0x5, {0xf, 0x4, 0x4, 0xe8d, 0xf, 0x1, 0x580f, 0x2f4, [{0x4c, 0x33ba66a0, 0x5, 0xfffffc00}, {0xf0, 0x100000, 0x5c4d839a, 0x2}, {0xffff, 0xfff, 0x1, 0x9}, {0x0, 0x3, 0x9}, {0x2, 0xe159, 0x5532, 0xfffffffa}, {0x5, 0x7, 0x3, 0x5}, {0x0, 0x23facc36, 0xc6, 0x1}, {0x80000001, 0x6, 0x9, 0xa5}, {0x6, 0x2, 0x8, 0x6}, {0xc51, 0x2, 0x3, 0x3}, {0x8ec, 0xd2cc, 0xca82, 0x4}, {0xda42, 0xfffffffb, 0x5, 0x3}, {0x0, 0x3fb2, 0x5, 0x3800000}, {0x8000, 0x5815, 0x3, 0xfb}, {0x4, 0xe06, 0x3, 0x5}, {0x1d, 0x1a, 0x3f8, 0x4}, {0x7, 0x10000, 0x6, 0xe}, {0x71, 0x40, 0x81, 0xeebb}, {0x2, 0xb, 0x0, 0x4}, {0xffff, 0xb, 0x2, 0x4}, {0x5, 0xfffffe00, 0xe143, 0x8}, {0xf3, 0x9, 0x3, 0x2}, {0x353, 0x8, 0x1, 0x80000000}, {0x7, 0x1, 0x4, 0x10}, {0xdd65, 0x7f, 0xf, 0x2}, {0x1, 0x3, 0x1000, 0xe}, {0x1, 0x88, 0x3, 0xc}, {0x7, 0x1, 0xc4, 0x5}, {0x9, 0x0, 0x3, 0x9}, {0x8001, 0x1, 0x3, 0x2}, {0x9, 0x8, 0x3, 0x101}, {0x101, 0x2, 0xbc3c, 0x2}, {0x6, 0xf4, 0x7, 0x750d}, {0x2, 0x9, 0x9, 0x101}]}}, @TCA_U32_POLICE={0x60, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x80000000, 0xb, 0x743, {0x3, 0x1, 0x8, 0x6, 0x827}, {0x2, 0x0, 0x4, 0xb, 0x5, 0x7f}, 0xe, 0xc5a, 0x80000001}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}]}]}}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) rt_sigaction(0x1c, &(0x7f00000001c0)={0x0, 0x10000000, 0x0, {[0x100]}}, 0x0, 0x8, &(0x7f00000002c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x1, [], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x9, 0x7}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000300)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x800, 0x40) 7.451743087s ago: executing program 2 (id=800): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x3e, 0x7c, 0xbc, 0x10, 0x61d, 0xc160, 0xa8f7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd8, 0xc9, 0x1c}}]}}]}}, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000300)={{0x0, 0x0, 0x80}}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000000)="170000000200010000ffbe8c5ee17688a20033000301000a000002a257fc5ad90200bb6a880000d6c8db0000dba67e060a0000e28900000200df01800a000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2", 0xd2) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) (async) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000003c0)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0006"], 0x1c}}, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0xffffffff, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0x3, r8}]}, 0x40}}, 0x0) 4.986832888s ago: executing program 3 (id=801): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r5, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="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", 0x2b3}], 0x1}, 0x20000044) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x3c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) splice(r7, 0x0, r8, 0x0, 0x4, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[], 0xfc}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000034011100ac14140c000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa6c01a8000200000002000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ff020000000000000000000000000001ff020000003500000a000800ac1414bb000000000000000000000000fc02000000000000000000000000000064010102000000000000000000000000fe8000000000000000000000000000323c"], 0x184}}, 0x0) 4.935376804s ago: executing program 0 (id=802): capset(&(0x7f00000003c0)={0x20080522, 0xffffffffffffffff}, &(0x7f00000000c0)={0x200000, 0x240001, 0x8, 0x1007, 0xfffffffd}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x24000054}, 0x4004011) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$packet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0xc7}, 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000004080)=@newtfilter={0x90, 0x2c, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0xfff2}, {0x7fef, 0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x7}}, @filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e24}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0xf}, @TCA_FLOWER_INDEV={0x14, 0x2, 'syz_tun\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0xeab8}, @TCA_RATE={0x6, 0x5, {0x1, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0xfffffffb}, @TCA_RATE={0x6, 0x5, {0xfc, 0xf5}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r6, &(0x7f0000002c80)={0x2020}, 0xfffffdb2) ioctl$KVM_RUN(r6, 0xae80, 0x0) read$FUSE(r6, &(0x7f0000000a40)={0x2020}, 0x2020) 4.700052371s ago: executing program 1 (id=803): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) r1 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x779a, 0x80, 0x2000004, 0x3ce}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd64485", 0x39, 0x2400c0c7, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x69, 0x0, 0x0) 3.87958291s ago: executing program 2 (id=804): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x18, 0x4, 0x0, 0x0, 0x1, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) sendmsg$inet(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000300)="63b50faf4bd3eeaa99aa091b15b6bf8438b48814e770ab7fb7565d8adb8fb794c4e5778124bbd577c829c28ecedf76", 0x2f}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f00000004c0)="22e5a41d7bfce5bb835e96e7b1bc0bdb25907dc0e22fbc2f9d80bbc4780e07f15b7fd8636b6f34530547debaecac9ecbbb872e128280914f66f8140d45e3d1c2ebb64f503e71f1ea4007d551fc8776d342b65640ff2c1749596b45fa4158a49479c01e6f01803f6b40b7ff83731c43462185fb54fe7d6d07e63024e0374293eb568cfc748dc5326bf49d68299a8be2751dd66d4955ca", 0x96}, {&(0x7f0000000580)="537c34b2bb697b8878c861260badb580625bbeeead39708556131a52a686d2ec4a46f35221bd121d32b29d7e60cd73517281ec92961f99c6a43e3ee051b81502a436b30882cecdf36a60bc695cfb3a4c968acf53a1078744832b8472140e094da3d9dbebc14772f611af23af568df31511362f34633dc9ec1af85d98a3991b85065e36e4d0574ace641606aa3262f015cc7a10b5d46db53afd5107f920f37cfe2dc5302694722b4b11b7702d914efa598871c6f4175b25440b4fe7b7ff4b49a1e7dc69124eba27a1323084a6a643614a96296f6d701b36ca2b954614894462e2348ba962242710c67d647f8769fe0426020dbac9cfc788", 0xf7}, {&(0x7f0000000680)="67c19c0e041adb7007130fa36d255c9a2a68d4af50a776289f66733bdb0d7fb8ecaa72d5bcbc77a015312f6a88fbf382710a1dada92fe83f3b8a23df8282f35a9d7c8395951a0d4262988a0f09fea06d8312e5923ed36d117b8aedcb8d363d8a873354b82540e95f066059c151b500c87a8bcb3dfb268c5890862a7e4b9d02b30f5b875ae2a3cd9aac3a0adca3", 0x8d}, {&(0x7f0000000380)="719c622938232ec4b133d78d22db38e7d5dc8f99704cefb877533362e4ab17f47d", 0x21}, {&(0x7f00000008c0)="b36d17e8ec62d615e7daf564f8e6ae35dcf6cc8bce6bb5ae7e0be928cbe39dbbcea738cf8e251d2adfb81ef213b362d6e0e2055ba27e756277b6a38f01b549dc4aa9c1ee775601f0e398f58fe70018b865fd3a0f529e9a92b33e3224ccd8b2874f0bef2c6c8e8ae2e6247b9d99577f1d09bbed7069f80a08b49b2ceeb96ce9dd1574bcfb143274768b0ef64781ee772593d953c9777d1e0e350e7f68e862aeef8a338337ddee7a002de06c", 0xab}], 0x7, &(0x7f0000000980)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8001}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x48}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000040)='{\x00', 0xff65) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$notify(r6, 0x402, 0x29) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') preadv(r7, 0x0, 0x0, 0x7, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000040000000000000000000100000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000005400038050000080080003400000000244000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000001014000180090001006c617374"], 0x104}}, 0x40000) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0xfffffbff, 0x20, 0x0, 0x0, 0x8, 0x1, 0x0, 0x5, 0x3, 0x0}) write$binfmt_misc(r7, &(0x7f0000001b00)="2c425aa3a247df6b02c255772bdc59e2cc3301a5818c3bf55032d8cae607d6be0b185abaa667d69b67924412f95646f3d3ada9490bf98a19144f74a24bed2cfbc031a97f9a980347c06e7db840d4066eb35e7d68f844cf249d461553ebac5c151176ec2a9c7407aa8821a9c5db786ff1140cc92d3bf44f65bd784e1312ed6e01046afabfd7be8e19dccb23fb2937e8593ebb48b1831855ff44409ae167a0e55cdeda1341d2e030720343b14cc04aff655d3859843c087276cfea", 0xba) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) 3.879070513s ago: executing program 4 (id=805): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r7, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="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", 0x2b3}], 0x1}, 0x20000044) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x3c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) splice(r9, 0x0, r10, 0x0, 0x4, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000080010a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a90000000000000000000000000000000000000000000000f100000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000900000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c0000"], 0xfc}}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x184}}, 0x0) 3.870516239s ago: executing program 3 (id=806): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r0}, 0x18) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) lstat(&(0x7f0000000040)='./file0\x00', 0x0) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000500, 0x0, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x1, 0x88100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) r5 = getpid() sendmsg$AUDIT_SET(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x3e9, 0x800, 0x70bd25, 0x25dfdbfb, {0x23, 0x0, 0x2, r5, 0x5, 0x0, 0x5, 0x8, 0x0, 0x8000, 0x8}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40c0000}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r4, 0x0, 0x2}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e690100000001000000b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}}, 0x0) r8 = getpgrp(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000240)={{0x8, 0x3, 0x29e4, 0x1ff, 'syz1\x00', 0x4}, 0x5, 0x10, 0x25, r8, 0x0, 0x95a, 'syz1\x00', 0x0}) 3.391011104s ago: executing program 0 (id=807): r0 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee8, 0x400, 0x1, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x11c, &(0x7f0000000080)=0xffffffff, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, r0, 0x0, 0x0, 0x0, 0x80000}) (async) socket$packet(0x11, 0x3, 0x300) (async) r4 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5100}}) io_uring_enter(r4, 0x75fa, 0xe475, 0x0, 0x0, 0x0) (async) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) (async) listen(r0, 0xfffffff7) 2.516809783s ago: executing program 4 (id=808): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_io_uring_setup(0x178e, &(0x7f0000000180)={0x0, 0x0, 0x13291}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 1.871076613s ago: executing program 4 (id=809): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@deltaction={0xc4, 0x31, 0x8, 0x70bd29, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10010}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x1a0, 0x300, 0x0, 0x300, 0x0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x11}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x1, @empty}, 0x1c) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f00000000c0)={0x9, 0x1, 0x6, 0x3, 0x4, 0xa5}) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x339) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="0200000004000000080000000162000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0000000001"], 0x48) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) 1.822164836s ago: executing program 1 (id=810): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x29, 0x19, &(0x7f0000000040)=0xfffe, 0x4) 1.735646897s ago: executing program 3 (id=811): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000940), 0x0, 0x20, 0x0) socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000000000000000007112150000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x170, 0x150, 0x150, 0x170, 0x0, 0x260, 0x238, 0x206, 0x260, 0x238, 0x7fffffe, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_team\x00', 'xfrm0\x00', {}, {}, 0x6}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'dummy0\x00', {0x0, 0x0, 0x100, 0x0, 0x0, 0xfffffff7, 0x7}}}, @common=@inet=@ecn={{0x28}, {0x11}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) r7 = io_uring_setup(0xf0b, &(0x7f000000c480)={0x0, 0x4e43, 0x400, 0x1ffff, 0x373}) r8 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b, 0x0, r7}) io_uring_register$IORING_REGISTER_FILES(r8, 0x1e, &(0x7f0000000000)=[r7], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) 1.673100913s ago: executing program 2 (id=812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000700)={0x0}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000740)={r0, 0x3}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000780), 0x4100, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000007c0)={'tunl0\x00', @random="7fa749b84cbf"}) recvmmsg(r2, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000008c0)=""/244, 0xf4}, {&(0x7f00000009c0)=""/91, 0x5b}, {&(0x7f0000000a40)=""/49, 0x31}, {&(0x7f0000000a80)=""/109, 0x6d}, {&(0x7f0000000b00)=""/20, 0x14}, {&(0x7f0000000b40)=""/32, 0x20}], 0x6, &(0x7f0000000c00)=""/156, 0x9c}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000cc0)=""/30, 0x1e}], 0x1, &(0x7f0000000e00)=""/52, 0x34}, 0x8}], 0x2, 0x40002002, 0x0) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r5 = socket$key(0xf, 0x3, 0x2) sendmmsg(r5, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000000c0)="02c3", 0x2}, {0x0}], 0x2}}], 0x1, 0x0) getgroups(0x3, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r8 = socket(0x2b, 0x80801, 0x1) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x1d0, 0x290, 0x290, 0x390, 0x0, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0xff, 'netdevsim0\x00', '\x00', {0xff}, {0xff}, 0xb8, 0x0, 0x40}, 0x0, 0x70, 0x428}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="81b035711ec5", 0xfc00, 0xe, [0xa, 0x27, 0x1b, 0x3d, 0x1e, 0xb, 0x2b, 0x0, 0x30, 0x1a, 0x23, 0x6, 0x31, 0x33, 0x36, 0x18], 0x2, 0x4, 0x9}}}, {{@ip={@local, @local, 0xff, 0xffffff00, 'netpci0\x00', 'wg1\x00', {}, {}, 0xc, 0x1, 0xa}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x6}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2b}, @loopback, 0xff000000, 0xff000000, 'wg1\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x11e, 0x6, 0x4b}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xdc}}}, {{@ip={@multicast2, @rand_addr=0x64010101, 0xff000000, 0xffffffff, 'ipvlan1\x00', 'veth0_macvtap\x00', {0xff}, {}, 0x6c, 0x0, 0x41}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x3, 0xc, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x9b, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) read$FUSE(r7, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x4a276012}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="50010000000000000000000000000000060000000000000002000000000000000600000000000000060000000000000005000000ffffffff090000000000000003000000000000000e010000000000000400000000000000000000000000000008000000000000000001000003000000040000000020000005000000", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0300000007000000000000000400000000000000000003000000000008"], 0x0, 0x0, 0x0}) write$P9_RSTATu(r4, &(0x7f0000000340)={0x6d, 0x7d, 0x2, {{0x0, 0x56, 0x9, 0x140, {0x1, 0x4, 0x1}, 0x100000, 0x7, 0x4, 0x8000000000000000, 0x0, '', 0x1, '.', 0x13, '^[}{]\'@(*:$*!\\,^)#$', 0xf, '/dev/cpu/#/msr\x00'}, 0x2, '+/', 0x0, r6, r10}}, 0x6d) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3ff}) r12 = add_key$user(&(0x7f0000000040), &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000080)="bc5b71c2", 0xfffffffffffffd21, 0xfffffffffffffffe) syz_open_dev$MSR(&(0x7f0000000280), 0xfffffffffffffffb, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r12, 0x0, r12}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 1.047367596s ago: executing program 1 (id=813): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)={0x3e4, 0x33, 0x301, 0x270bd26, 0x25dfdbfc, {0x1, 0x0, 0x4000}, [@nested={0x28, 0xbc, 0x0, 0x1, [@typed={0x8, 0x1e, 0x0, 0x0, @fd=r1}, @typed={0x14, 0x109, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x13, 0x0, 0x0, @fd}]}, @nested={0xd1, 0x14c, 0x0, 0x1, [@typed={0x8, 0x94, 0x0, 0x0, @uid=0xee00}, @typed={0x14, 0x11c, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="110f169d3a06c9314f466d2f2536b6fa5ef0fce221b33a5ad5c48a4a7a6ab35827e91f087efec043a1dd0d3e139427acb2733c27f51f1289ad5714049b3db7d24ec62fc01719ccab9626127827a0a0ed866687c4ee83e1d83b3069046c1ba67ab39305079831ec448d007449b8e852087e35d9d644b963a32e86e61eefdf6d472bae55b9ced25b3e3eac9b9a5c1b245f809c28073288a87e1ad231f06186b2507ff5a017e9", @generic, @typed={0xc, 0xe1, 0x0, 0x0, @u64=0x2}]}, @nested={0x2d2, 0x92, 0x0, 0x1, [@typed={0x14, 0xd1, 0x0, 0x0, @ipv6=@loopback}, @generic="5691c7970d30af800e65004de1c7ae7b8bf8", @generic, @typed={0xc, 0x59, 0x0, 0x0, @u64=0x5}, @nested={0x103, 0x60, 0x0, 0x1, [@typed={0xe, 0x124, 0x0, 0x0, @str='syzkaller\x00'}, @generic="686c8f4f8ee6e25904242bef388891bc09ca6717104e7456da9ee685826f21261c8c6b48ed678d1dddcba9d220eb87b3c9b5477501749e0bbaedfb9bc3a1947ded28fb3c4f9730e5bcae9f07e6141cbdd0701e8a5ffd675418a3c5c21ade4eb56cf90e94ad97e37d79eb6e9403d1bc204d7b0b3111577e31260f5b848f93354f70f726e815bee9babcc37337b67f5f8c03366c9b536e29ef62fef1f11380a7bdc70c8b0d91b9a8b9621b515023223263119d65bebdc11329f908ecf1dfc234c037a3c8112f058e5328f84de202f7e82da397ecdaeea840abed3ccaf2db519b0dc86275a43c74da92b6e01f20245872"]}, @nested={0xdd, 0x5c, 0x0, 0x1, [@generic="c6a941691b28a2f8265424aab82855c846ffe850c6d42a064d84aa314523fd9b9e555cc8ef3ecb83877d91178239d4f01824e6f1d2b176c495749dfce69c343f68801666037651fc5e6da825177c3222a5717c8ada8ef72572c231a3c1b99f168e0686c933c3adc562b4eb510921ddfd9f9eb881060ad6ce04c71ec5df9e72a3666bcde52a584e32e1b2be9f69e97b372926d7b29316657b94ee23d92052e81564f1aece45a9ad972cbdc116b9d66450219257bcbfcd399ca358a5a74a9f479aa5525cbf2ba62ea5a6eacfe17ccc87bba5", @nested={0x4, 0x61}, @nested={0x4, 0xd6}]}, @typed={0x8, 0x39, 0x0, 0x0, @uid=r2}, @nested={0x81, 0x20, 0x0, 0x1, [@typed={0x8, 0xaf, 0x0, 0x0, @uid=r3}, @generic="d411ed0501daff5469bd8d46c366c8a704154edae150c3ad59e548aff8d1ab277eb9d3336f8eed95597b5c2eebc6f48971363999283d4eca1f1b91d5bb5119cda3b1cbbd5817f9f26edc7c8197e830345625403ea6076d919abd87a8f7001008770f81124898bd5e55cb129e02", @typed={0x8, 0x23, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @generic="b7b73d5bf541ce2c0023c11cd138fb2b04ad3f2147468f42980d6cf57a7014275b92da30594ea619bbfeb3f7"]}]}, 0x3e4}, 0x1, 0x8000000000000, 0x0, 0x80c0}, 0x8004) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x800) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b703000056946f94850000008300feffbe0900000000000055090100000000009500000000000000bf91000000000000b7020000024c00008500000084000000b70000000058f4ca3582e5cb92000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x2d) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xffffffffffffffb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000fcffffef000000000000000085000000ae0000009500"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r10, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$sock_TIOCOUTQ(r10, 0x5411, 0x0) 0s ago: executing program 4 (id=814): clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) clock_adjtime(0x4100000000000000, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x7, 0x7, 0x3, 0x6}) kernel console output (not intermixed with test programs): 02] pwc: recv_control_msg error -32 req 02 val 2800 [ 242.420489][ T5902] pwc: recv_control_msg error -32 req 04 val 1100 [ 242.432570][ T5945] usb 3-1: device descriptor read/8, error -71 [ 242.731520][ T43] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 242.773565][ T5945] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 242.845547][ T7268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.048797][ T7268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.072930][ T5902] pwc: Registered as video103. [ 243.117323][ T5945] usb 3-1: device descriptor read/8, error -71 [ 243.205067][ T5902] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 243.231308][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 243.291874][ T5902] usb 4-1: USB disconnect, device number 11 [ 243.369666][ T5945] usb usb3-port1: unable to enumerate USB device [ 243.378884][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.391951][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.410480][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 243.429652][ T43] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 243.438866][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.567515][ T7288] kvm: emulating exchange as write [ 243.670467][ T43] usb 5-1: config 0 descriptor?? [ 245.416445][ T7303] fuse: Bad value for 'fd' [ 245.513339][ T43] usbhid 5-1:0.0: can't add hid device: -71 [ 245.519596][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 245.534764][ T43] usb 5-1: USB disconnect, device number 18 [ 247.021663][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 247.313473][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.390'. [ 247.322369][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.390'. [ 247.337666][ T7320] bridge0: entered promiscuous mode [ 247.343083][ T7320] macsec1: entered allmulticast mode [ 247.348385][ T7320] bridge0: entered allmulticast mode [ 248.439462][ T24] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 248.724864][ T24] usb 4-1: device descriptor read/64, error -71 [ 248.920193][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.397'. [ 248.973257][ T24] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 248.990433][ T7343] Illegal XDP return value 4294967294 on prog (id 95) dev N/A, expect packet loss! [ 249.021387][ T5945] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 249.108494][ T30] audit: type=1326 audit(1751114946.174:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7346 comm="syz.2.400" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf4018e929 code=0x0 [ 249.139446][ T24] usb 4-1: device descriptor read/64, error -71 [ 249.179418][ T5945] usb 2-1: Using ep0 maxpacket: 32 [ 249.189927][ T5945] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 249.208940][ T5945] usb 2-1: config 0 has no interface number 0 [ 249.229455][ T5945] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 249.247199][ T5945] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 249.257142][ T24] usb usb4-port1: attempt power cycle [ 249.268031][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.280068][ T980] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 249.288665][ T5945] usb 2-1: Product: syz [ 249.293119][ T5945] usb 2-1: Manufacturer: syz [ 249.298129][ T5945] usb 2-1: SerialNumber: syz [ 249.306133][ T5945] usb 2-1: config 0 descriptor?? [ 249.316605][ T5945] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 249.319777][ T5819] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 249.326763][ T5945] em28xx 2-1:0.132: Video interface 132 found: isoc [ 249.339396][ T30] audit: type=1326 audit(1751114946.404:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7346 comm="syz.2.400" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf4018e929 code=0x0 [ 249.472516][ T980] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 249.481910][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.494060][ T980] usb 1-1: config 0 descriptor?? [ 249.503406][ T980] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 249.619490][ T5901] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 249.629455][ T24] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 249.650293][ T24] usb 4-1: device descriptor read/8, error -71 [ 249.659897][ T5945] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 249.733575][ T5945] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 249.742608][ T5945] em28xx 2-1:0.132: board has no eeprom [ 249.771397][ T5901] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 249.779982][ T5901] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.791930][ T5901] usb 5-1: config 0 has no interface number 0 [ 249.798107][ T5901] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 249.810008][ T5945] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 249.817904][ T5945] em28xx 2-1:0.132: analog set to isoc mode. [ 249.824108][ T5901] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 249.834832][ T5901] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.848764][ T5944] em28xx 2-1:0.132: Registering V4L2 extension [ 249.857838][ T5945] usb 2-1: USB disconnect, device number 16 [ 249.865061][ T5945] em28xx 2-1:0.132: Disconnecting em28xx [ 249.871134][ T5901] usb 5-1: config 0 interface 52 has no altsetting 0 [ 249.889645][ T24] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 249.899537][ T5901] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 249.914024][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 249.923704][ T5901] usb 5-1: SerialNumber: syz [ 249.930256][ T24] usb 4-1: device descriptor read/8, error -71 [ 249.941151][ T5901] usb 5-1: config 0 descriptor?? [ 250.035267][ T5944] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 250.043707][ T24] usb usb4-port1: unable to enumerate USB device [ 250.050228][ T5944] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 250.057469][ T5944] em28xx 2-1:0.132: No AC97 audio processor [ 250.073290][ T5944] usb 2-1: Decoder not found [ 250.078052][ T5944] em28xx 2-1:0.132: failed to create media graph [ 250.084855][ T5944] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 250.095083][ T5944] em28xx 2-1:0.132: Remote control support is not available for this card. [ 250.104764][ T5945] em28xx 2-1:0.132: Closing input extension [ 250.215149][ T7341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.241338][ T7341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.277993][ T5945] em28xx 2-1:0.132: Freeing device [ 250.306922][ T5901] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 250.331352][ T5901] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -5 [ 250.562548][ T5875] usb 5-1: USB disconnect, device number 19 [ 251.113437][ T5944] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 252.219487][ T5944] usb 2-1: Using ep0 maxpacket: 8 [ 252.227296][ T5944] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 252.250460][ T5944] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 252.262345][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.278302][ T5944] usb 2-1: Product: syz [ 252.285538][ T5944] usb 2-1: Manufacturer: syz [ 252.290715][ T5944] usb 2-1: SerialNumber: syz [ 252.372489][ T980] gspca_stv06xx: I2C: Read error writing address: -71 [ 252.575959][ T980] usb 1-1: USB disconnect, device number 14 [ 252.890511][ T5944] usb 2-1: config 0 descriptor?? [ 252.928433][ T5944] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 253.150123][ T7358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.171350][ T7358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.187310][ T7358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.218103][ T7358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.261006][ T7358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.319803][ T7358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.335085][ T7358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.410573][ T7358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.459746][ T5944] gspca_zc3xx: reg_w_i err -110 [ 254.179664][ T5944] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 254.481906][ T5944] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 254.493734][ T5944] usb 2-1: USB disconnect, device number 17 [ 254.850163][ T7404] kernel profiling enabled (shift: 17) [ 254.859472][ T5902] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 255.350095][ T5819] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 255.353793][ T5819] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 255.414393][ T7423] netlink: 36 bytes leftover after parsing attributes in process `syz.1.419'. [ 255.559897][ T5902] usb 1-1: Invalid ep0 maxpacket: 16 [ 255.577803][ T7423] netlink: 36 bytes leftover after parsing attributes in process `syz.1.419'. [ 255.804762][ T5902] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 255.804891][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.826641][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.589718][ T5902] usb 1-1: Invalid ep0 maxpacket: 16 [ 256.596765][ T5902] usb usb1-port1: attempt power cycle [ 256.798582][ T7444] erspan0: entered promiscuous mode [ 256.818619][ T7444] batman_adv: batadv0: Adding interface: macvlan2 [ 256.854840][ T7444] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.896736][ T7444] batman_adv: batadv0: Interface activated: macvlan2 [ 256.936756][ T7448] audit: audit_backlog=65 > audit_backlog_limit=64 [ 256.947019][ T7448] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 256.954899][ T7448] audit: backlog limit exceeded [ 256.980775][ T7448] audit: audit_backlog=65 > audit_backlog_limit=64 [ 256.987798][ T7448] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 257.018569][ T7450] audit: audit_backlog=65 > audit_backlog_limit=64 [ 257.026921][ T7453] audit: audit_backlog=65 > audit_backlog_limit=64 [ 257.038640][ T7453] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 257.046707][ T7448] audit: backlog limit exceeded [ 257.062479][ T7450] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 257.201219][ T5902] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 257.240813][ T5902] usb 1-1: Invalid ep0 maxpacket: 16 [ 258.066182][ T5902] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 258.313622][ T5902] usb 1-1: device not accepting address 18, error -71 [ 258.321531][ T5902] usb usb1-port1: unable to enumerate USB device [ 260.638872][ T7489] netlink: 20 bytes leftover after parsing attributes in process `syz.3.437'. [ 261.677672][ T7497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.440'. [ 262.071850][ T30] kauditd_printk_skb: 2139 callbacks suppressed [ 262.071872][ T30] audit: type=1400 audit(1751114958.844:2170): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7501 comm="syz-executor" name="85" dev="tmpfs" ino=461 [ 262.555524][ T5816] audit: audit_backlog=65 > audit_backlog_limit=64 [ 262.565571][ T5835] audit: audit_backlog=65 > audit_backlog_limit=64 [ 262.573331][ T5816] audit: audit_lost=158 audit_rate_limit=0 audit_backlog_limit=64 [ 262.587977][ T5835] audit: audit_lost=159 audit_rate_limit=0 audit_backlog_limit=64 [ 262.597699][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 262.604701][ C0] audit: audit_lost=160 audit_rate_limit=0 audit_backlog_limit=64 [ 262.612664][ C0] audit: backlog limit exceeded [ 262.620095][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 262.626770][ C0] audit: audit_lost=161 audit_rate_limit=0 audit_backlog_limit=64 [ 266.211115][ T7540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.453'. [ 266.275462][ T5819] Bluetooth: hci1: unexpected event for opcode 0x2006 [ 266.569620][ T977] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 266.750764][ T977] usb 3-1: Using ep0 maxpacket: 8 [ 266.773583][ T977] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.863206][ T977] usb 3-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 266.877426][ T977] usb 3-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 266.887151][ T977] usb 3-1: Product: syz [ 266.898725][ T977] usb 3-1: Manufacturer: syz [ 266.939422][ T5902] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 267.049584][ T977] usb 3-1: SerialNumber: syz [ 267.066427][ T977] usb 3-1: config 0 descriptor?? [ 267.130218][ T30] kauditd_printk_skb: 2142 callbacks suppressed [ 267.130333][ T30] audit: type=1400 audit(1751114964.194:3905): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=7538 comm="syz.2.453" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 267.259532][ T5902] usb 4-1: Using ep0 maxpacket: 32 [ 267.705281][ T977] smsusb:smsusb_probe: board id=2, interface number 0 [ 267.716616][ T7540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.453'. [ 267.717726][ T977] smsusb:smsusb_probe: Device initialized with return code -19 [ 267.854124][ T5821] audit: audit_backlog=65 > audit_backlog_limit=64 [ 267.869901][ T7566] audit: audit_backlog=65 > audit_backlog_limit=64 [ 267.876753][ T30] audit: type=1400 audit(1751114964.194:3906): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=7561 comm="syz.1.459" opid=7561 ocomm="syz.1.459" [ 267.887500][ T7565] audit: audit_backlog=65 > audit_backlog_limit=64 [ 267.898028][ T7566] audit: audit_lost=297 audit_rate_limit=0 audit_backlog_limit=64 [ 267.909741][ T7565] audit: audit_lost=298 audit_rate_limit=0 audit_backlog_limit=64 [ 267.909764][ T7565] audit: backlog limit exceeded [ 267.909786][ T7565] audit: audit_backlog=65 > audit_backlog_limit=64 [ 267.909801][ T7565] audit: audit_lost=299 audit_rate_limit=0 audit_backlog_limit=64 [ 267.959445][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.013166][ T5819] Bluetooth: hci2: unexpected subevent 0x0e length: 30 > 15 [ 268.021868][ T5819] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 268.029401][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.141401][ T977] usb 3-1: USB disconnect, device number 17 [ 268.156210][ T5902] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 268.240838][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.602391][ T5902] usb 4-1: config 0 descriptor?? [ 268.658289][ T5902] hub 4-1:0.0: USB hub found [ 268.940747][ T977] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 269.025355][ T7559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.062139][ T7559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.189429][ T977] usb 5-1: Using ep0 maxpacket: 32 [ 270.199217][ T977] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 270.225180][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.363378][ T977] usb 5-1: config 0 descriptor?? [ 270.694347][ T977] gspca_main: sunplus-2.14.0 probing 041e:400b [ 270.803745][ T7588] netlink: 32 bytes leftover after parsing attributes in process `syz.0.466'. [ 272.029730][ T977] gspca_sunplus: reg_w_riv err -110 [ 272.037321][ T977] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 272.087058][ T5944] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 272.149181][ T5902] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 272.167805][ T30] kauditd_printk_skb: 1332 callbacks suppressed [ 272.167824][ T30] audit: type=1400 audit(1751114969.234:4842): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5835 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 272.176674][ T5902] usbhid 4-1:0.0: can't add hid device: -71 [ 272.279761][ T5944] usb 1-1: device descriptor read/64, error -71 [ 272.347693][ T7596] audit: audit_backlog=65 > audit_backlog_limit=64 [ 272.356211][ T30] audit: type=1400 audit(1751114969.234:4843): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5835 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 272.379678][ T5902] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 272.386990][ T30] audit: type=1400 audit(1751114969.234:4844): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5835 comm="syz-executor" name="88" dev="tmpfs" ino=481 [ 272.387528][ T7596] audit: audit_lost=432 audit_rate_limit=0 audit_backlog_limit=64 [ 272.417250][ T5831] audit: audit_backlog=65 > audit_backlog_limit=64 [ 272.440857][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 272.443453][ T7596] audit: backlog limit exceeded [ 272.447416][ C0] audit: audit_lost=433 audit_rate_limit=0 audit_backlog_limit=64 [ 272.447442][ C0] audit: backlog limit exceeded [ 272.490540][ T5902] usb 4-1: USB disconnect, device number 16 [ 272.589555][ T5944] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 272.749445][ T5944] usb 1-1: device descriptor read/64, error -71 [ 272.870075][ T5944] usb usb1-port1: attempt power cycle [ 273.951155][ T5875] usb 5-1: USB disconnect, device number 20 [ 275.139479][ T5875] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 275.281777][ T5819] Bluetooth: hci1: unexpected subevent 0x0e length: 30 > 15 [ 275.289759][ T5819] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 275.459695][ T5875] usb 4-1: Using ep0 maxpacket: 16 [ 275.840367][ T5875] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 275.879104][ T5875] usb 4-1: config 0 has no interface number 0 [ 275.892657][ T5875] usb 4-1: too many endpoints for config 0 interface 48 altsetting 49: 55, using maximum allowed: 30 [ 276.397655][ T5875] usb 4-1: config 0 interface 48 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 55 [ 276.531437][ T5875] usb 4-1: config 0 interface 48 has no altsetting 0 [ 276.551934][ T5875] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 276.573682][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.826247][ T5875] usb 4-1: config 0 descriptor?? [ 277.154974][ T5875] usb 4-1: string descriptor 0 read error: -71 [ 277.169763][ T30] kauditd_printk_skb: 2061 callbacks suppressed [ 277.169781][ T30] audit: type=1400 audit(1751114974.244:6352): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=5831 comm="syz-executor" name="109" dev="tmpfs" ino=602 [ 277.203651][ T5875] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 277.214773][ T30] audit: type=1400 audit(1751114974.274:6353): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=5831 comm="syz-executor" name="binderfs" dev="tmpfs" ino=606 [ 277.236074][ T5875] gspca_sonixj: reg_w1 err -71 [ 277.242401][ T5875] sonixj 4-1:0.48: probe with driver sonixj failed with error -71 [ 277.254552][ T5875] usb 4-1: USB disconnect, device number 17 [ 277.267997][ T30] audit: type=1400 audit(1751114974.274:6354): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=5831 comm="syz-executor" name="109" dev="tmpfs" ino=602 [ 277.287587][ T30] audit: type=1400 audit(1751114974.274:6355): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5831 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 277.311564][ T30] audit: type=1400 audit(1751114974.274:6356): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5831 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 277.325759][ T5831] audit: audit_backlog=65 > audit_backlog_limit=64 [ 277.332935][ T30] audit: type=1400 audit(1751114974.274:6357): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5831 comm="syz-executor" name="109" dev="tmpfs" ino=602 [ 277.359053][ T30] audit: type=1400 audit(1751114974.274:6358): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5831 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 277.397199][ T30] audit: type=1400 audit(1751114974.284:6359): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30008 daddr=10.128.0.164 dest=59238 netif=eth0 [ 277.420746][ T30] audit: type=1400 audit(1751114974.284:6360): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=7645 comm="syz.2.482" saddr=10.128.0.169 src=30008 daddr=10.128.0.164 dest=59238 netif=eth0 [ 279.669786][ T7662] netlink: 32 bytes leftover after parsing attributes in process `syz.3.486'. [ 279.998507][ T7671] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 280.197765][ T7672] netlink: 'syz.0.489': attribute type 10 has an invalid length. [ 280.235493][ T7672] batman_adv: batadv0: Adding interface: wlan0 [ 280.313192][ T7672] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.440323][ T7672] batman_adv: batadv0: Interface activated: wlan0 [ 280.561205][ T5875] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 280.742693][ T5819] Bluetooth: hci4: unexpected subevent 0x0e length: 30 > 15 [ 280.750857][ T5819] Bluetooth: hci4: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 280.889506][ T5875] usb 4-1: device descriptor read/64, error -71 [ 281.149733][ T5875] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 282.152143][ T5875] usb 4-1: device descriptor read/64, error -71 [ 282.179577][ T30] kauditd_printk_skb: 1715 callbacks suppressed [ 282.179597][ T30] audit: type=1400 audit(1751115235.249:7876): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5821 comm="syz-executor" name="87" dev="tmpfs" ino=476 [ 282.215882][ T977] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 282.236196][ T30] audit: type=1400 audit(1751115235.249:7877): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=7686 comm="syz.0.496" opid=7686 ocomm="syz.0.496" [ 282.365947][ T30] audit: type=1400 audit(1751115235.249:7878): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=7686 comm="syz.0.496" opid=7686 ocomm="syz.0.496" [ 282.385668][ T30] audit: type=1400 audit(1751115235.249:7879): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=5831 comm="syz-executor" opid=7658 ocomm="syz.3.486" [ 282.389677][ T5875] usb usb4-port1: attempt power cycle [ 282.423242][ T7690] audit: audit_backlog=65 > audit_backlog_limit=64 [ 282.435122][ T7690] audit: audit_lost=686 audit_rate_limit=0 audit_backlog_limit=64 [ 282.487363][ T7691] audit: audit_backlog=65 > audit_backlog_limit=64 [ 282.494247][ T7691] audit: audit_lost=687 audit_rate_limit=0 audit_backlog_limit=64 [ 282.502210][ T7691] audit: backlog limit exceeded [ 282.729928][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 283.099508][ T977] usb 5-1: Using ep0 maxpacket: 32 [ 283.109496][ T977] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 283.124773][ T977] usb 5-1: config 0 has no interface number 0 [ 283.148274][ T977] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 283.158841][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.185564][ T977] usb 5-1: Product: syz [ 283.273090][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.497'. [ 283.282342][ T7692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.497'. [ 283.291416][ T7692] netlink: 'syz.1.497': attribute type 14 has an invalid length. [ 283.299418][ T7692] netlink: 'syz.1.497': attribute type 13 has an invalid length. [ 283.343131][ T977] usb 5-1: Manufacturer: syz [ 283.347825][ T977] usb 5-1: SerialNumber: syz [ 283.384078][ T977] usb 5-1: config 0 descriptor?? [ 283.399470][ T977] smsc95xx v2.0.0 [ 283.636971][ T7698] netlink: 76 bytes leftover after parsing attributes in process `syz.2.499'. [ 284.323183][ T977] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 284.334462][ T977] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 285.188630][ T7709] delete_channel: no stack [ 285.557696][ T7719] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 285.565650][ T7719] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 285.617711][ T7722] netlink: 'syz.0.507': attribute type 4 has an invalid length. [ 285.699396][ T5944] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 285.790081][ T7725] netlink: 32 bytes leftover after parsing attributes in process `syz.0.508'. [ 285.874764][ T5944] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 285.896459][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.912009][ T5944] usb 4-1: Product: syz [ 285.916548][ T5944] usb 4-1: Manufacturer: syz [ 285.924911][ T5944] usb 4-1: SerialNumber: syz [ 285.942374][ T5944] usb 4-1: config 0 descriptor?? [ 285.953508][ T5944] ch341 4-1:0.0: ch341-uart converter detected [ 286.071395][ T5875] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 286.154111][ T5944] usb 4-1: failed to receive control message: -121 [ 286.169486][ T5944] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 286.198191][ T5944] usb 4-1: USB disconnect, device number 21 [ 286.207663][ T5944] ch341 4-1:0.0: device disconnected [ 286.219713][ T5875] usb 1-1: device descriptor read/64, error -71 [ 286.459446][ T5875] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 286.807079][ T7735] netlink: 20 bytes leftover after parsing attributes in process `syz.1.509'. [ 287.539778][ T30] kauditd_printk_skb: 2021 callbacks suppressed [ 287.539803][ T30] audit: type=1400 audit(1751115240.239:9673): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=7732 comm="syz.3.510" opid=7732 ocomm="syz.3.510" [ 287.783654][ T30] audit: type=1400 audit(1751115240.299:9674): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=7730 comm="syz.1.509" saddr=10.128.0.169 src=30008 daddr=10.128.0.164 dest=59238 netif=eth0 [ 288.424022][ T5831] audit: audit_backlog=65 > audit_backlog_limit=64 [ 288.439508][ T5835] audit: audit_backlog=65 > audit_backlog_limit=64 [ 288.446484][ T5835] audit: audit_lost=764 audit_rate_limit=0 audit_backlog_limit=64 [ 288.454883][ T5835] audit: backlog limit exceeded [ 288.460241][ T30] audit: type=1400 audit(1751115240.379:9675): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7730 comm="syz.1.509" name="newroot" dev="tmpfs" ino=2 [ 288.485966][ T5831] audit: audit_lost=765 audit_rate_limit=0 audit_backlog_limit=64 [ 288.500130][ T5831] audit: backlog limit exceeded [ 288.516841][ T5831] audit: audit_backlog=65 > audit_backlog_limit=64 [ 288.635763][ T5875] usb 1-1: device descriptor read/64, error -71 [ 288.750448][ T5875] usb usb1-port1: attempt power cycle [ 288.972511][ T977] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71 [ 288.992981][ T977] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 289.069901][ T977] usb 5-1: USB disconnect, device number 21 [ 289.231356][ T7757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.516'. [ 289.311739][ T7757] erspan1: entered promiscuous mode [ 289.341930][ T7757] erspan1: entered allmulticast mode [ 289.668493][ T7772] ======================================================= [ 289.668493][ T7772] WARNING: The mand mount option has been deprecated and [ 289.668493][ T7772] and is ignored by this kernel. Remove the mand [ 289.668493][ T7772] option from the mount to silence this warning. [ 289.668493][ T7772] ======================================================= [ 289.704339][ T7772] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 289.713389][ T7772] overlayfs: missing 'lowerdir' [ 289.784838][ T5875] usb usb1-port1: Cannot enable. Maybe the USB cable is bad? [ 289.970753][ T5875] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 290.009985][ T5875] usb 1-1: Using ep0 maxpacket: 32 [ 290.048394][ T977] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 290.103290][ T5875] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.132198][ T5875] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 290.144871][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.153441][ T5875] usb 1-1: Product: syz [ 290.199662][ T5875] usb 1-1: Manufacturer: syz [ 290.204817][ T5875] usb 1-1: SerialNumber: syz [ 290.229006][ T5875] usb 1-1: config 0 descriptor?? [ 290.246372][ T5875] usb 1-1: bad CDC descriptors [ 290.252145][ T5875] usb 1-1: unsupported MDLM descriptors [ 290.276917][ T977] usb 2-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 290.286147][ T977] usb 2-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 290.334218][ T977] usb 2-1: Product: syz [ 290.369158][ T977] usb 2-1: Manufacturer: syz [ 290.398033][ T977] usb 2-1: SerialNumber: syz [ 290.437667][ T977] usb 2-1: config 0 descriptor?? [ 290.462512][ T5944] usb 1-1: USB disconnect, device number 25 [ 291.460849][ T7783] netlink: 20 bytes leftover after parsing attributes in process `syz.2.523'. [ 291.963428][ T5944] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 292.212408][ T5944] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.249483][ T5944] usb 5-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 292.280906][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.291389][ T7789] netlink: 32 bytes leftover after parsing attributes in process `syz.2.525'. [ 292.310139][ T5944] usb 5-1: config 0 descriptor?? [ 292.340233][ T5944] usb 5-1: unsupported MDLM descriptors [ 292.454986][ T5944] usb 5-1: USB disconnect, device number 22 [ 292.561537][ T30] kauditd_printk_skb: 2099 callbacks suppressed [ 292.561584][ T30] audit: type=1400 audit(1751115245.629:11566): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=7790 comm="syz.0.526" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 292.593483][ T5875] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 292.616630][ T5820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 292.624979][ T7789] audit: audit_backlog=65 > audit_backlog_limit=64 [ 292.632064][ T5902] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 292.639231][ T5820] audit: audit_lost=836 audit_rate_limit=0 audit_backlog_limit=64 [ 292.649390][ T30] audit: type=1400 audit(1751115245.669:11567): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5820 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 292.650050][ T7793] audit: audit_backlog=65 > audit_backlog_limit=64 [ 292.675512][ T7789] audit: audit_lost=837 audit_rate_limit=0 audit_backlog_limit=64 [ 292.679703][ T7791] audit: audit_backlog=65 > audit_backlog_limit=64 [ 292.689508][ T5820] audit: backlog limit exceeded [ 292.695547][ T5820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 292.751692][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.522'. [ 292.775169][ T7794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.522'. [ 292.859208][ T977] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 292.880784][ T5875] usb 3-1: device descriptor read/64, error -71 [ 292.889594][ T977] asix 2-1:0.0: probe with driver asix failed with error -71 [ 292.912242][ T5902] usb 1-1: Using ep0 maxpacket: 32 [ 292.932205][ T5902] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 292.946563][ T977] usb 2-1: USB disconnect, device number 18 [ 292.957138][ T5902] usb 1-1: config 0 has no interface number 0 [ 292.979617][ T5902] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 292.999687][ T5902] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 293.029750][ T5902] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 293.071888][ T5902] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 293.117043][ T5902] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 293.130240][ T5875] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 293.186137][ T5902] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 293.218421][ T5902] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 293.239454][ T5944] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 293.639681][ T5944] usb 4-1: device descriptor read/64, error -71 [ 293.840395][ T5902] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 293.851796][ T5902] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 293.883358][ T5902] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 293.899406][ T5875] usb 3-1: device descriptor read/64, error -71 [ 293.927891][ T7802] netlink: 36 bytes leftover after parsing attributes in process `syz.1.529'. [ 294.039523][ T5944] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 294.146643][ T5875] usb usb3-port1: attempt power cycle [ 294.152188][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.169353][ T5902] usb 1-1: Product: syz [ 294.173600][ T5902] usb 1-1: Manufacturer: syz [ 294.178256][ T5902] usb 1-1: SerialNumber: syz [ 294.207661][ T5902] usb 1-1: config 0 descriptor?? [ 294.222989][ T7791] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 294.244513][ T5902] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 294.374043][ T7806] netlink: 'syz.1.529': attribute type 10 has an invalid length. [ 294.416786][ T7806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.443994][ T7806] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 294.869759][ T5902] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 294.909602][ T5875] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 295.076359][ T5875] usb 3-1: device descriptor read/8, error -71 [ 295.319741][ T5875] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 295.435401][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.531'. [ 295.444426][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.531'. [ 295.499232][ T7815] bridge0: entered promiscuous mode [ 295.505289][ T7815] macsec1: entered allmulticast mode [ 295.510787][ T7815] bridge0: entered allmulticast mode [ 295.809811][ T980] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 295.927173][ T5945] usb 1-1: USB disconnect, device number 26 [ 296.049647][ T980] usb 5-1: device descriptor read/64, error -71 [ 296.110118][ T5875] usb 3-1: device not accepting address 21, error -71 [ 296.127260][ T5875] usb usb3-port1: unable to enumerate USB device [ 296.349577][ T980] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 296.448013][ T7828] tipc: Started in network mode [ 296.457378][ T7828] tipc: Node identity ac14142a, cluster identity 4711 [ 296.466519][ T7828] tipc: Enabled bearer , priority 10 [ 296.509611][ T980] usb 5-1: device descriptor read/64, error -71 [ 296.571106][ T7829] netlink: 20 bytes leftover after parsing attributes in process `syz.2.535'. [ 296.642850][ T980] usb usb5-port1: attempt power cycle [ 297.122890][ T980] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 297.173345][ T980] usb 5-1: device descriptor read/8, error -71 [ 297.539494][ T980] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 297.591612][ T5944] tipc: Node number set to 2886997034 [ 297.597537][ T980] usb 5-1: device descriptor read/8, error -71 [ 297.626665][ T30] kauditd_printk_skb: 2270 callbacks suppressed [ 297.626690][ T30] audit: type=1400 audit(1751115250.659:13046): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=7809 comm="syz.4.531" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 297.653252][ T5827] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 297.738110][ T980] usb usb5-port1: unable to enumerate USB device [ 297.757078][ T30] audit: type=1400 audit(1751115250.659:13047): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=7809 comm="syz.4.531" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 297.801384][ T30] audit: type=1400 audit(1751115250.679:13048): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5821 comm="syz-executor" path="/95/cgroup.cpu" dev="tmpfs" ino=521 [ 297.821969][ T30] audit: type=1400 audit(1751115250.539:13044): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7834 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 297.841593][ T30] audit: type=1400 audit(1751115250.709:13049): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7834 comm="syz-executor" name="106" dev="tmpfs" ino=572 [ 297.860796][ T30] audit: type=1400 audit(1751115250.709:13050): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=7834 comm="syz-executor" opid=7834 ocomm="syz-executor" [ 297.879710][ T30] audit: type=1400 audit(1751115250.709:13051): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7834 comm="syz-executor" name="106" dev="tmpfs" ino=572 [ 297.898854][ T30] audit: type=1400 audit(1751115250.709:13052): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7834 comm="syz-executor" name="106" dev="tmpfs" ino=572 [ 297.926684][ T30] audit: type=1400 audit(1751115250.709:13053): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=7834 comm="syz-executor" name="106" dev="tmpfs" ino=572 [ 297.946381][ T30] audit: type=1400 audit(1751115250.709:13054): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7834 comm="syz-executor" name="106" dev="tmpfs" ino=572 [ 299.628249][ T7852] netlink: 32 bytes leftover after parsing attributes in process `syz.0.543'. [ 300.639431][ T5935] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 300.799490][ T5935] usb 1-1: device descriptor read/64, error -71 [ 301.099419][ T5935] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 301.291153][ T5935] usb 1-1: device descriptor read/64, error -71 [ 301.410419][ T5935] usb usb1-port1: attempt power cycle [ 302.465409][ T5935] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 302.500469][ T5935] usb 1-1: device descriptor read/8, error -71 [ 302.630018][ T30] kauditd_printk_skb: 1448 callbacks suppressed [ 302.630039][ T30] audit: type=1400 audit(1751115255.699:14191): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7868 comm="modprobe" name="/" dev="sda1" ino=2 [ 302.658943][ T5816] audit: audit_backlog=65 > audit_backlog_limit=64 [ 302.659022][ T7868] audit: audit_backlog=65 > audit_backlog_limit=64 [ 302.666904][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 302.679037][ C0] audit: audit_lost=1207 audit_rate_limit=0 audit_backlog_limit=64 [ 302.687328][ C0] audit: backlog limit exceeded [ 302.693304][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 302.699988][ C0] audit: audit_lost=1208 audit_rate_limit=0 audit_backlog_limit=64 [ 302.701234][ T7868] audit: audit_lost=1209 audit_rate_limit=0 audit_backlog_limit=64 [ 302.707975][ C0] audit: backlog limit exceeded [ 304.154826][ T7883] xt_hashlimit: max too large, truncated to 1048576 [ 304.191433][ T7883] xt_hashlimit: overflow, try lower: 0/0 [ 304.740736][ T5945] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 305.833007][ T5945] usb 1-1: Using ep0 maxpacket: 32 [ 305.980208][ T5945] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 306.118757][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.144609][ T5945] usb 1-1: Product: syz [ 306.156421][ T5945] usb 1-1: Manufacturer: syz [ 306.167197][ T5945] usb 1-1: SerialNumber: syz [ 306.185275][ T5945] usb 1-1: config 0 descriptor?? [ 306.215333][ T7907] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.561'. [ 306.220825][ T5945] usb 1-1: selecting invalid altsetting 3 [ 306.242759][ T7907] netlink: 36 bytes leftover after parsing attributes in process `syz.4.561'. [ 306.248070][ T5945] comedi comedi0: could not set alternate setting 3 in high speed [ 306.265557][ T5945] usbdux 1-1:0.0: driver 'usbdux' failed to auto-configure device. [ 306.277970][ T5945] usbdux 1-1:0.0: probe with driver usbdux failed with error -22 [ 307.711422][ T30] kauditd_printk_skb: 2297 callbacks suppressed [ 307.711466][ T30] audit: type=1400 audit(1751115260.769:16159): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7913 comm="syz.3.563" name="127" dev="tmpfs" ino=698 [ 307.866802][ T5820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 307.935992][ T5820] audit: audit_lost=1320 audit_rate_limit=0 audit_backlog_limit=64 [ 307.951708][ T5816] audit: audit_backlog=66 > audit_backlog_limit=64 [ 307.959924][ T30] audit: type=1400 audit(1751115260.769:16160): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=7913 comm="syz.3.563" name="127" dev="tmpfs" ino=698 [ 308.020004][ T5820] audit: backlog limit exceeded [ 308.061047][ T5820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 308.080800][ T5816] audit: audit_lost=1321 audit_rate_limit=0 audit_backlog_limit=64 [ 308.130604][ T7923] audit: audit_backlog=65 > audit_backlog_limit=64 [ 308.146997][ T30] audit: type=1400 audit(1751115260.769:16161): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=7913 comm="syz.3.563" path="/127" dev="tmpfs" ino=698 [ 308.262945][ T5945] usb 1-1: USB disconnect, device number 31 [ 308.354936][ T5827] Bluetooth: hci1: unexpected event for opcode 0x080d [ 308.389543][ T5935] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 309.064188][ T7937] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 309.099510][ T5935] usb 3-1: Using ep0 maxpacket: 32 [ 309.203048][ T5935] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 309.391867][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.459014][ T5935] usb 3-1: config 0 descriptor?? [ 309.550620][ T5935] gspca_main: sunplus-2.14.0 probing 041e:400b [ 309.850650][ T7923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.905727][ T7923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.865215][ T5935] gspca_sunplus: reg_w_riv err -71 [ 310.880187][ T5935] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 310.900642][ T5935] usb 3-1: USB disconnect, device number 22 [ 310.957990][ T7957] FAULT_INJECTION: forcing a failure. [ 310.957990][ T7957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.972801][ T7957] CPU: 0 UID: 0 PID: 7957 Comm: syz.3.576 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 310.972832][ T7957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 310.972860][ T7957] Call Trace: [ 310.972869][ T7957] [ 310.972881][ T7957] dump_stack_lvl+0x189/0x250 [ 310.972921][ T7957] ? __pfx____ratelimit+0x10/0x10 [ 310.972953][ T7957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.972985][ T7957] ? __pfx__printk+0x10/0x10 [ 310.973008][ T7957] ? __might_fault+0xb0/0x130 [ 310.973047][ T7957] should_fail_ex+0x414/0x560 [ 310.973078][ T7957] _copy_from_user+0x2d/0xb0 [ 310.973112][ T7957] __sys_bpf+0x1ed/0x860 [ 310.973143][ T7957] ? __pfx___sys_bpf+0x10/0x10 [ 310.973184][ T7957] ? ksys_write+0x22a/0x250 [ 310.973213][ T7957] ? __pfx_ksys_write+0x10/0x10 [ 310.973246][ T7957] __x64_sys_bpf+0x7c/0x90 [ 310.973271][ T7957] do_syscall_64+0xfa/0x3b0 [ 310.973302][ T7957] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.973332][ T7957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.973354][ T7957] ? clear_bhb_loop+0x60/0xb0 [ 310.973381][ T7957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.973402][ T7957] RIP: 0033:0x7fe1b898e929 [ 310.973422][ T7957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.973442][ T7957] RSP: 002b:00007fe1b973b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 310.973465][ T7957] RAX: ffffffffffffffda RBX: 00007fe1b8bb5fa0 RCX: 00007fe1b898e929 [ 310.973481][ T7957] RDX: 0000000000000048 RSI: 0000200000001000 RDI: e4ffffff00000000 [ 310.973497][ T7957] RBP: 00007fe1b973b090 R08: 0000000000000000 R09: 0000000000000000 [ 310.973512][ T7957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.973526][ T7957] R13: 0000000000000001 R14: 00007fe1b8bb5fa0 R15: 00007ffc408c8ca8 [ 310.973560][ T7957] [ 311.249123][ T7962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.579'. [ 311.361021][ T7966] netlink: 32 bytes leftover after parsing attributes in process `syz.0.580'. [ 311.380194][ T5875] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 311.509498][ T5882] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 311.519383][ T5935] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 311.543673][ T7956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.552589][ T7956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.564031][ T5875] usb 5-1: unable to get BOS descriptor or descriptor too short [ 311.574899][ T5875] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 311.582780][ T5875] usb 5-1: can't read configurations, error -71 [ 311.639445][ T977] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 311.669687][ T5882] usb 4-1: Using ep0 maxpacket: 8 [ 311.685614][ T5935] usb 2-1: config index 0 descriptor too short (expected 63186, got 210) [ 311.688263][ T5882] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.694431][ T5935] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 311.713453][ T5935] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.715653][ T5882] usb 4-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 311.740532][ T5882] usb 4-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 311.753876][ T5882] usb 4-1: Product: syz [ 311.758119][ T5882] usb 4-1: Manufacturer: syz [ 311.765883][ T5882] usb 4-1: SerialNumber: syz [ 311.777685][ T5882] usb 4-1: config 0 descriptor?? [ 311.801034][ T5882] smsusb:smsusb_probe: board id=2, interface number 0 [ 311.808272][ T5882] smsusb:smsusb_probe: Device initialized with return code -19 [ 311.934166][ T5935] usb 2-1: config 0 has no interface number 0 [ 311.940410][ T5935] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 311.951733][ T5935] usb 2-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 311.965060][ T5935] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 311.974206][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.021758][ T7962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.579'. [ 312.022264][ T977] usb 1-1: device descriptor read/64, error -71 [ 312.039097][ T5882] usb 4-1: USB disconnect, device number 24 [ 312.109722][ T5935] usb 2-1: config 0 descriptor?? [ 312.150215][ T5935] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 312.408095][ T5827] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 312.416993][ T5827] Bluetooth: hci1: Injecting HCI hardware error event [ 312.425813][ T5819] Bluetooth: hci1: hardware error 0x00 [ 312.461161][ T7983] random: crng reseeded on system resumption [ 312.553079][ T7987] FAULT_INJECTION: forcing a failure. [ 312.553079][ T7987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.612761][ T7990] xt_CT: You must specify a L4 protocol and not use inversions on it [ 312.627612][ T7987] CPU: 1 UID: 0 PID: 7987 Comm: syz.1.577 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 312.627649][ T7987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.627663][ T7987] Call Trace: [ 312.627672][ T7987] [ 312.627681][ T7987] dump_stack_lvl+0x189/0x250 [ 312.627719][ T7987] ? __pfx____ratelimit+0x10/0x10 [ 312.627749][ T7987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.627780][ T7987] ? __pfx__printk+0x10/0x10 [ 312.627801][ T7987] ? __might_fault+0xb0/0x130 [ 312.627840][ T7987] should_fail_ex+0x414/0x560 [ 312.627871][ T7987] strncpy_from_user+0x36/0x290 [ 312.627899][ T7987] getname_flags+0xf3/0x540 [ 312.627935][ T7987] __x64_sys_mkdir+0x5d/0x80 [ 312.627960][ T7987] do_syscall_64+0xfa/0x3b0 [ 312.627989][ T7987] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.628020][ T7987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.628041][ T7987] ? clear_bhb_loop+0x60/0xb0 [ 312.628068][ T7987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.628088][ T7987] RIP: 0033:0x7f58ea38e929 [ 312.628107][ T7987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.628126][ T7987] RSP: 002b:00007f58eb243038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 312.628149][ T7987] RAX: ffffffffffffffda RBX: 00007f58ea5b6080 RCX: 00007f58ea38e929 [ 312.628166][ T7987] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 312.628179][ T7987] RBP: 00007f58eb243090 R08: 0000000000000000 R09: 0000000000000000 [ 312.628193][ T7987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.628206][ T7987] R13: 0000000000000000 R14: 00007f58ea5b6080 R15: 00007ffd78543e48 [ 312.628239][ T7987] [ 312.651224][ T977] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 312.734461][ T30] kauditd_printk_skb: 2786 callbacks suppressed [ 312.734484][ T30] audit: type=1326 audit(1751115265.799:18679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7989 comm="syz.2.585" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf4018e929 code=0x0 [ 312.846257][ T30] audit: type=1400 audit(1751115265.829:18680): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=49 comm="kworker/u8:3" saddr=10.128.0.169 src=30008 daddr=10.128.0.164 dest=59238 netif=eth0 [ 312.863964][ T5831] audit: audit_backlog=65 > audit_backlog_limit=64 [ 312.870961][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 312.876573][ T5831] audit: audit_lost=1412 audit_rate_limit=0 audit_backlog_limit=64 [ 312.882696][ C0] audit: audit_lost=1413 audit_rate_limit=0 audit_backlog_limit=64 [ 312.882718][ C0] audit: backlog limit exceeded [ 312.883141][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 312.890875][ T5831] audit: backlog limit exceeded [ 312.898977][ C0] audit: audit_lost=1414 audit_rate_limit=0 audit_backlog_limit=64 [ 312.989938][ T977] usb 1-1: device descriptor read/64, error -71 [ 313.228085][ T977] usb usb1-port1: attempt power cycle [ 313.239725][ T6414] usb 2-1: Failed to submit usb control message: -110 [ 313.247164][ T6414] usb 2-1: unable to send the bmi data to the device: -110 [ 313.255098][ T6414] usb 2-1: unable to get target info from device [ 313.262321][ T6414] usb 2-1: could not get target info (-110) [ 313.268585][ T6414] usb 2-1: could not probe fw (-110) [ 314.158723][ T8002] netlink: 32 bytes leftover after parsing attributes in process `syz.2.589'. [ 314.213891][ T5875] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 314.299586][ T5882] usb 2-1: USB disconnect, device number 19 [ 314.370320][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 314.381857][ T5875] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 314.396334][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 314.415388][ T5875] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 314.425043][ T977] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 314.433276][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.456723][ T5875] usb 5-1: Product: syz [ 314.469514][ T5875] usb 5-1: Manufacturer: syz [ 314.474347][ T5875] usb 5-1: SerialNumber: syz [ 314.621211][ T5819] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 314.636190][ T5875] usb 5-1: config 0 descriptor?? [ 314.650679][ T5875] usb 5-1: no audio or video endpoints found [ 314.659468][ T977] usb 1-1: device not accepting address 34, error -71 [ 315.446220][ T5935] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 315.478186][ T5902] usb 5-1: USB disconnect, device number 29 [ 315.722118][ T5935] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 315.732337][ T5935] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 315.742911][ T5935] usb 4-1: config 8 has an invalid descriptor of length 255, skipping remainder of the config [ 315.753572][ T5935] usb 4-1: config 8 has no interface number 0 [ 315.760875][ T5935] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 315.774444][ T5935] usb 4-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.807044][ T5935] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 315.824229][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.842333][ T5935] usb 4-1: Product: syz [ 315.851783][ T5935] usb 4-1: Manufacturer: syz [ 315.862745][ T5935] usb 4-1: SerialNumber: syz [ 316.115276][ T5935] usb 4-1: USB disconnect, device number 25 [ 316.659368][ T5935] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 316.813121][ T5935] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 316.836268][ T5935] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 316.870847][ T5935] usb 5-1: config 0 interface 0 has no altsetting 0 [ 316.891801][ T5935] usb 5-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 316.913818][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.940516][ T5935] usb 5-1: config 0 descriptor?? [ 316.958544][ T8029] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 317.047285][ T8038] netlink: 32 bytes leftover after parsing attributes in process `syz.2.602'. [ 317.311617][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.319985][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.572547][ T5935] holtek_mouse 0003:04D9:A067.0004: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.4-1/input0 [ 317.772478][ T8025] tmpfs: Bad value for 'mpol' [ 317.804442][ T5935] usb 5-1: USB disconnect, device number 30 [ 317.823343][ T30] kauditd_printk_skb: 2069 callbacks suppressed [ 317.823423][ T30] audit: type=1400 audit(1751115270.829:20542): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8023 comm="syz.4.597" name="119" dev="tmpfs" ino=641 [ 318.038101][ T30] audit: type=1400 audit(1751115270.829:20543): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8023 comm="syz.4.597" name="119" dev="tmpfs" ino=641 [ 318.125984][ T30] audit: type=1400 audit(1751115270.839:20544): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=8023 comm="syz.4.597" name="119" dev="tmpfs" ino=641 [ 318.155866][ T30] audit: type=1400 audit(1751115270.839:20545): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8023 comm="syz.4.597" name="119" dev="tmpfs" ino=641 [ 318.186667][ T30] audit: type=1400 audit(1751115270.839:20546): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8023 comm="syz.4.597" name="119" dev="tmpfs" ino=641 [ 318.231572][ T30] audit: type=1400 audit(1751115271.059:20547): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 318.261314][ T30] audit: type=1400 audit(1751115271.059:20548): lsm=SMACK fn=smack_inode_setattr action=granted subject="_" object="_" requested=w pid=26 comm="kdevtmpfs" name="hidraw0" dev="devtmpfs" ino=3124 [ 318.482027][ T30] audit: type=1400 audit(1751115271.059:20549): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=26 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 318.500768][ T30] audit: type=1400 audit(1751115271.059:20550): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=26 comm="kdevtmpfs" name="hidraw0" dev="devtmpfs" ino=3124 [ 318.521129][ T30] audit: type=1400 audit(1751115271.059:20551): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=26 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 318.619404][ T5882] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 318.741354][ T8047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.603'. [ 318.790235][ T5882] usb 3-1: device descriptor read/64, error -71 [ 319.049611][ T5882] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 319.079629][ T5944] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 319.199527][ T5882] usb 3-1: device descriptor read/64, error -71 [ 319.303646][ T5944] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 319.317514][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.360392][ T5882] usb usb3-port1: attempt power cycle [ 319.375070][ T5944] usb 1-1: config 0 descriptor?? [ 319.392065][ T5944] cp210x 1-1:0.0: cp210x converter detected [ 319.746673][ T5882] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 319.966007][ T5882] usb 3-1: device descriptor read/8, error -71 [ 321.100248][ T5944] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 321.126273][ T5944] cp210x 1-1:0.0: querying part number failed [ 321.179673][ T5944] usb 1-1: cp210x converter now attached to ttyUSB0 [ 321.213902][ T5944] usb 1-1: USB disconnect, device number 36 [ 321.236457][ T5944] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 321.275203][ T5944] cp210x 1-1:0.0: device disconnected [ 322.829943][ T30] kauditd_printk_skb: 1944 callbacks suppressed [ 322.829965][ T30] audit: type=1400 audit(1751115275.889:22400): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=5816 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 322.966778][ T30] audit: type=1400 audit(1751115275.889:22401): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5816 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 323.006435][ T5820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 323.045933][ T5820] audit: audit_lost=1516 audit_rate_limit=0 audit_backlog_limit=64 [ 323.056661][ T30] audit: type=1400 audit(1751115275.889:22402): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5816 comm="syz-executor" name="/" dev="devtmpfs" ino=1 [ 323.090217][ T5820] audit: backlog limit exceeded [ 323.103501][ T5820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 323.125350][ T30] audit: type=1400 audit(1751115275.889:22403): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=rw pid=5816 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 [ 323.145510][ T5882] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 323.159422][ T5820] audit: audit_lost=1517 audit_rate_limit=0 audit_backlog_limit=64 [ 323.183692][ T8098] audit: audit_backlog=65 > audit_backlog_limit=64 [ 323.319495][ T5882] usb 2-1: device descriptor read/64, error -71 [ 323.569755][ T5882] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 323.595176][ T8108] netlink: 32 bytes leftover after parsing attributes in process `syz.0.622'. [ 324.399898][ T5882] usb 2-1: device descriptor read/64, error -71 [ 324.449397][ T5935] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 324.599492][ T5935] usb 1-1: device descriptor read/64, error -71 [ 324.695026][ T5882] usb usb2-port1: attempt power cycle [ 325.518323][ T5882] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 325.559452][ T5935] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 325.654618][ T5882] usb 2-1: device descriptor read/8, error -71 [ 325.739380][ T5935] usb 1-1: device descriptor read/64, error -71 [ 325.874938][ T5935] usb usb1-port1: attempt power cycle [ 326.359436][ T5935] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 328.061398][ T5935] usb 1-1: device descriptor read/8, error -71 [ 328.105542][ T30] kauditd_printk_skb: 1957 callbacks suppressed [ 328.105565][ T30] audit: type=1400 audit(1751115281.159:23659): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=8124 comm="syz.3.627" saddr=10.128.0.169 src=30008 daddr=10.128.0.164 dest=59238 netif=eth0 [ 328.278867][ T5816] audit: audit_backlog=65 > audit_backlog_limit=64 [ 328.285724][ T5835] audit: audit_backlog=66 > audit_backlog_limit=64 [ 328.299518][ T30] audit: type=1400 audit(1751115281.159:23660): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5835 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.0.164 dest=59238 netif=eth0 [ 328.300010][ T5820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 328.323399][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 328.335657][ C0] audit: audit_lost=1752 audit_rate_limit=0 audit_backlog_limit=64 [ 328.341861][ T5835] audit: audit_lost=1753 audit_rate_limit=0 audit_backlog_limit=64 [ 328.343617][ C0] audit: backlog limit exceeded [ 328.356139][ T5816] audit: audit_lost=1754 audit_rate_limit=0 audit_backlog_limit=64 [ 328.800410][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.637'. [ 328.868525][ T8153] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.877552][ T8153] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.695740][ T5935] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 329.995961][ T5935] usb 1-1: Using ep0 maxpacket: 8 [ 330.013796][ T5935] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 330.029805][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.030088][ T43] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 330.068771][ T5935] usb 1-1: Product: syz [ 330.659364][ T5935] usb 1-1: Manufacturer: syz [ 330.670739][ T5935] usb 1-1: SerialNumber: syz [ 330.725059][ T5935] usb 1-1: config 0 descriptor?? [ 330.964765][ T43] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 331.001769][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.054593][ T43] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 331.084861][ T43] usb 3-1: config 1 has no interface number 1 [ 331.109502][ T43] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 331.150927][ T5935] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 331.155412][ T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 331.187109][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.207411][ T43] usb 3-1: Product: syz [ 331.212842][ T43] usb 3-1: Manufacturer: syz [ 331.217499][ T43] usb 3-1: SerialNumber: syz [ 331.938335][ T43] usb 3-1: can't set config #1, error -71 [ 331.947985][ T43] usb 3-1: USB disconnect, device number 27 [ 331.982961][ T8172] xt_hashlimit: max too large, truncated to 1048576 [ 332.011793][ T8172] xt_hashlimit: overflow, try lower: 0/0 [ 332.032518][ T5935] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 332.073105][ T5935] usb 1-1: USB disconnect, device number 40 [ 332.231679][ T980] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 332.389773][ T980] usb 2-1: device descriptor read/64, error -71 [ 332.815628][ T980] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 332.819421][ T977] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 333.610288][ T30] kauditd_printk_skb: 1862 callbacks suppressed [ 333.610311][ T30] audit: type=1400 audit(1751115286.059:25243): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=8171 comm="syz.3.640" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 333.649454][ T977] usb 4-1: Using ep0 maxpacket: 32 [ 333.823982][ T977] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 333.840994][ T5820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 333.900627][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.916586][ T5820] audit: audit_lost=1848 audit_rate_limit=0 audit_backlog_limit=64 [ 333.953076][ T30] audit: type=1400 audit(1751115286.059:25244): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=8171 comm="syz.3.640" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 333.988845][ T977] usb 4-1: Product: syz [ 333.996323][ T5820] audit: backlog limit exceeded [ 334.017232][ T977] usb 4-1: Manufacturer: syz [ 334.022135][ T5820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 334.034748][ T5816] audit: audit_backlog=65 > audit_backlog_limit=64 [ 334.042360][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 334.048972][ C0] audit: audit_lost=1849 audit_rate_limit=0 audit_backlog_limit=64 [ 334.049462][ T980] usb 2-1: device descriptor read/64, error -71 [ 334.057077][ C0] audit: backlog limit exceeded [ 334.081870][ T977] usb 4-1: SerialNumber: syz [ 334.184844][ T977] usb 4-1: config 0 descriptor?? [ 334.244123][ T977] usb 4-1: selecting invalid altsetting 3 [ 334.269443][ T977] comedi comedi0: could not set alternate setting 3 in high speed [ 334.306393][ T977] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 334.336602][ T977] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 334.581776][ T980] usb usb2-port1: attempt power cycle [ 334.859783][ T977] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 335.129572][ T977] usb 3-1: Using ep0 maxpacket: 32 [ 335.333173][ T977] usb 3-1: config 0 interface 0 has no altsetting 0 [ 335.389519][ T977] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 335.432826][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.449247][ T43] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 335.489377][ T977] usb 3-1: Product: syz [ 335.500873][ T977] usb 3-1: Manufacturer: syz [ 335.519377][ T977] usb 3-1: SerialNumber: syz [ 335.537182][ T977] usb 3-1: config 0 descriptor?? [ 335.635085][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.648352][ T43] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 335.664328][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.677593][ T43] usb 5-1: config 0 descriptor?? [ 335.698703][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 335.872818][ T5944] usb 4-1: USB disconnect, device number 26 [ 336.159171][ T43] pwc: recv_control_msg error -32 req 02 val 2b00 [ 336.223488][ T8191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.360167][ T8191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.558489][ T43] pwc: recv_control_msg error -32 req 02 val 2700 [ 336.599192][ T43] pwc: recv_control_msg error -32 req 02 val 2c00 [ 336.683304][ T977] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 336.694376][ T977] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 336.709004][ T977] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 336.722124][ T977] usb 3-1: USB disconnect, device number 28 [ 336.809989][ T8212] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 336.818141][ T8212] macsec2: entered promiscuous mode [ 336.842487][ T8212] macsec2: entered allmulticast mode [ 336.847900][ T8212] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 337.026141][ T43] pwc: recv_control_msg error -32 req 04 val 1400 [ 337.056577][ T43] pwc: recv_control_msg error -32 req 02 val 2000 [ 337.076038][ T43] pwc: recv_control_msg error -32 req 02 val 2100 [ 337.139519][ T5944] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 337.299581][ T5944] usb 2-1: Using ep0 maxpacket: 16 [ 337.309479][ T5902] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 337.311037][ T43] pwc: recv_control_msg error -71 req 02 val 2500 [ 337.332839][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.362033][ T43] pwc: recv_control_msg error -71 req 02 val 2400 [ 337.373773][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.373975][ T43] pwc: recv_control_msg error -71 req 02 val 2600 [ 337.397531][ T5944] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 337.418119][ T43] pwc: recv_control_msg error -71 req 02 val 2900 [ 337.427378][ T43] pwc: recv_control_msg error -71 req 02 val 2800 [ 337.442245][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 337.451506][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 337.465986][ T43] pwc: Registered as video103. [ 337.471157][ T5944] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 337.477045][ T5902] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 337.483177][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12 [ 337.500264][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.527028][ T5944] usb 2-1: config 0 descriptor?? [ 337.529688][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.549723][ T43] usb 5-1: USB disconnect, device number 31 [ 337.576884][ T5902] usb 4-1: config 0 descriptor?? [ 337.604317][ T5902] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 337.885628][ T5902] gspca_cpia1: usb_control_msg 03, error -32 [ 338.682813][ T30] kauditd_printk_skb: 2017 callbacks suppressed [ 338.682886][ T30] audit: type=1400 audit(1751115291.749:26796): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5820 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 338.785347][ T5820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 338.804877][ T5820] audit: audit_lost=2006 audit_rate_limit=0 audit_backlog_limit=64 [ 338.819075][ T30] audit: type=1400 audit(1751115291.779:26797): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5820 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 338.855291][ T5820] audit: backlog limit exceeded [ 338.930654][ T26] audit: audit_backlog=65 > audit_backlog_limit=64 [ 338.930823][ T5820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 338.939422][ T5902] gspca_cpia1: usb_control_msg 03, error -110 [ 338.969349][ T26] audit: audit_lost=2007 audit_rate_limit=0 audit_backlog_limit=64 [ 338.977631][ T30] audit: type=1400 audit(1751115291.779:26798): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30008 daddr=10.128.0.164 dest=59238 netif=eth0 [ 339.024078][ T5902] gspca_cpia1: usb_control_msg 01, error -32 [ 339.033016][ T26] audit: backlog limit exceeded [ 339.067846][ T5902] gspca_cpia1: usb_control_msg 01, error -71 [ 339.129592][ T5902] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 339.170213][ T5902] usb 4-1: USB disconnect, device number 27 [ 339.187764][ T5944] usbhid 2-1:0.0: can't add hid device: -71 [ 339.194401][ T5944] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 339.217665][ T5944] usb 2-1: USB disconnect, device number 27 [ 340.267320][ T43] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 340.457748][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 340.683688][ T43] usb 3-1: config 0 has no interfaces? [ 340.693957][ T43] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 340.703254][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.711373][ T43] usb 3-1: Product: syz [ 340.715590][ T43] usb 3-1: Manufacturer: syz [ 340.723324][ T43] usb 3-1: SerialNumber: syz [ 340.737043][ T43] usb 3-1: config 0 descriptor?? [ 341.462051][ T8242] netlink: 'syz.2.661': attribute type 29 has an invalid length. [ 341.511575][ T8242] netlink: 'syz.2.661': attribute type 29 has an invalid length. [ 341.534343][ T8242] netlink: 500 bytes leftover after parsing attributes in process `syz.2.661'. [ 341.651488][ T10] usb 3-1: USB disconnect, device number 29 [ 341.989860][ T5902] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 342.200062][ T5902] usb 5-1: device descriptor read/64, error -71 [ 342.450311][ T5902] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 342.619524][ T5902] usb 5-1: device descriptor read/64, error -71 [ 342.750748][ T5902] usb usb5-port1: attempt power cycle [ 342.869575][ T43] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 343.659716][ T5902] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 343.692535][ T30] kauditd_printk_skb: 3712 callbacks suppressed [ 343.692559][ T30] audit: type=1400 audit(1751115296.759:28913): lsm=SMACK fn=smack_uring_cmd action=granted subject="_" object="*" requested=r pid=8271 comm="syz.3.669" path="socket:[17187]" dev="sockfs" ino=17187 [ 343.735583][ T8280] binder: 8279:8280 ioctl c0306201 0 returned -14 [ 343.749943][ T5902] usb 5-1: device descriptor read/8, error -71 [ 343.766398][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.777643][ T43] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 343.785311][ T5816] audit: audit_backlog=65 > audit_backlog_limit=64 [ 343.790381][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.795969][ T8280] audit: audit_backlog=65 > audit_backlog_limit=64 [ 343.808185][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 343.808207][ C0] audit: audit_lost=2541 audit_rate_limit=0 audit_backlog_limit=64 [ 343.808224][ C0] audit: backlog limit exceeded [ 343.808226][ T30] audit: type=1400 audit(1751115296.799:28914): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8279 comm="syz.1.672" name="122" dev="tmpfs" ino=663 [ 343.808272][ T30] audit: type=1400 audit(1751115296.799:28915): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8279 comm="syz.1.672" name="122" dev="tmpfs" ino=663 [ 343.808571][ T30] audit: type=1400 audit(1751115296.799:28916): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8279 comm="syz.1.672" name="newroot" dev="tmpfs" ino=2 [ 343.836508][ T5816] audit: audit_lost=2542 audit_rate_limit=0 audit_backlog_limit=64 [ 343.849851][ T43] usb 3-1: config 0 descriptor?? [ 344.057904][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 344.080316][ T5902] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 345.050742][ T5902] usb 5-1: device descriptor read/8, error -71 [ 345.621316][ T5902] usb usb5-port1: unable to enumerate USB device [ 346.722621][ T43] pwc: send_video_command error -71 [ 346.762388][ T43] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 346.802888][ T43] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 347.033417][ T43] usb 3-1: USB disconnect, device number 30 [ 348.699627][ T30] kauditd_printk_skb: 1502 callbacks suppressed [ 348.699648][ T30] audit: type=1400 audit(1751115301.769:30104): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5821 comm="syz-executor" name="124" dev="tmpfs" ino=675 [ 348.746339][ T30] audit: type=1400 audit(1751115301.769:30105): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=5821 comm="syz-executor" name="124" dev="tmpfs" ino=675 [ 348.792481][ T5835] audit: audit_backlog=65 > audit_backlog_limit=64 [ 348.799064][ T5835] audit: audit_lost=2648 audit_rate_limit=0 audit_backlog_limit=64 [ 348.812944][ T8315] audit: audit_backlog=65 > audit_backlog_limit=64 [ 348.813014][ T8318] audit: audit_backlog=65 > audit_backlog_limit=64 [ 348.824423][ T8315] audit: audit_lost=2649 audit_rate_limit=0 audit_backlog_limit=64 [ 348.835902][ T5835] audit: backlog limit exceeded [ 348.839442][ T8318] audit: audit_lost=2650 audit_rate_limit=0 audit_backlog_limit=64 [ 348.845929][ T30] audit: type=1400 audit(1751115301.769:30106): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=5821 comm="syz-executor" name="cgroup.cpu" dev="tmpfs" ino=677 [ 348.868273][ T5902] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 348.939640][ T8322] netlink: 'syz.2.684': attribute type 5 has an invalid length. [ 348.949580][ T5935] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 348.966294][ T8323] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.685'. [ 349.039375][ T5902] usb 4-1: Using ep0 maxpacket: 32 [ 349.052001][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.089378][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.120730][ T5902] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 349.130084][ T5935] usb 1-1: Using ep0 maxpacket: 16 [ 349.168173][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.183907][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.193079][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.209775][ T5935] usb 1-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 349.219191][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.241830][ T5902] usb 4-1: config 0 descriptor?? [ 349.256656][ T5902] hub 4-1:0.0: USB hub found [ 349.267449][ T5935] usb 1-1: config 0 descriptor?? [ 349.579842][ T977] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 350.118050][ T8317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.127697][ T5935] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 350.136968][ T5935] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 350.152146][ T8317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.160368][ T5935] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 350.167584][ T5935] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 350.204536][ T8315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.213390][ T5935] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 350.221256][ T5935] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 350.228716][ T5935] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 350.417904][ T8315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.825375][ T5935] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 350.982480][ T977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.033333][ T5935] hid-led 0003:1294:1320.0005: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.0-1/input0 [ 351.048646][ T977] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 351.187338][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.225086][ T5935] hid-led 0003:1294:1320.0005: Riso Kagaku Webmail Notifier initialized [ 351.247460][ T977] usb 5-1: config 0 descriptor?? [ 351.445132][ T977] pwc: Askey VC010 type 2 USB webcam detected. [ 351.523281][ T5935] usb 1-1: USB disconnect, device number 41 [ 351.546742][ T58] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 351.593860][ T58] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 351.612552][ T58] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 351.739218][ T8344] team0 (unregistering): Port device team_slave_0 removed [ 351.754496][ T8344] team0 (unregistering): Port device team_slave_1 removed [ 351.848512][ T977] pwc: recv_control_msg error -32 req 02 val 2b00 [ 351.850217][ T8328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.880913][ T8328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.908425][ T977] pwc: recv_control_msg error -32 req 02 val 2700 [ 351.915148][ T5935] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 352.120894][ T977] pwc: recv_control_msg error -32 req 02 val 2c00 [ 352.171414][ T8357] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 352.182587][ T8357] Â: renamed from pim6reg1 [ 352.369910][ T5935] usb 1-1: Using ep0 maxpacket: 8 [ 352.386009][ T5935] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 352.401685][ T5935] usb 1-1: config 179 has no interface number 0 [ 352.408208][ T5935] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 352.428480][ T5935] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 352.442042][ T5935] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 352.453800][ T5935] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 352.466159][ T5935] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 352.530959][ T5935] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 352.540786][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.561444][ T8349] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 352.568966][ T977] pwc: recv_control_msg error -32 req 04 val 1400 [ 352.590130][ T977] pwc: recv_control_msg error -32 req 02 val 2000 [ 352.608581][ T977] pwc: recv_control_msg error -32 req 02 val 2100 [ 352.856784][ T977] pwc: recv_control_msg error -71 req 02 val 2500 [ 352.865406][ T977] pwc: recv_control_msg error -71 req 02 val 2400 [ 352.873117][ T977] pwc: recv_control_msg error -71 req 02 val 2600 [ 352.885456][ T977] pwc: recv_control_msg error -71 req 02 val 2900 [ 352.893030][ T977] pwc: recv_control_msg error -71 req 02 val 2800 [ 352.900995][ T977] pwc: recv_control_msg error -71 req 04 val 1100 [ 352.910879][ T977] pwc: recv_control_msg error -71 req 04 val 1200 [ 352.932646][ T977] pwc: Registered as video103. [ 352.957197][ T977] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13 [ 352.984700][ T5935] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input14 [ 353.008630][ T977] usb 5-1: USB disconnect, device number 36 [ 353.251489][ T5902] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 353.279519][ T43] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 353.291915][ T5902] usbhid 4-1:0.0: can't add hid device: -71 [ 353.298301][ T5902] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 353.411558][ T5902] usb 4-1: USB disconnect, device number 28 [ 353.489426][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 353.709961][ T43] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 353.719180][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.726454][ T30] kauditd_printk_skb: 2582 callbacks suppressed [ 353.726479][ T30] audit: type=1400 audit(1751115306.769:32276): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=8366 comm="syz.2.699" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 353.740516][ T43] usb 3-1: config 0 descriptor?? [ 353.770122][ T30] audit: type=1400 audit(1751115306.769:32277): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=8366 comm="syz.2.699" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 353.799641][ T30] audit: type=1400 audit(1751115306.779:32278): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=8366 comm="syz.2.699" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 353.832511][ T30] audit: type=1400 audit(1751115306.799:32279): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 353.868426][ T30] audit: type=1400 audit(1751115306.799:32280): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="bus" dev="devtmpfs" ino=718 [ 354.837488][ T43] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 354.887222][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 354.896704][ T30] audit: type=1400 audit(1751115306.799:32281): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="usb" dev="devtmpfs" ino=719 [ 355.179023][ T5831] audit: audit_backlog=65 > audit_backlog_limit=64 [ 355.186736][ T5831] audit: audit_lost=2788 audit_rate_limit=0 audit_backlog_limit=64 [ 355.196276][ T43] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 355.204215][ T43] usb 3-1: media controller created [ 355.210525][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 355.214350][ T8380] audit: audit_backlog=65 > audit_backlog_limit=64 [ 355.333329][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 355.421562][ T43] az6027: usb out operation failed. (-71) [ 355.439113][ T43] az6027: usb out operation failed. (-71) [ 355.455307][ T43] stb0899_attach: Driver disabled by Kconfig [ 355.469011][ T43] az6027: no front-end attached [ 355.469011][ T43] [ 355.487104][ T43] az6027: usb out operation failed. (-71) [ 355.494776][ T43] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 355.521409][ T43] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 355.551982][ T43] dvb-usb: schedule remote query interval to 400 msecs. [ 355.567022][ T43] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 355.591557][ T43] usb 3-1: USB disconnect, device number 31 [ 355.598637][ T8386] netlink: 16 bytes leftover after parsing attributes in process `syz.1.705'. [ 355.614719][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.705'. [ 355.933978][ T5882] usb 1-1: USB disconnect, device number 42 [ 355.933989][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 355.949163][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 355.959792][ T5882] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 356.046392][ T43] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 356.224906][ T8390] binder: 8389:8390 ioctl c0306201 200000000240 returned -14 [ 358.207279][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 359.100641][ T30] kauditd_printk_skb: 1107 callbacks suppressed [ 359.100663][ T30] audit: type=1400 audit(1751115311.109:33288): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8398 comm="modprobe" name="/" dev="sda1" ino=2 [ 359.344683][ T8402] audit: audit_backlog=65 > audit_backlog_limit=64 [ 359.369862][ T5816] audit: audit_backlog=65 > audit_backlog_limit=64 [ 359.419323][ T8402] audit: audit_lost=2823 audit_rate_limit=0 audit_backlog_limit=64 [ 359.428301][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 359.434968][ C0] audit: audit_lost=2824 audit_rate_limit=0 audit_backlog_limit=64 [ 359.442961][ C0] audit: backlog limit exceeded [ 359.448465][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 359.455077][ C0] audit: audit_lost=2825 audit_rate_limit=0 audit_backlog_limit=64 [ 359.463048][ C0] audit: backlog limit exceeded [ 359.729346][ T8410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.738124][ T8410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.899575][ T24] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 359.979412][ T5902] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 360.029970][ T977] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 360.049494][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 360.063126][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.089343][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.099245][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 360.131861][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.142014][ T5902] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 360.153073][ T24] usb 5-1: config 0 descriptor?? [ 360.155774][ T5902] usb 3-1: config 0 has no interface number 0 [ 360.165932][ T5902] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 360.173261][ T24] hub 5-1:0.0: USB hub found [ 360.184131][ T5902] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 360.198043][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.215181][ T977] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 360.226755][ T977] usb 1-1: config 0 has no interface number 0 [ 360.238304][ T977] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 360.251290][ T5902] usb 3-1: config 0 descriptor?? [ 360.263861][ T5902] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input16 [ 360.265268][ T977] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 360.265307][ T977] usb 1-1: config 0 interface 255 has no altsetting 0 [ 360.291797][ T977] usb 1-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 360.291977][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.292001][ T977] usb 1-1: Product: syz [ 360.292019][ T977] usb 1-1: Manufacturer: syz [ 360.292036][ T977] usb 1-1: SerialNumber: syz [ 360.301850][ T977] usb 1-1: config 0 descriptor?? [ 360.395245][ T8408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.395601][ T8408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.484191][ T977] usb 3-1: USB disconnect, device number 32 [ 362.449485][ T977] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 363.318200][ T977] usb 2-1: config 2 has an invalid interface number: 233 but max is 0 [ 363.444137][ T977] usb 2-1: config 2 has no interface number 0 [ 363.452510][ T977] usb 2-1: config 2 interface 233 has no altsetting 0 [ 363.480323][ T977] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0109, bcdDevice=33.00 [ 363.516562][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.538978][ T977] usb 2-1: Product: syz [ 363.555800][ T977] usb 2-1: Manufacturer: syz [ 363.577190][ T977] usb 2-1: SerialNumber: syz [ 363.604117][ T24] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 363.751100][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 363.783045][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 363.874714][ T24] usb 5-1: USB disconnect, device number 37 [ 364.131959][ T30] kauditd_printk_skb: 1884 callbacks suppressed [ 364.131978][ T30] audit: type=1400 audit(1751115317.199:34645): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8441 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 364.210798][ T30] audit: type=1400 audit(1751115317.199:34646): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8441 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 364.319054][ T8444] audit: audit_backlog=65 > audit_backlog_limit=64 [ 364.336219][ T30] audit: type=1400 audit(1751115317.199:34647): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8441 comm="syz-executor" name="141" dev="tmpfs" ino=757 [ 364.384741][ T8444] audit: audit_lost=3002 audit_rate_limit=0 audit_backlog_limit=64 [ 364.411089][ T30] audit: type=1400 audit(1751115317.199:34648): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=8441 comm="syz-executor" opid=8441 ocomm="syz-executor" [ 364.488910][ T30] audit: type=1400 audit(1751115317.199:34649): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8441 comm="syz-executor" name="141" dev="tmpfs" ino=757 [ 364.511404][ T8444] audit: backlog limit exceeded [ 364.575738][ T30] audit: type=1400 audit(1751115317.199:34650): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8441 comm="syz-executor" name="141" dev="tmpfs" ino=757 [ 364.625583][ T30] audit: type=1400 audit(1751115317.199:34651): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=8441 comm="syz-executor" name="141" dev="tmpfs" ino=757 [ 364.902767][ T5935] usb 1-1: USB disconnect, device number 43 [ 364.928773][ T977] ftdi_sio 2-1:2.233: FTDI USB Serial Device converter detected [ 364.966259][ T977] usb 2-1: Detected FT232HP [ 364.984920][ T977] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 365.004571][ T977] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 365.025296][ T977] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 365.033707][ T5875] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 365.054650][ T977] usb 2-1: USB disconnect, device number 28 [ 365.097127][ T977] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 365.117712][ T977] ftdi_sio 2-1:2.233: device disconnected [ 365.189720][ T5875] usb 3-1: Using ep0 maxpacket: 8 [ 365.198245][ T5875] usb 3-1: config index 0 descriptor too short (expected 1821, got 853) [ 365.413750][ T5875] usb 3-1: config 0 has an invalid interface number: 103 but max is 2 [ 365.423468][ T5875] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.434703][ T5875] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 365.443903][ T5875] usb 3-1: config 0 has no interface number 1 [ 365.450451][ T5875] usb 3-1: config 0 interface 103 altsetting 9 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 365.461543][ T5875] usb 3-1: config 0 interface 103 altsetting 9 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 365.472613][ T5875] usb 3-1: config 0 interface 103 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 365.483635][ T5875] usb 3-1: config 0 interface 103 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 365.784866][ T24] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 366.458381][ T5875] usb 3-1: config 0 interface 103 has no altsetting 0 [ 366.470800][ T5875] usb 3-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.b4 [ 366.480257][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.488299][ T5875] usb 3-1: Product: syz [ 366.493644][ T5875] usb 3-1: Manufacturer: syz [ 366.498299][ T5875] usb 3-1: SerialNumber: syz [ 366.574736][ T5875] usb 3-1: config 0 descriptor?? [ 366.715298][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 366.740398][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 366.770266][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 366.790061][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 366.809018][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 366.828610][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.888326][ T8450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.903753][ T8450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.976304][ T5875] videodev: could not get a free minor [ 366.996698][ T5875] dsbr100 3-1:0.0: couldn't register video device [ 367.015400][ T5875] dsbr100 3-1:0.0: probe with driver dsbr100 failed with error -23 [ 367.071841][ T5875] usb 3-1: USB disconnect, device number 33 [ 367.074497][ T24] usb 1-1: config 0 descriptor?? [ 368.079129][ T980] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 368.086996][ T24] hdpvr 1-1:0.0: firmware version 0x0 dated [ 368.096253][ T24] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 368.255786][ T980] usb 2-1: unable to get BOS descriptor or descriptor too short [ 369.153647][ T30] kauditd_printk_skb: 1473 callbacks suppressed [ 369.153700][ T30] audit: type=1400 audit(1751115322.219:36101): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5806 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.0.164 dest=59238 netif=eth0 [ 369.221478][ T980] usb 2-1: not running at top speed; connect to a high speed hub [ 369.244648][ T980] usb 2-1: config 1 interface 0 altsetting 249 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 369.257956][ T980] usb 2-1: config 1 interface 0 has no altsetting 0 [ 369.316348][ T980] usb 2-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 369.325363][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 369.325721][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.332178][ C0] audit: audit_lost=3011 audit_rate_limit=0 audit_backlog_limit=64 [ 369.348127][ C0] audit: backlog limit exceeded [ 369.360998][ T8468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 369.368451][ T5835] audit: audit_backlog=66 > audit_backlog_limit=64 [ 369.421259][ T980] usb 2-1: Product: syz [ 369.425565][ T980] usb 2-1: Manufacturer: syz [ 369.430385][ T980] usb 2-1: SerialNumber: syz [ 369.437305][ T30] audit: type=1400 audit(1751115322.219:36102): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=8454 comm="syz.0.723" saddr=10.128.0.169 src=30008 daddr=10.128.0.164 dest=59238 netif=eth0 [ 369.459916][ T8468] audit: audit_lost=3012 audit_rate_limit=0 audit_backlog_limit=64 [ 369.465993][ T26] audit: audit_backlog=65 > audit_backlog_limit=64 [ 369.467896][ T8468] audit: backlog limit exceeded [ 369.606877][ T8487] syz.4.731: attempt to access beyond end of device [ 369.606877][ T8487] loop9: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 369.634759][ T8487] SQUASHFS error: Failed to read block 0x0: -5 [ 369.779364][ T5875] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 370.380808][ T5875] usb 3-1: Using ep0 maxpacket: 16 [ 370.571491][ T24] hdpvr 1-1:0.0: device init failed [ 370.578049][ T24] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 370.894944][ T5875] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.908576][ T980] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input18 [ 370.918304][ T24] usb 1-1: USB disconnect, device number 44 [ 370.941464][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 370.956899][ T5174] bcm5974 2-1:1.0: could not read from device [ 370.969335][ T5875] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 371.014457][ T5875] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 371.024789][ T980] usb 2-1: USB disconnect, device number 29 [ 371.034260][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.034914][ T5174] bcm5974 2-1:1.0: could not read from device [ 371.055635][ T5875] usb 3-1: Product: syz [ 371.066802][ T8499] netlink: 16 bytes leftover after parsing attributes in process `syz.0.736'. [ 371.094886][ T5875] usb 3-1: Manufacturer: syz [ 371.122353][ T5875] usb 3-1: SerialNumber: syz [ 371.222733][ T5875] usb 3-1: config 0 descriptor?? [ 371.315945][ T5875] peak_usb 3-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8 [ 371.344766][ T5875] peak_usb 3-1:0.0: unable to read PCAN-USB serial number (err -8) [ 371.359887][ T5902] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 372.205810][ T5875] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -8 [ 372.219357][ T5875] usb 3-1: USB disconnect, device number 34 [ 372.270168][ T5902] usb 4-1: device descriptor read/64, error -71 [ 372.573323][ T8517] netlink: 308 bytes leftover after parsing attributes in process `syz.4.740'. [ 373.249433][ T5902] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 373.459806][ T8527] Cannot find add_set index 0 as target [ 373.469991][ T5902] usb 4-1: device descriptor read/64, error -71 [ 374.217675][ T30] kauditd_printk_skb: 1817 callbacks suppressed [ 374.217695][ T30] audit: type=1400 audit(1751115327.279:37859): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5821 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 374.231202][ T5902] usb usb4-port1: attempt power cycle [ 374.256287][ T5835] audit: audit_backlog=65 > audit_backlog_limit=64 [ 374.271907][ T5821] audit: audit_backlog=66 > audit_backlog_limit=64 [ 374.278512][ T5821] audit: audit_lost=3034 audit_rate_limit=0 audit_backlog_limit=64 [ 374.297527][ T5821] audit: backlog limit exceeded [ 374.307762][ T5831] audit: audit_backlog=66 > audit_backlog_limit=64 [ 374.311709][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 374.320966][ C0] audit: audit_lost=3035 audit_rate_limit=0 audit_backlog_limit=64 [ 374.328866][ C0] audit: backlog limit exceeded [ 374.333782][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 374.561071][ T5819] Bluetooth: hci4: unexpected Set CIG Parameters response data [ 374.570014][ T5819] Bluetooth: hci4: unexpected event for opcode 0x2062 [ 374.676503][ T8534] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.600082][ T8566] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 377.591575][ T980] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 378.632789][ T5819] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 378.635901][ T980] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 378.641881][ T5819] Bluetooth: hci4: Injecting HCI hardware error event [ 378.668317][ T5819] Bluetooth: hci4: hardware error 0x00 [ 378.846624][ T980] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 378.852739][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.867420][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.004716][ T980] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 379.061865][ T980] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 379.076150][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.096805][ T980] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 379.104771][ T980] usb 1-1: invalid MIDI out EP 0 [ 379.259408][ T5875] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 379.267449][ T5902] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 379.276501][ T30] kauditd_printk_skb: 2681 callbacks suppressed [ 379.276521][ T30] audit: type=1400 audit(1751115332.339:40223): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=8585 comm="syz.3.761" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 379.401014][ T980] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 379.464830][ T5875] usb 2-1: Using ep0 maxpacket: 8 [ 379.484330][ T30] audit: type=1400 audit(1751115332.369:40224): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=8585 comm="syz.3.761" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 379.507157][ T30] audit: type=1400 audit(1751115332.369:40225): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=8584 comm="syz.1.762" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 379.531119][ T5875] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 379.541477][ T5902] usb 4-1: Using ep0 maxpacket: 8 [ 379.547032][ T5875] usb 2-1: config 179 has no interface number 0 [ 379.555065][ T5875] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 379.570824][ T30] audit: type=1400 audit(1751115332.369:40226): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=8585 comm="syz.3.761" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 379.591138][ T5902] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 379.600662][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.613532][ T5902] usb 4-1: Product: syz [ 379.617778][ T5875] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 379.629425][ T5902] usb 4-1: Manufacturer: syz [ 379.635849][ T5902] usb 4-1: SerialNumber: syz [ 379.642763][ T5875] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 379.656105][ T30] audit: type=1400 audit(1751115332.369:40227): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=8584 comm="syz.1.762" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 379.677256][ T5902] usb 4-1: config 0 descriptor?? [ 379.682294][ T5875] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 379.697196][ T30] audit: type=1400 audit(1751115332.369:40228): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=8584 comm="syz.1.762" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 379.717568][ T5875] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 379.769394][ T5875] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 379.780740][ T5820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 379.787037][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 379.793958][ C0] audit: audit_lost=3143 audit_rate_limit=0 audit_backlog_limit=64 [ 379.801889][ C0] audit: backlog limit exceeded [ 379.818184][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.852430][ T8586] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 379.910156][ T5902] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 380.169668][ T5902] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 380.506331][ T5902] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input19 [ 381.204663][ T5819] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 381.584712][ T10] usb 1-1: USB disconnect, device number 45 [ 382.499407][ T5945] usb 4-1: USB disconnect, device number 32 [ 382.795328][ T5875] usb 2-1: USB disconnect, device number 30 [ 382.795393][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 382.809704][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 382.852928][ T5875] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 383.023870][ T8621] mmap: syz.2.772 (8621) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 383.275907][ T8627] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 383.663029][ T8621] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 383.789014][ T8634] [U] [ 383.791889][ T8634] [U] [ 383.809809][ T8634] [U] [ 383.812589][ T8634] [U] [ 383.815334][ T8634] [U] [ 384.279735][ T30] kauditd_printk_skb: 2211 callbacks suppressed [ 384.279756][ T30] audit: type=1400 audit(1751115337.339:42426): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5835 comm="syz-executor" name="158" dev="tmpfs" ino=841 [ 384.319639][ T5816] audit: audit_backlog=65 > audit_backlog_limit=64 [ 384.346038][ T5816] audit: audit_lost=3149 audit_rate_limit=0 audit_backlog_limit=64 [ 384.349358][ T30] audit: type=1400 audit(1751115337.339:42427): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8640 comm="modprobe" name="/" dev="sda1" ino=2 [ 384.384469][ T5816] audit: backlog limit exceeded [ 384.384652][ T8644] audit: audit_backlog=65 > audit_backlog_limit=64 [ 384.389485][ T5816] audit: audit_backlog=65 > audit_backlog_limit=64 [ 384.407413][ T30] audit: type=1400 audit(1751115337.339:42428): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8640 comm="modprobe" name="lib" dev="sda1" ino=264 [ 384.411207][ T8644] audit: audit_lost=3150 audit_rate_limit=0 audit_backlog_limit=64 [ 384.427442][ T5816] audit: audit_lost=3151 audit_rate_limit=0 audit_backlog_limit=64 [ 384.529657][ T8629] [U] [ 385.714275][ T8655] netlink: 308 bytes leftover after parsing attributes in process `syz.2.778'. [ 386.033926][ T8659] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 10802, id = 0 [ 386.306824][ T8654] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 386.369517][ T8662] input: syz1 as /devices/virtual/input/input20 [ 386.398419][ T8654] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 386.525977][ T8664] FAULT_INJECTION: forcing a failure. [ 386.525977][ T8664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.579455][ T8664] CPU: 1 UID: 0 PID: 8664 Comm: syz.1.782 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 386.579488][ T8664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 386.579506][ T8664] Call Trace: [ 386.579517][ T8664] [ 386.579526][ T8664] dump_stack_lvl+0x189/0x250 [ 386.579571][ T8664] ? __pfx____ratelimit+0x10/0x10 [ 386.579602][ T8664] ? __pfx_dump_stack_lvl+0x10/0x10 [ 386.579634][ T8664] ? __pfx__printk+0x10/0x10 [ 386.579655][ T8664] ? __might_fault+0xb0/0x130 [ 386.579693][ T8664] should_fail_ex+0x414/0x560 [ 386.579723][ T8664] _copy_from_user+0x2d/0xb0 [ 386.579755][ T8664] ____sys_sendmsg+0x2fe/0x830 [ 386.579786][ T8664] ? __pfx_____sys_sendmsg+0x10/0x10 [ 386.579821][ T8664] ? import_iovec+0x74/0xa0 [ 386.579856][ T8664] ___sys_sendmsg+0x21f/0x2a0 [ 386.579884][ T8664] ? __pfx____sys_sendmsg+0x10/0x10 [ 386.579947][ T8664] ? __fget_files+0x2a/0x420 [ 386.579975][ T8664] ? __fget_files+0x3a0/0x420 [ 386.580014][ T8664] __x64_sys_sendmsg+0x19b/0x260 [ 386.580043][ T8664] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 386.580079][ T8664] ? __pfx_ksys_write+0x10/0x10 [ 386.580101][ T8664] ? rcu_is_watching+0x15/0xb0 [ 386.580137][ T8664] ? do_syscall_64+0xbe/0x3b0 [ 386.580172][ T8664] do_syscall_64+0xfa/0x3b0 [ 386.580202][ T8664] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.580231][ T8664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.580253][ T8664] ? clear_bhb_loop+0x60/0xb0 [ 386.580279][ T8664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.580299][ T8664] RIP: 0033:0x7f58ea38e929 [ 386.580319][ T8664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.580338][ T8664] RSP: 002b:00007f58eb264038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.580361][ T8664] RAX: ffffffffffffffda RBX: 00007f58ea5b5fa0 RCX: 00007f58ea38e929 [ 386.580376][ T8664] RDX: 0000000000000080 RSI: 00002000000003c0 RDI: 0000000000000003 [ 386.580390][ T8664] RBP: 00007f58eb264090 R08: 0000000000000000 R09: 0000000000000000 [ 386.580403][ T8664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.580416][ T8664] R13: 0000000000000000 R14: 00007f58ea5b5fa0 R15: 00007ffd78543e48 [ 386.580447][ T8664] [ 387.253049][ T8678] netlink: 'syz.3.785': attribute type 3 has an invalid length. [ 387.261522][ T8678] netlink: 'syz.3.785': attribute type 1 has an invalid length. [ 387.269632][ T8678] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.785'. [ 388.920409][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 389.556309][ T30] kauditd_printk_skb: 1014 callbacks suppressed [ 389.556346][ T30] audit: type=1400 audit(1751115339.899:43246): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8665 comm="syz.0.783" name="newroot" dev="tmpfs" ino=2 [ 389.586295][ T5821] audit: audit_backlog=65 > audit_backlog_limit=64 [ 389.608367][ T5816] audit: audit_backlog=65 > audit_backlog_limit=64 [ 389.623584][ T8676] audit: audit_backlog=65 > audit_backlog_limit=64 [ 389.642728][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 389.649443][ C0] audit: audit_lost=3217 audit_rate_limit=0 audit_backlog_limit=64 [ 389.657428][ C0] audit: backlog limit exceeded [ 389.672862][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 389.679584][ C0] audit: audit_lost=3218 audit_rate_limit=0 audit_backlog_limit=64 [ 389.687683][ C0] audit: backlog limit exceeded [ 392.181394][ T5902] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 392.389545][ T5902] usb 2-1: device descriptor read/64, error -71 [ 392.988726][ T8697] netlink: 308 bytes leftover after parsing attributes in process `syz.2.791'. [ 393.274536][ T5902] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 393.429356][ T5902] usb 2-1: device descriptor read/64, error -71 [ 393.647617][ T5902] usb usb2-port1: attempt power cycle [ 394.652526][ T30] kauditd_printk_skb: 1562 callbacks suppressed [ 394.652546][ T30] audit: type=1400 audit(1751115347.709:44125): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=8698 comm="syz.0.792" saddr=::1 src=2 daddr=::1 dest=2 netif=lo [ 394.725555][ T30] audit: type=1400 audit(1751115347.709:44126): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=8698 comm="syz.0.792" saddr=::1 src=2 daddr=::1 dest=2 netif=lo [ 394.765484][ T8703] netlink: 'syz.2.795': attribute type 4 has an invalid length. [ 394.790668][ T8703] netlink: 'syz.2.795': attribute type 4 has an invalid length. [ 394.825508][ T5821] audit: audit_backlog=65 > audit_backlog_limit=64 [ 394.832985][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 394.839589][ C0] audit: audit_lost=3448 audit_rate_limit=0 audit_backlog_limit=64 [ 394.848137][ C0] audit: backlog limit exceeded [ 394.854053][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 394.860654][ C0] audit: audit_lost=3449 audit_rate_limit=0 audit_backlog_limit=64 [ 394.868677][ C0] audit: backlog limit exceeded [ 394.873781][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 397.902370][ T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 398.229622][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 398.443084][ T24] usb 3-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=a8.f7 [ 398.509434][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.517531][ T24] usb 3-1: Product: syz [ 398.595949][ T24] usb 3-1: Manufacturer: syz [ 398.611159][ T24] usb 3-1: SerialNumber: syz [ 398.636841][ T24] usb 3-1: config 0 descriptor?? [ 398.658216][ T24] quatech2 3-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 399.033859][ T8727] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 399.670274][ T24] usb 3-1: qt2_attach - failed to power on unit: -71 [ 399.673694][ T30] kauditd_printk_skb: 1534 callbacks suppressed [ 399.673719][ T30] audit: type=1400 audit(1751115352.739:45174): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5831 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 399.677598][ T24] quatech2 3-1:0.0: probe with driver quatech2 failed with error -71 [ 399.837869][ T5831] audit: audit_backlog=65 > audit_backlog_limit=64 [ 399.843676][ T24] usb 3-1: USB disconnect, device number 35 [ 399.857273][ T30] audit: type=1400 audit(1751115352.739:45175): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5831 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 399.872365][ T26] audit: audit_backlog=65 > audit_backlog_limit=64 [ 399.877575][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 399.889620][ C0] audit: audit_lost=3613 audit_rate_limit=0 audit_backlog_limit=64 [ 399.897607][ C0] audit: backlog limit exceeded [ 399.897696][ T5831] audit: audit_lost=3614 audit_rate_limit=0 audit_backlog_limit=64 [ 399.912661][ T30] audit: type=1400 audit(1751115352.739:45176): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5831 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 399.924479][ T26] audit: audit_lost=3615 audit_rate_limit=0 audit_backlog_limit=64 [ 400.359135][ T8741] netlink: 308 bytes leftover after parsing attributes in process `syz.4.805'. [ 401.089447][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.804'. [ 401.107434][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.804'. [ 401.302809][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.804'. [ 401.430960][ T8736] usb usb1: usbfs: process 8736 (syz.2.804) did not claim interface 0 before use [ 401.644505][ T8736] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 401.666150][ T8736] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 401.712776][ T8736] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 478.951757][ C0] audit_log_start: 1270 callbacks suppressed [ 478.951784][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 478.964411][ C0] audit: audit_lost=3719 audit_rate_limit=0 audit_backlog_limit=64 [ 478.972366][ C0] audit: backlog limit exceeded [ 479.452324][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 479.458915][ C0] audit: audit_lost=3720 audit_rate_limit=0 audit_backlog_limit=64 [ 479.466897][ C0] audit: backlog limit exceeded [ 479.952521][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 479.959111][ C0] audit: audit_lost=3721 audit_rate_limit=0 audit_backlog_limit=64 [ 479.967077][ C0] audit: backlog limit exceeded [ 480.954116][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 484.457925][ C0] audit_log_start: 11 callbacks suppressed [ 484.457952][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 484.470411][ C0] audit: audit_lost=3726 audit_rate_limit=0 audit_backlog_limit=64 [ 484.478342][ C0] audit: backlog limit exceeded [ 485.458694][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 485.465331][ C0] audit: audit_lost=3727 audit_rate_limit=0 audit_backlog_limit=64 [ 485.473390][ C0] audit: backlog limit exceeded [ 485.959063][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 485.965706][ C0] audit: audit_lost=3728 audit_rate_limit=0 audit_backlog_limit=64 [ 485.973671][ C0] audit: backlog limit exceeded [ 487.960689][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 489.962619][ C0] audit_log_start: 11 callbacks suppressed [ 489.962645][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 489.975123][ C0] audit: audit_lost=3733 audit_rate_limit=0 audit_backlog_limit=64 [ 489.983073][ C0] audit: backlog limit exceeded [ 490.463548][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 490.470211][ C0] audit: audit_lost=3734 audit_rate_limit=0 audit_backlog_limit=64 [ 490.478150][ C0] audit: backlog limit exceeded [ 491.464709][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 491.471353][ C0] audit: audit_lost=3735 audit_rate_limit=0 audit_backlog_limit=64 [ 491.479310][ C0] audit: backlog limit exceeded [ 492.465374][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 495.970526][ C0] audit_log_start: 14 callbacks suppressed [ 495.970552][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 495.983003][ C0] audit: audit_lost=3741 audit_rate_limit=0 audit_backlog_limit=64 [ 495.990969][ C0] audit: backlog limit exceeded [ 497.972813][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 497.979488][ C0] audit: audit_lost=3742 audit_rate_limit=0 audit_backlog_limit=64 [ 497.987519][ C0] audit: backlog limit exceeded [ 499.473354][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 499.480013][ C0] audit: audit_lost=3743 audit_rate_limit=0 audit_backlog_limit=64 [ 499.487953][ C0] audit: backlog limit exceeded [ 500.974879][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 501.976125][ C0] audit_log_start: 2 callbacks suppressed [ 501.976150][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 501.988626][ C0] audit: audit_lost=3745 audit_rate_limit=0 audit_backlog_limit=64 [ 501.996608][ C0] audit: backlog limit exceeded [ 502.977486][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 502.984297][ C0] audit: audit_lost=3746 audit_rate_limit=0 audit_backlog_limit=64 [ 502.992284][ C0] audit: backlog limit exceeded [ 504.479171][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 504.485806][ C0] audit: audit_lost=3747 audit_rate_limit=0 audit_backlog_limit=64 [ 504.493788][ C0] audit: backlog limit exceeded [ 504.989374][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 507.481149][ C0] audit_log_start: 8 callbacks suppressed [ 507.481175][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 507.493654][ C0] audit: audit_lost=3751 audit_rate_limit=0 audit_backlog_limit=64 [ 507.501723][ C0] audit: backlog limit exceeded [ 507.981263][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 507.987861][ C0] audit: audit_lost=3752 audit_rate_limit=0 audit_backlog_limit=64 [ 507.995843][ C0] audit: backlog limit exceeded [ 509.239229][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 509.246262][ C0] rcu: 1-...!: (1 GPs behind) idle=e50c/1/0x4000000000000000 softirq=31829/31874 fqs=3 [ 509.257315][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8765 [ 509.264664][ C0] rcu: (detected by 0, t=10505 jiffies, g=29529, q=1668 ncpus=2) [ 509.272518][ C0] Sending NMI from CPU 0 to CPUs 1: [ 509.272556][ C1] NMI backtrace for cpu 1 [ 509.272573][ C1] CPU: 1 UID: 0 PID: 8765 Comm: syz.2.812 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 509.272595][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 509.272606][ C1] RIP: 0010:__lock_acquire+0x850/0xd20 [ 509.272636][ C1] Code: d7 89 d6 c1 c6 06 44 31 fe 01 ca 89 f0 c1 c0 08 29 f1 31 c8 01 d6 29 c2 89 c1 c1 c1 10 31 d1 01 f0 41 89 cf 41 c1 c7 13 29 ce <41> 31 f7 01 c1 44 29 f8 44 01 f9 41 c1 c7 04 41 31 c7 49 c1 e7 20 [ 509.272652][ C1] RSP: 0000:ffffc90000a08b40 EFLAGS: 00000006 [ 509.272667][ C1] RAX: 00000000ef9d33e4 RBX: 0000000000000002 RCX: 00000000a5aae650 [ 509.272679][ C1] RDX: 00000000105209fd RSI: 000000005a44979c RDI: ffff888026065a00 [ 509.272691][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff897f7ad8 [ 509.272702][ C1] R10: dffffc0000000000 R11: ffffed100f88b05e R12: 0000000000004008 [ 509.272715][ C1] R13: ffff8880260664f0 R14: ffff888026066540 R15: 0000000032852d57 [ 509.272728][ C1] FS: 00007fcf410ce6c0(0000) GS:ffff888125d84000(0000) knlGS:0000000000000000 [ 509.272743][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 509.272755][ C1] CR2: 00007fa27bff5f98 CR3: 00000000342c8000 CR4: 00000000003526f0 [ 509.272770][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 509.272781][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 509.272792][ C1] Call Trace: [ 509.272801][ C1] [ 509.272814][ C1] ? advance_sched+0x9f8/0xc90 [ 509.272836][ C1] lock_acquire+0x120/0x360 [ 509.272857][ C1] ? advance_sched+0x9f8/0xc90 [ 509.272881][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 509.272899][ C1] ? advance_sched+0x9f8/0xc90 [ 509.272919][ C1] advance_sched+0xa14/0xc90 [ 509.272938][ C1] ? advance_sched+0x9f8/0xc90 [ 509.272963][ C1] ? __pfx_advance_sched+0x10/0x10 [ 509.272983][ C1] __hrtimer_run_queues+0x529/0xc60 [ 509.273018][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 509.273041][ C1] ? read_tsc+0x9/0x20 [ 509.273065][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 509.273102][ C1] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 509.273130][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 509.273155][ C1] [ 509.273161][ C1] [ 509.273168][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 509.273187][ C1] RIP: 0010:finish_task_switch+0x26b/0x950 [ 509.273209][ C1] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 e9 27 05 00 00 4c 8b 75 d0 4c 89 e7 e8 ff 98 d0 09 e8 5a fe 35 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 509.273223][ C1] RSP: 0000:ffffc9001a1be898 EFLAGS: 00000282 [ 509.273238][ C1] RAX: a5cf69cd1bbf3c00 RBX: 0000000000000000 RCX: a5cf69cd1bbf3c00 [ 509.273250][ C1] RDX: 0000000000000007 RSI: ffffffff8d96e8fe RDI: ffffffff8be1bb80 [ 509.273262][ C1] RBP: ffffc9001a1be8f0 R08: ffffffff8f9fdff7 R09: 1ffffffff1f3fbfe [ 509.273275][ C1] R10: dffffc0000000000 R11: fffffbfff1f3fbff R12: ffff888026065a00 [ 509.273289][ C1] R13: dffffc0000000000 R14: ffff888021728000 R15: ffff8880b873a9d8 [ 509.273311][ C1] ? finish_task_switch+0x266/0x950 [ 509.273335][ C1] __schedule+0x16aa/0x4cb0 [ 509.273366][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 509.273391][ C1] ? __pfx___schedule+0x10/0x10 [ 509.273420][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 509.273445][ C1] preempt_schedule_irq+0xb5/0x150 [ 509.273467][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 509.273495][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 509.273523][ C1] irqentry_exit+0x6f/0x90 [ 509.273553][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 509.273571][ C1] RIP: 0010:lock_release+0x0/0x3e0 [ 509.273593][ C1] Code: de e8 e4 e6 51 03 48 8b 3c 24 e9 08 fa ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 30 49 89 f5 49 [ 509.273608][ C1] RSP: 0000:ffffc9001a1bec90 EFLAGS: 00000202 [ 509.273621][ C1] RAX: 0000000000000001 RBX: ffffffff903a2601 RCX: a5cf69cd1bbf3c00 [ 509.273633][ C1] RDX: ffffc9001a1bed01 RSI: ffffffff81728af5 RDI: ffffffff8e13ee60 [ 509.273646][ C1] RBP: dffffc0000000000 R08: ffffc9001a1bfa30 R09: 0000000000000000 [ 509.273658][ C1] R10: ffffc9001a1bedb8 R11: fffff52003437db9 R12: ffffc9001a1bfa40 [ 509.273670][ C1] R13: ffffc9001a1b8000 R14: ffffc9001a1bed68 R15: ffffffff81728af5 [ 509.273684][ C1] ? unwind_next_frame+0xa5/0x2390 [ 509.273712][ C1] ? unwind_next_frame+0xa5/0x2390 [ 509.273738][ C1] unwind_next_frame+0x19a9/0x2390 [ 509.273766][ C1] ? unwind_next_frame+0xa5/0x2390 [ 509.273791][ C1] ? handle_mm_fault+0x2d5/0x7f0 [ 509.273813][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 509.273831][ C1] arch_stack_walk+0x11c/0x150 [ 509.273860][ C1] ? __get_user_pages+0x1af4/0x30b0 [ 509.273879][ C1] stack_trace_save+0x9c/0xe0 [ 509.273896][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 509.273914][ C1] ? finish_task_switch+0x18b/0x950 [ 509.273938][ C1] save_stack+0xf7/0x1f0 [ 509.273959][ C1] ? __pfx_save_stack+0x10/0x10 [ 509.273977][ C1] ? preempt_schedule_notrace+0xd1/0x110 [ 509.274000][ C1] ? post_alloc_hook+0x240/0x2a0 [ 509.274021][ C1] ? get_page_from_freelist+0x21d5/0x22b0 [ 509.274046][ C1] ? __alloc_frozen_pages_noprof+0x181/0x370 [ 509.274072][ C1] ? alloc_pages_mpol+0x232/0x4a0 [ 509.274092][ C1] ? folio_alloc_mpol_noprof+0x39/0x70 [ 509.274113][ C1] ? shmem_alloc_and_add_folio+0x447/0xf60 [ 509.274133][ C1] ? shmem_get_folio_gfp+0x59d/0x1660 [ 509.274148][ C1] ? shmem_fault+0x179/0x390 [ 509.274167][ C1] ? __do_fault+0x135/0x390 [ 509.274190][ C1] ? __handle_mm_fault+0x37ed/0x5620 [ 509.274208][ C1] ? handle_mm_fault+0x2d5/0x7f0 [ 509.274228][ C1] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 509.274254][ C1] __set_page_owner+0x8d/0x4a0 [ 509.274275][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 509.274301][ C1] post_alloc_hook+0x240/0x2a0 [ 509.274325][ C1] get_page_from_freelist+0x21d5/0x22b0 [ 509.274373][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 509.274400][ C1] ? prepare_alloc_pages+0x213/0x610 [ 509.274428][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 509.274453][ C1] ? preempt_schedule_common+0x83/0xd0 [ 509.274478][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 509.274507][ C1] ? policy_nodemask+0x27c/0x720 [ 509.274530][ C1] alloc_pages_mpol+0x232/0x4a0 [ 509.274560][ C1] folio_alloc_mpol_noprof+0x39/0x70 [ 509.274582][ C1] shmem_alloc_and_add_folio+0x447/0xf60 [ 509.274604][ C1] ? filemap_get_entry+0xad/0x2f0 [ 509.274622][ C1] ? filemap_get_entry+0xad/0x2f0 [ 509.274639][ C1] ? filemap_get_entry+0xad/0x2f0 [ 509.274658][ C1] ? shmem_huge_global_enabled+0x174/0x3a0 [ 509.274676][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 509.274698][ C1] ? shmem_allowable_huge_orders+0x414/0x420 [ 509.274719][ C1] shmem_get_folio_gfp+0x59d/0x1660 [ 509.274752][ C1] shmem_fault+0x179/0x390 [ 509.274776][ C1] __do_fault+0x135/0x390 [ 509.274801][ C1] __handle_mm_fault+0x37ed/0x5620 [ 509.274829][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 509.274855][ C1] ? follow_page_pte+0x8d6/0x14b0 [ 509.274878][ C1] handle_mm_fault+0x2d5/0x7f0 [ 509.274902][ C1] __get_user_pages+0x1af4/0x30b0 [ 509.274936][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 509.274957][ C1] populate_vma_page_range+0x26b/0x340 [ 509.274977][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 509.274993][ C1] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 509.275016][ C1] ? down_read+0x1ad/0x2e0 [ 509.275032][ C1] __mm_populate+0x24c/0x380 [ 509.275049][ C1] ? __pfx___mm_populate+0x10/0x10 [ 509.275068][ C1] ? up_write+0x1c4/0x420 [ 509.275086][ C1] vm_mmap_pgoff+0x3f0/0x4c0 [ 509.275104][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 509.275121][ C1] ? rcu_is_watching+0x15/0xb0 [ 509.275147][ C1] ? ksys_mmap_pgoff+0xf4/0x760 [ 509.275167][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 509.275192][ C1] do_syscall_64+0xfa/0x3b0 [ 509.275217][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 509.275240][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.275258][ C1] ? clear_bhb_loop+0x60/0xb0 [ 509.275277][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.275295][ C1] RIP: 0033:0x7fcf4018e929 [ 509.275312][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.275327][ C1] RSP: 002b:00007fcf410ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 509.275344][ C1] RAX: ffffffffffffffda RBX: 00007fcf403b5fa0 RCX: 00007fcf4018e929 [ 509.275357][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 509.275370][ C1] RBP: 00007fcf40210b39 R08: ffffffffffffffff R09: 0000000000000000 [ 509.275381][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 509.275392][ C1] R13: 0000000000000000 R14: 00007fcf403b5fa0 R15: 00007ffed1ba05a8 [ 509.275412][ C1] [ 509.275545][ C0] task:syz.2.812 state:R running task stack:24096 pid:8765 tgid:8763 ppid:5835 task_flags:0x400140 flags:0x0000400a [ 510.163576][ C0] Call Trace: [ 510.166887][ C0] [ 510.169868][ C0] ? __schedule+0x16aa/0x4cb0 [ 510.175138][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 510.180500][ C0] ? __pfx___schedule+0x10/0x10 [ 510.185423][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 510.190760][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 510.196113][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 510.201890][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 510.207745][ C0] ? irqentry_exit+0x6f/0x90 [ 510.212383][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 510.218048][ C0] ? unwind_next_frame+0xa5/0x2390 [ 510.223218][ C0] ? unwind_next_frame+0xa5/0x2390 [ 510.228375][ C0] ? __pfx_lock_release+0x10/0x10 [ 510.233452][ C0] ? unwind_next_frame+0x19a9/0x2390 [ 510.238791][ C0] ? unwind_next_frame+0xa5/0x2390 [ 510.243946][ C0] ? handle_mm_fault+0x2d5/0x7f0 [ 510.248936][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 510.255126][ C0] ? arch_stack_walk+0x11c/0x150 [ 510.260219][ C0] ? __get_user_pages+0x1af4/0x30b0 [ 510.265480][ C0] ? stack_trace_save+0x9c/0xe0 [ 510.270387][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 510.275799][ C0] ? finish_task_switch+0x18b/0x950 [ 510.281129][ C0] ? save_stack+0xf7/0x1f0 [ 510.285596][ C0] ? __pfx_save_stack+0x10/0x10 [ 510.290483][ C0] ? preempt_schedule_notrace+0xd1/0x110 [ 510.296162][ C0] ? post_alloc_hook+0x240/0x2a0 [ 510.301139][ C0] ? get_page_from_freelist+0x21d5/0x22b0 [ 510.306897][ C0] ? __alloc_frozen_pages_noprof+0x181/0x370 [ 510.312920][ C0] ? alloc_pages_mpol+0x232/0x4a0 [ 510.317984][ C0] ? folio_alloc_mpol_noprof+0x39/0x70 [ 510.323495][ C0] ? shmem_alloc_and_add_folio+0x447/0xf60 [ 510.329339][ C0] ? shmem_get_folio_gfp+0x59d/0x1660 [ 510.334747][ C0] ? shmem_fault+0x179/0x390 [ 510.339374][ C0] ? __do_fault+0x135/0x390 [ 510.344441][ C0] ? __handle_mm_fault+0x37ed/0x5620 [ 510.349780][ C0] ? handle_mm_fault+0x2d5/0x7f0 [ 510.354855][ C0] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 510.360980][ C0] ? __set_page_owner+0x8d/0x4a0 [ 510.365960][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 510.371379][ C0] ? post_alloc_hook+0x240/0x2a0 [ 510.376367][ C0] ? get_page_from_freelist+0x21d5/0x22b0 [ 510.382186][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 510.388132][ C0] ? prepare_alloc_pages+0x213/0x610 [ 510.393493][ C0] ? __alloc_frozen_pages_noprof+0x181/0x370 [ 510.399527][ C0] ? preempt_schedule_common+0x83/0xd0 [ 510.405134][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 510.411531][ C0] ? policy_nodemask+0x27c/0x720 [ 510.416530][ C0] ? alloc_pages_mpol+0x232/0x4a0 [ 510.421616][ C0] ? folio_alloc_mpol_noprof+0x39/0x70 [ 510.427123][ C0] ? shmem_alloc_and_add_folio+0x447/0xf60 [ 510.432984][ C0] ? filemap_get_entry+0xad/0x2f0 [ 510.438055][ C0] ? filemap_get_entry+0xad/0x2f0 [ 510.443112][ C0] ? filemap_get_entry+0xad/0x2f0 [ 510.448181][ C0] ? shmem_huge_global_enabled+0x174/0x3a0 [ 510.454026][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 510.460238][ C0] ? shmem_allowable_huge_orders+0x414/0x420 [ 510.466270][ C0] ? shmem_get_folio_gfp+0x59d/0x1660 [ 510.471705][ C0] ? shmem_fault+0x179/0x390 [ 510.476346][ C0] ? __do_fault+0x135/0x390 [ 510.480915][ C0] ? __handle_mm_fault+0x37ed/0x5620 [ 510.486280][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 510.491821][ C0] ? follow_page_pte+0x8d6/0x14b0 [ 510.496893][ C0] ? handle_mm_fault+0x2d5/0x7f0 [ 510.501882][ C0] ? __get_user_pages+0x1af4/0x30b0 [ 510.507161][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 510.512593][ C0] ? populate_vma_page_range+0x26b/0x340 [ 510.518286][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 510.524296][ C0] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 510.530230][ C0] ? down_read+0x1ad/0x2e0 [ 510.534681][ C0] ? __mm_populate+0x24c/0x380 [ 510.539481][ C0] ? __pfx___mm_populate+0x10/0x10 [ 510.544634][ C0] ? up_write+0x1c4/0x420 [ 510.549008][ C0] ? vm_mmap_pgoff+0x3f0/0x4c0 [ 510.555118][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 510.560340][ C0] ? rcu_is_watching+0x15/0xb0 [ 510.565171][ C0] ? ksys_mmap_pgoff+0xf4/0x760 [ 510.570061][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 510.574871][ C0] ? do_syscall_64+0xfa/0x3b0 [ 510.579591][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 510.584828][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.590931][ C0] ? clear_bhb_loop+0x60/0xb0 [ 510.595651][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.601855][ C0] [ 510.605173][ C0] rcu: rcu_preempt kthread starved for 10490 jiffies! g29529 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 510.616765][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 510.626863][ C0] rcu: RCU grace-period kthread stack dump: [ 510.632778][ C0] task:rcu_preempt state:R running task stack:27320 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 510.646327][ C0] Call Trace: [ 510.649638][ C0] [ 510.652600][ C0] __schedule+0x16a2/0x4cb0 [ 510.657176][ C0] ? schedule+0x165/0x360 [ 510.661815][ C0] ? __pfx___schedule+0x10/0x10 [ 510.666815][ C0] ? schedule+0x91/0x360 [ 510.671534][ C0] schedule+0x165/0x360 [ 510.675824][ C0] schedule_timeout+0x12b/0x270 [ 510.680895][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 510.686303][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 510.692415][ C0] ? __pfx_process_timeout+0x10/0x10 [ 510.697845][ C0] ? prepare_to_swait_event+0x341/0x380 [ 510.703526][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 510.708528][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 510.714992][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 510.720407][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 510.725659][ C0] ? finish_swait+0xcd/0x1f0 [ 510.730292][ C0] rcu_gp_kthread+0x99/0x390 [ 510.735014][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 510.740256][ C0] ? __kthread_parkme+0x7b/0x200 [ 510.745246][ C0] ? __kthread_parkme+0x1a1/0x200 [ 510.750330][ C0] kthread+0x70e/0x8a0 [ 510.754441][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 510.759678][ C0] ? __pfx_kthread+0x10/0x10 [ 510.764307][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 510.769556][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 510.774810][ C0] ? __pfx_kthread+0x10/0x10 [ 510.779528][ C0] ret_from_fork+0x3fc/0x770 [ 510.784170][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 510.789422][ C0] ? __switch_to_asm+0x39/0x70 [ 510.794658][ C0] ? __switch_to_asm+0x33/0x70 [ 510.799457][ C0] ? __pfx_kthread+0x10/0x10 [ 510.804092][ C0] ret_from_fork_asm+0x1a/0x30 [ 510.808918][ C0] [ 510.812225][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 510.818575][ C0] CPU: 0 UID: 0 PID: 8769 Comm: syz.4.814 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 510.830500][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 510.840587][ C0] RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0 [ 510.847398][ C0] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 b0 79 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 5b 75 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 40 75 0b [ 510.867624][ C0] RSP: 0018:ffffc9001afcf5a0 EFLAGS: 00000293 [ 510.873735][ C0] RAX: ffffffff81b4d830 RBX: ffff8880b863b040 RCX: ffff88802a0abc00 [ 510.881827][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 510.890178][ C0] RBP: ffffc9001afcf700 R08: ffffffff8f9fdff7 R09: 1ffffffff1f3fbfe [ 510.898276][ C0] R10: dffffc0000000000 R11: fffffbfff1f3fbff R12: 1ffff110170e7f2d [ 510.906290][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b873f968 [ 510.914302][ C0] FS: 0000000000000000(0000) GS:ffff888125c84000(0000) knlGS:0000000000000000 [ 510.923505][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 510.930135][ C0] CR2: 0000001b2f71fffc CR3: 000000000df38000 CR4: 00000000003526f0 [ 510.938241][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 510.946249][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 510.954433][ C0] Call Trace: [ 510.957923][ C0] [ 510.960903][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 510.967390][ C0] ? __kernel_text_address+0xd/0x40 [ 510.972635][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 510.978836][ C0] ? rcu_is_watching+0x15/0xb0 [ 510.983652][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 510.988891][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 510.994066][ C0] flush_tlb_mm_range+0x6b1/0x12c0 [ 510.999236][ C0] ? free_pgd_range+0x144b/0x14c0 [ 511.004448][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 511.010067][ C0] tlb_flush_mmu+0x1a7/0x680 [ 511.014820][ C0] tlb_finish_mmu+0xc3/0x1d0 [ 511.019456][ C0] ? free_pgd_range+0x144b/0x14c0 [ 511.024533][ C0] free_ldt_pgtables+0x17b/0x320 [ 511.029623][ C0] ? __pfx_free_ldt_pgtables+0x10/0x10 [ 511.035159][ C0] ? down_read+0x1ad/0x2e0 [ 511.039619][ C0] exit_mmap+0x17c/0xb50 [ 511.043997][ C0] ? uprobe_clear_state+0x20f/0x290 [ 511.049251][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 511.054318][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 511.060045][ C0] ? __pfx_exit_aio+0x10/0x10 [ 511.064781][ C0] ? uprobe_clear_state+0x274/0x290 [ 511.070041][ C0] ? mm_update_next_owner+0xa7/0x870 [ 511.075385][ C0] __mmput+0x118/0x420 [ 511.079591][ C0] exit_mm+0x1da/0x2c0 [ 511.083702][ C0] ? __pfx_exit_mm+0x10/0x10 [ 511.088429][ C0] ? rcu_is_watching+0x15/0xb0 [ 511.093247][ C0] do_exit+0x648/0x22e0 [ 511.097545][ C0] ? preempt_schedule_common+0x83/0xd0 [ 511.103137][ C0] ? preempt_schedule+0xae/0xc0 [ 511.108379][ C0] ? __pfx_do_exit+0x10/0x10 [ 511.113468][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 511.118913][ C0] do_group_exit+0x21c/0x2d0 [ 511.123562][ C0] __x64_sys_exit_group+0x3f/0x40 [ 511.128622][ C0] x64_sys_call+0x21ba/0x21c0 [ 511.133364][ C0] do_syscall_64+0xfa/0x3b0 [ 511.137915][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.143157][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.149360][ C0] ? clear_bhb_loop+0x60/0xb0 [ 511.154176][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.160104][ C0] RIP: 0033:0x7fa27e18e929 [ 511.164559][ C0] Code: Unable to access opcode bytes at 0x7fa27e18e8ff. [ 511.171691][ C0] RSP: 002b:00007ffcdba613f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 511.180146][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa27e18e929 [ 511.188155][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 511.196693][ C0] RBP: 00007ffcdba6145c R08: 00000004dba614ef R09: 00000000000927c0 [ 511.204696][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000000a5 [ 511.212697][ C0] R13: 00000000000927c0 R14: 000000000006254e R15: 00007ffcdba614b0 [ 511.220747][ C0] [ 511.229647][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 511.236232][ C0] audit: audit_lost=3753 audit_rate_limit=0 audit_backlog_limit=64 [ 511.244212][ C0] audit: backlog limit exceeded [ 511.249284][ C0] audit: audit_backlog=65 > audit_backlog_limit=64