last executing test programs: 2m51.184018969s ago: executing program 4 (id=898): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f0000000a40)={'syztnl0\x00', 0x0, 0x4, 0x69, 0xff, 0x6, 0x71, @private2, @mcast1, 0x40, 0x0, 0x3, 0xfffffff1}}) sendmsg$inet(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000340)="191414afb20f972047c58276be460d5b480e14e2e8d2530a5542b6cb3e129c787301822fa0ee923ea7a4920ba44b3167160195d2b568b4de8cc993b8761e0e7c17af4e66b9b2f46ccb907e866542ab684d1030fbe489279aa313d73e56df18ab30d075a01b3e1bc39e0164c171855ee0e70c481030", 0x75}, {&(0x7f0000000640)="37e8a4f6b626f400bd5dc05e3a81b0dd44c3df8e8b91f2860ff3e7e9ed2f38d8cdd1f53baf6782ffb602b269ecf731b616a088a9d66af7d52cf02299d250a9f1f7a786594e66d2e1b9b16f1a78160ac0dbbf45c6270bcaee150200edc827b42308d4764c10a0cfe8b6ebdfd6aba0d4911735a062d46fd7bbd4e93d599b105e1447576d380f895f9742f15247ef7aa162b1f4f732fbd5cca05c6a5ea9f08c00c940e7db6a09af25a8c88eac35376d31819344f869c2be945c0f24c74f7b6590833cdca1d809af91a674fe84c711a1f3046985157f3938715058b7fbba76", 0xdd}, {&(0x7f0000000740)="9550c9daac5f43314a40b92022aea82e155a8f669615a9510558661d0699df8f6e8240590bbb76e0e5c2837658e800e0407d3b4cbff979b639ff", 0x3a}, {&(0x7f0000000780)="ca4536107f4148b30fee12451cf6c14aa870b0c81b6d271a", 0x18}, {&(0x7f0000000840)="cad67d892f5ab1c526ad0c6d701c3f48d2a8eddba5e7da6b4311223815dff009279c03d4adb74a92b4d2bb988190ae2e9c908ffcfa8c25be104efea9e221bd7b74bd1857bf724a7bd31fec3ad9268424e572b00d2d62334632d108e262d5265e67503c6c4e9fe8251ea830ace7474d6952b78d35c2f94b7f4919bfed6d206cd9efacfbd59e10c45c28f16375e0a2c491b803eede2515ad8a646c67adca0e4b37ff18c78821babb8b3f5f22a1f375b8fe71cc26ce78328e1d528888060b99d88734018de5a53d238ce17b9539de0cc78ca9d335b16bce76916587658c87253611c78f05a78a5f783c237617da4b724314c4a05ac406", 0xf5}], 0x5, &(0x7f0000000b00)}, 0x8000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) ptrace$ARCH_GET_FS(0x1e, 0x0, 0x0, 0x1003) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010) socket$kcm(0x11, 0x3, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x34, r8, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x20000f, 0x7, @udp='udp:syz0\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) 2m48.053777119s ago: executing program 4 (id=905): socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xa}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x800003, 0x3, 0x1, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x7, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x7c, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x1, 0x8, 0x3, 0x200100, 0x3, 0x0, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x8, 0x6, 0xffffffff, 0x20000004, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0xf, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x9, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x5, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x2, 0x2, 0x4, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r6, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0, 0x2) 2m46.205508581s ago: executing program 4 (id=912): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002340)=ANY=[@ANYBLOB="9801000000000000", @ANYRES64=r1], 0x198) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x200, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x6000000, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 2m43.332521515s ago: executing program 4 (id=918): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), r0) syz_open_dev$dri(0x0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000aa48cfc0848632e7cdb043a003815e95890afc9325a7740f9f33104390149ec57d342f080566131072790d4650d4bcec575a6e3aaefa1b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000400000000000000000000000181a0000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9a", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600200001401cfe010003580461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3b8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6f4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x400c040) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xc}}}, 0x24}}, 0x24008804) write$bt_hci(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00010002"], 0x8) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r8 = fanotify_init(0x200, 0x0) r9 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nE\x86\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12bZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xdca7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\x81\x00\xda\xa3\b\x9e@\xf0=k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x81\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17\a\xa3\xe4\xeb\xce+ \x83\xd6&dj\xd5\fWpz.\x00\xa5\xc5\xd6\x86\x97\xa5\xa5\x86\xdb\v\x92\x89\xe1\xb4n\x9c\xe1;4k6$-o]\xcc\xb4b\xfb\xa7d\x19\xcd\x9cI\xd9\xd7\xf0|Z\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x6) r10 = dup(r9) fanotify_mark(r8, 0x1, 0x32, r10, 0x0) 2m40.932636342s ago: executing program 4 (id=924): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x80) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000200)={0xfffffff7, 0x42003ff, 0xfffffffd, 0xc4cf, 0x90, "df5d393e6922804a0000100001a6e7800600", 0x240000, 0x1fd}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(&(0x7f0000000040), 0xaf93, 0x109400) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) read(r0, &(0x7f00000012c0)=""/232, 0xe8) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c460502028d04000000000000000300060004400000b8010000380000005e020000080400000400200003"], 0x98) close(r5) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 2m38.605316723s ago: executing program 4 (id=932): ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2m22.760777032s ago: executing program 32 (id=932): ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 11.709895812s ago: executing program 0 (id=1308): read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) accept4(r4, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0xbe9, 0x0, 0x7, 0x1, 0x4]}, &(0x7f0000000340)=0x54) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a000000", @ANYRES32=0x0, @ANYBLOB="0400"/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000857d92b7d54277093c2b692213bc53f9d14192f757add8"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008510000003000000180000000000000000f00000000000009500000000000000950000"], &(0x7f0000000000)='GPL\x00'}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) 11.636817513s ago: executing program 2 (id=1309): unshare(0x60000000) socket$packet(0x11, 0x2, 0x300) unshare(0x10480) io_uring_setup(0x671d, &(0x7f0000000080)={0x0, 0xde76, 0x4000, 0x0, 0x85c}) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4d8, 0x218, 0x218, 0x370, 0x0, 0x218, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [0xff000000], @ipv4=@private, [], @ipv6=@private1}}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x71}}}, {{@ip={@rand_addr, @dev={0xac, 0x14, 0x14, 0x2f}, 0x0, 0xffffffff, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000000)={0x14, "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"}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x4a82, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) set_mempolicy(0x3, &(0x7f0000000380)=0xfff, 0x3) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000000380)={'macvtap0\x00', @random="b40007350060"}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000040)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB=' \t('], 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 10.661822466s ago: executing program 0 (id=1311): r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000340)={0x14, &(0x7f0000000200)={0x0, 0x23, 0x7, {0x7, 0x9, "2a74e7777f"}}, 0x0}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000100)={0x14, &(0x7f00000001c0)={0x0, 0x22, 0x2, {0x2, 0xa}}, 0x0}, 0x0) 10.28538524s ago: executing program 1 (id=1312): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b00000000000000000000000080dd3452024e8fb5562e993a886400"/43, @ANYRESDEC=0x0, @ANYBLOB="0000000000000000000000e4b8077a47d791da696c16dcb9cb4e2f540a2ba9b999d7bff64f9b7915ae0d9fcaf44468b715c2e32d33cc733892bb7bd53e378a33b23046265146993237b22d23fb8c1db6ce64ddb275621c075880998f5fac75be24baadc4acf2a7b6543fafe3ad84f541305245c6cc408c9bac09f4892c1a04b7536de69e41999cea49fa0d01e0ded5ad48aa50cddf7d64a932f60434b7493f", @ANYRES32=0x0, @ANYBLOB="d9e0383f3134224f974e7a1225b1239c327e94f41d4d844f5ed3fa267bb20ec58e2b4980b8e30230a1c700e78912f2e3e5a82f675043a072db3c190c82bd81f7efeda951a866f76e254a69855c20eed0e8e67c2257574ebfa7e73c5030259b4320c6d6ccc1f4e8c03634204070f0862b488a052a265b1b1d203ee6df2c5a4f3aa1a623737283cc63ebe08fb3431653993f2729fa0c7e1aadc592006c9dfa4dd5e7564f84764d95d590c4fc0e11beffd6fb0a8b1366f1f4694f9586edd2993e90771fb40ba2574530fe642a430fc27d83d0bf36062b", @ANYBLOB='\x00'/28], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x2, 0x0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f0000001880)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, 0x0, 0x0, r1}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xa, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000007000000000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="000000000000000018150000", @ANYRES32=r0, @ANYBLOB="000000000000000007312b03e52a000018140000", @ANYRES32=r0, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x80881) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc4c85513, &(0x7f0000000000)={0x2, 0x4, 0x1, 0x0, 'syz1\x00', 0x109a7}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) io_setup(0x4, &(0x7f00000013c0)=0x0) io_submit(r6, 0x1, &(0x7f0000002c00)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r5, 0x0}]) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10) ioctl$XFS_IOC_BULKSTAT(r3, 0x8040587f, &(0x7f0000000640)={{0x8, 0x1, 0x1, 0x9, 0x8}, &(0x7f0000000540)=[{}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x4) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r11 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) 9.166315072s ago: executing program 1 (id=1315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) syz_emit_vhci(0x0, 0x22) syz_emit_vhci(0x0, 0x0) 7.963983247s ago: executing program 1 (id=1316): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) syz_clone(0x80a00011, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x830, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) syz_io_uring_setup(0x16b, &(0x7f0000000000)={0x0, 0x3e4f}, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) socket$nl_netfilter(0x10, 0x3, 0xc) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0x1, {0x1, 0x19, 0x4d0, 0x10000000040d, 0x6, 0x3, 0xed1, 0x2, 0x7fff, 0x8000, 0x7ff, r2, r3, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x26, 0x5, 0x6105583a, 0x0, 0xfffa, 0xf4f, 0xffffffff, 0x0, 0x0, 0x0, 0x7ff}}, 0x50) r4 = openat$vimc2(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x28011, r4, 0x7c02b000) mmap(&(0x7f0000e13000/0x1000)=nil, 0x1000, 0x1, 0x110, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x700000060006060, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000007880)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f00000000c0)=0x58, 0xa) 7.631855498s ago: executing program 2 (id=1318): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r0, 0x5452, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r2, &(0x7f0000000040)={0x405}, &(0x7f000009de80), 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000000c0)=0xacc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000000400)=0xe8) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@rq={'rq', 0x3d, 0x8000000000000001}}], [{@euid_eq={'euid', 0x3d, r5}}, {@smackfshat={'smackfshat', 0x3d, 'pfifo_fast\x00'}}, {@dont_measure}]}}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 7.577947163s ago: executing program 0 (id=1319): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb40102030109021200010000000009"], 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0xe00}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) socket$tipc(0x1e, 0x2, 0x0) bind$xdp(r6, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000640)={0xa, 0x4622, 0xb57, @mcast1, 0x7}, 0x1c) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r8 = socket$nl_generic(0x10, 0x3, 0x10) getpid() sendmsg$nl_generic(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000270001002bbd7800fedbdf2509"], 0x14}}, 0x4004804) munlockall() ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x9, 0x9, 0x3, 0x8000, 0xfffffffffffffffc, 0x81, 0x4, 0x8001}) syz_open_procfs(0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000300)={r9, 0x1, 0x6, @broadcast}, 0x10) 7.416325375s ago: executing program 3 (id=1320): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x12, 0x0, 0x2007}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) unshare(0x28000600) rmdir(0x0) timer_create(0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) creat(&(0x7f0000000080)='./file0\x00', 0xc7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf250000ffff", @ANYRES32=0x0, @ANYBLOB="17810000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="c0d30ad36c1f2072684cd8e88e46dfe779cdea3f002d936fda3b76aad46deaf0178d4b1def8ff4c2aca505620000000000001c33e4dcf19fc54c2bc87c3ffaacb95a5ee6a9413d4a561ea6d55c054170f2beb91581d17dcaa3a231fa9c3fde8aae0d2854dfa39fef45379987a52afd672403a0f5f75fcbf13319c6f6fd"], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) r7 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r7, 0xc0884113, &(0x7f0000000240)={0x2, 0x7ec, 0x0, 0x10001, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x7, 0xc4, 0x5}) 5.77568776s ago: executing program 3 (id=1323): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x521901, 0x0) r1 = socket(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x49, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000007880)=""/102400, 0x19000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=@newtaction={0x14, 0x30, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x4000005) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x101) getdents64(r4, &(0x7f0000000400)=""/4096, 0xc00) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendfile(r0, r5, &(0x7f0000000240)=0x1, 0x200) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r1], 0x9c}}, 0x4) listen(r6, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) 5.763967727s ago: executing program 2 (id=1324): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmsg(r2, &(0x7f0000000300)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000200)}, 0x40000001) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@delqdisc={0x24, 0x25, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xfff1, 0xffff}, {0xd, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001640)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001680)=0x40) 5.308638974s ago: executing program 5 (id=1325): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x143581, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES8=r0], 0x50) dup(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe50, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x9c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) write$char_usb(r3, &(0x7f0000000000)='-0', 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r6) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, 0xfffffffffffffffc) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000680)={0x0, 0x1ff, 0x0, 0x1, 0x3, [], [0x7fdfffff, 0x0, 0x0, 0x4], [0x0, 0x1001000, 0x2], [0x100000000, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) r8 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$sock_int(r8, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) sendmmsg$inet(r8, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x4008010) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1002) 5.060350992s ago: executing program 5 (id=1326): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f03000090ff00009f440000000000006b0a00fe0000000073130000000000009c000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) syz_emit_vhci(0x0, 0x22) syz_emit_vhci(0x0, 0x0) 5.059060207s ago: executing program 3 (id=1327): syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x4081c0) r0 = getpgid(0xffffffffffffffff) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000040)=r0) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/197, 0xc5}, {&(0x7f0000000180)=""/208, 0xd0}], 0x2}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/11, 0xb}, {&(0x7f0000000300)=""/39, 0x27}, {&(0x7f0000000340)=""/115, 0x73}], 0x3, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}], 0x2, 0x2000, &(0x7f0000000580)={r2, r3+10000000}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000005c0)={0x0, 0x1, 0x1, 0x8}) pselect6(0x40, &(0x7f0000000600)={0x5, 0x755, 0xfff, 0xffff, 0x4c64, 0x400, 0x9, 0x7fffffff}, &(0x7f0000000640)={0x8000000000000001, 0x9, 0x4, 0x0, 0x1, 0x7, 0x2, 0x2d7}, &(0x7f0000000680)={0x80, 0x7f4a, 0x2d8, 0x65, 0xfffffffffffffe01, 0x5, 0x8}, &(0x7f00000006c0)={0x0, 0x3938700}, &(0x7f0000000740)={&(0x7f0000000700)={[0x1]}, 0x8}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000008c0)={r6, &(0x7f0000000780)="d21a2faf89e95fd17b252be31833a70077ffe686dca28a86a6bb7e5354b1dcda04a21f01b54713e67676f8aa737091e23dc73c369ae71ff7a83c73f65e794e16546ca2621a59b3866d8ebe3979485f52aab9479fbd9361caaf9adbf33b0a384ccf8a61ffb4ca5c9102384e049953e5a345c14500cfc00acdaa4040aedc184ca78123fdc31df38b4428c1330249a276d3674eb8dae3c3f0d0a9ae4c4c2a2776071357f45966698b3bf28c8cd54f1cac96cd32cd3e9a96437b3e735c17fb395600be5bf8fe32a0750fe581ecc293c470e837625d59234df09cb624fd663fa91aec3c0c229ea6694de6f2", &(0x7f0000000880)=""/16}, 0x20) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000900)=""/130) rt_sigprocmask(0x0, &(0x7f00000009c0)={[0xdda9]}, &(0x7f0000000a00), 0x8) mount_setattr(r5, &(0x7f0000000a40)='./file0\x00', 0x100, &(0x7f0000000a80)={0x0, 0x0, 0x20000, {r6}}, 0x20) fcntl$getown(r5, 0x9) r10 = syz_open_dev$evdev(&(0x7f0000000ac0), 0x939, 0x42000) ioctl$EVIOCGRAB(r10, 0x40044590, &(0x7f0000000b00)=0x4) io_uring_enter(r9, 0x1924, 0xa320, 0xca07a355513c665f, &(0x7f0000000b40)={[0x6]}, 0x8) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000b80)=0x0) connect$nfc_llcp(r4, &(0x7f0000000bc0)={0x27, r11, 0xffffffffffffffff, 0x6, 0x8, 0x3, "46a8cb896934809dc8c68448572f3e2cbc1a9de4616e29f7b96fb09c0d6b72ff4bfa859b958a5d09e71314d9c8a5346a7639b25fe04ee5977d8ff751b838c9", 0x3d}, 0x60) ioctl$F2FS_IOC_DEFRAGMENT(r5, 0xc010f508, &(0x7f0000000c40)={0x2, 0x9}) r12 = syz_open_dev$mouse(&(0x7f0000000c80), 0x9, 0x40) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000cc0)={0x73622a85, 0x10a, 0x3}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r10, 0x942e, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000d00)=[@sack_perm, @timestamp, @sack_perm, @sack_perm, @window={0x3, 0x5, 0x800}], 0x5) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r5, 0x800442d4, &(0x7f0000000d40)=0x3) setsockopt$XDP_TX_RING(r12, 0x11b, 0x3, &(0x7f0000000d80)=0x10000, 0x4) futex(&(0x7f0000000dc0)=0x1, 0x9, 0x1, &(0x7f0000000e00)={0x0, 0x989680}, &(0x7f0000000e40), 0x1) ioctl$F2FS_IOC_RESIZE_FS(r8, 0x4008f510, &(0x7f0000000e80)=0x4) ioctl$XFS_IOC_READLINK_BY_HANDLE(r7, 0xc038586c, &(0x7f0000000fc0)={r5, &(0x7f0000000ec0)='/dev/loop#\x00', 0x72200, &(0x7f0000000f00)={@align=0x40, {0x8, 0x3, 0x4, 0x5}}, 0x9, &(0x7f0000000f40)={@_ha_fsid}, &(0x7f0000000f80)=0x5}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001000), 0x501240) ioctl$KVM_IRQ_LINE(r7, 0x4008ae61, &(0x7f0000001040)={0x6, 0xffffffd5}) 4.444012495s ago: executing program 3 (id=1328): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000240)="c4e1a9d83d00000000c4c1cf2a79fdb9a80a0000b807000000ba000000000f30c4e11d73d9069ae0235f8d6d000f20c035020000000f22c00f79199a77000000a9002e65f30fbd934230000066bad10466b8060066ef"}], 0x1, 0x60, 0x0, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000026c0)=0x3d) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000200)={0x3, 0xb, 0x3, 0x2, 0x9, "3651d60cb79b2293c9f32d3f1da5db4f2db21b", 0x9531, 0x3}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x800, 0x0, 0x21f, 0x3, 0x17, "0d693e0100003700000000c700d17700000001"}) write$P9_RLERRORu(r0, &(0x7f0000000240)=ANY=[], 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x4, r3, 0x2, &(0x7f0000000440)) 4.349452754s ago: executing program 2 (id=1329): syz_usb_connect(0x3, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) 4.196449471s ago: executing program 3 (id=1330): syz_usb_connect(0x3, 0x98, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001186360088d0e3f76239b010203010902860003a2000000090454020317987b5b0a24010a00060201020c2408050600070d0a329ce2090586100004f40804072501832f08000905000040008103ff0905091b08000c078009040201042e2b1503090509000000030004090502020002f7810609050303ff030840040705a6c6415a9f0905850340000b020b090403"], 0x0) (async) r0 = creat(&(0x7f0000000180)='./file0\x00', 0xa) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x8000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB='$w\x00\x00\x00\x00=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x0, @meta={0x9062869a, 0x7de3fd5a, 0xae81, 0x3b73, 0x1ae9a945}}) 4.134346251s ago: executing program 1 (id=1331): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getrlimit(0x3, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x0, 0xe, 0x0, &(0x7f0000002580)="f0b9547ee7affa9daabd309a75d3", 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/136], 0x110) setsockopt$inet_group_source_req(r5, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) setsockopt$inet_group_source_req(r5, 0x0, 0x2c, &(0x7f0000000000)={0x2, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @local}}}, 0x108) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) prlimit64(r1, 0x2, &(0x7f0000000040)={0x80, 0xfffffffffffffeff}, &(0x7f0000000080)) syz_open_dev$vbi(&(0x7f0000000240), 0x0, 0x2) connect$inet(r6, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r6, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r6, 0x0, r0, 0x0, 0xfea8, 0xa) 3.904727706s ago: executing program 5 (id=1332): r0 = socket$xdp(0x2c, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x14b041, 0x2) memfd_create(0x0, 0x1) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b000000180100002020752500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000900000056000000060000002c93000000000000b5030000000000008500000076000000f1c00000000000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000f40000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000092870000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000040000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c900000014003100fc0100000000"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0x9, r0, 0x4, {0x1000, 0x2}, 0xb4}, 0x1) 3.081271643s ago: executing program 1 (id=1333): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f0000000a40)={'syztnl0\x00', 0x0, 0x4, 0x69, 0xff, 0x6, 0x71, @private2, @mcast1, 0x40, 0x0, 0x3, 0xfffffff1}}) sendmsg$inet(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000340)="191414afb20f972047c58276be460d5b480e14e2e8d2530a5542b6cb3e129c787301822fa0ee923ea7a4920ba44b3167160195d2b568b4de8cc993b8761e0e7c17af4e66b9b2f46ccb907e866542ab684d1030fbe489279aa313d73e56df18ab30d075a01b3e1bc39e0164c171855ee0e70c481030", 0x75}, {&(0x7f0000000740)="9550c9daac5f43314a40b92022aea82e155a8f669615a9510558661d0699df8f6e8240590bbb76e0e5c2837658e800e0407d3b4cbff979b639ff", 0x3a}, {&(0x7f0000000780)="ca4536107f4148b30fee12451cf6c14aa870b0c81b6d271a3c4966a1bf4937ebf29c5e1e4fffe26529c10e3f2003b765", 0x30}, {&(0x7f0000000840)="cad67d892f5ab1c526ad0c6d701c3f48d2a8eddba5e7da6b4311223815dff009279c03d4adb74a92b4d2bb988190ae2e9c908ffcfa8c25be104efea9e221bd7b74bd1857bf724a7bd31fec3ad9268424e572b00d2d62334632d108e262d5265e67503c6c4e9fe8251ea830ace7474d6952b78d35c2f94b7f4919bfed6d206cd9efacfbd59e10c45c28f16375e0a2c491b803eede2515ad8a646c67adca0e4b37ff18c78821babb8b3f5f22a1f375b8fe71cc26ce78328e1d528888060b99d88734018de5a53d238ce17b9539de0cc78ca9d335b16bce76916587658c87253611c78f05a78a5f783c237617da4b724314c4a05ac406", 0xf5}], 0x4, &(0x7f0000000b00)}, 0x8000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) ptrace$ARCH_GET_FS(0x1e, 0x0, 0x0, 0x1003) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010) socket$kcm(0x11, 0x3, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x34, r8, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x20000f, 0x7, @udp='udp:syz0\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) 2.6333653s ago: executing program 0 (id=1334): read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) accept4(r4, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0xbe9, 0x0, 0x7, 0x1, 0x4]}, &(0x7f0000000340)=0x54) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a000000", @ANYRES32=0x0, @ANYBLOB="0400"/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000857d92b7d54277093c2b692213bc53f9d14192f757add8"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008510000003000000180000000000000000000500000000009500000000000000950000"], &(0x7f0000000000)='GPL\x00'}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) 1.74627698s ago: executing program 1 (id=1335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f0000000a40)={'syztnl0\x00', 0x0, 0x4, 0x69, 0xff, 0x6, 0x71, @private2, @mcast1, 0x40, 0x0, 0x3, 0xfffffff1}}) sendmsg$inet(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000340)="191414afb20f972047c58276be460d5b480e14e2e8d2530a5542b6cb3e129c787301822fa0ee923ea7a4920ba44b3167160195d2b568b4de8cc993", 0x3b}, {&(0x7f0000000640)}, {&(0x7f0000000740)}, {0x0}, {&(0x7f0000000840)="cad67d892f5ab1c526ad0c6d701c3f48d2a8eddba5e7da6b4311223815dff009279c03d4adb74a92b4d2bb988190ae2e9c908ffcfa8c25be104efea9e221bd7b74bd1857bf724a7bd31fec3ad9268424e572b00d2d62334632d108e262d5265e67503c6c4e9fe8251ea830ace7474d6952b78d35c2f94b7f4919bfed6d206cd9efacfbd59e10c45c28f16375e0a2c491b803eede2515ad8a646c67adca0e4b37ff18c78821babb8b3f5f22a1f375b8fe71cc26ce78328e1d528888060b99d88734018de5a53d238ce17b9539de0cc78ca9d335b16bce76916587658c87253611c78f05a78a5f783c237617da4b724314c4a05ac406", 0xf5}], 0x5, &(0x7f0000000b00)}, 0x8000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) ptrace$ARCH_GET_FS(0x1e, 0x0, 0x0, 0x1003) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$kcm(0x11, 0x3, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x34, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x20000f, 0x7, @udp='udp:syz0\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) 1.582054235s ago: executing program 0 (id=1336): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x3}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000010051227b17774892c91ad1", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x2d) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffffffff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmmsg$inet6(r1, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)}, {&(0x7f0000000280)="22dc6fcc554915e24c61c223d86a374094324f5ec77ea9c2cb8bd80be70a1e5d1481e81d557b399f", 0x28}, {&(0x7f0000000340)="fc81142f8ef495decf43", 0xa}], 0x3, &(0x7f0000000780)=[@flowinfo={{0x14, 0x29, 0xb, 0x10001}}, @tclass={{0x14, 0x29, 0x43, 0x789}}, @dstopts_2292={{0xd0, 0x29, 0x4, {0x3a, 0x16, '\x00', [@generic={0x3e, 0xb5, "6b407de61ef923c4680e8c382700425bf84b546f9e2cb55d305db8ff30b898192a6c0121a315acfa52ba5af3dc90778012f91b03ffe5bb31d06e41464b341d9811ed3dfc3a86154672bdbd3312d81cd43c145ee06bf48f8d39a54a2fee165ab4c38d589e944e23a1fa43cd02c2ce969b7336088dd788a97fe548329c3c3e2e840c0cbf75ed32667eb0655e29fb613b16a4478c6c76e48d55ec84f645c1793473e6a18e022e2816e53581d7d27e10c2af21a8df51cc"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r2}}}, @dstopts={{0x1048, 0x29, 0x37, {0x2, 0x205, '\x00', [@enc_lim={0x4, 0x1, 0xf6}, @enc_lim={0x4, 0x1, 0x95}, @pad1, @ra, @jumbo={0xc2, 0x4, 0x3ff}, @pad1, @hao={0xc9, 0x10, @mcast2}, @generic={0x9, 0x1000, "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"}]}}}, @dontfrag={{0x14}}], 0x1188}}], 0x1, 0x48084) 1.545253542s ago: executing program 5 (id=1337): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) (async) bind$bt_hci(r0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) (async) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00", 0x2) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) setgroups(0x0, 0x0) setuid(0xee00) (async) setuid(0xee00) ioctl$CEC_ADAP_G_LOG_ADDRS(0xffffffffffffffff, 0x805c6103, 0x0) syz_clone(0x8060400, 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x1) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x840) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 1.470488792s ago: executing program 0 (id=1338): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r1, 0x0, 0x0, 0x0, &(0x7f0000000380)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x2c, 0x0, 0x100, "d52b3d000000fa44966262631e8ac11ec0a7e17b00000000000000000100", 0x34325258}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) r3 = userfaultfd(0x80801) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) chdir(&(0x7f0000000000)='./bus\x00') r4 = open(&(0x7f0000000000)='./bus\x00', 0x142b42, 0x84) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x1000, 0x800000000000000) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x70bd2d, 0x800000, {0xa, 0x0, 0x80, 0x0, 0x19, 0x0, 0x0, 0x1}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x19, 0x1}, @FRA_SRC={0x14, 0x2, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000001b00)={0xffffffff, 0x48574653, 0x1, @stepwise={0xfffffffb, 0xa9a, 0x4, 0x10, 0x5, 0x7fff}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket(0x1d, 0x2, 0x6) 1.308454319s ago: executing program 5 (id=1339): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmsg(r2, &(0x7f0000000300)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000200)}, 0x40000001) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@delqdisc={0x24, 0x25, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xfff1, 0xffff}, {0xd, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001640)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001680)=0x40) 1.202258483s ago: executing program 2 (id=1340): socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xa}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x800003, 0x3, 0x1, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x7, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x7c, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x1, 0x8, 0x3, 0x200100, 0x3, 0x0, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x8, 0x6, 0xffffffff, 0x20000004, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0xf, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x9, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x5, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x2, 0x2, 0x4, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r6, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270fff0000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0, 0x2) 708.816168ms ago: executing program 3 (id=1341): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) syz_clone(0x80a00011, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x830, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) syz_io_uring_setup(0x16b, &(0x7f0000000000)={0x0, 0x3e4f}, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) socket$nl_netfilter(0x10, 0x3, 0xc) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0x1, {0x1, 0x19, 0x4d0, 0x10000000040d, 0x6, 0x3, 0xed1, 0x2, 0x7fff, 0x8000, 0x7ff, r2, r3, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x26, 0x5, 0x6105583a, 0x0, 0xfffa, 0xf4f, 0xffffffff, 0x0, 0x0, 0x0, 0x7ff}}, 0x50) r4 = openat$vimc2(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x28011, r4, 0x7c02b000) mmap(&(0x7f0000e13000/0x1000)=nil, 0x1000, 0x1, 0x110, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x700000060006060, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000007880)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f00000000c0)=0x58, 0xa) 490.760849ms ago: executing program 2 (id=1342): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) syz_emit_vhci(0x0, 0x22) syz_emit_vhci(0x0, 0x0) 0s ago: executing program 5 (id=1343): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x82000000002f4246, 0xfffffffffffffffc, 0x6, 0x8, 0x5, 0x80, 0x4, 0x4, 0x80000, 0x2, 0x1, 0x100, 0x0, 0x9, 0x2000000000000, 0x9, 0x5, 0x800000009, 0x4000000000200, 0x0, 0x2, 0x0, 0x10000000000f48, 0x8, 0x25}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r1, 0x137, 0x7722, 0xc8, 0x0, 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000040000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000082000000850000000e000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xd) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0xff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x404c055) close(0x3) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x49, 0x8a}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x48) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x5, r5, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r6, &(0x7f0000007880)=""/102400, 0x19000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(r6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) kernel console output (not intermixed with test programs): fs: failed to resolve './file2': -2 [ 343.209153][ T5733] usb 2-1: device descriptor read/64, error -71 [ 343.327999][ T5733] usb usb2-port1: attempt power cycle [ 343.638687][ T9298] netlink: 'syz.0.839': attribute type 49 has an invalid length. [ 343.780736][ T5733] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 343.812854][ T5733] usb 2-1: device descriptor read/8, error -71 [ 343.870228][ T7434] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 344.030257][ T7434] usb 4-1: Using ep0 maxpacket: 16 [ 344.075469][ T7434] usb 4-1: unable to get BOS descriptor or descriptor too short [ 344.100440][ T5733] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 344.112605][ T7434] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 344.134851][ T7434] usb 4-1: can't read configurations, error -71 [ 344.146898][ T5733] usb 2-1: device descriptor read/8, error -71 [ 344.319225][ T5733] usb usb2-port1: unable to enumerate USB device [ 345.258858][ T9318] netlink: 68 bytes leftover after parsing attributes in process `syz.2.843'. [ 345.362457][ T9324] netlink: 'syz.2.843': attribute type 27 has an invalid length. [ 345.380692][ T9324] netlink: 'syz.2.843': attribute type 3 has an invalid length. [ 345.723585][ T9320] kvm: vcpu 128: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 345.818541][ T9325] netlink: 'syz.0.844': attribute type 21 has an invalid length. [ 345.857708][ T9325] netlink: 132 bytes leftover after parsing attributes in process `syz.0.844'. [ 345.889321][ T9326] netlink: 68 bytes leftover after parsing attributes in process `syz.1.845'. [ 345.960393][ T5733] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 346.180381][ T9325] netlink: 28 bytes leftover after parsing attributes in process `syz.0.844'. [ 347.035186][ T5733] usb 3-1: unable to get BOS descriptor set [ 347.055534][ T5733] usb 3-1: config 16 has an invalid interface number: 3 but max is 2 [ 347.102692][ T5733] usb 3-1: config 16 has an invalid interface number: 107 but max is 2 [ 347.193472][ T5733] usb 3-1: config 16 has 2 interfaces, different from the descriptor's value: 3 [ 347.479439][ T5733] usb 3-1: config 16 has no interface number 0 [ 347.522821][ T5733] usb 3-1: config 16 has no interface number 1 [ 347.535121][ T5733] usb 3-1: config 16 interface 3 has no altsetting 0 [ 347.555327][ T5733] usb 3-1: config 16 interface 107 has no altsetting 0 [ 347.837868][ T5733] usb 3-1: string descriptor 0 read error: -22 [ 347.894330][ T5733] usb 3-1: New USB device found, idVendor=1410, idProduct=a002, bcdDevice=72.1e [ 347.983631][ T9358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9358 comm=syz.1.851 [ 348.043826][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.604504][ T5733] usb 3-1: can't set config #16, error -71 [ 348.622487][ T5733] usb 3-1: USB disconnect, device number 19 [ 349.651526][ T9364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.855'. [ 352.100222][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.107555][ C1] bridge0: topology change detected, propagating [ 352.114251][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.121525][ C1] bridge0: topology change detected, propagating [ 352.909757][ T29] audit: type=1400 audit(1784525474.631:549): avc: denied { read write } for pid=9388 comm="syz.2.860" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 353.099650][ T188] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 353.100404][ T29] audit: type=1400 audit(1784525474.631:550): avc: denied { open } for pid=9388 comm="syz.2.860" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 353.144313][ T9394] netlink: 'syz.3.862': attribute type 21 has an invalid length. [ 353.175883][ T9385] syzkaller0: entered promiscuous mode [ 353.181469][ T9385] syzkaller0: entered allmulticast mode [ 353.188535][ T9394] netlink: 132 bytes leftover after parsing attributes in process `syz.3.862'. [ 353.200660][ T9394] netlink: 28 bytes leftover after parsing attributes in process `syz.3.862'. [ 353.520751][ T188] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 353.544034][ T188] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 353.568414][ T188] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 353.597873][ T188] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 353.638633][ T188] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 353.664148][ T188] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 353.689459][ T188] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 353.725045][ T188] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 353.748878][ T188] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 353.846421][ T188] hid-generic 0006:0008:0001.0003: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 353.950121][ T9401] netlink: 'syz.4.863': attribute type 27 has an invalid length. [ 353.995857][ T9401] netlink: 'syz.4.863': attribute type 3 has an invalid length. [ 354.380254][ T7437] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 355.257410][ T9400] fido_id[9400]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 355.818224][ T7437] usb 5-1: unable to get BOS descriptor set [ 355.850876][ T7437] usb 5-1: config 16 has an invalid interface number: 3 but max is 2 [ 355.877319][ T7437] usb 5-1: config 16 has an invalid interface number: 107 but max is 2 [ 355.907763][ T7437] usb 5-1: config 16 has 2 interfaces, different from the descriptor's value: 3 [ 355.936601][ T7437] usb 5-1: config 16 has no interface number 0 [ 356.078028][ T7437] usb 5-1: config 16 has no interface number 1 [ 356.084854][ T7437] usb 5-1: config 16 interface 3 has no altsetting 0 [ 356.091938][ T7437] usb 5-1: config 16 interface 107 has no altsetting 0 [ 356.104422][ T7437] usb 5-1: string descriptor 0 read error: -22 [ 356.114368][ T7437] usb 5-1: New USB device found, idVendor=1410, idProduct=a002, bcdDevice=72.1e [ 356.128188][ T7437] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.606087][ T7437] usb 5-1: unknown number of interfaces: 2 [ 357.567488][ T9416] 9pnet_virtio: no channels available for device 127.0.0.1 [ 357.958900][ T188] usb 5-1: USB disconnect, device number 28 [ 358.470361][ T5733] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 358.578437][ T9430] netlink: 68 bytes leftover after parsing attributes in process `syz.4.873'. [ 358.641582][ T5733] usb 1-1: Using ep0 maxpacket: 16 [ 358.685571][ T9435] netlink: 'syz.2.874': attribute type 21 has an invalid length. [ 358.945772][ T9435] netlink: 132 bytes leftover after parsing attributes in process `syz.2.874'. [ 358.984746][ T9435] netlink: 28 bytes leftover after parsing attributes in process `syz.2.874'. [ 359.005023][ T5733] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 359.102277][ T5733] usb 1-1: config 0 has no interface number 0 [ 359.155063][ T29] audit: type=1400 audit(1784525480.881:551): avc: denied { getopt } for pid=9432 comm="syz.3.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 359.187797][ T5733] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 359.242228][ T5733] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 359.380257][ T5733] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 359.440657][ T5733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.482748][ T7437] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 359.484023][ T5733] usb 1-1: Product: syz [ 359.540878][ T5733] usb 1-1: Manufacturer: syz [ 359.563232][ T5733] usb 1-1: SerialNumber: syz [ 359.618775][ T5733] usb 1-1: config 0 descriptor?? [ 360.030040][ T7437] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 360.045902][ T9428] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 360.069820][ T7437] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.211758][ T7437] usb 4-1: Product: syz [ 360.216373][ T7437] usb 4-1: Manufacturer: syz [ 360.221367][ T7437] usb 4-1: SerialNumber: syz [ 360.245279][ T9428] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 360.265962][ T7437] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 360.652149][ T7435] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 360.740537][ T9444] netlink: 68 bytes leftover after parsing attributes in process `syz.4.875'. [ 361.258700][ T188] usb 4-1: USB disconnect, device number 26 [ 361.336048][ T5733] asix 1-1:0.34: probe with driver asix failed with error -71 [ 361.450097][ T5733] usb 1-1: USB disconnect, device number 17 [ 361.751654][ T9463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.881'. [ 361.785826][ T7435] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 361.830239][ T7437] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 361.944179][ T7435] ath9k_htc: Failed to initialize the device [ 361.998071][ T188] usb 4-1: ath9k_htc: USB layer deinitialized [ 362.129707][ T9461] 9pnet_virtio: no channels available for device 127.0.0.1 [ 362.139314][ T7437] usb 3-1: Using ep0 maxpacket: 16 [ 362.164294][ T7437] usb 3-1: unable to get BOS descriptor or descriptor too short [ 362.210534][ T7437] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 362.249729][ T7437] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.284994][ T7437] usb 3-1: Product: syz [ 362.301714][ T7437] usb 3-1: Manufacturer: syz [ 362.324133][ T7437] usb 3-1: SerialNumber: syz [ 362.405501][ T7437] usb 3-1: 1:1 : unsupported sample bitwidth 3 in 8 bytes [ 362.428653][ T7437] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 362.650374][ T7436] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 362.775898][ T9481] netlink: 68 bytes leftover after parsing attributes in process `syz.4.885'. [ 363.028658][ T9459] SELinux: policydb version 0 does not match my version range 15-35 [ 363.392413][ T9459] SELinux: failed to load policy [ 363.420219][ T7436] usb 2-1: Using ep0 maxpacket: 32 [ 363.556218][ T7436] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 363.587651][ T7436] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 363.597848][ T7436] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 363.607330][ T7436] usb 2-1: Product: syz [ 363.611884][ T7436] usb 2-1: Manufacturer: syz [ 363.616602][ T7436] usb 2-1: SerialNumber: syz [ 363.866279][ T7436] usb 2-1: config 0 descriptor?? [ 363.880952][ T9472] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 364.098016][ T7437] usb 3-1: unit 3 not found! [ 364.647208][ T9492] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 364.726543][ T9494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.750703][ T9493] FAULT_INJECTION: forcing a failure. [ 364.750703][ T9493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.764233][ T9493] CPU: 1 UID: 0 PID: 9493 Comm: syz.4.886 Not tainted syzkaller #0 PREEMPT(full) [ 364.764258][ T9493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 364.764269][ T9493] Call Trace: [ 364.764275][ T9493] [ 364.764284][ T9493] dump_stack_lvl+0x100/0x190 [ 364.764313][ T9493] should_fail_ex.cold+0x5/0xa [ 364.764338][ T9493] _copy_from_user+0x2e/0xd0 [ 364.764362][ T9493] drm_ioctl+0x520/0xc60 [ 364.764385][ T9493] ? __pfx_drm_mode_getencoder+0x10/0x10 [ 364.764406][ T9493] ? __pfx_drm_ioctl+0x10/0x10 [ 364.764434][ T9493] ? selinux_file_ioctl+0x13b/0x290 [ 364.764460][ T9493] ? selinux_file_ioctl+0xb6/0x290 [ 364.764486][ T9493] ? __pfx_drm_ioctl+0x10/0x10 [ 364.764506][ T9493] __x64_sys_ioctl+0x18e/0x210 [ 364.764533][ T9493] do_syscall_64+0x115/0x870 [ 364.764551][ T9493] ? clear_bhb_loop+0x40/0x90 [ 364.764574][ T9493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.764593][ T9493] RIP: 0033:0x7fe2cb59de99 [ 364.764608][ T9493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.764625][ T9493] RSP: 002b:00007fe2cc4ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 364.764643][ T9493] RAX: ffffffffffffffda RBX: 00007fe2cb826090 RCX: 00007fe2cb59de99 [ 364.764655][ T9493] RDX: 0000200000000100 RSI: 00000000c01464a6 RDI: 0000000000000003 [ 364.764666][ T9493] RBP: 00007fe2cc4ca090 R08: 0000000000000000 R09: 0000000000000000 [ 364.764676][ T9493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.764686][ T9493] R13: 00007fe2cb826128 R14: 00007fe2cb826090 R15: 00007fff9d06f1c8 [ 364.764709][ T9493] [ 365.115357][ T7437] usb 3-1: USB disconnect, device number 20 [ 365.615535][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 365.751720][ T9496] netlink: 'syz.4.887': attribute type 21 has an invalid length. [ 365.805641][ T9496] netlink: 132 bytes leftover after parsing attributes in process `syz.4.887'. [ 365.912940][ T9496] netlink: 28 bytes leftover after parsing attributes in process `syz.4.887'. [ 366.940870][ T188] usb 2-1: USB disconnect, device number 30 [ 367.544778][ T9509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9509 comm=syz.1.889 [ 368.230534][ T9512] FAULT_INJECTION: forcing a failure. [ 368.230534][ T9512] name failslab, interval 1, probability 0, space 0, times 0 [ 368.244867][ T9512] CPU: 0 UID: 0 PID: 9512 Comm: syz.3.891 Not tainted syzkaller #0 PREEMPT(full) [ 368.244893][ T9512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 368.244906][ T9512] Call Trace: [ 368.244915][ T9512] [ 368.244923][ T9512] dump_stack_lvl+0x100/0x190 [ 368.244953][ T9512] should_fail_ex.cold+0x5/0xa [ 368.244979][ T9512] should_failslab+0xc2/0x120 [ 368.245004][ T9512] kmem_cache_alloc_noprof+0x91/0x6a0 [ 368.245024][ T9512] ? kvm_sched_clock_read+0x11/0x20 [ 368.245054][ T9512] ? sched_clock+0x38/0x60 [ 368.245076][ T9512] ? alloc_empty_file+0x5b/0x1c0 [ 368.245103][ T9512] alloc_empty_file+0x5b/0x1c0 [ 368.245128][ T9512] path_openat+0xe7/0x4280 [ 368.245146][ T9512] ? find_held_lock+0x2b/0x80 [ 368.245175][ T9512] ? __schedule+0x31d8/0x6730 [ 368.245203][ T9512] ? __schedule+0x31d8/0x6730 [ 368.245232][ T9512] ? rcu_is_watching+0x12/0xc0 [ 368.245260][ T9512] ? trace_sched_exit_tp+0x120/0x160 [ 368.245290][ T9512] ? __schedule+0x126e/0x6730 [ 368.245318][ T9512] ? __pfx_path_openat+0x10/0x10 [ 368.245345][ T9512] do_file_open+0x20e/0x430 [ 368.245366][ T9512] ? __pfx_do_file_open+0x10/0x10 [ 368.245385][ T9512] ? __pfx___schedule+0x10/0x10 [ 368.245431][ T9512] ? alloc_fd+0x471/0x7a0 [ 368.245454][ T9512] ? do_getname+0x191/0x390 [ 368.245480][ T9512] do_sys_openat2+0x10f/0x1e0 [ 368.245504][ T9512] ? __pfx_do_sys_openat2+0x10/0x10 [ 368.245538][ T9512] __x64_sys_openat+0x12d/0x210 [ 368.245561][ T9512] ? __pfx___x64_sys_openat+0x10/0x10 [ 368.245601][ T9512] do_syscall_64+0x115/0x870 [ 368.245619][ T9512] ? clear_bhb_loop+0x40/0x90 [ 368.245644][ T9512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.245665][ T9512] RIP: 0033:0x7f9ff195e6ce [ 368.245682][ T9512] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 368.245701][ T9512] RSP: 002b:00007f9ff28aeec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 368.245720][ T9512] RAX: ffffffffffffffda RBX: 00007f9ff28af6c0 RCX: 00007f9ff195e6ce [ 368.245733][ T9512] RDX: 0000000000000002 RSI: 00007f9ff28aef90 RDI: ffffffffffffff9c [ 368.245745][ T9512] RBP: 00007f9ff28af090 R08: 0000000000000000 R09: 0000000000000000 [ 368.245756][ T9512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.245767][ T9512] R13: 00007f9ff1c26218 R14: 00007f9ff1c26180 R15: 00007ffeafb79888 [ 368.245794][ T9512] [ 368.926526][ T29] audit: type=1400 audit(1784525490.641:552): avc: denied { listen } for pid=9513 comm="syz.1.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 369.010283][ T29] audit: type=1400 audit(1784525490.641:553): avc: denied { accept } for pid=9513 comm="syz.1.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 370.353962][ T9529] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 370.396097][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.896'. [ 370.417073][ T9529] block device autoloading is deprecated and will be removed. [ 370.494056][ T9524] 9pnet_virtio: no channels available for device 127.0.0.1 [ 370.635714][ T9531] md: md2 stopped. [ 370.668374][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.897'. [ 371.637330][ T9538] syzkaller0: entered promiscuous mode [ 371.642958][ T9538] syzkaller0: entered allmulticast mode [ 372.934917][ T9548] netlink: 'syz.0.903': attribute type 21 has an invalid length. [ 372.985062][ T9548] netlink: 132 bytes leftover after parsing attributes in process `syz.0.903'. [ 373.157802][ T29] audit: type=1400 audit(1784525494.881:554): avc: denied { ioctl } for pid=9551 comm="syz.3.902" path="socket:[25656]" dev="sockfs" ino=25656 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 373.187359][ T9553] FAULT_INJECTION: forcing a failure. [ 373.187359][ T9553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.201556][ T9553] CPU: 0 UID: 0 PID: 9553 Comm: syz.1.904 Not tainted syzkaller #0 PREEMPT(full) [ 373.201573][ T9553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 373.201580][ T9553] Call Trace: [ 373.201585][ T9553] [ 373.201590][ T9553] dump_stack_lvl+0x100/0x190 [ 373.201608][ T9553] should_fail_ex.cold+0x5/0xa [ 373.201622][ T9553] _copy_to_user+0x32/0xd0 [ 373.201636][ T9553] drm_ioctl+0x608/0xc60 [ 373.201650][ T9553] ? __pfx_drm_mode_getencoder+0x10/0x10 [ 373.201662][ T9553] ? __pfx_drm_ioctl+0x10/0x10 [ 373.201677][ T9553] ? selinux_file_ioctl+0x13b/0x290 [ 373.201692][ T9553] ? selinux_file_ioctl+0xb6/0x290 [ 373.201707][ T9553] ? __pfx_drm_ioctl+0x10/0x10 [ 373.201718][ T9553] __x64_sys_ioctl+0x18e/0x210 [ 373.201734][ T9553] do_syscall_64+0x115/0x870 [ 373.201745][ T9553] ? clear_bhb_loop+0x40/0x90 [ 373.201758][ T9553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.201769][ T9553] RIP: 0033:0x7fdf6c39de99 [ 373.201780][ T9553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.201790][ T9553] RSP: 002b:00007fdf6d1ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 373.201801][ T9553] RAX: ffffffffffffffda RBX: 00007fdf6c626090 RCX: 00007fdf6c39de99 [ 373.201808][ T9553] RDX: 0000200000000100 RSI: 00000000c01464a6 RDI: 0000000000000003 [ 373.201815][ T9553] RBP: 00007fdf6d1ad090 R08: 0000000000000000 R09: 0000000000000000 [ 373.201821][ T9553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.201827][ T9553] R13: 00007fdf6c626128 R14: 00007fdf6c626090 R15: 00007ffed3198818 [ 373.201840][ T9553] [ 373.206415][ T9548] netlink: 28 bytes leftover after parsing attributes in process `syz.0.903'. [ 373.438408][ T29] audit: type=1400 audit(1784525495.121:555): avc: denied { listen } for pid=9551 comm="syz.3.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 374.312481][ T29] audit: type=1400 audit(1784525496.011:556): avc: denied { ioctl } for pid=9567 comm="syz.1.907" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 374.364850][ T9564] netlink: 52 bytes leftover after parsing attributes in process `syz.4.905'. [ 375.106420][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 376.749695][ T9585] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 376.759150][ T9585] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 376.769284][ T9585] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 376.891602][ T29] audit: type=1400 audit(1784525498.501:557): avc: denied { firmware_load } for pid=9581 comm="syz.2.911" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 378.341376][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.414662][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.227029][ T9606] overlayfs: failed to resolve './file2': -2 [ 379.655288][ T9606] netlink: 'syz.2.916': attribute type 49 has an invalid length. [ 379.983550][ T29] audit: type=1400 audit(1784525501.401:558): avc: denied { getopt } for pid=9613 comm="syz.3.920" lport=46656 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 380.053279][ T9615] netlink: 'syz.4.918': attribute type 21 has an invalid length. [ 380.090418][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 380.100235][ T9615] netlink: 132 bytes leftover after parsing attributes in process `syz.4.918'. [ 380.166923][ T9615] netlink: 28 bytes leftover after parsing attributes in process `syz.4.918'. [ 380.295518][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.317438][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.359251][ T9] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 380.417937][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.480129][ T9] usb 2-1: config 0 descriptor?? [ 381.035333][ T9] cm6533_jd 0003:0D8C:0022.0004: unbalanced delimiter at end of report description [ 381.057792][ T9623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.923'. [ 381.088264][ T9] cm6533_jd 0003:0D8C:0022.0004: parse failed [ 381.124210][ T9] cm6533_jd 0003:0D8C:0022.0004: probe with driver cm6533_jd failed with error -22 [ 381.204553][ T9] usb 2-1: USB disconnect, device number 31 [ 381.226607][ T9631] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 381.249533][ T9626] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 381.361296][ T9626] block device autoloading is deprecated and will be removed. [ 381.664417][ T5733] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 382.061861][ T5733] usb 1-1: device descriptor read/64, error -71 [ 382.230302][ T9639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.927'. [ 382.310260][ T5733] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 382.392604][ T9625] Invalid argument reading file caps for ./file0 [ 382.570611][ T5733] usb 1-1: device descriptor read/64, error -71 [ 382.880655][ T5733] usb usb1-port1: attempt power cycle [ 383.240301][ T5733] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 383.413817][ T5733] usb 1-1: device descriptor read/8, error -71 [ 383.530381][ T9658] netlink: 'syz.1.931': attribute type 10 has an invalid length. [ 383.584389][ T29] audit: type=1400 audit(1784525505.241:559): avc: denied { write } for pid=9653 comm="syz.1.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 383.791511][ T9658] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.800210][ T9658] bond0: (slave team0): Enslaving as an active interface with an up link [ 383.820256][ T5733] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 383.852437][ T5733] usb 1-1: device descriptor read/8, error -71 [ 384.026565][ T5733] usb usb1-port1: unable to enumerate USB device [ 385.649966][ T9664] netlink: 'syz.1.934': attribute type 21 has an invalid length. [ 385.676724][ T9664] netlink: 132 bytes leftover after parsing attributes in process `syz.1.934'. [ 385.725180][ T9664] netlink: 28 bytes leftover after parsing attributes in process `syz.1.934'. [ 386.318106][ T9685] netlink: 44 bytes leftover after parsing attributes in process `syz.3.941'. [ 386.475270][ T9685] netlink: 59 bytes leftover after parsing attributes in process `syz.3.941'. [ 386.539701][ T9685] netlink: 59 bytes leftover after parsing attributes in process `syz.3.941'. [ 386.578186][ T9692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9692 comm=syz.0.939 [ 386.644623][ T9687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9687 comm=syz.1.940 [ 388.214041][ T7434] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 388.390435][ T7434] usb 1-1: Using ep0 maxpacket: 16 [ 388.422350][ T7434] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 388.454331][ T7434] usb 1-1: config 0 has no interface number 0 [ 388.549754][ T7434] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 388.630131][ T7434] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 8724, setting to 1024 [ 388.703047][ T7434] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 388.763665][ T7434] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 388.789313][ T9711] md: md2 stopped. [ 388.797698][ T7434] usb 1-1: Product: syz [ 388.803568][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.938'. [ 388.829213][ T7434] usb 1-1: SerialNumber: syz [ 388.865308][ T7434] usb 1-1: config 0 descriptor?? [ 388.909747][ T7434] cm109 1-1:0.8: invalid payload size 1024, expected 4 [ 388.963859][ T7434] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input25 [ 389.362113][ T29] audit: type=1400 audit(1784525511.071:560): avc: denied { append } for pid=9699 comm="syz.0.944" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 389.810618][ C1] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 389.817990][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 389.825126][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 389.832247][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 389.839366][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 389.846471][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 389.853664][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 389.861054][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 389.868158][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 389.875253][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 389.882414][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 389.930778][ T5733] usb 1-1: USB disconnect, device number 22 [ 389.930840][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 389.984847][ T5733] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 390.490168][ T7437] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 390.687449][ T7437] usb 4-1: Using ep0 maxpacket: 16 [ 390.787083][ T7437] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.031178][ T7437] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 391.098944][ T7437] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 391.161988][ T7437] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 391.323319][ T7437] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 391.356418][ T7437] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 391.379400][ T7437] usb 4-1: SerialNumber: syz [ 391.504388][ T9733] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 391.545093][ T9733] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 391.629855][ T7437] hub 4-1:1.0: bad descriptor, ignoring hub [ 391.719102][ T7437] hub 4-1:1.0: probe with driver hub failed with error -5 [ 392.198200][ T7437] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 392.518974][ T29] audit: type=1400 audit(1784525514.241:561): avc: denied { audit_read } for pid=9747 comm="syz.2.957" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 394.022231][ T7437] usb 4-1: USB disconnect, device number 27 [ 394.875750][ T29] audit: type=1400 audit(1784525516.601:562): avc: denied { connect } for pid=9779 comm="syz.2.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 396.775373][ T29] audit: type=1400 audit(1784525518.501:563): avc: denied { accept } for pid=9784 comm="syz.1.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 396.856054][ T29] audit: type=1400 audit(1784525518.581:564): avc: denied { create } for pid=9784 comm="syz.1.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 397.048497][ T9793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9793 comm=syz.0.967 [ 397.753861][ T5733] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 398.870454][ T5733] usb 2-1: Using ep0 maxpacket: 16 [ 399.177736][ T5733] usb 2-1: device descriptor read/all, error -71 [ 399.459945][ T9808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 399.473353][ T9808] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 399.484038][ T9808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 399.503297][ T9808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 399.516591][ T9808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 400.734155][ T9819] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 402.080495][ T5611] Bluetooth: hci5: command tx timeout [ 404.018828][ T9807] xfrm0 speed is unknown, defaulting to 1000 [ 404.101004][ T5611] Bluetooth: hci5: command tx timeout [ 404.147223][ T9839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.978'. [ 405.260172][ T5733] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 405.461818][ T7437] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 405.661781][ T7437] usb 3-1: Using ep0 maxpacket: 16 [ 405.867457][ T9854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9854 comm=syz.3.982 [ 406.254659][ T5611] Bluetooth: hci5: command tx timeout [ 406.669039][ T9850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.981'. [ 406.751549][ T7437] usb 3-1: unable to get BOS descriptor or descriptor too short [ 406.807636][ T9855] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 406.869795][ T7437] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 406.897309][ T7437] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.916762][ T9855] block device autoloading is deprecated and will be removed. [ 406.928567][ T7437] usb 3-1: Product: syz [ 406.947245][ T7437] usb 3-1: Manufacturer: syz [ 406.973701][ T7437] usb 3-1: SerialNumber: syz [ 407.047242][ T7437] usb 3-1: 1:1 : unsupported sample bitwidth 3 in 8 bytes [ 407.078476][ T7437] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 407.101929][ T9807] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.117640][ T9807] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.126523][ T9807] bridge_slave_0: entered allmulticast mode [ 407.133808][ T9807] bridge_slave_0: entered promiscuous mode [ 407.144671][ T9807] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.152571][ T9807] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.159778][ T9807] bridge_slave_1: entered allmulticast mode [ 407.169190][ T9807] bridge_slave_1: entered promiscuous mode [ 407.194453][ T9807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.210687][ T9846] SELinux: policydb version 0 does not match my version range 15-35 [ 407.220740][ T9846] SELinux: failed to load policy [ 407.223104][ T9807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.254823][ T9807] team0: Port device team_slave_0 added [ 407.262458][ T9807] team0: Port device team_slave_1 added [ 407.291021][ T9807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.298001][ T9807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.335675][ T9807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.348560][ T9807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.355564][ T9807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.381446][ T9807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.885840][ T9870] netlink: 68 bytes leftover after parsing attributes in process `syz.0.984'. [ 408.008814][ T9807] hsr_slave_0: entered promiscuous mode [ 408.015275][ T9807] hsr_slave_1: entered promiscuous mode [ 408.021465][ T9807] debugfs: 'hsr0' already exists in 'hsr' [ 408.060508][ T9807] Cannot create hsr debugfs directory [ 408.069432][ T9874] netlink: 'syz.0.984': attribute type 27 has an invalid length. [ 408.095043][ T9874] netlink: 'syz.0.984': attribute type 3 has an invalid length. [ 408.122711][ T7437] usb 3-1: unit 3 not found! [ 408.217408][ T7437] usb 3-1: USB disconnect, device number 21 [ 408.276315][ T5632] udevd[5632]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 408.347817][ T9807] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 408.358722][ T5611] Bluetooth: hci5: command tx timeout [ 408.437232][ T9807] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 408.448470][ T9807] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 408.483236][ T9807] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 408.494247][ T9807] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 408.509346][ T9807] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 408.521235][ T9807] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 408.540774][ T9807] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 408.551155][ T29] audit: type=1400 audit(1784525530.231:565): avc: denied { create } for pid=9877 comm="syz.3.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 408.572355][ T29] audit: type=1400 audit(1784525530.291:566): avc: denied { connect } for pid=9877 comm="syz.3.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 408.620813][ T5611] Bluetooth: hci0: Unable to find connection for big 0x00 [ 408.683192][ T9878] tipc: Started in network mode [ 408.688327][ T9878] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 408.698310][ T9878] tipc: Enabled bearer , priority 10 [ 408.741228][ T29] audit: type=1400 audit(1784525530.451:567): avc: denied { connect } for pid=9877 comm="syz.3.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 408.936571][ T5733] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 409.137050][ T9807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.215934][ T9807] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.248386][ T6221] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.255595][ T6221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.288576][ T9887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.987'. [ 409.328520][ T5733] usb 1-1: unable to get BOS descriptor set [ 409.344636][ T5733] usb 1-1: config 16 has an invalid interface number: 3 but max is 2 [ 409.360260][ T5733] usb 1-1: config 16 has an invalid interface number: 107 but max is 2 [ 409.433678][ T5733] usb 1-1: config 16 has 2 interfaces, different from the descriptor's value: 3 [ 409.636119][ T5733] usb 1-1: config 16 has no interface number 0 [ 409.694267][ T5733] usb 1-1: config 16 has no interface number 1 [ 409.714804][ T5733] usb 1-1: config 16 interface 3 has no altsetting 0 [ 409.729902][ T5733] usb 1-1: config 16 interface 107 has no altsetting 0 [ 409.736877][ T29] audit: type=1400 audit(1784525531.431:568): avc: denied { read } for pid=5270 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 409.852772][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.860312][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.882392][ T9896] tipc: Started in network mode [ 409.887264][ T9896] tipc: Node identity 72454c5c98dd, cluster identity 4711 [ 409.894573][ T9896] tipc: Enabled bearer , priority 0 [ 409.903252][ T188] tipc: Node number set to 4269801488 [ 409.937346][ T9892] tipc: Resetting bearer [ 409.961842][ T9898] syzkaller0: entered promiscuous mode [ 409.967401][ T9898] syzkaller0: entered allmulticast mode [ 410.376278][ T29] audit: type=1400 audit(1784525532.091:569): avc: denied { watch } for pid=9901 comm="syz.1.990" path="/185" dev="tmpfs" ino=990 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 410.410555][ T5733] usb 1-1: string descriptor 0 read error: -22 [ 410.419205][ T5733] usb 1-1: New USB device found, idVendor=1410, idProduct=a002, bcdDevice=72.1e [ 410.454589][ T5733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.702585][ T5733] usb 1-1: unknown number of interfaces: 2 [ 410.836583][ T9891] tipc: Resetting bearer [ 410.896323][ T9891] tipc: Disabling bearer [ 410.976077][ T9897] syzkaller0: entered promiscuous mode [ 410.988828][ T9897] syzkaller0: entered allmulticast mode [ 411.178020][ T29] audit: type=1400 audit(1784525532.901:570): avc: denied { map } for pid=9918 comm="syz.1.991" path="socket:[27657]" dev="sockfs" ino=27657 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 411.468663][ T9925] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9925 comm=syz.2.992 [ 412.471788][ T29] audit: type=1400 audit(1784525534.171:571): avc: denied { write } for pid=9903 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.483580][ T9807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 412.571893][ T7437] usb 1-1: USB disconnect, device number 24 [ 412.696418][ T169] bridge_slave_1: left allmulticast mode [ 412.724856][ T169] bridge_slave_1: left promiscuous mode [ 412.747762][ T29] audit: type=1400 audit(1784525534.471:572): avc: denied { write } for pid=9935 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.754252][ T169] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.816407][ T9940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.995'. [ 412.861896][ T169] bridge_slave_0: left allmulticast mode [ 412.872282][ T169] bridge_slave_0: left promiscuous mode [ 412.879582][ T169] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.900840][ T169] pimreg: left allmulticast mode [ 413.020395][ T169] team0: Port device geneve1 removed [ 413.044209][ T169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.056003][ T169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.065365][ T169] bond0 (unregistering): Released all slaves [ 413.117243][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1 [ 413.790438][ T9961] overlayfs: failed to resolve './file2': -2 [ 414.154985][ T9964] netlink: 'syz.3.998': attribute type 49 has an invalid length. [ 414.717925][ T9975] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1000'. [ 414.789369][ T9970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1001'. [ 414.806278][ T7436] IPVS: starting estimator thread 0... [ 414.940283][ T9979] IPVS: using max 52 ests per chain, 124800 per kthread [ 416.089151][ T29] audit: type=1400 audit(1784525537.811:573): avc: denied { write } for pid=9954 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.190547][ T9981] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1000'. [ 416.320422][ T7437] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 416.459324][ T29] audit: type=1400 audit(1784525538.151:574): avc: denied { write } for pid=9999 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.943095][ T9807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.053704][ T9972] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1000'. [ 417.065532][ T7437] usb 1-1: Using ep0 maxpacket: 32 [ 417.075093][ T7437] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.086836][ T29] audit: type=1400 audit(1784525538.801:575): avc: denied { create } for pid=9971 comm="syz.1.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 417.108100][ T7437] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 417.121250][ T7437] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 417.131501][ T7437] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.139633][ T7437] usb 1-1: Product: syz [ 417.144476][ T7437] usb 1-1: Manufacturer: syz [ 417.149319][ T7437] usb 1-1: SerialNumber: syz [ 417.216556][T10008] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1004'. [ 417.226203][T10008] ksmbd: Unknown IPC event: 4, ignore. [ 417.562457][ T7437] usb 1-1: config 0 descriptor?? [ 417.642424][ T5270] 8021q: adding VLAN 0 to HW filter on device eth2 [ 417.841378][ T29] audit: type=1400 audit(1784525539.531:576): avc: denied { bind } for pid=9991 comm="syz.0.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 418.700517][ T7437] usb 1-1: USB disconnect, device number 25 [ 418.887100][ T9807] veth0_vlan: entered promiscuous mode [ 418.896011][ T9807] veth1_vlan: entered promiscuous mode [ 418.910801][ T9807] veth0_macvtap: entered promiscuous mode [ 419.043835][ T9807] veth1_macvtap: entered promiscuous mode [ 419.069622][T10035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1010'. [ 419.099616][ T9807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.111024][ T9807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.193951][ T29] audit: type=1400 audit(1784525540.921:577): avc: denied { write } for pid=10015 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.272904][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.296312][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.307600][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.316468][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.784406][ T5733] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 419.940753][ T5733] usb 4-1: device descriptor read/64, error -71 [ 420.298531][ T29] audit: type=1400 audit(1784525542.021:578): avc: denied { write } for pid=10044 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.332999][T10047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1012'. [ 420.357894][T10042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1011'. [ 420.502617][ T5733] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 420.757265][ T5733] usb 4-1: device descriptor read/64, error -71 [ 421.042087][ T5733] usb usb4-port1: attempt power cycle [ 421.158867][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.194295][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.232448][T10057] overlayfs: failed to resolve './file2': -2 [ 421.440366][ T5733] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 421.518384][T10059] netlink: 'syz.0.1014': attribute type 49 has an invalid length. [ 421.603357][ T5270] 8021q: adding VLAN 0 to HW filter on device eth3 [ 421.653063][ T5733] usb 4-1: device descriptor read/8, error -71 [ 422.050494][ T5733] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 422.339934][T10066] ceph: No mds server is up or the cluster is laggy [ 422.390939][ T9] libceph: connect (1)[c::]:6789 error -101 [ 422.424173][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 422.962422][ T9] libceph: connect (1)[c::]:6789 error -101 [ 422.997345][ T5733] usb 4-1: device descriptor read/8, error -71 [ 423.115081][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 423.193525][ T5733] usb usb4-port1: unable to enumerate USB device [ 423.403288][ T169] hsr_slave_0: left promiscuous mode [ 423.409731][ T169] hsr_slave_1: left promiscuous mode [ 423.429226][T10071] md: md2 stopped. [ 423.434193][T10071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1016'. [ 423.447230][ T169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.612412][ T169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.632317][ T169] virt_wifi0: left promiscuous mode [ 423.716435][T10078] FAULT_INJECTION: forcing a failure. [ 423.716435][T10078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.731265][T10078] CPU: 0 UID: 0 PID: 10078 Comm: syz.2.1017 Not tainted syzkaller #0 PREEMPT(full) [ 423.731293][T10078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 423.731304][T10078] Call Trace: [ 423.731312][T10078] [ 423.731320][T10078] dump_stack_lvl+0x100/0x190 [ 423.731348][T10078] should_fail_ex.cold+0x5/0xa [ 423.731372][T10078] _copy_from_user+0x2e/0xd0 [ 423.731396][T10078] kstrtouint_from_user+0xd6/0x1d0 [ 423.731424][T10078] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 423.731451][T10078] ? __lock_acquire+0x49f/0x1a40 [ 423.731484][T10078] proc_fail_nth_write+0x83/0x220 [ 423.731510][T10078] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 423.731543][T10078] vfs_write+0x2aa/0x1050 [ 423.731571][T10078] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 423.731598][T10078] ? __pfx_vfs_write+0x10/0x10 [ 423.731622][T10078] ? __fget_files+0x215/0x3d0 [ 423.731646][T10078] ? __fget_files+0x21f/0x3d0 [ 423.731670][T10078] ksys_write+0x12a/0x250 [ 423.731696][T10078] ? __pfx_ksys_write+0x10/0x10 [ 423.731721][T10078] ? trace_hardirqs_off+0x70/0x170 [ 423.731750][T10078] do_syscall_64+0x115/0x870 [ 423.731767][T10078] ? clear_bhb_loop+0x40/0x90 [ 423.731790][T10078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.731809][T10078] RIP: 0033:0x7fc58055e6ce [ 423.731825][T10078] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 423.731842][T10078] RSP: 002b:00007fc5814d3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 423.731860][T10078] RAX: ffffffffffffffda RBX: 00007fc5814d46c0 RCX: 00007fc58055e6ce [ 423.731871][T10078] RDX: 0000000000000001 RSI: 00007fc5814d40a0 RDI: 0000000000000008 [ 423.731882][T10078] RBP: 00007fc5814d4090 R08: 0000000000000000 R09: 0000000000000000 [ 423.731892][T10078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.731903][T10078] R13: 00007fc580826218 R14: 00007fc580826180 R15: 00007ffc84db8728 [ 423.731927][T10078] [ 425.829126][ T169] team0 (unregistering): Port device team_slave_1 removed [ 425.846635][ T169] team0 (unregistering): Port device team_slave_0 removed [ 426.057637][T10094] netlink: 'syz.2.1022': attribute type 21 has an invalid length. [ 426.093529][T10061] syzkaller0: entered promiscuous mode [ 426.099184][T10061] syzkaller0: entered allmulticast mode [ 426.195834][T10094] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1022'. [ 426.205650][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.232189][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.286920][T10094] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1022'. [ 426.351715][ T29] audit: type=1400 audit(1784525548.071:579): avc: denied { mounton } for pid=9807 comm="syz-executor" path="/root/syzkaller.2DuMiK/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 426.538823][ T29] audit: type=1400 audit(1784525548.071:580): avc: denied { mounton } for pid=9807 comm="syz-executor" path="/root/syzkaller.2DuMiK/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=27581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 427.386976][ T29] audit: type=1400 audit(1784525548.291:581): avc: denied { mounton } for pid=9807 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 428.131814][T10125] overlayfs: failed to resolve './file2': -2 [ 428.402196][ T7437] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 428.406789][T10129] netlink: 'syz.0.1028': attribute type 49 has an invalid length. [ 429.188216][ T7437] usb 6-1: Using ep0 maxpacket: 32 [ 429.218125][ T7437] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 430.617244][ T29] audit: type=1400 audit(1784525552.341:582): avc: denied { write } for pid=10105 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.672420][ T7437] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 430.726512][ T7437] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 430.780983][ T7437] usb 6-1: Product: syz [ 430.813144][ T7437] usb 6-1: Manufacturer: syz [ 430.835704][ T7437] usb 6-1: SerialNumber: syz [ 430.876562][ T7437] usb 6-1: config 0 descriptor?? [ 430.900698][T10123] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 430.925756][ T29] audit: type=1400 audit(1784525552.651:583): avc: denied { getopt } for pid=10144 comm="syz.2.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 431.079360][ T29] audit: type=1400 audit(1784525552.791:584): avc: denied { write } for pid=10145 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.154871][ T7434] usb 6-1: USB disconnect, device number 2 [ 431.252821][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1033'. [ 431.261967][ T7437] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 431.342374][T10151] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 431.391579][T10151] block device autoloading is deprecated and will be removed. [ 431.431264][ T7437] usb 3-1: Using ep0 maxpacket: 8 [ 431.475827][ T7437] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 431.517012][ T7437] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.538776][ T5270] 8021q: adding VLAN 0 to HW filter on device eth4 [ 431.564397][ T7437] usb 3-1: Product: syz [ 431.588470][ T7437] usb 3-1: Manufacturer: syz [ 431.594810][T10157] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 431.601337][T10157] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 431.678989][T10157] vhci_hcd vhci_hcd.0: Device attached [ 431.684853][ T7437] usb 3-1: SerialNumber: syz [ 431.719445][ T7437] usb 3-1: config 0 descriptor?? [ 431.730413][T10158] vhci_hcd: connection closed [ 431.739212][ T169] vhci_hcd vhci_hcd.1: stop threads [ 431.891428][ T169] vhci_hcd vhci_hcd.1: release socket [ 431.899454][ T169] vhci_hcd vhci_hcd.1: disconnect device [ 431.913600][ T7437] gspca_main: se401-2.14.0 probing 047d:5003 [ 431.933892][T10166] netlink: 'syz.0.1037': attribute type 21 has an invalid length. [ 432.326946][T10166] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1037'. [ 432.350200][T10166] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1037'. [ 432.539769][ T7437] gspca_se401: Wrong descriptor type [ 433.773746][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 433.897568][ T7437] usb 3-1: USB disconnect, device number 22 [ 433.941758][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 434.238128][ T9] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 434.391814][ T9] usb 6-1: config 179 has no interface number 0 [ 434.506411][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 434.760110][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 435.130261][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 435.427145][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 435.472914][ T9] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 435.511109][ T9] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 435.534542][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.562956][T10177] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 435.793401][ T7435] usb 6-1: USB disconnect, device number 3 [ 435.793426][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 435.807799][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 436.572422][T10206] overlayfs: failed to resolve './file2': -2 [ 437.012477][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1047'. [ 437.040399][T10206] netlink: 'syz.1.1044': attribute type 49 has an invalid length. [ 437.316203][ T7434] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 438.506632][T10227] loop5: detected capacity change from 0 to 7 [ 438.534997][T10227] Dev loop5: unable to read RDB block 7 [ 438.545155][T10227] loop5: unable to read partition table [ 438.551460][ T7434] usb 3-1: Using ep0 maxpacket: 32 [ 438.562855][T10227] loop5: partition table beyond EOD, truncated [ 438.570676][T10227] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 438.592308][ T7434] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 438.652856][ T7434] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 438.711821][ T7434] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 438.745447][ T7434] usb 3-1: Product: syz [ 438.775844][ T7434] usb 3-1: Manufacturer: syz [ 438.802020][ T7434] usb 3-1: SerialNumber: syz [ 438.845360][ T7434] usb 3-1: config 0 descriptor?? [ 438.883037][T10216] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 438.898268][T10230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1051'. [ 440.355743][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.373795][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.490171][ T7434] usb 3-1: USB disconnect, device number 23 [ 441.425477][T10241] xfrm0 speed is unknown, defaulting to 1000 [ 441.765569][T10245] syzkaller0: entered promiscuous mode [ 441.820335][T10245] syzkaller0: entered allmulticast mode [ 442.606957][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1060'. [ 442.808124][T10274] netlink: 'syz.2.1059': attribute type 27 has an invalid length. [ 442.948543][T10274] netlink: 'syz.2.1059': attribute type 3 has an invalid length. [ 442.979004][ T29] audit: type=1400 audit(1784525564.701:585): avc: denied { read } for pid=10275 comm="syz.5.1062" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 443.097873][ T29] audit: type=1400 audit(1784525564.701:586): avc: denied { open } for pid=10275 comm="syz.5.1062" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 443.230230][ T5733] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 443.330640][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 443.394724][ T5733] usb 3-1: unable to get BOS descriptor set [ 443.436541][ T5733] usb 3-1: config 16 has an invalid interface number: 3 but max is 2 [ 443.469348][ T5733] usb 3-1: config 16 has an invalid interface number: 107 but max is 2 [ 443.490512][ T5733] usb 3-1: config 16 has 2 interfaces, different from the descriptor's value: 3 [ 443.520330][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 443.539118][ T5733] usb 3-1: config 16 has no interface number 0 [ 443.556547][ T9] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.578957][ T5733] usb 3-1: config 16 has no interface number 1 [ 443.589240][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 443.602199][ T5733] usb 3-1: config 16 interface 3 has no altsetting 0 [ 443.624203][ T9] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 443.644549][ T5733] usb 3-1: config 16 interface 107 has no altsetting 0 [ 443.669001][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.684891][ T5733] usb 3-1: string descriptor 0 read error: -22 [ 443.692963][ T5733] usb 3-1: New USB device found, idVendor=1410, idProduct=a002, bcdDevice=72.1e [ 443.704831][ T9] usb 6-1: config 0 descriptor?? [ 443.711843][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.778551][ T5733] usb 3-1: unknown number of interfaces: 2 [ 444.157059][ T29] audit: type=1400 audit(1784525565.881:587): avc: denied { ioctl } for pid=10281 comm="syz.1.1063" path="/dev/usbmon6" dev="devtmpfs" ino=735 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 445.179311][ T29] audit: type=1400 audit(1784525565.951:588): avc: denied { watch_mount watch_reads } for pid=10281 comm="syz.1.1063" path="/203/file5" dev="tmpfs" ino=1089 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 445.725594][ T9] nzxt-smart2 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 446.474519][ T7435] usb 3-1: USB disconnect, device number 24 [ 448.774625][ T29] audit: type=1400 audit(1784525570.501:589): avc: denied { write } for pid=10286 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.805960][ T7435] usb 6-1: USB disconnect, device number 4 [ 448.983182][ T29] audit: type=1400 audit(1784525570.621:590): avc: denied { wake_alarm } for pid=10310 comm="syz.2.1067" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 449.115616][ T29] audit: type=1400 audit(1784525570.741:591): avc: denied { write } for pid=10316 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 449.554840][T10334] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1072'. [ 450.044402][T10338] netlink: 'syz.2.1073': attribute type 4 has an invalid length. [ 450.175579][T10326] syzkaller0: entered promiscuous mode [ 450.183384][T10326] syzkaller0: entered allmulticast mode [ 450.350471][ T7434] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 450.604786][ T7434] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 451.250217][ T7434] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 451.314175][ T7434] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 451.390200][ T7434] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 451.399389][ T7434] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.509608][ T7434] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 451.517296][ T7434] usb 3-1: invalid MIDI out EP 0 [ 451.763317][T10360] fuse: Bad value for 'group_id' [ 451.768290][T10360] fuse: Bad value for 'group_id' [ 451.795560][ T29] audit: type=1400 audit(1784525573.491:592): avc: denied { mounton } for pid=10358 comm="syz.0.1077" path="/221/file0" dev="tmpfs" ino=1195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 453.665516][ T29] audit: type=1400 audit(1784525575.351:593): avc: denied { write } for pid=10340 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 454.106265][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 454.449020][ T29] audit: type=1400 audit(1784525576.171:594): avc: denied { write } for pid=10382 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 454.981103][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 455.031861][ T7434] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 455.070956][ T7434] usb 3-1: USB disconnect, device number 25 [ 455.601320][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 455.614409][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 455.623541][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.721909][ T9] usb 2-1: config 0 descriptor?? [ 455.844028][ T7437] IPVS: starting estimator thread 0... [ 455.878533][T10418] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 455.891841][T10407] IPVS: lc: FWM 3 0x00000003 - no destination available [ 455.911601][T10407] IPVS: lc: FWM 3 0x00000003 - no destination available [ 455.976715][ T29] audit: type=1400 audit(1784525577.701:595): avc: denied { write } for pid=10398 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 456.142096][T10415] IPVS: using max 46 ests per chain, 110400 per kthread [ 456.291989][ T5733] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 456.728375][ T5733] usb 6-1: Using ep0 maxpacket: 16 [ 456.921677][ T5733] usb 6-1: unable to get BOS descriptor or descriptor too short [ 457.476379][T10434] xt_hashlimit: size too large, truncated to 1048576 [ 458.024236][T10437] overlayfs: failed to resolve './file2': -2 [ 458.036517][ T29] audit: type=1400 audit(1784525579.761:596): avc: denied { write } for pid=10425 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 458.083495][T10440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1094'. [ 458.129319][T10429] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 458.502676][ T5733] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 458.517126][T10437] netlink: 'syz.3.1093': attribute type 49 has an invalid length. [ 458.545439][ T5733] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.606234][ T5733] usb 6-1: Product: syz [ 458.628600][ T5733] usb 6-1: Manufacturer: syz [ 458.648950][ T5733] usb 6-1: SerialNumber: syz [ 458.764886][ T5733] usb 6-1: 1:1 : unsupported sample bitwidth 3 in 8 bytes [ 459.035179][ T5733] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 459.099191][ T5733] usb 6-1: unit 3 not found! [ 459.211749][ T29] audit: type=1400 audit(1784525580.941:597): avc: denied { setopt } for pid=10455 comm="syz.2.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 459.328432][ T29] audit: type=1400 audit(1784525580.981:598): avc: denied { ioctl } for pid=10455 comm="syz.2.1097" path="socket:[29272]" dev="sockfs" ino=29272 ioctlcmd=0x5881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 459.407262][T10452] netlink: 'syz.0.1096': attribute type 23 has an invalid length. [ 459.484212][ T29] audit: type=1400 audit(1784525581.001:599): avc: denied { write } for pid=10455 comm="syz.2.1097" path="socket:[29272]" dev="sockfs" ino=29272 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 459.519932][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 459.617112][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 460.986934][ T9] usb 2-1: USB disconnect, device number 34 [ 461.005316][ T5733] usb 6-1: USB disconnect, device number 5 [ 461.154010][ T5632] udevd[5632]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 461.540239][ T7437] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 461.786960][ T7437] usb 4-1: unable to get BOS descriptor or descriptor too short [ 461.828094][ T7437] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 461.862947][ T7437] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 461.903878][ T7437] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 461.948700][ T7437] usb 4-1: config 129 has no interface number 0 [ 461.977882][ T7437] usb 4-1: config 129 has no interface number 1 [ 461.999183][ T7437] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 462.029254][ T7437] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 462.057094][ T29] audit: type=1400 audit(1784525583.781:600): avc: denied { write } for pid=10444 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 462.092987][ T7437] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 462.112851][T10488] comedi comedi3: comedi_config --init_data is deprecated [ 462.131286][ T7437] usb 4-1: config 129 interface 135 has no altsetting 0 [ 462.150291][ T7437] usb 4-1: config 129 interface 5 has no altsetting 0 [ 462.166742][ T7437] usb 4-1: string descriptor 0 read error: -22 [ 462.182677][ T7437] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 462.203551][ T7437] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.355582][ T7437] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 462.379272][ T7437] usb 4-1: MIDIStreaming interface descriptor not found [ 462.575006][ T29] audit: type=1400 audit(1784525584.301:601): avc: denied { write } for pid=10492 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 462.700001][ T7437] usb 4-1: USB disconnect, device number 32 [ 463.710370][T10512] syzkaller0: entered promiscuous mode [ 463.733097][T10512] syzkaller0: entered allmulticast mode [ 463.768949][T10512] tipc: Started in network mode [ 463.776298][T10512] tipc: Node identity 4a5d0e6dd0e, cluster identity 4711 [ 463.793191][T10512] tipc: Enabled bearer , priority 0 [ 463.990352][ T7437] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 464.054581][T10519] overlayfs: failed to resolve './file2': -2 [ 464.178101][ T7437] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 464.913115][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 464.913759][ T7435] tipc: Node number set to 2596081261 [ 465.089372][ T7437] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.122946][T10519] netlink: 'syz.1.1110': attribute type 49 has an invalid length. [ 465.132078][ T7437] usb 4-1: Product: syz [ 465.143664][ T7437] usb 4-1: Manufacturer: syz [ 465.148885][T10511] tipc: Resetting bearer [ 465.154819][ T7437] usb 4-1: SerialNumber: syz [ 465.176026][T10511] tipc: Disabling bearer [ 465.369144][ T7437] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 465.397060][ T29] audit: type=1400 audit(1784525587.121:602): avc: denied { connect } for pid=10527 comm="syz.2.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 465.472086][ T7437] usb 4-1: USB disconnect, device number 33 [ 465.483283][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 465.544400][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 465.598927][T10535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10535 comm=syz.5.1115 [ 467.157262][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 467.179144][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 467.204328][ T9] usb 1-1: can't read configurations, error -71 [ 468.046585][T10560] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1119'. [ 468.129490][T10560] xfrm0 speed is unknown, defaulting to 1000 [ 468.718290][T10548] syzkaller0: entered promiscuous mode [ 468.723961][T10548] syzkaller0: entered allmulticast mode [ 469.020962][T10048] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 469.210242][T10048] usb 3-1: Using ep0 maxpacket: 16 [ 469.236199][T10048] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.282559][T10048] usb 3-1: config 0 interface 0 has no altsetting 0 [ 469.310151][T10048] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 469.320387][T10048] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.330801][T10048] usb 3-1: config 0 descriptor?? [ 470.078969][ T5733] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 470.183268][T10575] xfrm0 speed is unknown, defaulting to 1000 [ 470.185337][ T9] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 470.330353][ T9] usb 1-1: device descriptor read/64, error -71 [ 470.365341][ T5733] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 470.463750][ T5733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.693590][ T5733] usb 2-1: config 0 descriptor?? [ 470.713222][ T29] audit: type=1400 audit(1784525592.431:603): avc: denied { ioctl } for pid=10557 comm="syz.2.1122" path="/newroot/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 470.743536][ T9] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 470.755404][ T29] audit: type=1400 audit(1784525592.481:604): avc: denied { read append } for pid=10557 comm="syz.2.1122" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 470.761014][T10563] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 470.779811][ T29] audit: type=1400 audit(1784525592.481:605): avc: denied { open } for pid=10557 comm="syz.2.1122" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 471.199515][ T9] usb 1-1: device descriptor read/64, error -71 [ 471.334878][ T9] usb usb1-port1: attempt power cycle [ 471.385480][ T29] audit: type=1400 audit(1784525593.111:606): avc: denied { lock } for pid=10576 comm="syz.1.1127" path="socket:[30822]" dev="sockfs" ino=30822 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 471.428810][T10593] syzkaller0: entered promiscuous mode [ 471.437897][T10593] syzkaller0: entered allmulticast mode [ 471.613092][T10577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.627623][T10577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.674394][ T5733] usb 2-1: Cannot read MAC address [ 471.685111][ T5733] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 471.730343][ T9] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 471.804325][ T9] usb 1-1: device descriptor read/8, error -71 [ 471.914024][ T7435] usb 2-1: USB disconnect, device number 35 [ 472.026314][T10048] usbhid 3-1:0.0: can't add hid device: -71 [ 472.033146][T10048] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 473.015142][ T9] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 473.045074][T10048] usb 3-1: USB disconnect, device number 26 [ 473.570369][ T29] audit: type=1400 audit(1784525595.281:607): avc: denied { map } for pid=10623 comm="syz.0.1137" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 473.710805][ T29] audit: type=1400 audit(1784525595.281:608): avc: denied { execute } for pid=10623 comm="syz.0.1137" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 474.058012][ T9] usb 1-1: device not accepting address 31, error -71 [ 474.067192][ T9] usb usb1-port1: unable to enumerate USB device [ 474.212787][ T188] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 474.275015][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.296400][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.370308][ T188] usb 4-1: Using ep0 maxpacket: 32 [ 474.407234][ T188] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 474.423070][ T188] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 474.440718][ T188] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 474.455817][T10637] netlink: 'syz.2.1141': attribute type 27 has an invalid length. [ 474.462639][ T188] usb 4-1: Product: syz [ 474.471788][ T9] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 474.474180][T10637] netlink: 'syz.2.1141': attribute type 3 has an invalid length. [ 474.485318][ T188] usb 4-1: Manufacturer: syz [ 474.502441][ T188] usb 4-1: SerialNumber: syz [ 474.522096][ T188] usb 4-1: config 0 descriptor?? [ 474.538887][T10632] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 474.760150][ T7435] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 474.785917][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFA, changing to 0x8A [ 474.960598][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 197, changing to 4 [ 474.999153][ T7435] usb 3-1: unable to get BOS descriptor set [ 475.000546][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 54772, setting to 1023 [ 475.024738][ T9] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 475.032985][ T7435] usb 3-1: config 16 has an invalid interface number: 3 but max is 2 [ 475.042097][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.053014][ T9] usb 1-1: Product: syz [ 475.055914][T10641] syzkaller0: entered promiscuous mode [ 475.062769][T10641] syzkaller0: entered allmulticast mode [ 475.071307][ T9] usb 1-1: Manufacturer: syz [ 475.077976][ T9] usb 1-1: SerialNumber: syz [ 475.084647][ T7435] usb 3-1: config 16 has an invalid interface number: 107 but max is 2 [ 475.095636][ T9] usb 1-1: config 0 descriptor?? [ 475.114935][ T7435] usb 3-1: config 16 has 2 interfaces, different from the descriptor's value: 3 [ 475.125559][ T7435] usb 3-1: config 16 has no interface number 0 [ 475.205338][ T7435] usb 3-1: config 16 has no interface number 1 [ 475.233092][ T7435] usb 3-1: config 16 interface 3 has no altsetting 0 [ 475.242746][ T7435] usb 3-1: config 16 interface 107 has no altsetting 0 [ 475.252021][ T7435] usb 3-1: string descriptor 0 read error: -22 [ 475.258815][ T7435] usb 3-1: New USB device found, idVendor=1410, idProduct=a002, bcdDevice=72.1e [ 475.268066][ T7435] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.290313][ T7437] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 475.302955][ T7435] usb 3-1: unknown number of interfaces: 2 [ 475.329054][ T9] streamzap 1-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0241 [ 475.343847][T10648] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 475.412048][T10649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.450273][ T7437] usb 2-1: Using ep0 maxpacket: 16 [ 475.457223][ T7437] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.476181][ T7437] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 475.500478][ T7437] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 475.521531][ T7437] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 475.546102][ T7437] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 475.591145][ T7437] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 475.626536][ T7437] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 475.650775][T10653] ip_vti0: Master is either lo or non-ether device [ 475.660118][T10653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.668826][ T7437] usb 2-1: Manufacturer: syz [ 475.671915][T10653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.691825][ T7437] usb 2-1: config 0 descriptor?? [ 476.018609][ T29] audit: type=1400 audit(1784525597.691:609): avc: denied { write } for pid=10655 comm="syz.5.1146" path="socket:[30531]" dev="sockfs" ino=30531 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 476.183973][ T7435] usb 1-1: USB disconnect, device number 32 [ 476.640262][ T7437] rc_core: IR keymap rc-hauppauge not found [ 476.653778][ T7437] Registered IR keymap rc-empty [ 476.675914][ T7437] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 476.733095][ T7437] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 476.794915][ T7437] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 476.855171][T10665] netlink: 'syz.5.1147': attribute type 1 has an invalid length. [ 476.858033][ T7437] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input28 [ 476.926296][ T7437] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 476.948377][T10665] 8021q: adding VLAN 0 to HW filter on device bond1 [ 477.002236][ T7437] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 477.170378][ T7437] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 477.237724][T10647] could not allocate digest TFM handle crct10dif-arm64-ce [ 477.381183][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1147'. [ 477.401751][ T7437] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 477.430697][T10673] fuse: Bad value for 'fd' [ 477.453769][ T188] usb 3-1: USB disconnect, device number 27 [ 477.492304][ T7437] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 477.533756][T10670] bond1: (slave veth3): Enslaving as an active interface with a down link [ 477.547801][ T7437] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 477.557939][T10671] Timeout policy `syz1' can only be used by L3 protocol number 245 [ 477.590301][ T7437] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 477.630147][ T7437] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 477.648228][T10674] vlan2: entered allmulticast mode [ 477.660202][ T7437] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 477.666370][T10674] veth0_to_bond: entered allmulticast mode [ 477.690653][T10677] netlink: 'syz.2.1149': attribute type 21 has an invalid length. [ 477.698151][ T188] usb 4-1: USB disconnect, device number 34 [ 477.717747][T10674] veth0_to_bond: entered promiscuous mode [ 477.720226][ T7437] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 477.780625][T10674] veth0_to_bond: left promiscuous mode [ 477.803840][ T7437] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 477.813324][T10674] bond1: (slave vlan2): making interface the new active one [ 477.835259][ T7437] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 477.845491][T10674] veth0_to_bond: entered promiscuous mode [ 477.891360][T10674] vlan2: entered promiscuous mode [ 477.925767][T10674] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 477.969427][ T7437] usb 2-1: USB disconnect, device number 36 [ 477.992006][T10685] xfrm0 speed is unknown, defaulting to 1000 [ 478.203325][T10677] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1149'. [ 478.214821][T10677] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1149'. [ 478.443521][T10694] FAULT_INJECTION: forcing a failure. [ 478.443521][T10694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.475937][T10694] CPU: 0 UID: 0 PID: 10694 Comm: syz.5.1153 Not tainted syzkaller #0 PREEMPT(full) [ 478.475963][T10694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 478.475981][T10694] Call Trace: [ 478.475987][T10694] [ 478.475994][T10694] dump_stack_lvl+0x100/0x190 [ 478.476021][T10694] should_fail_ex.cold+0x5/0xa [ 478.476043][T10694] _copy_from_user+0x2e/0xd0 [ 478.476068][T10694] move_addr_to_kernel+0x65/0x170 [ 478.476096][T10694] __sys_bind+0x11d/0x260 [ 478.476122][T10694] ? __pfx___sys_bind+0x10/0x10 [ 478.476146][T10694] ? __fget_files+0x21f/0x3d0 [ 478.476171][T10694] ? __pfx_ksys_write+0x10/0x10 [ 478.476201][T10694] __x64_sys_bind+0x72/0xb0 [ 478.476225][T10694] ? lockdep_hardirqs_on+0x78/0x100 [ 478.476253][T10694] do_syscall_64+0x115/0x870 [ 478.476268][T10694] ? clear_bhb_loop+0x40/0x90 [ 478.476288][T10694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.476305][T10694] RIP: 0033:0x7effd0b9de99 [ 478.476321][T10694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.476338][T10694] RSP: 002b:00007effd1b3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 478.476356][T10694] RAX: ffffffffffffffda RBX: 00007effd0e25fa0 RCX: 00007effd0b9de99 [ 478.476368][T10694] RDX: 000000000000000c RSI: 0000200000000180 RDI: 0000000000000003 [ 478.476378][T10694] RBP: 00007effd1b3b090 R08: 0000000000000000 R09: 0000000000000000 [ 478.476388][T10694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.476398][T10694] R13: 00007effd0e26038 R14: 00007effd0e25fa0 R15: 00007ffedb19ee28 [ 478.476422][T10694] [ 478.795899][T10685] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 478.802302][T10685] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 478.836854][T10685] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 478.843629][T10685] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 478.860077][T10685] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 478.866665][T10685] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 478.875398][T10685] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 478.882697][T10685] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 479.053379][T10685] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 479.059318][T10685] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 479.323784][T10707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10707 comm=syz.5.1155 [ 480.946193][ T29] audit: type=1400 audit(1784525602.671:610): avc: denied { write } for pid=10689 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 481.334188][ T29] audit: type=1400 audit(1784525603.061:611): avc: denied { read } for pid=10730 comm="syz.5.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 481.338931][T10729] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5607] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[10729] [ 481.446487][ T29] audit: type=1400 audit(1784525603.091:612): avc: denied { write } for pid=10726 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 481.557372][ T29] audit: type=1400 audit(1784525603.091:613): avc: denied { getopt } for pid=10730 comm="syz.5.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 481.658160][ T29] audit: type=1400 audit(1784525603.111:614): avc: denied { shutdown } for pid=10730 comm="syz.5.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 481.863813][ T29] audit: type=1326 audit(1784525603.591:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10735 comm="syz.0.1162" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f83e679de99 code=0x0 [ 481.863954][T10744] netlink: 'syz.5.1165': attribute type 21 has an invalid length. [ 481.920250][T10744] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1165'. [ 481.941452][T10748] FAULT_INJECTION: forcing a failure. [ 481.941452][T10748] name failslab, interval 1, probability 0, space 0, times 0 [ 481.955714][T10748] CPU: 0 UID: 0 PID: 10748 Comm: syz.3.1164 Not tainted syzkaller #0 PREEMPT(full) [ 481.955742][T10748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 481.955753][T10748] Call Trace: [ 481.955760][T10748] [ 481.955767][T10748] dump_stack_lvl+0x100/0x190 [ 481.955797][T10748] should_fail_ex.cold+0x5/0xa [ 481.955822][T10748] should_failslab+0xc2/0x120 [ 481.955845][T10748] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 481.955867][T10748] ? __alloc_skb+0x5b7/0x710 [ 481.955886][T10748] ? __alloc_skb+0x140/0x710 [ 481.955910][T10748] __alloc_skb+0x140/0x710 [ 481.955927][T10748] ? __alloc_skb+0x5b7/0x710 [ 481.955946][T10748] ? __pfx___alloc_skb+0x10/0x10 [ 481.955972][T10748] netlink_alloc_large_skb+0x69/0x150 [ 481.956004][T10748] netlink_sendmsg+0x680/0xda0 [ 481.956038][T10748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.956069][T10748] ? selinux_socket_sendmsg+0x198/0x2f0 [ 481.956108][T10748] ____sys_sendmsg+0xa4d/0xbe0 [ 481.956133][T10748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.956162][T10748] ? __pfx_____sys_sendmsg+0x10/0x10 [ 481.956197][T10748] ___sys_sendmsg+0x190/0x1e0 [ 481.956226][T10748] ? __pfx____sys_sendmsg+0x10/0x10 [ 481.956251][T10748] ? __lock_acquire+0x49f/0x1a40 [ 481.956274][T10748] ? get_pid_task+0x106/0x250 [ 481.956329][T10748] __sys_sendmsg+0x160/0x210 [ 481.956351][T10748] ? __pfx___sys_sendmsg+0x10/0x10 [ 481.956385][T10748] do_syscall_64+0x115/0x870 [ 481.956402][T10748] ? clear_bhb_loop+0x40/0x90 [ 481.956425][T10748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.956444][T10748] RIP: 0033:0x7f9ff199de99 [ 481.956459][T10748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.956476][T10748] RSP: 002b:00007f9ff28f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.956494][T10748] RAX: ffffffffffffffda RBX: 00007f9ff1c25fa0 RCX: 00007f9ff199de99 [ 481.956507][T10748] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 481.956518][T10748] RBP: 00007f9ff28f1090 R08: 0000000000000000 R09: 0000000000000000 [ 481.956529][T10748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.956540][T10748] R13: 00007f9ff1c26038 R14: 00007f9ff1c25fa0 R15: 00007ffeafb79888 [ 481.956566][T10748] [ 482.530314][T10744] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1165'. [ 482.968746][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1167'. [ 483.115304][T10761] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1167'. [ 485.029594][ T29] audit: type=1400 audit(1784525606.751:616): avc: denied { write } for pid=10745 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 485.328256][ T29] audit: type=1400 audit(1784525607.051:617): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 485.372924][T10790] overlayfs: failed to resolve './file2': -2 [ 485.829567][ T29] audit: type=1400 audit(1784525607.551:618): avc: denied { write } for pid=10788 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 485.973385][T10790] netlink: 'syz.1.1173': attribute type 49 has an invalid length. [ 486.142192][T10809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1177'. [ 487.333992][ T29] audit: type=1400 audit(1784525609.051:619): avc: denied { write } for pid=10805 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 487.669612][ T29] audit: type=1400 audit(1784525609.391:620): avc: denied { write } for pid=10837 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 487.917379][T10844] fuse: Bad value for 'group_id' [ 487.922518][T10844] fuse: Bad value for 'group_id' [ 488.530724][T10048] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 488.700187][T10048] usb 3-1: Using ep0 maxpacket: 8 [ 488.722395][T10048] usb 3-1: unable to get BOS descriptor or descriptor too short [ 488.754329][T10048] usb 3-1: config 4 interface 0 has no altsetting 0 [ 488.787015][T10048] usb 3-1: string descriptor 0 read error: -22 [ 488.801563][T10048] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 488.823588][T10048] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 488.863833][T10048] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 488.890873][ T7435] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 488.941757][T10048] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 488.977255][T10048] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 488.999389][T10048] usb 3-1: media controller created [ 489.049454][T10048] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 489.060729][ T7435] usb 4-1: Using ep0 maxpacket: 8 [ 489.068875][ T7435] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 489.087476][ T7435] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.149949][ T7435] pvrusb2: Hardware description: Terratec Grabster AV400 [ 489.289792][ T7435] pvrusb2: ********** [ 489.294245][ T7435] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 489.305390][ T7435] pvrusb2: Important functionality might not be entirely working. [ 489.313795][ T7435] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 489.333050][ T7435] pvrusb2: ********** [ 489.364977][ T2361] pvrusb2: Invalid write control endpoint [ 489.656087][T10048] zl10353_read_register: readreg error (reg=127, ret==0) [ 489.704778][T10846] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 489.740789][ T2361] pvrusb2: Invalid write control endpoint [ 489.774540][T10857] fuse: Bad value for 'fd' [ 489.783389][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 489.784544][ T29] audit: type=1400 audit(1784525611.511:621): avc: denied { name_bind } for pid=10860 comm="syz.0.1188" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 489.813937][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 489.830324][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 489.841696][ T2361] pvrusb2: Device being rendered inoperable [ 489.851890][ T2361] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 489.860332][ T2361] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 490.002397][ T2361] pvrusb2: Attached sub-driver cx25840 [ 490.020289][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 490.026714][ T7435] usb 4-1: USB disconnect, device number 35 [ 490.807580][T10048] usb 3-1: USB disconnect, device number 28 [ 490.817461][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 492.914120][T10882] netlink: 'syz.3.1193': attribute type 1 has an invalid length. [ 493.204594][T10878] syzkaller0: entered promiscuous mode [ 493.212273][T10878] syzkaller0: entered allmulticast mode [ 493.308154][T10883] macvtap0: entered allmulticast mode [ 493.537185][ T48] vlan2: left promiscuous mode [ 493.894495][T10891] syzkaller0: entered promiscuous mode [ 493.900080][T10891] syzkaller0: entered allmulticast mode [ 494.114100][T10048] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 494.389344][ T29] audit: type=1326 audit(1784525616.091:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10910 comm="syz.3.1201" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9ff199de99 code=0x0 [ 494.461887][T10048] usb 1-1: Using ep0 maxpacket: 32 [ 494.608512][T10912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10912 comm=syz.1.1202 [ 495.025409][ T29] audit: type=1400 audit(1784525616.751:623): avc: denied { read } for pid=10915 comm="syz.2.1203" dev="sockfs" ino=33208 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 495.322308][T10048] usb 1-1: unable to get BOS descriptor or descriptor too short [ 495.335015][T10048] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 495.344085][T10048] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 495.352437][T10048] usb 1-1: config 14 has no interface number 0 [ 495.363519][T10048] usb 1-1: config 14 has no interface number 1 [ 495.370142][T10048] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 495.380970][T10048] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 495.392721][T10048] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 495.404121][T10048] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 495.415541][T10048] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 495.426850][T10048] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 495.440794][T10048] usb 1-1: config 14 interface 57 has no altsetting 0 [ 495.454074][T10048] usb 1-1: config 14 interface 228 has no altsetting 0 [ 495.473204][T10048] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 495.483487][T10048] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.494378][T10048] usb 1-1: Product: syz [ 495.501584][T10048] usb 1-1: Manufacturer: syz [ 495.506398][T10048] usb 1-1: SerialNumber: syz [ 497.017664][T10896] faux_driver vgem: [drm] Unknown color mode 11173; guessing buffer size. [ 497.194698][T10932] Bluetooth: hci3: Frame reassembly failed (-84) [ 497.207507][ T12] Bluetooth: hci3: Frame reassembly failed (-84) [ 497.263962][T10932] netlink: 'syz.5.1206': attribute type 1 has an invalid length. [ 497.339897][T10934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=528 sclass=netlink_route_socket pid=10934 comm=syz.5.1206 [ 497.889244][T10936] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1207'. [ 497.993669][T10944] openvswitch: netlink: Missing key (keys=40, expected=100) [ 498.005150][T10932] 8021q: adding VLAN 0 to HW filter on device bond2 [ 498.340180][ T24] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 498.360064][T10048] legousbtower 1-1:14.57: interrupt endpoints not found [ 498.387512][T10941] bond2: (slave geneve2): making interface the new active one [ 498.426020][T10048] legousbtower 1-1:14.228: get version request failed: -71 [ 498.447798][T10048] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -71 [ 498.492509][ T24] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 498.502963][T10048] usb 1-1: USB disconnect, device number 33 [ 498.521844][ T24] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 498.541448][ T24] usb 4-1: config 150 has no interface number 0 [ 498.555405][T10941] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 498.556281][ T24] usb 4-1: config 150 interface 204 has no altsetting 0 [ 498.628714][ T24] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 498.638736][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.647449][ T24] usb 4-1: Product: syz [ 498.654914][ T24] usb 4-1: Manufacturer: syz [ 498.659545][ T24] usb 4-1: SerialNumber: syz [ 499.221485][ T9808] Bluetooth: hci3: command 0xfc11 tx timeout [ 499.221626][ T5611] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 499.282313][T10954] 9p: Could not find request transport: rdma. [ 499.368629][T10048] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 499.420106][ T29] audit: type=1400 audit(1784525621.141:624): avc: denied { ioctl } for pid=10943 comm="syz.3.1209" path="socket:[32282]" dev="sockfs" ino=32282 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 499.804666][T10963] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 500.020637][T10048] usb 1-1: Using ep0 maxpacket: 8 [ 500.123936][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 500.189242][ T24] xr_serial 4-1:150.204: skipping garbage [ 500.208172][ T24] xr_serial 4-1:150.204: xr_serial converter detected [ 500.241653][ T24] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 500.259612][ T24] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 500.280416][ T24] usb 4-1: USB disconnect, device number 36 [ 500.294871][ T24] xr_serial 4-1:150.204: device disconnected [ 500.345075][T10048] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 500.367812][T10048] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 500.390225][T10048] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 254 [ 500.411393][T10048] usb 1-1: New USB device found, idVendor=046d, idProduct=c08a, bcdDevice= 0.00 [ 500.441403][T10048] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.580198][T10048] usb 1-1: config 0 descriptor?? [ 500.605677][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 500.623542][T10977] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1216'. [ 500.632443][T10977] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1216'. [ 501.221772][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.228218][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.637196][ T29] audit: type=1400 audit(1784525623.361:625): avc: denied { ioctl } for pid=10989 comm="syz.3.1221" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 501.681570][ T29] audit: type=1400 audit(1784525623.401:626): avc: denied { accept } for pid=10989 comm="syz.3.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 501.775371][T10998] batman_adv: batadv0: Adding interface: dummy0 [ 501.783035][T10998] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.789028][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 501.809195][T10998] batman_adv: batadv0: Interface activated: dummy0 [ 501.829508][T10048] hid_parser_main: 7 callbacks suppressed [ 501.829521][T10048] logitech-hidpp-device 0003:046D:C08A.0006: unknown main item tag 0x0 [ 501.853187][T10048] logitech-hidpp-device 0003:046D:C08A.0006: unknown main item tag 0x0 [ 501.868587][T10048] logitech-hidpp-device 0003:046D:C08A.0006: unknown main item tag 0x0 [ 501.876904][T10048] logitech-hidpp-device 0003:046D:C08A.0006: unknown main item tag 0x0 [ 501.885233][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 501.894287][ T9] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 501.907213][T10048] logitech-hidpp-device 0003:046D:C08A.0006: unknown main item tag 0x0 [ 501.915482][T10048] logitech-hidpp-device 0003:046D:C08A.0006: unknown main item tag 0x0 [ 501.934391][ T9] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 501.944555][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.954035][T10048] logitech-hidpp-device 0003:046D:C08A.0006: unknown main item tag 0x0 [ 501.962768][ T9] usb 3-1: Product: syz [ 501.967880][T10048] logitech-hidpp-device 0003:046D:C08A.0006: unknown main item tag 0x0 [ 501.978018][ T9] usb 3-1: Manufacturer: syz [ 501.993915][ T9] usb 3-1: SerialNumber: syz [ 502.006222][T10048] logitech-hidpp-device 0003:046D:C08A.0006: unknown main item tag 0x0 [ 502.027855][T10048] logitech-hidpp-device 0003:046D:C08A.0006: unknown main item tag 0x0 [ 502.047064][T10048] logitech-hidpp-device 0003:046D:C08A.0006: hidraw0: USB HID v0.05 Device [HID 046d:c08a] on usb-dummy_hcd.0-1/input0 [ 502.204353][T10048] usb 1-1: USB disconnect, device number 34 [ 504.675761][T11012] fido_id[11012]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 505.407332][ T29] audit: type=1400 audit(1784525627.131:627): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 505.479383][T11019] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1226'. [ 505.747109][T11031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53776 sclass=netlink_route_socket pid=11031 comm=syz.3.1226 [ 505.875332][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 505.928384][ T9] usb 3-1: USB disconnect, device number 29 [ 505.965876][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 506.041802][T11040] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 506.075052][T11041] netlink: 'syz.3.1226': attribute type 28 has an invalid length. [ 506.091811][T11040] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 506.111921][T11041] netlink: 'syz.3.1226': attribute type 29 has an invalid length. [ 506.159106][T11041] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1226'. [ 506.394527][T11045] md: md2 stopped. [ 506.403508][T11045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1234'. [ 506.590155][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 506.758058][T11043] fuse: Unknown parameter '2հVVЋ' [ 506.999370][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 507.715016][ T9] usb 4-1: config 0 has no interface number 0 [ 509.509427][T11061] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 509.841768][T11058] syzkaller0: entered promiscuous mode [ 509.856576][T11058] syzkaller0: entered allmulticast mode [ 514.497760][T11080] 9p: Could not find request transport: rdma. [ 514.870387][T11101] netlink: 'syz.5.1245': attribute type 27 has an invalid length. [ 514.923930][ T9] usb 4-1: string descriptor 0 read error: -71 [ 514.930575][ T9] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 514.939985][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.950656][ T9] usb 4-1: config 0 descriptor?? [ 514.956306][ T9] usb 4-1: can't set config #0, error -71 [ 514.963559][ T9] usb 4-1: USB disconnect, device number 37 [ 514.976087][T11101] netlink: 'syz.5.1245': attribute type 3 has an invalid length. [ 515.116304][T11104] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1247'. [ 515.430704][T10946] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 515.623081][ T24] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 515.903640][T10946] usb 3-1: config 0 has an invalid interface number: 185 but max is 0 [ 515.912912][T10946] usb 3-1: config 0 has no interface number 0 [ 515.919634][T10946] usb 3-1: config 0 interface 185 altsetting 173 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 515.933148][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 515.938727][T10946] usb 3-1: config 0 interface 185 has no altsetting 0 [ 515.949746][T10946] usb 3-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 516.181582][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 516.198926][T10946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.207970][T10946] usb 3-1: Product: syz [ 516.234789][ T24] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 516.248571][T10946] usb 3-1: Manufacturer: syz [ 516.256153][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.266000][T10946] usb 3-1: SerialNumber: syz [ 516.276881][T10946] usb 3-1: config 0 descriptor?? [ 516.282075][ T24] usb 1-1: Product: syz [ 516.296409][ T24] usb 1-1: Manufacturer: syz [ 516.304614][ T24] usb 1-1: SerialNumber: syz [ 516.334990][ T24] usb 1-1: 1:1 : unsupported sample bitwidth 3 in 8 bytes [ 516.347268][ T24] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 516.591869][T11127] fuse: Unknown parameter '184467440737095516152հVVЋ' [ 516.615367][T11108] SELinux: policydb version 0 does not match my version range 15-35 [ 516.685164][T10946] peak_usb 3-1:0.185: probe with driver peak_usb failed with error 185 [ 516.761532][T10946] usb 3-1: USB disconnect, device number 30 [ 516.779686][T11108] SELinux: failed to load policy [ 517.211195][ T24] usb 1-1: unit 3 not found! [ 517.290082][ T24] usb 1-1: USB disconnect, device number 35 [ 517.374936][T11136] overlayfs: failed to resolve './file2': -2 [ 517.404762][ T5632] udevd[5632]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 517.550613][T11137] netlink: 'syz.1.1257': attribute type 49 has an invalid length. [ 517.862515][ T29] audit: type=1400 audit(1784525639.095:628): avc: denied { name_bind } for pid=11140 comm="syz.2.1260" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 517.924426][ T29] audit: type=1400 audit(1784525639.123:629): avc: denied { execute } for pid=11140 comm="syz.2.1260" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=33785 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 518.105975][T11144] syzkaller0: entered promiscuous mode [ 518.112182][T11144] syzkaller0: entered allmulticast mode [ 518.263836][T11143] xt_hashlimit: size too large, truncated to 1048576 [ 519.356408][T11155] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1262'. [ 519.865267][T11166] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 520.137084][T11167] random: crng reseeded on system resumption [ 520.187409][ T29] audit: type=1400 audit(1784525641.228:630): avc: denied { write } for pid=11159 comm="syz.1.1265" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 520.839944][T11177] xfrm0 speed is unknown, defaulting to 1000 [ 520.960781][T11184] fuse: Unknown parameter '184467440737095516152հVVЋ' [ 521.144864][T11182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 521.193995][T11192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.229274][T11192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.437906][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 521.905827][ T9] usb 1-1: device descriptor read/64, error -71 [ 521.951887][T11202] netlink: 'syz.5.1276': attribute type 12 has an invalid length. [ 522.177084][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 522.802269][T11222] IPVS: set_ctl: invalid protocol: 10744 172.20.20.170:20002 [ 523.620151][ T29] audit: type=1400 audit(1784525644.484:631): avc: denied { map } for pid=11227 comm="syz.2.1283" path="socket:[33960]" dev="sockfs" ino=33960 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 524.445370][T11212] mmap: syz.1.1278 (11212): VmData 25837568 exceed data ulimit 7. Update limits or use boot option ignore_rlimit_data. [ 524.521299][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1286'. [ 524.603622][T11238] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 524.668141][T11238] block device autoloading is deprecated and will be removed. [ 524.693082][ T29] audit: type=1400 audit(1784525645.485:632): avc: denied { create } for pid=11239 comm="syz.3.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 524.810162][ T29] audit: type=1400 audit(1784525645.485:633): avc: denied { ioctl } for pid=11239 comm="syz.3.1287" path="socket:[34016]" dev="sockfs" ino=34016 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 524.940089][T11256] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1291'. [ 525.040459][T11260] fuse: Unknown parameter '184467440737095516152հVVЋ' [ 525.286448][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 525.520386][ T29] audit: type=1400 audit(1784525646.252:634): avc: denied { nlmsg_read } for pid=11252 comm="syz.2.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 525.681473][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 525.692406][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 525.721675][ T9] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 525.732512][ T9] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 525.759764][ T9] usb 4-1: Product: syz [ 525.771244][ T9] usb 4-1: Manufacturer: syz [ 525.806557][ T9] usb 4-1: SerialNumber: syz [ 525.873113][ T9] usb 4-1: config 0 descriptor?? [ 525.929332][T11249] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 526.315644][T11277] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 526.471765][T11282] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 526.608271][T11283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.967258][T10946] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 528.626356][ T29] audit: type=1400 audit(1784525649.058:635): avc: denied { search } for pid=11287 comm="syz.5.1300" name="/" dev="configfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 528.742695][ T24] usb 4-1: USB disconnect, device number 38 [ 528.811548][ T29] audit: type=1400 audit(1784525649.152:636): avc: denied { search } for pid=11287 comm="syz.5.1300" name="/" dev="configfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 528.811592][ T29] audit: type=1400 audit(1784525649.152:637): avc: denied { read } for pid=11287 comm="syz.5.1300" name="/" dev="configfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 528.811628][ T29] audit: type=1400 audit(1784525649.152:638): avc: denied { read open } for pid=11287 comm="syz.5.1300" path="/" dev="configfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 528.862327][T11292] md: md2 stopped. [ 528.916429][T10946] usb 2-1: not running at top speed; connect to a high speed hub [ 528.936777][T10946] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 528.976784][T10946] usb 2-1: config 1 interface 0 has no altsetting 0 [ 528.983936][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1301'. [ 529.015802][T10946] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.40 [ 529.054229][T10946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.080209][T10946] usb 2-1: Product: syz [ 529.095681][T10946] usb 2-1: Manufacturer: syz [ 529.105706][T11304] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1305'. [ 529.119264][T10946] usb 2-1: SerialNumber: syz [ 529.138486][T11304] pim6reg9: entered allmulticast mode [ 529.154621][T11286] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 529.436245][ T29] audit: type=1400 audit(1784525649.919:639): avc: denied { create } for pid=11302 comm="syz.3.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 529.867830][T10946] usbhid 2-1:1.0: can't add hid device: -71 [ 529.895320][T10946] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 529.932688][T10946] usb 2-1: USB disconnect, device number 37 [ 530.960326][ T29] audit: type=1400 audit(1784525651.322:640): avc: denied { getopt } for pid=11320 comm="syz.3.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 531.256204][T11321] xfrm0 speed is unknown, defaulting to 1000 [ 531.339744][ T29] audit: type=1400 audit(1784525651.687:641): avc: denied { watch_reads } for pid=11328 comm="syz.5.1303" path="/67" dev="tmpfs" ino=373 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 531.624923][T10946] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 531.806885][ T24] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 531.814692][T10946] usb 1-1: Using ep0 maxpacket: 16 [ 531.829556][T10946] usb 1-1: unable to get BOS descriptor or descriptor too short [ 531.844651][T10946] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 531.862970][T10946] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 531.879565][T10946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.896755][T10946] usb 1-1: Product: syz [ 531.901020][T10946] usb 1-1: Manufacturer: syz [ 531.908739][T10946] usb 1-1: SerialNumber: syz [ 531.998770][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 532.010554][ T24] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 532.020326][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.028964][ T24] usb 3-1: Product: syz [ 532.036133][ T24] usb 3-1: Manufacturer: syz [ 532.041326][ T24] usb 3-1: SerialNumber: syz [ 532.058062][ T24] usb 3-1: config 0 descriptor?? [ 532.071130][T11341] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[9807] was attempted by "ss(pE{بD8HEV[\x0cE0p2\x09'؛69\x076\x0c)\x0a!'Vv>y1lV35ФiAVDoU9)KbVDc\x07ojc9xNRH9p\x22L+Xp>iN0zR>:MLoHIG\x07B9r(dKf^7_N䀟\x5c-D}i;Zzd8:\x072hnk*d-l1N5Ky\x22b%l5.dsUkc$ 8b 34 24 65 48 8b 15 61 b3 59 12 a9 00 01 ff 00 74 1b f6 c4 01 [ 654.254323][ C0] RSP: 0018:ffffc90000007e48 EFLAGS: 00000046 [ 654.254336][ C0] RAX: 0000000080010002 RBX: ffff88807c484300 RCX: 0000000000000003 [ 654.254345][ C0] RDX: ffff88802c88a540 RSI: ffffffff81f573ae RDI: ffff8880b8428444 [ 654.254354][ C0] RBP: ffff8880b8428640 R08: 0000000000000005 R09: 000000000000001f [ 654.254363][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 654.254370][ C0] R13: ffff8880b8428400 R14: 0000000000000000 R15: 00000000fffffff7 [ 654.254379][ C0] FS: 00007effd1b3b6c0(0000) GS:ffff888123de7000(0000) knlGS:0000000000000000 [ 654.254393][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 654.254402][ C0] CR2: 0000562ad5f6d168 CR3: 0000000056036000 CR4: 00000000003526f0 [ 654.254411][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 654.254419][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 654.254428][ C0] Call Trace: [ 654.254434][ C0] [ 654.254438][ C0] __remove_hrtimer+0x1cc/0x440 [ 654.254460][ C0] __hrtimer_run_queues+0x352/0x9c0 [ 654.254482][ C0] hrtimer_interrupt+0x3e5/0x940 [ 654.254505][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 654.254525][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 654.254547][ C0] [ 654.254552][ C0] [ 654.254556][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 654.254571][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 654.254591][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 a0 28 f6 48 89 df e8 de ef 28 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 a5 ff 17 f6 65 8b 05 ee b8 a6 08 85 c0 74 16 5b [ 654.254603][ C0] RSP: 0018:ffffc90005bf7b28 EFLAGS: 00000246 [ 654.254613][ C0] RAX: 0000000000000006 RBX: ffffffff9b7343d8 RCX: 0000000000000000 [ 654.254622][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a4788 RDI: ffffffff8c401280 [ 654.254631][ C0] RBP: 0000000000000286 R08: 0000000000000001 R09: 0000000000000000 [ 654.254639][ C0] R10: 0000000000000001 R11: ffffffffffffffff R12: ffffffff9b734140 [ 654.254647][ C0] R13: 0000000000000001 R14: ffffc90005bf7c80 R15: ffffffff9b73431c [ 654.254661][ C0] __do_adjtimex+0x892/0xe70 [ 654.254679][ C0] ? __pfx___do_adjtimex+0x10/0x10 [ 654.254695][ C0] ? __lock_acquire+0x49f/0x1a40 [ 654.254712][ C0] do_adjtimex+0xa0/0x370 [ 654.254728][ C0] ? __pfx_do_adjtimex+0x10/0x10 [ 654.254749][ C0] ? __pfx_posix_clock_realtime_adj+0x10/0x10 [ 654.254766][ C0] __do_sys_clock_adjtime+0x177/0x290 [ 654.254784][ C0] ? __pfx___do_sys_clock_adjtime+0x10/0x10 [ 654.254802][ C0] ? __pfx_do_futex+0x10/0x10 [ 654.254828][ C0] do_syscall_64+0x115/0x870 [ 654.254840][ C0] ? clear_bhb_loop+0x40/0x90 [ 654.254855][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.254868][ C0] RIP: 0033:0x7effd0b9de99 [ 654.254880][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.254892][ C0] RSP: 002b:00007effd1b3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 654.254904][ C0] RAX: ffffffffffffffda RBX: 00007effd0e25fa0 RCX: 00007effd0b9de99 [ 654.254913][ C0] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000000 [ 654.254921][ C0] RBP: 00007effd0c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 654.254930][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.254938][ C0] R13: 00007effd0e26038 R14: 00007effd0e25fa0 R15: 00007ffedb19ee28 [ 654.254951][ C0] [ 654.255234][ C1] rcu: rcu_preempt kthread starved for 10196 jiffies! g56293 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 654.663656][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 654.673612][ C1] rcu: RCU grace-period kthread stack dump: [ 654.679484][ C1] task:rcu_preempt state:R running task stack:28936 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 654.692971][ C1] Call Trace: [ 654.696238][ C1] [ 654.699174][ C1] __schedule+0x125c/0x6730 [ 654.703696][ C1] ? __pfx___schedule+0x10/0x10 [ 654.708540][ C1] ? find_held_lock+0x2b/0x80 [ 654.713213][ C1] ? schedule+0x225/0x2c0 [ 654.717542][ C1] schedule+0xdd/0x2c0 [ 654.721609][ C1] schedule_timeout+0x127/0x280 [ 654.726455][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 654.731822][ C1] ? __pfx_process_timeout+0x10/0x10 [ 654.737108][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 654.742915][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 654.748371][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 654.753133][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 654.758411][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 654.763346][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 654.768556][ C1] ? rcu_is_watching+0x12/0xc0 [ 654.773315][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 654.779121][ C1] rcu_gp_kthread+0x179/0x230 [ 654.783786][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 654.788975][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 654.794780][ C1] ? __kthread_parkme+0x18c/0x230 [ 654.799803][ C1] ? kthread+0x13a/0x450 [ 654.804044][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 654.809232][ C1] kthread+0x370/0x450 [ 654.813298][ C1] ? __pfx_kthread+0x10/0x10 [ 654.817885][ C1] ret_from_fork+0x72b/0xd50 [ 654.822471][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 654.827598][ C1] ? __switch_to+0x800/0x10f0 [ 654.832264][ C1] ? __pfx_kthread+0x10/0x10 [ 654.836852][ C1] ret_from_fork_asm+0x1a/0x30 [ 654.841623][ C1] [ 654.844630][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 654.850944][ C1] CPU: 1 UID: 0 PID: 5628 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 654.861345][ C1] Tainted: [L]=SOFTLOCKUP [ 654.865656][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 654.875702][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x17/0x70 [ 654.881845][ C1] Code: 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 8b 05 85 b3 59 12 48 8b 34 24 65 48 8b 15 61 b3 59 12 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 e9 91 44 [ 654.901443][ C1] RSP: 0000:ffffc90002f7f880 EFLAGS: 00000202 [ 654.907501][ C1] RAX: 0000000000000003 RBX: 0000000000000000 RCX: ffffffff81fd46fd [ 654.915459][ C1] RDX: ffff88807d688000 RSI: ffffffff81fd46d7 RDI: ffff88807d688000 [ 654.923422][ C1] RBP: ffff8880b8443680 R08: 0000000000000005 R09: 0000000000000000 [ 654.931396][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 654.939354][ C1] R13: ffffed10170886d1 R14: 0000000000000001 R15: ffff8880b853c880 [ 654.947314][ C1] FS: 00007f61e553d880(0000) GS:ffff888123ee7000(0000) knlGS:0000000000000000 [ 654.956235][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 654.962808][ C1] CR2: 0000561d5a3f5fe8 CR3: 0000000035d20000 CR4: 00000000003526f0 [ 654.970771][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 654.978740][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 654.986708][ C1] Call Trace: [ 654.989990][ C1] [ 654.992927][ C1] smp_call_function_many_cond+0x587/0x16c0 [ 654.998829][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 655.004226][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 655.009428][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 655.015751][ C1] ? lock_acquire+0x1b9/0x370 [ 655.020424][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 655.025628][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 655.030992][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 655.036098][ C1] flush_tlb_mm_range+0x45f/0x16f0 [ 655.041202][ C1] ? page_table_check_clear+0x480/0x8f0 [ 655.046755][ C1] ? __page_table_check_pte_clear+0xa9/0x100 [ 655.052727][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 655.058268][ C1] ? __pfx_pte_mkwrite+0x10/0x10 [ 655.063200][ C1] ptep_clear_flush+0x148/0x170 [ 655.068044][ C1] do_wp_page+0x12a4/0x4350 [ 655.072549][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 655.077400][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 655.082774][ C1] __handle_mm_fault+0x1ab6/0x2a00 [ 655.087890][ C1] ? reacquire_held_locks+0xce/0x1e0 [ 655.093168][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 655.098626][ C1] ? lock_vma_under_rcu+0x17c/0x590 [ 655.103840][ C1] handle_mm_fault+0x37b/0xa30 [ 655.108606][ C1] do_user_addr_fault+0x5a3/0x12f0 [ 655.113719][ C1] exc_page_fault+0x6f/0xd0 [ 655.118221][ C1] asm_exc_page_fault+0x26/0x30 [ 655.123058][ C1] RIP: 0033:0x7f61e4eb5db7 [ 655.127460][ C1] Code: 00 00 00 41 55 48 89 d0 49 89 fd 41 54 49 89 f4 53 4c 89 c3 48 83 ec 10 48 39 4f 60 0f 84 c1 00 00 00 42 f6 44 01 08 01 74 59 <48> 83 61 08 fe 48 3d ff 03 00 00 76 69 49 8b 55 70 49 8d 75 60 48 [ 655.147070][ C1] RSP: 002b:00007ffee70dc1b0 EFLAGS: 00010202 [ 655.153129][ C1] RAX: 0000000000006010 RBX: 00000000000001f0 RCX: 0000561d5a3f5fe0 [ 655.161085][ C1] RDX: 0000000000006010 RSI: 0000561d5a3effd0 RDI: 00007f61e4ff1ac0 [ 655.169049][ C1] RBP: 00007f61e4ff1ac0 R08: 00000000000001f0 R09: 0000000000000000 [ 655.177008][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000561d5a3effd0 [ 655.184967][ C1] R13: 00007f61e4ff1ac0 R14: 00000000000001f0 R15: 00007f61e4ff1ac0 [ 655.192937][ C1]