last executing test programs: 2m10.941875888s ago: executing program 4 (id=2264): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x1e9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) sysinfo(0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) io_uring_enter(0xffffffffffffffff, 0x100847c0, 0x0, 0x1, 0x0, 0x0) setsockopt$ax25_int(r2, 0x101, 0x5, &(0x7f0000000b80)=0x40005, 0x4) r3 = syz_io_uring_setup(0x1dab, &(0x7f0000000000)={0x0, 0xf8fa, 0xe18, 0x3, 0x21e}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r3, 0x19, &(0x7f0000000100)={0x2c, 0x7, 0x1}, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000001010000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) 2m10.264530673s ago: executing program 4 (id=2266): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = syz_usb_connect(0x2, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) sched_setaffinity(0x0, 0xffffffffffffff55, &(0x7f00000002c0)=0x3fe) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x800, 0xfffffffc, 0x87}) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) sysinfo(&(0x7f0000000000)=""/196) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r4, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x14, "3eccd8fd0000000000000010000000040100"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)="97"}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_int(r5, 0x1, 0x4, 0x0, &(0x7f0000000080)) 2m8.277302601s ago: executing program 3 (id=2271): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) getpid() openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/comedi4\x00', 0x600, 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000040)={0x1, 0x3, 0x10}) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2040600) r2 = add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000002240)="d790b0c9", 0x4, 0xfffffffffffffffe) syz_emit_ethernet(0x76, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x26) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x0, 0x0, 0xfffffffffffffffe) socket$inet(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22528, 0x800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x9}]}}}, @IFLA_LINK={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0xafb8a1a4416d9a34}, 0x0) 2m7.380871348s ago: executing program 3 (id=2273): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x100000000001, r0, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000020000100fc000000000000000000000000000000120000008c0014408000000000000201"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0xc0) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r5 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000040)="f86ceb6bab6ec237dd9300050031a547455706d6af735426b42d81ddac91f2eb27ef9b17b3", 0x2, r4) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r1, 0x0) keyctl$set_timeout(0xf, r5, 0x7fffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) prlimit64(r6, 0xa, &(0x7f0000000280)={0x0, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) r8 = getegid() setresgid(r8, r8, r8) tkill(r0, 0xc) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) setsockopt$sock_linger(r9, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) userfaultfd(0x80400) r10 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r11 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r11, 0x4008af25, &(0x7f00000001c0)={0x0, 0x9}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r10, 0x4020565a, &(0x7f00000000c0)={0x4, 0x7, 0x4}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000380)={0x1, 0x7, 0x1, 0x4800}) 2m6.223298357s ago: executing program 3 (id=2276): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f00009bf000/0x3000)=nil, 0x3000, 0xf, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000e39000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x100) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x6dda87c55e1b1fc, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000180)={0xc}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x4a8, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0xfff2, 0x12}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x47c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0x40, 0x8d, 0x80, 0xb7eb}, {0x9, 0x83, 0x8a, 0x8}, {0x6aa, 0x42, 0x1, 0x8}, {0x7, 0x6, 0xe, 0x3}, {0x4, 0xe, 0x3, 0x3}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x343, 0xe9fb, 0x1000005, 0x5b91, 0x4, 0x1, 0x800, 0x5, 0x3, 0x3, 0x8000, 0x4, 0x6, 0x3, 0x0, 0x1ff, 0x77, 0x43, 0x4, 0x2, 0x5d, 0x8, 0x8001, 0x4, 0x3, 0x0, 0xfffff989, 0x8, 0x6, 0x71dbd584, 0x2, 0x7, 0xd8, 0x9, 0x4, 0x3, 0xfffffffe, 0x5, 0x9a, 0x1, 0x3, 0x80000001, 0x1, 0x2, 0xfffffffb, 0x7fffffff, 0x2, 0x8, 0x8, 0x10, 0x10, 0x1, 0x2, 0x4, 0x8, 0x7fff, 0x5, 0x0, 0x0, 0x6, 0x9, 0x2, 0x0, 0x3, 0x7, 0x91400, 0x8b9d, 0xff, 0x80, 0xfffffffa, 0xb, 0x8000, 0xb26f, 0x6, 0x4c, 0xff, 0x7d, 0x36, 0x81, 0x80000100, 0xfc9, 0x6, 0xfffffff0, 0x9, 0x5, 0x9, 0x80008010, 0xe, 0x2, 0x80000000, 0xff, 0x3, 0x7, 0x1, 0xa6dd, 0x7, 0xfffffff9, 0x8, 0x82, 0xff, 0x9, 0x3, 0xbdb, 0x1ff, 0x1, 0xc, 0x40, 0xffff8001, 0xffff, 0x8, 0x7fff, 0x402, 0x2, 0x2, 0x7, 0x2, 0xbce, 0x8, 0xd, 0x80, 0x4, 0xacda, 0x4, 0x3542, 0x7, 0xf79, 0x7, 0x3, 0x6, 0x0, 0x7, 0x6, 0x5, 0x100, 0x1, 0x2, 0x80000001, 0x200, 0x1, 0x9, 0x4, 0x0, 0xe200000, 0x6, 0x80000001, 0xaf6, 0x3, 0x10001, 0xe47b, 0x8, 0x3, 0x4, 0x4, 0x5, 0x0, 0x985, 0x5, 0xd, 0xf4d, 0x7, 0x8001, 0x1c4fd68f, 0x1, 0x5, 0x7fff, 0x0, 0xc2, 0x0, 0x5, 0x81, 0x3, 0x1c37, 0x3, 0xab, 0x2, 0x3, 0xb171, 0x8, 0xf, 0x2cb6, 0x6, 0x2, 0x2, 0x70, 0x80, 0x2, 0xfd, 0x5, 0xb417, 0x2, 0x400, 0x6d, 0xb, 0x401, 0x4, 0x2223, 0x2, 0x200, 0x1, 0x4, 0x1, 0x1, 0xab0, 0xd, 0x80, 0x3ff, 0xcdf6, 0x7, 0x7, 0x7, 0xfffffffa, 0xc54, 0xfffffd18, 0x9, 0x7, 0x7, 0x2, 0x3, 0x9, 0x6, 0x7fff, 0x4, 0xffff, 0x1, 0x381, 0x400, 0x4, 0x274, 0x8001, 0x5, 0x4, 0x5, 0x8, 0x1, 0x8000, 0x2, 0xc9a6, 0xfff, 0x0, 0x4, 0x9, 0x4a78, 0xdf5, 0x5, 0xfffffffe, 0x5, 0x7ff, 0x6, 0xdb, 0x4d, 0x19, 0x7ff, 0x2, 0x5, 0xff6d, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x1000, 0x4, 0x3, {0xb, 0x2, 0x200, 0x4684, 0x80, 0xfffffffe}, {0x0, 0x2, 0x4, 0x1ff, 0x7b}, 0xfb, 0x3, 0x5}}]}]}}]}, 0x4a8}, 0x1, 0x0, 0x0, 0x1}, 0x800) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) sendfile(r8, r8, &(0x7f0000000000)=0x7fffffffffffffff, 0x200) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c000000060a0904000000000000000002000000200004801c0001800a00010072616e67650000000c00028008000140000000080900010073797a30000000000900020073797a32000000bd1400000011000100f2000000000000000000000a"], 0x74}}, 0x0) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x3ff, {0x1, 0x5, 0x0, '\x00', {0x1, 0xad4, 0x8, 0x8, r11, r12, 0xc000, '\x00', 0x5, 0x8, 0x100000000, 0x6, {0x6, 0x6}, {0x20000000000004}, {0x100000000, 0x2}, {0x8, 0xa04}, 0x4, 0x80000b, 0x5, 0x3}}}}) write$FUSE_INIT(r2, &(0x7f0000001200)={0x50, 0x0, r10, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x3}}, 0x50) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xffffffff, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e123, 0xf, 0x4, 0x4000, 0x3}, 0x26, 0x200, 0x8, 0x0, 0x0, 0x6, 0x0}) syz_usb_connect(0x6, 0x38, &(0x7f0000000300)=ANY=[@ANYRES16], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0xfffffd40, &(0x7f0000000000)=@string={0xcd, 0x3, "0e231836d8bfa015faa570736912429953d4c735b3604c7b277f445bdf0282004c6228cbe2fdbfac1b976aa88822fc051cca950c8e52bc444e12dfa23eea0735f907947d1c4cd4dfae5ca502f3d5e17cb3f9d8406f138f9b9106def31d8919dd235e8db6d116cce56df2282a3414d0ee5f087188ae38c9ffebbea97cc4855e1e0e6b385edc26cbe0a621fa77a3e719212217966e3127fede924ce1ed5a7a3e7abf68b9ee3c3546ac1900506f810e064c978a626522c269d079141158613d27beaa1570c66cd49028727234"}}, {0x2, &(0x7f0000000100)=@string={0x1e, 0x3, "7b82ba0f254861bcff27e9499505ee61645194744c247b84c6da8f0a"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x446}}]}) 2m5.220500477s ago: executing program 4 (id=2280): r0 = getpgrp(0xffffffffffffffff) socket$inet6(0xa, 0x8000a, 0x7) socket$kcm(0x29, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) memfd_secret(0x80000) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x28400, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x5df801, 0xe0) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x106c80) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1494c0, 0x189) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(r1, &(0x7f0000000280)="4cf0e2cf67a3e3951a6d09af50ec9c767bf98cffdc263f6a977cdb0d242a431cad5ae5ac46429ce80df6061e022e2d65a0ea76de150bf601d6f9b97c36049bcbfa5bc37dabb67ace85100050b16f", 0x4e, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) timer_create(0x3, &(0x7f0000000200)={0x0, 0x3a, 0x1, @tid=r0}, &(0x7f0000000240)) r5 = syz_clone(0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000100), 0x0, 0x0) setpriority(0x1, r5, 0x9941) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000040)=r5, 0x12) 2m5.161911092s ago: executing program 1 (id=2282): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000740)=""/4096, &(0x7f0000000000)=0x1000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) listen(r0, 0x7) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000400)=0x6, 0x4) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000040)=@in6={0xa, 0x4e27, 0x6e3, @empty, 0x7f}, 0x1c, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x804c040}, 0x0) 2m4.84850342s ago: executing program 2 (id=2284): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000900)) syz_usb_connect(0x2, 0x227, &(0x7f0000000580)=ANY=[@ANYBLOB="1201100399a85a20c40709a1fe940102030109020b02010400b0050904510306604c3cf809050810ff0302bb4109050a0008000081078f093e8e5d64b056c87520399b437a18ea1eb4223a05808a6910868dbfebbd08837e7e98345afc4c55b3ff5169fdb8b84399fc67b8b1b961ce5a0500e7d6a3092c6f472b321b4920da87d7e1a2ed52e5e25e7e3a84db3231dcca502392b44e13d28b5a0372ca76c65561f6cea0fce1f0aeb041955ef8d9532953c486c86d6606b172167f568437df9ed53c360e9f3c0725010105080009050f10ff03442605e60413a169335f901a9fbe86b80c2151bca26fecfcb97e69819de7a34e6e732590396bbbc9d0c0433c7a32fb3d84cb3ebdc4c6017dc4cd34de30d030dcb36d7bd910bac00fd437e3935630e1e1ac081692f7203c0763cb5a412b527d90bdaa4f80b02f18e7e12a19ef92cf88701ed059a5265459a9a72c8d6f7772fe217bf1d1b8b493539d42bac0eacf7d808934f80398d71b18626b43c08ea01eeaae29aa19d64d72ce0ab992c488c9089bf4dde64701ec419bdeb3e772e000c4a36fc7450ab99729accca4f0c59b87de85ff680e8186ec0412db959223e6bcb08bdafe4bf07605275ee28db86e2b38400ed986b764ae803e6adf0e5e6e950083aec1aee01cbabc42be3457d2a01718b76fddd5e528f74170b72e17f7fc51505d6021615e58e39c7b4da4b7286cac62090509004000834807090508044000c208f709050c101000008009072501"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsm_get_self_attr(0x8032a77360865b2f, 0x0, 0xfffffffffffffffc, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) epoll_create(0x4968) close(0x3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = gettid() tkill(r3, 0xb) 2m4.848111313s ago: executing program 1 (id=2285): ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SET_PTRACER(0x59616d61, r0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r0, 0xa, &(0x7f0000000000)={0x10000, 0x8}, &(0x7f0000000040)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r5, 0x0, 0x2c, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) read$midi(r4, 0x0, 0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000003000/0x2000)=nil, 0x3) close_range(r3, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000c00), 0x0, 0x20000084) 2m4.84036203s ago: executing program 4 (id=2286): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0xa800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x008~?n\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r5 = open(0x0, 0x400, 0x43) mknodat$loop(r5, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), 0x0) sendto$inet6(r6, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000080)=[{}], 0x1) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0\x00') 2m3.87068451s ago: executing program 4 (id=2287): r0 = syz_io_uring_setup(0x129, &(0x7f0000000340)={0x0, 0x256b, 0x0, 0x1, 0x8c}, &(0x7f00000003c0)=0x0, &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r3 = socket(0x2b, 0x80801, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0xc3072, 0xffffffffffffffff, 0x3000000) write$UHID_INPUT(r4, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r4, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000200)=0x3, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r0, 0x3518, 0xaddf, 0x4e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x122}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) setrlimit(0x7, &(0x7f00000000c0)={0x4, 0x6}) close(0x3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x0, 0x7ffffcb9}]}) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 2m3.09203448s ago: executing program 1 (id=2288): ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x95) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x840, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x80, 0x45}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) r4 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20180) sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@ipmr_getroute={0x1c, 0x1a, 0x300, 0x70bd2a, 0x25dfdbff, {0x80, 0x0, 0x10, 0xf6, 0xfc, 0x3, 0x0, 0x7}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x82}, 0x11) lsetxattr$security_evm(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)=@sha1={0x1, "c972d260b39bb2a9dd5a8a601ffe17e2f9606233"}, 0x15, 0x2) write$UHID_CREATE(r1, &(0x7f0000001480)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000480)=""/4096, 0x1000, 0x57b9, 0x0, 0x5, 0x5, 0x3}}, 0x120) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000015c0)=0x5) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), r1) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x3c, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x8}, @device_b, @device_b}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40101) r6 = openat$cgroup_ro(r1, &(0x7f0000001740)='cpuacct.usage_sys\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001800)={{r4, 0xffffffffffffffff}, &(0x7f0000001780), &(0x7f00000017c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000018c0)={{r1, 0xffffffffffffffff}, &(0x7f0000001840), &(0x7f0000001880)=r1}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001bc0)={'erspan0\x00', &(0x7f0000001ac0)={'sit0\x00', 0x0, 0x30, 0x700, 0x1, 0x2, {{0x2c, 0x4, 0x0, 0x5, 0xb0, 0x66, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x34, 0x82, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x31}}, {@local, 0x3}, {@multicast1, 0x101}, {@private=0xa010101, 0x6}, {@remote, 0x2}, {@multicast1, 0x9}]}, @timestamp_prespec={0x44, 0x1c, 0x95, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0xf}, 0x400}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfff}, {@rand_addr=0x64010100}]}, @timestamp_prespec={0x44, 0x44, 0x8a, 0x3, 0x8, [{@multicast2, 0x419}, {@private=0xa010100, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@broadcast, 0x8000}, {@loopback}, {@multicast2, 0x7}, {@local, 0x70}, {@rand_addr=0x64010100, 0x3}]}]}}}}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001e40)={r1, 0x20, &(0x7f0000001e00)={&(0x7f0000001c80)=""/122, 0x7a, 0x0, &(0x7f0000001d00)=""/245, 0xf5}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x5, 0x20, &(0x7f0000001900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x5}, @generic={0xa, 0x9, 0x5, 0x6, 0x5}, @ldst={0x3, 0x1, 0x1, 0x3, 0x9, 0xfffffffffffffffe, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @cb_func={0x18, 0x7a37b7c3010cc0fe, 0x4, 0x0, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001a00)='GPL\x00', 0x8, 0x5f, &(0x7f0000001a40)=""/95, 0x1f00, 0x4, '\x00', r9, @fallback=0x2e, r1, 0x8, &(0x7f0000001c00)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001c40)={0x5, 0x5, 0x5, 0xa}, 0x10, r10, r1, 0x8, &(0x7f0000001e80)=[r1], &(0x7f0000001ec0)=[{0x4, 0x3, 0xa, 0x5}, {0x2, 0x5, 0xf, 0xa}, {0x1, 0x2, 0x2, 0xa}, {0x5, 0x5, 0x1, 0x3}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x1, 0xb, 0x3}, {0x5, 0x2, 0xd, 0x9}, {0x1, 0x4, 0x5}], 0x10, 0x7f}, 0x94) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x4, 0x23, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x8, 0x7, 0xc, 0x8}, @generic={0x1, 0x4, 0x7, 0x84, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @generic={0x5, 0x9, 0x9, 0x7, 0x2}, @map_val={0x18, 0x6, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002140)='GPL\x00', 0x0, 0xe2, &(0x7f0000002180)=""/226, 0x41000, 0x40, '\x00', r9, @fallback=0x5, r6, 0x8, &(0x7f0000002280)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, r10, r6, 0x8, &(0x7f00000022c0)=[r8, r6, r8, r6, r1, r7], &(0x7f0000002300)=[{0x1, 0x5, 0x4, 0xa}, {0x2, 0x1, 0x6, 0xa}, {0x5, 0x2, 0x10, 0x7}, {0x2, 0x3, 0x2, 0x6}, {0x1, 0x3, 0xf, 0x1}, {0x0, 0x5, 0xe, 0xb}, {0x0, 0x2, 0x9, 0xb}, {0x5, 0x2, 0x5, 0x8}], 0x10, 0x2}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000002440)={r6, r11, 0x0, r6}, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000002480)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0\x00'}) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000024c0), 0x472800, 0x0) poll(&(0x7f0000002500)=[{r7, 0x412}, {r8, 0x30d4}, {r1, 0x1040}, {r12, 0x4010}, {r7, 0x10a8}, {r4, 0x82}, {r13}, {r1, 0x4000}], 0x8, 0x9) io_uring_register$IORING_REGISTER_FILES(r12, 0x2, &(0x7f0000002540)=[r6], 0x1) write$RDMA_USER_CM_CMD_DESTROY_ID(r12, &(0x7f0000002640)={0x1, 0x10, 0xfa00, {&(0x7f0000002580)}}, 0x18) 2m2.959615618s ago: executing program 1 (id=2289): quotactl$Q_GETINFO(0xffffffff80000501, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ad0600", 0x3) sendmsg$alg(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40020}, 0x4010) recvmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000500)=""/15, 0xf}], 0x1}, 0x200}], 0x1, 0x2021, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x52, 0xa, 0x1, "3258c5c00e7f94ae1e008fba001b0000f4ff4000000000002300e91aba2800", 0x34343459}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7f, 0x7ffc0002}]}) creat(&(0x7f00000000c0)='./file0\x00', 0x0) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_access\x00') sendmmsg(r5, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 2m2.349039498s ago: executing program 0 (id=2290): openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x84) r0 = socket$can_raw(0x1d, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x10) unshare(0x72040e80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="08e7eebc872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc020) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, &(0x7f00000001c0)) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[], 0xff2e) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) 2m1.587245176s ago: executing program 3 (id=2291): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000022000040"]) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, r1}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@remote, r1}, 0x14) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000040)={0x50000, 0x0, {[0xf5, 0x0, 0x6, 0x7fff, 0x78c, 0x1, 0xffffffffffffffff, 0x1]}}) 2m1.126506772s ago: executing program 0 (id=2292): openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x84) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) 2m0.987696415s ago: executing program 3 (id=2293): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x20060400) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x220440, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f00000000c0)={0x5, 0xfffffffc, 0xa, 0x300, 0x3, "e7210fbd959e2e89cc764e29315dbc039608b4"}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r3 = socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) openat$iommufd(0xffffffffffffff9c, 0x0, 0x452280, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x4, 0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000040)=r1) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x80, 0x89, 0x42, @random="fc16b12ec7c6"}, 0x10) 2m0.940405815s ago: executing program 1 (id=2294): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet_icmp(0x2, 0x2, 0x1) recvmmsg(r2, &(0x7f0000006940)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x12000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000380)="71e6d00adf6bd14ba65df5c9c63f6d758bdf526d032158f003b865741eb989b6ef205b7aa7feecf76b70fceb10c87e1e8b385c6776ec63c288791b5e4746d178aac9f284f1dc892886816875501d404e79b8bc9adb300a99be9cfe3f02f2497b64ecfd09af7d5eacc6d9d2714ea3600dc75a3cf88ed453fd33ab6100d18c079d870badbf62471f4b902007d467059a409b2a46ec098507b4329de64d081eea63c141837873d13d7890fda59f843b36c6eb16da98346c548d706b133478e9b56f83d8365f77e36732a83dd1a12486673e9b205d", 0xd3) 2m0.484376185s ago: executing program 3 (id=2295): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) shutdown(r2, 0x1) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x78, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x2, 0x1, 0x5, 0x50, 0xc7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "2ebd269e3a"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1, 0x4, 0xf6}, {0x6, 0x24, 0x1a, 0x1, 0x2}, [@obex={0x5, 0x24, 0x15, 0x8de}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x94, 0xc0, 0xd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9, 0x5c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0x81, 0x9}}}}}}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0xc9, 0x3, 0x8, 0xff, 0x40}, 0x45, &(0x7f0000000180)={0x5, 0xf, 0x45, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8b, 0x7, 0x81, 0x4, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "3bcc0c9808ddcced20480944542f1e4f"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x3, 0x71, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "85913614fc6d3588f437614e530a8b17"}]}, 0x6, [{0xa6, &(0x7f0000000340)=@string={0xa6, 0x3, "8c0391facc363b68ea44e7476aa9b60379fe38719a8dee20ab022ae6cf250520bbe7048e4160256e0474b46386f384b24cc89dcb14c0738a61642b644277e9cc9a8a1a345a09b87a5e1703178816b0c3acdd6256fcafdb289ed7e85eba67b41aaf1be05a411082b35efdc106e422f67386e986baa48434c9e0852ef0f431a1e041ecba6c9f3ea0f81e1d9da06c0e2d592d616b50eb7c083429b8935444ce49d9ff2660bd"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x420}}, {0xce, &(0x7f00000004c0)=@string={0xce, 0x3, "a64bc1df34f35024dedb06c9e15f91fd39f83fdaa1263bf78bda8518d8326cf59d2ac04448bb831a49f237f1262baafa27a3396246c12d949e2c87961e37cd4b44ab6c7e62b953db3c72d831d1a24d291159464ee316dc373f4ddb4db8ac709133a79761c4878bf1ed0cf5d3208c3fd4496ada2e1ea6337384aab2f96bfdfee22bbef5c95a7e9ec879bb443631439554015fa04477d320e6abe1832657c81db86a2697aefa35d3a0ecc8b4a751f5924e1eaa7c926cce4ed926a2bd8f3bd99287ca62cf0f13ea25e5be82ec4d"}}, {0xdb, &(0x7f00000005c0)=@string={0xdb, 0x3, "b13974a82912ecb3c925fd0f34828b7ad1196f3c7708bea7336ecb886561da6d9b575761250c175bae08484489397350d28379688507f340c022f2f6e1fc1742020246ae8784b249df1c949d290a607fb6008f58cf7b930ccf14d204b498dbd09406f3ab02253a51f92830da651f533d9cf9c575d036ec79bf95aa6a74581fb6acfd100313019a59e7f914fedd3a5606dd476697ec5b30675e9dc3ff56a90b35a3cbf35503eac7f6f7d73a094d1ae7c9943e9dcd3d4d69045307cc5c273b2133b42448e2478c489e6b40d66d463f02898953d7a5c6272b72c3"}}, {0xb9, &(0x7f00000006c0)=@string={0xb9, 0x3, "06446eb8917b30713b8b30affc12faac96c81de2ee2cf9bc6f8429cca35e61dfb242b2675d50740f94e933364fd354b72be1664e0589699c9d4e17f48a40861e4e2605eb4dca4630821dbf3786539e1625864afdad53110135b533976603ac3d53226bb2deba7907ba513d8128d719d76f9d2c88bceb32bb4e93cf0e0d89cfcbeba26c716c2f977073b22a6db43e13e2f108310056de280a5a640a8d7c75a9aff95263fcb6f0afb6ce5f441a82b63530ff6b788c310354"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x2809}}]}) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000007c0)={0x1, 0x3e43}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m0.445379789s ago: executing program 2 (id=2296): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x9d) sendmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x0, 0x2496}], 0x10}}], 0x1, 0x4004080) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0xc0800, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f00000000c0)={0xb21a}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0xff1d, &(0x7f0000000500)={&(0x7f0000000380)={0x1c, 0x52, 0xa05, 0x0, 0x25dfdbfd, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x0) 2m0.15265367s ago: executing program 2 (id=2297): socket(0x1f, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00000c6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x40, 0x0, 0x0) socketpair(0xb, 0x1, 0xa61, &(0x7f0000000080)) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0xfffffea8, {0xf000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000088b000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000380)="260f7804640f09660f3880b50080baf80c66b8be19848066efbafc0cb8bff6ef670f20e60fc779e60f06f30fc77200baf80c66b863cc298666efbafc0cec66b9a10300000f32", 0x46}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m0.065559523s ago: executing program 0 (id=2298): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x6f62, 0x202) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) 1m59.91644908s ago: executing program 0 (id=2299): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001440)={'vcan0\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000440)='erofs_destroy_inode\x00', r1}, 0x18) prlimit64(0x0, 0x4, &(0x7f0000000400)={0x8, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCGABS20(r5, 0x80184560, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)=0x6) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xc558e7d56e90a993) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000880)="94cd8247d89634b3ee233c9683469cf16fdb3c2597901e1d02a00a38f4e7778b6503a12dd3d755832c7e335ce59da965d9e6951066f7c419c614c5178508af9603da5d51e16b750a89b0886b14be0a853d1441272e879459501f3f7965dd026719904d837d5f93156b85f1a5d82c4165349a9c19d5ff236ab5f5cf91485898", 0x7f}, {&(0x7f0000000580)}, {&(0x7f0000000a00)="13b045369656e223e7a2e891d0a02bf35e53545eaaab7b9365dea7c72b1e27208567a022ae85a477800903b56229c6dd375cc8534f7fff192cc5c244b270bab0ca92314c49130fbc1932fe0b4b3d94a5a7e269a4ef44fb11b129c70fcdf345ffd6355edf90d5441f6ee97f45ff233d5c5b65f69fd041773b56d126ed35081a12f014246d1983cea2321b9af3209da3d05e9fdab46531083943d99d9e5f8fabb799b2c164dd9145ff3e2e3bcd0ab1da41ea68a852", 0xb4}, {0x0}], 0x4}}], 0x1, 0x4000010) r7 = open(&(0x7f0000000180)='./bus\x00', 0x4827e, 0x1ce) fallocate(r7, 0x0, 0x0, 0x1000f4) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendfile(r8, r7, 0x0, 0x400) 1m59.830026995s ago: executing program 1 (id=2300): personality(0xfe47fef9f5ff7379) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ppoll(0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={[0xb09]}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$COMEDI_CHANINFO(r2, 0x80306403, &(0x7f0000000040)={0x80000000, 0x0, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000280)={0x0, 0x90aa, 0xffff, 0xa, 0x3, [], [0x9, 0x200, 0xffffff14, 0x4], [0x10e, 0x3, 0x1, 0x8], [0x8, 0x2, 0x4, 0x1]}) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x9c}}, 0x80) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prlimit64(0x0, 0x2, &(0x7f00000003c0)={0x7ff, 0xffff}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) 1m59.829693379s ago: executing program 2 (id=2301): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) sendmmsg$inet6(r1, &(0x7f0000002600), 0x0, 0x85) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x10302) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) open(0x0, 0x0, 0xc8) setpriority(0x1, 0x0, 0x1ff) 1m59.75683644s ago: executing program 4 (id=2302): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x448ac0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, 0xfffffffffffffffc) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x3, 0xd, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0xfffffffffffffdfe, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001", 0x37}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) socket$kcm(0x2d, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x20000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0e814062700420598abc9696c0f9f95ba62250af5c3b0e88affef94501d2d7ad8fdaef1c05e3cb1701f2bbdce10f4e70095861c82b80f14c235132b85254dc0928115c3c71d3c020e9a1b550e67d81c8381b43bcc7395b37405734aa625adf141151032ae4cdf6cea7cdb7c6d39c02964474272ca6d3ea0e95feeb6325bc460cb4e179733c01f2d1608dd537619c590c954545a67c1cc63108c80f09338ba1f758a7ad65647a1e13d52b7b76ef5be8f35f133b11dd9655ca4618581c4385a5b8", 0xc0}, {&(0x7f0000000500)="9b3809d4bd6beee932837a8a8680111a857ea2e7d45f22db28693dbeb054335fc0d0aa52e8dc1329a018080947a2a2029f26fc31415d59623704893408fc5666c36e5dc6d6aa4f52a386878a16e6e495a6fcec7b0fb61c9b1b6b45a6266995eb283787f8d7689a68320ebeb867ebfdf6189c35500a27c87d05000000e3e1f17563b308543fb42cfd6b5dc3de1705748255100e74", 0x94}, {&(0x7f0000000040)="6b1ecb071bc63d3ba16c48ebba63d1b620abbe98325477486f1ced54029060e006b01ef1ce08ed99", 0x28}, {&(0x7f0000000080)="6f9db522f9856a65ae6001e64ca6d48f402f1d2725cf236866e8f4d76f4b49f7d15c3c4368b54bd5ec4e02b90bf42dd8fa6880d49750860c30043bb1e57231", 0x3f}, {&(0x7f0000000380)="332e5bc2d454bc5150", 0x9}, {&(0x7f00000003c0)="da48bb0a642fa036d007e281f11b601bd91d77752501253fe89ad9c9882e1e4b2e4ed248934b53127befd7b0c8f8ef81b36d452134cd909e1eac2f9e6acf6aa3fcc02668da0a2f2ad85d429111b6268d884191218b4c46c5b6fcce5e6b8b8e0c5780defe", 0x64}], 0x6, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000000000000001000000050000000000000011000000000000000000000001000000b100000000000000140000000000000000000000010000000ead00000000000011000000000000000000000001000000054aa2d7510000001400000000000000000000000100000092000000000000006800000101000000000000000700000089177564010100e000000208000002ac1414aaac1414aa821f9de00000027f000001e0000002ac1414aaac1eb1e5f50194040000441c1930000000070000000000000fff10ff000000070000140000000000000000000000020000000200000000001000140000000000000000000000010000000001000000000000140000000000000000000000010000c4cb5e6602d661a11e85fa469c3e85b09622a3329e6b91d7ab613d5c9371170175ce409e36d9d6958cea"], 0x128}}, {{&(0x7f0000000600)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000640)="9ef45156718f71ffdb94", 0xa}, {&(0x7f0000000680)="b863ae7726c6dc638050e07723ff718efa5014e01f0a18bbfdf1944e33cd9e256a4576d32e88103bbfb57ffaab662141563fdcca3f280e78d7ebf52e5fd7ea00c677deb937c55751095092c5f2161397636b8f9c1dccefd803fb3886db42a66f0fcdd49a67f57fda10a254869d1ce73057765d54fcd1801b4db04380f9069f8eb2a6e0473a528a6c81332773af7d16b01496525f965cfefc10747fc93f40834f7085110cae3f553d20b9b38d72518f662cb7dffacebd7f73", 0xb8}], 0x2, &(0x7f0000000980)=ANY=[@ANYBLOB="140000000000000000000000010000000f0000000000000014000000000000000000000001000000000000800000000098000000000000000000000007001f00440c0c4000000006000000104434d7b1ac1414aa0000007f0000000000000009e001000180000001ac1e041c9c7f00000100000bc1442478116401010000000040ffffffff00000000ffffffff00000008e000000200000004831b1bac1414bbe0000002e00000016401010100000000ac1414bb830794ac1414aa00001c00000700000000000000000800f59c421187757b424fd0cc0eded7613b8ccfb3f77400"/235, @ANYRES32=0x0, @ANYBLOB="0a010100e0000002000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000480000000000000000000000070000004408a60000000481009404010083076b0000000086240000000101052f96b5000e4d61acc359def07b24d95620050b5ff43141f6c744caf8"], 0x150}}], 0x2, 0x40c0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001b700)=""/102392, 0x18ff8) socket(0x1e, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000140)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback, @empty}, 0xc) 1m59.676599338s ago: executing program 2 (id=2303): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) flock(0xffffffffffffffff, 0x4) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010000ffbe8c5ee17688a2003c000301000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) 1m58.865988198s ago: executing program 2 (id=2304): r0 = socket(0x2b, 0x80801, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x80000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_clone3(&(0x7f0000000480)={0x11000800, &(0x7f0000000200), &(0x7f0000000380), &(0x7f00000003c0), {0x21}, &(0x7f0000000400)=""/44, 0x2c, &(0x7f0000000540)=""/240, &(0x7f0000000440)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x8}, 0x58) ptrace$ARCH_SHSTK_STATUS(0x1e, r2, &(0x7f0000000640), 0x5005) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0xfd0b) r6 = eventfd(0xfe6) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000002c0)={0x27800000002, 0x2, 0x2, r6}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r5}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}}, 0x4000) openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2b8180, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000740)=[@in={0x2, 0x4e1f, @remote}, @in6={0xa, 0x4e24, 0xc917, @dev={0xfe, 0x80, '\x00', 0x15}, 0x401}, @in6={0xa, 0x4e21, 0x4007fff, @private0, 0xffffff67}, @in6={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0xfffffff8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}, @in6={0xa, 0x4e21, 0xfff, @mcast2}], 0xbc) sendmsg$nl_route_sched(r7, 0x0, 0x4000000) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) chdir(0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r8 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m58.440120954s ago: executing program 0 (id=2305): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000040000020f00000005002e000100000005002f000000000008000300", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 1m55.759350385s ago: executing program 0 (id=2306): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000900)) syz_usb_connect(0x2, 0x227, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsm_get_self_attr(0x8032a77360865b2f, 0x0, 0xfffffffffffffffc, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) epoll_create(0x4968) close(0x3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = gettid() tkill(r3, 0xb) 1m21.828766568s ago: executing program 32 (id=2306): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000900)) syz_usb_connect(0x2, 0x227, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsm_get_self_attr(0x8032a77360865b2f, 0x0, 0xfffffffffffffffc, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) epoll_create(0x4968) close(0x3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = gettid() tkill(r3, 0xb) 1m21.676389649s ago: executing program 33 (id=2300): personality(0xfe47fef9f5ff7379) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ppoll(0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={[0xb09]}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$COMEDI_CHANINFO(r2, 0x80306403, &(0x7f0000000040)={0x80000000, 0x0, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000280)={0x0, 0x90aa, 0xffff, 0xa, 0x3, [], [0x9, 0x200, 0xffffff14, 0x4], [0x10e, 0x3, 0x1, 0x8], [0x8, 0x2, 0x4, 0x1]}) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x9c}}, 0x80) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prlimit64(0x0, 0x2, &(0x7f00000003c0)={0x7ff, 0xffff}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) 54.926809478s ago: executing program 34 (id=2304): r0 = socket(0x2b, 0x80801, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x80000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_clone3(&(0x7f0000000480)={0x11000800, &(0x7f0000000200), &(0x7f0000000380), &(0x7f00000003c0), {0x21}, &(0x7f0000000400)=""/44, 0x2c, &(0x7f0000000540)=""/240, &(0x7f0000000440)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x8}, 0x58) ptrace$ARCH_SHSTK_STATUS(0x1e, r2, &(0x7f0000000640), 0x5005) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0xfd0b) r6 = eventfd(0xfe6) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000002c0)={0x27800000002, 0x2, 0x2, r6}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r5}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}}, 0x4000) openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2b8180, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000740)=[@in={0x2, 0x4e1f, @remote}, @in6={0xa, 0x4e24, 0xc917, @dev={0xfe, 0x80, '\x00', 0x15}, 0x401}, @in6={0xa, 0x4e21, 0x4007fff, @private0, 0xffffff67}, @in6={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0xfffffff8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}, @in6={0xa, 0x4e21, 0xfff, @mcast2}], 0xbc) sendmsg$nl_route_sched(r7, 0x0, 0x4000000) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) chdir(0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r8 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) 54.627149408s ago: executing program 35 (id=2295): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) shutdown(r2, 0x1) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x78, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x2, 0x1, 0x5, 0x50, 0xc7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "2ebd269e3a"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1, 0x4, 0xf6}, {0x6, 0x24, 0x1a, 0x1, 0x2}, [@obex={0x5, 0x24, 0x15, 0x8de}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x94, 0xc0, 0xd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9, 0x5c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0x81, 0x9}}}}}}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0xc9, 0x3, 0x8, 0xff, 0x40}, 0x45, &(0x7f0000000180)={0x5, 0xf, 0x45, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8b, 0x7, 0x81, 0x4, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "3bcc0c9808ddcced20480944542f1e4f"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x3, 0x71, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "85913614fc6d3588f437614e530a8b17"}]}, 0x6, [{0xa6, &(0x7f0000000340)=@string={0xa6, 0x3, "8c0391facc363b68ea44e7476aa9b60379fe38719a8dee20ab022ae6cf250520bbe7048e4160256e0474b46386f384b24cc89dcb14c0738a61642b644277e9cc9a8a1a345a09b87a5e1703178816b0c3acdd6256fcafdb289ed7e85eba67b41aaf1be05a411082b35efdc106e422f67386e986baa48434c9e0852ef0f431a1e041ecba6c9f3ea0f81e1d9da06c0e2d592d616b50eb7c083429b8935444ce49d9ff2660bd"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x420}}, {0xce, &(0x7f00000004c0)=@string={0xce, 0x3, "a64bc1df34f35024dedb06c9e15f91fd39f83fdaa1263bf78bda8518d8326cf59d2ac04448bb831a49f237f1262baafa27a3396246c12d949e2c87961e37cd4b44ab6c7e62b953db3c72d831d1a24d291159464ee316dc373f4ddb4db8ac709133a79761c4878bf1ed0cf5d3208c3fd4496ada2e1ea6337384aab2f96bfdfee22bbef5c95a7e9ec879bb443631439554015fa04477d320e6abe1832657c81db86a2697aefa35d3a0ecc8b4a751f5924e1eaa7c926cce4ed926a2bd8f3bd99287ca62cf0f13ea25e5be82ec4d"}}, {0xdb, &(0x7f00000005c0)=@string={0xdb, 0x3, "b13974a82912ecb3c925fd0f34828b7ad1196f3c7708bea7336ecb886561da6d9b575761250c175bae08484489397350d28379688507f340c022f2f6e1fc1742020246ae8784b249df1c949d290a607fb6008f58cf7b930ccf14d204b498dbd09406f3ab02253a51f92830da651f533d9cf9c575d036ec79bf95aa6a74581fb6acfd100313019a59e7f914fedd3a5606dd476697ec5b30675e9dc3ff56a90b35a3cbf35503eac7f6f7d73a094d1ae7c9943e9dcd3d4d69045307cc5c273b2133b42448e2478c489e6b40d66d463f02898953d7a5c6272b72c3"}}, {0xb9, &(0x7f00000006c0)=@string={0xb9, 0x3, "06446eb8917b30713b8b30affc12faac96c81de2ee2cf9bc6f8429cca35e61dfb242b2675d50740f94e933364fd354b72be1664e0589699c9d4e17f48a40861e4e2605eb4dca4630821dbf3786539e1625864afdad53110135b533976603ac3d53226bb2deba7907ba513d8128d719d76f9d2c88bceb32bb4e93cf0e0d89cfcbeba26c716c2f977073b22a6db43e13e2f108310056de280a5a640a8d7c75a9aff95263fcb6f0afb6ce5f441a82b63530ff6b788c310354"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x2809}}]}) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000007c0)={0x1, 0x3e43}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 54.449546665s ago: executing program 36 (id=2302): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x448ac0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, 0xfffffffffffffffc) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x3, 0xd, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0xfffffffffffffdfe, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001", 0x37}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) socket$kcm(0x2d, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x20000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0e814062700420598abc9696c0f9f95ba62250af5c3b0e88affef94501d2d7ad8fdaef1c05e3cb1701f2bbdce10f4e70095861c82b80f14c235132b85254dc0928115c3c71d3c020e9a1b550e67d81c8381b43bcc7395b37405734aa625adf141151032ae4cdf6cea7cdb7c6d39c02964474272ca6d3ea0e95feeb6325bc460cb4e179733c01f2d1608dd537619c590c954545a67c1cc63108c80f09338ba1f758a7ad65647a1e13d52b7b76ef5be8f35f133b11dd9655ca4618581c4385a5b8", 0xc0}, {&(0x7f0000000500)="9b3809d4bd6beee932837a8a8680111a857ea2e7d45f22db28693dbeb054335fc0d0aa52e8dc1329a018080947a2a2029f26fc31415d59623704893408fc5666c36e5dc6d6aa4f52a386878a16e6e495a6fcec7b0fb61c9b1b6b45a6266995eb283787f8d7689a68320ebeb867ebfdf6189c35500a27c87d05000000e3e1f17563b308543fb42cfd6b5dc3de1705748255100e74", 0x94}, {&(0x7f0000000040)="6b1ecb071bc63d3ba16c48ebba63d1b620abbe98325477486f1ced54029060e006b01ef1ce08ed99", 0x28}, {&(0x7f0000000080)="6f9db522f9856a65ae6001e64ca6d48f402f1d2725cf236866e8f4d76f4b49f7d15c3c4368b54bd5ec4e02b90bf42dd8fa6880d49750860c30043bb1e57231", 0x3f}, {&(0x7f0000000380)="332e5bc2d454bc5150", 0x9}, {&(0x7f00000003c0)="da48bb0a642fa036d007e281f11b601bd91d77752501253fe89ad9c9882e1e4b2e4ed248934b53127befd7b0c8f8ef81b36d452134cd909e1eac2f9e6acf6aa3fcc02668da0a2f2ad85d429111b6268d884191218b4c46c5b6fcce5e6b8b8e0c5780defe", 0x64}], 0x6, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x128}}, {{&(0x7f0000000600)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000640)="9ef45156718f71ffdb94", 0xa}, {&(0x7f0000000680)="b863ae7726c6dc638050e07723ff718efa5014e01f0a18bbfdf1944e33cd9e256a4576d32e88103bbfb57ffaab662141563fdcca3f280e78d7ebf52e5fd7ea00c677deb937c55751095092c5f2161397636b8f9c1dccefd803fb3886db42a66f0fcdd49a67f57fda10a254869d1ce73057765d54fcd1801b4db04380f9069f8eb2a6e0473a528a6c81332773af7d16b01496525f965cfefc10747fc93f40834f7085110cae3f553d20b9b38d72518f662cb7dffacebd7f73", 0xb8}], 0x2, &(0x7f0000000980)=ANY=[@ANYBLOB="140000000000000000000000010000000f0000000000000014000000000000000000000001000000000000800000000098000000000000000000000007001f00440c0c4000000006000000104434d7b1ac1414aa0000007f0000000000000009e001000180000001ac1e041c9c7f00000100000bc1442478116401010000000040ffffffff00000000ffffffff00000008e000000200000004831b1bac1414bbe0000002e00000016401010100000000ac1414bb830794ac1414aa00001c00000700000000000000000800f59c421187757b424fd0cc0eded7613b8ccfb3f77400"/235, @ANYRES32=0x0, @ANYBLOB="0a010100e0000002000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000480000000000000000000000070000004408a60000000481009404010083076b0000000086240000000101052f96b5000e4d61acc359def07b24d95620050b5ff43141f6c744caf8"], 0x150}}], 0x2, 0x40c0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001b700)=""/102392, 0x18ff8) socket(0x1e, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000140)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback, @empty}, 0xc) 0s ago: executing program 6 (id=2308): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000380)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x7f, 0x7, &(0x7f0000001180)="a534ed9089a945", 0x3}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs(0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x4, "8464"}]}}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f80)=@newae={0x1e0, 0x1e, 0x100, 0x70bd2d, 0x25dfdbfd, {{@in=@rand_addr=0x64010100, 0x4d5, 0x2, 0x32}, @in6=@rand_addr=' \x01\x00', 0x1000, 0x3506}, [@policy_type={0xa, 0x10, {0x1}}, @algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}, @sa={0xe4, 0x6, {{@in6=@private2, @in=@remote, 0x4e22, 0x3, 0x4e24, 0x293, 0x2, 0x0, 0x20, 0xc, 0x0, 0xee01}, {@in6=@dev={0xfe, 0x80, '\x00', 0x3c}, 0x4d6, 0x2b}, @in=@dev={0xac, 0x14, 0x14, 0x11}, {0xef4b, 0x2, 0x2000, 0x31b, 0x5, 0x0, 0x1ff, 0x6}, {0x47e, 0x8, 0x1, 0x6}, {0x3, 0xff, 0x9}, 0x70bd2d, 0x3500, 0xa, 0x1, 0x7}}, @tfcpad={0x8}, @encap={0x1c, 0x4, {0x0, 0x4e20, 0x4e22, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}}, @lifetime_val={0x24, 0x9, {0x10, 0x9, 0x10, 0x1}}, @coaddr={0x14, 0xe, @in6=@empty}, @tfcpad={0x8, 0x16, 0x2}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x80}, 0x80) bind$inet(0xffffffffffffffff, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x8000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) kernel console output (not intermixed with test programs): 6C:006D.0015: interface is invalid, ignoring [ 680.012517][ T30] audit: type=1400 audit(1761785125.327:765): avc: denied { ioctl } for pid=5810 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3206 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 681.072865][ T30] audit: type=1400 audit(1761785125.987:766): avc: denied { lock } for pid=12760 comm="syz.3.1823" path="socket:[34711]" dev="sockfs" ino=34711 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 681.159195][ T890] usb 1-1: USB disconnect, device number 33 [ 681.199078][ T5883] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 681.263696][ T30] audit: type=1400 audit(1761785126.587:767): avc: denied { mount } for pid=12792 comm="syz.1.1831" name="/" dev="hugetlbfs" ino=35640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 681.363988][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 681.373510][ T5883] usb 3-1: unable to get BOS descriptor or descriptor too short [ 681.385591][ T5883] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 681.394301][ T5883] usb 3-1: config 4 has no interface number 0 [ 681.400509][ T5883] usb 3-1: config 4 interface 30 has no altsetting 0 [ 681.419494][ T5883] usb 3-1: string descriptor 0 read error: -22 [ 681.426951][ T5883] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 681.441212][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.462136][ T5883] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 681.469380][ T5883] dw2102: su3000_power_ctrl: 1, initialized 0 [ 681.554042][ T5957] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 681.932966][ T5883] dvb-usb: bulk message failed: -22 (2/0) [ 681.942849][ T5883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 681.954601][ T5883] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 681.962578][ T5883] usb 3-1: media controller created [ 681.969264][ T5883] dvb-usb: bulk message failed: -22 (6/0) [ 681.976707][ T5883] dw2102: i2c transfer failed. [ 681.983069][ T5883] dvb-usb: bulk message failed: -22 (6/0) [ 681.988895][ T5883] dw2102: i2c transfer failed. [ 681.995034][ T5883] dvb-usb: bulk message failed: -22 (6/0) [ 682.000836][ T5883] dw2102: i2c transfer failed. [ 682.006197][ T5883] dvb-usb: bulk message failed: -22 (6/0) [ 682.012762][ T5883] dw2102: i2c transfer failed. [ 682.017676][ T5883] dvb-usb: bulk message failed: -22 (6/0) [ 682.023850][ T5883] dw2102: i2c transfer failed. [ 682.028722][ T5883] dvb-usb: bulk message failed: -22 (6/0) [ 682.034984][ T5883] dw2102: i2c transfer failed. [ 682.039836][ T5883] dvb-usb: MAC address: 02:02:02:02:02:02 [ 682.078449][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 682.099261][ T5957] usb 5-1: unable to get BOS descriptor or descriptor too short [ 682.105164][ T5883] dvb-usb: bulk message failed: -22 (3/0) [ 682.117254][ T5883] dw2102: command 0x0e transfer failed. [ 682.125160][ T5883] dvb-usb: bulk message failed: -22 (3/0) [ 682.131412][ T5883] dw2102: command 0x0e transfer failed. [ 682.237046][T10156] usb 4-1: USB disconnect, device number 29 [ 682.257441][ T5957] usb 5-1: not running at top speed; connect to a high speed hub [ 682.283754][ T5957] usb 5-1: config 4 has an invalid interface number: 81 but max is 0 [ 682.301877][ T5957] usb 5-1: config 4 has an invalid interface number: 19 but max is 0 [ 682.310380][ T5957] usb 5-1: config 4 has an invalid descriptor of length 184, skipping remainder of the config [ 682.325009][ T5957] usb 5-1: config 4 has 2 interfaces, different from the descriptor's value: 1 [ 682.370831][T12804] bond3: (slave bond_slave_1): Device is not our slave [ 682.378335][ T5957] usb 5-1: config 4 has no interface number 0 [ 682.385446][ T5957] usb 5-1: config 4 has no interface number 1 [ 682.393385][T12804] bond3: option active_slave: invalid value (bond_slave_1) [ 682.408114][ T5957] usb 5-1: config 4 interface 81 altsetting 3 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 682.434605][ T5957] usb 5-1: config 4 interface 81 altsetting 3 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 682.441320][ T5883] dvb-usb: bulk message failed: -22 (3/0) [ 682.454037][ T5883] dw2102: command 0x0e transfer failed. [ 682.459714][ T5883] dvb-usb: bulk message failed: -22 (3/0) [ 682.472844][ T5883] dw2102: command 0x0e transfer failed. [ 682.489485][ T5957] usb 5-1: config 4 interface 81 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 682.496189][ T5883] dvb-usb: bulk message failed: -22 (1/0) [ 682.506430][T12804] bond3 (unregistering): Released all slaves [ 682.510084][ T5883] dw2102: command 0x51 transfer failed. [ 682.520068][ T5883] dvb-usb: bulk message failed: -22 (5/0) [ 682.527177][ T5883] dw2102: i2c probe for address 0x68 failed. [ 682.531862][ T5957] usb 5-1: too many endpoints for config 4 interface 19 altsetting 161: 105, using maximum allowed: 30 [ 682.541019][ T5883] dvb-usb: bulk message failed: -22 (5/0) [ 682.549913][ T5883] dw2102: i2c probe for address 0x69 failed. [ 682.561752][ T5883] dvb-usb: bulk message failed: -22 (5/0) [ 682.567716][ T5957] usb 5-1: config 4 interface 19 altsetting 161 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 682.568859][ T5883] dw2102: i2c probe for address 0x6a failed. [ 682.587647][ T5957] usb 5-1: config 4 interface 81 has no altsetting 0 [ 682.615190][ T5883] dw2102: probing for demodulator failed. Is the external power switched on? [ 682.646461][ T5883] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 682.695420][ T5957] usb 5-1: config 4 interface 19 has no altsetting 0 [ 682.706997][ T5957] usb 5-1: Dual-Role OTG device on HNP port [ 682.714960][ T5957] usb 5-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=94.fe [ 682.724567][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.733256][ T5957] usb 5-1: Product: syz [ 682.737700][ T5957] usb 5-1: Manufacturer: syz [ 682.743216][ T5957] usb 5-1: SerialNumber: syz [ 682.832200][ T5883] rc_core: IR keymap rc-tt-1500 not found [ 682.847817][ T5883] Registered IR keymap rc-empty [ 682.871924][ T5883] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 682.890696][ T5883] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input38 [ 682.900515][ T890] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 682.912589][ T5883] dvb-usb: schedule remote query interval to 250 msecs. [ 682.921676][ T5883] dw2102: su3000_power_ctrl: 0, initialized 1 [ 682.927891][ T5883] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 683.015598][T12791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1830'. [ 683.026245][T12791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1830'. [ 683.040449][ T5957] ums-datafab 5-1:4.81: USB Mass Storage device detected [ 683.061203][ T890] usb 2-1: device descriptor read/64, error -71 [ 683.080027][ T5957] ums-sddr55 5-1:4.81: USB Mass Storage device detected [ 683.159336][ T5957] ums-datafab 5-1:4.19: USB Mass Storage device detected [ 683.182917][ T5883] dvb-usb: bulk message failed: -22 (1/0) [ 683.190235][ T5883] dw2102: i2c transfer failed. [ 683.240021][ T5957] ums-sddr55 5-1:4.19: USB Mass Storage device detected [ 683.296651][ T5957] usb 5-1: USB disconnect, device number 37 [ 683.301414][ T890] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 683.461027][ T5883] dvb-usb: bulk message failed: -22 (1/0) [ 683.473758][ T890] usb 2-1: device descriptor read/64, error -71 [ 683.486766][ T5883] dw2102: i2c transfer failed. [ 683.609963][ T890] usb usb2-port1: attempt power cycle [ 683.714159][T10156] usb 3-1: USB disconnect, device number 41 [ 683.844779][ T5957] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 683.861833][T10156] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 683.971097][ T890] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 684.001731][ T890] usb 2-1: device descriptor read/8, error -71 [ 684.043561][ T5957] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 684.053981][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.112067][ T5957] usb 4-1: config 0 descriptor?? [ 684.189740][ T5957] cp210x 4-1:0.0: cp210x converter detected [ 684.241115][ T890] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 684.322805][ T890] usb 2-1: device descriptor read/8, error -71 [ 684.431385][ T890] usb usb2-port1: unable to enumerate USB device [ 684.627753][ T30] audit: type=1400 audit(1761785129.947:768): avc: denied { write } for pid=12849 comm="syz.2.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 684.637423][ T5957] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 684.671348][ T5957] usb 4-1: cp210x converter now attached to ttyUSB0 [ 684.904752][T12856] hub 6-0:1.0: USB hub found [ 684.910521][T12856] hub 6-0:1.0: 1 port detected [ 685.314521][ T5957] usb 4-1: USB disconnect, device number 30 [ 685.341929][ T5957] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 685.404015][ T5957] cp210x 4-1:0.0: device disconnected [ 685.634175][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.640529][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.095699][T12872] bond3: ARP target 5.0.0.0 is already present [ 687.101960][T12872] bond3: option arp_ip_target: invalid value (5) [ 687.115836][T12872] bond3 (unregistering): Released all slaves [ 687.209340][T12884] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1848'. [ 687.601101][T12894] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1851'. [ 688.221126][ T30] audit: type=1400 audit(1761785133.497:769): avc: denied { ioctl } for pid=12899 comm="syz.4.1854" path="socket:[35829]" dev="sockfs" ino=35829 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 688.701296][T12908] hub 6-0:1.0: USB hub found [ 688.707262][T12908] hub 6-0:1.0: 1 port detected [ 690.355453][T12925] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 690.368617][T12925] block device autoloading is deprecated and will be removed. [ 690.737033][ T5883] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 691.021128][ T5883] usb 4-1: Using ep0 maxpacket: 8 [ 691.027684][ T5883] usb 4-1: config 0 has an invalid interface number: 96 but max is 0 [ 691.051033][ T5883] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.061906][ T5883] usb 4-1: config 0 has no interface number 0 [ 691.068447][ T5883] usb 4-1: config 0 interface 96 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 691.133494][ T5883] usb 4-1: config 0 interface 96 has no altsetting 0 [ 691.627203][ T5883] usb 4-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=e6.eb [ 691.641009][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.649034][ T5883] usb 4-1: Product: syz [ 691.661066][ T5883] usb 4-1: Manufacturer: syz [ 691.665699][ T5883] usb 4-1: SerialNumber: syz [ 691.681790][ T5883] usb 4-1: config 0 descriptor?? [ 691.689726][ T5883] usbhid 4-1:0.96: couldn't find an input interrupt endpoint [ 692.049413][ T5883] usb 4-1: USB disconnect, device number 31 [ 692.340614][T12964] hub 6-0:1.0: USB hub found [ 692.347291][T12964] hub 6-0:1.0: 1 port detected [ 693.069236][T12974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=12974 comm=syz.4.1875 [ 693.931174][ T5883] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 693.962088][T13000] overlayfs: missing 'lowerdir' [ 694.253390][ T5883] usb 5-1: Using ep0 maxpacket: 16 [ 694.417198][T13003] devpts: Unknown parameter 'tracefs' [ 694.726427][T13007] syzkaller1: entered promiscuous mode [ 694.752288][T13007] syzkaller1: entered allmulticast mode [ 694.813409][T12978] comedi comedi3: comedi_config --init_data is deprecated [ 696.668638][ T30] audit: type=1326 audit(1761785141.957:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13019 comm="syz.3.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044dd8efc9 code=0x7ffc0000 [ 696.750046][T13020] nbd: device at index 3 is going down [ 696.908781][ T30] audit: type=1326 audit(1761785141.957:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13019 comm="syz.3.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044dd8efc9 code=0x7ffc0000 [ 696.991305][ T30] audit: type=1326 audit(1761785142.047:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13019 comm="syz.3.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f044dd8efc9 code=0x7ffc0000 [ 697.133858][ T30] audit: type=1326 audit(1761785142.047:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13019 comm="syz.3.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044dd8efc9 code=0x7ffc0000 [ 697.194692][ T30] audit: type=1326 audit(1761785142.047:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13019 comm="syz.3.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044dd8efc9 code=0x7ffc0000 [ 697.218840][ T30] audit: type=1326 audit(1761785142.047:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13019 comm="syz.3.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f044dd8efc9 code=0x7ffc0000 [ 697.257713][ T30] audit: type=1326 audit(1761785142.057:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13019 comm="syz.3.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044dd8efc9 code=0x7ffc0000 [ 697.332344][T13024] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1887'. [ 697.349354][T13024] netlink: 'syz.3.1887': attribute type 21 has an invalid length. [ 697.357965][T13024] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1887'. [ 697.368655][T13024] netlink: 'syz.3.1887': attribute type 4 has an invalid length. [ 697.376577][T13024] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1887'. [ 697.418837][T13024] batadv1: entered promiscuous mode [ 697.431046][ T30] audit: type=1326 audit(1761785142.057:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13019 comm="syz.3.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044dd8efc9 code=0x7ffc0000 [ 697.455777][T13024] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 697.530467][T13027] can0: slcan on ttyS3. [ 697.538190][ T5883] usb 5-1: unable to get BOS descriptor or descriptor too short [ 697.548440][ T30] audit: type=1326 audit(1761785142.057:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13019 comm="syz.3.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f044dd8efc9 code=0x7ffc0000 [ 697.573672][ T5883] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 697.590014][ T5883] usb 5-1: can't read configurations, error -71 [ 697.598158][ T30] audit: type=1326 audit(1761785142.057:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13019 comm="syz.3.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044dd8efc9 code=0x7ffc0000 [ 697.642843][T13025] can0 (unregistered): slcan off ttyS3. [ 697.790837][T13033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1891'. [ 698.034182][T10156] kernel read not supported for file /dsp1 (pid: 10156 comm: kworker/1:1) [ 698.131052][ T5957] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 698.313862][T13046] overlayfs: missing 'lowerdir' [ 698.511184][ T5883] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 698.796188][ T5957] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 698.847458][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.860076][ T5957] usb 3-1: Product: syz [ 698.861075][ T5883] usb 5-1: device descriptor read/64, error -71 [ 698.864371][ T5957] usb 3-1: Manufacturer: syz [ 698.875510][ T5957] usb 3-1: SerialNumber: syz [ 698.887155][ T5957] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 699.049671][ T5883] usb usb5-port1: attempt power cycle [ 699.117954][T10261] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 699.461067][ T5883] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 699.531485][ T5883] usb 5-1: device descriptor read/8, error -71 [ 699.534051][ T5957] usb 3-1: USB disconnect, device number 42 [ 699.791226][ T5883] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 699.815940][ T5883] usb 5-1: device descriptor read/8, error -71 [ 700.191131][T10261] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 700.251284][T10261] ath9k_htc: Failed to initialize the device [ 700.268197][ T5957] usb 3-1: ath9k_htc: USB layer deinitialized [ 700.268695][T13057] [U]  [ 700.293636][ T5883] usb usb5-port1: unable to enumerate USB device [ 700.492732][T13073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1902'. [ 700.505496][T13073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1902'. [ 700.657469][T13080] binder: 13079:13080 ioctl 80286722 200000000140 returned -22 [ 700.931378][ T5957] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 701.069945][T13088] sd 0:0:1:0: PR command failed: 1026 [ 701.075746][T13088] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 701.082787][T13088] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 701.134938][T13089] sd 0:0:1:0: PR command failed: 1026 [ 701.140742][T13089] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 701.147717][T13089] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 701.298221][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.317898][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.329854][ T5957] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 701.339295][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.358855][ T5957] usb 4-1: config 0 descriptor?? [ 701.485937][T13095] 9pnet_fd: Insufficient options for proto=fd [ 702.074442][T13077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.616124][T13077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.814015][ T5957] hid-led 0003:27B8:01ED.0016: probe with driver hid-led failed with error -71 [ 702.866569][ T5957] usb 4-1: USB disconnect, device number 32 [ 704.800718][T13140] fuse: Unknown parameter '' [ 705.550881][T13145] sd 0:0:1:0: PR command failed: 1026 [ 705.556360][T13145] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 705.563226][T13145] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 705.725675][T13152] devpts: Unknown parameter 'tracefs' [ 705.881865][T13155] ieee802154 phy0 wpan0: encryption failed: -22 [ 706.291814][T13159] FAULT_INJECTION: forcing a failure. [ 706.291814][T13159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 706.431053][T13159] CPU: 1 UID: 0 PID: 13159 Comm: syz.0.1925 Not tainted syzkaller #0 PREEMPT(full) [ 706.431082][T13159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 706.431094][T13159] Call Trace: [ 706.431101][T13159] [ 706.431109][T13159] dump_stack_lvl+0x16c/0x1f0 [ 706.431144][T13159] should_fail_ex+0x512/0x640 [ 706.431173][T13159] _copy_from_user+0x2e/0xd0 [ 706.431198][T13159] copy_from_sockptr_offset.constprop.0+0x153/0x1a0 [ 706.431224][T13159] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 706.431257][T13159] do_ipv6_setsockopt+0x86e/0x44b0 [ 706.431286][T13159] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 706.431307][T13159] ? avc_has_perm_noaudit+0x117/0x3b0 [ 706.431339][T13159] ? avc_has_perm_noaudit+0x149/0x3b0 [ 706.431369][T13159] ? avc_has_perm+0x144/0x1f0 [ 706.431396][T13159] ? __pfx_avc_has_perm+0x10/0x10 [ 706.431424][T13159] ? get_pid_task+0x106/0x250 [ 706.431442][T13159] ? proc_fail_nth_write+0x9f/0x220 [ 706.431468][T13159] ? sock_has_perm+0x259/0x2f0 [ 706.431497][T13159] ? __pfx_sock_has_perm+0x10/0x10 [ 706.431526][T13159] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 706.431550][T13159] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 706.431582][T13159] ? ipv6_setsockopt+0xcb/0x170 [ 706.431602][T13159] ipv6_setsockopt+0xcb/0x170 [ 706.431628][T13159] udpv6_setsockopt+0x7d/0xd0 [ 706.431654][T13159] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 706.431687][T13159] do_sock_setsockopt+0xf3/0x1d0 [ 706.431720][T13159] __sys_setsockopt+0x1a0/0x230 [ 706.431750][T13159] __x64_sys_setsockopt+0xbd/0x160 [ 706.431773][T13159] ? do_syscall_64+0x91/0xfa0 [ 706.431801][T13159] ? lockdep_hardirqs_on+0x7c/0x110 [ 706.431836][T13159] do_syscall_64+0xcd/0xfa0 [ 706.431865][T13159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.431886][T13159] RIP: 0033:0x7f42a6f8efc9 [ 706.431904][T13159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 706.431923][T13159] RSP: 002b:00007f42a7dce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 706.431943][T13159] RAX: ffffffffffffffda RBX: 00007f42a71e6180 RCX: 00007f42a6f8efc9 [ 706.431956][T13159] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007 [ 706.431968][T13159] RBP: 00007f42a7dce090 R08: 0000000000000358 R09: 0000000000000000 [ 706.431980][T13159] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 706.431993][T13159] R13: 00007f42a71e6218 R14: 00007f42a71e6180 R15: 00007ffcb447fb98 [ 706.432022][T13159] [ 708.011913][T13174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1933'. [ 708.021321][T13174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1933'. [ 708.170630][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 708.170859][ T30] audit: type=1400 audit(1761785153.484:825): avc: denied { wake_alarm } for pid=13170 comm="syz.0.1932" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 708.761088][T13183] netlink: 'syz.4.1935': attribute type 10 has an invalid length. [ 708.833993][T13183] team0: Device ipvlan1 failed to register rx_handler [ 709.109927][ T30] audit: type=1400 audit(1761785154.424:826): avc: denied { mounton } for pid=13188 comm="syz.1.1937" path="/proc/1338/cgroup" dev="proc" ino=37529 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 709.209588][ T30] audit: type=1400 audit(1761785154.434:827): avc: denied { module_load } for pid=13190 comm="syz.3.1931" path="/sys/power/wakeup_count" dev="sysfs" ino=1413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 709.284033][ T50] Bluetooth: (null): Invalid header checksum [ 709.290132][ T50] Bluetooth: (null): Invalid header checksum [ 709.361040][ T890] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 709.394882][ T1098] Bluetooth: (null): Invalid header checksum [ 709.421812][ T5883] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 709.535673][ T50] Bluetooth: (null): Invalid header checksum [ 709.542805][ T890] usb 1-1: device descriptor read/64, error -71 [ 709.602797][ T5883] usb 4-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e [ 709.612261][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.743039][ T36] Bluetooth: (null): Invalid header checksum [ 709.750580][ T36] Bluetooth: (null): Invalid header checksum [ 709.762743][ T5883] pwc: Logitech ViewPort AV 100 webcam detected. [ 709.801204][ T890] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 709.831880][ T36] Bluetooth: (null): Invalid header checksum [ 709.931028][ T890] usb 1-1: device descriptor read/64, error -71 [ 709.941381][ T36] Bluetooth: (null): Invalid header checksum [ 709.969125][ T5883] pwc: Failed to set LED on/off time (-71) [ 709.975306][ T5883] pwc: send_video_command error -71 [ 709.980511][ T5883] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 709.990242][ T5883] Philips webcam 4-1:127.0: probe with driver Philips webcam failed with error -71 [ 710.034313][ T5883] usb 4-1: USB disconnect, device number 33 [ 710.044638][ T890] usb usb1-port1: attempt power cycle [ 710.075512][T13207] ieee802154 phy0 wpan0: encryption failed: -22 [ 710.411055][ T890] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 710.451614][ T890] usb 1-1: device descriptor read/8, error -71 [ 710.701087][ T890] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 710.730432][ T890] usb 1-1: device descriptor read/8, error -71 [ 710.755926][T10261] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 710.926687][T10156] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 710.967682][T10261] usb 2-1: config 0 has an invalid interface number: 84 but max is 0 [ 711.016554][T10261] usb 2-1: config 0 has no interface number 0 [ 711.025529][T10261] usb 2-1: too many endpoints for config 0 interface 84 altsetting 55: 90, using maximum allowed: 30 [ 711.045836][T10261] usb 2-1: config 0 interface 84 altsetting 55 has 0 endpoint descriptors, different from the interface descriptor's value: 90 [ 711.061209][T10261] usb 2-1: config 0 interface 84 has no altsetting 0 [ 711.068268][T10261] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 711.084820][T10261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.121845][T10156] usb 4-1: unable to get BOS descriptor or descriptor too short [ 711.141120][T10261] usb 2-1: config 0 descriptor?? [ 711.149294][T10156] usb 4-1: not running at top speed; connect to a high speed hub [ 711.164980][ T890] usb usb1-port1: unable to enumerate USB device [ 711.173504][T10261] cp210x 2-1:0.84: cp210x converter detected [ 711.180323][T10156] usb 4-1: config 4 has an invalid interface number: 81 but max is 0 [ 711.188658][T10156] usb 4-1: config 4 has an invalid interface number: 19 but max is 0 [ 711.196936][T10156] usb 4-1: config 4 has an invalid descriptor of length 184, skipping remainder of the config [ 711.207352][T10156] usb 4-1: config 4 has 2 interfaces, different from the descriptor's value: 1 [ 711.216419][T10156] usb 4-1: config 4 has no interface number 0 [ 711.222577][T10156] usb 4-1: config 4 has no interface number 1 [ 711.228713][T10156] usb 4-1: config 4 interface 81 altsetting 3 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 711.240495][T10156] usb 4-1: config 4 interface 81 altsetting 3 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 711.251654][T10156] usb 4-1: config 4 interface 81 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 711.264958][T10156] usb 4-1: too many endpoints for config 4 interface 19 altsetting 161: 105, using maximum allowed: 30 [ 711.277325][T10156] usb 4-1: config 4 interface 19 altsetting 161 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 711.291432][T10156] usb 4-1: config 4 interface 81 has no altsetting 0 [ 711.298187][T10156] usb 4-1: config 4 interface 19 has no altsetting 0 [ 711.307166][T10156] usb 4-1: Dual-Role OTG device on HNP port [ 711.314546][T10156] usb 4-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=94.fe [ 711.323744][T10156] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.331835][T10156] usb 4-1: Product: syz [ 711.336052][T10156] usb 4-1: Manufacturer: syz [ 711.341065][T10156] usb 4-1: SerialNumber: syz [ 711.582192][T10261] cp210x 2-1:0.84: failed to get vendor val 0x000e size 3: -32 [ 711.797267][T10156] ums-datafab 4-1:4.81: USB Mass Storage device detected [ 711.804591][T10261] cp210x 2-1:0.84: failed to get vendor val 0x370c size 15: -32 [ 711.812561][T10261] cp210x 2-1:0.84: GPIO initialisation failed: -32 [ 711.822210][T10261] usb 2-1: cp210x converter now attached to ttyUSB0 [ 711.873216][T10156] ums-sddr55 4-1:4.81: USB Mass Storage device detected [ 712.041718][T10156] ums-datafab 4-1:4.19: USB Mass Storage device detected [ 712.162061][T10156] ums-sddr55 4-1:4.19: USB Mass Storage device detected [ 712.268138][T10156] usb 4-1: USB disconnect, device number 34 [ 713.110286][T13250] FAULT_INJECTION: forcing a failure. [ 713.110286][T13250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 713.123666][T13250] CPU: 1 UID: 0 PID: 13250 Comm: syz.3.1950 Not tainted syzkaller #0 PREEMPT(full) [ 713.123693][T13250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 713.123703][T13250] Call Trace: [ 713.123710][T13250] [ 713.123717][T13250] dump_stack_lvl+0x16c/0x1f0 [ 713.123751][T13250] should_fail_ex+0x512/0x640 [ 713.123778][T13250] _copy_from_user+0x2e/0xd0 [ 713.123804][T13250] __x64_sys_sendfile64+0x120/0x220 [ 713.123828][T13250] ? ksys_write+0x1ac/0x250 [ 713.123847][T13250] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 713.123870][T13250] ? xfd_validate_state+0x61/0x180 [ 713.123907][T13250] do_syscall_64+0xcd/0xfa0 [ 713.123938][T13250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.123959][T13250] RIP: 0033:0x7f044dd8efc9 [ 713.123976][T13250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.123996][T13250] RSP: 002b:00007f044ebf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 713.124015][T13250] RAX: ffffffffffffffda RBX: 00007f044dfe6090 RCX: 00007f044dd8efc9 [ 713.124029][T13250] RDX: 00002000000000c0 RSI: 0000000000000008 RDI: 000000000000000a [ 713.124040][T13250] RBP: 00007f044ebf7090 R08: 0000000000000000 R09: 0000000000000000 [ 713.124052][T13250] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000001 [ 713.124064][T13250] R13: 00007f044dfe6128 R14: 00007f044dfe6090 R15: 00007ffe1f2bb6a8 [ 713.124093][T13250] [ 713.276568][ C1] vkms_vblank_simulate: vblank timer overrun [ 713.543245][ T1057] usb 2-1: USB disconnect, device number 36 [ 713.642034][ T1057] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 713.755688][ T1057] cp210x 2-1:0.84: device disconnected [ 714.267926][ T30] audit: type=1400 audit(1761785159.584:828): avc: denied { lock } for pid=13261 comm="syz.3.1955" path="socket:[37936]" dev="sockfs" ino=37936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 714.281896][T13271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1956'. [ 715.083051][ T30] audit: type=1400 audit(1761785160.394:829): avc: denied { append } for pid=13264 comm="syz.1.1954" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 715.698139][ T30] audit: type=1400 audit(1761785161.014:830): avc: denied { setopt } for pid=13287 comm="syz.3.1962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 716.346827][T13291] syzkaller1: entered promiscuous mode [ 716.354026][T13291] syzkaller1: entered allmulticast mode [ 716.680292][ T30] audit: type=1400 audit(1761785161.994:831): avc: denied { bind } for pid=13299 comm="syz.1.1963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 718.291571][T13328] sd 0:0:1:0: PR command failed: 1026 [ 718.297184][T13328] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 718.304144][T13328] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 718.585679][T13325] comedi: No check for data length of config insn id 4 is implemented [ 718.590718][T13331] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 718.621050][T13325] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 718.630719][T13325] comedi: Assuming n=47787 is correct [ 719.084646][ T30] audit: type=1400 audit(1761785164.404:832): avc: denied { setattr } for pid=13341 comm="syz.3.1976" name="RAW" dev="sockfs" ino=39057 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 719.281102][ T5876] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 719.791067][T10156] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 719.821920][T13353] 8021q: adding VLAN 0 to HW filter on device bond3 [ 719.863531][ T5876] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 12408, setting to 64 [ 719.890519][ T5876] usb 3-1: config 0 interface 0 has no altsetting 0 [ 719.913612][ T5876] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 719.923175][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 720.038348][ T5876] usb 3-1: Product: syz [ 720.043070][ T5876] usb 3-1: Manufacturer: syz [ 720.047797][ T5876] usb 3-1: SerialNumber: syz [ 720.055157][T10156] usb 1-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 720.068640][ T5876] usb 3-1: config 0 descriptor?? [ 720.076736][ T5876] usb 3-1: selecting invalid altsetting 0 [ 720.091742][T10156] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.162431][T10156] usb 1-1: config 0 descriptor?? [ 720.173819][T10156] gspca_main: mars-2.14.0 probing 093a:050f [ 720.291459][ T5876] usb 3-1: USB disconnect, device number 43 [ 720.389392][T13340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.399767][T13340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.472506][T10156] usb 1-1: USB disconnect, device number 38 [ 720.795967][T13368] Cannot find set identified by id 0 to match [ 720.841369][ T30] audit: type=1400 audit(1761785166.114:833): avc: denied { accept } for pid=13366 comm="syz.3.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 721.910169][T13382] sd 0:0:1:0: PR command failed: 1026 [ 721.916209][T13382] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 721.923564][T13382] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 722.831068][ T890] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 722.861368][T13396] comedi: No check for data length of config insn id 4 is implemented [ 722.869654][T13396] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 722.880321][T13396] comedi: Assuming n=47785 is correct [ 722.991990][ T890] usb 5-1: Using ep0 maxpacket: 8 [ 723.019257][ T890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 723.045249][ T890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 723.077454][ T890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 723.112877][ T890] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 723.123896][ T890] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 723.226040][ T890] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 723.237159][ T890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.249360][ T890] usb 5-1: config 0 descriptor?? [ 723.739902][ T890] usb 5-1: USB disconnect, device number 42 [ 723.816949][T13412] ieee802154 phy0 wpan0: encryption failed: -22 [ 724.314393][T13424] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2000'. [ 724.380444][ T30] audit: type=1400 audit(1761785169.684:834): avc: denied { map } for pid=13423 comm="syz.1.2000" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 724.431130][ T30] audit: type=1400 audit(1761785169.684:835): avc: denied { execute } for pid=13423 comm="syz.1.2000" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 724.606185][ T890] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 724.619321][T13427] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 724.898130][T13433] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 724.912524][ T30] audit: type=1400 audit(1761785170.224:836): avc: denied { ioctl } for pid=13432 comm="syz.3.2004" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 724.941629][T13433] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 724.972681][ T890] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 724.982444][ T890] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 725.001656][ T890] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 725.207421][ T890] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 725.278193][ T30] audit: type=1400 audit(1761785170.594:837): avc: denied { bind } for pid=13439 comm="syz.4.2005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 725.308185][ T890] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 725.404670][ T890] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 725.415352][ T890] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 725.437774][T13446] devpts: Unknown parameter 'tracefs' [ 725.468120][ T890] usb 1-1: Product: syz [ 725.480813][ T890] usb 1-1: Manufacturer: syz [ 726.034563][ T890] cdc_wdm 1-1:1.0: skipping garbage [ 726.044047][ T890] cdc_wdm 1-1:1.0: skipping garbage [ 726.187367][ T890] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 726.313594][ T890] cdc_wdm 1-1:1.0: Unknown control protocol [ 726.387454][ T5876] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 726.529749][ T5876] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 727.529281][ T30] audit: type=1326 audit(1761785172.844:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13465 comm="syz.2.2012" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f845ad8efc9 code=0x0 [ 728.755563][T13474] lo speed is unknown, defaulting to 1000 [ 728.856689][ T5876] usb 1-1: USB disconnect, device number 39 [ 728.878896][T13482] ieee802154 phy0 wpan0: encryption failed: -22 [ 730.582120][T13496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2018'. [ 730.692935][T13500] FAULT_INJECTION: forcing a failure. [ 730.692935][T13500] name failslab, interval 1, probability 0, space 0, times 0 [ 730.776230][T13500] CPU: 0 UID: 0 PID: 13500 Comm: syz.1.2020 Not tainted syzkaller #0 PREEMPT(full) [ 730.776249][T13500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 730.776256][T13500] Call Trace: [ 730.776260][T13500] [ 730.776266][T13500] dump_stack_lvl+0x16c/0x1f0 [ 730.776289][T13500] should_fail_ex+0x512/0x640 [ 730.776303][T13500] ? fs_reclaim_acquire+0xae/0x150 [ 730.776317][T13500] should_failslab+0xc2/0x120 [ 730.776331][T13500] __kmalloc_noprof+0xdd/0x880 [ 730.776347][T13500] ? tomoyo_encode2+0x100/0x3e0 [ 730.776362][T13500] ? tomoyo_encode2+0x100/0x3e0 [ 730.776373][T13500] tomoyo_encode2+0x100/0x3e0 [ 730.776387][T13500] tomoyo_encode+0x29/0x50 [ 730.776398][T13500] tomoyo_realpath_from_path+0x18f/0x6e0 [ 730.776422][T13500] tomoyo_path_number_perm+0x245/0x580 [ 730.776439][T13500] ? tomoyo_path_number_perm+0x237/0x580 [ 730.776457][T13500] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 730.776474][T13500] ? find_held_lock+0x2b/0x80 [ 730.776503][T13500] ? find_held_lock+0x2b/0x80 [ 730.776515][T13500] ? hook_file_ioctl_common+0x145/0x410 [ 730.776533][T13500] ? __fget_files+0x20e/0x3c0 [ 730.776547][T13500] security_file_ioctl+0x9b/0x240 [ 730.776561][T13500] __x64_sys_ioctl+0xb7/0x210 [ 730.776578][T13500] do_syscall_64+0xcd/0xfa0 [ 730.776596][T13500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.776608][T13500] RIP: 0033:0x7fadfab8efc9 [ 730.776617][T13500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 730.776627][T13500] RSP: 002b:00007fadfba60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 730.776639][T13500] RAX: ffffffffffffffda RBX: 00007fadfade5fa0 RCX: 00007fadfab8efc9 [ 730.776646][T13500] RDX: 0000200000000100 RSI: 00000000c034564b RDI: 0000000000000003 [ 730.776653][T13500] RBP: 00007fadfba60090 R08: 0000000000000000 R09: 0000000000000000 [ 730.776660][T13500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 730.776668][T13500] R13: 00007fadfade6038 R14: 00007fadfade5fa0 R15: 00007ffe5ea85978 [ 730.776684][T13500] [ 731.031210][T13500] ERROR: Out of memory at tomoyo_realpath_from_path. [ 731.361111][ T5957] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 732.311007][ T5957] usb 5-1: device descriptor read/64, error -71 [ 732.631054][ T5957] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 733.250445][ T5957] usb 5-1: device descriptor read/64, error -71 [ 733.477225][ T30] audit: type=1400 audit(1761785178.784:839): avc: denied { name_connect } for pid=13514 comm="syz.2.2027" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 733.482451][ T5957] usb usb5-port1: attempt power cycle [ 733.536676][T13518] lo speed is unknown, defaulting to 1000 [ 733.640084][ T30] audit: type=1400 audit(1761785178.954:840): avc: denied { read } for pid=13513 comm="syz.3.2025" path="socket:[39657]" dev="sockfs" ino=39657 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 733.801120][T10261] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 733.835424][T13529] ieee802154 phy0 wpan0: encryption failed: -22 [ 733.899113][ T5883] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 734.080765][T13530] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 734.119661][T10261] usb 2-1: config 0 has no interfaces? [ 734.141062][T13530] overlayfs: missing 'lowerdir' [ 734.144809][T10261] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 734.408327][T10261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.424537][T10261] usb 2-1: Product: syz [ 734.435813][T10261] usb 2-1: Manufacturer: syz [ 734.443416][ T5883] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 734.459854][ T5883] usb 3-1: config 1 has no interface number 0 [ 734.464001][T10261] usb 2-1: SerialNumber: syz [ 734.466621][ T5883] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 734.466654][ T5883] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 734.466680][ T5883] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 734.482159][T10261] usb 2-1: config 0 descriptor?? [ 734.519475][ T5883] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 734.540811][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.549943][ T5883] usb 3-1: Product: syz [ 734.558495][ T5883] usb 3-1: Manufacturer: syz [ 734.563323][ T5883] usb 3-1: SerialNumber: syz [ 734.572512][T13522] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 735.073817][T13516] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 735.274907][ T5883] usb 3-1: No status endpoint found [ 735.360072][T10261] usb 2-1: USB disconnect, device number 37 [ 735.462551][T13541] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 735.470600][T13541] netlink: 'syz.3.2033': attribute type 10 has an invalid length. [ 735.513502][T13541] macvlan0: entered promiscuous mode [ 735.524889][T13541] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 735.706129][T13545] sg_write: data in/out 813332815/457 bytes for SCSI command 0x0-- guessing data in; [ 735.706129][T13545] program syz.0.2031 not setting count and/or reply_len properly [ 735.723559][ C0] vkms_vblank_simulate: vblank timer overrun [ 736.020648][ T5876] usb 3-1: USB disconnect, device number 44 [ 736.813407][T13561] netlink: 'syz.4.2038': attribute type 9 has an invalid length. [ 736.831301][T13561] netlink: 'syz.4.2038': attribute type 6 has an invalid length. [ 736.849052][T13557] input: syz1 as /devices/virtual/input/input41 [ 736.868917][T13567] FAULT_INJECTION: forcing a failure. [ 736.868917][T13567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 736.936169][T13568] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 736.975981][ T5957] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 737.053484][T13567] CPU: 1 UID: 0 PID: 13567 Comm: syz.2.2040 Not tainted syzkaller #0 PREEMPT(full) [ 737.053513][T13567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 737.053526][T13567] Call Trace: [ 737.053533][T13567] [ 737.053541][T13567] dump_stack_lvl+0x16c/0x1f0 [ 737.053576][T13567] should_fail_ex+0x512/0x640 [ 737.053604][T13567] _copy_to_user+0x32/0xd0 [ 737.053632][T13567] simple_read_from_buffer+0xcb/0x170 [ 737.053665][T13567] proc_fail_nth_read+0x197/0x240 [ 737.053691][T13567] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 737.053717][T13567] ? rw_verify_area+0xcf/0x6c0 [ 737.053745][T13567] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 737.053769][T13567] vfs_read+0x1e4/0xcf0 [ 737.053793][T13567] ? __pfx___mutex_lock+0x10/0x10 [ 737.053813][T13567] ? __pfx_vfs_read+0x10/0x10 [ 737.053840][T13567] ? __fget_files+0x20e/0x3c0 [ 737.053883][T13567] ksys_read+0x12a/0x250 [ 737.053901][T13567] ? __pfx_ksys_read+0x10/0x10 [ 737.053921][T13567] ? fput+0x9b/0xd0 [ 737.053950][T13567] do_syscall_64+0xcd/0xfa0 [ 737.053981][T13567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.054002][T13567] RIP: 0033:0x7f845ad8d9dc [ 737.054019][T13567] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 737.054039][T13567] RSP: 002b:00007f845bc8c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 737.054059][T13567] RAX: ffffffffffffffda RBX: 00007f845afe5fa0 RCX: 00007f845ad8d9dc [ 737.054073][T13567] RDX: 000000000000000f RSI: 00007f845bc8c0a0 RDI: 0000000000000006 [ 737.054086][T13567] RBP: 00007f845bc8c090 R08: 0000000000000000 R09: 0000000000000000 [ 737.054098][T13567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 737.054110][T13567] R13: 00007f845afe6038 R14: 00007f845afe5fa0 R15: 00007ffc2173a5d8 [ 737.054141][T13567] [ 737.323064][T13570] serio: Serial port ptm0 [ 737.343638][T13575] openvswitch: netlink: Key type 6160 is out of range max 32 [ 737.366342][ T30] audit: type=1400 audit(1761785182.684:841): avc: denied { name_bind } for pid=13573 comm="syz.0.2044" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 737.413403][ T5957] usb 4-1: Using ep0 maxpacket: 8 [ 737.439269][T13579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=13579 comm=syz.0.2045 [ 737.442148][ T5957] usb 4-1: config 8 has an invalid interface number: 9 but max is 0 [ 737.476776][ T5957] usb 4-1: config 8 has no interface number 0 [ 737.493288][ T5957] usb 4-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=82.ee [ 737.519685][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.538481][ T5957] usb 4-1: Product: syz [ 737.547199][ T5957] usb 4-1: Manufacturer: syz [ 737.563025][ T5957] usb 4-1: SerialNumber: syz [ 737.731098][ T30] audit: type=1400 audit(1761785183.024:842): avc: denied { read } for pid=13578 comm="syz.0.2045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 737.921904][ T30] audit: type=1400 audit(1761785183.204:843): avc: denied { ioctl } for pid=13563 comm="syz.3.2041" path="socket:[39938]" dev="sockfs" ino=39938 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 740.550387][T13587] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 740.833006][ T5957] usb 4-1: Invalid firmware size=18. [ 740.860454][ T5957] usb 4-1: USB disconnect, device number 35 [ 741.300550][T13612] devpts: Unknown parameter 'tracefs' [ 741.417694][ T30] audit: type=1400 audit(1761785186.714:844): avc: denied { mount } for pid=13615 comm="syz.2.2053" name="/" dev="autofs" ino=38799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 741.511029][ T890] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 741.721684][ T890] usb 4-1: config 0 has an invalid interface number: 172 but max is 0 [ 741.730038][ T890] usb 4-1: config 0 has no interface number 0 [ 741.750553][ T890] usb 4-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=83.b1 [ 741.781007][ T890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.789371][ T890] usb 4-1: Product: syz [ 741.821136][ T890] usb 4-1: Manufacturer: syz [ 741.962948][ T890] usb 4-1: SerialNumber: syz [ 742.028162][ T890] usb 4-1: config 0 descriptor?? [ 742.043634][ T890] qmi_wwan 4-1:0.172: bogus CDC Union: master=0, slave=0 [ 742.211164][ T5957] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 742.369683][ T30] audit: type=1400 audit(1761785187.684:845): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 742.396260][ T5957] usb 1-1: unable to get BOS descriptor or descriptor too short [ 742.588011][T13628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2052'. [ 742.821072][ T5957] usb 1-1: config 8 has an invalid interface number: 92 but max is 0 [ 742.829313][ T5957] usb 1-1: config 8 has no interface number 0 [ 742.843901][ T5957] usb 1-1: config 8 interface 92 has no altsetting 0 [ 742.855714][ T5957] usb 1-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=41.17 [ 742.867935][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.876424][ T5957] usb 1-1: Product: syz [ 742.881405][ T5957] usb 1-1: Manufacturer: syz [ 742.886025][ T5957] usb 1-1: SerialNumber: syz [ 742.962340][T13636] mkiss: ax0: crc mode is auto. [ 742.970668][T13636] pim6reg1: entered promiscuous mode [ 742.976205][T13636] pim6reg1: entered allmulticast mode [ 743.110048][ T5957] gspca_main: etoms-2.14.0 probing 102c:6251 [ 743.149423][ T5957] usb 1-1: USB disconnect, device number 40 [ 743.181128][ T5876] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 743.261003][T10261] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 743.331034][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 743.337892][ T5876] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 743.349460][ T5876] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 743.359714][ T5876] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 743.369956][ T5876] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 743.383114][ T5876] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 743.392253][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.422972][T10261] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12336, setting to 64 [ 743.434397][T10261] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 743.443578][T10261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.453883][T10261] usb 5-1: config 0 descriptor?? [ 743.606952][ T5876] usb 2-1: GET_CAPABILITIES returned 0 [ 743.612676][ T5876] usbtmc 2-1:16.0: can't read capabilities [ 743.803362][T10261] ath6kl: Failed to submit usb control message: -71 [ 743.810190][T10261] ath6kl: unable to send the bmi data to the device: -71 [ 743.817532][T10261] ath6kl: Unable to send get target info: -71 [ 743.824996][T10261] ath6kl: Failed to init ath6kl core: -71 [ 743.831855][T10261] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 743.844551][T10261] usb 5-1: USB disconnect, device number 46 [ 744.426593][ T890] qmi_wwan 4-1:0.172: probe with driver qmi_wwan failed with error -22 [ 744.448531][ T890] usb 4-1: USB disconnect, device number 36 [ 744.609929][ T5876] usb 2-1: USB disconnect, device number 38 [ 744.903450][T13663] FAULT_INJECTION: forcing a failure. [ 744.903450][T13663] name failslab, interval 1, probability 0, space 0, times 0 [ 744.917988][T13663] CPU: 1 UID: 0 PID: 13663 Comm: syz.4.2065 Not tainted syzkaller #0 PREEMPT(full) [ 744.918061][T13663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 744.918068][T13663] Call Trace: [ 744.918073][T13663] [ 744.918078][T13663] dump_stack_lvl+0x16c/0x1f0 [ 744.918099][T13663] should_fail_ex+0x512/0x640 [ 744.918113][T13663] ? fs_reclaim_acquire+0xae/0x150 [ 744.918127][T13663] should_failslab+0xc2/0x120 [ 744.918141][T13663] __kmalloc_noprof+0xdd/0x880 [ 744.918156][T13663] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 744.918173][T13663] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 744.918184][T13663] tomoyo_realpath_from_path+0xc2/0x6e0 [ 744.918198][T13663] ? tomoyo_profile+0x47/0x60 [ 744.918214][T13663] tomoyo_path_number_perm+0x245/0x580 [ 744.918231][T13663] ? tomoyo_path_number_perm+0x237/0x580 [ 744.918249][T13663] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 744.918266][T13663] ? find_held_lock+0x2b/0x80 [ 744.918297][T13663] ? find_held_lock+0x2b/0x80 [ 744.918310][T13663] ? hook_file_ioctl_common+0x145/0x410 [ 744.918328][T13663] ? __fget_files+0x20e/0x3c0 [ 744.918342][T13663] security_file_ioctl+0x9b/0x240 [ 744.918356][T13663] __x64_sys_ioctl+0xb7/0x210 [ 744.918373][T13663] do_syscall_64+0xcd/0xfa0 [ 744.918390][T13663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.918402][T13663] RIP: 0033:0x7f25cc18efc9 [ 744.918412][T13663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 744.918423][T13663] RSP: 002b:00007f25cd044038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 744.918434][T13663] RAX: ffffffffffffffda RBX: 00007f25cc3e5fa0 RCX: 00007f25cc18efc9 [ 744.918442][T13663] RDX: 00002000000000c0 RSI: 00000000c018aec0 RDI: 0000000000000004 [ 744.918449][T13663] RBP: 00007f25cd044090 R08: 0000000000000000 R09: 0000000000000000 [ 744.918455][T13663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.918462][T13663] R13: 00007f25cc3e6038 R14: 00007f25cc3e5fa0 R15: 00007ffedcac1198 [ 744.918478][T13663] [ 744.918483][T13663] ERROR: Out of memory at tomoyo_realpath_from_path. [ 745.249772][ T30] audit: type=1400 audit(1761785190.564:846): avc: denied { write } for pid=13668 comm="syz.4.2068" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 745.524174][T13677] FAULT_INJECTION: forcing a failure. [ 745.524174][T13677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 745.537409][T13677] CPU: 1 UID: 0 PID: 13677 Comm: syz.4.2068 Not tainted syzkaller #0 PREEMPT(full) [ 745.537438][T13677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 745.537451][T13677] Call Trace: [ 745.537459][T13677] [ 745.537468][T13677] dump_stack_lvl+0x16c/0x1f0 [ 745.537502][T13677] should_fail_ex+0x512/0x640 [ 745.537531][T13677] _copy_from_user+0x2e/0xd0 [ 745.537559][T13677] memdup_user+0x6b/0xe0 [ 745.537580][T13677] strndup_user+0x78/0xe0 [ 745.537601][T13677] __x64_sys_mount+0x136/0x310 [ 745.537626][T13677] ? __pfx___x64_sys_mount+0x10/0x10 [ 745.537659][T13677] do_syscall_64+0xcd/0xfa0 [ 745.537691][T13677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.537713][T13677] RIP: 0033:0x7f25cc18efc9 [ 745.537730][T13677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.537749][T13677] RSP: 002b:00007f25ccfd1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 745.537769][T13677] RAX: ffffffffffffffda RBX: 00007f25cc3e6180 RCX: 00007f25cc18efc9 [ 745.537783][T13677] RDX: 0000200000000280 RSI: 0000200000000100 RDI: 0000000000000000 [ 745.537796][T13677] RBP: 00007f25ccfd1090 R08: 00002000000002c0 R09: 0000000000000000 [ 745.537809][T13677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.537821][T13677] R13: 00007f25cc3e6218 R14: 00007f25cc3e6180 R15: 00007ffedcac1198 [ 745.537852][T13677] [ 745.707015][T13655] [U] ù [ 745.947399][T13688] input: syz0 as /devices/virtual/input/input42 [ 746.828461][T13696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2074'. [ 747.081065][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.087648][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.071866][T13711] FAULT_INJECTION: forcing a failure. [ 748.071866][T13711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 748.085968][T13711] CPU: 0 UID: 0 PID: 13711 Comm: syz.0.2080 Not tainted syzkaller #0 PREEMPT(full) [ 748.085986][T13711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 748.085993][T13711] Call Trace: [ 748.085997][T13711] [ 748.086001][T13711] dump_stack_lvl+0x16c/0x1f0 [ 748.086031][T13711] should_fail_ex+0x512/0x640 [ 748.086048][T13711] __kvm_read_guest_page+0x186/0x250 [ 748.086066][T13711] kvm_fetch_guest_virt+0x128/0x1a0 [ 748.086084][T13711] __do_insn_fetch_bytes+0x4fa/0x720 [ 748.086099][T13711] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 748.086118][T13711] ? __lock_acquire+0xb8a/0x1c90 [ 748.086148][T13711] ? read_pages+0x8a0/0xc70 [ 748.086173][T13711] ? folio_mark_accessed+0xc1/0xc00 [ 748.086190][T13711] ? __pfx_folio_mark_accessed+0x10/0x10 [ 748.086211][T13711] x86_decode_insn+0xbbb/0x5a70 [ 748.086248][T13711] ? __pfx_x86_decode_insn+0x10/0x10 [ 748.086271][T13711] ? vmx_cache_reg+0x333/0x5e0 [ 748.086287][T13711] ? kvm_register_read_raw+0xe9/0x240 [ 748.086300][T13711] ? init_decode_cache+0xd/0x210 [ 748.086313][T13711] ? init_emulate_ctxt+0x337/0x510 [ 748.086324][T13711] ? bpf_ksym_find+0x127/0x1c0 [ 748.086340][T13711] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 748.086355][T13711] ? __kernel_text_address+0xd/0x40 [ 748.086371][T13711] x86_emulate_instruction+0xa43/0x1b00 [ 748.086389][T13711] handle_ud+0x103/0x280 [ 748.086399][T13711] ? __pfx_handle_ud+0x10/0x10 [ 748.086414][T13711] ? __pfx_nested_vmx_reflect_vmexit+0x10/0x10 [ 748.086428][T13711] handle_exception_nmi+0x856/0x1750 [ 748.086443][T13711] ? __pfx_handle_exception_nmi+0x10/0x10 [ 748.086454][T13711] vmx_handle_exit+0x14bf/0x1c00 [ 748.086470][T13711] vcpu_run+0x33e1/0x54d0 [ 748.086488][T13711] ? __pfx_vcpu_run+0x10/0x10 [ 748.086508][T13711] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 748.086522][T13711] ? __local_bh_enable_ip+0xa4/0x120 [ 748.086539][T13711] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1970 [ 748.086550][T13711] kvm_arch_vcpu_ioctl_run+0x1023/0x1970 [ 748.086567][T13711] kvm_vcpu_ioctl+0x5eb/0x1690 [ 748.086588][T13711] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 748.086604][T13711] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 748.086620][T13711] ? do_vfs_ioctl+0x128/0x14f0 [ 748.086636][T13711] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 748.086651][T13711] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 748.086671][T13711] ? hook_file_ioctl_common+0x145/0x410 [ 748.086690][T13711] ? selinux_file_ioctl+0x180/0x270 [ 748.086701][T13711] ? selinux_file_ioctl+0xb4/0x270 [ 748.086715][T13711] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 748.086730][T13711] __x64_sys_ioctl+0x18e/0x210 [ 748.086746][T13711] do_syscall_64+0xcd/0xfa0 [ 748.086765][T13711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.086776][T13711] RIP: 0033:0x7f42a6f8efc9 [ 748.086787][T13711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.086797][T13711] RSP: 002b:00007f42a7e10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 748.086809][T13711] RAX: ffffffffffffffda RBX: 00007f42a71e5fa0 RCX: 00007f42a6f8efc9 [ 748.086817][T13711] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 748.086823][T13711] RBP: 00007f42a7e10090 R08: 0000000000000000 R09: 0000000000000000 [ 748.086830][T13711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.086836][T13711] R13: 00007f42a71e6038 R14: 00007f42a71e5fa0 R15: 00007ffcb447fb98 [ 748.086853][T13711] [ 748.531083][ T890] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 748.710962][ T890] usb 5-1: Using ep0 maxpacket: 16 [ 748.729959][ T890] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 748.739151][ T890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.748723][ T890] usb 5-1: config 0 descriptor?? [ 748.759267][ T890] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 749.463006][T13722] sd 0:0:1:0: PR command failed: 1026 [ 749.468442][T13722] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 749.477360][T13722] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 749.961290][ T5876] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 750.605388][ T890] gspca_sonixj: reg_w1 err -110 [ 750.631248][ T890] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 750.786716][ T5876] usb 2-1: config 0 has no interfaces? [ 750.865297][ T5876] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 750.875887][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.017395][ T5876] usb 2-1: Product: syz [ 751.067527][ T5876] usb 2-1: Manufacturer: syz [ 751.492842][ T5876] usb 2-1: SerialNumber: syz [ 751.609689][ T5876] usb 2-1: config 0 descriptor?? [ 752.659407][ T5957] usb 5-1: USB disconnect, device number 47 [ 753.204535][ T5876] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 753.214541][T13779] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 753.226094][T13783] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2094'. [ 753.245649][ T30] audit: type=1400 audit(1761785198.534:847): avc: denied { ioctl } for pid=13778 comm="syz.0.2096" path="net:[4026532946]" dev="nsfs" ino=4026532946 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 753.295014][T13783] netlink: 'syz.4.2094': attribute type 21 has an invalid length. [ 753.303032][T13783] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2094'. [ 753.316081][T13783] netlink: 'syz.4.2094': attribute type 4 has an invalid length. [ 753.324149][ T30] audit: type=1400 audit(1761785198.544:848): avc: denied { create } for pid=13774 comm="syz.4.2094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 753.348933][T13783] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2094'. [ 753.375164][T13784] batadv1: entered promiscuous mode [ 753.387871][T13784] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 753.463298][ T5876] usb 3-1: Using ep0 maxpacket: 16 [ 753.516213][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 753.538424][ T5957] usb 2-1: USB disconnect, device number 39 [ 753.544576][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 753.557240][ T5876] usb 3-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 753.566514][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.575744][ T5876] usb 3-1: Product: syz [ 753.579930][ T5876] usb 3-1: Manufacturer: syz [ 753.585470][ T5876] usb 3-1: SerialNumber: syz [ 753.606254][ T5876] usb 3-1: config 0 descriptor?? [ 753.733386][ T5876] kobil_sct 3-1:0.0: KOBIL USB smart card terminal converter detected [ 753.766027][ T5876] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 755.171194][ T1057] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 755.371845][ T1057] usb 1-1: Using ep0 maxpacket: 8 [ 755.867686][ T5876] usb 3-1: USB disconnect, device number 45 [ 755.875756][ T5876] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 755.892187][ T5876] kobil_sct 3-1:0.0: device disconnected [ 755.915426][ T1057] usb 1-1: config 252 has an invalid interface number: 117 but max is 0 [ 755.926252][ T1057] usb 1-1: config 252 has no interface number 0 [ 755.935824][ T1057] usb 1-1: config 252 interface 117 has no altsetting 0 [ 755.948571][ T1057] usb 1-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice=82.4f [ 755.960813][ T1057] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.061585][ T1057] usb 1-1: Product: syz [ 756.066003][ T1057] usb 1-1: Manufacturer: syz [ 756.075724][ T1057] usb 1-1: SerialNumber: syz [ 757.812985][T13825] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 757.921056][ T30] audit: type=1400 audit(1761785203.204:849): avc: denied { ioctl } for pid=13821 comm="syz.3.2106" path="socket:[41455]" dev="sockfs" ino=41455 ioctlcmd=0x3b89 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 759.198378][T13839] sd 0:0:1:0: PR command failed: 1026 [ 759.205585][T13839] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 759.212914][T13839] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 759.316531][T13841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2107'. [ 759.340585][T13841] : entered promiscuous mode [ 759.398034][ T1057] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:252.117/input/input43 [ 759.512377][ T5172] bcm5974 1-1:252.117: could not read from device [ 759.586489][ T5172] bcm5974 1-1:252.117: could not read from device [ 759.593731][ T1057] usb 1-1: USB disconnect, device number 41 [ 759.628001][ T5172] bcm5974 1-1:252.117: could not read from device [ 759.682464][T13847] kvm: kvm [13845]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xffffffff [ 760.451013][ T1057] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 761.051167][T10156] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 761.082419][ T1057] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.093520][ T1057] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 761.104893][ T1057] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 761.118770][ T1057] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 761.152126][ T1057] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.203981][ T1057] usb 1-1: config 0 descriptor?? [ 761.221181][T10156] usb 4-1: Using ep0 maxpacket: 32 [ 761.228541][T10156] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 761.241356][T10156] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 761.793726][T13851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.802468][T13851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.822603][ T1057] usbhid 1-1:0.0: can't add hid device: -71 [ 761.837766][ T1057] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 761.847235][T10156] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 761.864489][ T1057] usb 1-1: USB disconnect, device number 42 [ 761.874391][T13866] binder: BINDER_SET_CONTEXT_MGR already set [ 761.880812][T13866] binder: 13865:13866 ioctl 4018620d 200000004a80 returned -16 [ 761.889050][T10156] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 761.902420][T10156] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.913333][T10156] usb 4-1: config 0 descriptor?? [ 761.918932][T13855] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 761.970136][T10156] hub 4-1:0.0: USB hub found [ 762.575134][T13875] ieee802154 phy0 wpan0: encryption failed: -22 [ 762.605443][T10156] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 763.093420][T10261] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 763.235150][T13882] sd 0:0:1:0: PR command failed: 1026 [ 763.241229][T13882] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 763.248657][T13882] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 763.308706][T10156] usbhid 4-1:0.0: can't add hid device: -71 [ 763.321219][T10156] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 763.353003][T10156] usb 4-1: USB disconnect, device number 37 [ 763.431067][T10261] usb 2-1: device descriptor read/64, error -71 [ 763.726081][T13890] MINIX-fs: unable to read superblock [ 763.757726][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2123'. [ 763.767091][T13890] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2123'. [ 763.944791][T10261] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 764.307473][T13891] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 764.379964][T13891] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 764.512506][T10261] usb 2-1: device descriptor read/64, error -71 [ 764.597407][T13891] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 764.621344][T10261] usb usb2-port1: attempt power cycle [ 764.649705][T13891] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 764.824988][T13891] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 764.903730][T13891] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 764.939696][T13891] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 765.032571][T10261] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 765.796381][T13891] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 765.911926][T10261] usb 2-1: device descriptor read/8, error -71 [ 766.106029][T13913] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2128'. [ 766.411144][T10261] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 766.431777][T10261] usb 2-1: device descriptor read/8, error -71 [ 766.609601][T10261] usb usb2-port1: unable to enumerate USB device [ 767.563937][ T890] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 767.893917][ T890] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 767.902732][ T890] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 253 [ 767.924513][ T890] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 767.950651][ T890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.283777][T13932] sd 0:0:1:0: PR command failed: 1026 [ 768.289781][T13932] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 768.297337][T13932] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 768.373904][ T890] usb 3-1: config 0 descriptor?? [ 768.520010][T10261] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 769.141419][T13937] dvmrp0: entered allmulticast mode [ 769.160401][T13937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2135'. [ 769.534570][T10098] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 769.611039][T10261] usb 5-1: device descriptor read/64, error -71 [ 769.691119][T10098] usb 2-1: device descriptor read/64, error -71 [ 770.281671][ T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 770.341398][T10098] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 770.360048][ T30] audit: type=1326 audit(1761785215.674:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13942 comm="syz.0.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42a6f8efc9 code=0x7ffc0000 [ 770.445648][ T30] audit: type=1326 audit(1761785215.674:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13942 comm="syz.0.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f42a6f8efc9 code=0x7ffc0000 [ 770.471906][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 770.480035][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 770.490512][ T30] audit: type=1326 audit(1761785215.674:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13942 comm="syz.0.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42a6f8efc9 code=0x7ffc0000 [ 770.525331][ T10] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 770.534655][T10098] usb 2-1: device descriptor read/64, error -71 [ 770.541998][ T10] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 770.550866][ T10] usb 4-1: Product: syz [ 770.557004][ T10] usb 4-1: Manufacturer: syz [ 770.562488][ T30] audit: type=1326 audit(1761785215.674:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13942 comm="syz.0.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42a6f8efc9 code=0x7ffc0000 [ 770.596074][ T10] usb 4-1: SerialNumber: syz [ 770.620246][ T10] usb 4-1: config 0 descriptor?? [ 770.632286][ T30] audit: type=1326 audit(1761785215.674:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13942 comm="syz.0.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f42a6f8efc9 code=0x7ffc0000 [ 770.656479][T13937] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 770.665451][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 771.015716][T10098] usb usb2-port1: attempt power cycle [ 771.021345][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 771.035005][ T30] audit: type=1326 audit(1761785215.674:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13942 comm="syz.0.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42a6f8efc9 code=0x7ffc0000 [ 771.152633][ T30] audit: type=1326 audit(1761785215.674:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13942 comm="syz.0.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f42a6f8efc9 code=0x7ffc0000 [ 771.177312][ T30] audit: type=1326 audit(1761785215.674:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13942 comm="syz.0.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42a6f8efc9 code=0x7ffc0000 [ 771.220809][ T10] usb 4-1: USB disconnect, device number 38 [ 771.287360][ T890] usb 3-1: string descriptor 0 read error: -71 [ 771.297557][ T890] usb 3-1: USB disconnect, device number 46 [ 771.358675][ T30] audit: type=1326 audit(1761785215.674:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13942 comm="syz.0.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42a6f8efc9 code=0x7ffc0000 [ 771.403754][ T30] audit: type=1400 audit(1761785215.884:859): avc: denied { write } for pid=13946 comm="syz.4.2137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 771.510204][T10098] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 771.671167][T13957] program syz.3.2139 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 771.733575][T10098] usb 2-1: device not accepting address 46, error -71 [ 772.247556][T13966] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 773.098847][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 773.153141][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 773.239642][ T890] libceph: connect (1)[b::]:6789 error -101 [ 773.245839][ T890] libceph: mon0 (1)[b::]:6789 connect error [ 773.321802][T13953] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 773.327980][T10261] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 773.441197][T10098] libceph: connect (1)[c::]:6789 error -101 [ 773.447476][T10098] libceph: mon0 (1)[c::]:6789 connect error [ 773.493636][T10261] usb 5-1: config 0 has an invalid descriptor of length 218, skipping remainder of the config [ 773.513938][T10098] libceph: connect (1)[b::]:6789 error -101 [ 773.525629][T10098] libceph: mon0 (1)[b::]:6789 connect error [ 773.539008][T10261] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 773.566226][T13972] ceph: No mds server is up or the cluster is laggy [ 773.573587][T13971] ceph: No mds server is up or the cluster is laggy [ 773.618670][T10261] usb 5-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 773.664038][T10261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.511433][T10261] usb 5-1: config 0 descriptor?? [ 774.536702][T10261] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 775.055465][ T890] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 775.281032][ T890] usb 1-1: Using ep0 maxpacket: 32 [ 775.298564][ T890] usb 1-1: config 0 has an invalid interface number: 217 but max is 0 [ 775.306932][ T890] usb 1-1: config 0 has no interface number 0 [ 775.322551][ T890] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 775.332672][ T890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.353723][ T890] usb 1-1: Product: syz [ 775.366174][ T890] usb 1-1: Manufacturer: syz [ 775.370801][ T890] usb 1-1: SerialNumber: syz [ 775.389145][ T890] usb 1-1: config 0 descriptor?? [ 775.396413][ T890] ftdi_sio 1-1:0.217: FTDI USB Serial Device converter detected [ 775.401120][ T52] Bluetooth: hci0: command tx timeout [ 775.411709][ T890] usb 1-1: Detected SIO [ 775.419077][ T890] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 775.590971][T10261] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 775.616222][ T890] usb 1-1: USB disconnect, device number 43 [ 775.633380][ T890] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 775.643859][ T890] ftdi_sio 1-1:0.217: device disconnected [ 775.761353][T10261] usb 2-1: Using ep0 maxpacket: 32 [ 775.767697][T10261] usb 2-1: no configurations [ 775.772369][T10261] usb 2-1: can't read configurations, error -22 [ 775.820960][T10156] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 775.911047][T10261] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 775.980994][T10156] usb 4-1: Using ep0 maxpacket: 8 [ 775.992720][T10156] usb 4-1: unable to get BOS descriptor or descriptor too short [ 776.005315][T10156] usb 4-1: language id specifier not provided by device, defaulting to English [ 776.016632][T10156] usb 4-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 776.026146][T10156] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.034498][T10156] usb 4-1: Product: ј [ 776.038963][T10156] usb 4-1: Manufacturer: І [ 776.043955][T10156] usb 4-1: SerialNumber: Ї [ 776.081170][T10261] usb 2-1: Using ep0 maxpacket: 32 [ 776.086891][T10261] usb 2-1: no configurations [ 776.091694][T10261] usb 2-1: can't read configurations, error -22 [ 776.099615][T10261] usb usb2-port1: attempt power cycle [ 776.165801][ T890] usb 5-1: USB disconnect, device number 50 [ 776.451681][T10156] usb 4-1: selecting invalid altsetting 1 [ 776.461884][T10156] catc 4-1:8.0: Can't set altsetting 1. [ 776.467538][T10156] catc 4-1:8.0: probe with driver catc failed with error -5 [ 776.478278][T10156] usb 4-1: USB disconnect, device number 39 [ 776.931779][T10261] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 776.961616][T10261] usb 2-1: Using ep0 maxpacket: 32 [ 776.974207][T10261] usb 2-1: no configurations [ 776.979476][T10261] usb 2-1: can't read configurations, error -22 [ 777.311045][T10261] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 777.427232][T10261] usb 2-1: Using ep0 maxpacket: 32 [ 777.436897][T10261] usb 2-1: no configurations [ 777.443990][T10261] usb 2-1: can't read configurations, error -22 [ 777.464559][T10261] usb usb2-port1: unable to enumerate USB device [ 778.569306][T14030] lo speed is unknown, defaulting to 1000 [ 778.674573][T14033] overlayfs: missing 'lowerdir' [ 779.191063][ T1057] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 779.217758][T14038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2164'. [ 779.361025][T10098] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 779.366084][ T1057] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 779.379124][ T1057] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.447900][ T1057] usb 2-1: config 0 descriptor?? [ 779.455918][ T1057] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 779.565992][T10098] usb 4-1: config 0 has no interfaces? [ 779.583282][T10098] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 779.600532][T10098] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.751741][T10098] usb 4-1: Product: syz [ 779.757111][T10098] usb 4-1: Manufacturer: syz [ 779.757819][ T30] audit: type=1400 audit(1761785224.984:860): avc: denied { getopt } for pid=14049 comm="syz.4.2169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 779.782234][ C1] vkms_vblank_simulate: vblank timer overrun [ 779.782500][T10098] usb 4-1: SerialNumber: syz [ 780.063626][ T30] audit: type=1400 audit(1761785224.984:861): avc: denied { ioctl } for pid=14049 comm="syz.4.2169" path="socket:[41824]" dev="sockfs" ino=41824 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 780.071313][T10098] usb 4-1: config 0 descriptor?? [ 780.088579][ C1] vkms_vblank_simulate: vblank timer overrun [ 780.268719][ T1057] gp8psk: usb in 128 operation failed. [ 780.481560][ T1057] gp8psk: usb in 137 operation failed. [ 780.487103][ T1057] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 780.504831][ T1057] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 780.611484][T14067] tmpfs: Bad value for 'mpol' [ 780.617758][T10156] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 780.921277][ T1057] usb 2-1: USB disconnect, device number 52 [ 781.062689][T10156] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 781.105389][T10156] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.131628][T10156] usb 1-1: config 0 has no interface number 0 [ 781.140164][T10156] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 781.151679][T10156] usb 1-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 781.219439][T10156] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 781.251871][T10156] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.280384][T10156] usb 1-1: Product: syz [ 781.291026][T10156] usb 1-1: Manufacturer: syz [ 781.308293][T10156] usb 1-1: SerialNumber: syz [ 781.320322][T10156] usb 1-1: config 0 descriptor?? [ 781.326222][T14064] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 781.339608][T10156] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 781.472062][T10156] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 781.493059][T10156] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 781.511006][T10098] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 781.543819][T10156] usb 1-1: USB disconnect, device number 44 [ 781.561879][T10156] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 781.596886][T10156] cyberjack 1-1:0.69: device disconnected [ 781.666513][T10098] usb 5-1: Using ep0 maxpacket: 32 [ 781.685116][T10098] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 781.707137][T10098] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 781.733635][T10098] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 781.753091][T10098] usb 5-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 781.796191][T10098] usb 5-1: Product: syz [ 781.800669][T10098] usb 5-1: Manufacturer: syz [ 781.805603][T10098] usb 5-1: SerialNumber: syz [ 781.816483][T10098] usb 5-1: config 0 descriptor?? [ 782.023905][T10098] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 782.874233][T10098] usb 4-1: USB disconnect, device number 40 [ 782.910537][ T30] audit: type=1400 audit(1761785228.224:862): avc: denied { bind } for pid=14068 comm="syz.4.2174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 783.021969][T14085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2179'. [ 783.059903][T14086] mmap: syz.2.2181 (14086): VmData 37597184 exceed data ulimit 1. Update limits or use boot option ignore_rlimit_data. [ 783.079176][ T890] usb 5-1: USB disconnect, device number 51 [ 783.091685][ T1098] usb 5-1: Failed to submit usb control message: -71 [ 783.100449][ T1098] usb 5-1: unable to send the bmi data to the device: -71 [ 783.138793][ T1098] usb 5-1: unable to get target info from device [ 783.153717][ T1098] usb 5-1: could not get target info (-71) [ 783.211156][ T1098] usb 5-1: could not probe fw (-71) [ 783.553642][ T30] audit: type=1400 audit(1761785228.714:863): avc: denied { connect } for pid=14090 comm="syz.3.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 784.265019][ T5957] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 784.823253][ T1057] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 785.098547][ T5957] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 785.110990][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.119145][ T5957] usb 3-1: Product: syz [ 785.128533][ T5957] usb 3-1: Manufacturer: syz [ 785.134355][ T5957] usb 3-1: SerialNumber: syz [ 785.251018][ T1057] usb 1-1: Using ep0 maxpacket: 8 [ 785.262425][ T1057] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 785.275237][T14110] FAULT_INJECTION: forcing a failure. [ 785.275237][T14110] name failslab, interval 1, probability 0, space 0, times 0 [ 785.288100][ T1057] usb 1-1: config 0 interface 0 has no altsetting 0 [ 785.297687][ T1057] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 785.307049][ T1057] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.324404][ T1057] usb 1-1: Product: syz [ 785.333209][ T1057] usb 1-1: Manufacturer: syz [ 785.342206][T14110] CPU: 1 UID: 0 PID: 14110 Comm: syz.4.2187 Not tainted syzkaller #0 PREEMPT(full) [ 785.342234][T14110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 785.342246][T14110] Call Trace: [ 785.342252][T14110] [ 785.342260][T14110] dump_stack_lvl+0x16c/0x1f0 [ 785.342293][T14110] should_fail_ex+0x512/0x640 [ 785.342318][T14110] ? fs_reclaim_acquire+0xae/0x150 [ 785.342343][T14110] should_failslab+0xc2/0x120 [ 785.342367][T14110] __kmalloc_noprof+0xdd/0x880 [ 785.342395][T14110] ? tomoyo_encode2+0x100/0x3e0 [ 785.342422][T14110] ? tomoyo_encode2+0x100/0x3e0 [ 785.342443][T14110] tomoyo_encode2+0x100/0x3e0 [ 785.342470][T14110] tomoyo_encode+0x29/0x50 [ 785.342491][T14110] tomoyo_realpath_from_path+0x18f/0x6e0 [ 785.342523][T14110] tomoyo_path_number_perm+0x245/0x580 [ 785.342557][T14110] ? tomoyo_path_number_perm+0x237/0x580 [ 785.342591][T14110] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 785.342623][T14110] ? find_held_lock+0x2b/0x80 [ 785.342680][T14110] ? find_held_lock+0x2b/0x80 [ 785.342704][T14110] ? hook_file_ioctl_common+0x145/0x410 [ 785.342737][T14110] ? __fget_files+0x20e/0x3c0 [ 785.342762][T14110] security_file_ioctl+0x9b/0x240 [ 785.342787][T14110] __x64_sys_ioctl+0xb7/0x210 [ 785.342816][T14110] do_syscall_64+0xcd/0xfa0 [ 785.342848][T14110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.342869][T14110] RIP: 0033:0x7f25cc18efc9 [ 785.342886][T14110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 785.342905][T14110] RSP: 002b:00007f25cd044038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 785.342924][T14110] RAX: ffffffffffffffda RBX: 00007f25cc3e5fa0 RCX: 00007f25cc18efc9 [ 785.342939][T14110] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 785.342951][T14110] RBP: 00007f25cd044090 R08: 0000000000000000 R09: 0000000000000000 [ 785.342962][T14110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.342974][T14110] R13: 00007f25cc3e6038 R14: 00007f25cc3e5fa0 R15: 00007ffedcac1198 [ 785.343005][T14110] [ 785.550829][ C1] vkms_vblank_simulate: vblank timer overrun [ 785.557683][T14110] ERROR: Out of memory at tomoyo_realpath_from_path. [ 785.651851][ T1057] usb 1-1: SerialNumber: syz [ 785.660085][ T1057] usb 1-1: config 0 descriptor?? [ 785.670817][ T1057] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 785.855152][ T5957] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 785.867918][ T5957] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 785.881008][ T1057] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 785.903080][ T1057] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 785.943002][ T1057] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 786.421968][ T1057] usb 1-1: USB disconnect, device number 45 [ 787.057431][T14130] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2192'. [ 787.138312][ T30] audit: type=1326 audit(1761785232.454:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14132 comm="syz.1.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfab8efc9 code=0x7ffc0000 [ 787.281283][ T30] audit: type=1326 audit(1761785232.454:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14132 comm="syz.1.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fadfab8efc9 code=0x7ffc0000 [ 787.331459][ T30] audit: type=1326 audit(1761785232.454:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14132 comm="syz.1.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfab8efc9 code=0x7ffc0000 [ 787.383589][ T30] audit: type=1326 audit(1761785232.454:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14132 comm="syz.1.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfab8efc9 code=0x7ffc0000 [ 788.041027][ T5957] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 788.059075][ T5957] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 788.202170][ T5957] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 788.235126][ T5957] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 788.263299][ T5957] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 788.372678][ T5957] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 788.436729][ T5957] usb 3-1: USB disconnect, device number 47 [ 788.783188][T14130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 788.802591][T14130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 788.870496][T14130] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 788.910113][T14130] bond0 (unregistering): Released all slaves [ 789.536645][T14153] smc: adding net device bond0 with user defined pnetid SYZ0 [ 789.551291][T10098] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 789.713799][T10098] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 789.727749][T10098] usb 2-1: config 0 has no interface number 0 [ 789.743035][T10098] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 789.757358][T10098] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 789.788020][T10098] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 789.954195][T10098] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.982546][T10098] usb 2-1: config 0 descriptor?? [ 790.570998][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 790.586129][T14151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 790.616588][T14151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.731063][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 790.799346][ T10] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 790.831648][ T10] usb 4-1: config 0 has no interface number 0 [ 790.848569][ T30] audit: type=1400 audit(1761785236.164:868): avc: denied { map } for pid=14167 comm="syz.4.2202" path="socket:[43092]" dev="sockfs" ino=43092 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 790.874115][ T10] usb 4-1: New USB device found, idVendor=1bbb, idProduct=011e, bcdDevice=c4.e8 [ 790.902963][T10098] input: HID 04d9:a055 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:04D9:A055.0018/input/input44 [ 790.914613][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.934821][ T10] usb 4-1: Product: syz [ 790.944937][ T10] usb 4-1: Manufacturer: syz [ 790.955107][ T10] usb 4-1: SerialNumber: syz [ 791.002393][ T10] usb 4-1: config 0 descriptor?? [ 791.043070][ T30] audit: type=1400 audit(1761785236.194:869): avc: denied { read accept } for pid=14167 comm="syz.4.2202" path="socket:[43092]" dev="sockfs" ino=43092 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 791.088779][T10098] holtek_kbd 0003:04D9:A055.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.1-1/input1 [ 791.101291][ T30] audit: type=1400 audit(1761785236.404:870): avc: denied { read } for pid=14172 comm="syz.2.2204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 791.145622][T10098] usb 2-1: USB disconnect, device number 53 [ 791.788150][T14157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.917901][T14157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.949202][T10156] usb 4-1: USB disconnect, device number 41 [ 793.939066][T14186] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 794.164470][T14195] comedi: No check for data length of config insn id 4 is implemented [ 794.179203][ T30] audit: type=1400 audit(1761785239.494:871): avc: denied { relabelto } for pid=14183 comm="syz.2.2206" name="cgroup.procs" dev="cgroup" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 794.733753][T14195] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 794.749164][ T30] audit: type=1400 audit(1761785240.054:872): avc: denied { associate } for pid=14183 comm="syz.2.2206" name="cgroup.procs" dev="cgroup" ino=236 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netutils_exec_t:s0" [ 794.791971][T14195] comedi: Assuming n=47775 is correct [ 795.044145][T14204] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 795.747500][T14209] tipc: New replicast peer: 255.255.255.255 [ 795.754572][T14209] tipc: Enabled bearer , priority 10 [ 796.705909][T14232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2220'. [ 796.709139][T14233] comedi: No check for data length of config insn id 4 is implemented [ 796.762845][T14233] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 796.800947][T14233] comedi: Assuming n=47774 is correct [ 796.872596][ T1057] tipc: Node number set to 2774921122 [ 796.923441][T14235] openvswitch: netlink: Actions may not be safe on all matching packets [ 797.161648][T14236] mkiss: ax0: crc mode is auto. [ 797.643767][T14249] fuse: Bad value for 'fd' [ 797.681882][ T10] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 797.881022][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 798.015548][ T10] usb 2-1: config 4 has an invalid interface number: 130 but max is 1 [ 799.069409][ T10] usb 2-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 799.090959][ T10] usb 2-1: config 4 has an invalid interface number: 205 but max is 1 [ 799.099163][ T10] usb 2-1: config 4 has an invalid interface number: 8 but max is 1 [ 799.114107][ T10] usb 2-1: config 4 has 3 interfaces, different from the descriptor's value: 2 [ 799.123193][ T10] usb 2-1: config 4 has no interface number 0 [ 799.129276][ T10] usb 2-1: config 4 has no interface number 1 [ 799.135475][ T10] usb 2-1: config 4 has no interface number 2 [ 799.148061][ T10] usb 2-1: config 4 interface 130 altsetting 253 has an invalid descriptor for endpoint zero, skipping [ 799.159538][ T10] usb 2-1: config 4 interface 130 altsetting 253 has an invalid descriptor for endpoint zero, skipping [ 799.191074][ T10] usb 2-1: config 4 interface 130 altsetting 253 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 799.231078][ T1057] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 799.271583][ T10] usb 2-1: config 4 interface 130 altsetting 253 bulk endpoint 0xB has invalid maxpacket 1023 [ 799.319090][ T10] usb 2-1: config 4 interface 130 altsetting 253 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 799.345447][ T10] usb 2-1: config 4 interface 130 altsetting 253 endpoint 0x2 has an invalid bInterval 138, changing to 11 [ 799.382587][ T1057] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 799.390723][ T1057] usb 4-1: config 0 has no interface number 0 [ 799.398735][ T1057] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 799.408122][ T1057] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.416412][ T1057] usb 4-1: Product: syz [ 799.424397][ T10] usb 2-1: config 4 interface 130 altsetting 253 has a duplicate endpoint with address 0x1, skipping [ 799.435588][ T1057] usb 4-1: Manufacturer: syz [ 799.440189][ T1057] usb 4-1: SerialNumber: syz [ 799.457496][ T1057] usb 4-1: config 0 descriptor?? [ 799.476955][ T10] usb 2-1: config 4 interface 130 altsetting 253 has a duplicate endpoint with address 0xB, skipping [ 799.507421][ T10] usb 2-1: config 4 interface 205 altsetting 107 has an invalid descriptor for endpoint zero, skipping [ 799.527701][ T10] usb 2-1: config 4 interface 205 altsetting 107 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 799.578308][ T10] usb 2-1: too many endpoints for config 4 interface 8 altsetting 219: 101, using maximum allowed: 30 [ 799.619945][ T10] usb 2-1: config 4 interface 8 altsetting 219 has a duplicate endpoint with address 0xB, skipping [ 799.637637][ T10] usb 2-1: config 4 interface 8 altsetting 219 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 799.650705][ T10] usb 2-1: config 4 interface 8 altsetting 219 has a duplicate endpoint with address 0x3, skipping [ 799.663255][ T10] usb 2-1: config 4 interface 8 altsetting 219 has 3 endpoint descriptors, different from the interface descriptor's value: 101 [ 799.681564][ T10] usb 2-1: config 4 interface 130 has no altsetting 0 [ 799.688605][ T10] usb 2-1: config 4 interface 205 has no altsetting 0 [ 799.699569][ T10] usb 2-1: config 4 interface 8 has no altsetting 0 [ 799.703110][ T5957] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 799.719693][ T10] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice=5a.db [ 799.735936][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.754232][T14268] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 799.754232][T14268] program syz.3.2228 not setting count and/or reply_len properly [ 799.791200][ T10] usb 2-1: Product: syz [ 799.795579][ T10] usb 2-1: Manufacturer: syz [ 799.943827][ T10] usb 2-1: SerialNumber: syz [ 799.993175][ T5957] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 800.363136][ T10] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 800.368358][ T30] audit: type=1800 audit(1761785245.464:873): pid=14271 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2231" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 800.401648][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.404092][ T10] usb 2-1: no configuration chosen from 1 choice [ 800.440106][ T5957] usb 3-1: config 0 descriptor?? [ 800.480209][ T10] usb 2-1: USB disconnect, device number 54 [ 800.511915][ T1057] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 800.776286][ T5957] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 801.008735][ T5957] [drm:udl_init] *ERROR* Selecting channel failed [ 801.895419][T14273] overlayfs: failed to resolve './file0': -2 [ 801.980758][ T5957] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 801.992484][ T5957] [drm] Initialized udl on minor 2 [ 802.018825][ T5957] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 802.052093][T14289] ubi31: attaching mtd0 [ 802.080119][ T5957] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 802.451896][ T30] audit: type=1326 audit(1761785247.464:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14287 comm="syz.2.2236" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f845ad8efc9 code=0x0 [ 802.475663][T14289] ubi31: scanning is finished [ 802.486912][T14289] ubi31: empty MTD device detected [ 802.501369][ T5957] usb 3-1: USB disconnect, device number 48 [ 802.514541][T10156] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 802.559472][T10156] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 803.051207][T10156] usb 4-1: USB disconnect, device number 42 [ 803.159807][T14289] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 803.403100][T14296] ubi31: attaching mtd0 [ 803.410630][T14296] ubi31 error: ubi_attach_mtd_dev: bad VID header (1761785248) or data offsets (1761785312) [ 803.550573][T10156] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 803.645116][T14302] virtio-fs: tag not found [ 803.766908][T10156] usb 4-1: unable to get BOS descriptor or descriptor too short [ 803.807645][T10156] usb 4-1: not running at top speed; connect to a high speed hub [ 803.821966][T10156] usb 4-1: config 4 has an invalid interface number: 81 but max is 0 [ 803.830609][T10156] usb 4-1: config 4 has an invalid interface number: 19 but max is 0 [ 803.882324][ T30] audit: type=1400 audit(1761785249.136:875): avc: denied { setopt } for pid=14303 comm="syz.1.2241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 803.951205][T10156] usb 4-1: config 4 has an invalid descriptor of length 184, skipping remainder of the config [ 803.962162][T10156] usb 4-1: config 4 has 2 interfaces, different from the descriptor's value: 1 [ 803.974884][T10156] usb 4-1: config 4 has no interface number 0 [ 804.195455][T10156] usb 4-1: config 4 has no interface number 1 [ 804.211517][T10156] usb 4-1: config 4 interface 81 altsetting 3 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 804.256377][T10156] usb 4-1: config 4 interface 81 altsetting 3 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 804.276486][T10156] usb 4-1: config 4 interface 81 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 804.394897][T10156] usb 4-1: too many endpoints for config 4 interface 19 altsetting 161: 105, using maximum allowed: 30 [ 804.406378][T10156] usb 4-1: config 4 interface 19 altsetting 161 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 804.420269][T10156] usb 4-1: config 4 interface 81 has no altsetting 0 [ 804.430758][T10156] usb 4-1: config 4 interface 19 has no altsetting 0 [ 804.472891][T10156] usb 4-1: Dual-Role OTG device on HNP port [ 804.479203][T10156] usb 4-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=94.fe [ 804.500600][ T30] audit: type=1400 audit(1761785249.744:876): avc: denied { getopt } for pid=14311 comm="syz.0.2242" lport=35855 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 804.531889][T10156] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.556268][T10156] usb 4-1: Product: syz [ 804.566819][T10156] usb 4-1: Manufacturer: syz [ 804.573271][T10156] usb 4-1: SerialNumber: syz [ 804.594694][ T30] audit: type=1400 audit(1761785249.744:877): avc: denied { connect } for pid=14311 comm="syz.0.2242" lport=35855 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 805.112687][T10156] ums-datafab 4-1:4.81: USB Mass Storage device detected [ 805.200670][T10156] ums-sddr55 4-1:4.81: USB Mass Storage device detected [ 805.320061][T10156] ums-datafab 4-1:4.19: USB Mass Storage device detected [ 805.378433][T10156] ums-sddr55 4-1:4.19: USB Mass Storage device detected [ 805.390364][ T24] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 805.519384][T10156] usb 4-1: USB disconnect, device number 43 [ 805.653034][ T24] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 805.662349][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.679688][ T24] usb 5-1: config 0 descriptor?? [ 805.688109][ T24] gspca_main: spca508-2.14.0 probing 8086:0110 [ 805.807339][T14344] can: request_module (can-proto-3) failed. [ 805.907303][ T24] gspca_spca508: reg_read err -32 [ 805.918813][ T24] gspca_spca508: reg_read err -32 [ 805.929760][ T24] gspca_spca508: reg_read err -32 [ 805.939709][ T24] gspca_spca508: reg_read err -32 [ 805.950513][ T24] gspca_spca508: reg_read err -32 [ 806.281438][ T24] gspca_spca508: reg write: error -71 [ 806.282461][ T30] audit: type=1400 audit(1761785251.353:878): avc: denied { node_bind } for pid=14355 comm="syz.1.2252" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 806.700721][ T24] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 806.718037][ T24] usb 5-1: USB disconnect, device number 52 [ 807.019394][T14357] lo speed is unknown, defaulting to 1000 [ 807.100930][T10098] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 808.074094][T10098] usb 1-1: Using ep0 maxpacket: 16 [ 808.107937][T10098] usb 1-1: config 0 has no interfaces? [ 808.133957][T10098] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 808.277378][T10098] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 808.285418][T10098] usb 1-1: Manufacturer: syz [ 808.451997][T10098] usb 1-1: config 0 descriptor?? [ 808.680064][T14369] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2255'. [ 808.871498][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.956361][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.076829][T10156] usb 1-1: USB disconnect, device number 46 [ 810.470430][T14387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2262'. [ 810.629884][T10156] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 810.675357][T14397] lo speed is unknown, defaulting to 1000 [ 810.793719][T10156] usb 3-1: unable to get BOS descriptor or descriptor too short [ 810.814210][T10156] usb 3-1: not running at top speed; connect to a high speed hub [ 810.831697][T10156] usb 3-1: config 4 has an invalid interface number: 81 but max is 0 [ 810.840311][T10156] usb 3-1: config 4 has an invalid interface number: 19 but max is 0 [ 810.847555][ T30] audit: type=1400 audit(1761785255.663:879): avc: denied { setopt } for pid=14402 comm="syz.4.2264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 810.848630][T10156] usb 3-1: config 4 has an invalid descriptor of length 184, skipping remainder of the config [ 810.879611][T10156] usb 3-1: config 4 has 2 interfaces, different from the descriptor's value: 1 [ 810.893216][T10156] usb 3-1: config 4 has no interface number 0 [ 810.900513][T10156] usb 3-1: config 4 has no interface number 1 [ 810.943990][T10156] usb 3-1: config 4 interface 81 altsetting 3 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 810.957869][ T30] audit: type=1400 audit(1761785255.794:880): avc: denied { create } for pid=14402 comm="syz.4.2264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 810.971123][T10156] usb 3-1: config 4 interface 81 altsetting 3 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 811.038669][T10156] usb 3-1: config 4 interface 81 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 811.060625][ T30] audit: type=1400 audit(1761785255.794:881): avc: denied { setopt } for pid=14402 comm="syz.4.2264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 811.069854][T10156] usb 3-1: too many endpoints for config 4 interface 19 altsetting 161: 105, using maximum allowed: 30 [ 811.208289][T10156] usb 3-1: config 4 interface 19 altsetting 161 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 811.422039][T10156] usb 3-1: config 4 interface 81 has no altsetting 0 [ 811.857487][T10156] usb 3-1: config 4 interface 19 has no altsetting 0 [ 811.938517][T10156] usb 3-1: Dual-Role OTG device on HNP port [ 811.951810][T10156] usb 3-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=94.fe [ 811.977873][T10156] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.989964][T10156] usb 3-1: Product: syz [ 812.014208][T10156] usb 3-1: Manufacturer: syz [ 812.022591][T10156] usb 3-1: SerialNumber: syz [ 812.913607][T10156] ums-datafab 3-1:4.81: USB Mass Storage device detected [ 813.325579][T10156] ums-sddr55 3-1:4.81: USB Mass Storage device detected [ 813.446518][T10156] ums-datafab 3-1:4.19: USB Mass Storage device detected [ 813.892818][T10156] ums-sddr55 3-1:4.19: USB Mass Storage device detected [ 814.011084][T14439] netlink: 'syz.3.2271': attribute type 9 has an invalid length. [ 814.052599][ T30] audit: type=1400 audit(1761785258.637:882): avc: denied { getopt } for pid=14437 comm="syz.3.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 814.390038][T10156] usb 3-1: USB disconnect, device number 49 [ 814.814796][T14451] sd 0:0:1:0: PR command failed: 1026 [ 814.820707][T14451] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 814.827967][T14451] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 816.048717][T14475] tmpfs: Bad value for 'mpol' [ 816.377795][T14474] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2279'. [ 816.780671][T14493] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2283'. [ 817.043654][T14499] overlayfs: missing 'lowerdir' [ 818.457770][ T890] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 818.639583][ T890] usb 3-1: unable to get BOS descriptor or descriptor too short [ 818.658908][T14510] IPVS: length: 149 != 24 [ 818.670332][ T890] usb 3-1: not running at top speed; connect to a high speed hub [ 818.720391][ T890] usb 3-1: config 4 has an invalid interface number: 81 but max is 0 [ 818.819192][ T890] usb 3-1: config 4 has an invalid interface number: 19 but max is 0 [ 818.861196][ T890] usb 3-1: config 4 has an invalid descriptor of length 184, skipping remainder of the config [ 818.907140][ T890] usb 3-1: config 4 has 2 interfaces, different from the descriptor's value: 1 [ 818.917982][ T890] usb 3-1: config 4 has no interface number 0 [ 818.939191][ T890] usb 3-1: config 4 has no interface number 1 [ 818.953338][ T890] usb 3-1: config 4 interface 81 altsetting 3 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 819.137954][ T30] audit: type=1326 audit(1761785263.322:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14512 comm="syz.1.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfab8efc9 code=0x7ffc0000 [ 819.163246][ T890] usb 3-1: config 4 interface 81 altsetting 3 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 819.175593][ T890] usb 3-1: config 4 interface 81 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 819.189633][ T30] audit: type=1326 audit(1761785263.331:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14512 comm="syz.1.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfab8efc9 code=0x7ffc0000 [ 819.250652][ T890] usb 3-1: too many endpoints for config 4 interface 19 altsetting 161: 105, using maximum allowed: 30 [ 819.271291][ T890] usb 3-1: config 4 interface 19 altsetting 161 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 819.294250][ T30] audit: type=1326 audit(1761785263.331:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14512 comm="syz.1.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fadfab8efc9 code=0x7ffc0000 [ 819.323000][ T890] usb 3-1: config 4 interface 81 has no altsetting 0 [ 819.334384][ T890] usb 3-1: config 4 interface 19 has no altsetting 0 [ 819.349775][ T890] usb 3-1: Dual-Role OTG device on HNP port [ 819.357809][ T30] audit: type=1326 audit(1761785263.331:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14512 comm="syz.1.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfab8efc9 code=0x7ffc0000 [ 819.408931][ T890] usb 3-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=94.fe [ 819.426049][ T890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.437435][ T890] usb 3-1: Product: syz [ 819.445465][ T890] usb 3-1: Manufacturer: syz [ 819.451149][ T30] audit: type=1326 audit(1761785263.331:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14512 comm="syz.1.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfab8efc9 code=0x7ffc0000 [ 819.487455][ T890] usb 3-1: SerialNumber: syz [ 819.518101][ T30] audit: type=1326 audit(1761785263.331:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14512 comm="syz.1.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fadfab8efc9 code=0x7ffc0000 [ 819.552325][ T30] audit: type=1326 audit(1761785263.331:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14512 comm="syz.1.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfab8efc9 code=0x7ffc0000 [ 819.590396][ T30] audit: type=1326 audit(1761785263.331:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14512 comm="syz.1.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfab8efc9 code=0x7ffc0000 [ 819.631976][ T30] audit: type=1326 audit(1761785263.331:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14512 comm="syz.1.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fadfab8efc9 code=0x7ffc0000 [ 819.909281][ T30] audit: type=1326 audit(1761785263.416:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14512 comm="syz.1.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfab8efc9 code=0x7ffc0000 [ 820.199812][ T30] audit: type=1326 audit(1761785263.416:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14512 comm="syz.1.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfab8efc9 code=0x7ffc0000 [ 820.520537][ T890] ums-datafab 3-1:4.81: USB Mass Storage device detected [ 820.778738][ T890] ums-sddr55 3-1:4.81: USB Mass Storage device detected [ 820.914273][ T890] ums-datafab 3-1:4.19: USB Mass Storage device detected [ 820.924150][ T30] audit: type=1400 audit(1761785265.108:894): avc: denied { read } for pid=14532 comm="syz.1.2294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 821.104876][ T30] audit: type=1400 audit(1761785265.230:895): avc: denied { setattr } for pid=14532 comm="syz.1.2294" path="socket:[42978]" dev="sockfs" ino=42978 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 821.132246][ T30] audit: type=1400 audit(1761785265.230:896): avc: denied { ioctl } for pid=14530 comm="syz.3.2293" path="socket:[42979]" dev="sockfs" ino=42979 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 821.209832][ T890] ums-sddr55 3-1:4.19: USB Mass Storage device detected [ 821.295384][ T890] usb 3-1: USB disconnect, device number 50 [ 821.469999][T10156] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 821.617671][T10156] usb 4-1: device descriptor read/64, error -71 [ 821.922610][T10156] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 822.087098][T10156] usb 4-1: device descriptor read/64, error -71 [ 822.236531][T10156] usb usb4-port1: attempt power cycle [ 822.628291][T10156] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 822.672143][T10156] usb 4-1: device descriptor read/8, error -71 [ 822.915853][T14565] netlink: 'syz.4.2302': attribute type 10 has an invalid length. [ 822.927711][T10156] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 822.950099][T14565] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2302'. [ 822.955408][T10156] usb 4-1: device descriptor read/8, error -71 [ 823.222324][T10156] usb usb4-port1: unable to enumerate USB device [ 823.568854][T14567] netlink: 'syz.4.2302': attribute type 4 has an invalid length. [ 826.064956][T14555] syz.1.2300 (14555): drop_caches: 2 [ 831.985296][ C0] sched: DL replenish lagged too much [ 848.558511][T10156] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 885.475053][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 886.702467][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 888.462403][T13830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 888.536767][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 888.548711][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 888.558664][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 888.610474][T14603] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 888.622330][T14603] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 888.641345][T14603] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 888.650140][T14603] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 888.694843][ T5818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 888.708878][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 888.710012][T14604] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 888.737748][T14604] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 888.737758][T14603] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 888.753438][T14604] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 888.762327][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 888.763367][T14603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 888.777103][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 888.777120][ T30] audit: type=1400 audit(1761785328.556:900): avc: denied { mounton } for pid=14596 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 888.817475][T14603] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 888.856894][T14603] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 888.880370][T14603] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 888.887971][T14603] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 898.200890][T14603] Bluetooth: hci3: command tx timeout [ 898.208002][T14605] Bluetooth: hci1: command tx timeout [ 898.214574][ T5818] Bluetooth: hci0: command tx timeout [ 901.337914][T14605] Bluetooth: hci1: command tx timeout [ 901.343373][T14605] Bluetooth: hci3: command tx timeout [ 901.613050][T14605] Bluetooth: hci0: command tx timeout [ 905.013957][T14603] Bluetooth: hci0: command tx timeout [ 905.019573][T14603] Bluetooth: hci3: command tx timeout [ 905.025371][T14603] Bluetooth: hci1: command tx timeout [ 905.191687][T14603] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 905.219555][T14603] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 905.248853][T14603] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 905.302652][T14603] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 905.391263][T14603] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 906.630395][T14605] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 906.642658][T14605] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 906.653357][T14605] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 906.661460][T14605] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 906.671274][T14605] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 907.485462][T14603] Bluetooth: hci1: command tx timeout [ 907.517085][T14603] Bluetooth: hci3: command tx timeout [ 907.522553][T14603] Bluetooth: hci0: command tx timeout [ 914.775172][T14605] Bluetooth: hci2: command tx timeout [ 914.781615][T14605] Bluetooth: hci5: command tx timeout [ 926.370953][T14603] Bluetooth: hci5: command tx timeout [ 926.376481][T14603] Bluetooth: hci2: command tx timeout [ 928.550516][T14603] Bluetooth: hci2: command tx timeout [ 928.555965][T14603] Bluetooth: hci5: command tx timeout [ 930.774785][T14603] Bluetooth: hci5: command tx timeout [ 930.780293][T14603] Bluetooth: hci2: command tx timeout [ 933.208927][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.495657][T14603] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 933.508051][T14603] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 933.516926][T14603] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 937.203827][T14603] Bluetooth: hci6: command 0x1005 tx timeout [ 937.210969][T14605] Bluetooth: hci6: Opcode 0x1005 failed: -110 [ 937.227731][T14605] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 939.773005][T14612] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 941.749577][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.756424][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 941.827567][T14603] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 941.849414][T14603] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 941.883709][T14603] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 941.891595][T14603] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 941.899338][T14603] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 941.928976][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.966835][T14596] lo speed is unknown, defaulting to 1000 [ 944.132703][T14603] Bluetooth: hci6: command tx timeout [ 946.377435][T14603] Bluetooth: hci6: command tx timeout [ 947.882173][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.301955][T14603] Bluetooth: hci6: command tx timeout [ 957.568928][T14603] Bluetooth: hci6: command tx timeout [ 957.629110][T14606] lo speed is unknown, defaulting to 1000 [ 985.422677][T14598] lo speed is unknown, defaulting to 1000 [ 1006.084186][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1006.092628][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1006.285697][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.617415][T14608] lo speed is unknown, defaulting to 1000 [ 1007.719198][T14614] lo speed is unknown, defaulting to 1000 [ 1014.416280][ T31] INFO: task syz.2.2304:14566 blocked for more than 148 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1014.593150][ T31] Not tainted syzkaller #0 [ 1014.598122][ T31] Blocked by coredump. [ 1014.602693][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1014.614626][ T31] task:syz.2.2304 state:D stack:25688 pid:14566 tgid:14562 ppid:5820 task_flags:0x400548 flags:0x00080002 [ 1014.637233][ T31] Call Trace: [ 1014.640641][ T31] [ 1014.643682][ T31] __schedule+0x1190/0x5de0 [ 1023.387855][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1023.426260][ T31] ? is_bpf_text_address+0x94/0x1a0 [ 1023.431518][ T31] ? __lock_acquire+0x622/0x1c90 [ 1023.436712][ T31] ? __pfx___schedule+0x10/0x10 [ 1023.479642][ T31] ? find_held_lock+0x2b/0x80 [ 1023.511658][ T31] ? schedule+0x2d7/0x3a0 [ 1023.522472][ T31] schedule+0xe7/0x3a0 [ 1023.526577][ T31] schedule_timeout+0x257/0x290 [ 1023.531438][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1023.627784][ T31] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 1023.655907][ T31] ? _raw_spin_unlock_irq+0x29/0x50 [ 1023.661171][ T31] __wait_for_common+0x2fc/0x4e0 [ 1023.683568][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1023.688999][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1023.704777][ T31] ? find_held_lock+0x2b/0x80 [ 1023.715118][ T31] ? io_wq_put_and_exit+0x22a/0x8a0 [ 1023.720709][ T31] io_wq_put_and_exit+0x271/0x8a0