last executing test programs: 4m6.749587652s ago: executing program 0 (id=373): r0 = gettid() kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$tipc(0x1e, 0x2, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x2, 0x0, 0x4, 0x5, r0}) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "4cb4fc4ba7906e8f58c2052fade1bc2c62cdeb7521cf85ee"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x300}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket(0x1d, 0x2, 0x6) r6 = socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r6, 0x89a0, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010125}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) bind$can_j1939(r5, 0x0, 0x0) epoll_create(0x2) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a3348484bb8df93fe521fe1040f858fb0192fdb61165ae96e54e95f986e1991666a28ea84021377f854fb46b740fc923244159bca8f8f9df6582f8c01dc05733e2e55fc52557ead879afe7c49146aea5741c8105fe87b521f427bf000000000000000000000000000000000000000000000000000000000000004f70139012486588"], 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x2402, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0xb7, "0f5aca8f642619c0288a596e4f8d64f5fab29ad65ab51d04bb4eb73a8055de3f88662dbf770803778ca7c74414d7b1706f15f834c9c1ec484b5ee948ee7a1caf2d8908b58e865c28ed784d1ac94c19432fdf356bad58e8550ac5611ca9dd404838e17b5b51d2e2173c88e66eb6843f272bde1fd082783443aa87bb5a87579dbd434c7dd5610d5ac849ca93ba801e5a9436a07341ce8c4206d71bf3d3121a9d854288549f995d621dac0b2c7781cbfca73b7a604aa24fcb"}, &(0x7f0000000180)=0xbf) 4m5.460397764s ago: executing program 0 (id=379): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYBLOB="e8466c19f44ca948764d305e41a52e520d90fe82863b7be25c06fc4ffa2f34211f924dd002cc51de666f869bbba19790a4698ab6455acb4dc63e33fbdcc9486dab7500f0cfc6bb158bc7e3f3d3", @ANYRESOCT=r4, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r6, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8}) ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, &(0x7f0000000040)={0x28, 0x2, r6, r6, 0x3, 0xfffffffffffffffd, 0x4001}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r7 = eventfd(0x0) fgetxattr(r7, &(0x7f0000000080)=@known='security.selinux\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) 4m3.709083028s ago: executing program 0 (id=383): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r1, &(0x7f00000029c0)=ANY=[@ANYBLOB="b805000000000000", @ANYRES64=r2, @ANYBLOB="0000000000000000020000000000000001800000000000004600000000000000ff000000020000000600000000000000a90f000000000000f9ffffffffffffffff0f00000000000002000000000000000300000000000000040000000000000007ed000000a0000008000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="fd55000001000080000000000000000000000000030000000000000006000000050000007663616e30000000060000000000000000000000000000000500000000000000c0ffffffffffffff030000000002000003000000000000000200000000000000050000000000000001ffffffffffffff0f000000000000000700000000000000ffff00000200000001feffff0030000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05000000184c00000000000000000000000000000100010000000000080000000b000000257042202020200001000000000000000000000000000000ffffffff00000000070000000000000025f40000020000000600000000000000070000000000000002000000000000000f00000000000000fffffffffffffffff9ffffffffffffff02000000080000006194000000e0000007000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="008000000080ff01000000000100000000000000a9d00000000000000a0000005e9a00002f6465762f6375736500000000000000060000000000000002000000000000005f0000000000000004000000000000000400000001000000000000000000000007000000000000000010000000000000f9ffffffffffffff018000000000000000000000000000000008000000000080830b000000c0000001000080", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="8a020000070000000000000005000000000000000400000000000000010000000a000000000000000000000005000000000000000200000000000000080000000000000001800000000000000d00000006000000060000000000000084010000000000008705000000000000008000000000000008000000000000000000000000000000ffffffff0600000010000000002000000b000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="000000800b000000000000000200000000000000080000000000000001000000a200000028000000000000000200000000000000010000000000000009000000000000000600000000000000f8ffffffff7f0000050000000000000001000000000000000c000000000000000a00000000000000060000000000000006000000000000000300000006000000070000000080000008000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0500000003000000000000000300000000000000020000000000000001000000090000002c000000000000000200000000000000010000000000000001040000000000000500000000000000800000000400000005000000000000000404000000000000050000000000000004000000000000000108000000000000ff0000000000000006000000a2d70000ff7f0000004000007f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffff7fc60000000000000004000000000000000100000101000000040000004f0f00005c2d2d2c0000000001000000000000000100000000000000ff07000000000011c50632f9be06e73f12890004000000000000003d0000007f0000000600000000000000070000000000000005000000000000000300000000000000ec590000000000000500000000000000040000006c0f000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="060000004a6a00000000000002000000000000004f0500000000000008000000ff0300006e6c3830323131000500000000000000020000000000000002000000000000009f04000000000000ff7f00006500000005000000000000004abe0000000000000707000000000000b304000000000000000000000000000003000000000000000100010000f8ffff06000000004000003eca4c4b", @ANYRES32=0xee00, @ANYRES32=r4, @ANYBLOB="01000000e262000000000000020000000000000001010000000000000100000003000000ad00000000000000"], 0x5b8) read$msr(r0, &(0x7f0000006900)=""/102400, 0x19000) capget(0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x8, 0x1, 0x7f, 0x1, 0x1}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000001000)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) setreuid(r6, r7) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)="cc0b91cf988b2e7c4ff8a9cb225906982fd335e813c1866c705b138dfab49fbbad1b69e75335746c111e2414c061ac1422d19be8e131df6cdffa335a0b56cbb9f9b1387d087f8766a85775c53787c547499f93f6efd36c5a4231422ed10e308941339162399efe74e32c6d3478", 0x0, 0x83f5, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r5, &(0x7f0000000080), &(0x7f0000000140)=""/241}, 0x20) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@my=0x0}) r9 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000140), r11, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r11}}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r9, 0xab00, r12) r13 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r13, 0xab09, 0x523c8930) ioctl$NBD_DO_IT(r9, 0xab03) 4m2.763838274s ago: executing program 0 (id=387): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x1000}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x1ec1, &(0x7f0000000040)={0x0, 0x1000cba1, 0x8, 0x3, 0x2c0}) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f0000004e80)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891008, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10dc43, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r1, 0x0, 0x1}, 0x18) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000000000010000000000001fcfa02a3888625550f1c34cd7a045ad239969e091caad85414cb128aaec944be7840df050c44d5ae7dd9e75658206a629e8b96a872899041e7b991aea5597a782f520d75e50f4e897831947f9ca95275785e6f5e9481fcdd8b9043c6f48b4b5"]) setresgid(0xee00, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000380)='pvfs2\x00', 0x0) close(0x3) r5 = syz_clone(0x2a8080, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x5) prlimit64(r5, 0x7, 0x0, 0x0) 4m1.251314665s ago: executing program 0 (id=395): bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) write(r3, &(0x7f0000000180)="d03451bad3bdd7dd878240201618839019ee877dd54baf46750a248f6f8dbe8077be270c428cd227faed4eb1a8b259fb23beb8d0bfdef6b3aa20aecbeb5c44a65deac399de8c97fe699869f1126189aaa4d883b6fb4bbd8199950e2ba8e6", 0x5e) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x20060840) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x32, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000380)={0x1f, 0x7}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, &(0x7f0000000200)) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, 0x0) 3m59.971891854s ago: executing program 0 (id=402): mkdir(&(0x7f0000000000)='./file0\x00', 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40810}, 0x4000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc00010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r6, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xdca}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xc5c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x44a}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x3c}}, 0x4c0c1) 3m59.673741826s ago: executing program 32 (id=402): mkdir(&(0x7f0000000000)='./file0\x00', 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40810}, 0x4000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc00010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r6, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xdca}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xc5c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x44a}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x3c}}, 0x4c0c1) 13.447810868s ago: executing program 2 (id=1211): syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd_index=0x3, 0x4, 0x0, 0xfffffffffffffd11, 0x22}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000580)={0xb, 0xe5000000, 0x4, {0x3, @win={{0x3ff, 0xffffff81, 0x9, 0x52ef}, 0x0, 0x5, &(0x7f00000000c0)={{0x3, 0x0, 0x7, 0x9}}, 0x7fff, 0x0, 0x1f}}, 0x4}) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x4e9, 0x958d}) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) pread64(0xffffffffffffffff, &(0x7f0000002180)=""/4101, 0x1005, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c00)={@cgroup, 0x4, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) dup3(r4, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd2547ffbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953582a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56113335ae6adec59300db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06460635ed21c4c11cd1a8ec778064c9f62efba2927828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb1180300"}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x26000894) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13.057900315s ago: executing program 1 (id=1213): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471020216fa"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet6(0xa, 0x3, 0x3c) lsm_get_self_attr(0x65, &(0x7f0000000380)={0x0, 0x0, 0xae, 0x8e, ""/142}, &(0x7f0000000040)=0xae, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="0002020100000000ff0200"/23], 0x18) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000580)='gfs2\x00', 0x3010003, &(0x7f0000000080)='norecovery') 12.953158606s ago: executing program 3 (id=1215): r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0xfffff801, 0x9, 0x8, 0x1000, r3, 0x4, '\x00', 0x0, r3, 0x2, 0x1, 0x2}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000001580)={'binder1\x00'}) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000100)={0x5b, 0xa, 0x0, "93bba551042af768810fa32fa3ccbaf1121823a6dc898168d8b3c3945d8636cf"}) socket$packet(0x11, 0x3, 0x300) r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r9, 0x4020565b, &(0x7f00000000c0)={0x0, 0x1}) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) 9.45175307s ago: executing program 2 (id=1223): r0 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf8f9}}, &(0x7f00000003c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x3, 0xb, 0x0, "e538117b", "667a854e"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x80, 0x9, 0x0, 0x0, 0xffff, 0x5}}}, &(0x7f0000000c00)={0x84, &(0x7f0000000540)={0x0, 0x8, 0x4, 'NuL!'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$cdc_ecm(0x2, 0x7f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x1, 0x0, 0x10, 0x80, [{{0x9, 0x4, 0x0, 0xc8, 0x3, 0x2, 0x6, 0x0, 0xa, {{0x9, 0x24, 0x6, 0x0, 0x0, "19216454"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xfffffff8, 0x340, 0x9, 0xb}, [@country_functional={0xc, 0x24, 0x7, 0xf8, 0x2, [0xa, 0x343, 0x2]}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x93, 0x5, 0xa9}, @mdlm_detail={0x12, 0x24, 0x13, 0x9, "f0dced0f9d253f8f4fea294b5030"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff, 0x5f, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x40, 0x7, 0x80}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x0, 0x1, 0x6, 0x40, 0x8}, 0x1b4, &(0x7f0000000580)={0x5, 0xf, 0x1b4, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0xc, 0x9}, @generic={0xa6, 0x10, 0x1, "413849c1e4d441c126ad06ebe2b4068189f20112c9907c6ee3619686dd8c015fa0749f6d7989c5de3cf83dc1762b62fd33c1432137d3e6a06f82c5e0267d29276241e7eca2844030b85f0aeb8c8449b47a8bb160f066729fa2e9f37dc02de0ffe8ffa6627cfc58254aa947bbdc8de092214df209f2ef73d370158083131c998e077d30b880308c215f119904a5008e4baf202e6dcbaab27504b5ac7a4dcffd865104dd"}, @generic={0xff, 0x10, 0x3, "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"}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x609}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2c0a}}, {0xe4, &(0x7f0000000740)=@string={0xe4, 0x3, "20b77f1fbfc8c5db89ac62db78e3c3f28704efc6ac9a9e36cb9d7dd606aee55a80644d69a03cdaef910f2555ca283cc42a894ceeb79c4848b45921bb27c645864c87fdbad622902d5065ec8bb0df7a4aea2a3fde568af235deac8ae91730db0c305980421817bb1f258e39241ebb10f9117e20093586cf168c6ae3c33023faca113319e491ac0cf38176a1daa4c247b42d2bec2021c900adbc7143c6cfaeb99701d6de139cba28e39676367d36c667c3b28e20e9e84409c79504e4cc80f5e247ab3681ef34b7c1cf9ed953fa41462ebe39b116687d1e16dd9d4334d56171dd6ed0be"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x41d}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000500)={0x14, &(0x7f0000000840)={0x20, 0x23, 0x8e, {0x8e, 0xe, "d2490c198bad4f0f1c1fc4a9fbd7cbce9c9fae840cd18774421790b9c46dc56ad45c8309e5ae6ea4fd08a57226e86d3452ee81b3ccf5e270607ba7c89cf512d2cb81428f26e29d882ab5bf6e3f3da3e272182c973bbf5354554553ed70bdd88606e3c569ea8ae36d030b8dae72ea0a80591879b9e46a7075651a0b935db44d86cea01f608052483d8b010fe1"}}, &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a80)={0x1c, &(0x7f0000000900)={0x20, 0x12, 0xf6, "f95834329d7c4cd54d210cdab9eb42f6dc128dcac5613e6850c59e2fb34c97c599c6bd57a4f2e5fe226421c1d2f45e27d71ca675b9873099ed60eb26d92f4034545d21329883acccf48676d306977112d0c667f6456981c43c3dcf98695835ac068cfc27059227403317c48c83dba4101eb78d5043617c8bf65efb7089bc86f5f939be0452e67eb54a1a1218fc7fb4846d711143ced3ad818f370773ff32d26dc65965aa66484b4119476555343b91f203fdeec32a4c37532c831d744a3a13c66b7dee23e00ad375041bb24b4685e9e15ba92cdd11e85dc9b8284ca9b6a7fd2f1f289f3eebd5c3cfbb476d4c465cac236a479d457dd2"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x8}}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {}, 0x2, 0x4}}, 0x26) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0x10000a, 0x4) ioctl$PPPIOCGL2TPSTATS(r5, 0x8004745a, &(0x7f0000000ac0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r6, 0x1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) sendfile(r6, 0xffffffffffffffff, 0x0, 0xffffffff004) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) 9.191080295s ago: executing program 1 (id=1225): creat(&(0x7f0000000140)='./file0\x00', 0x8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff78818869a6009cd2323030302e75"], 0x15) r1 = dup(r0) write$FUSE_INIT(r1, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x6b, 0x0, 0x0, 0x803}}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYRES32], &(0x7f00000001c0)='GPL\x00', 0x10af39, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r2, 0x0, 0x10000}, 0x18) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x102, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r3, 0x28, 0x2, 0xfffffffffffffffc, &(0x7f0000000040)) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x2c0100, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x16) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000080)='pipefs\x00', 0x2, &(0x7f00000000c0)='${^!%!^-\x06(\xdb&\x94}\\\x00') msgget$private(0x0, 0x181) syz_open_procfs(0x0, &(0x7f0000001200)='attr\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000a2f000/0x1000)=nil, 0x1000, 0x300000f, 0x6, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0x1) 7.798148141s ago: executing program 1 (id=1230): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan0\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r2, &(0x7f0000000480), 0x10) bind$can_raw(r2, &(0x7f0000000180)={0x1d, r3}, 0x10) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x100}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000200)=r5, 0x4) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}, 0xffffffffffffffff, 0x5}}, 0x48) syz_usb_connect(0x3, 0x24, &(0x7f0000001380)={{0x12, 0x1, 0x250, 0x32, 0x31, 0x42, 0x20, 0x8ca, 0x10, 0xd7f0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x4, 0xb0, 0x1, [{{0x9, 0x4, 0x1c, 0x0, 0x0, 0x3c, 0x6f, 0x5c, 0x1}}]}}]}}, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000040)={0x2a, 0xa, 0x0, "32cfd5010000aa022c1e00f4bf40074000000400000000b00400d800", 0x31435750}) close(r1) 7.752896387s ago: executing program 5 (id=1231): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x11, 0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffd50}}, 0x20) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = inotify_init1(0x80000) inotify_add_watch(r5, &(0x7f0000000480)='./file0\x00', 0x2000040) inotify_add_watch(r5, &(0x7f00000001c0)='./file0\x00', 0x60000100) syz_open_dev$sg(&(0x7f0000000280), 0x80000000002, 0x1) timer_create(0x3, &(0x7f0000000180)={0x0, 0x3d, 0x2, @tid=r2}, &(0x7f00000002c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x40000002, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf090000000000005509010000000000950000000000000007000000000000004500f4fffcffffff18000000060000040000000009000000bf91200000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) 7.009695013s ago: executing program 3 (id=1232): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x50) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000440)=0x14) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000480), 0x40002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0xae6, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x60, 0x2, 0xe, 0x400, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3, 0x4}, 0x50) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200000005000000000000000000fd29e77700000000000024188b125b7955535dfbfd58b64e4591c71baf1324"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={0x1, 0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x4, 0x6, 0x2, 0x10, 0xa80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x13, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0xb}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', r1, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x5, 0x200d, 0x10000, 0x941}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[r4, r6, r6, r2, 0x1], 0x0, 0x10, 0x9}, 0x94) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x33, &(0x7f0000000040)=0x8000, 0x4) sendto$inet6(r8, &(0x7f0000000140)="6f3a6736a39eed5463b781708e9690fe2257a7922502eee9f40eb26c663977fc5303d1904731e1f9dca50bd33bf86a4d665afa92d4566a460581d26ff47bc5ffcbb393fc99b749435b1f712d8f2be30d08012fc6c26e835ab0d4b1968f22f42ac427d192da0c5f454b6efa0b50d07a168110698b449d3d669aeaef7fed896a39ccd3c66fd8661598e6ce1182", 0x8c, 0x8, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff7}, 0x1c) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r8, &(0x7f0000005180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004840)=""/29, 0x1d}, 0x5}], 0x1, 0x40010023, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b80)={0x61bd, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x13, 0x28, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x1, 0x2, 0x1, 0x4, 0x5, 0xfffffffffffffff4, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000009c0)='syzkaller\x00', 0x0, 0xf2, &(0x7f0000000a00)=""/242, 0x40f00, 0x10, '\x00', r1, @fallback=0x16, r7, 0x8, &(0x7f0000000b00)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000b40)={0x2, 0xa, 0x40, 0x3}, 0x10, r9, r3, 0x4, 0x0, &(0x7f0000000bc0)=[{0x4, 0x8, 0x7, 0x8}, {0x4, 0x5, 0xb, 0xb}, {0x2, 0x5, 0xd, 0xb}, {0x0, 0x5, 0x4, 0xa}], 0x10, 0x1}, 0x94) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) timer_settime(0x0, 0x1, 0x0, 0x0) r11 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r11, &(0x7f00000051c0)={0x2020}, 0x2020) writev(r11, &(0x7f0000001500)=[{&(0x7f0000000400)='8', 0x1}], 0x1) setsockopt$inet6_int(r8, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, 0x0, 0x0) 5.929557606s ago: executing program 2 (id=1235): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471020216fa"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet6(0xa, 0x3, 0x3c) lsm_get_self_attr(0x65, &(0x7f0000000380)={0x0, 0x0, 0xae, 0x8e, ""/142}, &(0x7f0000000040)=0xae, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="0002020100000000ff0200"/23], 0x18) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000580)='gfs2\x00', 0x3010003, &(0x7f0000000080)='norecovery') 5.77063022s ago: executing program 3 (id=1236): socket(0x1d, 0x2, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), 0x0, 0x0, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028005000100000000002c0001801400030000000000000000000000ffffac1414bb1400040000000000000000000000ffff000000003c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aab5fb91a4fc73b36849c8a9be678e5df8b0291c0d"], 0xc8}}, 0x0) 5.045750249s ago: executing program 5 (id=1237): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) fsopen(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x3a, 0x20, 0x14, 0x18, 0x9, 0x1063, 0x4, 0xf5, 0x1}) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) write$cgroup_int(r2, &(0x7f0000000040)=0x900, 0x12) socket(0x1e, 0x1, 0x0) 5.039772254s ago: executing program 1 (id=1238): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf2501000000080002000200000208000100"], 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0xd, 0x0, "50e482af8a3b3953d7d2ddcb6f6d7fcfdcef78b3bb7ca71d37000667e0b8dd3a89446b047612340f273410ad622d1d1d1e8e3d5d07cb37da86503ff8eadd32f0fc9a56bcd7a401a991c216437633b722"}, 0xd8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x1}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 4.81091145s ago: executing program 3 (id=1239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c0002"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 4.205432915s ago: executing program 3 (id=1240): syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd_index=0x3, 0x4, 0x0, 0xfffffffffffffd11, 0x22}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000580)={0xb, 0xe5000000, 0x4, {0x3, @win={{0x3ff, 0xffffff81, 0x9, 0x52ef}, 0x0, 0x5, &(0x7f00000000c0)={{0x3, 0x0, 0x7, 0x9}}, 0x7fff, 0x0, 0x1f}}, 0x4}) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x4e9, 0x958d}) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) pread64(0xffffffffffffffff, &(0x7f0000002180)=""/4101, 0x1005, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c00)={@cgroup, 0x4, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) dup3(r4, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x26000894) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.092635629s ago: executing program 5 (id=1241): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), 0x0}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYBLOB="e8466c19f44ca948764d305e41a52e520d90fe82863b7be25c06fc4ffa2f34211f924dd002cc51de666f869bbba19790a4698ab6455acb4dc63e33fbdcc9486dab7500f0cfc6bb158bc7e3f3d3", @ANYRESOCT=r4, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r6, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8}) ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, &(0x7f0000000040)={0x28, 0x2, r6, r6, 0x3, 0xfffffffffffffffd, 0x4001}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r7 = eventfd(0x0) fgetxattr(r7, &(0x7f0000000080)=@known='security.selinux\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) 3.40117953s ago: executing program 1 (id=1242): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=0xb700) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@dev, @in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x1, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r6}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x80702) r9 = dup2(r8, r8) ioctl$DRM_IOCTL_WAIT_VBLANK(r9, 0xc018643a, &(0x7f0000000000)={0x10000000, 0x0, 0xfffffffffffffffe}) r10 = openat$urandom(0xffffffffffffff9c, &(0x7f0000012bc0), 0xa0000, 0x0) ioctl$RNDGETENTCNT(r10, 0x80045200, &(0x7f0000012c00)) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x2c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}]}]}, 0xc0}}, 0x0) 3.169065666s ago: executing program 3 (id=1243): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) mount$afs(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) r3 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x33f8, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x708, 0x41e3, 0x0, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r6 = inotify_init1(0x0) inotify_add_watch(r6, 0x0, 0x40000000) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000280)={0x1, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e23, @loopback}}}, 0x108) socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x3, 0x23, 0x1, {0x22, 0xe18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x22, 0xcf, 0x2}}}}}]}}]}}, &(0x7f0000000880)={0x0, 0x0, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="05d5cadf26d9edfb88360f0f0004071002fb8d8a9b3ce02680810c03833c945d00f6e68257da020f"], 0x7, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x6d, &(0x7f0000000580)=ANY=[@ANYBLOB="6d037857f93c0f816785b7264f3b15066ac4eb7ad30032a3f14bad6b38cec9e09d6b21c4fb9f5bca04d234ffbc17f2a3db707c4d500cc8ef33efbd0c3c7cfb7d959a7f183015d82a222ad5c0a07ba032d1cf1fe8c3f9caca18f354afb1d040a81fc8113bc50000000000000000"]}, {0x0, 0x0}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x1007}}]}) syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000600)=ANY=[@ANYBLOB="4006bc"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 3.14411024s ago: executing program 4 (id=1244): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(r0, &(0x7f0000001300), 0x8f) recvmmsg(r0, 0x0, 0x0, 0x40000002, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000a40)}, {0x0}, {0x0}], 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) 2.582353384s ago: executing program 5 (id=1245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e24, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100000000000000e9ff000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdbb, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r4}, 0x10) kexec_load(0xff0f, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) utimes(0x0, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e21, 0x4, @empty, 0x3}}}, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r3, 0x40, 0xfff}, 0xc) rseq(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x40000082}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r7, 0x4068aea3, &(0x7f0000000000)) r8 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.567652795s ago: executing program 4 (id=1246): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x5, 0x25}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0x403, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, 0x0) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.535604828s ago: executing program 2 (id=1247): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = getpid() io_uring_setup(0x30a7, &(0x7f0000000000)={0x0, 0xdb3b, 0x2000, 0x2, 0x373}) r2 = syz_pidfd_open(r1, 0x0) open_by_handle_at(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe0000"], 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) statx(0xffffffffffffffff, &(0x7f0000000980)='./bus\x00', 0x0, 0x800, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000009c0)=0x0) read$FUSE(0xffffffffffffffff, &(0x7f000001d000)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getresgid(&(0x7f0000000b40), &(0x7f0000000b80)=0x0, &(0x7f0000000bc0)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000f40)={0x68, 0x1, {r1}, {0x0}, 0x5, 0x1ff}) r8 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r9, 0x0, r9) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000001080)={{{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) stat(&(0x7f00000011c0)='./file2\x00', &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000001b000)="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", 0x2000, &(0x7f00000013c0)={&(0x7f0000000480)={0x50, 0x0, 0x9, {0x7, 0x2b, 0xbc5e, 0x8c0000, 0x2, 0x7fff, 0x4, 0x3, 0x0, 0x0, 0x20}}, &(0x7f0000000300)={0x18, 0xfffffffffffffff5, 0x4, {0xf}}, &(0x7f0000000500)={0x18, 0x0, 0xe8f, {0x4}}, &(0x7f0000000540)={0x18, 0xfffffffffffffff5, 0x9, {0xffffffff}}, &(0x7f0000000580)={0x18, 0x0, 0xc, {0x6}}, &(0x7f0000000600)={0x28, 0xfffffffffffffff5, 0xa, {{0xfffffffffffffffa, 0x9, 0x795e43847f07af33}}}, &(0x7f0000000640)={0x60, 0x0, 0x100, {{0x80, 0xe, 0x0, 0x8, 0x8000000000000000, 0x3, 0xfffffffe, 0x100}}}, &(0x7f00000006c0)={0x18, 0x0, 0xb, {0xb0}}, &(0x7f0000000280)=ANY=[@ANYBLOB="1200000d89a335a26e01839dab0000010000020000000000df000000cc61b7a4"], &(0x7f0000000740)={0x20, 0x2f, 0x8}, &(0x7f0000000780)={0x78, 0xfffffffffffffff5, 0xef, {0x3, 0x9, 0x0, {0x5, 0x3, 0x5f74, 0x235fcbe3, 0xc, 0x9, 0x5, 0x1, 0x4, 0x4000, 0x8, 0x0, 0xffffffffffffffff, 0x6, 0x6}}}, &(0x7f0000000800)={0x90, 0x0, 0x6, {0x1, 0x0, 0x0, 0xdba, 0xfffff1dc, 0x8000, {0x0, 0x6, 0x3, 0x8, 0x2, 0x56, 0x6a, 0x5, 0x1, 0x6000, 0x1, 0x0, 0x0, 0x4, 0x7}}}, &(0x7f00000008c0)=ANY=[@ANYBLOB="30000000000000005b000000000000edac000000000000002f47032800000000010000000300"/48], &(0x7f0000000c00)=ANY=[@ANYBLOB="280300000000000001800000000000000300000000000000020000000000000047efe32e00000000040000000000000001010000400000000500000000000000540000000000000040c8000000000000090000000000000007000000000000009900000000000000b0000000fcffffff0003000000100000160e0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffff00000fe2ffff0000000004000000000000000000005e2c000000000006000000000000000200000000000000080000000000000001040000000000000200000032b10000030000ecffffff0016510000000000000800009a0daa6900abc7ffffffffffff80000000000000000100010000000000010000800100000001000008001000000300"/152, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0e000000d7ffffff000000000600000000000000020000000000000002000000000000802426000000000000000000000000000000000000000000000200000000000000060000000000000000000010030000000600000000000000080000000000000008000000000000001503000000000000010000000000000044660b350000000009000000050000000400000000600000feffffff", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="feffffff7f00000000000000060000000000000001000100000000000000000002000000030000000000000002000000000000000700000000000000d900000000000000199d8e25cabeabfa2a3c81289cfeffffffeb0800000600000000000000090000000000000000040000000000000800000000000000d700000000000000dd04000000000000ff0f0000090000", @ANYRES32=r4, @ANYRES8=r11, @ANYBLOB="07000000020000000000000000000000000000000400000000000000020000000700000028230000000000000300000000000000030000000000000000040000000000008000000000000000030000000f0000000400000000000000080000000000000004000000000000000c0000000000000003000000000000000100000000000000271b00007fffffff0900000000800000f8ffffff", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="060000000000ffff000000000400000000000000070000000000000008000000010000006b657972696e6700"], &(0x7f0000000f80)={0xa0, 0xfffffffffffffffe, 0x5, {{0x5, 0x0, 0x7fffffffffffffff, 0xd8ae, 0x1, 0x50bc, {0x2, 0xe1e9, 0x4, 0x1ff, 0x0, 0x401, 0x3000, 0x2, 0x9, 0x1000, 0xab1f, r7, r9, 0x6, 0x2}}, {0x0, 0x10}}}, &(0x7f0000001040)={0x20, 0xffffffffffffffda, 0x4, {0xf875, 0x4, 0x200, 0x8}}, &(0x7f0000001280)={0x130, 0x0, 0x8, {0x6, 0x8, 0x0, '\x00', {0x1, 0xf, 0x7f, 0x1, r10, r11, 0x1000, '\x00', 0x40, 0xe4, 0x4, 0x6be, {0xb, 0x7}, {0x8, 0xdf7b}, {0x0, 0x1}, {0x4, 0x15ca}, 0x6, 0x8, 0x4, 0xfffffffa}}}}) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) 2.4202687s ago: executing program 4 (id=1248): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) (async) r3 = getpgrp(0xffffffffffffffff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0xf, 0x3, 0x3, 0x0, 0x9, 0x0}) (async) r5 = getpid() fcntl$getownex(r1, 0x10, &(0x7f0000000280)={0x0, 0x0}) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x4, 0xffff, 0x4, 0x4, 0xe, 0x0}) (async) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) r9 = syz_clone3(&(0x7f00000003c0)={0x10000000, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), {0x2}, &(0x7f0000000140)=""/120, 0x78, &(0x7f00000001c0)=""/57, &(0x7f0000000340)=[r3, 0x0, r4, r5, r6, r7], 0x6, {r8}}, 0x58) r11 = syz_io_uring_complete(0x0) ioctl$BLKTRACESTART(r11, 0x1274, 0x0) (async) ioctl$BLKGETSIZE(r11, 0x1260, &(0x7f0000000440)) (async) connect$rose(r11, &(0x7f0000000480)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r11, 0x84, 0x2, &(0x7f00000004c0)={0x8, 0x9, 0x3214, 0x6}, 0x8) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000006c0)={&(0x7f0000000500)="7457d840968faad6f02ee0d4651b32c6762f12c7aea5abc2149b0669df687dc50b3b6f2cef28b144ded0867711288f27784c219bea3f72762541e21a7a35f902774868f819cae2fbb729b00079143051559992c3ff78b7b0f39977d45e2acced457115821593c0795b0305cf6ec4c5d0752b4f0820d03ac7e249c599e5ebd2d6efbbf0370680ff6149b9031ddc76ca26bf8d7a781b47c4fcb0c10538ace195cfdac0d90c501c6629cd7968a2955984dc95930a0d7c10ec9ea15e0fefb2770bc8bd3c3c976df5", &(0x7f0000000600)=""/52, &(0x7f0000000640)="db46cf05cd7c75", &(0x7f0000000680)="b3757426a7805d5eeebbe16f5a", 0x3, r11, 0x4}, 0x38) (async) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x4100) fcntl$addseals(r12, 0x409, 0x0) (async) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000840)={@map=r11, 0x4, 0x1, 0x8, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000780)=[0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0]}, 0x40) (async) ioctl$FS_IOC_MEASURE_VERITY(r13, 0xc0046686, &(0x7f0000000880)={0x6dcac79319565e1e, 0xa1, "bc8fac84b692dbd35a0845e94d4dfb4fc26947198a3ac6a3b596efc20ed4e968cedbce47f6fc1c8b11121816060e7990c165502ae0e4d535f243207435efaad8e80b76bdaca95748530713a4096e0cd6c460837c757c5a07f10e6a3e3e7213093109eded98597360158575ea7e501626bdc122130559c4dc6a9f61cd1927468bc9bd6ba00cf3d0d9aded642e2c951a47e6f519b67a15f46cecfc13ec5e0bf911d9"}) r14 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000980), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000b80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f00000009c0)={0x164, r14, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x7c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7975}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7543210f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1d88}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35a02070}]}, {0x4}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3521}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x91e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x277ee60e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60eb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd733}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19532eeb}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb809}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8e1f8e1}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x206a1ee3}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x7c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc64a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3894b9ab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5f83}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x95f2}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3cbc03}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb69d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2913}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c1d586a}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd918}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4733a78b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe2a25d7}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xadda}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8c06}]}]}]}, 0x164}}, 0x844) (async) r15 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c00), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x3c, r15, 0x20, 0x70bd2b, 0x6, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}]}, 0x3c}}, 0x4000000) (async) r16 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d00)='/proc/mdstat\x00', 0x0, 0x0) (async) r17 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r17, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000d80)=0x14) (async) ioctl$F2FS_IOC_SET_PIN_FILE(r8, 0x4004f50d, &(0x7f0000000dc0)=0x1) sendmmsg$unix(r11, &(0x7f0000004d80)=[{{&(0x7f0000000e00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002080)=[{&(0x7f0000000e80)="e417efde76b89b7a31e49c287b80bcaf2e6bed0b6ea1360c5597b6cb4c2abc1cc3280befdb5245ba", 0x28}, {&(0x7f0000000ec0)="9cfa77f8637106f747529a702fc3082e56e93cd050efbb73e501d4dc3f3a73c01e17e3cf4bf069389eb80809508a5ba539e593158afdbbfcd52e3c391936b49b2d6dc022238c9d9146423ed2c670418107ed200711e91cf605944f2aa60784e90c52e55b19b8cc084a56d5c8", 0x6c}, {&(0x7f0000000f40)="eff374ddf673d6364ae1dffb74cb5b1ba27fef3af587293347ded70fa32b24aa09bde6ac554d9a01f40a90f1a312c37b77dff21207", 0x35}, {&(0x7f0000000f80)="93961f497ce6a43a686cd3937cff309f5031b991cc4f68228b64a1689ec975bed05183cadfb8bed4cec25576df4242b54f93e4fb4143d2e9252d9e65573a2febf757c582568530fe318c2ad52a8813cfd8a43dc2e88765e067d02bcf4a7b", 0x5e}, {&(0x7f0000001000)="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", 0x1000}, {&(0x7f0000002000)="8e75d3c80b90fb26c93cdf522cfd40fa6850632c3556c5092a02c2236cee565031f01e51f18a6c29d6f834819a65e4833b2087452e9b96b6ac866ce2bff8428771a960dd7eecc057d46a9abb78edef4605d9c213fd2420669166a346ac9f54970b0ef54227fe22abc0dbc7d66e11ba4572e2ea9ddbee68f4d135426fb3", 0x7d}], 0x6, 0x0, 0x0, 0x8000}}, {{&(0x7f0000002100)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002180)}, {&(0x7f00000021c0)="32d9211f823ad33ebd22011d4ff4c98aa3d1d20358b6706c9a287492c8f632a496e1624850892f5b4188b4a91aace1d881111f8be57e4e0330d578dc06021decf641ec81bc6676a6f8388bd851edb646e119ad97eca05054d3de4067eeaa4172707a8520b068d3b6e31c37bd00f45046b006518d40428f2741fe9963d43dd29388025af3eaa7d4350780c03f9ef941cc343d59e6b3f466706f77ffd0a5c93aedc91e4f11172b62836ef8c50e71932ab624adc434a146c26458fba92af5cb4efaa0aea9c3cf57cf9a7b5264fb350edd632a79448d4231478df0ba80ea33bf0ec70c61c63b358d8fe204f38d8b5c9b2194596861b3", 0xf4}, {&(0x7f00000022c0)="a88a2f009a3594482caaa8d3c1c639790c837d48fea7ed5bfbd1bdd6e858ae3514e0e729e4b2c6f9323c500e24d5f62d6462b70c2b7e61417162f115fe17a8341865ba8153cf020477de1238eadcedf754d923c577e080815129ea598a804ccf75a5f703d5dc43d0f7028cc55d", 0x6d}, {&(0x7f0000002340)="b5d7e3d156d469bffeb14acac87ff9ad1255d403e518ba2236bbe0587b869533e78576afda9886ed0b986fe13835d6611ee36ef1d10ffa42ce71546b52014b95d2d4d6c4194f626aadd4666e6ad59f99c14244f20a3fced955b1aa457c5d1fd43838200739251b958adaf3daa704cac01ffda788bac13f39e0", 0x79}], 0x4, &(0x7f0000004880)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x30, 0x1, 0x1, [r16, r12, r11, 0xffffffffffffffff, 0xffffffffffffffff, r12, r13, r12]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x38, 0x1, 0x1, [r13, r0, 0xffffffffffffffff, r12, r10, r12, r0, 0xffffffffffffffff, r17, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r9}}}, @rights={{0x14, 0x1, 0x1, [r12]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x100, 0x10}}, {{&(0x7f0000004980)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000004d00)=[{&(0x7f0000004a00)="862cc4ac038e2c31fd5d3aa7ab259832b1c95edd787153443f738f84ea9225a197d11e83f8d8807b51c2a45ee60b662d052c43eceb615481dbaea7e306e786d27adf8d0f38f5ca4c9f1e7969470960a91332e8d883d5c576fcb9ca65ae0dc9550387193fcb8f996f80e6c3c11cb81a2bd96f9bb80d75b46d6e55b4cefdf11440c60dabd5f17794b35691cadf9a88d3d54750cc7e0d0cc818094e527ed34fbd621aba9bade0c5878325cfede72689f1881b67794eb2871c096e21f77e8e3a287820fc7c4f1f00b9308a26bce8f563af6d6bc196e3016607b9a23f634953a256fc24fb162bb83e", 0xe6}, {&(0x7f0000004b00)="6ad4fdfa6cf7e8dd446bbe4646f1e9aec6970fbac2f8ca4bb2cb38d10d346e9ce60e41d38d8c84efe79dee9c1c0ed4eca290cc57272209dbecad048a20f5d1ee3efe9dc6d1a84a34ce926d78a6477ee8559f2f4d7dc16dbae541c9585a1ea6c85e972f5484bbeb2f0721692f2b9f58efcc5b7ef4faf88af085341c3b0dd02ee2717c552dc8d0a060c85f13a4dfd00d134cd13ab41747939b2065ae63d1fc7b281772121b1d8785b17d8d701e1d67be25dd144012d0e7db7215f7dcf0f87be93b5aa996a15ade7ba6ca6717380e328efa725259fa440c800f41599c54", 0xdc}, {&(0x7f0000004c00)="b4be0156983b5def4989affa0e3af28efd170b680558c7b2b4f83003009c16fe9cd9d0f33f74982879e684e8619cfbf31b84dd995eaeac3707a3d82032fa3835672a61d2a61d589944614d0c05ba82255a0000faf992dbc0e6eb23b51d56f6ae794ed07e2047dd00a1d20dc48eca2ab1fadae89603654ec66b540180dc251d66e69f7ba4dc4f5c1e7482ecae4513b4f202778f6d11526a4118f3b325f85b5d9cb5297306a38c2ca9534e63ad8d8e520fa172f566e8526a68727f4c57ec255b22d0b8aab8461a454cc0de0c500fb752d729d0fb78f9a1", 0xd6}], 0x3, &(0x7f0000004d40)=[@rights={{0x20, 0x1, 0x1, [r17, r13, r17, r1]}}], 0x20}}], 0x3, 0x8010) 2.258782952s ago: executing program 1 (id=1249): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='xen_cpu_write_gdt_entry\x00', r1, 0x0, 0x4}, 0x18) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000800)=[{{&(0x7f0000000740)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000700)=[{&(0x7f00000001c0)="ec2024a3194d23ac74", 0x9}, {&(0x7f00000005c0)="1e5c6f7d425a8d47d148baef662d7f743ac1e51eb57936e821b307283877f0bd04afc5d52ebf06843114d23256caf66bde69eb5d16f6b59baf9a8af70d03a86d0e76819a3350a8a267dd9c5a66078be4c3a04b5f31a0f3849176f3ec27eff1050bbcbd2e2a68850e91681c7f3e6a831142c6f82b0bb09a4b99605d2c5c5e5949d73e7d31a3b37ed67dd83b00d0c8cda95e80c64ccced6a3fe56a500688e010ee804d6426ceaf41c91b745f6e6c90675bbcebe59b208ab5a67598744924cb49c34bc6cd0b3a6a5c937fbdcdca10eebcd2c5d548886b589859", 0xd8}, {&(0x7f0000000440)="8ce42157c9c3927cda68da2b1389451bb0e7daceb477", 0x16}, {&(0x7f00000006c0)}], 0x4, &(0x7f0000000840)=[@rights={{0x2c, 0x1, 0x1, [r2, 0xffffffffffffffff, r5, r0, r1, 0xffffffffffffffff, r4]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x28, 0x1, 0x1, [r6, r1, r7, r6, r5, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r6, 0xffffffffffffffff, r5, 0xffffffffffffffff]}}], 0x90, 0x2404c014}}], 0x1, 0x4) pipe(&(0x7f0000000080)) listen(0xffffffffffffffff, 0xeb) kexec_load(0x7, 0x1, &(0x7f0000003200)=[{0x0, 0x0, 0x8000, 0x7fff}], 0x3e0000) prlimit64(0x0, 0x9, &(0x7f0000000140)={0x10, 0x100}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214180000020a010100000000000000000000000a140000001100010000000000000000000000000a"], 0x70}}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020f08000700000002000000fedbdf2505000500000000000a004e200000008e00000000000000000000ffffac1414190900000000000000"], 0x38}}, 0x0) kexec_load(0x908, 0x5, &(0x7f0000001a40)=[{&(0x7f0000000900)="16bfc80a48d3b395f4431172bbf0ab6a5fd16ab952b9344e40d6c64d1895d6f3cb48dde1bfec17b88479cc93bce4a360eae67896cbd2bf7d922ee43af1bc65e4971cc716f327a3bea9da2a28a20ae60883c55ff59a28746aa5131ce13d4f921f14712dbf10584aecde1b2568d189823c17a6049bed7db41b7ca8e383475ef0987d5289622d78c464fdd043b8810d1dda17963771ddae670ce586a822", 0x9c, 0x6, 0x3}, {&(0x7f0000000540)="b69c1b4c779d5e227acc6f028848d5168245b047a8acb9623de7ed531c9ebb4d2cafc45ba89f6bbd72b90bb9e1d95dbf3a17b6e3175fc6211187f17cf90fd6d23ce2b02919b4", 0x46, 0xffff, 0x4b3}, {&(0x7f00000006c0)="2c975dd89049612b8e2834ad98b7a243", 0x10, 0x9, 0x8001}, {&(0x7f00000009c0)="3fa85bea4fca22714233c923cf8e3bec1cc7d6a00f3fa84b4d505472746f5f68b3479a49d6825bc2ba961c82c959fcf0745b18f96355e99226e2e476837f23b293fba340b442dcecdabb7f3d2e388ff749187ba5a8598cdea6ea26ff63", 0x5d, 0x6000000000000000, 0x9}, {&(0x7f0000000a40)="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", 0x1000, 0xffffffff}], 0x1) open$dir(0x0, 0x685936cdd5edce18, 0x1aa) 1.935243083s ago: executing program 4 (id=1250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c0002800800"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1.930040456s ago: executing program 4 (id=1251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0xff}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}]}, 0x44}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x181002, 0x0) r5 = syz_open_procfs(r0, &(0x7f00000002c0)='net/psched\x00') getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x7, 0x4}, &(0x7f0000000400)=0x90) setsockopt$inet_sctp_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000440)={r6, 0x1, 0x13, "c839a30f95e863e44a7e933b5652abd12c25de"}, 0x1b) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) accept(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r8, 0x7a5, &(0x7f0000000100)={{@local, 0x1}, 0x1, 0x0, 0x9}) ioctl$KVM_CAP_EXIT_HYPERCALL(r7, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r9 = eventfd(0x0) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000000)={r9, 0x0, 0x0, r9}) 1.69657771s ago: executing program 2 (id=1252): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf2501000000080002000200000208000100"], 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0xd, 0x0, "50e482af8a3b3953d7d2ddcb6f6d7fcfdcef78b3bb7ca71d37000667e0b8dd3a89446b047612340f273410ad622d1d1d1e8e3d5d07cb37da86503ff8eadd32f0fc9a56bcd7a401a991c216437633b722"}, 0xd8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x1}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 1.165415543s ago: executing program 5 (id=1253): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6076b2af00062f00fc000004cba1414ec4b4b50000000000ff0200000000000000000000000000010000883e"], 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=@hopopts={0x62}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r5 = socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x148, 0x6, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x120, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xc8}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x98}, @NFTA_HASH_TYPE={0x8}, @NFTA_HASH_TYPE={0x8}, @NFTA_HASH_OFFSET={0x8}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x25}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0xc0, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xb0, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'tos\x00'}, @NFTA_MATCH_NAME={0xd, 0x1, 'addrtype\x00'}, @NFTA_MATCH_INFO={0x1e, 0x3, "657432a38ba93a2b1f213f511661add8a25cb9a009e8a998f70a"}, @NFTA_MATCH_NAME={0xc, 0x1, 'iprange\x00'}, @NFTA_MATCH_NAME={0xb, 0x1, 'string\x00'}, @NFTA_MATCH_INFO={0x36, 0x3, "c9c67bd48eabd071d54f917e31d7a00f6c8e14f16bdc7b85e1e0805a9acedb53bb906d9d3195a667e9b6a118fe0e3c508e12"}, @NFTA_MATCH_NAME={0xe, 0x1, 'statistic\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_NAME={0xc, 0x1, 'rateest\x00'}]}}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1ac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(r7) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) 559.926647ms ago: executing program 4 (id=1254): sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r1, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @empty}, 0x1, 0x3, 0x4, 0x1}}, 0x2e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, @xdp={0x2c, 0xa, 0x0, 0x5}, @l2={0x1f, 0xfc7f, @none, 0x8, 0x2}, @qipcrtr={0x2a, 0x3, 0x4001}, 0xffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9}) r5 = openat$mice(0xffffffffffffff9c, 0x0, 0x500) syz_init_net_socket$ax25(0x3, 0x2, 0xcf) syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), r5) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xee00, 0xee01}}, './file0\x00'}) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f00000003c0)={0x9e0000, 0x3, 0x100, r6, 0x0, &(0x7f0000000380)={0x980929, 0x9f5, '\x00', @string=&(0x7f0000000340)}}) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x2, 0x10000, 0x4, 0x4, 0x0, 0x8, 0x7, 0xa, 0x0, 0x4, 0x1, 0x1, 0x800, 0x6, 0xb4c, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x1, 0x0, 0xfffffff8]}) syz_open_dev$hiddev(&(0x7f0000000440), 0x80000001, 0x4b2200) ioctl$COMEDI_SUBDINFO(r4, 0x80486402, &(0x7f0000000000)) 224.526822ms ago: executing program 5 (id=1255): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), 0x0}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYBLOB="e8466c19f44ca948764d305e41a52e520d90fe82863b7be25c06fc4ffa2f34211f924dd002cc51de666f869bbba19790a4698ab6455acb4dc63e33fbdcc9486dab7500f0cfc6bb158bc7e3f3d3", @ANYRESOCT=r4, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r6, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8}) ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, &(0x7f0000000040)={0x28, 0x2, r6, r6, 0x3, 0xfffffffffffffffd, 0x4001}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r7 = eventfd(0x0) fgetxattr(r7, &(0x7f0000000080)=@known='security.selinux\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) 0s ago: executing program 2 (id=1256): r0 = socket$pptp(0x18, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x2, [0x0, 0x0]}, &(0x7f0000000100)=0xc) fsetxattr$security_ima(r1, &(0x7f0000000000), &(0x7f0000000080)=@v2={0x3, 0x3, 0x2, 0x10001}, 0x9, 0x2) accept(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): .831371][ T5848] usb 6-1: config 0 descriptor?? [ 285.424985][ T9] usb 2-1: config 0 descriptor?? [ 285.448613][ T9] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 285.473938][ T30] audit: type=1326 audit(1754363436.810:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8888 comm="syz.3.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684598eb69 code=0x7fc00000 [ 285.523737][ T30] audit: type=1326 audit(1754363436.810:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8888 comm="syz.3.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f684598d4d0 code=0x7fc00000 [ 285.560143][ T30] audit: type=1326 audit(1754363436.810:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8888 comm="syz.3.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684598eb69 code=0x7fc00000 [ 285.590613][ T975] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 285.603539][ T30] audit: type=1326 audit(1754363436.810:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8888 comm="syz.3.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684598eb69 code=0x7fc00000 [ 285.627739][ T30] audit: type=1326 audit(1754363436.810:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8888 comm="syz.3.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684598eb69 code=0x7fc00000 [ 285.654330][ T30] audit: type=1326 audit(1754363436.810:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8888 comm="syz.3.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684598eb69 code=0x7fc00000 [ 285.768813][ T975] usb 3-1: config 0 has an invalid interface number: 73 but max is 0 [ 285.804025][ T8885] netlink: 32 bytes leftover after parsing attributes in process `syz.1.721'. [ 285.804343][ T30] audit: type=1326 audit(1754363436.810:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8888 comm="syz.3.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684598eb69 code=0x7fc00000 [ 285.817709][ T975] usb 3-1: config 0 has no interface number 0 [ 285.836235][ C0] vkms_vblank_simulate: vblank timer overrun [ 285.840742][ T8908] tipc: Started in network mode [ 285.846591][ T8887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.006399][ T8908] tipc: Node identity 48, cluster identity 4711 [ 286.025745][ T8908] tipc: Node number set to 72 [ 286.029257][ T975] usb 3-1: config 0 interface 73 has no altsetting 0 [ 286.087624][ T975] usb 3-1: New USB device found, idVendor=19d2, idProduct=ff44, bcdDevice=8c.9c [ 286.096918][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.105049][ T975] usb 3-1: Product: syz [ 286.109421][ T975] usb 3-1: Manufacturer: syz [ 286.114176][ T975] usb 3-1: SerialNumber: syz [ 286.144812][ T975] usb 3-1: config 0 descriptor?? [ 286.175704][ T8887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.190269][ T975] option 3-1:0.73: GSM modem (1-port) converter detected [ 286.339754][ T8885] tipc: Enabled bearer , priority 24 [ 286.397531][ T975] usb 2-1: USB disconnect, device number 24 [ 286.443826][ T8887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.447094][ T30] audit: type=1326 audit(1754363436.810:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8888 comm="syz.3.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684598eb69 code=0x7fc00000 [ 286.480630][ T30] audit: type=1326 audit(1754363436.810:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8888 comm="syz.3.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684598eb69 code=0x7fc00000 [ 286.506550][ T30] audit: type=1326 audit(1754363436.810:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8888 comm="syz.3.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684598eb69 code=0x7fc00000 [ 286.530612][ T8887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.539856][ T8887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.559327][ T8887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.569176][ T8887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.581777][ T8887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.604214][ T5848] usbhid 6-1:0.0: can't add hid device: -71 [ 286.704852][ T5848] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 286.715361][ T5848] usb 6-1: USB disconnect, device number 13 [ 286.823819][ T8923] ubi31: attaching mtd0 [ 286.829179][ T8923] ubi31: scanning is finished [ 286.834010][ T8923] ubi31: empty MTD device detected [ 286.894134][ T8923] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 286.901812][ T8923] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 286.909086][ T8923] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 286.916164][ T8923] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 286.923618][ T8923] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 286.928843][ T8926] netlink: 'syz.3.730': attribute type 12 has an invalid length. [ 286.930484][ T8923] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 286.930517][ T8923] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3305467920 [ 286.930535][ T8923] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 286.968229][ T8925] ubi31: background thread "ubi_bgt31d" started, PID 8925 [ 287.382742][ T8933] netlink: 16 bytes leftover after parsing attributes in process `syz.4.732'. [ 287.427826][ T8933] FAULT_INJECTION: forcing a failure. [ 287.427826][ T8933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.443440][ T8933] CPU: 0 UID: 0 PID: 8933 Comm: syz.4.732 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 287.443464][ T8933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 287.443474][ T8933] Call Trace: [ 287.443481][ T8933] [ 287.443493][ T8933] dump_stack_lvl+0x16c/0x1f0 [ 287.443522][ T8933] should_fail_ex+0x512/0x640 [ 287.443553][ T8933] _copy_from_iter+0x29f/0x16f0 [ 287.443575][ T8933] ? __alloc_skb+0x200/0x380 [ 287.443599][ T8933] ? __pfx__copy_from_iter+0x10/0x10 [ 287.443616][ T8933] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 287.443636][ T8933] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 287.443666][ T8933] netlink_sendmsg+0x829/0xdd0 [ 287.443698][ T8933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.443733][ T8933] __sys_sendto+0x4a0/0x520 [ 287.443756][ T8933] ? __pfx___sys_sendto+0x10/0x10 [ 287.443799][ T8933] ? ksys_write+0x1ac/0x250 [ 287.443817][ T8933] ? __pfx_ksys_write+0x10/0x10 [ 287.443837][ T8933] __x64_sys_sendto+0xe0/0x1c0 [ 287.443858][ T8933] ? do_syscall_64+0x91/0x4c0 [ 287.443884][ T8933] ? lockdep_hardirqs_on+0x7c/0x110 [ 287.443909][ T8933] do_syscall_64+0xcd/0x4c0 [ 287.443936][ T8933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.443953][ T8933] RIP: 0033:0x7fcd2d7909fc [ 287.443967][ T8933] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 287.443984][ T8933] RSP: 002b:00007fcd2e5e7ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 287.444001][ T8933] RAX: ffffffffffffffda RBX: 00007fcd2e5e7fc0 RCX: 00007fcd2d7909fc [ 287.444012][ T8933] RDX: 0000000000000024 RSI: 00007fcd2e5e8010 RDI: 0000000000000004 [ 287.444022][ T8933] RBP: 0000000000000000 R08: 00007fcd2e5e7f14 R09: 000000000000000c [ 287.444032][ T8933] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 287.444042][ T8933] R13: 00007fcd2e5e7f68 R14: 00007fcd2e5e8010 R15: 0000000000000000 [ 287.444065][ T8933] [ 287.643631][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.724113][ T10] usb 3-1: USB disconnect, device number 26 [ 287.731829][ T10] option 3-1:0.73: device disconnected [ 289.279849][ T8945] syz.4.733: attempt to access beyond end of device [ 289.279849][ T8945] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 290.542710][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 290.542721][ T30] audit: type=1400 audit(1754363441.870:1530): avc: denied { read write } for pid=8954 comm="syz.4.738" dev="sockfs" ino=21631 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 290.570439][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.587839][ T8958] syz.3.739: attempt to access beyond end of device [ 290.587839][ T8958] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 290.730217][ T8964] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 292.123927][ T8974] ieee802154 phy0 wpan0: encryption failed: -22 [ 292.780608][ T5848] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 293.050599][ T5848] usb 2-1: Using ep0 maxpacket: 32 [ 293.057933][ T5848] usb 2-1: config 0 has an invalid interface number: 169 but max is 0 [ 293.066524][ T5848] usb 2-1: config 0 has no interface number 0 [ 293.072866][ T5848] usb 2-1: config 0 interface 169 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 293.080589][ T43] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 293.082879][ T5848] usb 2-1: config 0 interface 169 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 293.095447][ T975] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 293.101998][ T5848] usb 2-1: config 0 interface 169 has no altsetting 0 [ 293.120896][ T5895] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 293.250590][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 293.291529][ T975] usb 6-1: Using ep0 maxpacket: 32 [ 293.309937][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 293.322483][ T975] usb 6-1: unable to get BOS descriptor or descriptor too short [ 293.420601][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 293.455583][ T43] usb 4-1: config 6 has an invalid interface number: 28 but max is 0 [ 293.467369][ T975] usb 6-1: config 6 has an invalid interface number: 28 but max is 0 [ 293.467920][ T5848] usb 2-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=33.49 [ 293.479892][ T43] usb 4-1: config 6 has no interface number 0 [ 293.493090][ T975] usb 6-1: config 6 has no interface number 0 [ 293.508241][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.516955][ T5848] usb 2-1: Product: syz [ 293.518205][ T5895] usb 5-1: unable to get BOS descriptor or descriptor too short [ 293.522073][ T5848] usb 2-1: Manufacturer: syz [ 293.535892][ T5848] usb 2-1: SerialNumber: syz [ 293.543956][ T5848] usb 2-1: config 0 descriptor?? [ 293.545196][ T43] usb 4-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=d7.f0 [ 293.560920][ T975] usb 6-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=d7.f0 [ 293.570236][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.577093][ T5848] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 293.581732][ T975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.594951][ T5895] usb 5-1: config 6 has an invalid interface number: 28 but max is 0 [ 293.603659][ T43] usb 4-1: Product: syz [ 293.607825][ T43] usb 4-1: Manufacturer: syz [ 293.613411][ T5895] usb 5-1: config 6 has no interface number 0 [ 293.617864][ T5848] snd-usb-audio 2-1:0.169: probe with driver snd-usb-audio failed with error -12 [ 293.619988][ T975] usb 6-1: Product: syz [ 293.739924][ T43] usb 4-1: SerialNumber: syz [ 293.746561][ T975] usb 6-1: Manufacturer: syz [ 293.751657][ T975] usb 6-1: SerialNumber: syz [ 293.756529][ T5895] usb 5-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=d7.f0 [ 293.768405][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.780585][ T5895] usb 5-1: Product: syz [ 293.785853][ T5895] usb 5-1: Manufacturer: syz [ 294.351639][ T5895] usb 5-1: SerialNumber: syz [ 294.369195][ T975] aiptek 6-1:6.28: interface has no int in endpoints, but must have minimum 1 [ 294.382935][ T5881] usb 2-1: USB disconnect, device number 25 [ 294.389769][ T43] aiptek 4-1:6.28: interface has no int in endpoints, but must have minimum 1 [ 294.405585][ T975] usb 6-1: USB disconnect, device number 14 [ 294.488912][ T43] usb 4-1: USB disconnect, device number 30 [ 294.515974][ T30] audit: type=1400 audit(1754363445.850:1531): avc: denied { create } for pid=9006 comm="syz.2.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 294.518009][ T9007] netlink: 'syz.2.754': attribute type 10 has an invalid length. [ 294.552118][ T9007] team0: Port device team_slave_0 removed [ 294.577162][ T5895] aiptek 5-1:6.28: interface has no int in endpoints, but must have minimum 1 [ 294.594754][ T5895] usb 5-1: USB disconnect, device number 17 [ 294.776493][ T9010] syz.2.755: attempt to access beyond end of device [ 294.776493][ T9010] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 294.986660][ T9012] netlink: 'syz.3.757': attribute type 10 has an invalid length. [ 295.014431][ T9012] team0: Port device team_slave_0 removed [ 295.760478][ T9019] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 296.120525][ T5848] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 296.263968][ T9030] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 296.520360][ T5848] usb 4-1: config 235 has an invalid interface number: 71 but max is 1 [ 296.543005][ T5848] usb 4-1: config 235 has an invalid interface number: 169 but max is 1 [ 296.860484][ T9027] usb usb8: usbfs: process 9027 (syz.2.760) did not claim interface 0 before use [ 296.910540][ T5848] usb 4-1: config 235 has an invalid interface number: 4 but max is 1 [ 296.919044][ T5848] usb 4-1: config 235 has an invalid descriptor of length 0, skipping remainder of the config [ 297.039861][ T5848] usb 4-1: config 235 has 3 interfaces, different from the descriptor's value: 2 [ 297.079307][ T5848] usb 4-1: config 235 has no interface number 0 [ 297.210465][ T5848] usb 4-1: config 235 has no interface number 1 [ 297.243140][ T5848] usb 4-1: config 235 has no interface number 2 [ 297.249468][ T5848] usb 4-1: config 235 interface 71 altsetting 2 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 298.077230][ T5848] usb 4-1: config 235 interface 71 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 298.102713][ T5848] usb 4-1: config 235 interface 71 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 298.236831][ T5848] usb 4-1: config 235 interface 169 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 298.580799][ T5848] usb 4-1: too many endpoints for config 235 interface 4 altsetting 110: 132, using maximum allowed: 30 [ 298.615549][ T5848] usb 4-1: config 235 interface 4 altsetting 110 has an invalid endpoint descriptor of length 2, skipping [ 298.652426][ T5848] usb 4-1: config 235 interface 4 altsetting 110 has 1 endpoint descriptor, different from the interface descriptor's value: 132 [ 298.680337][ T5848] usb 4-1: config 235 interface 71 has no altsetting 0 [ 298.693679][ T5848] usb 4-1: config 235 interface 169 has no altsetting 0 [ 298.713267][ T30] audit: type=1400 audit(1754363450.040:1532): avc: denied { execute } for pid=9055 comm="syz.2.770" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=22650 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 298.769748][ T5848] usb 4-1: config 235 interface 4 has no altsetting 0 [ 298.792990][ T5848] usb 4-1: string descriptor 0 read error: -71 [ 298.799317][ T5848] usb 4-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=84.d8 [ 298.819237][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.860816][ T5848] usb 4-1: can't set config #235, error -71 [ 298.880944][ T5848] usb 4-1: USB disconnect, device number 31 [ 298.918323][ T9060] tmpfs: Bad value for 'mpol' [ 298.920762][ T5895] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 299.673077][ T5895] usb 2-1: Using ep0 maxpacket: 32 [ 299.809640][ T5895] usb 2-1: config 0 has an invalid interface number: 169 but max is 0 [ 299.826584][ T5895] usb 2-1: config 0 has no interface number 0 [ 299.834362][ T5895] usb 2-1: config 0 interface 169 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 299.845195][ T5895] usb 2-1: config 0 interface 169 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 299.855283][ T5895] usb 2-1: config 0 interface 169 has no altsetting 0 [ 299.868804][ T5895] usb 2-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=33.49 [ 299.881138][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.890846][ T5895] usb 2-1: Product: syz [ 299.895760][ T5895] usb 2-1: Manufacturer: syz [ 299.901902][ T5895] usb 2-1: SerialNumber: syz [ 299.925132][ T5895] usb 2-1: config 0 descriptor?? [ 300.295673][ T5895] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 300.336470][ T5895] snd-usb-audio 2-1:0.169: probe with driver snd-usb-audio failed with error -12 [ 300.470323][ T30] audit: type=1400 audit(1754363451.800:1533): avc: denied { write } for pid=9043 comm="syz.1.767" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 300.494311][ T30] audit: type=1400 audit(1754363451.800:1534): avc: denied { open } for pid=9043 comm="syz.1.767" path="/148/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 300.534151][ T43] usb 2-1: USB disconnect, device number 26 [ 300.630558][ T5895] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 300.664244][ T5881] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 300.800523][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 300.810395][ T5895] usb 4-1: config 4 has an invalid interface number: 51 but max is 0 [ 300.818794][ T5895] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 300.831561][ T5881] usb 6-1: config 0 has an invalid interface number: 113 but max is 0 [ 300.839807][ T5895] usb 4-1: config 4 has no interface number 0 [ 300.845961][ T5881] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.857914][ T5895] usb 4-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 300.873248][ T5881] usb 6-1: config 0 has no interface number 0 [ 300.879921][ T5895] usb 4-1: config 4 interface 51 has no altsetting 0 [ 300.887415][ T5881] usb 6-1: config 0 interface 113 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 300.901912][ T5881] usb 6-1: config 0 interface 113 has no altsetting 0 [ 300.992348][ T5895] usb 4-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 301.003638][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.015733][ T5895] usb 4-1: Product: syz [ 301.020298][ T5895] usb 4-1: Manufacturer: syz [ 301.025875][ T5895] usb 4-1: SerialNumber: syz [ 301.026006][ T5881] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 301.040586][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.049391][ T5881] usb 6-1: Product: syz [ 301.056643][ T5895] cdc_eem 4-1:4.51: probe with driver cdc_eem failed with error -22 [ 301.064822][ T5881] usb 6-1: Manufacturer: syz [ 301.075952][ T5881] usb 6-1: SerialNumber: syz [ 301.109465][ T5881] usb 6-1: config 0 descriptor?? [ 301.116960][ T5881] pn533_usb 6-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 301.144675][ T9094] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=38 sclass=netlink_audit_socket pid=9094 comm=syz.4.778 [ 301.452754][ T30] audit: type=1400 audit(1754363452.670:1535): avc: denied { execmem } for pid=9078 comm="syz.5.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 301.471876][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.483698][ T9100] syz.5.776: attempt to access beyond end of device [ 301.483698][ T9100] loop5: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 301.496848][ T9100] gfs2: error -5 reading superblock [ 301.542203][ T10] usb 4-1: USB disconnect, device number 32 [ 302.431420][ T5881] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 302.565360][ T9122] nfs: Unknown parameter '' [ 302.620615][ T5881] usb 2-1: Using ep0 maxpacket: 8 [ 302.630545][ T5881] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 302.638899][ T5881] usb 2-1: config 0 has no interface number 0 [ 302.660678][ T5881] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 303.049955][ T5881] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 303.060108][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.180736][ T5881] usb 2-1: config 0 descriptor?? [ 303.193646][ T5881] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 303.229150][ T9125] syz.2.787: attempt to access beyond end of device [ 303.229150][ T9125] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 303.318028][ T30] audit: type=1400 audit(1754363454.650:1536): avc: denied { create } for pid=9127 comm="syz.3.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 303.376097][ T9129] netlink: 76 bytes leftover after parsing attributes in process `syz.4.788'. [ 303.392066][ T9106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.425889][ T9106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.466920][ T5848] usb 6-1: USB disconnect, device number 15 [ 303.513106][ T30] audit: type=1400 audit(1754363454.840:1537): avc: denied { ioctl } for pid=9127 comm="syz.3.789" path="socket:[22189]" dev="sockfs" ino=22189 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 303.552922][ T5972] usb 2-1: USB disconnect, device number 27 [ 303.624388][ T30] audit: type=1400 audit(1754363454.850:1538): avc: denied { bind } for pid=9127 comm="syz.3.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 304.183310][ T9141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.793'. [ 304.192383][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.793'. [ 304.201184][ T9141] netlink: 'syz.4.793': attribute type 12 has an invalid length. [ 304.208950][ T9141] netlink: 'syz.4.793': attribute type 11 has an invalid length. [ 304.284875][ T30] audit: type=1400 audit(1754363455.520:1539): avc: denied { mount } for pid=9139 comm="syz.4.793" name="/" dev="pstore" ino=2928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 304.307109][ C0] vkms_vblank_simulate: vblank timer overrun [ 304.323080][ T9140] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 304.351321][ T9140] PKCS7: Only support pkcs7_signedData type [ 304.413392][ T30] audit: type=1400 audit(1754363455.650:1540): avc: denied { write } for pid=9136 comm="syz.2.792" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 305.044647][ T9147] bond2: entered promiscuous mode [ 305.050858][ T9147] bond2: entered allmulticast mode [ 305.082623][ T9147] 8021q: adding VLAN 0 to HW filter on device bond2 [ 306.392167][ T9147] bond2 (unregistering): Released all slaves [ 306.509282][ T9172] FAULT_INJECTION: forcing a failure. [ 306.509282][ T9172] name failslab, interval 1, probability 0, space 0, times 0 [ 306.523248][ T9172] CPU: 0 UID: 0 PID: 9172 Comm: syz.3.801 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 306.523274][ T9172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 306.523284][ T9172] Call Trace: [ 306.523290][ T9172] [ 306.523297][ T9172] dump_stack_lvl+0x16c/0x1f0 [ 306.523333][ T9172] should_fail_ex+0x512/0x640 [ 306.523364][ T9172] should_failslab+0xc2/0x120 [ 306.523384][ T9172] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 306.523402][ T9172] ? skb_clone+0x190/0x3f0 [ 306.523430][ T9172] skb_clone+0x190/0x3f0 [ 306.523455][ T9172] netlink_deliver_tap+0xabd/0xd30 [ 306.523481][ T9172] ? __pfx_rtnl_stats_dump+0x10/0x10 [ 306.523511][ T9172] netlink_dump+0xa5f/0xd30 [ 306.523538][ T9172] ? __pfx_netlink_dump+0x10/0x10 [ 306.523561][ T9172] ? rcu_is_watching+0x12/0xc0 [ 306.523597][ T9172] ? kfree_skbmem+0x1a4/0x1f0 [ 306.523619][ T9172] netlink_recvmsg+0x7dc/0xa90 [ 306.523645][ T9172] ? __pfx_netlink_recvmsg+0x10/0x10 [ 306.523673][ T9172] ? iovec_from_user+0xbb/0x140 [ 306.523699][ T9172] ____sys_recvmsg+0x5f6/0x6b0 [ 306.523723][ T9172] ? __pfx_____sys_recvmsg+0x10/0x10 [ 306.523750][ T9172] ? kfree+0x24f/0x4d0 [ 306.523773][ T9172] ? __lock_acquire+0x62e/0x1ce0 [ 306.523804][ T9172] ___sys_recvmsg+0x114/0x1a0 [ 306.523830][ T9172] ? __pfx____sys_recvmsg+0x10/0x10 [ 306.523869][ T9172] ? __pfx___might_resched+0x10/0x10 [ 306.523897][ T9172] do_recvmmsg+0x2fe/0x750 [ 306.523925][ T9172] ? __pfx_do_recvmmsg+0x10/0x10 [ 306.523949][ T9172] ? ksys_write+0x190/0x250 [ 306.523970][ T9172] ? __mutex_unlock_slowpath+0x163/0x800 [ 306.524006][ T9172] ? __fget_files+0x20e/0x3c0 [ 306.524031][ T9172] __x64_sys_recvmmsg+0x22a/0x280 [ 306.524058][ T9172] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 306.524091][ T9172] do_syscall_64+0xcd/0x4c0 [ 306.524119][ T9172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.524136][ T9172] RIP: 0033:0x7f684598eb69 [ 306.524150][ T9172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.524167][ T9172] RSP: 002b:00007f68437d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 306.524184][ T9172] RAX: ffffffffffffffda RBX: 00007f6845bb6080 RCX: 00007f684598eb69 [ 306.524196][ T9172] RDX: 0000000000000008 RSI: 0000200000002380 RDI: 0000000000000003 [ 306.524206][ T9172] RBP: 00007f68437d5090 R08: 0000000000000000 R09: 0000000000000000 [ 306.524217][ T9172] R10: 0000000000034000 R11: 0000000000000246 R12: 0000000000000002 [ 306.524228][ T9172] R13: 0000000000000001 R14: 00007f6845bb6080 R15: 00007ffd6d843bf8 [ 306.524252][ T9172] [ 306.592725][ T5881] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 306.595334][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.791785][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.864073][ T9175] syz.5.802: attempt to access beyond end of device [ 306.864073][ T9175] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 307.381811][ T5881] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 307.390165][ T5881] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.400286][ T5881] usb 5-1: config 0 has no interface number 0 [ 307.406392][ T5881] usb 5-1: config 0 interface 113 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 307.446967][ T5881] usb 5-1: config 0 interface 113 has no altsetting 0 [ 307.463341][ T5881] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 307.473275][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.481964][ T5881] usb 5-1: Product: syz [ 308.196747][ T9190] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 308.223133][ T30] audit: type=1400 audit(1754363459.530:1541): avc: denied { mount } for pid=9180 comm="syz.3.805" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 308.397138][ T5881] usb 5-1: Manufacturer: syz [ 308.401830][ T5881] usb 5-1: SerialNumber: syz [ 308.480845][ T5881] usb 5-1: config 0 descriptor?? [ 308.504850][ T5881] pn533_usb 5-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 308.676505][ T30] audit: type=1400 audit(1754363460.000:1542): avc: denied { unmount } for pid=5860 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 308.919012][ T9198] syz.4.800: attempt to access beyond end of device [ 308.919012][ T9198] loop4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 308.932368][ T9198] gfs2: error -5 reading superblock [ 310.009851][ T5881] usb 5-1: USB disconnect, device number 18 [ 311.349986][ T9184] syz.1.803 (9184) used greatest stack depth: 19752 bytes left [ 311.515883][ T9223] netlink: 'syz.5.809': attribute type 21 has an invalid length. [ 311.524136][ T9223] netlink: 'syz.5.809': attribute type 1 has an invalid length. [ 311.534272][ T9223] netlink: 144 bytes leftover after parsing attributes in process `syz.5.809'. [ 311.779087][ T9231] binder: 9230:9231 ioctl 4018620d 0 returned -22 [ 311.806653][ T5881] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 312.555452][ T5881] usb 5-1: Using ep0 maxpacket: 16 [ 312.643454][ T5881] usb 5-1: config 4 has an invalid interface number: 51 but max is 0 [ 312.652211][ T5881] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 312.662726][ T5881] usb 5-1: config 4 has no interface number 0 [ 312.668840][ T5881] usb 5-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 312.684228][ T5881] usb 5-1: config 4 interface 51 has no altsetting 0 [ 312.695682][ T5881] usb 5-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 312.704906][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.733007][ T5881] usb 5-1: Product: syz [ 312.739476][ T5881] usb 5-1: Manufacturer: syz [ 312.745474][ T5881] usb 5-1: SerialNumber: syz [ 312.851906][ T5881] cdc_eem 5-1:4.51: probe with driver cdc_eem failed with error -22 [ 313.488349][ T36] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xff [ 313.525852][ T9247] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 313.659219][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 313.669588][ T10] usb 5-1: USB disconnect, device number 19 [ 315.037192][ T9268] FAULT_INJECTION: forcing a failure. [ 315.037192][ T9268] name failslab, interval 1, probability 0, space 0, times 0 [ 315.050039][ T9268] CPU: 1 UID: 0 PID: 9268 Comm: syz.5.825 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 315.050063][ T9268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 315.050073][ T9268] Call Trace: [ 315.050079][ T9268] [ 315.050086][ T9268] dump_stack_lvl+0x16c/0x1f0 [ 315.050117][ T9268] should_fail_ex+0x512/0x640 [ 315.050145][ T9268] ? fs_reclaim_acquire+0xae/0x150 [ 315.050171][ T9268] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 315.050194][ T9268] should_failslab+0xc2/0x120 [ 315.050215][ T9268] __kmalloc_noprof+0xd2/0x510 [ 315.050239][ T9268] tomoyo_realpath_from_path+0xc2/0x6e0 [ 315.050264][ T9268] ? tomoyo_profile+0x47/0x60 [ 315.050292][ T9268] tomoyo_path_number_perm+0x245/0x580 [ 315.050310][ T9268] ? tomoyo_path_number_perm+0x237/0x580 [ 315.050331][ T9268] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 315.050351][ T9268] ? lockdep_hardirqs_on+0x7c/0x110 [ 315.050402][ T9268] ? find_held_lock+0x2b/0x80 [ 315.050426][ T9268] ? hook_file_ioctl_common+0x145/0x410 [ 315.050458][ T9268] ? __fget_files+0x20e/0x3c0 [ 315.050483][ T9268] security_file_ioctl+0x9b/0x240 [ 315.050507][ T9268] __x64_sys_ioctl+0xb7/0x210 [ 315.050541][ T9268] do_syscall_64+0xcd/0x4c0 [ 315.050570][ T9268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.050588][ T9268] RIP: 0033:0x7ff90f38eb69 [ 315.050603][ T9268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.050621][ T9268] RSP: 002b:00007ff90d1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 315.050638][ T9268] RAX: ffffffffffffffda RBX: 00007ff90f5b6160 RCX: 00007ff90f38eb69 [ 315.050649][ T9268] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000006 [ 315.050660][ T9268] RBP: 00007ff90d1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 315.050670][ T9268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.050680][ T9268] R13: 0000000000000000 R14: 00007ff90f5b6160 R15: 00007ffddc2dd368 [ 315.050704][ T9268] [ 315.250604][ T9268] ERROR: Out of memory at tomoyo_realpath_from_path. [ 315.257552][ T9268] comedi comedi3: comedi_config --init_data is deprecated [ 315.445901][ T9271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.827'. [ 316.315134][ T30] audit: type=1400 audit(1754363467.010:1543): avc: denied { create } for pid=9269 comm="syz.3.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 316.377050][ T9283] syzkaller1: entered promiscuous mode [ 316.386606][ T9283] syzkaller1: entered allmulticast mode [ 316.720088][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.130501][ T10] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 317.240526][ T9298] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 317.487456][ T10] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 317.495827][ T10] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 317.530801][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.557910][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 317.577444][ T10] usb 4-1: string descriptor 0 read error: -22 [ 317.587119][ T10] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 317.598223][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.609058][ T10] usb 4-1: config 0 descriptor?? [ 317.617437][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 317.623816][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 318.020621][ T5848] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 318.216572][ T9289] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 318.320568][ T5848] usb 3-1: Using ep0 maxpacket: 16 [ 318.339548][ T9316] netlink: 'syz.5.836': attribute type 21 has an invalid length. [ 318.347611][ T9316] netlink: 'syz.5.836': attribute type 1 has an invalid length. [ 318.355343][ T9316] netlink: 144 bytes leftover after parsing attributes in process `syz.5.836'. [ 318.478898][ T5881] usb 4-1: USB disconnect, device number 33 [ 318.503257][ T5848] usb 3-1: config 4 has an invalid interface number: 51 but max is 0 [ 318.514152][ T5848] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 318.543352][ T5848] usb 3-1: config 4 has no interface number 0 [ 318.563106][ T5848] usb 3-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 318.588028][ T5848] usb 3-1: config 4 interface 51 has no altsetting 0 [ 318.596850][ T5848] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 318.610073][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.622656][ T5848] usb 3-1: Product: syz [ 318.626912][ T5848] usb 3-1: Manufacturer: syz [ 318.868467][ T5848] usb 3-1: SerialNumber: syz [ 318.879241][ T30] audit: type=1400 audit(1754363470.210:1544): avc: denied { write } for pid=9311 comm="syz.4.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 318.909624][ T5848] cdc_eem 3-1:4.51: probe with driver cdc_eem failed with error -22 [ 319.390774][ T9329] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 319.528334][ T1094] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xff [ 319.638133][ T10] usb 3-1: USB disconnect, device number 27 [ 319.840202][ T9336] netlink: 32 bytes leftover after parsing attributes in process `syz.4.843'. [ 319.849428][ T9336] tipc: Invalid UDP bearer configuration [ 319.849468][ T9336] tipc: Enabling of bearer rejected, failed to enable media [ 320.300608][ T5895] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 320.423188][ T9348] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 320.788318][ T5895] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.811210][ T5895] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 320.823929][ T5895] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 320.850235][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 320.884319][ T5895] usb 4-1: SerialNumber: syz [ 320.913811][ T5895] usb 4-1: 0:2 : does not exist [ 321.194873][ T5881] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 321.596234][ T9343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.606409][ T9343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.741318][ T30] audit: type=1400 audit(1754363473.050:1545): avc: denied { ioctl } for pid=9342 comm="syz.3.846" path="socket:[23863]" dev="sockfs" ino=23863 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 321.806811][ T5972] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 322.066764][ T5881] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.079452][ T5881] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 322.089786][ T5881] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 322.117053][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 322.158980][ T5881] usb 5-1: SerialNumber: syz [ 322.194581][ T5881] usb 5-1: 0:2 : does not exist [ 322.201095][ T5972] usb 3-1: Using ep0 maxpacket: 32 [ 322.211322][ T5972] usb 3-1: config 0 interface 0 has no altsetting 0 [ 322.220779][ T5972] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 322.325616][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.487317][ T5972] usb 3-1: Product: syz [ 322.948659][ T5972] usb 3-1: Manufacturer: syz [ 322.993217][ T5972] usb 3-1: SerialNumber: syz [ 323.026428][ T5972] usb 3-1: config 0 descriptor?? [ 323.197520][ T9376] binder: 9375:9376 unknown command 0 [ 323.213846][ T9377] netlink: 'syz.1.852': attribute type 30 has an invalid length. [ 323.287836][ T10] usb 4-1: USB disconnect, device number 34 [ 323.313952][ T9376] binder: 9375:9376 ioctl c0306201 200000000080 returned -22 [ 323.328454][ T9378] binder: 9375:9378 ioctl c0306201 200000000280 returned -11 [ 323.594159][ T5972] gs_usb 3-1:0.0: Couldn't get device config: (err=-71) [ 323.601337][ T5972] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 323.651881][ T5972] usb 3-1: USB disconnect, device number 28 [ 323.738404][ T5881] usb 5-1: USB disconnect, device number 20 [ 323.952107][ T9380] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 324.181809][ T9388] netlink: 24 bytes leftover after parsing attributes in process `syz.3.859'. [ 324.546891][ T30] audit: type=1400 audit(1754363475.880:1546): avc: denied { watch } for pid=9389 comm="syz.1.860" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 324.573977][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.007179][ T30] audit: type=1326 audit(1754363476.340:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9386 comm="syz.3.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684598eb69 code=0x7fc00000 [ 325.628163][ T9417] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 326.520740][ T5881] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 326.740860][ T5895] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 326.916832][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 326.934601][ T5881] usb 3-1: unable to get BOS descriptor or descriptor too short [ 326.943354][ T5881] usb 3-1: config 6 has an invalid interface number: 28 but max is 0 [ 326.952453][ T5881] usb 3-1: config 6 has no interface number 0 [ 326.960742][ T5881] usb 3-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=d7.f0 [ 327.123300][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.134606][ T30] audit: type=1400 audit(1754363478.440:1548): avc: denied { create } for pid=9432 comm="syz.4.873" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 327.572545][ T30] audit: type=1400 audit(1754363478.440:1549): avc: denied { read write } for pid=9432 comm="syz.4.873" name="file0" dev="tmpfs" ino=1096 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 327.573857][ T5895] usb 2-1: not running at top speed; connect to a high speed hub [ 327.600329][ T30] audit: type=1400 audit(1754363478.440:1550): avc: denied { open } for pid=9432 comm="syz.4.873" path="/205/file0" dev="tmpfs" ino=1096 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 327.669498][ T5881] usb 3-1: Product: syz [ 327.681993][ T5881] usb 3-1: Manufacturer: syz [ 327.686669][ T5881] usb 3-1: SerialNumber: syz [ 327.753024][ T5895] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 327.763530][ T5895] usb 2-1: config 1 has no interface number 1 [ 327.774067][ T5895] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 327.844820][ T5895] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 327.853935][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.863219][ T5895] usb 2-1: Product: syz [ 327.867376][ T5895] usb 2-1: Manufacturer: syz [ 328.092517][ T30] audit: type=1400 audit(1754363478.440:1551): avc: denied { ioctl } for pid=9432 comm="syz.4.873" path="/205/file0" dev="tmpfs" ino=1096 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 328.099636][ T9448] wlan0 speed is unknown, defaulting to 1000 [ 328.138055][ T5895] usb 2-1: SerialNumber: syz [ 328.143702][ T5881] aiptek 3-1:6.28: interface has no int in endpoints, but must have minimum 1 [ 328.156889][ T5881] usb 3-1: USB disconnect, device number 29 [ 328.162943][ T9448] wlan0 speed is unknown, defaulting to 1000 [ 328.215931][ T9448] wlan0 speed is unknown, defaulting to 1000 [ 328.239096][ T30] audit: type=1400 audit(1754363479.570:1552): avc: denied { ioctl } for pid=9446 comm="syz.4.876" path="socket:[23465]" dev="sockfs" ino=23465 ioctlcmd=0x89fc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 328.298231][ T9448] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 328.312534][ T9448] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 328.335290][ T5895] usb 2-1: failed to enable PITCH for EP 0x82 [ 328.379868][ T5895] usb 2-1: USB disconnect, device number 28 [ 328.390395][ T9448] wlan0 speed is unknown, defaulting to 1000 [ 328.455120][ T9448] wlan0 speed is unknown, defaulting to 1000 [ 328.480665][ T10] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 328.547190][ T9448] wlan0 speed is unknown, defaulting to 1000 [ 328.566061][ T9448] wlan0 speed is unknown, defaulting to 1000 [ 328.575562][ T9448] wlan0 speed is unknown, defaulting to 1000 [ 329.112900][ T10] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 329.188373][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.517377][ T10] usb 6-1: config 0 descriptor?? [ 329.524118][ T10] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 329.871747][ T10] gp8psk: usb in 128 operation failed. [ 329.904720][ T5849] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 329.939159][ T30] audit: type=1400 audit(1754363481.270:1553): avc: denied { write } for pid=9470 comm="syz.4.883" lport=34976 faddr=::ffff:172.20.255.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 330.051357][ T9471] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 330.077306][ T9471] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 330.099781][ T10] gp8psk: usb in 146 operation failed. [ 330.106079][ T9471] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 330.106384][ T9471] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 330.106478][ T9471] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 330.161865][ T10] gp8psk: failed to get FW version [ 330.170352][ T9475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.306420][ T9483] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 330.478067][ T10] gp8psk: usb in 149 operation failed. [ 330.486523][ T10] gp8psk: failed to get FPGA version [ 330.492659][ T9475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.505779][ T9475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.517578][ T9475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.529705][ T9475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.532841][ T5895] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 330.538704][ T9475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.561024][ T9475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.579404][ T9475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.601981][ T9475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.630884][ T9475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.639474][ T9493] 9pnet_fd: Insufficient options for proto=fd [ 330.668226][ T9494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.682755][ T9494] netlink: 148 bytes leftover after parsing attributes in process `syz.1.887'. [ 330.755578][ T9447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.772697][ T9447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.800759][ T5895] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 330.816503][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 330.839562][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 330.859831][ T5895] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 330.873148][ T5881] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 330.889125][ T5895] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 330.904998][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.916261][ T5895] usb 4-1: config 0 descriptor?? [ 330.965981][ T10] gp8psk: usb out operation failed. [ 330.973280][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 330.998991][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 331.030536][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 331.140852][ T10] usb 6-1: USB disconnect, device number 16 [ 331.148776][ T5881] usb 3-1: unable to get BOS descriptor or descriptor too short [ 331.159340][ T5895] usbhid 4-1:0.0: can't add hid device: -71 [ 331.165432][ T5881] usb 3-1: config 6 has an invalid interface number: 28 but max is 0 [ 331.177821][ T9502] syz.4.891: attempt to access beyond end of device [ 331.177821][ T9502] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 331.187828][ T5881] usb 3-1: config 6 has no interface number 0 [ 331.212336][ T5895] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 331.243105][ T5881] usb 3-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=d7.f0 [ 331.252602][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.263489][ T5895] usb 4-1: USB disconnect, device number 35 [ 331.402225][ T5881] usb 3-1: Product: syz [ 331.985095][ T5881] usb 3-1: Manufacturer: syz [ 331.989724][ T5881] usb 3-1: SerialNumber: syz [ 332.090618][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 332.096886][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 332.147527][ T9494] syz.1.887 (9494): drop_caches: 2 [ 332.170541][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 332.174452][ T5849] Bluetooth: hci4: command 0x0c1a tx timeout [ 332.205822][ T9505] ipvlan2: entered promiscuous mode [ 332.217512][ T30] audit: type=1400 audit(1754363483.550:1554): avc: denied { write } for pid=9503 comm="syz.4.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 332.247091][ T5881] aiptek 3-1:6.28: interface has no int in endpoints, but must have minimum 1 [ 332.259873][ T5881] usb 3-1: USB disconnect, device number 30 [ 332.440667][ T5895] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 332.592436][ T5895] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 332.601284][ T5895] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 332.612728][ T5895] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 332.622637][ T5895] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 332.634505][ T5895] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 332.648193][ T5895] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 332.657500][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 332.667198][ T5895] usb 6-1: Product: syz [ 332.671519][ T5895] usb 6-1: Manufacturer: syz [ 332.680039][ T5895] cdc_wdm 6-1:1.0: skipping garbage [ 332.690057][ T5895] cdc_wdm 6-1:1.0: skipping garbage [ 332.697317][ T5895] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 332.703354][ T5895] cdc_wdm 6-1:1.0: Unknown control protocol [ 333.129190][ T5972] usb 6-1: USB disconnect, device number 17 [ 333.408385][ T9529] netlink: 24 bytes leftover after parsing attributes in process `syz.2.901'. [ 333.520592][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 333.891781][ T10] usb 5-1: config 0 has an invalid interface number: 160 but max is 0 [ 333.900152][ T10] usb 5-1: config 0 has no interface number 0 [ 333.909240][ T10] usb 5-1: config 0 interface 160 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 334.012872][ T10] usb 5-1: config 0 interface 160 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 334.028421][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 334.038896][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.047369][ T10] usb 5-1: Product: syz [ 334.052039][ T10] usb 5-1: Manufacturer: syz [ 334.056782][ T10] usb 5-1: SerialNumber: syz [ 334.271624][ T5849] Bluetooth: hci0: command 0x0406 tx timeout [ 334.484216][ T30] audit: type=1326 audit(1754363485.820:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad3f8eb69 code=0x7fc00000 [ 334.484412][ T10] usb 5-1: config 0 descriptor?? [ 334.516027][ T10] usb 5-1: Found UVC 0.00 device syz (05ac:8501) [ 334.522915][ T30] audit: type=1326 audit(1754363485.820:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ad3f8d4d0 code=0x7fc00000 [ 334.597726][ T10] usb 5-1: No valid video chain found. [ 334.598191][ T30] audit: type=1326 audit(1754363485.820:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad3f8eb69 code=0x7fc00000 [ 334.629624][ T30] audit: type=1326 audit(1754363485.820:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad3f8eb69 code=0x7fc00000 [ 334.657686][ T30] audit: type=1326 audit(1754363485.820:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad3f8eb69 code=0x7fc00000 [ 334.686998][ T30] audit: type=1326 audit(1754363485.820:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad3f8eb69 code=0x7fc00000 [ 334.711994][ T30] audit: type=1326 audit(1754363485.820:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad3f8eb69 code=0x7fc00000 [ 335.586664][ T30] audit: type=1400 audit(1754363486.920:1562): avc: denied { create } for pid=9550 comm="syz.5.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 336.079935][ T9555] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 336.370537][ T5848] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 337.287587][ T30] audit: type=1400 audit(1754363487.850:1563): avc: denied { checkpoint_restore } for pid=9556 comm="syz.5.907" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 337.393587][ T5848] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 337.447364][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.490300][ T5848] usb 2-1: Product: syz [ 337.520692][ T5972] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 337.533898][ T5848] usb 2-1: Manufacturer: syz [ 337.672336][ T5848] usb 2-1: SerialNumber: syz [ 337.740668][ T5972] usb 6-1: Using ep0 maxpacket: 8 [ 337.792081][ T5848] usb 2-1: config 0 descriptor?? [ 337.814384][ T5972] usb 6-1: New USB device found, idVendor=15c2, idProduct=0043, bcdDevice= 2.c9 [ 337.917494][ T5972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.991891][ T5972] usb 6-1: Product: syz [ 338.096330][ T5972] usb 6-1: Manufacturer: syz [ 338.184415][ T5849] Bluetooth: hci5: urb ffff888034a77600 submission failed (2) [ 338.190667][ T5972] usb 6-1: SerialNumber: syz [ 338.356177][ T5972] usb 6-1: config 0 descriptor?? [ 338.385628][ T5972] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 338.755042][ T5972] imon 6-1:0.0: unable to initialize intf0, err -19 [ 338.777323][ T5972] imon:imon_probe: failed to initialize context! [ 338.793936][ T5972] imon 6-1:0.0: unable to register, err -19 [ 338.812110][ T30] audit: type=1400 audit(1754363490.150:1564): avc: denied { create } for pid=9560 comm="syz.4.908" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 338.836485][ T9565] ./file0: Can't open blockdev [ 338.952578][ T9570] wlan0 speed is unknown, defaulting to 1000 [ 339.052390][ T30] audit: type=1400 audit(1754363490.170:1565): avc: denied { mounton } for pid=9560 comm="syz.4.908" path="/215/file0" dev="tmpfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 339.321789][ T5848] usb 2-1: USB disconnect, device number 29 [ 339.462198][ T9560] delete_channel: no stack [ 339.518285][ T9580] QAT: failed to copy from user cfg_data. [ 339.702556][ T30] audit: type=1400 audit(1754363491.030:1566): avc: denied { unlink } for pid=5844 comm="syz-executor" name="file0" dev="tmpfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 339.770683][ T5848] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 340.054479][ T5972] usb 6-1: USB disconnect, device number 18 [ 340.105312][ T9589] netlink: 24 bytes leftover after parsing attributes in process `syz.4.914'. [ 340.116959][ T5848] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 340.126182][ T5848] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 340.140526][ T5848] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 340.159782][ T5848] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 340.263112][ T5848] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 340.425339][ T5848] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 340.434544][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 340.473854][ T5848] usb 2-1: Product: syz [ 340.500789][ T5848] usb 2-1: Manufacturer: syz [ 340.539824][ T5848] cdc_wdm 2-1:1.0: skipping garbage [ 340.545731][ T5848] cdc_wdm 2-1:1.0: skipping garbage [ 340.858667][ T5848] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 340.880912][ T5848] cdc_wdm 2-1:1.0: Unknown control protocol [ 340.905385][ T5848] usb 2-1: USB disconnect, device number 30 [ 340.940739][ T30] audit: type=1326 audit(1754363492.260:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2d78eb69 code=0x7fc00000 [ 341.002086][ T30] audit: type=1326 audit(1754363492.260:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcd2d78d4d0 code=0x7fc00000 [ 341.028486][ T30] audit: type=1326 audit(1754363492.260:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2d78eb69 code=0x7fc00000 [ 341.053839][ T30] audit: type=1326 audit(1754363492.260:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2d78eb69 code=0x7fc00000 [ 341.080613][ T30] audit: type=1326 audit(1754363492.260:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2d78eb69 code=0x7fc00000 [ 341.109477][ T30] audit: type=1326 audit(1754363492.260:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2d78eb69 code=0x7fc00000 [ 341.973421][ T9609] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 342.401941][ T975] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 342.820586][ T975] usb 3-1: Using ep0 maxpacket: 32 [ 342.833313][ T975] usb 3-1: unable to get BOS descriptor or descriptor too short [ 342.842856][ T975] usb 3-1: config 6 has an invalid interface number: 28 but max is 0 [ 342.854414][ T975] usb 3-1: config 6 has no interface number 0 [ 342.866846][ T975] usb 3-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=d7.f0 [ 342.878416][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.888974][ T975] usb 3-1: Product: syz [ 342.889339][ T9631] netlink: 32 bytes leftover after parsing attributes in process `syz.3.929'. [ 342.893604][ T975] usb 3-1: Manufacturer: syz [ 342.907307][ T975] usb 3-1: SerialNumber: syz [ 342.935420][ T9635] netlink: 24 bytes leftover after parsing attributes in process `syz.3.930'. [ 342.960504][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 343.121442][ T5895] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 343.173496][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 343.208058][ T975] aiptek 3-1:6.28: interface has no int in endpoints, but must have minimum 1 [ 343.235716][ T975] usb 3-1: USB disconnect, device number 31 [ 343.281076][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 343.300608][ T5895] usb 2-1: Using ep0 maxpacket: 32 [ 343.337441][ T5895] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 343.348840][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.348911][ T10] usb 6-1: config 6 has an invalid interface number: 28 but max is 0 [ 343.357496][ T5895] usb 2-1: Product: syz [ 343.371630][ T5895] usb 2-1: Manufacturer: syz [ 343.377302][ T5895] usb 2-1: SerialNumber: syz [ 343.386444][ T5895] usb 2-1: config 0 descriptor?? [ 343.397254][ T10] usb 6-1: config 6 has no interface number 0 [ 343.409839][ T10] usb 6-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=d7.f0 [ 343.419159][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.429314][ T10] usb 6-1: Product: syz [ 343.435095][ T10] usb 6-1: Manufacturer: syz [ 343.439767][ T10] usb 6-1: SerialNumber: syz [ 343.601554][ T5895] snd-usb-6fire 2-1:0.0: unknown device firmware state received from device: [ 343.610562][ T5895] eb 9a 47 80 9b f8 cb 57 [ 343.615078][ T5895] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 343.655561][ T10] aiptek 6-1:6.28: interface has no int in endpoints, but must have minimum 1 [ 343.666912][ T10] usb 6-1: USB disconnect, device number 19 [ 343.768284][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 343.768301][ T30] audit: type=1326 audit(1754363495.100:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9634 comm="syz.3.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684598eb69 code=0x7fc00000 [ 343.798332][ T30] audit: type=1326 audit(1754363495.100:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9634 comm="syz.3.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f684598d4d0 code=0x7fc00000 [ 343.807378][ T5848] usb 2-1: USB disconnect, device number 31 [ 343.824294][ T30] audit: type=1326 audit(1754363495.100:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9634 comm="syz.3.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684598eb69 code=0x7fc00000 [ 343.850926][ C1] vkms_vblank_simulate: vblank timer overrun [ 343.884113][ T30] audit: type=1326 audit(1754363495.100:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9634 comm="syz.3.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684598eb69 code=0x7fc00000 [ 344.007134][ T30] audit: type=1326 audit(1754363495.100:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9634 comm="syz.3.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684598eb69 code=0x7fc00000 [ 344.030472][ C1] vkms_vblank_simulate: vblank timer overrun [ 344.036906][ T30] audit: type=1326 audit(1754363495.100:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9634 comm="syz.3.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684598eb69 code=0x7fc00000 [ 344.060795][ T30] audit: type=1326 audit(1754363495.100:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9634 comm="syz.3.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684598eb69 code=0x7fc00000 [ 344.084083][ C1] vkms_vblank_simulate: vblank timer overrun [ 344.090988][ T30] audit: type=1326 audit(1754363495.110:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9634 comm="syz.3.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684598eb69 code=0x7fc00000 [ 344.114268][ C1] vkms_vblank_simulate: vblank timer overrun [ 344.195452][ T30] audit: type=1326 audit(1754363495.110:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9634 comm="syz.3.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684598eb69 code=0x7fc00000 [ 344.233923][ T30] audit: type=1326 audit(1754363495.110:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9634 comm="syz.3.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684598eb69 code=0x7fc00000 [ 344.412593][ T975] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 344.635649][ T975] usb 4-1: config 0 has no interfaces? [ 344.660369][ T975] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 344.699450][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.819903][ T975] usb 4-1: config 0 descriptor?? [ 345.000654][ T9659] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 345.509934][ T5848] usb 4-1: USB disconnect, device number 36 [ 345.652859][ T9667] 9pnet_fd: Insufficient options for proto=fd [ 345.820218][ T9676] sg_write: data in/out 813332815/406 bytes for SCSI command 0x0-- guessing data in; [ 345.820218][ T9676] program syz.1.942 not setting count and/or reply_len properly [ 346.380679][ T5895] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 346.760538][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 346.778243][ T5895] usb 4-1: config 4 has an invalid interface number: 51 but max is 0 [ 346.788365][ T5895] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 346.931715][ T5895] usb 4-1: config 4 has no interface number 0 [ 346.951246][ T5895] usb 4-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 346.964508][ T5881] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 346.972338][ T5895] usb 4-1: config 4 interface 51 has no altsetting 0 [ 346.981738][ T5895] usb 4-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 347.000511][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.008631][ T5895] usb 4-1: Product: syz [ 347.012925][ T5895] usb 4-1: Manufacturer: syz [ 347.017535][ T5895] usb 4-1: SerialNumber: syz [ 347.121277][ T5881] usb 6-1: Using ep0 maxpacket: 16 [ 347.128224][ T5895] cdc_eem 4-1:4.51: probe with driver cdc_eem failed with error -22 [ 347.148981][ T5881] usb 6-1: config 4 has an invalid interface number: 51 but max is 0 [ 347.615991][ T5881] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 347.630682][ T5895] usb 4-1: USB disconnect, device number 37 [ 347.638468][ T5881] usb 6-1: config 4 has no interface number 0 [ 347.649131][ T5881] usb 6-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 347.662662][ T5881] usb 6-1: config 4 interface 51 has no altsetting 0 [ 347.673058][ T5881] usb 6-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 347.683042][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.691823][ T5881] usb 6-1: Product: syz [ 347.696199][ T5881] usb 6-1: Manufacturer: syz [ 347.701176][ T5881] usb 6-1: SerialNumber: syz [ 347.715907][ T5881] cdc_eem 6-1:4.51: probe with driver cdc_eem failed with error -22 [ 347.874539][ T9700] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 348.154251][ T9702] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 348.394820][ T1094] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xff [ 348.424015][ T10] usb 6-1: USB disconnect, device number 20 [ 349.017416][ T9715] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 349.312440][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 349.312456][ T30] audit: type=1326 audit(1754363500.650:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9714 comm="syz.3.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684598eb69 code=0x7fc00000 [ 349.848438][ T30] audit: type=1326 audit(1754363501.150:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9714 comm="syz.3.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f684592ad69 code=0x7fc00000 [ 349.980718][ T30] audit: type=1326 audit(1754363501.150:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9714 comm="syz.3.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f684592ae2f code=0x7fc00000 [ 350.028521][ T30] audit: type=1326 audit(1754363501.150:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9714 comm="syz.3.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f684598eb69 code=0x7fc00000 [ 350.442085][ T5848] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 350.883212][ T5848] usb 3-1: device descriptor read/64, error -71 [ 351.083279][ T9733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.121478][ T5848] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 351.191005][ T5881] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 351.324271][ T9733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.350835][ T5848] usb 3-1: device descriptor read/64, error -71 [ 351.429410][ T9733] bond0 (unregistering): Released all slaves [ 351.441857][ T5881] usb 6-1: Using ep0 maxpacket: 32 [ 351.452579][ T5881] usb 6-1: unable to get BOS descriptor or descriptor too short [ 351.469969][ T5881] usb 6-1: config 6 has an invalid interface number: 28 but max is 0 [ 351.489334][ T5881] usb 6-1: config 6 has no interface number 0 [ 351.498864][ T5881] usb 6-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=d7.f0 [ 351.531757][ T5848] usb usb3-port1: attempt power cycle [ 351.537237][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.545641][ T5881] usb 6-1: Product: syz [ 351.554962][ T5881] usb 6-1: Manufacturer: syz [ 351.560121][ T5881] usb 6-1: SerialNumber: syz [ 351.582437][ T9756] netlink: 24 bytes leftover after parsing attributes in process `syz.4.965'. [ 351.773347][ T9758] syz.3.966: attempt to access beyond end of device [ 351.773347][ T9758] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 351.900780][ T5848] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 351.917255][ T5881] aiptek 6-1:6.28: interface has no int in endpoints, but must have minimum 1 [ 351.935955][ T5881] usb 6-1: USB disconnect, device number 21 [ 351.982717][ T5848] usb 3-1: device descriptor read/8, error -71 [ 352.747448][ T5848] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 352.792428][ T5848] usb 3-1: device descriptor read/8, error -71 [ 352.930877][ T5848] usb usb3-port1: unable to enumerate USB device [ 352.967954][ T30] audit: type=1326 audit(1754363504.300:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.4.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2d78eb69 code=0x7fc00000 [ 353.620133][ T9781] netlink: 132 bytes leftover after parsing attributes in process `syz.4.973'. [ 353.736547][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 353.923518][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 353.930266][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 353.958566][ T9] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 353.979963][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.000213][ T9] usb 4-1: Product: syz [ 354.007318][ T9] usb 4-1: Manufacturer: syz [ 354.015350][ T9] usb 4-1: SerialNumber: syz [ 354.038291][ T9] usb 4-1: config 0 descriptor?? [ 354.120599][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 354.300716][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 354.325845][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 354.379472][ T10] usb 2-1: config 6 has an invalid interface number: 28 but max is 0 [ 354.397985][ T10] usb 2-1: config 6 has no interface number 0 [ 354.736700][ T9] gs_usb 4-1:0.0: Couldn't get device config: (err=-71) [ 354.744991][ T9] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 354.752981][ T10] usb 2-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=d7.f0 [ 354.771007][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.780286][ T9] usb 4-1: USB disconnect, device number 38 [ 354.788705][ T10] usb 2-1: Product: syz [ 354.795074][ T10] usb 2-1: Manufacturer: syz [ 354.800645][ T10] usb 2-1: SerialNumber: syz [ 355.252154][ T10] aiptek 2-1:6.28: interface has no int in endpoints, but must have minimum 1 [ 355.272660][ T10] usb 2-1: USB disconnect, device number 32 [ 355.543106][ T9813] netlink: 'syz.2.978': attribute type 2 has an invalid length. [ 356.790637][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 356.867050][ T9818] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 357.010510][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 357.045025][ T10] usb 2-1: config 4 has an invalid interface number: 51 but max is 0 [ 357.053212][ T10] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 357.098210][ T10] usb 2-1: config 4 has no interface number 0 [ 357.118699][ T10] usb 2-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 357.171672][ T10] usb 2-1: config 4 interface 51 has no altsetting 0 [ 357.228617][ T10] usb 2-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 357.307827][ T9837] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 357.510591][ T5972] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 357.520636][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.547016][ T10] usb 2-1: Product: syz [ 357.560570][ T10] usb 2-1: Manufacturer: syz [ 357.582073][ T10] usb 2-1: SerialNumber: syz [ 357.607028][ T10] cdc_eem 2-1:4.51: probe with driver cdc_eem failed with error -22 [ 357.812873][ T10] usb 2-1: USB disconnect, device number 33 [ 358.043780][ T5972] usb 3-1: unable to get BOS descriptor or descriptor too short [ 358.275020][ T5972] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 358.333004][ T9847] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 358.404287][ T5972] usb 3-1: can't read configurations, error -71 [ 358.991132][ T30] audit: type=1400 audit(1754363510.290:1651): avc: denied { listen } for pid=9856 comm="syz.4.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_socket permissive=1 [ 359.300765][ T5895] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 359.542270][ T9878] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 359.829234][ T5895] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 359.837676][ T5895] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.850873][ T5895] usb 4-1: config 0 has no interface number 0 [ 359.861525][ T5895] usb 4-1: config 0 interface 113 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 359.874701][ T5895] usb 4-1: config 0 interface 113 has no altsetting 0 [ 360.093133][ T5895] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 360.185052][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.213499][ T5895] usb 4-1: Product: syz [ 360.237230][ T5895] usb 4-1: Manufacturer: syz [ 360.714266][ T5895] usb 4-1: SerialNumber: syz [ 360.751513][ T5895] usb 4-1: config 0 descriptor?? [ 360.761610][ T5895] pn533_usb 4-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 361.093628][ T12] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xff [ 361.141764][ T5972] usb 4-1: USB disconnect, device number 39 [ 362.579585][ T9930] syz.2.1007: attempt to access beyond end of device [ 362.579585][ T9930] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 362.697801][ T9932] erofs (device nbd1): cannot find valid erofs superblock [ 362.771801][ T5902] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 362.950560][ T5902] usb 4-1: Using ep0 maxpacket: 32 [ 362.960476][ T5902] usb 4-1: config 0 interface 0 has no altsetting 0 [ 362.969792][ T5902] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 362.982546][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.991986][ T5902] usb 4-1: Product: syz [ 362.996378][ T5902] usb 4-1: Manufacturer: syz [ 363.001256][ T5902] usb 4-1: SerialNumber: syz [ 363.081650][ T5902] usb 4-1: config 0 descriptor?? [ 363.130717][ T5881] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 363.280606][ T5881] usb 6-1: Using ep0 maxpacket: 32 [ 363.288337][ T5881] usb 6-1: config 0 interface 0 has no altsetting 0 [ 363.307838][ T5881] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 363.317145][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.325577][ T5881] usb 6-1: Product: syz [ 363.330009][ T5881] usb 6-1: Manufacturer: syz [ 363.335768][ T5881] usb 6-1: SerialNumber: syz [ 363.342934][ T5881] usb 6-1: config 0 descriptor?? [ 363.507421][ T5902] gs_usb 4-1:0.0: Couldn't get device config: (err=-71) [ 363.523019][ T5902] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 363.560054][ T5902] usb 4-1: USB disconnect, device number 40 [ 363.753326][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1018'. [ 363.807823][ T9953] macsec1: entered allmulticast mode [ 363.833908][ T5881] gs_usb 6-1:0.0: Couldn't get device config: (err=-71) [ 363.846298][ T9953] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 363.856714][ T5881] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 363.870855][ T5881] usb 6-1: USB disconnect, device number 22 [ 363.884701][ T9953] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 364.220605][ T5895] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 364.651880][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.673950][ T5895] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 364.692494][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.709155][ T5895] usb 3-1: config 0 descriptor?? [ 364.951026][ T5895] usbhid 3-1:0.0: can't add hid device: -71 [ 364.957055][ T5895] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 364.967982][ T5895] usb 3-1: USB disconnect, device number 38 [ 365.078791][ T9977] syz.3.1024: attempt to access beyond end of device [ 365.078791][ T9977] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 365.390595][ T5848] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 365.643984][ T9982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.696357][ T9984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.707005][ T9983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.722578][ T9983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.852577][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.864433][ T5848] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 365.967601][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.213556][ T5848] usb 3-1: config 0 descriptor?? [ 366.384985][ T9993] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 366.550762][T10005] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 366.814522][ T5848] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 366.827625][ T5848] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0009/input/input31 [ 366.984100][ T5848] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 367.092274][ T5848] usb 3-1: USB disconnect, device number 39 [ 367.136783][ T30] audit: type=1400 audit(1754363518.470:1652): avc: denied { connect } for pid=10017 comm="syz.4.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 367.265283][T10016] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 367.932547][T10032] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 368.600577][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 368.849846][T10045] syz.1.1044: attempt to access beyond end of device [ 368.849846][T10045] nbd1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 368.864956][T10045] gfs2: error -5 reading superblock [ 368.950511][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 369.295589][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 369.328224][ T10] usb 4-1: config 7 has an invalid interface number: 60 but max is 0 [ 369.391614][ T10] usb 4-1: config 7 has no interface number 0 [ 369.405148][T10049] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 369.566484][ T10] usb 4-1: New USB device found, idVendor=12d1, idProduct=ac64, bcdDevice=4f.de [ 369.594018][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.621543][ T10] usb 4-1: Product: syz [ 369.786682][T10058] netlink: 'syz.2.1046': attribute type 21 has an invalid length. [ 369.795033][T10058] netlink: 'syz.2.1046': attribute type 1 has an invalid length. [ 369.802850][T10058] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1046'. [ 370.171267][ T10] usb 4-1: Manufacturer: syz [ 370.338369][ T10] usb 4-1: SerialNumber: syz [ 370.781307][T10066] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 371.183041][T10036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.280957][T10036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.304300][ T10] qmi_wwan 4-1:7.60: probe with driver qmi_wwan failed with error -22 [ 371.323788][ T10] usb 4-1: USB disconnect, device number 41 [ 371.351242][T10077] netlink: 'syz.4.1052': attribute type 2 has an invalid length. [ 371.459896][T10079] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.1053'. [ 371.663014][T10081] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 371.734798][ T5972] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 371.979557][ T30] audit: type=1400 audit(1754363523.310:1653): avc: denied { getopt } for pid=10078 comm="syz.4.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 372.030563][ T5972] usb 6-1: Using ep0 maxpacket: 8 [ 372.037529][ T5972] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 372.049121][ T5972] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.062608][ T5972] usb 6-1: config 0 has no interfaces? [ 372.076700][ T5972] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 372.089386][ T5972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.111649][ T5972] usb 6-1: config 0 descriptor?? [ 373.213017][ T30] audit: type=1400 audit(1754363523.760:1654): avc: denied { getopt } for pid=10086 comm="syz.3.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 373.308258][T10072] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 373.600725][ T5895] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 373.952362][ T5895] usb 2-1: Using ep0 maxpacket: 8 [ 373.971943][ T5895] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 373.984225][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 373.995106][ T5895] usb 2-1: Product: syz [ 374.001976][ T5895] usb 2-1: Manufacturer: syz [ 374.013408][ T5895] usb 2-1: SerialNumber: syz [ 374.034049][ T30] audit: type=1400 audit(1754363525.370:1655): avc: denied { map } for pid=10101 comm="syz.3.1058" path="socket:[27170]" dev="sockfs" ino=27170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 374.093807][ T5895] usb 2-1: config 0 descriptor?? [ 374.326614][T10096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.336083][T10096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.465889][ T5895] usb 2-1: USB disconnect, device number 34 [ 374.656779][ T5881] usb 6-1: USB disconnect, device number 23 [ 374.709234][ T30] audit: type=1400 audit(1754363526.030:1656): avc: denied { bind } for pid=10108 comm="syz.2.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 375.141326][ T5881] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 375.156439][T10116] netlink: 'syz.2.1063': attribute type 2 has an invalid length. [ 375.326694][ T5881] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.349060][ T5881] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 375.384432][ T5881] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 375.418307][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 375.445110][ T5881] usb 6-1: SerialNumber: syz [ 375.465139][ T5881] usb 6-1: 0:2 : does not exist [ 375.508157][ T30] audit: type=1400 audit(1754363526.830:1657): avc: denied { read } for pid=10122 comm="syz.3.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 375.657163][ T30] audit: type=1400 audit(1754363526.970:1658): avc: denied { name_bind } for pid=10122 comm="syz.3.1067" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 376.013706][T10130] netlink: 'syz.2.1068': attribute type 3 has an invalid length. [ 376.021556][T10130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1068'. [ 376.030882][T10130] netlink: 'syz.2.1068': attribute type 3 has an invalid length. [ 376.038594][T10130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1068'. [ 376.165858][T10113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.180227][T10113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.313966][ T30] audit: type=1400 audit(1754363527.640:1659): avc: denied { create } for pid=10123 comm="syz.1.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 376.917562][ T30] audit: type=1400 audit(1754363528.230:1660): avc: denied { getopt } for pid=10135 comm="syz.3.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 377.272533][T10143] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 377.714418][ T5972] usb 6-1: USB disconnect, device number 24 [ 377.826251][T10156] netlink: 'syz.2.1075': attribute type 2 has an invalid length. [ 378.108370][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.770540][ T5881] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 381.240481][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 381.391563][ T5881] usb 3-1: unable to get BOS descriptor or descriptor too short [ 381.507888][ T5881] usb 3-1: config 6 has an invalid interface number: 28 but max is 0 [ 381.516584][ T5881] usb 3-1: config 6 has no interface number 0 [ 381.529618][ T5881] usb 3-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=d7.f0 [ 381.749523][T10189] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1085'. [ 381.749575][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.768846][ T5881] usb 3-1: Product: syz [ 381.774274][ T5881] usb 3-1: Manufacturer: syz [ 381.778910][ T5881] usb 3-1: SerialNumber: syz [ 381.790188][T10189] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 382.084233][ T5881] aiptek 3-1:6.28: interface has no int in endpoints, but must have minimum 1 [ 382.129017][ T5881] usb 3-1: USB disconnect, device number 40 [ 382.788792][T10215] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 382.916849][T10219] syz.5.1089: attempt to access beyond end of device [ 382.916849][T10219] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 383.105295][ T30] audit: type=1400 audit(1754363534.320:1661): avc: denied { map } for pid=10214 comm="syz.5.1089" path="socket:[27458]" dev="sockfs" ino=27458 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 383.250638][ T5881] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 383.410595][ T5881] usb 6-1: Using ep0 maxpacket: 32 [ 383.428308][ T5881] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 383.702542][ T5881] usb 6-1: config 0 has no interface number 0 [ 383.708795][ T5881] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x3 has invalid maxpacket 61183, setting to 1024 [ 384.661000][ T5881] usb 6-1: config 0 interface 132 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 384.677846][ T5881] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x2 has invalid maxpacket 4872, setting to 1024 [ 384.689124][ T5881] usb 6-1: config 0 interface 132 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 384.704502][ T5881] usb 6-1: New USB device found, idVendor=0421, idProduct=0492, bcdDevice=49.fc [ 384.714396][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.722514][ T5881] usb 6-1: Product: syz [ 384.726822][ T5881] usb 6-1: Manufacturer: syz [ 384.735461][ T5881] usb 6-1: SerialNumber: syz [ 384.745275][ T5881] usb 6-1: config 0 descriptor?? [ 384.753324][T10219] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 384.760735][T10219] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 384.769536][ T5881] usb-storage 6-1:0.132: USB Mass Storage device detected [ 384.791596][ T5881] usb-storage 6-1:0.132: Quirks match for vid 0421 pid 0492: 400 [ 386.327074][ T30] audit: type=1400 audit(1754363537.630:1662): avc: denied { listen } for pid=10234 comm="syz.2.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 386.621565][ T5849] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 387.715002][ T5895] usb 6-1: USB disconnect, device number 25 [ 388.118413][ T5881] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 388.416585][ T5881] usb 2-1: config 0 has an invalid interface number: 99 but max is 0 [ 388.425676][ T5881] usb 2-1: config 0 has no interface number 0 [ 388.442879][ T5881] usb 2-1: New USB device found, idVendor=0502, idProduct=16e3, bcdDevice=aa.21 [ 388.467935][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.486034][ T5881] usb 2-1: Product: syz [ 388.490333][ T5881] usb 2-1: Manufacturer: syz [ 388.505234][ T5881] usb 2-1: SerialNumber: syz [ 388.518511][ T5881] usb 2-1: config 0 descriptor?? [ 388.570579][ T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 388.654663][ T3594] Bluetooth: hci5: Frame reassembly failed (-84) [ 388.835135][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 388.931811][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 388.946133][ T10] usb 4-1: config 7 has an invalid interface number: 59 but max is 0 [ 388.965047][ T10] usb 4-1: config 7 has no interface number 0 [ 388.979166][ T10] usb 4-1: config 7 interface 59 has no altsetting 0 [ 388.992639][ T10] usb 4-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=cc.70 [ 389.001917][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.010362][ T10] usb 4-1: Product: syz [ 389.018862][ T30] audit: type=1400 audit(1754363540.350:1663): avc: denied { write } for pid=10274 comm="syz.1.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 389.020169][ T10] usb 4-1: Manufacturer: syz [ 389.046024][ T30] audit: type=1400 audit(1754363540.350:1664): avc: denied { nlmsg_write } for pid=10274 comm="syz.1.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 389.074389][ T10] usb 4-1: SerialNumber: syz [ 389.165048][ T5895] usb 2-1: USB disconnect, device number 35 [ 389.351423][ T10] kobil_sct 4-1:7.59: KOBIL USB smart card terminal converter detected [ 389.941747][ T10] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 390.017680][ T10] usb 4-1: USB disconnect, device number 42 [ 390.039377][ T10] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 390.215398][ T10] kobil_sct 4-1:7.59: device disconnected [ 390.453864][T10308] syz.1.1114: attempt to access beyond end of device [ 390.453864][T10308] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 390.650562][ T5849] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 391.005736][ T30] audit: type=1400 audit(1754363542.330:1665): avc: denied { ioctl } for pid=10309 comm="syz.5.1116" path="socket:[28706]" dev="sockfs" ino=28706 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 391.135526][T10315] binder: BINDER_SET_CONTEXT_MGR already set [ 391.150514][T10315] binder: 10314:10315 ioctl 4018620d 2000000000c0 returned -16 [ 391.159558][T10315] binder: 10314:10315 unknown command 0 [ 391.171560][T10315] binder: 10314:10315 ioctl c0306201 200000000080 returned -22 [ 391.203410][T10315] binder: BINDER_SET_CONTEXT_MGR already set [ 391.345086][T10328] binder: 10314:10328 ioctl 5000940f 0 returned -22 [ 391.350533][T10315] binder: 10314:10315 ioctl 4018620d 200000000040 returned -16 [ 391.393497][T10315] binder: 10314:10315 ioctl c0306201 200000000280 returned -11 [ 392.130530][T10347] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1125'. [ 392.750678][ T5848] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 392.834087][T10353] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 393.110499][ T5848] usb 6-1: Using ep0 maxpacket: 32 [ 393.119973][ T5848] usb 6-1: config 0 interface 0 has no altsetting 0 [ 393.130763][ T5848] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 393.139937][ T5848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.150642][ T5848] usb 6-1: Product: syz [ 393.161838][ T5848] usb 6-1: Manufacturer: syz [ 393.266775][ T5848] usb 6-1: SerialNumber: syz [ 393.283030][ T5848] usb 6-1: config 0 descriptor?? [ 393.377930][T10360] syz.1.1128: attempt to access beyond end of device [ 393.377930][T10360] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 394.140810][ T5848] gs_usb 6-1:0.0: Couldn't get device config: (err=-71) [ 394.170456][ T5848] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 394.210586][ T5848] usb 6-1: USB disconnect, device number 26 [ 394.530580][ T5895] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 394.561123][T10384] netlink: 'syz.1.1135': attribute type 21 has an invalid length. [ 394.569647][T10384] netlink: 'syz.1.1135': attribute type 1 has an invalid length. [ 394.577928][T10384] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1135'. [ 394.724135][ T5881] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 394.800634][ T5895] usb 4-1: Using ep0 maxpacket: 8 [ 394.854385][ T5895] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 394.882721][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.902118][ T5895] pvrusb2: Hardware description: Terratec Grabster AV400 [ 394.909238][ T5895] pvrusb2: ********** [ 394.986492][ T5895] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 394.999561][ T5895] pvrusb2: Important functionality might not be entirely working. [ 395.038960][ T5881] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 395.047451][ T5881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.057976][ T5895] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 395.071008][ T5881] usb 3-1: config 0 has no interface number 0 [ 395.078005][ T5881] usb 3-1: config 0 interface 113 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 395.094427][ T5895] pvrusb2: ********** [ 395.170248][ T5881] usb 3-1: config 0 interface 113 has no altsetting 0 [ 395.273451][ T5881] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 395.309244][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.357983][ T5881] usb 3-1: Product: syz [ 395.381866][ T5881] usb 3-1: Manufacturer: syz [ 395.388113][ T5881] usb 3-1: SerialNumber: syz [ 395.396572][ T5881] usb 3-1: config 0 descriptor?? [ 395.404188][ T5881] pn533_usb 3-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 396.813080][T10403] netlink: 'syz.5.1141': attribute type 2 has an invalid length. [ 397.540502][ T5881] usb 3-1: USB disconnect, device number 41 [ 397.571642][T10409] trusted_key: encrypted_key: master key parameter 'ü\ñë initial count (2850433972 ns). Using initial count to start timer. [ 401.549972][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.569102][ T10] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input34 [ 401.574144][ T5895] usb 4-1: Product: syz [ 401.587448][ T5895] usb 4-1: Manufacturer: syz [ 401.588690][ T5204] bcm5974 6-1:1.0: could not read from device [ 401.592510][ T5895] usb 4-1: SerialNumber: syz [ 401.612705][ T5895] usb 4-1: config 0 descriptor?? [ 401.616184][ T10] usb 6-1: USB disconnect, device number 27 [ 401.619135][ T5895] pn533_usb 4-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 401.670500][ T5204] bcm5974 6-1:1.0: could not read from device [ 401.772998][ T5881] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 401.971102][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 402.072530][ T5881] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 402.086155][ T5881] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 402.095439][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 402.103777][ T5881] usb 2-1: Product: syz [ 402.107992][ T5881] usb 2-1: Manufacturer: syz [ 402.112671][ T5881] usb 2-1: SerialNumber: syz [ 402.118478][ T5881] usb 2-1: config 0 descriptor?? [ 402.124000][T10457] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 402.132297][ T5881] hub 2-1:0.0: bad descriptor, ignoring hub [ 402.138302][ T5881] hub 2-1:0.0: probe with driver hub failed with error -5 [ 402.259897][T10464] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 402.490016][ T10] usb 2-1: USB disconnect, device number 37 [ 403.268435][ T5848] usb 4-1: USB disconnect, device number 44 [ 403.390543][ T10] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 404.205450][T10488] sd 0:0:1:0: device reset [ 404.210915][ T30] audit: type=1400 audit(1754363555.540:1667): avc: denied { listen } for pid=10481 comm="syz.4.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 404.530671][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 404.664523][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 404.736135][T10500] netlink: 'syz.5.1169': attribute type 2 has an invalid length. [ 405.344075][ T10] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 405.433299][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.695537][ T10] usb 2-1: Product: syz [ 405.699844][ T10] usb 2-1: Manufacturer: syz [ 405.704522][ T10] usb 2-1: SerialNumber: syz [ 405.711739][ T10] usb 2-1: config 0 descriptor?? [ 405.719708][ T30] audit: type=1400 audit(1754363557.050:1668): avc: denied { create } for pid=10491 comm="syz.2.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 406.013398][ T5895] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 406.218391][ T5895] usb 6-1: config 0 has an invalid interface number: 113 but max is 0 [ 406.399283][ T10] gs_usb 2-1:0.0: Couldn't get device config: (err=-71) [ 406.406327][ T10] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 406.418763][ T10] usb 2-1: USB disconnect, device number 38 [ 406.433945][ T5895] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.451050][ T5895] usb 6-1: config 0 has no interface number 0 [ 406.460558][ T5895] usb 6-1: config 0 interface 113 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 406.537494][ T5895] usb 6-1: config 0 interface 113 has no altsetting 0 [ 406.809119][ T5895] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 406.819322][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.876168][ T5895] usb 6-1: Product: syz [ 406.881100][ T5895] usb 6-1: Manufacturer: syz [ 406.890956][ T5895] usb 6-1: SerialNumber: syz [ 406.916304][ T5895] usb 6-1: config 0 descriptor?? [ 407.068591][ T5895] pn533_usb 6-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 407.441613][T10530] syz.1.1178: attempt to access beyond end of device [ 407.441613][T10530] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 408.690508][ T9] usb 6-1: USB disconnect, device number 28 [ 408.760519][T10537] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1180'. [ 408.770196][T10537] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 408.783889][ T30] audit: type=1400 audit(1754363560.120:1669): avc: denied { read } for pid=10540 comm="syz.5.1181" path="socket:[29114]" dev="sockfs" ino=29114 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 409.095518][T10549] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1181'. [ 409.270621][ T30] audit: type=1400 audit(1754363560.530:1670): avc: denied { listen } for pid=10540 comm="syz.5.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 409.382409][ T9] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 409.440517][ T10] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 409.491390][T10553] FAULT_INJECTION: forcing a failure. [ 409.491390][T10553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.506625][T10553] CPU: 1 UID: 0 PID: 10553 Comm: syz.5.1185 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 409.506650][T10553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 409.506660][T10553] Call Trace: [ 409.506666][T10553] [ 409.506673][T10553] dump_stack_lvl+0x16c/0x1f0 [ 409.506703][T10553] should_fail_ex+0x512/0x640 [ 409.506729][T10553] _copy_to_user+0x32/0xd0 [ 409.506746][T10553] ptr_to_user+0x23d/0x5c0 [ 409.506758][T10553] ? __pfx_ptr_to_user+0x10/0x10 [ 409.506772][T10553] ? __pfx_v4l2_ctrl_type_op_init+0x10/0x10 [ 409.506788][T10553] v4l2_g_ext_ctrls_common+0x976/0x1180 [ 409.506801][T10553] ? rcu_is_watching+0x12/0xc0 [ 409.506818][T10553] ? __pfx_v4l2_g_ext_ctrls_common+0x10/0x10 [ 409.506838][T10553] v4l2_g_ext_ctrls+0x66/0xc0 [ 409.506850][T10553] v4l_g_ext_ctrls+0x2e7/0x380 [ 409.506866][T10553] __video_do_ioctl+0xb40/0xfc0 [ 409.506882][T10553] ? __might_fault+0xe3/0x190 [ 409.506894][T10553] ? __pfx___video_do_ioctl+0x10/0x10 [ 409.506914][T10553] video_usercopy+0x4d0/0x1720 [ 409.506930][T10553] ? __pfx___video_do_ioctl+0x10/0x10 [ 409.506945][T10553] ? selinux_kernel_read_file+0xb1/0x130 [ 409.506959][T10553] ? __pfx_video_usercopy+0x10/0x10 [ 409.506984][T10553] v4l2_ioctl+0x1bd/0x250 [ 409.506998][T10553] ? __pfx_v4l2_ioctl+0x10/0x10 [ 409.507012][T10553] __x64_sys_ioctl+0x18e/0x210 [ 409.507030][T10553] do_syscall_64+0xcd/0x4c0 [ 409.507048][T10553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.507059][T10553] RIP: 0033:0x7ff90f38eb69 [ 409.507068][T10553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.507079][T10553] RSP: 002b:00007ff910137038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 409.507090][T10553] RAX: ffffffffffffffda RBX: 00007ff90f5b5fa0 RCX: 00007ff90f38eb69 [ 409.507097][T10553] RDX: 0000200000000100 RSI: 00000000c0205647 RDI: 0000000000000003 [ 409.507104][T10553] RBP: 00007ff910137090 R08: 0000000000000000 R09: 0000000000000000 [ 409.507110][T10553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.507116][T10553] R13: 0000000000000000 R14: 00007ff90f5b5fa0 R15: 00007ffddc2dd368 [ 409.507129][T10553] [ 409.727525][ C1] vkms_vblank_simulate: vblank timer overrun [ 409.752181][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.762668][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 409.772243][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.800726][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 409.809910][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 409.823459][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 409.841445][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 409.856333][ T10] usb 3-1: SerialNumber: syz [ 409.864521][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 409.880606][ T10] usb 3-1: 0:2 : does not exist [ 409.893434][ T9] usb 4-1: SerialNumber: syz [ 410.120013][ T9] usb 4-1: 0:2 : does not exist [ 410.330218][T10551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.350899][T10551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.351630][T10547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.383404][T10547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.751583][ T9] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 410.751894][ T5881] usb 4-1: USB disconnect, device number 45 [ 410.780532][ T5895] usb 3-1: USB disconnect, device number 42 [ 410.941899][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 410.950476][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 411.221197][ T9] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 411.239359][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.257216][ T9] usb 6-1: Product: syz [ 411.281802][ T9] usb 6-1: Manufacturer: syz [ 411.286401][ T9] usb 6-1: SerialNumber: syz [ 411.350906][ T9] usb 6-1: config 0 descriptor?? [ 411.575973][ T9] gs_usb 6-1:0.0: Couldn't send data format (err=-71) [ 411.591999][ T9] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 411.614126][ T9] usb 6-1: USB disconnect, device number 29 [ 411.731332][ T10] libceph: connect (1)[c::]:6789 error -101 [ 411.738841][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 411.755518][ T10] libceph: connect (1)[c::]:6789 error -101 [ 411.826826][T10583] syz.3.1192: attempt to access beyond end of device [ 411.826826][T10583] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 411.867455][ T5895] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 411.943810][T10577] ceph: No mds server is up or the cluster is laggy [ 412.168601][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 412.182144][ T5895] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 412.195254][ T5895] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.207520][ T5895] usb 2-1: config 0 has no interface number 0 [ 412.214401][ T5895] usb 2-1: config 0 interface 113 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 412.227861][ T5895] usb 2-1: config 0 interface 113 has no altsetting 0 [ 412.287834][ T5895] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 412.302507][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.319046][ T5895] usb 2-1: Product: syz [ 412.330065][ T5895] usb 2-1: Manufacturer: syz [ 412.342339][ T5895] usb 2-1: SerialNumber: syz [ 412.375953][ T5895] usb 2-1: config 0 descriptor?? [ 412.414609][ T5895] pn533_usb 2-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 413.859130][T10600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=10600 comm=syz.5.1199 [ 414.048159][ T30] audit: type=1400 audit(1754363565.380:1671): avc: denied { connect } for pid=10602 comm="syz.4.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 414.074077][T10605] comedi comedi2: driver 'ni_daq_700' does not support attach using comedi_config [ 414.206335][T10611] team0: No ports can be present during mode change [ 414.758273][ T5902] usb 2-1: USB disconnect, device number 39 [ 414.805703][ T30] audit: type=1400 audit(1754363566.140:1672): avc: denied { map } for pid=10619 comm="syz.1.1203" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 414.882868][ T30] audit: type=1400 audit(1754363566.140:1673): avc: denied { execute } for pid=10619 comm="syz.1.1203" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 414.992213][ T30] audit: type=1400 audit(1754363566.170:1674): avc: denied { setcurrent } for pid=10616 comm="syz.2.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 415.015394][ T5849] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 415.060965][ T30] audit: type=1400 audit(1754363566.290:1675): avc: denied { append } for pid=10601 comm="syz.3.1198" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 415.311346][ T30] audit: type=1400 audit(1754363566.640:1676): avc: denied { setattr } for pid=10641 comm="syz.5.1209" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 415.669417][T10650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1212'. [ 416.016341][T10651] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 416.079409][T10656] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1214'. [ 416.093334][T10656] netlink: 'syz.4.1214': attribute type 10 has an invalid length. [ 416.125059][T10656] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 416.320473][ T5848] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 416.363435][T10661] SELinux: syz.3.1215 (10661) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 416.613738][ T5848] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 416.632320][ T5848] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.294392][ T5848] usb 2-1: config 0 has no interface number 0 [ 417.522938][ T5848] usb 2-1: config 0 interface 113 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 417.582119][ T5848] usb 2-1: config 0 interface 113 has no altsetting 0 [ 417.616817][ T5848] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 417.651591][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.748755][ T5848] usb 2-1: Product: syz [ 417.753100][ T5848] usb 2-1: Manufacturer: syz [ 417.758351][ T5848] usb 2-1: SerialNumber: syz [ 417.769571][ T5848] usb 2-1: config 0 descriptor?? [ 417.780775][ T5848] pn533_usb 2-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 419.505719][T10683] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 419.523101][ C1] vkms_vblank_simulate: vblank timer overrun [ 419.645459][T10692] 9pnet_fd: Insufficient options for proto=fd [ 419.812544][ T5848] usb 2-1: USB disconnect, device number 40 [ 419.872369][ T10] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 420.680565][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 420.695916][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 420.705889][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 420.739698][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 420.756246][ T10] usb 3-1: SerialNumber: syz [ 420.771030][ T10] usb 3-1: 0:2 : does not exist [ 421.394102][T10690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.403036][T10690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.515444][T10718] netlink: 'syz.4.1229': attribute type 21 has an invalid length. [ 421.524190][T10718] netlink: 'syz.4.1229': attribute type 1 has an invalid length. [ 421.532001][T10718] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1229'. [ 422.050547][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 422.407585][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 422.430702][ T30] audit: type=1400 audit(1754363573.740:1677): avc: denied { read write } for pid=10720 comm="syz.3.1232" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 422.541208][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 422.555682][ T5972] usb 3-1: USB disconnect, device number 43 [ 422.562209][ T10] usb 2-1: config 6 has an invalid interface number: 28 but max is 0 [ 422.562656][ T30] audit: type=1400 audit(1754363573.740:1678): avc: denied { open } for pid=10720 comm="syz.3.1232" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 422.571956][ T10] usb 2-1: config 6 has no interface number 0 [ 422.664018][ T30] audit: type=1400 audit(1754363573.990:1679): avc: granted { setsecparam } for pid=10720 comm="syz.3.1232" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 422.686329][ T10] usb 2-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=d7.f0 [ 422.695891][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.705059][ T10] usb 2-1: Product: syz [ 422.709662][ T10] usb 2-1: Manufacturer: syz [ 422.714770][ T10] usb 2-1: SerialNumber: syz [ 422.836310][T10728] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 423.025365][ T10] aiptek 2-1:6.28: interface has no int in endpoints, but must have minimum 1 [ 423.071529][ T10] usb 2-1: USB disconnect, device number 41 [ 423.370823][ T5972] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 423.953961][ T5972] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 423.980035][ T5972] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.992703][ T5972] usb 3-1: config 0 has no interface number 0 [ 423.998861][ T5972] usb 3-1: config 0 interface 113 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 424.014412][ T5972] usb 3-1: config 0 interface 113 has no altsetting 0 [ 424.025108][ T5972] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 424.036466][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.044851][ T5972] usb 3-1: Product: syz [ 424.279797][T10742] syz.5.1237: attempt to access beyond end of device [ 424.279797][T10742] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 424.663936][ T5972] usb 3-1: Manufacturer: syz [ 424.668583][ T5972] usb 3-1: SerialNumber: syz [ 424.702793][ T5972] usb 3-1: config 0 descriptor?? [ 424.730970][ T5972] pn533_usb 3-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 425.321904][T10751] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 426.479192][ T5848] usb 3-1: USB disconnect, device number 44 [ 426.506711][T10766] binder: BINDER_SET_CONTEXT_MGR already set [ 426.513458][T10766] binder: 10763:10766 ioctl 4018620d 2000000000c0 returned -16 [ 426.639179][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 426.975156][T10772] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1245'. [ 426.984630][T10772] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 427.081968][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.111696][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 427.125292][T10782] geneve2: entered promiscuous mode [ 427.130966][T10782] geneve2: entered allmulticast mode [ 427.149027][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.170244][ T9] usb 4-1: config 0 descriptor?? [ 427.477550][ T30] audit: type=1400 audit(1754363578.810:1680): avc: denied { accept } for pid=10781 comm="syz.4.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 428.078466][T10793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.088145][T10794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1249'. [ 428.097271][T10793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.809298][ T9] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 428.830126][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000A/input/input36 [ 429.029110][ T9] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 429.169449][ T5972] [ 429.169463][ T5972] ====================================================== [ 429.169470][ T5972] WARNING: possible circular locking dependency detected [ 429.169477][ T5972] 6.16.0-syzkaller-11489-gd2eedaa3909b #0 Not tainted [ 429.169490][ T5972] ------------------------------------------------------ [ 429.169496][ T5972] kworker/0:5/5972 is trying to acquire lock: [ 429.169506][ T5972] ffff88802a2e80b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x72/0x310 [ 429.169559][ T5972] [ 429.169559][ T5972] but task is already holding lock: [ 429.169564][ T5972] ffffffff8e5aeca0 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x310 [ 429.169604][ T5972] [ 429.169604][ T5972] which lock already depends on the new lock. [ 429.169604][ T5972] [ 429.169610][ T5972] [ 429.169610][ T5972] the existing dependency chain (in reverse order) is: [ 429.169616][ T5972] [ 429.169616][ T5972] -> #2 (console_lock){+.+.}-{0:0}: [ 429.169639][ T5972] console_lock+0x7a/0xa0 [ 429.169657][ T5972] con_flush_chars+0x5e/0x80 [ 429.169678][ T5972] n_tty_receive_buf_common+0xa9a/0x1980 [ 429.169697][ T5972] tty_ldisc_receive_buf+0xa7/0x1a0 [ 429.169719][ T5972] tty_port_default_receive_buf+0x70/0xb0 [ 429.169745][ T5972] flush_to_ldisc+0x268/0x730 [ 429.169768][ T5972] process_one_work+0x9cf/0x1b70 [ 429.169786][ T5972] worker_thread+0x6c8/0xf10 [ 429.169802][ T5972] kthread+0x3c2/0x780 [ 429.169817][ T5972] ret_from_fork+0x5d7/0x6f0 [ 429.169833][ T5972] ret_from_fork_asm+0x1a/0x30 [ 429.169852][ T5972] [ 429.169852][ T5972] -> #1 (&tty->termios_rwsem){++++}-{4:4}: [ 429.169876][ T5972] down_write+0x92/0x200 [ 429.169890][ T5972] n_tty_flush_buffer+0x25/0x1b0 [ 429.169907][ T5972] tty_buffer_flush+0x236/0x310 [ 429.169930][ T5972] tty_ldisc_flush+0x64/0xe0 [ 429.169951][ T5972] tty_port_close_start+0x337/0x540 [ 429.169966][ T5972] tty_port_close+0x26/0x160 [ 429.169980][ T5972] uart_close+0x7b/0x220 [ 429.170000][ T5972] tty_release+0x3af/0x1430 [ 429.170024][ T5972] __fput+0x402/0xb70 [ 429.170044][ T5972] task_work_run+0x14d/0x240 [ 429.170062][ T5972] do_exit+0x86f/0x2bf0 [ 429.170086][ T5972] do_group_exit+0xd3/0x2a0 [ 429.170109][ T5972] get_signal+0x2673/0x26d0 [ 429.170129][ T5972] arch_do_signal_or_restart+0x8f/0x7d0 [ 429.170151][ T5972] exit_to_user_mode_loop+0x84/0x110 [ 429.170167][ T5972] do_syscall_64+0x3f6/0x4c0 [ 429.170192][ T5972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.170208][ T5972] [ 429.170208][ T5972] -> #0 (&buf->lock){+.+.}-{4:4}: [ 429.170231][ T5972] __lock_acquire+0x12a6/0x1ce0 [ 429.170255][ T5972] lock_acquire+0x179/0x350 [ 429.170279][ T5972] __mutex_lock+0x193/0x10b0 [ 429.170309][ T5972] tty_buffer_flush+0x72/0x310 [ 429.170332][ T5972] tty_ldisc_flush+0x64/0xe0 [ 429.170353][ T5972] __do_SAK+0x713/0x880 [ 429.170366][ T5972] vc_SAK+0x7f/0x310 [ 429.170382][ T5972] process_one_work+0x9cf/0x1b70 [ 429.170397][ T5972] worker_thread+0x6c8/0xf10 [ 429.170412][ T5972] kthread+0x3c2/0x780 [ 429.170426][ T5972] ret_from_fork+0x5d7/0x6f0 [ 429.170439][ T5972] ret_from_fork_asm+0x1a/0x30 [ 429.170458][ T5972] [ 429.170458][ T5972] other info that might help us debug this: [ 429.170458][ T5972] [ 429.170463][ T5972] Chain exists of: [ 429.170463][ T5972] &buf->lock --> &tty->termios_rwsem --> console_lock [ 429.170463][ T5972] [ 429.170489][ T5972] Possible unsafe locking scenario: [ 429.170489][ T5972] [ 429.170494][ T5972] CPU0 CPU1 [ 429.170499][ T5972] ---- ---- [ 429.170504][ T5972] lock(console_lock); [ 429.170515][ T5972] lock(&tty->termios_rwsem); [ 429.170527][ T5972] lock(console_lock); [ 429.170538][ T5972] lock(&buf->lock); [ 429.170548][ T5972] [ 429.170548][ T5972] *** DEADLOCK *** [ 429.170548][ T5972] [ 429.170552][ T5972] 4 locks held by kworker/0:5/5972: [ 429.170561][ T5972] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 429.170603][ T5972] #1: ffffc9000470fd10 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 429.170647][ T5972] #2: ffffffff8e5aeca0 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x310 [ 429.170686][ T5972] #3: ffff8880542130a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_flush+0x1c/0xe0 [ 429.170729][ T5972] [ 429.170729][ T5972] stack backtrace: [ 429.170738][ T5972] CPU: 0 UID: 0 PID: 5972 Comm: kworker/0:5 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 429.170759][ T5972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 429.170772][ T5972] Workqueue: events vc_SAK [ 429.170790][ T5972] Call Trace: [ 429.170796][ T5972] [ 429.170802][ T5972] dump_stack_lvl+0x116/0x1f0 [ 429.170828][ T5972] print_circular_bug+0x275/0x350 [ 429.170854][ T5972] check_noncircular+0x14c/0x170 [ 429.170881][ T5972] __lock_acquire+0x12a6/0x1ce0 [ 429.170910][ T5972] lock_acquire+0x179/0x350 [ 429.170935][ T5972] ? tty_buffer_flush+0x72/0x310 [ 429.170960][ T5972] ? __pfx___might_resched+0x10/0x10 [ 429.170983][ T5972] ? tty_buffer_flush+0x72/0x310 [ 429.171006][ T5972] __mutex_lock+0x193/0x10b0 [ 429.171031][ T5972] ? tty_buffer_flush+0x72/0x310 [ 429.171058][ T5972] ? __pfx___mutex_lock+0x10/0x10 [ 429.171089][ T5972] ? tty_buffer_flush+0x72/0x310 [ 429.171113][ T5972] tty_buffer_flush+0x72/0x310 [ 429.171138][ T5972] tty_ldisc_flush+0x64/0xe0 [ 429.171160][ T5972] __do_SAK+0x713/0x880 [ 429.171174][ T5972] ? mark_held_locks+0x49/0x80 [ 429.171201][ T5972] vc_SAK+0x7f/0x310 [ 429.171219][ T5972] process_one_work+0x9cf/0x1b70 [ 429.171240][ T5972] ? __pfx_console_callback+0x10/0x10 [ 429.171265][ T5972] ? __pfx_process_one_work+0x10/0x10 [ 429.171286][ T5972] ? assign_work+0x1a0/0x250 [ 429.171308][ T5972] worker_thread+0x6c8/0xf10 [ 429.171330][ T5972] ? __kthread_parkme+0x19e/0x250 [ 429.171354][ T5972] ? __pfx_worker_thread+0x10/0x10 [ 429.171373][ T5972] kthread+0x3c2/0x780 [ 429.171389][ T5972] ? __pfx_kthread+0x10/0x10 [ 429.171405][ T5972] ? rcu_is_watching+0x12/0xc0 [ 429.171426][ T5972] ? __pfx_kthread+0x10/0x10 [ 429.171442][ T5972] ret_from_fork+0x5d7/0x6f0 [ 429.171458][ T5972] ? __pfx_kthread+0x10/0x10 [ 429.171474][ T5972] ret_from_fork_asm+0x1a/0x30 [ 429.171499][ T5972] [ 429.470432][ T30] audit: type=1400 audit(1754363580.800:1681): avc: denied { setattr } for pid=10806 comm="syz.2.1256" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 429.470474][ T30] audit: type=1400 audit(1754363580.800:1682): avc: denied { accept } for pid=10806 comm="syz.2.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 430.453887][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.880188][ T5848] usb 4-1: USB disconnect, device number 46