last executing test programs: 7m16.145427236s ago: executing program 0 (id=546): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x908a, 0x840) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000700)={0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="20ad542ef20e000000000000000000"], 0x0, 0x0, 0x0, 0x0}) 7m15.265268726s ago: executing program 4 (id=547): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x400000c, 0x1e1000) mknod$loop(0x0, 0x400, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) io_cancel(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x22000) 7m14.74182879s ago: executing program 4 (id=548): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x2, 0x0, 0x3, 0x4, 0x0, 0x703, 0x25dfdbfc, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}]}, 0x20}, 0x1, 0x7}, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1f2) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x6}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000000080)=""/144) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4d, 0x0, @wg=@data}}}}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000002080)='net/igmp\x00') preadv(r5, &(0x7f00000026c0)=[{&(0x7f0000002180)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) io_uring_setup(0x7, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) 7m10.536768028s ago: executing program 4 (id=551): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e00", 0xfffffffffffffcde) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) recvmmsg(0xffffffffffffffff, &(0x7f00000021c0), 0x5b, 0x40, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0xa4}}, 0x4) setns(0xc9, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "9c"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/unix\x00') pread64(r4, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) 7m10.3368211s ago: executing program 0 (id=553): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x2, 0x0, 0x3, 0x4, 0x0, 0x703, 0x25dfdbfc, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}]}, 0x20}, 0x1, 0x7}, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1f2) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x6}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000000080)=""/144) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4d, 0x0, @wg=@data}}}}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000002080)='net/igmp\x00') preadv(r5, &(0x7f00000026c0)=[{&(0x7f0000002180)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) io_uring_setup(0x7, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084) connect$pppoe(r7, &(0x7f0000000240)={0x18, 0x0, {0x0, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa80008000300030000000800070005000000080001001000000006000200", @ANYRES16], 0x84}}, 0x20008040) 7m8.702061145s ago: executing program 4 (id=557): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x40000, 0x0) (fail_nth: 2) 7m7.271908258s ago: executing program 4 (id=558): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) (async) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x14) (async) syz_clone3(0x0, 0x0) (async, rerun: 32) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) openat$comedi(0xffffffffffffff9c, 0x0, 0x88042, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async, rerun: 64) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (rerun: 64) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000040)="1c0000001a009b8a2a569e409031c72023d7d6cb8f8ae3140000003b", 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0x50) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) (async, rerun: 64) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) (rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x803, 0x0) (async) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0) 7m7.186858724s ago: executing program 0 (id=559): socket$inet(0x2, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x27, 0x301, 0x2270bd24, 0xa5dfdbfe, {0x13}}, 0x14}, 0x1, 0x0, 0x0, 0x4044908}, 0x4080) 7m5.368873839s ago: executing program 4 (id=561): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000e"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2340, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xd) readv(r4, &(0x7f00000016c0)=[{&(0x7f00000002c0)=""/245, 0xf5}], 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000440)=0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs/usb/devices\x00', 0x0, 0x0) read(r5, &(0x7f0000000500)=""/100, 0x7ffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x3d3) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x800006, &(0x7f0000000280)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}]}}) 7m2.746464782s ago: executing program 0 (id=564): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42082, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r4 = socket(0x8, 0x5, 0x5) syz_usb_ep_read(r3, 0x1, 0x0, 0x0) syz_usb_ep_write(r3, 0x81, 0x40, &(0x7f0000000100)="900100"/64) ioctl$sock_SIOCOUTQNSD(r4, 0x4010618a, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8931, &(0x7f0000000000)={'team0\x00'}) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x2, {{0xa, 0x4e21, 0x65d, @local}}}, 0x88) r5 = socket$unix(0x1, 0x5, 0x0) recvfrom$unix(r5, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xfff2, 0xc}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x3}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 6m53.993270006s ago: executing program 0 (id=571): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) openat$cgroup(r2, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x10}}, './file0\x00'}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000002700)=""/79, 0x0, 0x60000}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fd3f00000000000009000000850000007b000000850000001100000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="000000002d43d2531e0000257e26", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m53.842946516s ago: executing program 0 (id=573): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000e"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2340, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xd) readv(r4, &(0x7f00000016c0)=[{&(0x7f00000002c0)=""/245, 0xf5}], 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000440)=0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs/usb/devices\x00', 0x0, 0x0) read(r5, &(0x7f0000000500)=""/100, 0x7ffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x3d3) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x800006, &(0x7f0000000280)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}]}}) 6m50.069609032s ago: executing program 32 (id=561): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000e"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2340, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xd) readv(r4, &(0x7f00000016c0)=[{&(0x7f00000002c0)=""/245, 0xf5}], 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000440)=0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs/usb/devices\x00', 0x0, 0x0) read(r5, &(0x7f0000000500)=""/100, 0x7ffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x3d3) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x800006, &(0x7f0000000280)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}]}}) 6m49.156669574s ago: executing program 2 (id=579): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000000714010000000000000000000500600004"], 0x18}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) fanotify_init(0x40, 0x101000) setreuid(0xffffffffffffffff, 0xee01) keyctl$clear(0x7, 0xfffffffffffffffb) r5 = syz_open_dev$video(&(0x7f0000000040), 0x80000000000004, 0x400001) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES8=r5, @ANYRESDEC=r5, @ANYRESDEC=0x0, @ANYRES64=r5, @ANYRESDEC=r5], 0x9) r6 = socket(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r7, &(0x7f0000000380)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000500060008"], 0x4a) write(r6, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e", 0x21) recvmmsg(r6, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 6m47.359038185s ago: executing program 2 (id=583): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}}, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r2, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x2c, r6, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xddad}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8982, &(0x7f00000000c0)={0x8, 'wg1\x00', {'ip_vti0\x00'}, 0xfffb}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f0000000200)={0x0, 0x210000}) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="020f00001100000000000000000000000800120000000100000000001000000006000000000000000000000000000000fe8000000000000000000000000000aafc02000000000000000000000000000003000600000000000200960f0d03c7e15279000000000000030005000000000002000000ffffffff0000000000000000010018"], 0x88}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_GET_XSAVE2(r9, 0x9000aecf, &(0x7f00002e1000/0x1000)=nil) 6m45.055269945s ago: executing program 2 (id=585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000040)=0x10, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r1 = syz_usbip_server_init(0x5) syz_usb_connect$uac2(0x0, 0x0, 0x0, 0x0) write$usbip_server(r1, &(0x7f0000001680)=@ret_submit={{0x3, 0x6, 0x0, 0x0, 0x8}, 0x4, 0x0, 0xa2f, 0x0, 0xe1}, 0x30) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x7}) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) write$P9_RLINK(r3, &(0x7f0000000000)={0x7, 0x47, 0x1}, 0x7) ioctl(r3, 0x1, &(0x7f0000000500)) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) 6m44.459793497s ago: executing program 2 (id=586): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) openat$cgroup(r2, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x10}}, './file0\x00'}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000002700)=""/79, 0x0, 0x60000}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fd3f00000000000009000000850000007b000000850000001100000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="000000002d43d2531e0000257e26", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/198, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0xf2ee04f03a7c95bf, @my=0x1}, 0x10) unshare(0x52040880) 6m43.224018616s ago: executing program 2 (id=592): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581033b4c"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0xc2, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1000, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = memfd_secret(0x80000) read$hiddev(r1, &(0x7f0000000000)=""/174, 0xae) 6m38.777726494s ago: executing program 33 (id=573): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000e"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2340, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xd) readv(r4, &(0x7f00000016c0)=[{&(0x7f00000002c0)=""/245, 0xf5}], 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000440)=0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs/usb/devices\x00', 0x0, 0x0) read(r5, &(0x7f0000000500)=""/100, 0x7ffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x3d3) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x800006, &(0x7f0000000280)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}]}}) 6m38.757499944s ago: executing program 2 (id=598): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000e"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2340, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xd) readv(r4, &(0x7f00000016c0)=[{&(0x7f00000002c0)=""/245, 0xf5}], 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000440)=0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs/usb/devices\x00', 0x0, 0x0) read(r5, &(0x7f0000000500)=""/100, 0x7ffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x3d3) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x800006, &(0x7f0000000280)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}]}}) 6m23.704999477s ago: executing program 34 (id=598): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000e"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2340, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xd) readv(r4, &(0x7f00000016c0)=[{&(0x7f00000002c0)=""/245, 0xf5}], 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000440)=0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs/usb/devices\x00', 0x0, 0x0) read(r5, &(0x7f0000000500)=""/100, 0x7ffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x3d3) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x800006, &(0x7f0000000280)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}]}}) 15.799846115s ago: executing program 3 (id=1378): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141000, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() syz_usb_connect$uac2(0x4, 0xf4, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x582, 0x16, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe2, 0x3, 0x1, 0x4d, 0x0, 0x3, {0x8, 0xb, 0x0, 0x0, 0x1, 0x5, 0x20, 0xb}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0xff, 0x42, 0xc}, [@sample_rate={0x9, 0x24, 0xd, 0x4, 0x0, 0x6, [0x1]}, @extension_unit={0x8, 0x24, 0x9, 0x1, 0x7ff, 0x9, ')'}, @source_unit={0x8, 0x24, 0xa, 0x7f, 0x0, 0x0, 0x4, 0x1}, @input_terminal={0x10, 0x24, 0x2, 0x3, 0x403, 0x3, 0xa0, 0x8, 0x4, 0xb1, 0x9, 0x2}, @effect_unit={0x9, 0x24, 0x7, 0x2, 0x2, 0x1, [0x0]}, @feature_unit={0x7, 0x24, 0x6, 0x1, 0x1, [0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x3, 0xfa, {0x8, 0x25, 0x1, 0x2, 0x3f, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x9, 0x1, 0x89, 0x8, "9b"}, @as_header={0x10, 0x24, 0x1, 0x5, 0xb2, 0x3, 0x1, 0x5, 0x6, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xffff, 0x8, 0x3, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x49, 0x9, 0x56, 0x3, 0x40}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x82dc, 0x0, 0xef}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x4, 0x9, 0x2, "02", 'A'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x1, 0x8, {0x8, 0x25, 0x1, 0x81, 0x3f, 0xc, 0x8}}}}}}}}]}}, 0x0) r1 = syz_usb_connect(0x5, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40c5) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c0000000800030004"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_usb_ep_read(r1, 0xf, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") write(0xffffffffffffffff, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000", 0x28) ioctl(r4, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e010000380100000100"/39) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) ioctl(r4, 0x5, &(0x7f00000005c0)="1e35822a479eb016b0766b9ff2cda8936cf5be5b6ba6e5097e62575b58eb5a6f23aff166f063903660df916fc0a5b1a099fd6d92f1399d613b1b012778870674d8f319f8f01acc9ee5a1b1cae384e5b043bddab698adf0a9f122ca3a0c67b28c780ec300632fe918731e60482a61883f38fd6f92b345220537c2ff84a75a8f6b9277286b3b44336cc8") syz_usb_disconnect(0xffffffffffffffff) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) 15.605694027s ago: executing program 6 (id=1379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x2, 0x0, 0x3, 0x4, 0x0, 0x703, 0x25dfdbfc, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}]}, 0x20}, 0x1, 0x7}, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1f2) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x6}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4d, 0x0, @wg=@data}}}}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000002080)='net/igmp\x00') preadv(r5, &(0x7f00000026c0)=[{&(0x7f0000002180)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) io_uring_setup(0x7, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084) connect$pppoe(r7, &(0x7f0000000240)={0x18, 0x0, {0x0, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa80008000300030000000800070005000000080001001000000006000200", @ANYRES16], 0x84}}, 0x20008040) 13.998514631s ago: executing program 1 (id=1381): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="ff"], 0x0) pselect6(0x40, &(0x7f00000024c0)={0xa, 0x29c5, 0x81, 0x8, 0xffffffffffffffff, 0x2000000008, 0x200000000000001, 0x5}, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xff2e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0xba, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='acpi_pm', 0x7) write(r1, &(0x7f00000001c0)='j', 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x0, 0x2, "68756200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd163d70b939bca40000000000000000000000000000000000000000000000000000000000000000000000172200"}) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r3 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00', @ANYBLOB="010200000000000000006700000008000300", @ANYRESOCT, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRESHEX=r1], 0x30}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 13.765243416s ago: executing program 5 (id=1383): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = gettid() r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000040)={0x17000, 0x3}) fallocate(r4, 0x1, 0x0, 0x1000000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') read$FUSE(r5, &(0x7f0000002380)={0x2020}, 0x2020) r6 = socket(0x2d, 0x2, 0x0) setsockopt(r6, 0x11d, 0x1, &(0x7f0000000200)="01000000", 0x4) sendto(r6, 0x0, 0x0, 0x0, &(0x7f0000000500)=@generic={0x2d, "00000000000000001f00010000000600"}, 0x34) r7 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000340)="483848a6457356bbfd6222189818cd21bdfa91543b01e6c7e2e5934d0997ca2e406682563b88ad73730fc711ffb58cbc0766161097e1c1236f2b7ad075eaff6313f68916bb1686d491a5b39513ac600149c264623187f78ce57e8717796ec4d0fd72ab1e8040bd3ae92c4734192f617c0302bddd01b294fb9f241d114c287882d7da1dba1b17da8b61d208afe0ea9d12b8c815343d9d1eee00df4ed4b9758028ea4d71ff8c5b3695eb23ab1e31b846135002ee394dd9383f1bc6474bbc", 0xbd, r7) r8 = dup3(0xffffffffffffffff, r1, 0x80000) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000100)={r8, r1, 0x4}) setgroups(0x1, &(0x7f0000000180)=[0x0]) getgroups(0x1, &(0x7f0000000200)=[0x0]) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x62}, 0x94) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f00000004c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x54}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}}], {{}, {}, {0x85, 0x0, 0x0, 0x10000000}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 13.611983512s ago: executing program 5 (id=1384): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc)=0x1, 0xd, 0x1, 0x0, 0x0, 0x400000) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086203, &(0x7f0000001140)) 12.200261313s ago: executing program 5 (id=1385): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x2000, 0x25dfdbff, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80000000, 0x8, 0x10000000, 0x20001, 0xa}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8a}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x4}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x4040000) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000020)={0x0, 0xe1c}}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mkdirat(0xffffffffffffff9c, 0x0, 0xbd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x47, &(0x7f0000000200)=0x7) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000540)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) 11.62386975s ago: executing program 6 (id=1386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000cde000/0x1000)=nil, 0x1000, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x140}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000000200)=0xed, 0x4) bind$inet6(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0xfffffffe, @loopback, 0x1}}, 0x0, 0x0, 0x4c, 0x0, "5aa1f50a3cb63c3635852b1d0b0ac8bbc455e170385fefb683affb65799f7a308ec96cd29e9b33df174bcdcf78a7bccda39e047719afe332de441e7e8e68bf5adbf7a35d75885fb07c3e40612a459451"}, 0xd8) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e60, 0x8, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000480)="78be47b0", 0x4}], 0x1}}], 0x1, 0x20080058) fcntl$getown(0xffffffffffffffff, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x1, 0x143) mount$cgroup(0x0, &(0x7f0000000100)='./rpc_pipefs/gssd/clntXX/gssd\x00', &(0x7f0000000180), 0x80000, &(0x7f00000001c0)={[{@subsystem='io'}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '\x14#(+'}}]}) ioctl$TUNSETIFF(r4, 0x541b, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c000280060001"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 11.345241015s ago: executing program 3 (id=1387): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d0001010080320904000002030000000921110100012223000905810340000a00000905020340"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x20, 0x1, 0x4, '&v=\"'}, 0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x4, 0xffffffffffffffff, 0x2}) 10.845795378s ago: executing program 7 (id=1388): setns(0xc9, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a3000000000090002"], 0x54}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 10.131148218s ago: executing program 6 (id=1389): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x13, 0xb, &(0x7f0000000500)=ANY=[@ANYRES64=0x0, @ANYRES32=0x1, @ANYRES64, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000540)='GPL\x00', 0x4, 0x9b, &(0x7f0000000640)=""/155, 0x41000, 0x40, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000d80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000dc0)=[{0x2, 0x5, 0x3, 0x3}, {0x0, 0x2, 0x7, 0x1}, {0x2, 0x5, 0xb}, {0x1, 0x2, 0x0, 0x9}, {0x2, 0xffffffff, 0x10, 0xc}], 0x10, 0x6}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r7, r6, 0x0) r8 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x8985, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x2, 0xff2, 0x0, 0x0, 0x1000, 0xffffffff, r4, 0x0, 0x39}}}, &(0x7f0000000480)) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x4}, [@typed={0x7, 0xb, 0x0, 0x0, @str='\x05\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2000) 9.559879833s ago: executing program 7 (id=1390): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x8000, 0x1d1, 0xef}, 0x10) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/kallsyms\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000000)=""/82, 0x52, 0x10001) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000040)={0x10, ""/16}) 8.48177353s ago: executing program 6 (id=1391): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6b8d, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000a40)=@any_dev={0x1, 0x2a, 0x0, 0x0, 0x1000, 0x0, r1, 0x0, 0x21}}}, &(0x7f0000000b00)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, 0x0) read$FUSE(r5, &(0x7f00000027c0)={0x2020}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r5, {0xee01}}, './file0\x00'}) mount$overlay(0x0, &(0x7f0000000280)='./file2\x00', &(0x7f00000002c0), 0x404832, &(0x7f0000000480)={[{@verity_off}, {@verity_require}], [{@fowner_gt={'fowner>', r6}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@flag='silent'}, {@flag='sync'}, {@uid_gt={'uid>', r8}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}) lstat(0x0, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r3, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000240)="a3b7f3558e4225a854af5b919704cb283564c5ff2e32cf996de4d967243c3ac7e061ba75e23125f7b0c78cd446437071514a5f4ef7f86db6909082ce3d6c5de057d3f46f5ea4b35ca1ce8bbb9f575f42c96aa986bb07694bf75d15a77c6c17e37fdbda", 0x63}, {&(0x7f0000000340)="524c8bc145dc9feda2ca67dd52316b563d3238ecedfe25b80d994c953d9102f414424fd2fa9458ff88f2384081c968760983c8708860e8a0a92cb815db2c79d63b3e5b7e790f6eae7f52ae8e9cd28dc53f1655b810f3f27a8f60a613c3550101ce05c1e20fab8a4f8b7ab406d71a0760660b4b468669209e75324a83294ba8f6d683dbfe3ff490ab509ce382ecd27567c297fd4d08bbe9fb7649b802b51ef7d975bd83916ea64e154be0aa330331", 0xae}, {&(0x7f0000000400)="ef8490afd58306876f835302512d1a06acec921a59c134f64567edcc3c10545e49b9dce357dc5d17d655ad2938ff16cf0a3ce2b895ffbec1bbe7bb49ee912c49434f3ba472ab452903375ca67a7c59149558f8a1040600f052ecf0b5354aee09651b2fb731a3503aa1c15a3c0a2ef18e56334348bdea186f2eff613453e1eb150d6ea9d6e5bbe34f5ce6d89ea3252c8f058cec0f556a99bf6a804b882b078d27909d882e0e90f1be4594a0b469665c94d91c86850a0c75b5df706de23ac21fa7f9fdd997", 0xc4}, {&(0x7f0000000500)="33308eae4f6f2f23425d0986c2a6874bd0d9406731285749602c8ba6b6f030a5591a98ff8d36d3c75aeb05e4f637eba55d66d06101119de71671784de5904189b7d13d01f3ff2a1ba0b8aea799f396c01e88c8e6242a0707e0aadac186fc80b48711eef1d949c1c7e3d7cf321d70f7f53fa8f1d20b090078d589b1bba52d1c7a21f343d23bd731b7d49df3aacc3c77766e5f67fd5cd5ad4cf28179315fc6606b42d0", 0xa2}, {&(0x7f00000005c0)="98676fe6b92ca703fe7513c18cec21a933029ba81fe7b611852a48f9c701f3d192f79548b7dbfa65763c1a2619c68f5e5aab8f788663a1948cc1827c3e455b86d9da5ad9b351e364cefb33bb2522e7d120bfa48eccc60984aac21a0e0274aefec62ed761f6", 0x65}, {&(0x7f0000000640)="ef05e0946b700f77b7e639a60bcd91e7aa47317789ef1b94aaff9388bbaa05b5259fb0f808a834d21bfc12deafa416d7e9b17b05047a94b602136cedd75487f970e0cd036cd7151cfb609027ebfe3511ba910cf3680cf131cd21de8bbca919b517a7d0506a94dbc44fb0845fe0", 0x6d}, {&(0x7f00000006c0)="076c6e3ff8aba6f003e37635591b1f61f343685bcb2647046c32f5a6592ea2804f42ffe6f1b26a4f89f0b3f8df14948a21fb56b0aabe80e375dcc5b8a09610fee05b8dea173a1559a94ad2a6e401a04b1144eb03e0834be162bf40d897f2806c10bb661d5d756d0adbb4c024d07e04c4c407b2d4692ffb91d0c8e4bff4e20915071e35d47d805ff1ff114efac1100fc76fc332480e64a901e0b144e4d0a0a2dd29d3553d7a440fb39de3753e33f7dde65243069cf7d478479b3827232643d81346165df58da95d9e397790ecfa352920e45e675a76713dce7821ba65eab1eb8d511214fd921a27844c1ea2ed30", 0xed}, {&(0x7f0000000b40)="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", 0x1bc}, {&(0x7f00000008c0)="a70e79d28318747b7d5edd055db303bad4e3fe6d6acf247003fd5083b131e31fdb9232a6806ea291de6b85c5aebbc2596b23ca7debd54f64e91a1d9f3cb41d1785a896b509931d3c3c0daaf5ba147b9c04c154b2ce4ea40fafcbfad7d13c359f709170806611aee915a6beb0beac8a1282282303ca94a009a4b6341c8c07ec56b238db25ecfb7a60e87a299da1c260bfbaed651593e181da4902d156787778019b10d1e731058eb7", 0xa8}], 0x9, &(0x7f00000007c0)=[@rights={{0x30, 0x1, 0x1, [r4, r2, r3, r0, r3, r7, r2, r3]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, r6, r9}}}, @rights={{0x34, 0x1, 0x1, [r7, r0, r2, r3, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r2]}}], 0xa0}}], 0x1, 0x44004) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000180)='ntfs3\x00', 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) read$sequencer(r10, &(0x7f00000109c0)=""/136, 0x88) 8.409663335s ago: executing program 1 (id=1392): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) recvmmsg(0xffffffffffffffff, &(0x7f00000021c0), 0x5b, 0x40, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4) setns(0xc9, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/unix\x00') pread64(r3, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) 8.194257617s ago: executing program 3 (id=1393): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) eventfd2(0x4a11, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x3f7, 0x1, 0x70bd27, 0x25dfdbfe, {0x1b, 0x21, './proc/thread-self/fail-nth', './proc/thread-self/fail-nth/file0'}, ["", "", "", ""]}, 0x54}, 0x1, 0x0, 0x0, 0x9}, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='7', 0x1) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111420000000000851000000200000085000000050000009500000000000000b500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r5, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000009c0)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe, 0x0}}, 0x10) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x1, 0xfffffffe}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r6, 0x111, 0x3, 0x1, 0x4) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) r7 = syz_open_dev$I2C(0x0, 0x1, 0x2603) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000100)={0x0, 0x6, 0x2, &(0x7f0000000140)={0x2, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9950cf5e1dee93"}}) 8.00693727s ago: executing program 5 (id=1394): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x1, 0x0, 0x0, 0x400000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x6, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008041}, 0x40800) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) recvmmsg(r4, 0x0, 0x0, 0x10020, &(0x7f0000001700)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) 6.869598464s ago: executing program 5 (id=1395): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x5f5b, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e08091b0c"], 0xb) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x5, 0x8002) timer_create(0x6, &(0x7f00000001c0)={0x0, 0xb, 0x2, @thr={&(0x7f0000000300)="d126b0b0962f171922000410666710572d07ad65026c90a603558276f61467eca42c88ad0fc50e51d17d8c49343a02ae067139a2ec2ff11a773b8318dcfb73efa7776a7b41608b93e7dbde176ff0e775304ba0d317c0b6723f92a9e35e70db9c55545c114492867e4594c74b87cf0eb554a5890b5f137aa4d0a26935e8a841a12ed41a2a16", &(0x7f00000003c0)="11122b96f1319bd3a7ef190f1b60f564e279e1364faffd1b2d33ea4976f2c9894b428fd9a1d874d3b7614f42f5ad41172e4d65996585f2fdfd390f14c690d9a2a78ae501efdd90079a5d426d58386ae878be49ad9723572ec32dfb3731c1cf0f04a04b997ee73818009ba5dcacbf6e44f869508539bbfd02e12e4d758454c99096690cce15abb3daa7035e42c8eb7ee7595e636532ac4ad880dc17c36ad14afeebc810c3f09be3fe2ef55e4ca60ecac51e84fe873cb563ba029df044c9edeb78494f480f56b0a86f9e9c245f"}}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f0000000080)=[{0x6, 0xc0, 0x0, 0x6}]}) r3 = landlock_create_ruleset(&(0x7f0000000180)={0x8201, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) socket(0x6, 0x2, 0x8001) close_range(r2, 0xffffffffffffffff, 0x0) 6.867810309s ago: executing program 1 (id=1396): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000e00)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x80}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x8000]}, 0x8, 0x800) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) 6.161763131s ago: executing program 1 (id=1397): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141000, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() syz_usb_connect$uac2(0x4, 0xf4, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x582, 0x16, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe2, 0x3, 0x1, 0x4d, 0x0, 0x3, {0x8, 0xb, 0x0, 0x0, 0x1, 0x5, 0x20, 0xb}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0xff, 0x42, 0xc}, [@sample_rate={0x9, 0x24, 0xd, 0x4, 0x0, 0x6, [0x1]}, @extension_unit={0x8, 0x24, 0x9, 0x1, 0x7ff, 0x9, ')'}, @source_unit={0x8, 0x24, 0xa, 0x7f, 0x0, 0x0, 0x4, 0x1}, @input_terminal={0x10, 0x24, 0x2, 0x3, 0x403, 0x3, 0xa0, 0x8, 0x4, 0xb1, 0x9, 0x2}, @effect_unit={0x9, 0x24, 0x7, 0x2, 0x2, 0x1, [0x0]}, @feature_unit={0x7, 0x24, 0x6, 0x1, 0x1, [0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x3, 0xfa, {0x8, 0x25, 0x1, 0x2, 0x3f, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x9, 0x1, 0x89, 0x8, "9b"}, @as_header={0x10, 0x24, 0x1, 0x5, 0xb2, 0x3, 0x1, 0x5, 0x6, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xffff, 0x8, 0x3, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x49, 0x9, 0x56, 0x3, 0x40}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x82dc, 0x0, 0xef}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x4, 0x9, 0x2, "02", 'A'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x1, 0x8, {0x8, 0x25, 0x1, 0x81, 0x3f, 0xc, 0x8}}}}}}}}]}}, 0x0) r1 = syz_usb_connect(0x5, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40c5) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c0000000800030004"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_usb_ep_read(r1, 0xf, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") write(0xffffffffffffffff, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000", 0x28) ioctl(r4, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e010000380100000100"/39) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) ioctl(r4, 0x5, &(0x7f00000005c0)="1e35822a479eb016b0766b9ff2cda8936cf5be5b6ba6e5097e62575b58eb5a6f23aff166f063903660df916fc0a5b1a099fd6d92f1399d613b1b012778870674d8f319f8f01acc9ee5a1b1cae384e5b043bddab698adf0a9f122ca3a0c67b28c780ec300632fe918731e60482a61883f38fd6f92b345220537c2ff84a75a8f6b9277286b3b44336cc8") syz_usb_disconnect(0xffffffffffffffff) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) 5.132554684s ago: executing program 3 (id=1398): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) close(r0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0x7fffffff, 0x9, 0x0, 0x2, 0x6, 0x9c, 0x8, 0x1ac, 0x2, 0x6, 0xf, 0x9, 0x0, 0x0, 0x12, 0x0, {0x6, 0x8000}, 0x80, 0x4}}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000000200)=[{r1, 0x1210}], 0x1, 0x1ff8) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10004000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="ccf69fb9b9b336b379771efc97a737913d79bfbd8316519262d39263fcca79aa090cc3b5edefb56c8717385e62a19e662a462e0d89b48d2ea343be9bc0cf81739b2a9d11209d5f7b7eed2aeeda8091bc84e8af43ba33cf4073d6ff0be02fef8d4ffd95c8149d9e97", @ANYRES8=r4, @ANYRESOCT=0x0], &(0x7f0000000240)='GPL\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_netfilter(r2, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[], 0xec}, 0x1, 0x0, 0x0, 0x4040}, 0x10) syz_usb_connect(0x5, 0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000e75f9208c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300001007c109050c04400006030f07059acbf5"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x8000) write$char_usb(r7, &(0x7f0000000140)="26899e7a297d15fa13568863b7e8d5c23c719d403720a1106c8bcd34f579a7141fa570cc42ed9a8421886bbf30753888b252deeb5a533aaa856ca3085684ceebb2d3420fb3f4fff702e0f62f9d4abdcf28d7f9e74119178abc3fa0a9cd3da2a6ee0061a63a5416bc37c6e2d7e423c36853a0b12a260bdcdf9614464c607a9f8a339064fe82e375266b7e053a9dd5fd146913e96225d102aaa81610cbb1a1960cf79b398449972b0af34b371820fa87b424b6a53cd2777ca7221d07a38d155fafede48816bcaebdbd4b6bf17a8d3c9ae06e82ce63810b6245b181fbcf75836189d81a0d2b8b58cdaebb4a4360c1c2ed0d334805dab3", 0xf5) 4.934266129s ago: executing program 7 (id=1399): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='raid1\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1:0\n', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0)='0\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r4, 0x5) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x42, 0xa}, {0x80, 0x40, 0x100, 0x100, 0xa}}}}, 0x17) r5 = accept4(r4, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) close(r5) write(0xffffffffffffffff, &(0x7f0000000540)='none\n', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 4.392474694s ago: executing program 6 (id=1400): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r2, &(0x7f00000024c0)={0x90, 0xffffffffffffffda, r3, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, {0x2, 0xffff, 0x9, 0x0, 0x20000000000007f, 0x8, 0x4, 0x9, 0x0, 0xc000, 0x0, r4, r5, 0x3, 0x5}}}, 0x90) 3.684778421s ago: executing program 1 (id=1401): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() listen(r1, 0x6) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x1000000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/lru_gen\x00', 0x2, 0x0) r5 = io_uring_setup(0x1, &(0x7f0000000380)={0x0, 0x0, 0x3800, 0x2}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x19b000, 0x0) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r5, 0x24, &(0x7f0000000400), 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) r7 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)='0', 0xfffff, 0xffffffffffffffff) request_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='debugfs\x00', r7) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) splice(r0, 0x0, r6, 0x0, 0x2000000008, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000001c0)='encrypted\x00', &(0x7f0000000240)=@secondary) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r8, &(0x7f0000000280)=ANY=[], 0x87) 3.427791138s ago: executing program 7 (id=1402): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x13, 0xb, &(0x7f0000000500)=ANY=[@ANYRES64=0x0, @ANYRES32=0x1, @ANYRES64, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000540)='GPL\x00', 0x4, 0x9b, &(0x7f0000000640)=""/155, 0x41000, 0x40, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000d80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000dc0)=[{0x2, 0x5, 0x3, 0x3}, {0x0, 0x2, 0x7, 0x1}, {0x2, 0x5, 0xb}, {0x1, 0x2, 0x0, 0x9}, {0x2, 0xffffffff, 0x10, 0xc}], 0x10, 0x6}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x8985, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x2, 0xff2, 0x0, 0x0, 0x1000, 0xffffffff, r4, 0x0, 0x39}}}, &(0x7f0000000480)) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x4}, [@typed={0x7, 0xb, 0x0, 0x0, @str='\x05\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2000) 2.933384128s ago: executing program 5 (id=1403): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d0001010080320904000002030000000921110100012223000905810340000a00000905020340"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x20, 0x1, 0x4, '&v=\"'}, 0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x4, 0xffffffffffffffff, 0x2}) 1.835842242s ago: executing program 7 (id=1404): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = gettid() r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000040)={0x17000, 0x3}) fallocate(r4, 0x1, 0x0, 0x1000000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') read$FUSE(r5, &(0x7f0000002380)={0x2020}, 0x2020) r6 = socket(0x2d, 0x2, 0x0) setsockopt(r6, 0x11d, 0x1, &(0x7f0000000200)="01000000", 0x4) sendto(r6, 0x0, 0x0, 0x0, &(0x7f0000000500)=@generic={0x2d, "00000000000000001f00010000000600"}, 0x34) r7 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000340)="483848a6457356bbfd6222189818cd21bdfa91543b01e6c7e2e5934d0997ca2e406682563b88ad73730fc711ffb58cbc0766161097e1c1236f2b7ad075eaff6313f68916bb1686d491a5b39513ac600149c264623187f78ce57e8717796ec4d0fd72ab1e8040bd3ae92c4734192f617c0302bddd01b294fb9f241d114c287882d7da1dba1b17da8b61d208afe0ea9d12b8c815343d9d1eee00df4ed4b9758028ea4d71ff8c5b3695eb23ab1e31b846135002ee394dd9383f1bc6474bbcce", 0xbe, r7) dup3(0xffffffffffffffff, r1, 0x80000) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, 0x0) setgroups(0x1, &(0x7f0000000180)=[0x0]) getgroups(0x1, &(0x7f0000000200)=[0x0]) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x62}, 0x94) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f00000004c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x54}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}], {{}, {}, {0x85, 0x0, 0x0, 0x10000000}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1.796003538s ago: executing program 1 (id=1405): memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000400304d8b84800010203010902690003010360d8080b0102010c20090904"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x8000, @any, 0xc, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @dev, 0x1}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0xc0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x8b5dbbb54c3d7bd3) openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys\x00', 0x1, 0x80) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x40000000000018e, 0x4000000) 1.576973004s ago: executing program 3 (id=1406): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x1, 0x0, 0x0, 0x400000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x6, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008041}, 0x40800) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) recvmmsg(r4, 0x0, 0x0, 0x10020, &(0x7f0000001700)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) 647.075265ms ago: executing program 3 (id=1407): syz_usb_connect(0xe7af3cf0599a7105, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./debug\x00', 0x1a6) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/fail_page_alloc/min-order\x00', 0x1, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000480)='1', 0x1}], 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8dc3, 0x900) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000080)=0xffffbf7f) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') pread64(r2, &(0x7f0000000100)=""/45, 0x2d, 0x40000000009) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r3, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) 617.403626ms ago: executing program 6 (id=1408): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) eventfd2(0x4a11, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x3f7, 0x1, 0x70bd27, 0x25dfdbfe, {0x1b, 0x21, './proc/thread-self/fail-nth', './proc/thread-self/fail-nth/file0'}, ["", "", "", ""]}, 0x54}, 0x1, 0x0, 0x0, 0x9}, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='7', 0x1) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111420000000000851000000200000085000000050000009500000000000000b500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r5, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000009c0)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe, 0x0}}, 0x10) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x1, 0xfffffffe}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r6, 0x111, 0x3, 0x1, 0x4) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$I2C_SMBUS(r7, 0x720, 0x0) 0s ago: executing program 7 (id=1409): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001180)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'bond0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd070010000000140bb80060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141106) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet(0x2, 0x800, 0x8) kernel console output (not intermixed with test programs): 674911][ T5799] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:61> initialized [ 594.699792][ T25] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 594.847360][ T25] usb 6-1: device descriptor read/64, error -71 [ 594.918759][T10985] tmpfs: Too few inodes for current use [ 595.087785][ T25] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 595.728098][ T25] usb 6-1: device descriptor read/64, error -71 [ 595.844060][ T25] usb usb6-port1: attempt power cycle [ 596.207950][ T25] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 596.228339][ T25] usb 6-1: device descriptor read/8, error -71 [ 596.269570][ T1916] usb 7-1: USB disconnect, device number 20 [ 596.348885][ T949] Bluetooth: hci2: Frame reassembly failed (-84) [ 596.544637][ T25] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 596.609100][ T25] usb 6-1: device descriptor read/8, error -71 [ 596.817817][ T25] usb usb6-port1: unable to enumerate USB device [ 596.922117][T10968] imon:send_packet: task interrupted [ 596.922129][T10968] imon:send_packet: packet tx failed (-512) [ 596.922161][T10968] imon:vfd_write: send packet #1 failed [ 597.466253][ T8558] net_ratelimit: 61 callbacks suppressed [ 597.614957][ T5711] usb 2-1: USB disconnect, device number 61 [ 598.040764][ T30] audit: type=1400 audit(2000000345.911:1256): avc: denied { bind } for pid=11012 comm="syz.1.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 598.237420][ T5659] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 598.638954][ T52] Bluetooth: hci2: command 0x1003 tx timeout [ 598.808780][ T5600] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 598.998874][ T5659] usb 4-1: device descriptor read/64, error -71 [ 599.016926][ T5600] Bluetooth: hci5: unexpected event for opcode 0x0c1b [ 599.034128][ T30] audit: type=1326 audit(2000000346.901:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.5.1171" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe87319e159 code=0x0 [ 599.215133][T11025] FAULT_INJECTION: forcing a failure. [ 599.215133][T11025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 599.215172][T11025] CPU: 1 UID: 0 PID: 11025 Comm: syz.1.1173 Tainted: G L syzkaller #0 PREEMPT(full) [ 599.215199][T11025] Tainted: [L]=SOFTLOCKUP [ 599.215206][T11025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 599.215224][T11025] Call Trace: [ 599.215231][T11025] [ 599.215239][T11025] dump_stack_lvl+0x100/0x190 [ 599.215272][T11025] should_fail_ex.cold+0x5/0xa [ 599.215299][T11025] _copy_to_user+0x32/0xd0 [ 599.215326][T11025] simple_read_from_buffer+0xcb/0x170 [ 599.215357][T11025] proc_fail_nth_read+0x1af/0x230 [ 599.215383][T11025] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 599.215410][T11025] ? rw_verify_area+0xce/0x6d0 [ 599.215429][T11025] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 599.215455][T11025] vfs_read+0x1e4/0xb40 [ 599.215477][T11025] ? lock_acquire+0x1d1/0x380 [ 599.215499][T11025] ? __fget_files+0x34/0x3d0 [ 599.215525][T11025] ? __pfx_vfs_read+0x10/0x10 [ 599.215544][T11025] ? find_held_lock+0x2b/0x80 [ 599.215573][T11025] ? __fget_files+0x215/0x3d0 [ 599.215603][T11025] ? __fget_files+0x21f/0x3d0 [ 599.215636][T11025] ksys_read+0x12a/0x250 [ 599.215658][T11025] ? __pfx_ksys_read+0x10/0x10 [ 599.215687][T11025] do_syscall_64+0x123/0x790 [ 599.215711][T11025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.215731][T11025] RIP: 0033:0x7f36abb5e98e [ 599.215747][T11025] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 599.215765][T11025] RSP: 002b:00007f36acac4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 599.215785][T11025] RAX: ffffffffffffffda RBX: 00007f36acac56c0 RCX: 00007f36abb5e98e [ 599.215798][T11025] RDX: 000000000000000f RSI: 00007f36acac50a0 RDI: 0000000000000009 [ 599.215810][T11025] RBP: 00007f36acac5090 R08: 0000000000000000 R09: 0000000000000000 [ 599.215822][T11025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.215833][T11025] R13: 00007f36abe26128 R14: 00007f36abe26090 R15: 00007ffee7610ed8 [ 599.215860][T11025] [ 599.287319][ T5659] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 599.417374][ T5659] usb 4-1: device descriptor read/64, error -71 [ 599.492408][T11027] FAULT_INJECTION: forcing a failure. [ 599.492408][T11027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 599.492430][T11027] CPU: 0 UID: 0 PID: 11027 Comm: syz.1.1174 Tainted: G L syzkaller #0 PREEMPT(full) [ 599.492446][T11027] Tainted: [L]=SOFTLOCKUP [ 599.492450][T11027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 599.492457][T11027] Call Trace: [ 599.492462][T11027] [ 599.492467][T11027] dump_stack_lvl+0x100/0x190 [ 599.492492][T11027] should_fail_ex.cold+0x5/0xa [ 599.492509][T11027] _copy_to_user+0x32/0xd0 [ 599.492524][T11027] copy_siginfo_to_user+0x27/0xc0 [ 599.492540][T11027] x64_setup_rt_frame+0xa03/0xce0 [ 599.492560][T11027] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 599.492578][T11027] ? do_send_specific+0x15c/0x360 [ 599.492594][T11027] arch_do_signal_or_restart+0x5ee/0x7e0 [ 599.492612][T11027] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 599.492638][T11027] exit_to_user_mode_loop+0x139/0x700 [ 599.492653][T11027] ? rcu_is_watching+0x13/0xc0 [ 599.492672][T11027] do_syscall_64+0x661/0x790 [ 599.492687][T11027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.492699][T11027] RIP: 0033:0x7f36abb9e159 [ 599.492709][T11027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.492721][T11027] RSP: 002b:00007f36acae6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c8 [ 599.492732][T11027] RAX: 0000000000000000 RBX: 00007f36abe25fa0 RCX: 00007f36abb9e159 [ 599.492739][T11027] RDX: 0000000000000000 RSI: 0000000000000021 RDI: 0000000000000355 [ 599.492746][T11027] RBP: 00007f36acae6090 R08: 0000000000000000 R09: 0000000000000000 [ 599.492753][T11027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.492760][T11027] R13: 00007f36abe26038 R14: 00007f36abe25fa0 R15: 00007ffee7610ed8 [ 599.492774][T11027] [ 599.527726][ T5659] usb usb4-port1: attempt power cycle [ 599.756686][ T30] audit: type=1400 audit(2000000347.621:1258): avc: denied { create } for pid=11030 comm="syz.7.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 599.917757][ T5659] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 600.117405][ T5711] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 600.240896][ T5659] usb 4-1: device descriptor read/8, error -71 [ 600.267341][ T5711] usb 7-1: Using ep0 maxpacket: 32 [ 600.267808][ T5711] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 600.268674][ T5711] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 600.268686][ T5711] usb 7-1: config 0 has no interface number 0 [ 600.268706][ T5711] usb 7-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 600.268718][ T5711] usb 7-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 600.268731][ T5711] usb 7-1: config 0 interface 12 has no altsetting 0 [ 600.270598][ T5711] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.270610][ T5711] usb 7-1: Product: syz [ 600.270618][ T5711] usb 7-1: Manufacturer: syz [ 600.270627][ T5711] usb 7-1: SerialNumber: syz [ 600.272388][ T5711] usb 7-1: config 0 descriptor?? [ 600.276616][ T5711] f81534 7-1:0.12: unsupported endpoint max packet size [ 600.371411][ T5799] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 600.507450][ T5659] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 600.528200][ T5659] usb 4-1: device descriptor read/8, error -71 [ 600.529342][ T5799] usb 2-1: unable to get BOS descriptor or descriptor too short [ 600.529794][ T5799] usb 2-1: not running at top speed; connect to a high speed hub [ 600.529818][ T5799] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.48 [ 600.530718][ T5799] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 600.530736][ T5799] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 600.532633][ T5799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.532646][ T5799] usb 2-1: Product: syz [ 600.532654][ T5799] usb 2-1: Manufacturer: syz [ 600.532663][ T5799] usb 2-1: SerialNumber: syz [ 600.656291][ T5659] usb usb4-port1: unable to enumerate USB device [ 600.708891][ T5704] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 601.071387][ T5704] usb 6-1: unable to get BOS descriptor or descriptor too short [ 601.086595][ T5704] usb 6-1: not running at top speed; connect to a high speed hub [ 601.095980][ T5704] usb 6-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.48 [ 601.143401][ T5704] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 601.143551][ T5704] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 601.185705][ T5704] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.185724][ T5704] usb 6-1: Product: syz [ 601.185759][ T5704] usb 6-1: Manufacturer: syz [ 601.185772][ T5704] usb 6-1: SerialNumber: syz [ 602.473359][T11046] net_ratelimit: 120 callbacks suppressed [ 602.758942][ T30] audit: type=1400 audit(2000000350.631:1259): avc: denied { wake_alarm } for pid=11053 comm="syz.7.1182" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 603.006023][ T25] usb 7-1: USB disconnect, device number 21 [ 603.242218][T11056] 9p: Bad value for 'rfdno' [ 603.441855][T11060] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1185'. [ 603.441872][T11060] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1185'. [ 603.645510][T11064] 9p: Bad value for 'rfdno' [ 603.769243][ T30] audit: type=1400 audit(2000000351.641:1260): avc: denied { create } for pid=11067 comm="syz.7.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 603.809592][ T5799] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 603.868458][ T5799] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 603.875765][ T5799] usb 2-1: USB disconnect, device number 62 [ 603.919802][T10145] udevd[10145]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 604.256230][ T12] Bluetooth: hci2: Frame reassembly failed (-84) [ 604.976889][T11085] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1192'. [ 604.976970][T11085] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1192'. [ 605.013422][ T5711] lo speed is unknown, defaulting to 1000 [ 605.340611][ T5704] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 605.424789][ T5704] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 605.434568][ T5704] usb 6-1: USB disconnect, device number 42 [ 605.474534][T10145] udevd[10145]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 605.538828][ T5711] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 605.707600][ T5711] usb 4-1: Using ep0 maxpacket: 32 [ 605.708879][ T5711] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 605.709817][ T5711] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 605.709838][ T5711] usb 4-1: config 0 has no interface number 0 [ 605.710027][ T5711] usb 4-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 605.710044][ T5711] usb 4-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 605.710092][ T5711] usb 4-1: config 0 interface 12 has no altsetting 0 [ 605.711982][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.712000][ T5711] usb 4-1: Product: syz [ 605.712011][ T5711] usb 4-1: Manufacturer: syz [ 605.712020][ T5711] usb 4-1: SerialNumber: syz [ 605.713718][ T5711] usb 4-1: config 0 descriptor?? [ 605.757731][ T5711] f81534 4-1:0.12: unsupported endpoint max packet size [ 605.847642][ T5704] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 605.997830][ T5704] usb 6-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 605.998705][ T5704] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.998720][ T5704] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.998732][ T5704] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 605.998764][ T5704] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.001015][ T5704] usb 6-1: config 0 descriptor?? [ 606.307389][ T5600] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 606.413978][ T5704] hid-u2fzero 0003:10C4:8ACF.0028: unknown main item tag 0x0 [ 606.414001][ T5704] hid-u2fzero 0003:10C4:8ACF.0028: unknown main item tag 0x0 [ 606.417182][ T5704] hid-u2fzero 0003:10C4:8ACF.0028: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.5-1/input0 [ 607.345865][ T5704] usb 6-1: USB disconnect, device number 43 [ 607.507309][ C1] net_ratelimit: 1141 callbacks suppressed [ 607.519037][T11097] 9p: Bad value for 'rfdno' [ 607.934915][ T5704] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 608.147699][ T5704] usb 2-1: Using ep0 maxpacket: 8 [ 608.148711][ T5704] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 608.150548][ T5704] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.150705][ T5704] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 608.150846][ T5704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 608.150874][ T5704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 608.150903][ T5704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 608.150929][ T5704] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 608.154223][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.154250][ T5704] usb 2-1: Product: syz [ 608.154313][ T5704] usb 2-1: Manufacturer: syz [ 608.154378][ T5704] usb 2-1: SerialNumber: syz [ 608.362074][ T5704] usb 2-1: config 0 descriptor?? [ 608.373360][T11099] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 608.735266][T11099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1196'. [ 609.035112][T11108] device-mapper: table: 248:0: too large device [ 609.035123][T11108] device-mapper: ioctl: error adding target to table [ 609.084952][T11104] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 609.293491][ T5799] usb 4-1: USB disconnect, device number 54 [ 609.909242][T11118] ISOFS: Unable to identify CD-ROM format. [ 609.937333][ T5704] rc_core: IR keymap rc-snapstream-firefly not found [ 609.937355][ T5704] Registered IR keymap rc-empty [ 609.938678][ T5704] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 609.942265][ T5704] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input64 [ 610.162335][ T5704] input: syz syz mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input65 [ 610.442880][ T5704] usb 2-1: USB disconnect, device number 63 [ 610.443033][ C0] ati_remote 2-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 610.669486][ T30] audit: type=1400 audit(2000000358.541:1261): avc: denied { write } for pid=11119 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 610.799152][ T30] audit: type=1400 audit(2000000358.651:1262): avc: denied { listen } for pid=11138 comm="syz.7.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 610.799194][ T30] audit: type=1400 audit(2000000358.651:1263): avc: denied { accept } for pid=11138 comm="syz.7.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 610.827371][ T5821] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 610.994943][ T30] audit: type=1400 audit(2000000358.761:1264): avc: denied { write } for pid=11143 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 611.099315][ T5821] usb 4-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 611.119730][ T5821] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 611.119861][ T5821] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59136, setting to 1024 [ 611.240749][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.240798][ T5821] usb 4-1: Product: syz [ 611.240878][ T5821] usb 4-1: Manufacturer: syz [ 611.240936][ T5821] usb 4-1: SerialNumber: syz [ 611.336707][T11129] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 611.394381][ T5821] symbolserial 4-1:1.0: symbol converter detected [ 611.425722][ T5821] usb 4-1: symbol converter now attached to ttyUSB0 [ 611.586994][ T5821] usb 4-1: USB disconnect, device number 55 [ 611.609751][ T5821] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 611.614632][ T5821] symbolserial 4-1:1.0: device disconnected [ 611.717396][ T5711] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 611.977337][ T5711] usb 2-1: Using ep0 maxpacket: 32 [ 611.977946][ T5711] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 611.978899][ T5711] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 611.978931][ T5711] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 611.978952][ T5711] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 611.978974][ T5711] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 611.980786][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.980801][ T5711] usb 2-1: Product: syz [ 611.980812][ T5711] usb 2-1: Manufacturer: syz [ 611.980823][ T5711] usb 2-1: SerialNumber: syz [ 611.989631][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 611.991960][ T5711] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input66 [ 612.097127][T11168] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1210'. [ 612.097206][T11168] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1210'. [ 612.407335][ T5711] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 612.407357][ T5711] (id 0x00) [ 612.536844][ T30] audit: type=1400 audit(2000000360.401:1265): avc: denied { write } for pid=11146 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.787337][ C1] net_ratelimit: 51 callbacks suppressed [ 612.847476][ T5711] rc_core: IR keymap rc-imon-pad not found [ 612.847545][ T5711] Registered IR keymap rc-empty [ 612.848007][ T5711] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 612.848090][ T5711] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 612.976854][T11177] tmpfs: Too few inodes for current use [ 612.979000][ T5711] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 613.004629][ T5711] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input67 [ 613.017749][ T5711] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:64> initialized [ 613.656367][T11181] ISOFS: Unable to identify CD-ROM format. [ 613.886653][ T30] audit: type=1400 audit(2000000361.751:1266): avc: denied { write } for pid=11179 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 614.565430][ T30] audit: type=1400 audit(2000000362.431:1267): avc: denied { write } for pid=11187 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 614.717698][ T30] audit: type=1400 audit(2000000362.581:1268): avc: denied { write } for pid=11198 comm="syz.5.1217" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 615.028253][ T30] audit: type=1400 audit(2000000362.901:1269): avc: denied { write } for pid=11207 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 615.153543][ T5821] usb 2-1: USB disconnect, device number 64 [ 615.208432][T11212] ISOFS: Unable to identify CD-ROM format. [ 615.397972][ T6966] Bluetooth: hci2: Frame reassembly failed (-84) [ 615.398032][ T6966] Bluetooth: hci2: Frame reassembly failed (-84) [ 615.398083][ T6966] Bluetooth: hci2: Frame reassembly failed (-84) [ 615.398135][ T6966] Bluetooth: hci2: Frame reassembly failed (-84) [ 615.398192][ T6966] Bluetooth: hci2: Frame reassembly failed (-84) [ 615.517394][ T5704] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 615.602073][ T5659] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 615.667590][ T5704] usb 7-1: Using ep0 maxpacket: 8 [ 615.668119][ T5704] usb 7-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 615.686455][ T5704] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.686478][ T5704] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 615.686492][ T5704] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 615.686506][ T5704] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 615.686521][ T5704] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 615.686535][ T5704] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 615.816626][ T5704] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.816645][ T5704] usb 7-1: Product: syz [ 615.816661][ T5704] usb 7-1: Manufacturer: syz [ 615.816676][ T5704] usb 7-1: SerialNumber: syz [ 615.834190][ T5659] usb 4-1: Using ep0 maxpacket: 32 [ 615.844683][ T5659] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 615.846402][ T5659] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 615.868438][ T5704] usb 7-1: config 0 descriptor?? [ 615.874777][T11213] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 615.875353][ T5659] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.875365][ T5659] usb 4-1: Product: syz [ 615.875373][ T5659] usb 4-1: Manufacturer: syz [ 615.875381][ T5659] usb 4-1: SerialNumber: syz [ 615.910664][ T5659] usb 4-1: config 0 descriptor?? [ 615.913196][T11220] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 615.931393][ T5659] hub 4-1:0.0: bad descriptor, ignoring hub [ 615.931441][ T5659] hub 4-1:0.0: probe with driver hub failed with error -5 [ 615.954075][ T5659] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input69 [ 616.096228][T11213] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1218'. [ 616.238010][T11241] device-mapper: table: 248:0: too large device [ 616.238022][T11241] device-mapper: ioctl: error adding target to table [ 616.378339][ T30] audit: type=1400 audit(2000000364.251:1270): avc: denied { write } for pid=11215 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 616.756507][ T5659] usb 4-1: USB disconnect, device number 56 [ 616.756626][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 616.876464][ T30] audit: type=1400 audit(2000000364.741:1271): avc: denied { write } for pid=11253 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.441267][ T52] Bluetooth: hci2: command 0x1003 tx timeout [ 617.479838][ T5600] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 617.767319][ T5704] rc_core: IR keymap rc-snapstream-firefly not found [ 617.767337][ T5704] Registered IR keymap rc-empty [ 617.768482][ T5704] rc rc0: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 617.770237][ T5704] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input68 [ 617.814175][ T5704] input: syz syz mouse as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input70 [ 617.985373][ C0] ati_remote 7-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 617.985435][ T5704] usb 7-1: USB disconnect, device number 22 [ 618.067443][ C0] net_ratelimit: 126 callbacks suppressed [ 618.696709][T11269] ISOFS: Unable to identify CD-ROM format. [ 618.710292][ T4954] ati_remote 7-1:0.0: ati_remote_open: usb_submit_urb failed! [ 619.361016][T11276] ISOFS: Unable to identify CD-ROM format. [ 619.736972][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 619.737000][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 620.310862][T11289] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1229'. [ 620.310944][T11289] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1229'. [ 621.202422][ T30] audit: type=1400 audit(2000000369.051:1272): avc: denied { cmd } for pid=11292 comm="iou-wrk-11294" path="socket:[33342]" dev="sockfs" ino=33342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 623.107330][ C1] net_ratelimit: 44 callbacks suppressed [ 624.057157][ T1916] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 624.301513][ T1916] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 0.00 [ 624.326013][ T1916] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 624.326055][ T1916] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.326074][ T1916] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 624.326128][ T1916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.347680][ T1916] cxacru 7-1:1.0: cxacru_bind: interface has incorrect endpoints [ 624.347764][ T1916] cxacru 7-1:1.0: usbatm_usb_probe: bind failed: -19! [ 625.726489][ T25] usb 7-1: USB disconnect, device number 23 [ 626.547468][ T5600] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 627.618428][ T5659] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 627.799317][ T30] audit: type=1400 audit(2000000375.671:1273): avc: denied { setopt } for pid=11340 comm="syz.6.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 627.814551][ T5659] usb 6-1: Using ep0 maxpacket: 32 [ 627.827426][ T5659] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 627.830967][ T5659] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 627.831077][ T5659] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 627.831107][ T5659] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 627.831137][ T5659] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 627.837856][ T5659] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.837897][ T5659] usb 6-1: Product: syz [ 627.837961][ T5659] usb 6-1: Manufacturer: syz [ 627.838025][ T5659] usb 6-1: SerialNumber: syz [ 628.264877][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 628.627307][ C1] net_ratelimit: 55 callbacks suppressed [ 628.742832][ T5659] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input71 [ 628.818564][ T5659] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 628.818579][ T5659] (id 0x00) [ 628.928526][ T5659] rc_core: IR keymap rc-imon-pad not found [ 628.928547][ T5659] Registered IR keymap rc-empty [ 628.928660][ T5659] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 628.928675][ T5659] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 628.959763][ T5659] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 628.976141][ T5659] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input72 [ 628.990479][ T5799] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 628.990499][ T5799] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 629.003038][ T5799] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz0] on syz0 [ 629.056501][ T5659] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:44> initialized [ 629.185394][T11334] imon:vfd_write: invalid payload size [ 629.213272][T11363] fido_id[11363]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 629.225593][T11334] tmpfs: Too few inodes for current use [ 629.437450][ T5799] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 629.522711][ T30] audit: type=1400 audit(2000000377.331:1274): avc: denied { write } for pid=11341 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 629.557419][ T5659] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 629.694809][T11376] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1249'. [ 629.694892][T11376] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1249'. [ 629.967600][ T5799] usb 4-1: Using ep0 maxpacket: 32 [ 629.968229][ T5799] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 629.969323][ T5799] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.973501][ T5799] usb 4-1: config 0 descriptor?? [ 629.999100][ T30] audit: type=1400 audit(2000000377.871:1275): avc: denied { write } for pid=11374 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 630.048060][ T5659] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 630.049766][ T5659] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.054638][ T5659] usb 7-1: config 0 descriptor?? [ 630.177402][ T5799] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 630.181223][ T5799] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 630.183522][ T5799] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 630.183578][ T5799] usb 4-1: media controller created [ 630.261785][ T5799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 630.284937][ T5659] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 630.383226][T11355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.386621][T11355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.413705][ T5799] az6027: usb out operation failed. (-71) [ 630.414193][ T5799] az6027: usb out operation failed. (-71) [ 630.414206][ T5799] stb0899_attach: Driver disabled by Kconfig [ 630.414215][ T5799] az6027: no front-end attached [ 630.414215][ T5799] [ 630.414640][ T5799] az6027: usb out operation failed. (-71) [ 630.414652][ T5799] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 630.456780][ T5799] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input73 [ 630.480163][ T5799] dvb-usb: schedule remote query interval to 400 msecs. [ 630.480180][ T5799] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 630.504023][ T5799] usb 4-1: USB disconnect, device number 57 [ 630.527138][ T5659] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 1 [ 630.527156][ T5659] [drm] Initialized udl on minor 1 [ 630.643258][ T5799] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 630.684073][ T30] audit: type=1400 audit(2000000378.551:1276): avc: denied { write } for pid=11384 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 631.846936][ T9] usb 6-1: USB disconnect, device number 44 [ 631.964409][ T30] audit: type=1400 audit(2000000379.831:1277): avc: denied { write } for pid=11397 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 632.154897][T11401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.155458][T11401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.565701][T11411] netlink: 'syz.6.1251': attribute type 4 has an invalid length. [ 633.509036][ T42] Bluetooth: hci2: Frame reassembly failed (-84) [ 633.612110][T11423] overlay: ./file0 is not a directory [ 633.907304][ C1] net_ratelimit: 57 callbacks suppressed [ 635.510877][ T52] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 635.575405][ T5799] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 635.588384][ T5659] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 635.588694][ T5659] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 635.842127][ T5704] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 635.858751][ T5659] usb 7-1: USB disconnect, device number 24 [ 635.870086][ T5704] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 635.872861][ T5799] usb 4-1: unable to get BOS descriptor or descriptor too short [ 635.873047][ T5704] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 635.873951][ T5799] usb 4-1: not running at top speed; connect to a high speed hub [ 635.873976][ T5799] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.48 [ 635.918655][ T5799] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 635.918679][ T5799] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 635.954429][ T5799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.954448][ T5799] usb 4-1: Product: syz [ 635.954460][ T5799] usb 4-1: Manufacturer: syz [ 635.954471][ T5799] usb 4-1: SerialNumber: syz [ 637.357022][ T30] audit: type=1400 audit(2000000385.211:1278): avc: denied { write } for pid=11399 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 638.930851][ T8558] net_ratelimit: 436 callbacks suppressed [ 639.018494][ T5799] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 639.084065][ T30] audit: type=1400 audit(2000000386.951:1279): avc: denied { write } for pid=11455 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 639.159864][ T30] audit: type=1400 audit(2000000387.021:1280): avc: denied { read } for pid=11446 comm="syz.5.1261" name="usbmon9" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 639.159915][ T30] audit: type=1400 audit(2000000387.021:1281): avc: denied { open } for pid=11446 comm="syz.5.1261" path="/dev/usbmon9" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 639.220981][ T5799] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 639.858738][ T5799] usb 4-1: USB disconnect, device number 58 [ 639.948808][T10145] udevd[10145]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 641.513717][ T30] audit: type=1400 audit(2000000389.381:1282): avc: denied { write } for pid=11468 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 641.717453][ T30] audit: type=1400 audit(2000000389.521:1283): avc: denied { write } for pid=11488 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.063568][ T52] Bluetooth: hci6: unexpected event for opcode 0x0c1b [ 642.078082][ T30] audit: type=1326 audit(2000000389.941:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11493 comm="syz.7.1262" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f416939e159 code=0x0 [ 642.358693][ T5659] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 642.530763][ T5659] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 642.532130][ T5659] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.536776][ T5659] usb 2-1: config 0 descriptor?? [ 642.755973][ T5659] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 643.898426][ T5659] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 643.898444][ T5659] [drm] Initialized udl on minor 1 [ 644.947320][ C1] net_ratelimit: 54 callbacks suppressed [ 645.349383][T11516] rdma_rxe: rxe_newlink: failed to add dummy0 [ 646.548177][ T30] audit: type=1326 audit(2000000394.371:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11513 comm="syz.7.1274" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f416939e159 code=0x0 [ 647.577384][ T5821] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 647.740825][ T5821] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 647.743557][ T5821] usb 4-1: config 0 has an invalid interface number: 83 but max is 0 [ 647.743579][ T5821] usb 4-1: config 0 has no interface number 0 [ 647.743602][ T5821] usb 4-1: too many endpoints for config 0 interface 83 altsetting 207: 195, using maximum allowed: 30 [ 647.743632][ T5821] usb 4-1: config 0 interface 83 altsetting 207 has 0 endpoint descriptors, different from the interface descriptor's value: 195 [ 647.743679][ T5821] usb 4-1: config 0 interface 83 has no altsetting 0 [ 647.808045][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.808057][ T5821] usb 4-1: Product: syz [ 647.808065][ T5821] usb 4-1: Manufacturer: syz [ 647.808074][ T5821] usb 4-1: SerialNumber: syz [ 647.832953][ T5821] usb 4-1: config 0 descriptor?? [ 648.931165][T11498] kexec: Could not allocate control_code_buffer [ 648.945295][ T5821] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 648.945334][ T5821] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 648.949930][ T5659] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 648.950239][ T5659] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 649.167425][ T5821] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 649.175478][ T5659] usb 2-1: USB disconnect, device number 65 [ 649.187762][ T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 649.188164][ T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 649.688515][ T1916] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 649.747177][ T5703] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 649.764246][ T5703] dvb_usb_az6027 8-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 649.766941][ T5703] usb 8-1: USB disconnect, device number 30 [ 649.779694][T11543] netlink: 'syz.3.1279': attribute type 3 has an invalid length. [ 649.849345][T11548] fido_id[11548]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 649.857309][ T1916] usb 7-1: Using ep0 maxpacket: 8 [ 649.872914][ T1916] usb 7-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 649.879127][ T1916] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.879165][ T1916] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 649.879187][ T1916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 649.879211][ T1916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 649.879235][ T1916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 649.879255][ T1916] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 649.925621][ T1916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.925639][ T1916] usb 7-1: Product: syz [ 649.925659][ T1916] usb 7-1: Manufacturer: syz [ 649.925672][ T1916] usb 7-1: SerialNumber: syz [ 649.982469][ T1916] usb 7-1: config 0 descriptor?? [ 649.987432][ C0] net_ratelimit: 57 callbacks suppressed [ 649.997580][T11542] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 650.177328][ T5703] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 650.205248][T11542] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1283'. [ 650.282006][T11542] device-mapper: table: 248:0: too large device [ 650.282017][T11542] device-mapper: ioctl: error adding target to table [ 650.348046][ T5703] usb 8-1: Using ep0 maxpacket: 32 [ 650.348792][ T5703] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 650.349937][ T5703] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.352858][ T5703] usb 8-1: config 0 descriptor?? [ 650.669689][ T5703] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 650.673107][ T5703] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 650.674821][ T5703] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 650.674894][ T5703] usb 8-1: media controller created [ 650.785627][ T5703] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 651.510835][T11540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.517029][T11540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.597341][ T1916] rc_core: IR keymap rc-snapstream-firefly not found [ 651.597357][ T1916] Registered IR keymap rc-empty [ 651.599951][ T1916] rc rc0: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 651.602029][ T1916] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input74 [ 651.656095][ T1916] input: syz syz mouse as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input75 [ 651.701183][ T9] usb 4-1: USB disconnect, device number 59 [ 651.719966][T11527] ALSA: mixer_oss: invalid OSS volume '' [ 651.719997][T11527] ALSA: mixer_oss: invalid OSS volume ' aü=!ÿšê˹=·+LKWà„MšñŒëÓ:§~' [ 651.720011][T11527] ALSA: mixer_oss: invalid OSS volume 'ƒ%wÀ¹¼Ñº§ˆMò#i¥6[…ìNVLéúÃKK-' [ 651.720023][T11527] ALSA: mixer_oss: invalid OSS volume 'Ú¶ÿÌêZù•ç:Ñ 3.âôF?ºYùð¹Š^x1b' [ 651.741331][T11527] ALSA: mixer_oss: invalid OSS volume ' ”—$i.A<­”g—Õmo鱌‚éÜ)ã&:/“¢Œ' [ 651.741369][T11527] ALSA: mixer_oss: invalid OSS volume 'Ü~)~×ó·Š´¤‹ì}Úìk/FJ°¶éƒ—†]j' [ 651.741400][T11527] ALSA: mixer_oss: invalid OSS volume '§‹' [ 651.741413][T11527] ALSA: mixer_oss: invalid OSS volume 'FµµÈq(ã2÷Äž¾?åsÒï È[œ'|¾' [ 651.741444][T11527] ALSA: mixer_oss: invalid OSS volume '³§Û}`K’ƈãZ>_|¯#X³d#>zž^a¨' [ 651.741454][T11527] ALSA: mixer_oss: invalid OSS volume '*‹Ümo‹É×G%BuZkÂÄ@¤ª–m¸Iv¯Ó [ 659.536966][T11597] dump_stack_lvl+0x100/0x190 [ 659.536999][T11597] should_fail_ex.cold+0x5/0xa [ 659.537027][T11597] should_failslab+0xc2/0x120 [ 659.537053][T11597] __kmalloc_noprof+0xfc/0x840 [ 659.537075][T11597] ? vhost_dev_set_owner+0x190/0xa30 [ 659.537099][T11597] vhost_dev_set_owner+0x190/0xa30 [ 659.537117][T11597] vhost_dev_ioctl+0x521/0xe70 [ 659.537130][T11597] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 659.537146][T11597] ? do_vfs_ioctl+0x226/0x13e0 [ 659.537159][T11597] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 659.537173][T11597] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 659.537190][T11597] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 659.537210][T11597] vhost_vsock_dev_ioctl+0x320/0xb70 [ 659.537226][T11597] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 659.537250][T11597] ? selinux_file_ioctl+0x13b/0x290 [ 659.537280][T11597] ? selinux_file_ioctl+0xb6/0x290 [ 659.537305][T11597] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 659.537330][T11597] __x64_sys_ioctl+0x18e/0x210 [ 659.537354][T11597] do_syscall_64+0x123/0x790 [ 659.537374][T11597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.537391][T11597] RIP: 0033:0x7fe87319e159 [ 659.537407][T11597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.537424][T11597] RSP: 002b:00007fe873fd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 659.537444][T11597] RAX: ffffffffffffffda RBX: 00007fe873425fa0 RCX: 00007fe87319e159 [ 659.537457][T11597] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000007 [ 659.537470][T11597] RBP: 00007fe87323506b R08: 0000000000000000 R09: 0000000000000000 [ 659.537482][T11597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 659.537493][T11597] R13: 00007fe873426038 R14: 00007fe873425fa0 R15: 00007ffdb20645a8 [ 659.537516][T11597] [ 659.563014][ T30] audit: type=1400 audit(2000000407.421:1286): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=36676 daddr=10.128.0.2 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 659.982352][T11613] lo speed is unknown, defaulting to 1000 [ 660.228805][ T30] audit: type=1400 audit(2000000407.701:1287): avc: denied { setopt } for pid=11610 comm="syz.3.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 660.544343][ T5704] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 660.577937][ T5704] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 660.578496][ T5704] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 660.578545][ T5704] usb 6-1: media controller created [ 660.707330][ C1] net_ratelimit: 84 callbacks suppressed [ 661.236561][ T5704] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 661.343249][ T5704] zl10353_read_register: readreg error (reg=127, ret==-71) [ 661.357411][ T44] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 661.357549][ T25] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 661.517689][ T44] usb 7-1: Using ep0 maxpacket: 8 [ 661.521237][ T44] usb 7-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 661.543549][ T44] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 661.543571][ T44] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 661.543586][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 661.543600][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 661.543616][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 661.543635][ T44] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 661.566833][ T25] usb 2-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 661.618367][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 661.618395][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59136, setting to 1024 [ 661.650577][ T5704] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 661.654525][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.654545][ T44] usb 7-1: Product: syz [ 661.654558][ T44] usb 7-1: Manufacturer: syz [ 661.654573][ T44] usb 7-1: SerialNumber: syz [ 661.676212][ T5704] usb 6-1: USB disconnect, device number 45 [ 661.699060][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.699077][ T25] usb 2-1: Product: syz [ 661.699089][ T25] usb 2-1: Manufacturer: syz [ 661.699101][ T25] usb 2-1: SerialNumber: syz [ 661.704630][T11622] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 661.745679][ T44] usb 7-1: config 0 descriptor?? [ 661.746238][T11619] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 661.770327][ T25] symbolserial 2-1:1.0: symbol converter detected [ 661.863252][ T25] usb 2-1: symbol converter now attached to ttyUSB0 [ 663.582023][T11634] ISOFS: Unable to identify CD-ROM format. [ 663.993124][T11619] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1300'. [ 664.144193][T11619] device-mapper: table: 248:0: too large device [ 664.144211][T11619] device-mapper: ioctl: error adding target to table [ 664.176354][ T5821] usb 2-1: USB disconnect, device number 66 [ 664.206445][ T5821] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 664.207069][ T5821] symbolserial 2-1:1.0: device disconnected [ 664.287428][ T44] rc_core: IR keymap rc-snapstream-firefly not found [ 664.287445][ T44] Registered IR keymap rc-empty [ 664.288542][ T44] rc rc0: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 664.290217][ T44] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input77 [ 664.355042][ T44] input: syz syz mouse as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input78 [ 665.141725][ T5821] usb 7-1: USB disconnect, device number 26 [ 665.141748][ C1] ati_remote 7-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 665.145027][ T4954] ati_remote 7-1:0.0: ati_remote_open: usb_submit_urb failed! [ 666.177353][ T5821] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 666.227368][ C1] net_ratelimit: 58 callbacks suppressed [ 666.343273][ T30] audit: type=1400 audit(2000000414.111:1288): avc: denied { ioctl } for pid=11652 comm="syz.6.1313" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 666.343522][ T30] audit: type=1400 audit(2000000414.111:1289): avc: denied { search } for pid=11657 comm="sed" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 666.343629][ T30] audit: type=1400 audit(2000000414.111:1290): avc: denied { read } for pid=11657 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1805 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 666.343699][ T30] audit: type=1400 audit(2000000414.181:1291): avc: denied { open } for pid=11657 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1805 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 666.351576][ T30] audit: type=1400 audit(2000000414.221:1292): avc: denied { getattr } for pid=11657 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1805 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 666.698247][ T30] audit: type=1400 audit(2000000414.251:1293): avc: denied { recv } for pid=11650 comm="syz.1.1312" saddr=10.128.0.169 src=30006 daddr=10.128.0.2 dest=46048 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 666.723144][ T5821] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 666.749357][ T5821] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.896776][ T5821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.896796][ T5821] usb 7-1: Product: syz [ 666.896811][ T5821] usb 7-1: Manufacturer: syz [ 666.896826][ T5821] usb 7-1: SerialNumber: syz [ 667.025476][ T30] audit: type=1400 audit(2000000414.891:1294): avc: denied { read } for pid=5596 comm="syz-executor" name="loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 667.025519][ T30] audit: type=1400 audit(2000000414.891:1295): avc: denied { open } for pid=5596 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 667.025556][ T30] audit: type=1400 audit(2000000414.891:1296): avc: denied { ioctl } for pid=5596 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 667.025997][ T25] libceph: connect (1)[c::]:6789 error -101 [ 667.026183][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 667.154796][ T25] libceph: connect (1)[c::]:6789 error -101 [ 667.154949][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 667.507957][ T25] libceph: connect (1)[c::]:6789 error -101 [ 667.514716][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 667.574130][T11660] ceph: No mds server is up or the cluster is laggy [ 667.627039][ T30] audit: type=1400 audit(2000000415.491:1297): avc: denied { read } for pid=11665 comm="syz.1.1314" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 667.934401][T11670] ISOFS: Unable to identify CD-ROM format. [ 668.141793][ T5659] hid-generic 684B:0002:0002.002B: unknown main item tag 0x0 [ 668.141816][ T5659] hid-generic 684B:0002:0002.002B: unknown main item tag 0x0 [ 668.141855][ T5659] hid-generic 684B:0002:0002.002B: unknown main item tag 0x0 [ 668.141876][ T5659] hid-generic 684B:0002:0002.002B: unknown main item tag 0x0 [ 668.141895][ T5659] hid-generic 684B:0002:0002.002B: unknown main item tag 0x0 [ 668.141914][ T5659] hid-generic 684B:0002:0002.002B: unknown main item tag 0x0 [ 668.141932][ T5659] hid-generic 684B:0002:0002.002B: unknown main item tag 0x0 [ 668.141950][ T5659] hid-generic 684B:0002:0002.002B: unknown main item tag 0x0 [ 668.141988][ T5659] hid-generic 684B:0002:0002.002B: unknown main item tag 0x0 [ 668.142008][ T5659] hid-generic 684B:0002:0002.002B: unknown main item tag 0x0 [ 668.145754][ T5659] hid-generic 684B:0002:0002.002B: hidraw0: HID v0.08 Device [syz0] on syz1 [ 668.836903][T11673] ISOFS: Unable to identify CD-ROM format. [ 669.406396][ T5821] cdc_ncm 7-1:1.0: failed to get mac address [ 669.408235][ T5821] cdc_ncm 7-1:1.0: bind() failure [ 669.492976][ T5821] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 669.496184][T11672] fido_id[11672]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 669.525119][ T5821] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 669.544424][ T5821] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 670.156694][ T5821] usb 7-1: USB disconnect, device number 27 [ 670.587447][ T25] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 670.607381][ T5821] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 670.739544][ T25] usb 2-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 670.741254][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 670.741270][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59136, setting to 1024 [ 670.743192][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.743205][ T25] usb 2-1: Product: syz [ 670.743213][ T25] usb 2-1: Manufacturer: syz [ 670.743222][ T25] usb 2-1: SerialNumber: syz [ 670.757525][ T5821] usb 7-1: Using ep0 maxpacket: 16 [ 670.761718][ T5821] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 670.776942][ T5821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.776959][ T5821] usb 7-1: Product: syz [ 670.776972][ T5821] usb 7-1: Manufacturer: syz [ 670.776984][ T5821] usb 7-1: SerialNumber: syz [ 670.818263][T11683] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 670.852574][ T25] symbolserial 2-1:1.0: symbol converter detected [ 670.865741][ T25] usb 2-1: symbol converter now attached to ttyUSB0 [ 670.986805][T11690] 9p: Bad value for 'wfdno' [ 671.138843][ T5799] usb 2-1: USB disconnect, device number 67 [ 671.193481][ T5799] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 671.194273][ T5799] symbolserial 2-1:1.0: device disconnected [ 671.347290][ C1] net_ratelimit: 299 callbacks suppressed [ 671.373918][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 671.373942][ T30] audit: type=1400 audit(2000000419.241:1352): avc: denied { write } for pid=11701 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 671.520368][ T5821] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 671.535630][ T5821] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 671.536125][ T5821] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 671.536166][ T5821] usb 7-1: media controller created [ 671.666459][ T5821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 671.737561][ T5799] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 671.791002][ T30] audit: type=1400 audit(2000000419.661:1353): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 671.823714][ T5821] zl10353_read_register: readreg error (reg=127, ret==-71) [ 671.886519][ T30] audit: type=1400 audit(2000000419.751:1354): avc: denied { read write } for pid=11714 comm="syz.1.1321" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 671.886564][ T30] audit: type=1400 audit(2000000419.751:1355): avc: denied { open } for pid=11714 comm="syz.1.1321" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 671.919019][ T5799] usb 8-1: Using ep0 maxpacket: 32 [ 671.925444][ T5799] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 671.947738][ T5799] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 671.947787][ T5799] usb 8-1: config 0 has no interface number 0 [ 671.947819][ T5799] usb 8-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 671.947838][ T5799] usb 8-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 671.947857][ T5799] usb 8-1: config 0 interface 12 has no altsetting 0 [ 671.974840][ T5799] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.974858][ T5799] usb 8-1: Product: syz [ 671.974870][ T5799] usb 8-1: Manufacturer: syz [ 671.974884][ T5799] usb 8-1: SerialNumber: syz [ 671.990738][ T5799] usb 8-1: config 0 descriptor?? [ 672.006193][ T5799] f81534 8-1:0.12: unsupported endpoint max packet size [ 672.060022][ T30] audit: type=1400 audit(2000000419.931:1356): avc: denied { write } for pid=11705 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 672.151156][ T30] audit: type=1400 audit(2000000420.021:1357): avc: denied { unmount } for pid=8313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 672.214371][ T30] audit: type=1400 audit(2000000420.081:1358): avc: denied { write } for pid=11721 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 672.215027][ T5821] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 672.234835][ T5821] usb 7-1: USB disconnect, device number 28 [ 672.417596][ T30] audit: type=1400 audit(2000000420.161:1359): avc: denied { mount } for pid=11719 comm="syz.3.1319" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 672.417790][ T30] audit: type=1400 audit(2000000420.171:1360): avc: denied { search } for pid=11719 comm="syz.3.1319" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 672.417929][ T30] audit: type=1400 audit(2000000420.171:1361): avc: denied { search } for pid=11719 comm="syz.3.1319" name="events" dev="tracefs" ino=3388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 672.787722][ T5704] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 672.937348][ T5704] usb 2-1: Using ep0 maxpacket: 8 [ 672.938362][ T5704] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 672.940802][ T5704] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.940840][ T5704] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 672.940865][ T5704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 672.940898][ T5704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 672.940923][ T5704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 672.940947][ T5704] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 672.944604][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.944622][ T5704] usb 2-1: Product: syz [ 672.944638][ T5704] usb 2-1: Manufacturer: syz [ 672.944652][ T5704] usb 2-1: SerialNumber: syz [ 672.952153][ T5704] usb 2-1: config 0 descriptor?? [ 673.007999][T11715] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 673.226799][T11715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1321'. [ 673.425704][T11715] device-mapper: table: 248:0: thi : unknown target type [ 673.425723][T11715] device-mapper: ioctl: error adding target to table [ 673.647394][ T5821] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 673.736808][T11729] kexec: Could not allocate control_code_buffer [ 673.798299][ T5821] usb 4-1: Using ep0 maxpacket: 32 [ 673.800205][ T5821] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 673.801741][ T5821] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 673.801764][ T5821] usb 4-1: config 0 has no interface number 0 [ 673.801802][ T5821] usb 4-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 673.801846][ T5821] usb 4-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 673.801869][ T5821] usb 4-1: config 0 interface 12 has no altsetting 0 [ 673.805201][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.805222][ T5821] usb 4-1: Product: syz [ 673.805237][ T5821] usb 4-1: Manufacturer: syz [ 673.805252][ T5821] usb 4-1: SerialNumber: syz [ 673.810934][ T5821] usb 4-1: config 0 descriptor?? [ 673.831874][ T5821] f81534 4-1:0.12: unsupported endpoint max packet size [ 673.859538][ T25] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 674.017375][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 674.018011][ T25] usb 7-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 674.018990][ T25] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.019025][ T25] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 674.019048][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 674.019070][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 674.019094][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 674.019117][ T25] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 674.022241][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.022259][ T25] usb 7-1: Product: syz [ 674.022273][ T25] usb 7-1: Manufacturer: syz [ 674.022286][ T25] usb 7-1: SerialNumber: syz [ 674.031774][ T25] usb 7-1: config 0 descriptor?? [ 674.032374][T11754] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 674.340869][T11754] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1325'. [ 674.386286][T11754] device-mapper: table: 248:0: too large device [ 674.386294][T11754] device-mapper: ioctl: error adding target to table [ 674.393828][ T5704] rc_core: IR keymap rc-snapstream-firefly not found [ 674.393846][ T5704] Registered IR keymap rc-empty [ 674.394772][ T5704] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 674.423965][ T5704] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input79 [ 674.445303][ T5704] input: syz syz mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input81 [ 674.485757][ T5704] usb 2-1: USB disconnect, device number 68 [ 674.485888][ C0] ati_remote 2-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 674.654587][ T5821] usb 8-1: USB disconnect, device number 32 [ 674.737739][T11769] overlay: ./file0 is not a directory [ 674.836136][T11773] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1331'. [ 674.836161][T11773] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1331'. [ 675.287374][ T5821] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 675.389215][ T25] rc_core: IR keymap rc-snapstream-firefly not found [ 675.389225][ T25] Registered IR keymap rc-empty [ 675.389928][ T25] rc rc0: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 675.391096][ T25] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input80 [ 675.396228][ T25] input: syz syz mouse as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input82 [ 675.457454][ T5821] usb 6-1: Using ep0 maxpacket: 16 [ 675.459400][ T5821] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 675.463613][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.463630][ T5821] usb 6-1: Product: syz [ 675.463643][ T5821] usb 6-1: Manufacturer: syz [ 675.463655][ T5821] usb 6-1: SerialNumber: syz [ 675.530075][ T25] usb 7-1: USB disconnect, device number 29 [ 675.530174][ C1] ati_remote 7-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 675.678323][T11775] FAULT_INJECTION: forcing a failure. [ 675.678323][T11775] name failslab, interval 1, probability 0, space 0, times 0 [ 675.678354][T11775] CPU: 1 UID: 0 PID: 11775 Comm: syz.5.1332 Tainted: G L syzkaller #0 PREEMPT(full) [ 675.678379][T11775] Tainted: [L]=SOFTLOCKUP [ 675.678386][T11775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 675.678397][T11775] Call Trace: [ 675.678403][T11775] [ 675.678412][T11775] dump_stack_lvl+0x100/0x190 [ 675.678445][T11775] should_fail_ex.cold+0x5/0xa [ 675.678474][T11775] should_failslab+0xc2/0x120 [ 675.678501][T11775] __kmalloc_noprof+0xfc/0x840 [ 675.678521][T11775] ? vhost_dev_set_owner+0x3b2/0xa30 [ 675.678544][T11775] vhost_dev_set_owner+0x3b2/0xa30 [ 675.678569][T11775] vhost_dev_ioctl+0x521/0xe70 [ 675.678588][T11775] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 675.678612][T11775] ? do_vfs_ioctl+0x226/0x13e0 [ 675.678631][T11775] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 675.678649][T11775] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 675.678676][T11775] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 675.678701][T11775] vhost_vsock_dev_ioctl+0x320/0xb70 [ 675.678721][T11775] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 675.678742][T11775] ? selinux_file_ioctl+0x13b/0x290 [ 675.678763][T11775] ? selinux_file_ioctl+0xb6/0x290 [ 675.678785][T11775] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 675.678806][T11775] __x64_sys_ioctl+0x18e/0x210 [ 675.678826][T11775] do_syscall_64+0x123/0x790 [ 675.678845][T11775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.678860][T11775] RIP: 0033:0x7fe87319e159 [ 675.678873][T11775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.678889][T11775] RSP: 002b:00007fe873fd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 675.678906][T11775] RAX: ffffffffffffffda RBX: 00007fe873425fa0 RCX: 00007fe87319e159 [ 675.678916][T11775] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000007 [ 675.678925][T11775] RBP: 00007fe87323506b R08: 0000000000000000 R09: 0000000000000000 [ 675.678934][T11775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 675.678943][T11775] R13: 00007fe873426038 R14: 00007fe873425fa0 R15: 00007ffdb20645a8 [ 675.678964][T11775] [ 675.934375][ T5821] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 675.946712][ T5821] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 675.948153][ T5821] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 675.948197][ T5821] usb 6-1: media controller created [ 675.965640][ T5711] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 676.001143][ T5821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 676.054156][ T5821] zl10353_read_register: readreg error (reg=127, ret==-71) [ 676.477307][ C0] net_ratelimit: 55 callbacks suppressed [ 676.581716][T11787] ISOFS: Unable to identify CD-ROM format. [ 676.611274][ T5711] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 676.650549][ T5711] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 676.650761][ T5711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.942618][ T5659] hid_parser_main: 207 callbacks suppressed [ 676.942634][ T5659] hid-generic 684B:0002:0002.002C: unknown main item tag 0x0 [ 676.942654][ T5659] hid-generic 684B:0002:0002.002C: unknown main item tag 0x0 [ 676.942673][ T5659] hid-generic 684B:0002:0002.002C: unknown main item tag 0x0 [ 676.942692][ T5659] hid-generic 684B:0002:0002.002C: unknown main item tag 0x0 [ 676.942710][ T5659] hid-generic 684B:0002:0002.002C: unknown main item tag 0x0 [ 676.942728][ T5659] hid-generic 684B:0002:0002.002C: unknown main item tag 0x0 [ 676.942746][ T5659] hid-generic 684B:0002:0002.002C: unknown main item tag 0x0 [ 676.942770][ T5659] hid-generic 684B:0002:0002.002C: unknown main item tag 0x0 [ 676.942788][ T5659] hid-generic 684B:0002:0002.002C: unknown main item tag 0x0 [ 676.942806][ T5659] hid-generic 684B:0002:0002.002C: unknown main item tag 0x0 [ 676.970107][ T5659] hid-generic 684B:0002:0002.002C: hidraw0: HID v0.08 Device [syz0] on syz1 [ 677.106365][ T5821] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 677.126047][T11789] fido_id[11789]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 677.143514][ T5821] usb 6-1: USB disconnect, device number 46 [ 677.273793][ T5659] usb 4-1: USB disconnect, device number 60 [ 677.358983][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 677.359020][ T30] audit: type=1400 audit(2000000425.231:1403): avc: denied { open } for pid=11792 comm="syz.3.1338" path="/dev/ptyqa" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 677.374266][ T30] audit: type=1400 audit(2000000425.241:1404): avc: denied { create } for pid=11786 comm="syz.6.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 677.570168][ T5821] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 677.732488][ T5821] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 677.734171][ T5821] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 677.734210][ T5821] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 677.734231][ T5821] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 677.734253][ T5821] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 677.734309][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.854262][ T5821] cxacru 6-1:1.0: usbatm_usb_probe: bind failed: -19! [ 678.105771][ T44] usb 6-1: USB disconnect, device number 47 [ 678.967539][ T5711] usbhid 2-1:1.0: can't add hid device: -71 [ 678.967649][ T5711] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 678.971951][ T5711] usb 2-1: USB disconnect, device number 69 [ 679.032695][ T30] audit: type=1400 audit(2000000426.891:1405): avc: denied { write } for pid=11799 comm="syz.3.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 679.032743][ T30] audit: type=1400 audit(2000000426.901:1406): avc: denied { read } for pid=11799 comm="syz.3.1340" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 679.032766][ T30] audit: type=1400 audit(2000000426.901:1407): avc: denied { open } for pid=11799 comm="syz.3.1340" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 679.142119][ T30] audit: type=1400 audit(2000000427.011:1408): avc: denied { listen } for pid=11804 comm="syz.1.1341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 679.270266][ T5600] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 679.381085][T11807] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 679.705925][ T30] audit: type=1400 audit(2000000427.231:1409): avc: denied { mount } for pid=11804 comm="syz.1.1341" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 679.705957][ T30] audit: type=1400 audit(2000000427.251:1410): avc: denied { mounton } for pid=11804 comm="syz.1.1341" path="/261/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 679.896579][ T30] audit: type=1400 audit(2000000427.761:1411): avc: denied { mount } for pid=11814 comm="syz.7.1339" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 679.943104][ T30] audit: type=1400 audit(2000000427.811:1412): avc: denied { listen } for pid=11814 comm="syz.7.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 679.944147][ T52] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 680.396608][ T5711] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 680.478518][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.478574][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.609762][T11823] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1344'. [ 680.609784][T11823] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1344'. [ 680.697538][ T5711] usb 6-1: Using ep0 maxpacket: 8 [ 680.699180][ T5711] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 680.700210][ T5711] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 680.700248][ T5711] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 680.700271][ T5711] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 680.700295][ T5711] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 680.700320][ T5711] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 680.700344][ T5711] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 680.704104][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.704123][ T5711] usb 6-1: Product: syz [ 680.704138][ T5711] usb 6-1: Manufacturer: syz [ 680.704153][ T5711] usb 6-1: SerialNumber: syz [ 680.707134][ T5711] usb 6-1: config 0 descriptor?? [ 680.733962][T11813] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 681.023243][T11813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1342'. [ 681.220358][T11813] device-mapper: table: 248:0: thi : unknown target type [ 681.220380][T11813] device-mapper: ioctl: error adding target to table [ 681.667371][ T25] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 681.817330][ T25] usb 8-1: Using ep0 maxpacket: 16 [ 681.818137][ T25] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 681.821091][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.821110][ T25] usb 8-1: Product: syz [ 681.821124][ T25] usb 8-1: Manufacturer: syz [ 681.821140][ T25] usb 8-1: SerialNumber: syz [ 681.923417][T11840] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1349'. [ 682.040229][T11835] FAULT_INJECTION: forcing a failure. [ 682.040229][T11835] name failslab, interval 1, probability 0, space 0, times 0 [ 682.040259][T11835] CPU: 0 UID: 0 PID: 11835 Comm: syz.7.1347 Tainted: G L syzkaller #0 PREEMPT(full) [ 682.040289][T11835] Tainted: [L]=SOFTLOCKUP [ 682.040297][T11835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 682.040309][T11835] Call Trace: [ 682.040316][T11835] [ 682.040324][T11835] dump_stack_lvl+0x100/0x190 [ 682.040356][T11835] should_fail_ex.cold+0x5/0xa [ 682.040373][T11835] should_failslab+0xc2/0x120 [ 682.040397][T11835] __kmalloc_noprof+0xfc/0x840 [ 682.040420][T11835] ? vhost_dev_set_owner+0x3b2/0xa30 [ 682.040446][T11835] vhost_dev_set_owner+0x3b2/0xa30 [ 682.040475][T11835] vhost_dev_ioctl+0x521/0xe70 [ 682.040489][T11835] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 682.040506][T11835] ? do_vfs_ioctl+0x226/0x13e0 [ 682.040520][T11835] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 682.040539][T11835] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 682.040570][T11835] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 682.040602][T11835] vhost_vsock_dev_ioctl+0x320/0xb70 [ 682.040620][T11835] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 682.040636][T11835] ? selinux_file_ioctl+0x13b/0x290 [ 682.040650][T11835] ? selinux_file_ioctl+0xb6/0x290 [ 682.040665][T11835] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 682.040686][T11835] __x64_sys_ioctl+0x18e/0x210 [ 682.040709][T11835] do_syscall_64+0x123/0x790 [ 682.040732][T11835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.040751][T11835] RIP: 0033:0x7f416939e159 [ 682.040761][T11835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.040772][T11835] RSP: 002b:00007f416a1a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 682.040784][T11835] RAX: ffffffffffffffda RBX: 00007f4169625fa0 RCX: 00007f416939e159 [ 682.040791][T11835] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000007 [ 682.040798][T11835] RBP: 00007f416943506b R08: 0000000000000000 R09: 0000000000000000 [ 682.040805][T11835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 682.040812][T11835] R13: 00007f4169626038 R14: 00007f4169625fa0 R15: 00007ffc12867f68 [ 682.040836][T11835] [ 682.149181][ C1] net_ratelimit: 78 callbacks suppressed [ 682.167847][ T5799] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 682.301380][ T5711] rc_core: IR keymap rc-snapstream-firefly not found [ 682.301397][ T5711] Registered IR keymap rc-empty [ 682.306100][ T5711] rc rc0: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 682.317298][ T5799] usb 4-1: Using ep0 maxpacket: 8 [ 682.319282][ T5799] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 682.323724][ T5799] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 682.323744][ T5799] usb 4-1: config 0 has no interface number 0 [ 682.323774][ T5799] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 682.323792][ T5799] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 682.323812][ T5799] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 682.323833][ T5799] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 682.323853][ T5799] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 682.338072][ T5799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.338089][ T5799] usb 4-1: Product: syz [ 682.338102][ T5799] usb 4-1: Manufacturer: syz [ 682.338115][ T5799] usb 4-1: SerialNumber: syz [ 682.355461][ T5799] usb 4-1: config 0 descriptor?? [ 682.361629][ T5711] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input83 [ 682.449817][ T25] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 682.500670][ T25] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 682.502475][ T25] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 682.502697][ T25] usb 8-1: media controller created [ 682.505529][ T5711] input: syz syz mouse as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input84 [ 682.568808][ T5711] usb 6-1: USB disconnect, device number 48 [ 682.568938][ C1] ati_remote 6-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 682.596299][ T4954] ati_remote 6-1:0.0: ati_remote_open: usb_submit_urb failed! [ 682.654393][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 682.737353][ T5821] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 682.794169][ T25] zl10353_read_register: readreg error (reg=127, ret==-71) [ 683.856505][ T5821] usb 7-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 683.872739][ T5821] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 683.872820][ T5821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.092332][ T25] dvb_usb_gl861 8-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 684.095945][ T25] usb 8-1: USB disconnect, device number 33 [ 684.487503][ T25] usb 8-1: new full-speed USB device number 34 using dummy_hcd [ 684.648487][ T25] usb 8-1: unable to get BOS descriptor or descriptor too short [ 684.648987][ T25] usb 8-1: not running at top speed; connect to a high speed hub [ 684.649012][ T25] usb 8-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.48 [ 684.650541][ T25] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 684.650561][ T25] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 684.652799][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.652818][ T25] usb 8-1: Product: syz [ 684.652832][ T25] usb 8-1: Manufacturer: syz [ 684.652846][ T25] usb 8-1: SerialNumber: syz [ 684.787347][ T5711] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 684.887018][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 684.887032][ T30] audit: type=1400 audit(2000000432.751:1431): avc: denied { setopt } for pid=11856 comm="syz.7.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 684.939779][ T5711] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 684.945418][ T5711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.970546][ T5711] usb 2-1: config 0 descriptor?? [ 685.031276][ T5799] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 685.056190][ T5799] usb 4-1: USB disconnect, device number 61 [ 685.206357][ T5711] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 685.793619][T11866] ISOFS: Unable to identify CD-ROM format. [ 686.533198][ T5711] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 686.533223][ T5711] [drm] Initialized udl on minor 1 [ 686.668067][ T5821] usbhid 7-1:1.0: can't add hid device: -71 [ 686.668164][ T5821] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 686.701705][ T5821] usb 7-1: USB disconnect, device number 30 [ 687.305922][ T30] audit: type=1400 audit(2000000435.131:1432): avc: denied { mount } for pid=11869 comm="syz.3.1357" name="/" dev="configfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 687.325323][ T30] audit: type=1400 audit(2000000435.181:1433): avc: denied { search } for pid=11869 comm="syz.3.1357" name="/" dev="configfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 687.325366][ T30] audit: type=1400 audit(2000000435.181:1434): avc: denied { search } for pid=11869 comm="syz.3.1357" name="nullb" dev="configfs" ino=1521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 687.404574][ T25] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 687.474330][ T25] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 687.491908][ T25] usb 8-1: USB disconnect, device number 34 [ 687.507479][ C1] net_ratelimit: 71 callbacks suppressed [ 687.546877][T10145] udevd[10145]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 688.403045][ T30] audit: type=1400 audit(2000000436.271:1435): avc: denied { search } for pid=11869 comm="syz.3.1357" name="/" dev="configfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 688.403253][ T30] audit: type=1400 audit(2000000436.271:1436): avc: denied { search } for pid=11869 comm="syz.3.1357" name="nullb" dev="configfs" ino=1521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 688.412399][ T30] audit: type=1400 audit(2000000436.281:1437): avc: denied { search } for pid=11869 comm="syz.3.1357" name="nullb1" dev="configfs" ino=11392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 688.429786][ T30] audit: type=1400 audit(2000000436.281:1438): avc: denied { read write } for pid=11869 comm="syz.3.1357" name="memory_backed" dev="configfs" ino=35523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 688.430107][ T30] audit: type=1400 audit(2000000436.281:1439): avc: denied { open } for pid=11869 comm="syz.3.1357" path="/288/config/nullb/nullb1/memory_backed" dev="configfs" ino=35523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 689.075204][ T30] audit: type=1400 audit(2000000436.941:1440): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 690.158960][ T52] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 690.217362][ T5703] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 690.377578][ T5703] usb 8-1: Using ep0 maxpacket: 8 [ 690.380392][ T5703] usb 8-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 690.413580][ T50] Bluetooth: hci2: Frame reassembly failed (-84) [ 690.438579][ T5703] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.438602][ T5703] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 690.438616][ T5703] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 690.438631][ T5703] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 690.438645][ T5703] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 690.438659][ T5703] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 690.546922][ T5703] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.546948][ T5703] usb 8-1: Product: syz [ 690.546988][ T5703] usb 8-1: Manufacturer: syz [ 690.547062][ T5703] usb 8-1: SerialNumber: syz [ 690.561837][ T5703] usb 8-1: config 0 descriptor?? [ 690.564392][T11890] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 690.577310][ T5821] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 690.737294][ T5821] usb 4-1: Using ep0 maxpacket: 16 [ 690.765545][ T5821] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 690.807144][T11890] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1362'. [ 690.889230][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.889248][ T5821] usb 4-1: Product: syz [ 690.889263][ T5821] usb 4-1: Manufacturer: syz [ 690.889275][ T5821] usb 4-1: SerialNumber: syz [ 691.622641][ T5711] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 691.891483][ T5711] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 692.016368][ T44] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 692.194839][ T5821] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 692.323545][ T44] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 692.467355][ T52] Bluetooth: hci2: command 0x1003 tx timeout [ 692.470584][ T5600] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 692.507454][ T44] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 692.861883][ T5821] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 693.030677][ T5821] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 693.030729][ T5821] usb 4-1: media controller created [ 693.107319][ C0] net_ratelimit: 73 callbacks suppressed [ 693.126916][ T5821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 693.201759][T11903] device-mapper: table: 248:0: thi : unknown target type [ 693.201775][T11903] device-mapper: ioctl: error adding target to table [ 693.232542][ T5821] zl10353_read_register: readreg error (reg=127, ret==-71) [ 693.247093][T11912] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1366'. [ 693.257072][ T5703] rc_core: IR keymap rc-snapstream-firefly not found [ 693.257086][ T5703] Registered IR keymap rc-empty [ 693.258300][ T5703] rc rc0: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 693.284403][ T5703] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input85 [ 693.402626][ T5703] input: syz syz mouse as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input86 [ 693.542669][ T5703] usb 8-1: USB disconnect, device number 35 [ 693.542777][ C1] ati_remote 8-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 693.575331][ T5821] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 693.597343][ T5799] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 693.599529][ T5821] usb 4-1: USB disconnect, device number 62 [ 693.747546][ T5799] usb 7-1: Using ep0 maxpacket: 8 [ 693.753747][ T5799] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 693.772461][ T5799] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 693.772482][ T5799] usb 7-1: config 0 has no interface number 0 [ 693.772522][ T5799] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 693.772543][ T5799] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 693.772565][ T5799] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 693.772588][ T5799] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 693.772610][ T5799] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 693.777172][ T5799] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.777191][ T5799] usb 7-1: Product: syz [ 693.777205][ T5799] usb 7-1: Manufacturer: syz [ 693.778022][ T5799] usb 7-1: SerialNumber: syz [ 693.817097][ T5799] usb 7-1: config 0 descriptor?? [ 694.797404][ T5659] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 694.827406][ T1916] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 694.989100][ T1916] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 694.992678][ T1916] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 694.992734][ T1916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.004364][ T5659] usb 4-1: unable to get BOS descriptor or descriptor too short [ 695.004903][ T5659] usb 4-1: not running at top speed; connect to a high speed hub [ 695.004925][ T5659] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.48 [ 695.006015][ T5659] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 695.006032][ T5659] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 695.033252][ T5659] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.033286][ T5659] usb 4-1: Product: syz [ 695.033300][ T5659] usb 4-1: Manufacturer: syz [ 695.033318][ T5659] usb 4-1: SerialNumber: syz [ 695.247543][ T5821] usb 2-1: USB disconnect, device number 70 [ 695.347388][ T5711] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 695.461822][ T5799] iowarrior 7-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 695.486759][ T5799] usb 7-1: USB disconnect, device number 31 [ 695.498042][ T5711] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 695.499632][ T5711] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.538899][ T5711] usb 8-1: config 0 descriptor?? [ 695.561923][T11929] overlay: ./file0 is not a directory [ 695.762776][ T5711] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 695.986550][ T5711] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 1 [ 695.986583][ T5711] [drm] Initialized udl on minor 1 [ 697.644310][ T30] audit: type=1400 audit(2000000445.511:1441): avc: denied { append } for pid=11939 comm="syz.7.1375" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 697.689743][ T1916] usbhid 6-1:1.0: can't add hid device: -71 [ 697.689881][ T1916] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 697.731734][ T1916] usb 6-1: USB disconnect, device number 49 [ 697.794403][ T5821] hid_parser_main: 204 callbacks suppressed [ 697.794438][ T5821] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 697.794459][ T5821] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 697.803574][ T5821] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 697.899601][T11949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.900313][T11949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.908938][T11940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.949119][T11940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.996477][T11948] fido_id[11948]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 698.168990][ T5659] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 698.177941][ T1916] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 698.303401][ T5659] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 698.319164][ T5659] usb 4-1: USB disconnect, device number 63 [ 698.348775][ T1916] usb 6-1: Using ep0 maxpacket: 16 [ 698.349387][ T1916] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 698.354382][ T1916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.354401][ T1916] usb 6-1: Product: syz [ 698.354416][ T1916] usb 6-1: Manufacturer: syz [ 698.354450][ T1916] usb 6-1: SerialNumber: syz [ 698.404010][T10145] udevd[10145]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 698.467487][ C1] net_ratelimit: 478 callbacks suppressed [ 698.610199][T11947] FAULT_INJECTION: forcing a failure. [ 698.610199][T11947] name failslab, interval 1, probability 0, space 0, times 0 [ 698.610233][T11947] CPU: 1 UID: 0 PID: 11947 Comm: syz.5.1377 Tainted: G L syzkaller #0 PREEMPT(full) [ 698.610261][T11947] Tainted: [L]=SOFTLOCKUP [ 698.610268][T11947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 698.610279][T11947] Call Trace: [ 698.610285][T11947] [ 698.610294][T11947] dump_stack_lvl+0x100/0x190 [ 698.610327][T11947] should_fail_ex.cold+0x5/0xa [ 698.610357][T11947] should_failslab+0xc2/0x120 [ 698.610388][T11947] __kmalloc_noprof+0xfc/0x840 [ 698.610414][T11947] ? vhost_dev_set_owner+0x3b2/0xa30 [ 698.610442][T11947] vhost_dev_set_owner+0x3b2/0xa30 [ 698.610473][T11947] vhost_dev_ioctl+0x521/0xe70 [ 698.610497][T11947] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 698.610524][T11947] ? do_vfs_ioctl+0x226/0x13e0 [ 698.610560][T11947] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 698.610585][T11947] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 698.610616][T11947] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 698.610651][T11947] vhost_vsock_dev_ioctl+0x320/0xb70 [ 698.610679][T11947] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 698.610710][T11947] ? selinux_file_ioctl+0x13b/0x290 [ 698.610735][T11947] ? selinux_file_ioctl+0xb6/0x290 [ 698.610763][T11947] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 698.610790][T11947] __x64_sys_ioctl+0x18e/0x210 [ 698.610830][T11947] do_syscall_64+0x123/0x790 [ 698.610854][T11947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.610874][T11947] RIP: 0033:0x7fe87319e159 [ 698.610889][T11947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.610908][T11947] RSP: 002b:00007fe873fd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 698.610928][T11947] RAX: ffffffffffffffda RBX: 00007fe873425fa0 RCX: 00007fe87319e159 [ 698.610941][T11947] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000007 [ 698.610953][T11947] RBP: 00007fe87323506b R08: 0000000000000000 R09: 0000000000000000 [ 698.610965][T11947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.610977][T11947] R13: 00007fe873426038 R14: 00007fe873425fa0 R15: 00007ffdb20645a8 [ 698.611005][T11947] [ 698.619406][ T1916] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 698.628917][ T1916] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 698.629490][ T1916] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 698.629531][ T1916] usb 6-1: media controller created [ 698.835234][ T1916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 698.924307][ T5659] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 699.242152][ T1916] zl10353_read_register: readreg error (reg=127, ret==-71) [ 699.339765][ T1916] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 699.358284][ T5659] usb 4-1: Using ep0 maxpacket: 8 [ 699.360125][ T5659] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 699.388145][ T5659] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.388850][ T5659] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 699.389087][ T5659] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 699.389372][ T5659] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 699.389726][ T5659] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 699.390088][ T5659] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 699.548986][ T5659] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.549121][ T5659] usb 4-1: Product: syz [ 699.549158][ T5659] usb 4-1: Manufacturer: syz [ 699.549225][ T5659] usb 4-1: SerialNumber: syz [ 699.708352][ T5659] usb 4-1: config 0 descriptor?? [ 699.709537][T11951] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 699.733188][ T1916] usb 6-1: USB disconnect, device number 50 [ 699.984631][T11951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1378'. [ 700.386707][ T30] audit: type=1400 audit(2000000448.251:1442): avc: denied { name_connect } for pid=11965 comm="syz.7.1382" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 700.445773][T11969] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1382'. [ 700.454285][T11969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.461344][T11969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.483372][T11970] overlay: ./file0 is not a directory [ 700.548490][ T5821] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 701.131482][ T5711] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 701.203517][ T5711] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 701.988693][ T5703] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 701.989233][ T5711] usb 8-1: USB disconnect, device number 36 [ 701.996315][ T5703] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 701.996472][ T5703] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 702.070387][ T5821] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 702.073470][ T5821] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.099214][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.099232][ T5821] usb 2-1: Product: syz [ 702.099245][ T5821] usb 2-1: Manufacturer: syz [ 702.099258][ T5821] usb 2-1: SerialNumber: syz [ 702.157382][ T5659] rc_core: IR keymap rc-snapstream-firefly not found [ 702.157402][ T5659] Registered IR keymap rc-empty [ 702.158604][ T5659] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 702.194265][ T5659] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input87 [ 702.264232][ T5659] input: syz syz mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input88 [ 702.337029][ T5659] usb 4-1: USB disconnect, device number 64 [ 702.337162][ C0] ati_remote 4-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 702.928182][ T5711] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 703.057367][ T5703] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 703.078056][ T5711] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 703.078990][ T5711] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.081082][ T5711] usb 6-1: config 0 descriptor?? [ 703.179783][T11964] clocksource: Switched to clocksource acpi_pm [ 703.180597][T11964] clocksource: Switched to clocksource tsc [ 703.184709][ T5821] cdc_ncm 2-1:1.0: failed to get mac address [ 703.185151][ T5821] cdc_ncm 2-1:1.0: bind() failure [ 703.211275][ T5703] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 703.212402][ T5703] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 703.212449][ T5703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.248330][ T5821] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 703.249081][ T5821] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 703.250628][ T5821] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 703.284049][ T5821] usb 2-1: USB disconnect, device number 71 [ 703.289570][ T5711] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 703.376897][ T30] audit: type=1400 audit(2000000451.237:1443): avc: denied { create } for pid=11985 comm="syz.7.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 703.507359][ C0] net_ratelimit: 53 callbacks suppressed [ 703.553523][ T5711] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 703.553541][ T5711] [drm] Initialized udl on minor 1 [ 703.629198][ T30] audit: type=1400 audit(2000000451.487:1444): avc: denied { ioctl } for pid=11985 comm="syz.7.1388" path="socket:[35718]" dev="sockfs" ino=35718 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 705.975536][ T5703] usbhid 4-1:1.0: can't add hid device: -71 [ 705.975608][ T5703] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 705.994780][ T5703] usb 4-1: USB disconnect, device number 65 [ 707.363322][ T5703] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 707.498333][ T30] audit: type=1400 audit(2000000455.367:1445): avc: denied { write } for pid=11989 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 707.517527][ T5703] usb 4-1: Using ep0 maxpacket: 16 [ 707.519359][ T5703] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 707.743244][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.743255][ T5703] usb 4-1: Product: syz [ 707.743265][ T5703] usb 4-1: Manufacturer: syz [ 707.743273][ T5703] usb 4-1: SerialNumber: syz [ 707.904136][ T30] audit: type=1400 audit(2000000455.767:1446): avc: denied { write } for pid=12026 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.144049][T12011] FAULT_INJECTION: forcing a failure. [ 708.144049][T12011] name failslab, interval 1, probability 0, space 0, times 0 [ 708.144075][T12011] CPU: 0 UID: 0 PID: 12011 Comm: syz.3.1393 Tainted: G L syzkaller #0 PREEMPT(full) [ 708.144106][T12011] Tainted: [L]=SOFTLOCKUP [ 708.144111][T12011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 708.144118][T12011] Call Trace: [ 708.144123][T12011] [ 708.144128][T12011] dump_stack_lvl+0x100/0x190 [ 708.144149][T12011] should_fail_ex.cold+0x5/0xa [ 708.144172][T12011] should_failslab+0xc2/0x120 [ 708.144200][T12011] __kmalloc_noprof+0xfc/0x840 [ 708.144222][T12011] ? vhost_dev_set_owner+0x3b2/0xa30 [ 708.144247][T12011] vhost_dev_set_owner+0x3b2/0xa30 [ 708.144263][T12011] vhost_dev_ioctl+0x521/0xe70 [ 708.144277][T12011] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 708.144293][T12011] ? do_vfs_ioctl+0x226/0x13e0 [ 708.144308][T12011] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 708.144330][T12011] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 708.144358][T12011] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 708.144388][T12011] vhost_vsock_dev_ioctl+0x320/0xb70 [ 708.144405][T12011] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 708.144422][T12011] ? selinux_file_ioctl+0x13b/0x290 [ 708.144436][T12011] ? selinux_file_ioctl+0xb6/0x290 [ 708.144452][T12011] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 708.144477][T12011] __x64_sys_ioctl+0x18e/0x210 [ 708.144500][T12011] do_syscall_64+0x123/0x790 [ 708.144523][T12011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.144539][T12011] RIP: 0033:0x7f311b99e159 [ 708.144550][T12011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.144560][T12011] RSP: 002b:00007f311c7ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 708.144572][T12011] RAX: ffffffffffffffda RBX: 00007f311bc25fa0 RCX: 00007f311b99e159 [ 708.144583][T12011] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000007 [ 708.144594][T12011] RBP: 00007f311ba3506b R08: 0000000000000000 R09: 0000000000000000 [ 708.144605][T12011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 708.144616][T12011] R13: 00007f311bc26038 R14: 00007f311bc25fa0 R15: 00007ffd6cdd9468 [ 708.144642][T12011] [ 708.193062][ T5703] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 708.199734][ T5703] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 708.200298][ T5703] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 708.200345][ T5703] usb 4-1: media controller created [ 708.356457][ T5703] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 708.457373][ T1916] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 708.503657][ T5703] zl10353_read_register: readreg error (reg=127, ret==-71) [ 708.609002][ T1916] usb 2-1: Using ep0 maxpacket: 8 [ 708.621322][ T1916] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 708.623109][ T1916] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.623147][ T1916] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 708.623193][ T1916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 708.623218][ T1916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 708.623244][ T1916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 708.623265][ T1916] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 708.629035][ T5711] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 708.629416][ T5711] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 708.629963][ T1916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.629991][ T1916] usb 2-1: Product: syz [ 708.630003][ T1916] usb 2-1: Manufacturer: syz [ 708.630016][ T1916] usb 2-1: SerialNumber: syz [ 708.647605][ T1916] usb 2-1: config 0 descriptor?? [ 708.648733][T12031] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 708.680331][ T5711] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 708.680752][ T25] usb 6-1: USB disconnect, device number 51 [ 708.681002][ T5711] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 708.681211][ T5711] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 708.716441][ T30] audit: type=1400 audit(2000000456.577:1447): avc: denied { write } for pid=12029 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.808824][ C0] net_ratelimit: 54 callbacks suppressed [ 708.877771][T12031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1397'. [ 708.904670][ T30] audit: type=1400 audit(2000000456.767:1448): avc: denied { write } for pid=12044 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.953054][ T5703] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 709.015466][ T5703] usb 4-1: USB disconnect, device number 66 [ 709.029728][T12047] device-mapper: table: 248:0: thin-pool: Invalid argument count (-EINVAL) [ 709.029745][T12047] device-mapper: ioctl: error adding target to table [ 709.254747][T12051] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1398'. [ 709.305705][ T5600] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 709.508632][ T5703] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 709.586804][ T30] audit: type=1400 audit(2000000457.447:1449): avc: denied { write } for pid=12052 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 709.658252][ T5703] usb 4-1: Using ep0 maxpacket: 8 [ 709.660309][ T5703] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 709.664293][ T5703] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 709.664334][ T5703] usb 4-1: config 0 has no interface number 0 [ 709.664365][ T5703] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 709.664386][ T5703] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 709.664407][ T5703] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 709.664431][ T5703] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 709.664475][ T5703] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 709.722688][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.722705][ T5703] usb 4-1: Product: syz [ 709.722717][ T5703] usb 4-1: Manufacturer: syz [ 709.722729][ T5703] usb 4-1: SerialNumber: syz [ 709.741684][ T5703] usb 4-1: config 0 descriptor?? [ 709.844913][ T30] audit: type=1400 audit(2000000457.707:1450): avc: denied { name_bind } for pid=12068 comm="syz.5.1395" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 709.845103][ T30] audit: type=1400 audit(2000000457.707:1451): avc: denied { node_bind } for pid=12068 comm="syz.5.1395" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 709.871488][ T30] audit: type=1400 audit(2000000457.737:1452): avc: denied { write } for pid=12067 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 709.914541][ T5600] Bluetooth: hci5: unexpected event for opcode 0x0c1b [ 709.949046][ T30] audit: type=1400 audit(2000000457.817:1453): avc: denied { read write } for pid=12068 comm="syz.5.1395" name="sg0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 709.949450][ T30] audit: type=1400 audit(2000000457.817:1454): avc: denied { open } for pid=12068 comm="syz.5.1395" path="/dev/sg0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 709.955297][ T30] audit: type=1326 audit(2000000457.817:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12068 comm="syz.5.1395" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe87319e159 code=0x0 [ 709.977335][ T1916] rc_core: IR keymap rc-snapstream-firefly not found [ 709.977352][ T1916] Registered IR keymap rc-empty [ 709.978392][ T1916] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 709.983250][ T1916] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input89 [ 710.073878][ T1916] input: syz syz mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input90 [ 710.132728][ T30] audit: type=1400 audit(2000000457.997:1456): avc: denied { create } for pid=12068 comm="syz.5.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 710.209979][ T1916] usb 2-1: USB disconnect, device number 72 [ 710.211020][ C1] ati_remote 2-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 710.912638][T12093] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 712.530167][ T5703] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 712.563995][ T5703] usb 4-1: USB disconnect, device number 67 [ 713.547404][ T5711] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 713.697372][ T5659] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 713.698095][ T5711] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 713.699129][ T5711] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 713.699183][ T5711] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.849202][ T5659] usb 2-1: unable to get BOS descriptor or descriptor too short [ 713.849727][ T5659] usb 2-1: not running at top speed; connect to a high speed hub [ 713.849754][ T5659] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.48 [ 713.850723][ T5659] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 713.850743][ T5659] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 713.852742][ T5659] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.852761][ T5659] usb 2-1: Product: syz [ 713.852775][ T5659] usb 2-1: Manufacturer: syz [ 713.852789][ T5659] usb 2-1: SerialNumber: syz [ 713.898996][ T1916] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 714.042423][T12120] overlay: ./file0 is not a directory [ 714.048419][ T1916] usb 7-1: Using ep0 maxpacket: 16 [ 714.051123][ T1916] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 714.054125][ T1916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.054142][ T1916] usb 7-1: Product: syz [ 714.054160][ T1916] usb 7-1: Manufacturer: syz [ 714.054172][ T1916] usb 7-1: SerialNumber: syz [ 714.100282][T12120] net_ratelimit: 48 callbacks suppressed [ 714.271077][T12118] FAULT_INJECTION: forcing a failure. [ 714.271077][T12118] name failslab, interval 1, probability 0, space 0, times 0 [ 714.271130][T12118] CPU: 0 UID: 0 PID: 12118 Comm: syz.6.1408 Tainted: G L syzkaller #0 PREEMPT(full) [ 714.271157][T12118] Tainted: [L]=SOFTLOCKUP [ 714.271165][T12118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 714.271178][T12118] Call Trace: [ 714.271187][T12118] [ 714.271195][T12118] dump_stack_lvl+0x100/0x190 [ 714.271231][T12118] should_fail_ex.cold+0x5/0xa [ 714.271262][T12118] should_failslab+0xc2/0x120 [ 714.271292][T12118] __kmalloc_noprof+0xfc/0x840 [ 714.271317][T12118] ? vhost_dev_set_owner+0x3b2/0xa30 [ 714.271344][T12118] vhost_dev_set_owner+0x3b2/0xa30 [ 714.271374][T12118] vhost_dev_ioctl+0x521/0xe70 [ 714.271398][T12118] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 714.271423][T12118] ? do_vfs_ioctl+0x226/0x13e0 [ 714.271443][T12118] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 714.271463][T12118] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 714.271497][T12118] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 714.271528][T12118] vhost_vsock_dev_ioctl+0x320/0xb70 [ 714.271554][T12118] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 714.271584][T12118] ? selinux_file_ioctl+0x13b/0x290 [ 714.271608][T12118] ? selinux_file_ioctl+0xb6/0x290 [ 714.271634][T12118] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 714.271659][T12118] __x64_sys_ioctl+0x18e/0x210 [ 714.271684][T12118] do_syscall_64+0x123/0x790 [ 714.271709][T12118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.271729][T12118] RIP: 0033:0x7f4fd079e159 [ 714.271746][T12118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.271764][T12118] RSP: 002b:00007f4fd16bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 714.271785][T12118] RAX: ffffffffffffffda RBX: 00007f4fd0a25fa0 RCX: 00007f4fd079e159 [ 714.271797][T12118] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000007 [ 714.271809][T12118] RBP: 00007f4fd083506b R08: 0000000000000000 R09: 0000000000000000 [ 714.271820][T12118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 714.271832][T12118] R13: 00007f4fd0a26038 R14: 00007f4fd0a25fa0 R15: 00007ffff26ab048 [ 714.271859][T12118] [ 714.324605][ T52] Bluetooth: hci2: sending frame failed (-49) [ 714.325885][ T5600] Bluetooth: hci2: Opcode 0x1003 failed: -49 [ 714.381615][ T1916] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 714.587318][ T5821] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 714.629992][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 714.630011][ T30] audit: type=1400 audit(2000000462.497:1459): avc: denied { append } for pid=12117 comm="syz.6.1408" name="i2c-1" dev="devtmpfs" ino=4253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 714.636062][T12118] ------------[ cut here ]------------ [ 714.636072][T12118] usb 7-1: BOGUS control dir, pipe 80002080 doesn't match bRequestType c0 [ 714.636086][T12118] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x15ff/0x19b0, CPU#0: syz.6.1408/12118 [ 714.673543][ T1916] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 714.674141][ T1916] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 714.674205][ T1916] usb 7-1: media controller created [ 714.716497][T12118] Modules linked in: [ 714.720443][T12118] CPU: 0 UID: 0 PID: 12118 Comm: syz.6.1408 Tainted: G L syzkaller #0 PREEMPT(full) [ 714.731457][T12118] Tainted: [L]=SOFTLOCKUP [ 714.735804][T12118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 714.746016][T12118] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 714.751834][T12118] Code: 48 89 54 24 40 e8 03 e6 7b fa 4c 89 e7 e8 2b d0 da fe 48 89 c6 48 8d 3d 81 24 c2 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 d4 e5 7b fa 89 ee bf ff 00 00 00 [ 714.771513][T12118] RSP: 0018:ffffc9000563f610 EFLAGS: 00010287 [ 714.777662][T12118] RAX: ffffffff8cc86f80 RBX: ffff88802cf86600 RCX: 0000000080002080 [ 714.786041][T12118] RDX: ffff88801fee6f00 RSI: ffffffff8cc86f80 RDI: ffffffff91528860 [ 714.794536][T12118] RBP: ffff88804d66f058 R08: 00000000000000c0 R09: 0000000000000000 [ 714.802866][T12118] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88804d66f0b0 [ 714.811253][T12118] R13: ffff888022a82500 R14: ffff888022a82506 R15: ffff888022a82507 [ 714.816896][ T1916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 714.828436][T12118] FS: 00007f4fd16bc6c0(0000) GS:ffff888123b4e000(0000) knlGS:0000000000000000 [ 714.838062][T12118] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 714.844674][T12118] CR2: 0000000000000000 CR3: 0000000073897000 CR4: 00000000003526f0 [ 714.852730][T12118] Call Trace: [ 714.856013][T12118] [ 714.858967][T12118] ? __init_swait_queue_head+0xca/0x150 [ 714.864534][T12118] usb_start_wait_urb+0x10e/0x580 [ 714.869842][T12118] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 714.875494][T12118] ? __asan_memset+0x23/0x50 [ 714.880133][T12118] usb_control_msg+0x328/0x4b0 [ 714.885195][T12118] ? __pfx_usb_control_msg+0x10/0x10 [ 714.890733][T12118] ? vprintk_store+0xa75/0xbe0 [ 714.895532][T12118] ? lockdep_hardirqs_on+0x7d/0x110 [ 714.900851][T12118] gl861_ctrl_msg+0x1a5/0x4a0 [ 714.905548][T12118] ? vsnprintf+0x520/0x1300 [ 714.910081][T12118] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 714.915314][T12118] ? lock_acquire+0x1d1/0x380 [ 714.920024][T12118] ? console_srcu_read_lock+0x49/0x60 [ 714.925433][T12118] gl861_i2c_master_xfer+0x545/0x690 [ 714.930789][T12118] __i2c_transfer+0x5d4/0x1740 [ 714.935582][T12118] ? __pfx___i2c_transfer+0x10/0x10 [ 714.940836][T12118] ? lock_acquire+0x1d1/0x380 [ 714.945873][T12118] i2c_smbus_xfer_emulated+0x235/0x1110 [ 714.951700][T12118] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 714.957750][T12118] __i2c_smbus_xfer+0x612/0x10f0 [ 714.962724][T12118] ? mark_held_locks+0x40/0x70 [ 714.967541][T12118] ? lockdep_hardirqs_on+0x7d/0x110 [ 714.972763][T12118] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 714.978261][T12118] ? rt_mutex_slowtrylock+0x93/0x100 [ 714.983594][T12118] i2c_smbus_xfer+0x17e/0x3c0 [ 714.988632][T12118] i2cdev_ioctl_smbus+0x4b9/0xac0 [ 714.993657][T12118] ? __might_fault+0xc5/0x140 [ 714.998468][T12118] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 715.004030][T12118] ? __might_fault+0xc5/0x140 [ 715.008718][T12118] ? __might_fault+0xc5/0x140 [ 715.013407][T12118] i2cdev_ioctl+0x3cf/0x830 [ 715.017926][T12118] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 715.022956][T12118] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 715.028006][T12118] __x64_sys_ioctl+0x18e/0x210 [ 715.032821][T12118] do_syscall_64+0x123/0x790 [ 715.037434][T12118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.043330][T12118] RIP: 0033:0x7f4fd079e159 [ 715.047785][T12118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.067476][T12118] RSP: 002b:00007f4fd16bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 715.075976][T12118] RAX: ffffffffffffffda RBX: 00007f4fd0a25fa0 RCX: 00007f4fd079e159 [ 715.083989][T12118] RDX: 0000000000000000 RSI: 0000000000000720 RDI: 000000000000000b [ 715.092416][T12118] RBP: 00007f4fd083506b R08: 0000000000000000 R09: 0000000000000000 [ 715.100586][T12118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 715.108711][T12118] R13: 00007f4fd0a26038 R14: 00007f4fd0a25fa0 R15: 00007ffff26ab048 [ 715.116708][T12118] [ 715.119792][T12118] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 715.127065][T12118] CPU: 0 UID: 0 PID: 12118 Comm: syz.6.1408 Tainted: G L syzkaller #0 PREEMPT(full) [ 715.137998][T12118] Tainted: [L]=SOFTLOCKUP [ 715.142321][T12118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 715.152389][T12118] Call Trace: [ 715.155669][T12118] [ 715.158595][T12118] dump_stack_lvl+0x100/0x190 [ 715.163275][T12118] vpanic+0x553/0x970 [ 715.167255][T12118] ? __pfx_vpanic+0x10/0x10 [ 715.171757][T12118] panic+0xd1/0xe0 [ 715.175460][T12118] ? __pfx_panic+0x10/0x10 [ 715.179877][T12118] check_panic_on_warn.cold+0x19/0x34 [ 715.185254][T12118] ? usb_submit_urb+0x15ff/0x19b0 [ 715.190274][T12118] __warn.cold+0x191/0x318 [ 715.194684][T12118] __report_bug+0x30f/0x440 [ 715.199180][T12118] ? usb_submit_urb+0x15ff/0x19b0 [ 715.204222][T12118] ? __pfx___report_bug+0x10/0x10 [ 715.209245][T12118] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 715.215052][T12118] ? lockdep_hardirqs_on+0x7d/0x110 [ 715.220256][T12118] ? kasan_save_stack+0x3f/0x50 [ 715.225124][T12118] report_bug_entry+0xe2/0x290 [ 715.229870][T12118] ? usb_submit_urb+0x160d/0x19b0 [ 715.234889][T12118] handle_bug+0x1cd/0x2a0 [ 715.239208][T12118] exc_invalid_op+0x17/0x50 [ 715.243712][T12118] asm_exc_invalid_op+0x1a/0x20 [ 715.248563][T12118] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 715.254186][T12118] Code: 48 89 54 24 40 e8 03 e6 7b fa 4c 89 e7 e8 2b d0 da fe 48 89 c6 48 8d 3d 81 24 c2 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 d4 e5 7b fa 89 ee bf ff 00 00 00 [ 715.273794][T12118] RSP: 0018:ffffc9000563f610 EFLAGS: 00010287 [ 715.279858][T12118] RAX: ffffffff8cc86f80 RBX: ffff88802cf86600 RCX: 0000000080002080 [ 715.287915][T12118] RDX: ffff88801fee6f00 RSI: ffffffff8cc86f80 RDI: ffffffff91528860 [ 715.295884][T12118] RBP: ffff88804d66f058 R08: 00000000000000c0 R09: 0000000000000000 [ 715.303871][T12118] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88804d66f0b0 [ 715.311840][T12118] R13: ffff888022a82500 R14: ffff888022a82506 R15: ffff888022a82507 [ 715.319825][T12118] ? __init_swait_queue_head+0xca/0x150 [ 715.325394][T12118] usb_start_wait_urb+0x10e/0x580 [ 715.330417][T12118] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 715.335970][T12118] ? __asan_memset+0x23/0x50 [ 715.340568][T12118] usb_control_msg+0x328/0x4b0 [ 715.345324][T12118] ? __pfx_usb_control_msg+0x10/0x10 [ 715.350598][T12118] ? vprintk_store+0xa75/0xbe0 [ 715.355353][T12118] ? lockdep_hardirqs_on+0x7d/0x110 [ 715.360556][T12118] gl861_ctrl_msg+0x1a5/0x4a0 [ 715.365232][T12118] ? vsnprintf+0x520/0x1300 [ 715.369727][T12118] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 715.374929][T12118] ? lock_acquire+0x1d1/0x380 [ 715.379621][T12118] ? console_srcu_read_lock+0x49/0x60 [ 715.384990][T12118] gl861_i2c_master_xfer+0x545/0x690 [ 715.390273][T12118] __i2c_transfer+0x5d4/0x1740 [ 715.395042][T12118] ? __pfx___i2c_transfer+0x10/0x10 [ 715.400234][T12118] ? lock_acquire+0x1d1/0x380 [ 715.404907][T12118] i2c_smbus_xfer_emulated+0x235/0x1110 [ 715.410539][T12118] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 715.416518][T12118] __i2c_smbus_xfer+0x612/0x10f0 [ 715.421444][T12118] ? mark_held_locks+0x40/0x70 [ 715.426205][T12118] ? lockdep_hardirqs_on+0x7d/0x110 [ 715.431399][T12118] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 715.436776][T12118] ? rt_mutex_slowtrylock+0x93/0x100 [ 715.442059][T12118] i2c_smbus_xfer+0x17e/0x3c0 [ 715.446757][T12118] i2cdev_ioctl_smbus+0x4b9/0xac0 [ 715.451863][T12118] ? __might_fault+0xc5/0x140 [ 715.456549][T12118] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 715.462080][T12118] ? __might_fault+0xc5/0x140 [ 715.466748][T12118] ? __might_fault+0xc5/0x140 [ 715.471503][T12118] i2cdev_ioctl+0x3cf/0x830 [ 715.476004][T12118] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 715.481017][T12118] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 715.486045][T12118] __x64_sys_ioctl+0x18e/0x210 [ 715.490799][T12118] do_syscall_64+0x123/0x790 [ 715.495398][T12118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.501373][T12118] RIP: 0033:0x7f4fd079e159 [ 715.505780][T12118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.525383][T12118] RSP: 002b:00007f4fd16bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 715.533789][T12118] RAX: ffffffffffffffda RBX: 00007f4fd0a25fa0 RCX: 00007f4fd079e159 [ 715.541751][T12118] RDX: 0000000000000000 RSI: 0000000000000720 RDI: 000000000000000b [ 715.549797][T12118] RBP: 00007f4fd083506b R08: 0000000000000000 R09: 0000000000000000 [ 715.557779][T12118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 715.565745][T12118] R13: 00007f4fd0a26038 R14: 00007f4fd0a25fa0 R15: 00007ffff26ab048 [ 715.573715][T12118] [ 715.576974][T12118] Kernel Offset: disabled [ 715.581282][T12118] Rebooting in 86400 seconds..