last executing test programs: 2m10.742505924s ago: executing program 4 (id=616): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20010, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x54, r1, 0x1, 0x70bd25, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0x1}, {0x57}}]}, 0x54}}, 0x0) 2m10.471850279s ago: executing program 4 (id=617): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) close(0x3) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000005c0)=0xfffffffd) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x79}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 2m7.802500684s ago: executing program 4 (id=628): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x5, 0x5, 0x9fd, 0x83, 0x41}, 0x50) socket$inet(0x2, 0x4000000000000001, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2, 0x3}, 0x18, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x20000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_complete(0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000000180)) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x2, 0xdddd0000, 0x1000, &(0x7f000084a000/0x1000)=nil}) mmap(&(0x7f0000dfc000/0x3000)=nil, 0x3000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x8000) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r5, 0x2000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x2, 0x3, 0x7fffffff, 0x2, 0x34e8}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) 2m6.743555499s ago: executing program 4 (id=630): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='qnx4\x00', 0x200000, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0xa, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x20000000) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ec) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x18c) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8018, 0x1f7) r5 = fanotify_init(0x0, 0x1000) fanotify_mark(r5, 0x201, 0x4000003e, r4, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) socket(0x10, 0x3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000001c0)='dctcp', 0x5) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 2m5.689439883s ago: executing program 4 (id=633): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x4000000000091}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB="08003f0086fc"], 0x4c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x20044890) r2 = socket$xdp(0x2c, 0x3, 0x0) fsopen(&(0x7f00000001c0)='sockfs\x00', 0x1) socket$kcm(0x10, 0x2, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000140)={0xfffffffffffffffc, 0x9fffff, 0x1000, 0xc, 0x1}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @nfc, @l2tp={0x2, 0x0, @empty}, 0xa00, 0x0, 0x0, 0x0, 0x51}) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000040)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x304}, "33e275106ce797ba", "afc000", "1f991d9c", "d570f648c0ec6f65"}, 0x28) 2m4.449343939s ago: executing program 4 (id=636): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf0c2abd7000000004001300000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000000000600120005000000fa83dc8382267681fd00e0cb622ec179d688602ba57a5e4c88c59910636afe8276d8ab240cf49879fd94c1fcc1f2072fc001d5c0b44a0e52e67050aaee0c0f2cd7e29ec167a4de8e8f76de6833c3a6015428a8b57bfa0e4cef557186a20ac56bafc6daf5502434b83461ab24423b61f4778525705a"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000240)=0xffffffffffffffff) fcntl$setsig(r3, 0xa, 0x12) ppoll(&(0x7f0000000100), 0x0, 0x0, &(0x7f00000001c0)={[0x8001a0ffffffff]}, 0x8) r5 = dup2(r3, r4) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @empty}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000300)={0x8, 0x0, 0x10, 0x0, @vifc_lcl_addr=@remote, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r8, &(0x7f0000000100)=""/253, 0xfd, 0x1) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000023c0)=ANY=[@ANYBLOB="88110000", @ANYRES32=r3, @ANYBLOB="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"], 0x1188}, 0x1, 0x0, 0x0, 0x40844}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r9, &(0x7f0000004f00)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x6, @local, 0x6}, 0x1c, 0x0}}], 0x1, 0x240c0080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8031, 0xffffffffffffffff, 0x6e138000) ioctl$sock_SIOCOUTQNSD(r9, 0x894b, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000540)="f1598329de79c3c078c15809822daa683b4eb4501ffacc28cab732d81fa1a407ba027417ea5f2fe0f39dcbaabe5e1580bb882e228f274d0d30519213ae4749266e4a0cece3a35e9ef4a6991e6e0e8680e945f2df49c6012a23d50c9721", 0x5d}], 0x1}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRES8=r2], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8014) 2m4.280740967s ago: executing program 32 (id=636): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf0c2abd7000000004001300000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000000000600120005000000fa83dc8382267681fd00e0cb622ec179d688602ba57a5e4c88c59910636afe8276d8ab240cf49879fd94c1fcc1f2072fc001d5c0b44a0e52e67050aaee0c0f2cd7e29ec167a4de8e8f76de6833c3a6015428a8b57bfa0e4cef557186a20ac56bafc6daf5502434b83461ab24423b61f4778525705a"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000240)=0xffffffffffffffff) fcntl$setsig(r3, 0xa, 0x12) ppoll(&(0x7f0000000100), 0x0, 0x0, &(0x7f00000001c0)={[0x8001a0ffffffff]}, 0x8) r5 = dup2(r3, r4) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @empty}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000300)={0x8, 0x0, 0x10, 0x0, @vifc_lcl_addr=@remote, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r8, &(0x7f0000000100)=""/253, 0xfd, 0x1) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000023c0)=ANY=[@ANYBLOB="88110000", @ANYRES32=r3, @ANYBLOB="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"], 0x1188}, 0x1, 0x0, 0x0, 0x40844}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r9, &(0x7f0000004f00)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x6, @local, 0x6}, 0x1c, 0x0}}], 0x1, 0x240c0080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8031, 0xffffffffffffffff, 0x6e138000) ioctl$sock_SIOCOUTQNSD(r9, 0x894b, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000540)="f1598329de79c3c078c15809822daa683b4eb4501ffacc28cab732d81fa1a407ba027417ea5f2fe0f39dcbaabe5e1580bb882e228f274d0d30519213ae4749266e4a0cece3a35e9ef4a6991e6e0e8680e945f2df49c6012a23d50c9721", 0x5d}], 0x1}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRES8=r2], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8014) 9.090252132s ago: executing program 0 (id=1163): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000205f14120200000000000109022400010000600009040180020300000009210604000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) mmap(&(0x7f0000bc7000/0x4000)=nil, 0x4000, 0x300000f, 0x4031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00006cc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00001d4000/0x1000)=nil) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x20010, r2, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) timerfd_create(0x8, 0x800) r4 = fcntl$dupfd(r1, 0x406, r3) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x12, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x100) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0}, 0x0) 7.883787947s ago: executing program 5 (id=1174): futex(0x0, 0x18d, 0x2, 0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xbb}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000400)=[{&(0x7f000004ca80)=""/102388, 0x18ff4}], 0x1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000200)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x10) syz_usb_connect$rtl8150(0x1, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, 0x0, 0x80) setgroups(0x24, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.stat\x00', 0x275a, 0x0) 7.15290732s ago: executing program 3 (id=1181): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000340)={0x3000000, 0x0, '\x00', @raw_data=[0x7f, 0x5, 0xa65, 0x526f, 0x79, 0x9, 0x5, 0x8, 0x1, 0x8, 0x3, 0xb2c, 0x4, 0x3, 0x19b8, 0x55, 0x7fffffff, 0x8, 0x7, 0x1, 0x7, 0x80, 0x7, 0x5, 0x9, 0x0, 0x8, 0x0, 0x6, 0xe, 0x4, 0x1]}) 7.116124589s ago: executing program 3 (id=1183): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r1, 0x0, &(0x7f0000605000/0x3000)=nil, 0x3000, 0x1}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000040)={0xc, r1}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000003f"]) 6.855103592s ago: executing program 3 (id=1185): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1c4, &(0x7f0000000e40)=ANY=[]) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf) 6.830600065s ago: executing program 2 (id=1186): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a00001000028009001480040007"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x804, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) recvmmsg(r1, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}, 0x400}], 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) fanotify_init(0x200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$dri(0x0, 0x1ff, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0xfff, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0x9, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x200, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x6b13, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x10, 0x7, 0x3, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xff, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x12, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x10, 0x7, 0x2, 0x7, 0xc4c, 0x400045e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x942, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0x6, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0xfffffffe, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x8, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x19, 0x4, 0x1, 0xb, 0x1, 0x8, 0x400, 0x81, 0x80000004, 0x9, 0x9, 0x3, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x5, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x0, 0x7, 0x6, 0x709, 0x2, 0x40000049, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xfffefffd, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x4, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000001, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x8001, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x20000, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0xe, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x1, 0x3, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x6, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x9, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x8, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x20, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0xa, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x3fc, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x1, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x1, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0x5, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0xb6f, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x1, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r5, 0x80404518, &(0x7f0000000080)=""/222) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x1086cce0, 0x440, 0x73, 0x2, 0x0, 0x0, 0x0, 0x2, 0x7fffffff}}, 0x50) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000001280)=0x1245, &(0x7f00000012c0)=0x2) 6.71938798s ago: executing program 5 (id=1187): r0 = socket$vsock_stream(0x28, 0x1, 0x0) syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0xfdfd, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) unshare(0x6020400) pidfd_send_signal(r1, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0x40000004, 0x0) process_mrelease(r1, 0x0) getsockopt(r0, 0x28, 0x0, 0x0, &(0x7f0000000080)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "5cdd216179a386d6", "7400ad607c7c480f19acc12730c20b71", "9255ffc4", "40358f87c749cb9e"}, 0x28) syz_usb_connect(0x3, 0x24, &(0x7f0000001f00)={{0x12, 0x1, 0x110, 0x1d, 0x23, 0x72, 0x20, 0x4b4, 0x6831, 0x4c9c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5b, 0x9e, 0x0, 0x8, "", [{{0x9, 0x4, 0xe7, 0x3, 0x0, 0x49, 0xd, 0xbc, 0x9}}]}}]}}, 0x0) 5.402603933s ago: executing program 0 (id=1190): socket(0x80000000000000a, 0x2, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000040095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='.\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="7baf476c8785e79e4583f2677d303940b0f3e0edfd2c17cb45172b6ce8add312c9b0dff1d23dc36ad1659d008f2740a5e3d5fd0d2af264fc544d53cbcd07efb17a384084dbf6f6e953d74573d51207bac2fc617632950600b20dd87a14dd226bedd9d2f109f4702a85206a8627521301793f24c5fcbd4e74984bee1ddc054ab250d0fae1d97f", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000d042abd7000f8ffffff00000000", @ANYRES32=0x0, @ANYBLOB="b295ffcdd7adecf595335f49d233000600410c04001c0012800c0001006d6163766c616e000c0002800800010001000000140035006d6163"], 0x50}, 0x1, 0x0, 0x0, 0x400c844}, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000000400)) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) sendto$packet(r4, &(0x7f00000000c0)="15380ee1a3fcf5190a477b06b0805b6e5c21a747807a7cf252bb6c08654e118e3e8b3d0756f28ff927a0cb76f75e523e4d1588980cf7b160feb14abc880a33673d294c5037d66c1bccc7144fbf6526d6c92dcb589b2fcae575e3884ef5022e0e811e2ccbf310db32bdc034657c8fa8d0e4154123b4240f7bb21128966de0436bdd15", 0x82, 0xc800, &(0x7f0000000180)={0x11, 0xff, 0x0, 0x1, 0x9}, 0x14) r5 = socket(0x10, 0x3, 0x0) write(r5, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x5, 0x2, [0x2, 0x0]}, 0xc) syz_open_pts(0xffffffffffffffff, 0x507000) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) read$qrtrtun(r9, 0x0, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 4.5457078s ago: executing program 2 (id=1193): r0 = socket(0xa, 0x3, 0x3a) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x6, r2, 0x3}, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x13, 0x0, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, 0x0, 0x20) (async, rerun: 32) mount$9p_virtio(0x0, 0x0, 0x0, 0x2210088, 0x0) (async) chdir(&(0x7f0000000100)='./file0\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r6, &(0x7f0000000440), &(0x7f0000000040)=@udp=r5}, 0x20) close_range(r4, 0xffffffffffffffff, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)="8c", 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000"], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x841}}], 0x2, 0x11) (async) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e0600120c"], 0x9) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 4.400365474s ago: executing program 0 (id=1194): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000000)={[{@huge_never}]}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@generic={0x81, 0x1, 0x1, 0x4b}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8006}, 0x94) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000340)={0x0, 0x0, '\x00', @raw_data=[0x7f, 0x5, 0xa65, 0x526f, 0x79, 0x9, 0x5, 0x8, 0x1, 0x8, 0x3, 0xb2c, 0x4, 0x3, 0x19b8, 0x55, 0x7fffffff, 0x8, 0x7, 0x1, 0x7, 0x80, 0x7, 0x5, 0x9, 0x0, 0x8, 0x0, 0x6, 0xe, 0x4, 0x1]}) 4.385163356s ago: executing program 2 (id=1195): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x0, 0x8, 0x9, 0x400, 0x9, 0x0, 0x8a7, 0x400000f, 0xfff7ffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) close(r2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000400)) r4 = getpid() socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(r4, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000180)=ANY=[@ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x100080c6}, 0x20008000) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd8322"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x8f}]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_FEATURES(r7, 0x40309439, &(0x7f0000000100)={0x2, 0x2, 0x14}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000100)=0x3b23, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) 4.383173443s ago: executing program 3 (id=1196): syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r5 = openat(r4, &(0x7f0000000180)='./file0\x00', 0x204043, 0x84) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) getdents(r5, &(0x7f00000005c0)=""/147, 0x93) getdents64(r5, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) syz_open_dev$usbmon(0x0, 0x80000001, 0x82002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0xe, &(0x7f0000000040)={0x0, 0xf4d7, 0xf000, 0x7, 0x481d4}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) 4.38261959s ago: executing program 0 (id=1197): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x48}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@mcast1, @in=@local}}, {{@in=@empty}, 0x0, @in6=@loopback}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc04c885, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r7, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0xfffffed8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608204c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="f9ab9ed065a5e31b5460947187c022229fcc57ccc7523136c8f790dd48d38314528ecfe9be09f84db4bcce73f95903e4c2785828b0557234f93f62d18f73eb46c8de07a93a063cfd0a8de38707c12ad258bad8c9ff5ed2b7c41242fceffca1cce7b47e598feba8735cc0141b73df9bb679873d8ed490cf2861d3774642866d108b85913631a5db97ff12681555d2850b83d2b94f53840180440fc0d12282e080662f366d5eebf4523b5a8aeb341f927430956cc0b027c0a77457", 0xba}, {&(0x7f0000000b00)="aad1cbac0193ecdeb27fe629d117158f1049a666a590a1a09b5cd979bb4f80036251f76de622ee1dd79f37e6ac8bf0ddbb8c35353cb3e9f9774a71b14e5bd6771070938f7fafff8c0ac5e34de1042c2a8fb44ae0debe1b09ad99f5127756666e8d84900cb85a4594a00ac3e8ad2a90df33f41f0a4567d79562fd09b1b8776bb0e2346941e868ab2a991abb0fc70420f206a21a6faf519004ef2ce1d00f5743aaaf288bbbcb3c1b311086d6a4aaa72832f4855479ba37a3778e4cf7c693aec40f41db237a27461a425fac189832e56f6ddfbb2cdf0000002c837429b40fefbba80c82eaa4ddf1eba5798b5c7bbe34717e71cd8d199da27810f0392dbe91b1f7a8c4e685cf19f9ebe0e010347df26711021d96367e8b8090949534f34d100008a2c429a75747fa9f9da669fefca3360158ca23e4b912372371678872a3c6c45ab593f17713e84b685f02a821aa9d9b95f229aef97fd11687c17215f91a2fc055275cda47d81a07be14fac61bbb886bb45682d27d57239755a92871e5a2c8f3bb3810cf7d360f705b75a8b228c5ba3b071d57562062aac89f358b7e323dde4a9b26da3a08d48a60781a228bf76a17f2126053cc0180f005f58053832c21eb582ef0554926156d762f098e859970d311db6812fd", 0x1d2}], 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10006}, [@FRA_SRC={0x8, 0x2, @rand_addr=0x64010100}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x4}, @FRA_DST={0x8, 0x1, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) 3.864346434s ago: executing program 1 (id=1198): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000280)=""/106) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async) r2 = socket$kcm(0x2, 0x1, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002db98b0b8e329ea90dbd7000ff98f95b9b00"/31], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) (async, rerun: 64) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x2d, 0x20040040) (async) dup3(r5, r6, 0x0) (async) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/rcu_stall_count', 0x20347, 0x100) getsockopt$netlink(r3, 0x10e, 0x8, &(0x7f00000001c0)=""/128, &(0x7f0000000240)=0x80) (async) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x2000c811) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000340)={0x3, 0x212, 0x0, 0x10}, 0x10) (async, rerun: 64) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64) getsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x13, 0x0, &(0x7f0000000040)) socket$kcm(0x29, 0x0, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r10, &(0x7f0000000300)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @remote}, 0x14) (async, rerun: 64) bind$packet(r9, &(0x7f00000006c0)={0x11, 0x0, r11, 0x1, 0xb}, 0x14) (rerun: 64) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000180)={r3, r1}) 3.735709061s ago: executing program 5 (id=1199): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 3.664970093s ago: executing program 1 (id=1200): preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4090, 0xffa}], 0x1, 0xa, 0x203) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r0 = userfaultfd(0x801) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) poll(0x0, 0x0, 0xd4) landlock_restrict_self(r0, 0xc) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x454}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f0000000040)={{&(0x7f000090a000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xe}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x20c002, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x63}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x2000, 0xffff8000, 0x20002f8}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000380)="94baf24dab", 0x5}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000000)={0x200a, 0xd}) io_uring_enter(r6, 0x2219, 0x350b, 0x16, 0x0, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) 3.642032869s ago: executing program 5 (id=1201): syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x0, 0x0, 0x20000009}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) connect$pppl2tp(r0, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x1, 0x0, {0xa, 0x0, 0x9, @empty}}}, 0x32) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/pid\x00') ioctl$NS_GET_USERNS(r1, 0x8004b708, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket(0x40000000015, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000100)="580000001400add405000000000000002f6c30933b581e2bf8117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffff2cc3ffffffe7ee0000000000", 0x58}], 0x1) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x0, 0x28, 0x0, 0x0, 0xffffff45}, 0x28) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000380), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a000006090002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r5, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084000000"], 0x48}}, 0x4084) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000005358207925bbe5ad600027842cf52300b8a0c50f89a024890bd6a763e0a5c4cb13fff419e7ee477a0a7525711158d272e52283c5d94964bc520949d19cf1aa35b6cb66ba2be78e2f646e6a4bb6a35865da7a15a628f1f03c737fff8be31880f7bb7be9b117b4eb72ff219ddebd99d97b1a98c3b1c6541891ee7ae74a50c58cffc0adab1ac60196d483b7883fa4eb6b79e72cf6f4dcfdb67a6a09f09bb2b2b0db0ccd1c803da80d28d21d4a7b42008b722ead09bd5371000000", @ANYRES32=0x0, @ANYRESHEX=r2], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65cc1}, 0x4008840) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi5\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000240)={'ni_at_a2150\x00', [0xb011, 0x7, 0x3, 0xdd9, 0x88d7, 0x8f, 0xffffffff, 0x8012, 0x1006, 0xffffffff, 0x40008, 0x7, 0x1000000b, 0x3, 0x0, 0xfffffffd, 0x8, 0x6, 0x9, 0x57, 0x4, 0x3, 0x7, 0xa, 0x4, 0x1, 0xb0c4, 0x800, 0x20004, 0x400002, 0x22]}) 2.206378071s ago: executing program 0 (id=1202): ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) 1.742796348s ago: executing program 1 (id=1203): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.592883796s ago: executing program 0 (id=1204): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a00001000028009001480040007"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x804, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) recvmmsg(r1, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}, 0x400}], 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) fanotify_init(0x200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$dri(0x0, 0x1ff, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0xfff, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0x9, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x200, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x6b13, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x10, 0x7, 0x3, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xff, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x12, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x10, 0x7, 0x2, 0x7, 0xc4c, 0x400045e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x942, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0x6, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0xfffffffe, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x8, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x19, 0x4, 0x1, 0xb, 0x1, 0x8, 0x400, 0x81, 0x80000004, 0x9, 0x9, 0x3, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x5, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x0, 0x7, 0x6, 0x709, 0x2, 0x40000049, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xfffefffd, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x4, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000001, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x8001, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x20000, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0xe, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x1, 0x3, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x6, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x9, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x8, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x20, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0xa, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x3fc, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x1, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x1, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0x5, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0xb6f, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x1, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r5, 0x80404518, &(0x7f0000000080)=""/222) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x1086cce0, 0x440, 0x73, 0x2, 0x0, 0x0, 0x0, 0x2, 0x7fffffff}}, 0x50) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000001280)=0x1245, &(0x7f00000012c0)=0x2) 1.592509865s ago: executing program 1 (id=1205): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2, 0x2, 0x0, 0x1, 0x0, [@private1]}]}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000340)={0x3, 0x0, @c}, 0x29, 0xffffffffffffffff) keyctl$set_timeout(0xf, r4, 0xa0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) r5 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000fbff0000000c0000f7bc8ad400020000738a00"], 0x0, 0x28}, 0x28) socket(0x2, 0x80805, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r5, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084000000"], 0x48}}, 0x4084) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000003c0)={0x0, 0x62, 0x1a}, &(0x7f0000000400)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000700)="9cc272d79287a35bfc0cfe207c8b0fefb3a30555e5153f5269f17033a43885430f18d1565ff8c571a26b926f7b36e5933e360e57f7ee2dc95610e2b06ed5c678d8315c305468dbfb6750a9827ee2ec02e2b800e4879000d9ee754bfec97bcddf0cf6", &(0x7f0000000780)=""/26) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x4, r0}, 0x10) 1.44859453s ago: executing program 2 (id=1206): bpf$ENABLE_STATS(0x20, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000060000008500000018000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.250865062s ago: executing program 3 (id=1207): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f00000000c0)='qnx6\x00', 0x0) (fail_nth: 2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x6, 0xffffff34) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x6, 0x1000, &(0x7f0000000240)=""/4096}, 0x94) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 1.075536642s ago: executing program 5 (id=1208): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x0, @val=@netkit}, 0x6b) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) fanotify_init(0x4, 0x2) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x28) ioctl$FIONREAD(r3, 0x541b, 0x0) 1.021377364s ago: executing program 2 (id=1209): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x400c1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, 0x0, 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000240)='./file1\x00', 0x10) r3 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0x400, 0x40000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x1, 0x9}) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000003300)=ANY=[@ANYBLOB="20000000160001002dbd6200fdffffff0a"], 0x20}}, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, 0x0) 776.293597ms ago: executing program 5 (id=1210): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x18010, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000080)={0x20004, r4, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x59, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x303}, "11005e525e1c94e6", "d4359968d40546230f9205a9d252a57e", "0d3a859e", "b1ad2b8318feaa64"}, 0x28) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r7, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000009800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f400000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff30000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x18) 705.525835ms ago: executing program 1 (id=1211): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$vim2m(0x0, 0x0, 0x2) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34808521, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r4, 0x0, 0x3f, 0x3000000000000500, 0x30000000}]) dup3(r4, r2, 0x0) 657.576636ms ago: executing program 2 (id=1212): r0 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x13, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x5a5}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregset(0x4205, r3, 0x1, &(0x7f00000001c0)={0x0}) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e6574"], 0x60}}, 0x0) 314.070447ms ago: executing program 3 (id=1213): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_emit_vhci(0x0, 0x8) socketpair$unix(0x1, 0x3, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$loop(0x0, 0x7, 0x180862) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, 0x0, r4}, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r5, 0x3b70, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001000010428bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="1400000000000100"], 0x20}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000240)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0xc10}, 0x8040) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x20101) 0s ago: executing program 1 (id=1214): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000100)={0xf, 0x20000, 0x2, 0xcbc, 0x1, 0x8}) syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000202505a1a440000000010109024a000101000000090400001702020000052406000005240000000d240f010000000006000000200624070407000905810340000000000905820210000000000905030240db256c011c167adc0e975ea705b2ab8f92340f597e616e05690a25eb06c882fed51b70610245bab04b16205b7076cf5ba6a4fec5600d80281b1f773d8323ab8c1f856250d877a3a1c297e2352cb6c0c0525b427f34d39937545c6e11aed5089366e9073c83fb92972bc822f9", @ANYRES8, @ANYRESHEX=r0], 0x0) prlimit64(0x0, 0x0, &(0x7f00000000c0)={0x84eeeea, 0x20000000d}, &(0x7f0000000400)) gettid() syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_linger(r1, 0x1, 0x48, &(0x7f00000000c0)={0x4000, 0xffffff7d}, 0x8) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x100) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x7f31, 0x42002) ioctl$FE_SET_FRONTEND(r5, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x4, 0xe, 0xd}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYRES64=r2], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r6 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@ifindex, 0x9d41d40c13b87ec5, 0x0, 0xeffffffe, &(0x7f0000000340), 0x0, 0x0, &(0x7f0000000340), &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)}, 0x40) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x80c0884}, 0xc080) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb8", @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a0b7a964}, 0x0) kernel console output (not intermixed with test programs): ber 29 using dummy_hcd [ 282.031014][ T42] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 282.046094][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.056549][ T42] usb 1-1: config 0 descriptor?? [ 282.065308][ T42] hub 1-1:0.0: USB hub found [ 282.159084][ T5349] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 282.179619][ T3105] usb 4-1: Using ep0 maxpacket: 16 [ 282.188346][ T3105] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.207056][ T3105] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 282.225685][ T3105] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 282.258666][ T3105] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.270779][ T42] hub 1-1:0.0: 1 port detected [ 282.276730][ T3105] usb 4-1: Product: syz [ 282.292968][ T3105] usb 4-1: Manufacturer: syz [ 282.316052][ T3105] usb 4-1: SerialNumber: syz [ 282.335359][ T5349] usb 6-1: Using ep0 maxpacket: 32 [ 282.336370][ T3105] r8152-cfgselector 4-1: Unknown version 0x0000 [ 282.362699][ T3105] r8152-cfgselector 4-1: config 0 descriptor?? [ 282.409112][ T29] audit: type=1800 audit(2000000068.520:613): pid=8962 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.745" name="nullb0" dev="tmpfs" ino=865 res=0 errno=0 [ 282.431033][ T5349] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.454608][ T5349] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 282.464045][ T5349] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.472461][ T5349] usb 6-1: Product: syz [ 282.489165][ T5349] usb 6-1: Manufacturer: syz [ 282.497263][ T5349] usb 6-1: SerialNumber: syz [ 282.530337][ T5349] usb 6-1: config 0 descriptor?? [ 282.560462][ T5349] cdc_ether 6-1:0.0: Descriptor too short [ 282.580167][ T5349] usb 6-1: unsupported MDLM descriptors [ 283.802538][ T42] hub 1-1:0.0: hub_ext_port_status failed (err = -32) [ 283.835505][ T3105] usb 6-1: USB disconnect, device number 4 [ 284.577975][ T5349] usb 1-1: USB disconnect, device number 23 [ 285.161695][ T5349] r8152-cfgselector 4-1: USB disconnect, device number 29 [ 285.216318][ T29] audit: type=1400 audit(2000000071.330:614): avc: denied { write } for pid=8982 comm="syz.5.750" name="file0" dev="tmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 285.241288][ T29] audit: type=1400 audit(2000000071.330:615): avc: denied { open } for pid=8982 comm="syz.5.750" path="/20/file0" dev="tmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 285.277933][ T29] audit: type=1400 audit(2000000071.330:616): avc: denied { ioctl } for pid=8982 comm="syz.5.750" path="/20/file0" dev="tmpfs" ino=123 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 285.322422][ T42] usb 3-1: USB disconnect, device number 29 [ 285.376959][ T8992] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 285.401303][ T8992] netlink: 72 bytes leftover after parsing attributes in process `syz.3.751'. [ 285.533706][ T9001] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 285.828397][ T9013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.759'. [ 286.228413][ T9041] xfrm0 speed is unknown, defaulting to 1000 [ 286.260491][ T9044] netlink: 24 bytes leftover after parsing attributes in process `syz.1.762'. [ 286.288566][ T9041] xfrm0 speed is unknown, defaulting to 1000 [ 286.303206][ T9041] xfrm0 speed is unknown, defaulting to 1000 [ 286.354803][ T9046] FAULT_INJECTION: forcing a failure. [ 286.354803][ T9046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.367920][ T9046] CPU: 0 UID: 0 PID: 9046 Comm: syz.3.764 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.367938][ T9046] Tainted: [L]=SOFTLOCKUP [ 286.367942][ T9046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 286.367948][ T9046] Call Trace: [ 286.367951][ T9046] [ 286.367955][ T9046] dump_stack_lvl+0x100/0x190 [ 286.367972][ T9046] should_fail_ex.cold+0x5/0xa [ 286.367989][ T9046] _copy_from_user+0x2e/0xd0 [ 286.368003][ T9046] copy_msghdr_from_user+0x9f/0x4f0 [ 286.368017][ T9046] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 286.368036][ T9046] ___sys_sendmsg+0x106/0x1e0 [ 286.368050][ T9046] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.368078][ T9046] __sys_sendmsg+0x170/0x220 [ 286.368094][ T9046] ? __pfx___sys_sendmsg+0x10/0x10 [ 286.368116][ T9046] ? rcu_is_watching+0x12/0xc0 [ 286.368134][ T9046] do_syscall_64+0x115/0x870 [ 286.368148][ T9046] ? clear_bhb_loop+0x40/0x90 [ 286.368161][ T9046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.368171][ T9046] RIP: 0033:0x7f4bb979ce59 [ 286.368181][ T9046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.368191][ T9046] RSP: 002b:00007f4bba5f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.368202][ T9046] RAX: ffffffffffffffda RBX: 00007f4bb9a15fa0 RCX: 00007f4bb979ce59 [ 286.368208][ T9046] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000007 [ 286.368214][ T9046] RBP: 00007f4bba5f4090 R08: 0000000000000000 R09: 0000000000000000 [ 286.368220][ T9046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.368226][ T9046] R13: 00007f4bb9a16038 R14: 00007f4bb9a15fa0 R15: 00007ffe558122e8 [ 286.368240][ T9046] [ 286.903511][ T29] audit: type=1400 audit(2000000073.020:617): avc: denied { append } for pid=9054 comm="syz.5.767" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 286.995964][ T9057] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 287.359477][ T29] audit: type=1400 audit(2000000073.030:618): avc: denied { map } for pid=9054 comm="syz.5.767" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 287.383124][ T29] audit: type=1400 audit(2000000073.030:619): avc: denied { execute } for pid=9054 comm="syz.5.767" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 287.619553][ T3105] xfrm0 speed is unknown, defaulting to 1000 [ 287.640507][ T9041] infiniband syz0: set active [ 287.684165][ T9041] infiniband syz0: added xfrm0 [ 287.746824][ T9041] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 287.752147][ T9041] infiniband syz0: Couldn't open port 1 [ 287.768032][ T9041] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 287.783718][ T9041] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 287.802507][ T9041] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 287.898801][ T9041] RDS/IB: syz0: added [ 287.910521][ T9041] smc: adding ib device syz0 with port count 1 [ 287.924681][ T9041] smc: ib device syz0 port 1 has pnetid SYZ2 (user defined) [ 287.946761][ T804] xfrm0 speed is unknown, defaulting to 1000 [ 287.970701][ T9041] xfrm0 speed is unknown, defaulting to 1000 [ 288.003205][ T9072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.221709][ T9083] netlink: 4 bytes leftover after parsing attributes in process `syz.5.773'. [ 289.203454][ T9100] PKCS7: Unknown OID: [4] 0.0 [ 289.208248][ T9100] PKCS7: Only support pkcs7_signedData type [ 289.292363][ T9101] xt_policy: output policy not valid in PREROUTING and INPUT [ 289.791712][ T9106] evm: overlay not supported [ 289.805773][ T9041] xfrm0 speed is unknown, defaulting to 1000 [ 289.946238][ T9112] ve: renamed from veth0_vlan (while UP) [ 290.079128][ T3105] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 290.280217][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 290.408989][ T3105] usb 4-1: Using ep0 maxpacket: 16 [ 290.415129][ T9041] xfrm0 speed is unknown, defaulting to 1000 [ 290.424703][ T3105] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.435467][ T3105] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 290.464206][ T3105] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 290.486634][ T3105] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 290.506714][ T3105] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.519689][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 290.534732][ T10] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 290.549341][ T10] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 290.564319][ T3105] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 290.577787][ T10] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 290.587738][ T3105] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 290.603831][ T10] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 290.612250][ T3105] usb 4-1: Manufacturer: syz [ 290.623843][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 290.636696][ T3105] usb 4-1: config 0 descriptor?? [ 290.641887][ T10] usb 6-1: config 0 has no interface number 0 [ 290.653559][ T10] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 290.675143][ T10] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 290.687837][ T10] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 290.713403][ T10] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 290.765098][ T10] usb 6-1: config 0 interface 125 has no altsetting 0 [ 290.780810][ T10] usb 6-1: config 0 interface 125 has no altsetting 2 [ 290.798854][ T10] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 290.800693][ T9041] xfrm0 speed is unknown, defaulting to 1000 [ 290.811617][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.830140][ T10] usb 6-1: Product: syz [ 291.012767][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.786'. [ 291.021871][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.786'. [ 291.038337][ T10] usb 6-1: Manufacturer: syz [ 291.047774][ T10] usb 6-1: SerialNumber: syz [ 291.075734][ T10] usb 6-1: config 0 descriptor?? [ 291.101764][ T10] usb 6-1: selecting invalid altsetting 2 [ 291.238947][ T3105] rc_core: IR keymap rc-hauppauge not found [ 291.244943][ T3105] Registered IR keymap rc-empty [ 291.263472][ T3105] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 291.297423][ C0] usb 6-1: async_complete: urb error -71 [ 291.303184][ C0] usb 6-1: async_complete: urb error -71 [ 291.308863][ C0] usb 6-1: async_complete: urb error -71 [ 291.314548][ C0] usb 6-1: async_complete: urb error -71 [ 291.324979][ T3105] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 291.332208][ T10] get_1284_register: usb error -71 [ 291.348059][ T10] usb 6-1: USB disconnect, device number 5 [ 291.354484][ T3105] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 291.381900][ T3105] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input23 [ 291.417228][ T3105] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 291.449186][ T3105] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 291.471594][ T3105] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 291.494238][ T9041] xfrm0 speed is unknown, defaulting to 1000 [ 291.500600][ T3105] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 291.529042][ T3105] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 291.559068][ T3105] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 291.599085][ T3105] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 291.629073][ T3105] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 291.659915][ T3105] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 291.689100][ T3105] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 291.738637][ T3105] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 291.756305][ T3105] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 291.779685][ T9134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.788'. [ 291.879828][ T29] audit: type=1400 audit(2000000077.990:620): avc: denied { write } for pid=9130 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.999162][ T29] audit: type=1400 audit(2000000078.110:621): avc: denied { write } for pid=9146 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.067424][ T9041] xfrm0 speed is unknown, defaulting to 1000 [ 293.522972][ T5820] usb 4-1: USB disconnect, device number 30 [ 294.265567][ T9184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.799'. [ 294.553906][ T29] audit: type=1400 audit(2000000080.660:622): avc: denied { write } for pid=9165 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.638113][ T9201] netlink: 'syz.0.804': attribute type 9 has an invalid length. [ 294.663924][ T29] audit: type=1400 audit(2000000080.780:623): avc: denied { write } for pid=9206 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.702425][ T5820] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 294.839328][ T804] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 294.876600][ T5820] usb 3-1: unable to get BOS descriptor or descriptor too short [ 294.884479][ T3105] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 294.896815][ T5820] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 294.907914][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.806'. [ 294.917028][ T9222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.806'. [ 294.932134][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.806'. [ 294.941555][ T9222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.806'. [ 294.954222][ T5820] usb 3-1: can't read configurations, error -71 [ 295.008933][ T804] usb 4-1: Using ep0 maxpacket: 16 [ 295.016202][ T804] usb 4-1: unable to get BOS descriptor or descriptor too short [ 295.027115][ T804] usb 4-1: New USB device found, idVendor=691e, idProduct=2d43, bcdDevice=66.e4 [ 295.036426][ T804] usb 4-1: New USB device strings: Mfr=132, Product=104, SerialNumber=171 [ 295.045025][ T804] usb 4-1: Product: syz [ 295.048175][ T3105] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.054725][ T804] usb 4-1: Manufacturer: syz [ 295.064186][ T3105] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 295.065770][ T804] usb 4-1: SerialNumber: syz [ 295.080483][ T3105] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 295.089997][ T3105] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.107819][ T3105] usb 6-1: config 0 descriptor?? [ 295.118265][ T3105] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 295.125354][ T3105] dvb-usb: bulk message failed: -22 (3/0) [ 295.134288][ T3105] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 295.153012][ T3105] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 295.161975][ T3105] usb 6-1: media controller created [ 295.168314][ T3105] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 295.195027][ T3105] dvb-usb: bulk message failed: -22 (6/0) [ 295.202027][ T3105] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 295.219479][ T3105] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input24 [ 295.241963][ T3105] dvb-usb: schedule remote query interval to 150 msecs. [ 295.257394][ T3105] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 295.291709][ T804] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 295.381822][ T804] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 295.401588][ T804] usb 4-1: USB disconnect, device number 31 [ 295.410466][ T3105] dvb-usb: bulk message failed: -22 (1/0) [ 295.421686][ T3105] dvb-usb: error while querying for an remote control event. [ 295.440527][ T6118] udevd[6118]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 295.534941][ T29] audit: type=1400 audit(2000000081.650:624): avc: denied { create } for pid=9226 comm="syz.1.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 295.602937][ T29] audit: type=1400 audit(2000000081.650:625): avc: denied { getopt } for pid=9226 comm="syz.1.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 295.623913][ T3105] dvb-usb: bulk message failed: -22 (1/0) [ 295.623957][ T3105] dvb-usb: error while querying for an remote control event. [ 295.677391][ T29] audit: type=1400 audit(2000000081.790:626): avc: denied { read } for pid=9223 comm="syz.2.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 295.819592][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 295.825530][ T10] dvb-usb: error while querying for an remote control event. [ 295.952552][ T29] audit: type=1400 audit(2000000082.070:627): avc: denied { setopt } for pid=9232 comm="syz.0.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 296.035515][ T5820] dvb-usb: bulk message failed: -22 (1/0) [ 296.086118][ T5820] dvb-usb: error while querying for an remote control event. [ 296.399807][ T5820] dvb-usb: bulk message failed: -22 (1/0) [ 296.509893][ T5820] dvb-usb: error while querying for an remote control event. [ 296.820330][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 296.835028][ T10] dvb-usb: error while querying for an remote control event. [ 296.851506][ T9247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 297.000834][ T9250] syz.3.815 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 297.009011][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 297.020028][ T10] dvb-usb: error while querying for an remote control event. [ 297.033132][ T29] audit: type=1400 audit(2000000083.150:628): avc: denied { read } for pid=9249 comm="syz.3.815" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 297.077896][ T29] audit: type=1400 audit(2000000083.150:629): avc: denied { open } for pid=9249 comm="syz.3.815" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 297.118295][ T29] audit: type=1400 audit(2000000083.180:630): avc: denied { write } for pid=9249 comm="syz.3.815" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 297.119959][ T9210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.219021][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 297.225317][ T10] dvb-usb: error while querying for an remote control event. [ 297.259364][ T9210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.356527][ T42] usb 6-1: USB disconnect, device number 6 [ 297.860926][ T42] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 297.935923][ T29] audit: type=1400 audit(2000000084.050:631): avc: denied { mount } for pid=9257 comm="syz.1.817" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 298.176557][ T29] audit: type=1400 audit(2000000084.290:632): avc: denied { read } for pid=9268 comm="syz.2.820" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 298.799144][ T29] audit: type=1400 audit(2000000084.290:633): avc: denied { open } for pid=9268 comm="syz.2.820" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 298.896686][ T29] audit: type=1400 audit(2000000084.290:634): avc: denied { ioctl } for pid=9268 comm="syz.2.820" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 299.028382][ T9285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.826'. [ 299.041702][ T29] audit: type=1400 audit(2000000085.140:635): avc: denied { associate } for pid=9278 comm="syz.0.823" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 299.042617][ T9285] veth1_macvtap: left promiscuous mode [ 299.141647][ T9290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.825'. [ 299.152765][ T10] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 299.165458][ T9287] 9p: Bad value for 'rfdno' [ 299.166323][ T9291] 9p: Bad value for 'rfdno' [ 299.175889][ T29] audit: type=1400 audit(2000000085.290:636): avc: denied { append } for pid=9284 comm="syz.3.824" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 299.215466][ T9293] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 299.225221][ T9293] overlayfs: missing 'lowerdir' [ 299.233173][ T29] audit: type=1400 audit(2000000085.350:637): avc: denied { read } for pid=9292 comm="syz.0.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 299.234349][ T9293] netlink: 44 bytes leftover after parsing attributes in process `syz.0.827'. [ 299.290080][ T9293] netlink: 44 bytes leftover after parsing attributes in process `syz.0.827'. [ 299.342372][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 299.363410][ T10] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 299.391561][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.418218][ T10] usb 6-1: Product: â¦‡â€¼â·­î¹»è¶žè¬·ì¼¶â¸œé’ºä¼ƒíƒ·èŸŒâŒ”æ–œá°—åŽ•ì‚µä«§íŠæ±†é€•絜ꃋ⥒䚻傔è°ï¡î—¾æ¸²ìµ¬â¯›á¶è§ªç‘¸âž®â€¥à¯ë´»èšíŠ¤ë´§á©§áŠ¶ã‘¿å” ç°¡à³å¹²Ù¿æŸ–泣介ì‡åž·âï¡ì£“润싱ìƒïªšå‘¢ [ 299.443420][ T10] usb 6-1: Manufacturer: Ь [ 299.463917][ T10] usb 6-1: SerialNumber: Ñ [ 300.372699][ T9317] FAULT_INJECTION: forcing a failure. [ 300.372699][ T9317] name failslab, interval 1, probability 0, space 0, times 0 [ 300.394932][ T9317] CPU: 0 UID: 0 PID: 9317 Comm: syz.2.835 Tainted: G L syzkaller #0 PREEMPT(full) [ 300.394971][ T9317] Tainted: [L]=SOFTLOCKUP [ 300.394977][ T9317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 300.394986][ T9317] Call Trace: [ 300.394992][ T9317] [ 300.394998][ T9317] dump_stack_lvl+0x100/0x190 [ 300.395026][ T9317] should_fail_ex.cold+0x5/0xa [ 300.395050][ T9317] should_failslab+0xc2/0x120 [ 300.395069][ T9317] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 300.395097][ T9317] ? __alloc_skb+0x140/0x710 [ 300.395121][ T9317] ? __alloc_skb+0x5b7/0x710 [ 300.395146][ T9317] __alloc_skb+0x140/0x710 [ 300.395167][ T9317] ? __alloc_skb+0x5b7/0x710 [ 300.395189][ T9317] ? __pfx___alloc_skb+0x10/0x10 [ 300.395217][ T9317] netlink_alloc_large_skb+0x69/0x150 [ 300.395238][ T9317] netlink_sendmsg+0x680/0xda0 [ 300.395262][ T9317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.395289][ T9317] sock_write_iter+0x524/0x5a0 [ 300.395307][ T9317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.395325][ T9317] ? __pfx_sock_write_iter+0x10/0x10 [ 300.395342][ T9317] ? _kstrtoull+0x13c/0x1f0 [ 300.395374][ T9317] ? __pfx___file_has_perm+0x10/0x10 [ 300.395401][ T9317] do_iter_readv_writev+0x6ee/0x920 [ 300.395421][ T9317] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 300.395437][ T9317] ? selinux_file_permission+0x8f/0x6d0 [ 300.395464][ T9317] ? bpf_lsm_file_permission+0x9/0x10 [ 300.395487][ T9317] ? security_file_permission+0x76/0x210 [ 300.395510][ T9317] ? rw_verify_area+0xce/0x6d0 [ 300.395526][ T9317] vfs_writev+0x360/0xe10 [ 300.395546][ T9317] ? __pfx_vfs_writev+0x10/0x10 [ 300.395562][ T9317] ? find_held_lock+0x2b/0x80 [ 300.395575][ T9317] ? ksys_write+0x190/0x250 [ 300.395602][ T9317] ? __fget_files+0x21f/0x3d0 [ 300.395625][ T9317] ? do_writev+0x28a/0x340 [ 300.395639][ T9317] do_writev+0x28a/0x340 [ 300.395655][ T9317] ? __pfx_do_writev+0x10/0x10 [ 300.395671][ T9317] ? rcu_is_watching+0x12/0xc0 [ 300.395695][ T9317] do_syscall_64+0x115/0x870 [ 300.395715][ T9317] ? clear_bhb_loop+0x40/0x90 [ 300.395736][ T9317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.395753][ T9317] RIP: 0033:0x7f909c19ce59 [ 300.395769][ T9317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.395786][ T9317] RSP: 002b:00007f909d06a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 300.395803][ T9317] RAX: ffffffffffffffda RBX: 00007f909c415fa0 RCX: 00007f909c19ce59 [ 300.395814][ T9317] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 300.395825][ T9317] RBP: 00007f909d06a090 R08: 0000000000000000 R09: 0000000000000000 [ 300.395834][ T9317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.395843][ T9317] R13: 00007f909c416038 R14: 00007f909c415fa0 R15: 00007ffe467aa1f8 [ 300.395868][ T9317] [ 301.091018][ T10] usbhid 6-1:1.0: can't add hid device: -71 [ 301.102578][ T10] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 301.223944][ T10] usb 6-1: USB disconnect, device number 7 [ 301.454138][ T9329] kvm: kvm [9328]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 301.478446][ T9329] kvm: kvm [9328]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 301.547475][ T9329] xt_hl: Unknown TTL match mode: 255 [ 301.769038][ T3105] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 301.920985][ T3105] usb 4-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 301.932528][ T3105] usb 4-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.945316][ T3105] usb 4-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 301.962658][ T3105] usb 4-1: config 0 interface 0 has no altsetting 0 [ 301.970670][ T3105] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 301.979941][ T3105] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.990983][ T3105] usb 4-1: config 0 descriptor?? [ 302.129029][ T5820] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 302.165801][ T29] audit: type=1400 audit(2000000088.280:638): avc: denied { read } for pid=9347 comm="syz.2.847" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 302.206780][ T29] audit: type=1400 audit(2000000088.280:639): avc: denied { open } for pid=9347 comm="syz.2.847" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 302.278969][ T5820] usb 1-1: Using ep0 maxpacket: 8 [ 302.286012][ T5820] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.299959][ T9348] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 302.308219][ T9348] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 302.316794][ T5820] usb 1-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 302.329629][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.337720][ T5820] usb 1-1: Product: syz [ 302.342523][ T5820] usb 1-1: Manufacturer: syz [ 302.348011][ T5820] usb 1-1: SerialNumber: syz [ 302.360437][ T5820] usb 1-1: config 0 descriptor?? [ 302.372468][ T5820] gspca_main: t613-2.14.0 probing 17a1:0128 [ 302.375298][ T9348] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 302.488626][ T29] audit: type=1400 audit(2000000088.600:640): avc: denied { lock } for pid=9354 comm="syz.5.848" path="/dev/video6" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 302.605010][ T9345] ALSA: mixer_oss: invalid OSS volume '' [ 302.608370][ T9339] serio: Serial port ptm1 [ 303.199201][ T5820] gspca_t613: unknown sensor 0000 [ 303.263628][ T5820] t613 1-1:0.0: probe with driver t613 failed with error -22 [ 303.518974][ T5820] usb 1-1: USB disconnect, device number 24 [ 303.532931][ T3105] hid_parser_main: 33 callbacks suppressed [ 303.532952][ T3105] gt683r_led 0003:1770:FF00.0007: unknown main item tag 0x0 [ 303.564510][ T3105] gt683r_led 0003:1770:FF00.0007: unknown main item tag 0x0 [ 303.572002][ T3105] gt683r_led 0003:1770:FF00.0007: unknown main item tag 0x0 [ 303.579969][ T3105] gt683r_led 0003:1770:FF00.0007: unknown main item tag 0x0 [ 303.591530][ T3105] gt683r_led 0003:1770:FF00.0007: unknown main item tag 0x0 [ 303.602226][ T3105] gt683r_led 0003:1770:FF00.0007: unknown main item tag 0x0 [ 303.609710][ T3105] gt683r_led 0003:1770:FF00.0007: unknown main item tag 0x0 [ 303.621654][ T3105] gt683r_led 0003:1770:FF00.0007: unknown main item tag 0x0 [ 303.632336][ T3105] gt683r_led 0003:1770:FF00.0007: unknown main item tag 0x0 [ 303.663293][ T3105] gt683r_led 0003:1770:FF00.0007: unknown main item tag 0x0 [ 303.692497][ T3105] gt683r_led 0003:1770:FF00.0007: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.3-1/input0 [ 303.738138][ T9339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.750472][ T10] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 303.750526][ T9339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.913337][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 303.926559][ T3105] usb 4-1: USB disconnect, device number 32 [ 303.939975][ T5820] gt683r_led 0003:1770:FF00.0007: failed to send set report request: -19 [ 303.964313][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 303.978347][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.988045][ T10] usb 3-1: Product: â¦‡â€¼â·­î¹»è¶žè¬·ì¼¶â¸œé’ºä¼ƒíƒ·èŸŒâŒ”æ–œá°—åŽ•ì‚µä«§íŠæ±†é€•絜ꃋ⥒䚻傔è°ï¡î—¾æ¸²ìµ¬â¯›á¶è§ªç‘¸âž®â€¥à¯ë´»èšíŠ¤ë´§á©§áŠ¶ã‘¿å” ç°¡à³å¹²Ù¿æŸ–泣介ì‡åž·âï¡ì£“润싱ìƒïªšå‘¢ [ 304.012904][ T10] usb 3-1: Manufacturer: Ь [ 304.023886][ T10] usb 3-1: SerialNumber: Ñ [ 304.341997][ T5623] Bluetooth: hci0: command 0x0c1a tx timeout [ 304.964697][ T29] audit: type=1400 audit(2000000091.080:641): avc: denied { getopt } for pid=9381 comm="syz.3.855" lport=28196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 305.395240][ T9397] overlayfs: failed to resolve '/r_expiration': -2 [ 305.548195][ T29] audit: type=1400 audit(2000000091.660:642): avc: denied { execheap } for pid=9401 comm="syz.0.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 305.569617][ T9402] netlink: 392 bytes leftover after parsing attributes in process `syz.0.860'. [ 305.622187][ T10] usbhid 3-1:1.0: can't add hid device: -71 [ 305.639087][ T10] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 305.670762][ T10] usb 3-1: USB disconnect, device number 32 [ 305.753749][ T804] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 305.843601][ T29] audit: type=1400 audit(2000000091.920:643): avc: denied { read } for pid=9401 comm="syz.0.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 305.988401][ T29] audit: type=1400 audit(2000000092.100:644): avc: denied { write } for pid=9401 comm="syz.0.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 306.019415][ T804] usb 6-1: device descriptor read/64, error -71 [ 306.279132][ T804] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 306.423445][ T5623] Bluetooth: hci0: command 0x0c1a tx timeout [ 306.529275][ T804] usb 6-1: device descriptor read/64, error -71 [ 306.839515][ T804] usb usb6-port1: attempt power cycle [ 306.925404][ T9420] netlink: 64 bytes leftover after parsing attributes in process `syz.2.865'. [ 306.992411][ T9420] netlink: 64 bytes leftover after parsing attributes in process `syz.2.865'. [ 307.188787][ T9425] macsec1: entered promiscuous mode [ 307.206008][ T9425] bridge0: entered promiscuous mode [ 307.213209][ T804] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 307.214515][ T9429] netlink: 'syz.3.869': attribute type 1 has an invalid length. [ 307.242417][ T804] usb 6-1: device descriptor read/8, error -71 [ 307.266586][ T29] audit: type=1400 audit(2000000093.380:645): avc: denied { ioctl } for pid=9433 comm="syz.1.870" path="socket:[23958]" dev="sockfs" ino=23958 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 307.321685][ T9429] 8021q: adding VLAN 0 to HW filter on device bond4 [ 307.342412][ T9429] bond3: (slave bond4): making interface the new active one [ 307.371030][ T9429] bond3: (slave bond4): Enslaving as an active interface with an up link [ 307.420948][ T9437] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 307.469029][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 307.512672][ T9429] netlink: 28 bytes leftover after parsing attributes in process `syz.3.869'. [ 307.532183][ T9429] 8021q: adding VLAN 0 to HW filter on device bond3 [ 307.628982][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 307.637571][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 307.646823][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.654910][ T10] usb 3-1: Product: syz [ 307.659295][ T10] usb 3-1: Manufacturer: syz [ 307.663918][ T10] usb 3-1: SerialNumber: syz [ 307.688977][ T804] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 307.709502][ T804] usb 6-1: device descriptor read/8, error -71 [ 307.799029][ T5721] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 307.881272][ T804] usb usb6-port1: unable to enumerate USB device [ 307.981536][ T10] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 307.989267][ T10] usb 3-1: unit 0 not found! [ 308.031587][ T10] usb 3-1: USB disconnect, device number 33 [ 308.647055][ T5623] Bluetooth: hci0: command 0x0c1a tx timeout [ 308.664757][ T5721] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.681733][ T5721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 308.697010][ T5721] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 308.713051][ T5721] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 308.716287][ T7573] udevd[7573]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 308.722760][ T5721] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 308.774654][ T5721] usb 4-1: Manufacturer: syz [ 308.795458][ T9447] netlink: 12 bytes leftover after parsing attributes in process `syz.5.873'. [ 308.812428][ T5721] usb 4-1: config 0 descriptor?? [ 309.885639][ T10] usb 4-1: USB disconnect, device number 33 [ 309.917343][ T9456] syzkaller0: entered promiscuous mode [ 309.928741][ T9456] syzkaller0: entered allmulticast mode [ 310.027254][ T29] audit: type=1400 audit(2000000096.140:646): avc: denied { cmd } for pid=9461 comm="syz.0.878" path="/dev/ublk-control" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 311.552552][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.566108][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.586016][ T1311] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 311.870662][ T9474] overlayfs: missing 'lowerdir' [ 312.265127][ T9473] netlink: 20 bytes leftover after parsing attributes in process `syz.1.879'. [ 312.554270][ T9486] netlink: 24 bytes leftover after parsing attributes in process `syz.2.883'. [ 312.594703][ T29] audit: type=1400 audit(2000000098.710:647): avc: denied { watch watch_reads } for pid=9487 comm="syz.3.884" path="/" dev="ramfs" ino=24082 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 312.623986][ T9488] FAULT_INJECTION: forcing a failure. [ 312.623986][ T9488] name failslab, interval 1, probability 0, space 0, times 0 [ 312.637919][ T9486] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9486 comm=syz.2.883 [ 312.653706][ T9488] CPU: 0 UID: 0 PID: 9488 Comm: syz.3.884 Tainted: G L syzkaller #0 PREEMPT(full) [ 312.653737][ T9488] Tainted: [L]=SOFTLOCKUP [ 312.653743][ T9488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 312.653758][ T9488] Call Trace: [ 312.653764][ T9488] [ 312.653772][ T9488] dump_stack_lvl+0x100/0x190 [ 312.653798][ T9488] should_fail_ex.cold+0x5/0xa [ 312.653822][ T9488] should_failslab+0xc2/0x120 [ 312.653843][ T9488] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 312.653869][ T9488] ? security_file_alloc+0x34/0x2c0 [ 312.653895][ T9488] ? trace_kmem_cache_alloc+0xd5/0x100 [ 312.653920][ T9488] security_file_alloc+0x34/0x2c0 [ 312.653948][ T9488] init_file+0x95/0x480 [ 312.653975][ T9488] alloc_empty_file+0x79/0x1c0 [ 312.654002][ T9488] path_openat+0xe8/0x31a0 [ 312.654024][ T9488] ? kasan_save_stack+0x3f/0x50 [ 312.654041][ T9488] ? kasan_save_stack+0x30/0x50 [ 312.654056][ T9488] ? kasan_save_track+0x14/0x30 [ 312.654071][ T9488] ? __kasan_slab_alloc+0x89/0x90 [ 312.654088][ T9488] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 312.654113][ T9488] ? do_getname+0x35/0x390 [ 312.654138][ T9488] ? do_syscall_64+0x115/0x870 [ 312.654160][ T9488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.654182][ T9488] ? __pfx_path_openat+0x10/0x10 [ 312.654214][ T9488] do_file_open+0x20e/0x430 [ 312.654239][ T9488] ? __pfx_do_file_open+0x10/0x10 [ 312.654278][ T9488] ? _raw_spin_unlock+0x28/0x50 [ 312.654295][ T9488] ? alloc_fd+0x476/0x790 [ 312.654325][ T9488] do_sys_openat2+0x10d/0x1e0 [ 312.654352][ T9488] ? __pfx_do_sys_openat2+0x10/0x10 [ 312.654380][ T9488] ? __fget_files+0x21f/0x3d0 [ 312.654407][ T9488] __x64_sys_open+0xfe/0x1d0 [ 312.654433][ T9488] ? __pfx___x64_sys_open+0x10/0x10 [ 312.654456][ T9488] ? ksys_write+0x1ac/0x250 [ 312.654480][ T9488] ? rcu_is_watching+0x12/0xc0 [ 312.654510][ T9488] do_syscall_64+0x115/0x870 [ 312.654531][ T9488] ? clear_bhb_loop+0x40/0x90 [ 312.654554][ T9488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.654572][ T9488] RIP: 0033:0x7f4bb979ce59 [ 312.654587][ T9488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.654604][ T9488] RSP: 002b:00007f4bba5f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 312.654621][ T9488] RAX: ffffffffffffffda RBX: 00007f4bb9a15fa0 RCX: 00007f4bb979ce59 [ 312.654633][ T9488] RDX: 000000000000006c RSI: 0000000000000000 RDI: 0000200000000040 [ 312.654643][ T9488] RBP: 00007f4bba5f4090 R08: 0000000000000000 R09: 0000000000000000 [ 312.654653][ T9488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.654662][ T9488] R13: 00007f4bb9a16038 R14: 00007f4bb9a15fa0 R15: 00007ffe558122e8 [ 312.654687][ T9488] [ 312.986727][ T9493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.007701][ T29] audit: type=1400 audit(2000000099.120:648): avc: denied { name_bind } for pid=9494 comm="syz.1.887" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 313.054008][ T29] audit: type=1400 audit(2000000099.170:649): avc: denied { read } for pid=9492 comm="syz.2.886" lport=52414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 314.261387][ T9521] xt_hl: Unknown Hop Limit match mode: 206 [ 314.419021][ T3105] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 314.588931][ T3105] usb 1-1: Using ep0 maxpacket: 8 [ 314.605704][ T3105] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 314.634894][ T3105] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 314.667478][ T3105] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 314.697750][ T3105] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 314.732546][ T3105] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 314.763189][ T3105] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 314.788920][ T3105] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.817750][ T3105] usb 1-1: config 0 descriptor?? [ 314.846739][ T9512] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 315.304582][ T9527] netlink: 68 bytes leftover after parsing attributes in process `syz.3.895'. [ 315.444263][ T9529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.895'. [ 315.785620][ T9530] netlink: 'syz.0.891': attribute type 49 has an invalid length. [ 315.857443][ T9530] bond_slave_0: entered promiscuous mode [ 315.863271][ T9530] bond_slave_0: entered allmulticast mode [ 316.428706][ T29] audit: type=1400 audit(2000000102.540:650): avc: denied { create } for pid=9542 comm="syz.1.897" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 316.462718][ T9543] fuse: fd is not a fuse device [ 316.498159][ T29] audit: type=1400 audit(2000000102.580:651): avc: denied { mounton } for pid=9542 comm="syz.1.897" path="/198/file0" dev="tmpfs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 316.571198][ T29] audit: type=1400 audit(2000000102.690:652): avc: denied { read write } for pid=9542 comm="syz.1.897" name="file0" dev="tmpfs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 316.674024][ T29] audit: type=1400 audit(2000000102.690:653): avc: denied { open } for pid=9542 comm="syz.1.897" path="/198/file0" dev="tmpfs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 316.788361][ T29] audit: type=1804 audit(2000000102.820:654): pid=9546 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.898" name="/newroot/169/file0" dev="tmpfs" ino=909 res=1 errno=0 [ 316.979357][ T5623] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 317.267818][ T9571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23060 sclass=netlink_route_socket pid=9571 comm=syz.3.904 [ 317.319019][ T29] audit: type=1400 audit(2000000103.430:655): avc: denied { write } for pid=9541 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.374046][ T9568] xfrm0 speed is unknown, defaulting to 1000 [ 317.597541][ T29] audit: type=1400 audit(2000000103.710:656): avc: denied { write } for pid=9579 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 318.561248][ T5721] usb 1-1: USB disconnect, device number 25 [ 318.561982][ T9591] netlink: 'syz.2.908': attribute type 1 has an invalid length. [ 318.710247][ T9591] bond1: entered promiscuous mode [ 318.723557][ T9591] 8021q: adding VLAN 0 to HW filter on device bond1 [ 318.828953][ T3105] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 318.945672][ T29] audit: type=1400 audit(2000000105.060:657): avc: denied { mounton } for pid=9605 comm="syz.2.911" path="/185/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 318.945854][ T9606] overlayfs: failed to resolve 'smackfstransmute=': -2 [ 318.998499][ T3105] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 319.028517][ T29] audit: type=1400 audit(2000000105.140:658): avc: denied { append } for pid=9605 comm="syz.2.911" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 319.056721][ T3105] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 319.070350][ T3105] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.079083][ T3105] usb 6-1: Product: â¦‡â€¼â·­î¹»è¶žè¬·ì¼¶â¸œé’ºä¼ƒíƒ·èŸŒâŒ”æ–œá°—åŽ•ì‚µä«§íŠæ±†é€•絜ꃋ⥒䚻傔è°ï¡î—¾æ¸²ìµ¬â¯›á¶è§ªç‘¸âž®â€¥à¯ë´»èšíŠ¤ë´§á©§áŠ¶ã‘¿å” ç°¡à³å¹²Ù¿æŸ–泣介ì‡åž·âï¡ì£“润싱ìƒïªšå‘¢ [ 319.099980][ T3105] usb 6-1: Manufacturer: Ь [ 319.104564][ T3105] usb 6-1: SerialNumber: Ñ [ 319.209712][ T29] audit: type=1400 audit(2000000105.330:659): avc: denied { unmount } for pid=5631 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 320.049013][ T5734] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 320.199477][ T5734] usb 3-1: Using ep0 maxpacket: 8 [ 320.209211][ T5734] usb 3-1: too many configurations: 254, using maximum allowed: 8 [ 320.224177][ T5734] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 320.248616][ T5734] usb 3-1: can't read configurations, error -61 [ 320.399071][ T5734] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 321.090322][ T3105] usbhid 6-1:1.0: can't add hid device: -71 [ 321.234844][ T5734] usb 3-1: Using ep0 maxpacket: 8 [ 321.350947][ T5734] usb 3-1: too many configurations: 254, using maximum allowed: 8 [ 321.359005][ T3105] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 321.511840][ T3105] usb 6-1: USB disconnect, device number 12 [ 321.518192][ T5734] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 321.686974][ T5734] usb 3-1: can't read configurations, error -61 [ 321.697952][ T5734] usb usb3-port1: attempt power cycle [ 322.069508][ T5734] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 322.109863][ T5734] usb 3-1: Using ep0 maxpacket: 8 [ 322.122353][ T5734] usb 3-1: too many configurations: 254, using maximum allowed: 8 [ 322.162978][ T5734] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 322.179579][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.927'. [ 322.184080][ T5734] usb 3-1: can't read configurations, error -61 [ 322.214898][ T9666] netlink: 56 bytes leftover after parsing attributes in process `syz.1.927'. [ 322.233078][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.927'. [ 322.274231][ T9672] xfrm0 speed is unknown, defaulting to 1000 [ 322.349760][ T5734] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 322.417147][ T9675] comedi comedi2: comedi_config --init_data is deprecated [ 322.448985][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 322.457016][ T5734] usb 3-1: Using ep0 maxpacket: 8 [ 322.464578][ T5734] usb 3-1: too many configurations: 254, using maximum allowed: 8 [ 322.869583][ T3105] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 323.085368][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 323.105922][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.117896][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 323.129212][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 323.139780][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 323.149609][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 323.172877][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 323.188155][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 323.201755][ T5734] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 323.229089][ T5734] usb 3-1: can't read configurations, error -71 [ 323.235756][ T10] usb 4-1: Manufacturer: syz [ 323.244849][ T10] usb 4-1: config 0 descriptor?? [ 323.250812][ T5734] usb usb3-port1: unable to enumerate USB device [ 323.272206][ T3105] usb 1-1: Using ep0 maxpacket: 16 [ 323.282523][ T3105] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 323.293064][ T3105] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.301780][ T3105] usb 1-1: Product: syz [ 323.306114][ T3105] usb 1-1: Manufacturer: syz [ 323.312545][ T3105] usb 1-1: SerialNumber: syz [ 323.328673][ T3105] r8152-cfgselector 1-1: Unknown version 0x0000 [ 323.342298][ T3105] r8152-cfgselector 1-1: config 0 descriptor?? [ 323.466325][ T9669] netlink: 'syz.3.929': attribute type 10 has an invalid length. [ 323.477592][ T9669] netlink: 40 bytes leftover after parsing attributes in process `syz.3.929'. [ 323.510431][ T9669] dummy0: entered promiscuous mode [ 323.515964][ T9669] dummy0: entered allmulticast mode [ 323.526326][ T9669] bridge0: port 3(dummy0) entered blocking state [ 323.541575][ T9689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.934'. [ 323.555604][ T9669] bridge0: port 3(dummy0) entered disabled state [ 323.617434][ T9669] bridge0: port 3(dummy0) entered blocking state [ 323.623865][ T9669] bridge0: port 3(dummy0) entered forwarding state [ 323.816209][ T3105] r8152-cfgselector 1-1: Unknown version 0x0000 [ 323.845775][ T3105] r8152-cfgselector 1-1: No union descriptors [ 323.900868][ T3105] r8152-cfgselector 1-1: USB disconnect, device number 26 [ 323.952496][ T9669] xfrm0 speed is unknown, defaulting to 1000 [ 324.280698][ T9696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.936'. [ 324.954886][ T29] audit: type=1400 audit(2000000111.070:660): avc: denied { set_context_mgr } for pid=9715 comm="syz.5.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 324.976693][ T9717] binder: 9715:9717 ioctl 40045612 200000000040 returned -22 [ 326.076498][ T9740] netlink: 'syz.2.943': attribute type 2 has an invalid length. [ 326.099626][ T3105] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 326.107896][ T9740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.943'. [ 326.153232][ T29] audit: type=1400 audit(2000000112.270:661): avc: denied { ioctl } for pid=9726 comm="syz.2.943" path="socket:[24498]" dev="sockfs" ino=24498 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 326.210603][ T9740] openvswitch: netlink: Message has 4 unknown bytes. [ 326.223451][ T9740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.278938][ T3105] usb 1-1: Using ep0 maxpacket: 32 [ 326.332497][ T3105] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 326.357227][ T3105] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.365578][ T3105] usb 1-1: Product: syz [ 326.373609][ T3105] usb 1-1: Manufacturer: syz [ 326.381004][ T3105] usb 1-1: SerialNumber: syz [ 326.398459][ T3105] usb 1-1: config 0 descriptor?? [ 326.408962][ T10] rc_core: IR keymap rc-hauppauge not found [ 326.424521][ T10] Registered IR keymap rc-empty [ 327.479063][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 327.498442][ T9736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.518978][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 327.538107][ T9736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.572573][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 327.670791][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input25 [ 327.694316][ T3105] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 027 [ 327.732469][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 327.791247][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 327.840811][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 327.903642][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 327.939059][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 327.989021][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 328.029008][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 328.070423][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 328.110655][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 328.139016][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 328.185055][ T10] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 328.210593][ T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 328.257750][ T10] usb 4-1: USB disconnect, device number 34 [ 328.700098][ T5349] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 329.116099][ T5349] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 329.142620][ T5349] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.170682][ T5349] usb 6-1: Product: syz [ 329.185891][ T5349] usb 6-1: Manufacturer: syz [ 329.235437][ T5349] usb 6-1: SerialNumber: syz [ 329.261681][ T5349] usb 6-1: config 0 descriptor?? [ 329.283513][ T5349] ch341 6-1:0.0: ch341-uart converter detected [ 329.354934][ T29] audit: type=1400 audit(2000000115.470:662): avc: denied { write } for pid=9756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.496866][ T5349] usb 6-1: failed to receive control message: -121 [ 329.508210][ T29] audit: type=1400 audit(2000000115.630:663): avc: denied { write } for pid=9778 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.534535][ T5349] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 330.036428][ T10] usb 1-1: USB disconnect, device number 27 [ 330.309116][ T9803] PKCS7: Unknown OID: [4] 0.0 [ 330.313856][ T9803] PKCS7: Only support pkcs7_signedData type [ 330.320254][ T9804] PKCS7: Unknown OID: [4] 0.0 [ 330.324955][ T9804] PKCS7: Only support pkcs7_signedData type [ 330.362068][ T9799] xt_policy: output policy not valid in PREROUTING and INPUT [ 330.362638][ T9800] xt_policy: output policy not valid in PREROUTING and INPUT [ 330.520271][ T3105] usb 6-1: USB disconnect, device number 13 [ 330.528616][ T3105] ch341 6-1:0.0: device disconnected [ 331.214250][ T9813] netlink: 'syz.5.960': attribute type 1 has an invalid length. [ 331.222389][ T9813] netlink: 96 bytes leftover after parsing attributes in process `syz.5.960'. [ 331.239524][ T9813] netlink: 1 bytes leftover after parsing attributes in process `syz.5.960'. [ 331.278972][ T9813] netlink: 'syz.5.960': attribute type 1 has an invalid length. [ 331.319358][ T9813] netlink: 'syz.5.960': attribute type 8 has an invalid length. [ 331.364404][ T9813] netlink: 606 bytes leftover after parsing attributes in process `syz.5.960'. [ 331.371990][ T9811] xfrm0 speed is unknown, defaulting to 1000 [ 331.835983][ T9840] 9p: Bad value for 'afid' [ 331.841045][ T29] audit: type=1400 audit(2000000117.950:664): avc: denied { getopt } for pid=9838 comm="syz.1.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 332.297429][ T9860] SELinux: Context : is not valid (left unmapped). [ 332.337404][ T29] audit: type=1400 audit(2000000118.450:665): avc: denied { relabelto } for pid=9853 comm="syz.2.971" name="rdma.current" dev="tmpfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 332.404002][ T29] audit: type=1400 audit(2000000118.520:666): avc: denied { ioctl } for pid=9861 comm="syz.5.972" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 332.561250][ T29] audit: type=1400 audit(2000000118.550:667): avc: denied { associate } for pid=9853 comm="syz.2.971" name="rdma.current" dev="tmpfs" ino=1066 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 332.590326][ T29] audit: type=1400 audit(2000000118.590:668): avc: denied { map_create } for pid=9865 comm="syz.1.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 333.038999][ T5349] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 333.048461][ T29] audit: type=1400 audit(2000000118.590:669): avc: denied { map_read map_write } for pid=9865 comm="syz.1.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 333.282549][ T29] audit: type=1400 audit(2000000118.590:670): avc: denied { create } for pid=9865 comm="syz.1.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 333.356366][ T29] audit: type=1400 audit(2000000118.590:671): avc: denied { bind } for pid=9865 comm="syz.1.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 333.377912][ T29] audit: type=1400 audit(2000000118.590:672): avc: denied { name_bind } for pid=9865 comm="syz.1.973" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 333.425498][ T29] audit: type=1400 audit(2000000118.590:673): avc: denied { node_bind } for pid=9865 comm="syz.1.973" saddr=fe80::3a src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 333.430203][ T5349] usb 6-1: Using ep0 maxpacket: 8 [ 333.541602][ T5349] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 333.579799][ T5349] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 333.591536][ T9873] netlink: 76 bytes leftover after parsing attributes in process `syz.0.974'. [ 333.612015][ T9873] Cannot find add_set index 2 as target [ 333.618543][ T5349] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 333.660283][ T5349] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 333.682035][ T5349] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.702387][ T9875] loop5: detected capacity change from 0 to 7 [ 333.708806][ T5349] usb 6-1: Product: syz [ 333.708827][ T5349] usb 6-1: Manufacturer: syz [ 333.708840][ T5349] usb 6-1: SerialNumber: syz [ 333.786544][ T5349] usb 6-1: config 0 descriptor?? [ 333.799692][ T9883] program syz.3.975 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 333.828440][ T5349] streamzap 6-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 333.883280][ T9875] Buffer I/O error on dev loop5, logical block 0, async page read [ 333.905715][ T6118] Buffer I/O error on dev loop5, logical block 0, async page read [ 333.927868][ T9875] Buffer I/O error on dev loop5, logical block 0, async page read [ 333.947770][ T6118] Buffer I/O error on dev loop5, logical block 0, async page read [ 333.961954][ T9875] Buffer I/O error on dev loop5, logical block 0, async page read [ 333.972868][ T6118] Buffer I/O error on dev loop5, logical block 0, async page read [ 333.982744][ T9875] Buffer I/O error on dev loop5, logical block 0, async page read [ 334.000995][ T6118] Buffer I/O error on dev loop5, logical block 0, async page read [ 334.015112][ T9875] Buffer I/O error on dev loop5, logical block 0, async page read [ 334.038454][ T6118] Buffer I/O error on dev loop5, logical block 0, async page read [ 334.047606][ T9862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.061301][ T9875] ldm_validate_partition_table(): Disk read failed. [ 334.070327][ T9862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.080368][ T9875] Dev loop5: unable to read RDB block 0 [ 334.088564][ T9862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.094276][ T9875] loop5: unable to read partition table [ 334.099011][ T9862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.104831][ T9875] loop5: partition table beyond EOD, truncated [ 334.143768][ T9875] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 334.272854][ T9862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.281700][ T9862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.292680][ T3105] usb 6-1: USB disconnect, device number 14 [ 335.573497][ T3105] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 335.762539][ T3105] usb 6-1: unable to get BOS descriptor or descriptor too short [ 335.773943][ T3105] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.786054][ T3105] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 335.805982][ T3105] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 335.815281][ T3105] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.823454][ T3105] usb 6-1: Product: syz [ 335.829044][ T3105] usb 6-1: Manufacturer: syz [ 335.833915][ T3105] usb 6-1: SerialNumber: syz [ 336.067359][ T9911] overlayfs: failed to verify upper (58/file1, ino=340, err=-116) [ 336.094582][ T9911] overlayfs: failed to verify index dir 'upper' xattr [ 336.114823][ T9911] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 336.246493][ T3105] usb 6-1: selecting invalid altsetting 1 [ 336.263003][ T3105] usb 6-1: unit 3 not found! [ 336.281885][ T3105] usb 6-1: cannot request logical cluster ID: 0 (err: -71) [ 336.296116][ T3105] usb 6-1: invalid MIXER UNIT descriptor 6 [ 336.725187][ T3105] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 336.769646][ T3105] usb 6-1: USB disconnect, device number 15 [ 336.838059][ T6118] udevd[6118]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 336.952923][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 336.952938][ T29] audit: type=1400 audit(2000000123.070:768): avc: denied { ioctl } for pid=9942 comm="syz.1.993" path="socket:[26900]" dev="sockfs" ino=26900 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 337.050000][ T9948] FAULT_INJECTION: forcing a failure. [ 337.050000][ T9948] name failslab, interval 1, probability 0, space 0, times 0 [ 337.109357][ T9948] CPU: 1 UID: 0 PID: 9948 Comm: syz.0.995 Tainted: G L syzkaller #0 PREEMPT(full) [ 337.109386][ T9948] Tainted: [L]=SOFTLOCKUP [ 337.109392][ T9948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 337.109403][ T9948] Call Trace: [ 337.109409][ T9948] [ 337.109416][ T9948] dump_stack_lvl+0x100/0x190 [ 337.109444][ T9948] should_fail_ex.cold+0x5/0xa [ 337.109469][ T9948] should_failslab+0xc2/0x120 [ 337.109490][ T9948] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 337.109518][ T9948] ? __d_alloc+0x34/0xa40 [ 337.109549][ T9948] __d_alloc+0x34/0xa40 [ 337.109577][ T9948] d_alloc+0x4a/0x1e0 [ 337.109605][ T9948] lookup_one_qstr_excl+0x171/0x250 [ 337.109632][ T9948] ? mnt_get_write_access+0x52/0x2f0 [ 337.109652][ T9948] __start_renaming+0x16d/0x520 [ 337.109685][ T9948] filename_renameat2+0x538/0xa60 [ 337.109719][ T9948] ? __pfx_filename_renameat2+0x10/0x10 [ 337.109752][ T9948] ? __might_fault+0xc5/0x140 [ 337.109793][ T9948] ? do_getname+0x191/0x390 [ 337.109822][ T9948] __x64_sys_rename+0x81/0xb0 [ 337.109848][ T9948] do_syscall_64+0x115/0x870 [ 337.109871][ T9948] ? clear_bhb_loop+0x40/0x90 [ 337.109896][ T9948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.109913][ T9948] RIP: 0033:0x7f3b80b9ce59 [ 337.109929][ T9948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.109945][ T9948] RSP: 002b:00007f3b81af0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 337.109962][ T9948] RAX: ffffffffffffffda RBX: 00007f3b80e15fa0 RCX: 00007f3b80b9ce59 [ 337.109973][ T9948] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000580 [ 337.109983][ T9948] RBP: 00007f3b81af0090 R08: 0000000000000000 R09: 0000000000000000 [ 337.109993][ T9948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.110003][ T9948] R13: 00007f3b80e16038 R14: 00007f3b80e15fa0 R15: 00007ffde6136528 [ 337.110029][ T9948] [ 337.113562][ T29] audit: type=1400 audit(2000000123.230:769): avc: denied { create } for pid=9946 comm="syz.2.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 337.414824][ T29] audit: type=1400 audit(2000000123.230:770): avc: denied { ioctl } for pid=9946 comm="syz.2.994" path="socket:[26454]" dev="sockfs" ino=26454 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 337.443044][ T29] audit: type=1400 audit(2000000123.360:771): avc: denied { setopt } for pid=9946 comm="syz.2.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 337.468146][ T29] audit: type=1400 audit(2000000123.360:772): avc: denied { write } for pid=9946 comm="syz.2.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 337.487904][ T29] audit: type=1400 audit(2000000123.360:773): avc: denied { create } for pid=9946 comm="syz.2.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 337.940895][ T29] audit: type=1400 audit(2000000123.400:774): avc: denied { bind } for pid=9946 comm="syz.2.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 338.098170][ T29] audit: type=1400 audit(2000000123.560:775): avc: denied { read } for pid=9946 comm="syz.2.994" path="socket:[26454]" dev="sockfs" ino=26454 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 338.145346][ T29] audit: type=1400 audit(2000000123.670:776): avc: denied { create } for pid=9956 comm="syz.0.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 338.181016][ T29] audit: type=1400 audit(2000000123.670:777): avc: denied { bind } for pid=9956 comm="syz.0.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 338.369282][ T5349] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 338.660833][ T5349] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 338.710513][ T5349] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 338.735993][ T5349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.758469][ T5349] usb 1-1: Product: syz [ 338.766891][ T5349] usb 1-1: Manufacturer: syz [ 338.772886][ T5349] usb 1-1: SerialNumber: syz [ 338.841772][ T9982] tc_dump_action: action bad kind [ 339.229083][ T5707] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 339.381366][ T5707] usb 3-1: config index 0 descriptor too short (expected 254, got 36) [ 339.536774][ T5707] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.557577][ T5707] usb 3-1: config 0 has no interfaces? [ 339.593464][ T5707] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 339.809699][ T9998] hugetlbfs: syz.1.1007 (9998): Using mlock ulimits for SHM_HUGETLB is obsolete [ 339.983879][ T5707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.996976][ T5707] usb 3-1: config 0 descriptor?? [ 340.088023][T10002] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 340.442191][ T9985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.453581][ T9985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.515235][ T3105] usb 3-1: USB disconnect, device number 38 [ 340.645113][ T5349] usbhid 1-1:1.0: can't add hid device: -71 [ 340.651840][ T5349] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 340.878174][ T5349] usb 1-1: USB disconnect, device number 28 [ 340.927409][T10012] sctp: [Deprecated]: syz.0.1012 (pid 10012) Use of int in max_burst socket option. [ 340.927409][T10012] Use struct sctp_assoc_value instead [ 341.030090][ T3105] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 341.199102][ T3105] usb 3-1: Using ep0 maxpacket: 16 [ 341.199849][ T3105] usb 3-1: too many configurations: 70, using maximum allowed: 8 [ 341.204452][ T3105] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 341.204474][ T3105] usb 3-1: can't read configurations, error -61 [ 341.260169][T10022] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1016'. [ 341.260184][T10022] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1016'. [ 341.260193][T10022] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1016'. [ 341.305903][T10024] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1017'. [ 341.348037][ T3105] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 341.369031][ T5349] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 341.499018][ T3105] usb 3-1: Using ep0 maxpacket: 16 [ 341.499559][ T3105] usb 3-1: too many configurations: 70, using maximum allowed: 8 [ 341.500787][ T3105] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 341.500805][ T3105] usb 3-1: can't read configurations, error -61 [ 341.500962][ T3105] usb usb3-port1: attempt power cycle [ 341.529049][ T5349] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 341.529078][ T5349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.529098][ T5349] usb 1-1: Product: syz [ 341.529113][ T5349] usb 1-1: Manufacturer: syz [ 341.529126][ T5349] usb 1-1: SerialNumber: syz [ 341.617902][T10031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.839284][ T3105] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 341.853983][T10018] netlink: 'syz.0.1015': attribute type 3 has an invalid length. [ 342.033270][ T3105] usb 3-1: device descriptor read/8, error -71 [ 342.461369][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 342.461434][ T29] audit: type=1400 audit(2000000128.540:811): avc: denied { write } for pid=10017 comm="syz.0.1015" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 342.535929][ T5349] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 343.326347][ T5349] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 343.353846][ T5349] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 343.371953][ T5349] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 343.428147][ T5349] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 343.477257][ T29] audit: type=1400 audit(2000000129.590:812): avc: denied { create } for pid=10042 comm="syz.2.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 343.777723][ T29] audit: type=1400 audit(2000000129.620:813): avc: denied { watch } for pid=10042 comm="syz.2.1022" path="/213" dev="tmpfs" ino=1127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 343.939833][ T29] audit: type=1400 audit(2000000129.620:814): avc: denied { connect } for pid=10042 comm="syz.2.1022" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 343.961248][ T29] audit: type=1400 audit(2000000129.680:815): avc: denied { watch_reads } for pid=10042 comm="syz.2.1022" path="/213" dev="tmpfs" ino=1127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 343.971743][ T5349] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 344.053362][ T5349] usb 1-1: USB disconnect, device number 29 [ 344.097493][T10049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1024'. [ 344.118987][ T804] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 344.148707][T10050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1024'. [ 344.207640][ T29] audit: type=1400 audit(2000000130.320:816): avc: denied { create } for pid=10056 comm="syz.5.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 344.261106][T10050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1024'. [ 344.280314][ T804] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.305005][ T804] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 344.316628][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 344.327853][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 344.358587][ T804] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 344.385675][T10061] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20004 [ 344.420352][ T804] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 344.449283][ T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 344.549298][ T804] usb 4-1: Product: syz [ 344.553529][ T804] usb 4-1: Manufacturer: syz [ 344.558127][ T804] usb 4-1: SerialNumber: syz [ 344.778580][ T29] audit: type=1400 audit(2000000130.760:817): avc: denied { mount } for pid=10058 comm="syz.1.1028" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 344.782661][ T804] usb 4-1: config 0 descriptor?? [ 345.183538][ T804] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 345.216694][ T804] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 345.302979][ T29] audit: type=1400 audit(2000000131.420:818): avc: denied { execute_no_trans } for pid=10072 comm="syz.0.1032" path="/181/file0" dev="tmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 345.498910][ T804] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 345.507261][T10073] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 345.510909][ T804] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 345.527382][ T804] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 345.701510][ T804] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 345.935001][ T29] audit: type=1400 audit(2000000132.050:819): avc: denied { read write } for pid=10088 comm="syz.2.1037" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 346.206542][T10091] xfrm0 speed is unknown, defaulting to 1000 [ 346.916716][ T29] audit: type=1400 audit(2000000132.050:820): avc: denied { open } for pid=10088 comm="syz.2.1037" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 346.955787][ T804] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 347.422091][ T804] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 347.461702][ T804] usb 4-1: USB disconnect, device number 35 [ 347.542622][T10090] kAFS: unable to lookup cell '(,c¾ûL' [ 347.606566][ T5721] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 347.751742][ T5721] usb 3-1: device descriptor read/64, error -71 [ 347.846449][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 347.846465][ T29] audit: type=1400 audit(2000000133.950:822): avc: denied { ioctl } for pid=10104 comm="syz.3.1041" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 347.952371][ T29] audit: type=1400 audit(2000000134.070:823): avc: denied { ioctl } for pid=10100 comm="syz.0.1040" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=27362 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 348.068994][ T5721] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 348.105888][T10119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1040'. [ 348.125122][T10118] comedi comedi3: rti800: I/O base address or length out of range [ 348.208937][ T5721] usb 3-1: device descriptor read/64, error -71 [ 348.216354][ T29] audit: type=1400 audit(2000000134.240:824): avc: denied { append } for pid=10115 comm="syz.3.1043" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 348.504548][ T5721] usb usb3-port1: attempt power cycle [ 348.715328][ T29] audit: type=1400 audit(2000000134.830:825): avc: denied { firmware_load } for pid=10123 comm="syz.1.1044" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 348.802876][T10124] syz.1.1044 (10124) used greatest stack depth: 18688 bytes left [ 348.871675][ T5721] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 348.938992][ T5721] usb 3-1: device descriptor read/8, error -71 [ 349.074135][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1046'. [ 349.083216][T10129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1046'. [ 349.104924][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1046'. [ 349.513513][T10129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1046'. [ 349.527031][ T29] audit: type=1400 audit(2000000135.300:826): avc: denied { mount } for pid=10130 comm="syz.3.1047" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 349.884485][ T29] audit: type=1400 audit(2000000135.930:827): avc: denied { create } for pid=10139 comm="syz.0.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 349.909258][ T29] audit: type=1400 audit(2000000135.930:828): avc: denied { write } for pid=10139 comm="syz.0.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 349.928822][ T29] audit: type=1400 audit(2000000135.940:829): avc: denied { connect } for pid=10139 comm="syz.0.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 349.962555][ T29] audit: type=1400 audit(2000000135.940:830): avc: denied { setopt } for pid=10139 comm="syz.0.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 349.982719][ T29] audit: type=1400 audit(2000000135.940:831): avc: denied { bind } for pid=10139 comm="syz.0.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 350.019011][ T804] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 350.823505][ T804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 350.882905][ T804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.893770][T10150] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[10155] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[10150] [ 350.911219][ T804] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 350.920521][ T804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.933072][ T804] usb 6-1: config 0 descriptor?? [ 351.166674][T10160] tmpfs: Bad value for 'mpol' [ 351.235638][T10162] fuse: fd is not a fuse device [ 351.266807][T10153] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 351.375749][ T804] hid_parser_main: 28 callbacks suppressed [ 351.375769][ T804] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 351.423779][ T804] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 351.453060][ T804] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 351.474359][ T804] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 351.492573][ T804] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 351.522381][ T804] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 351.548516][ T804] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 351.558972][ T5734] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 351.581625][ T804] isku 0003:1E7D:319C.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 351.756607][ T5734] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.785993][ T5734] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 351.811185][ T5734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.839757][ T5734] usb 3-1: config 0 descriptor?? [ 351.917645][ T5707] usb 6-1: USB disconnect, device number 16 [ 352.017468][ T804] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 352.210933][ T804] usb 1-1: device descriptor read/64, error -71 [ 352.224601][T10175] xfrm0 speed is unknown, defaulting to 1000 [ 352.458958][ T804] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 352.608987][ T804] usb 1-1: device descriptor read/64, error -71 [ 352.733079][ T804] usb usb1-port1: attempt power cycle [ 352.889982][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 352.889998][ T29] audit: type=1400 audit(2000000139.010:849): avc: denied { mounton } for pid=10191 comm="syz.5.1063" path="/bus" dev="hugetlbfs" ino=28370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 352.948455][T10178] xfrm0 speed is unknown, defaulting to 1000 [ 352.998185][ T29] audit: type=1400 audit(2000000139.100:850): avc: denied { write } for pid=10179 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 353.089098][ T804] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 353.150969][ T804] usb 1-1: device descriptor read/8, error -71 [ 353.300057][ T5623] Bluetooth: hci0: command 0x0c1a tx timeout [ 353.306194][ T29] audit: type=1400 audit(2000000139.420:851): avc: denied { write } for pid=10196 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 353.421906][ T804] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 353.481231][ T804] usb 1-1: device descriptor read/8, error -71 [ 353.619535][ T804] usb usb1-port1: unable to enumerate USB device [ 354.592117][ T29] audit: type=1400 audit(2000000140.710:852): avc: denied { write } for pid=10201 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.811784][ T29] audit: type=1400 audit(2000000140.910:853): avc: denied { write } for pid=10218 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.867077][ T804] usb 3-1: USB disconnect, device number 47 [ 354.991507][ T29] audit: type=1400 audit(2000000141.110:854): avc: denied { write } for pid=10224 comm="syz.0.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 355.115098][ T29] audit: type=1400 audit(2000000141.210:855): avc: denied { write } for pid=10224 comm="syz.0.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 355.490141][T10231] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1070'. [ 355.853524][ T29] audit: type=1400 audit(2000000141.970:856): avc: denied { sqpoll } for pid=10263 comm="syz.1.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 355.921108][ T29] audit: type=1400 audit(2000000142.030:857): avc: denied { write } for pid=10229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.979809][ T5734] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 356.014191][ T29] audit: type=1400 audit(2000000142.120:858): avc: denied { read write } for pid=10271 comm="syz.2.1081" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 356.017428][T10274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.047710][ T3105] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 356.148981][ T5734] usb 1-1: Using ep0 maxpacket: 8 [ 356.155374][ T5734] usb 1-1: config 6 has an invalid interface number: 213 but max is 1 [ 356.170570][ T5734] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 356.190251][ T5734] usb 1-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 356.208995][ T5734] usb 1-1: config 6 has no interface number 0 [ 356.222431][ T3105] usb 6-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 356.232537][ T5734] usb 1-1: config 6 interface 213 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 356.243533][ T3105] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.251636][ T5734] usb 1-1: config 6 interface 213 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 356.263490][ T3105] usb 6-1: Product: syz [ 356.267732][ T3105] usb 6-1: Manufacturer: syz [ 356.272386][ T3105] usb 6-1: SerialNumber: syz [ 356.277042][ T5734] usb 1-1: config 6 interface 213 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 356.288943][ T5721] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 356.298574][ T5734] usb 1-1: config 6 interface 213 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 356.323811][ T5734] usb 1-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=85.86 [ 356.333713][ T5734] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 356.346738][ T5734] usb 1-1: Manufacturer: syz [ 356.351480][ T5734] usb 1-1: SerialNumber: syz [ 356.448954][ T5721] usb 3-1: Using ep0 maxpacket: 32 [ 356.457648][ T5721] usb 3-1: config index 0 descriptor too short (expected 164, got 36) [ 356.467329][ T5721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.478660][ T5721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.488826][ T5721] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 356.498306][ T5721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.503233][ T3105] usb 6-1: 1:1 : format type 0 is detected, processed as PCM [ 356.516102][ T5721] usb 3-1: config 0 descriptor?? [ 356.527523][ T3105] usb 6-1: 1:1 : unsupported sample bitwidth 7 in 14 bytes [ 356.547103][ T3105] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 356.558470][ T3105] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 356.595190][ T3105] usb 6-1: 1:1 : format type 0 is detected, processed as PCM [ 356.620901][ T3105] usb 6-1: 1:1 : unsupported sample bitwidth 7 in 14 bytes [ 356.646051][ T3105] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 356.654963][ T3105] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 356.681703][ T3105] usb 6-1: 1:1 : format type 0 is detected, processed as PCM [ 356.712494][ T3105] usb 6-1: 1:1 : unsupported sample bitwidth 7 in 14 bytes [ 356.733392][ T3105] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 356.871020][ T5734] em28xx 1-1:6.213: New device syz @ 480 Mbps (eb1a:e357, interface 213, class 213) [ 356.896909][ T3105] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 356.908945][ T5734] em28xx 1-1:6.213: Audio interface 213 found (Vendor Class) [ 356.932398][ T3105] usb 6-1: USB disconnect, device number 17 [ 356.964861][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1084'. [ 356.974177][T10283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1084'. [ 356.985908][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1084'. [ 356.994796][T10283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1084'. [ 357.021525][ T5734] em28xx 1-1:6.213: unknown em28xx chip ID (0) [ 357.039970][ T6118] udevd[6118]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 357.061131][ T5734] em28xx 1-1:6.213: Config register raw data: 0xfffffffb [ 357.089115][ T5734] em28xx 1-1:6.213: AC97 chip type couldn't be determined [ 357.097919][ T5734] em28xx 1-1:6.213: No AC97 audio processor [ 357.116776][ T5734] usb 1-1: USB disconnect, device number 34 [ 357.131419][ T5734] em28xx 1-1:6.213: Disconnecting em28xx [ 357.162869][ T5734] em28xx 1-1:6.213: Freeing device [ 357.291497][ T5721] usbhid 3-1:0.0: can't add hid device: -71 [ 357.308389][ T5721] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 357.333726][ T5721] usb 3-1: USB disconnect, device number 48 [ 357.562576][ T3105] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 357.733459][ T3105] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.770093][ T3105] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 357.796582][ T3105] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 357.848258][ T3105] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.873127][T10306] netlink: 401 bytes leftover after parsing attributes in process `syz.2.1092'. [ 357.975702][ T3105] usb 6-1: config 0 descriptor?? [ 357.991114][ T3105] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 358.001721][ T3105] dvb-usb: bulk message failed: -22 (3/0) [ 358.013363][ T3105] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 358.292600][ T3105] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 358.299839][ T3105] usb 6-1: media controller created [ 358.306243][ T3105] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 358.647455][T10315] netlink: 'syz.2.1093': attribute type 1 has an invalid length. [ 358.822929][ T3105] dvb-usb: bulk message failed: -22 (6/0) [ 358.848168][ T3105] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 358.858595][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 358.858610][ T29] audit: type=1400 audit(2000000144.970:869): avc: denied { create } for pid=10314 comm="syz.2.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 358.921798][ T3105] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input27 [ 358.969339][T10321] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1086'. [ 358.989125][ T3105] dvb-usb: schedule remote query interval to 150 msecs. [ 358.996133][ T29] audit: type=1400 audit(2000000145.010:870): avc: denied { ioctl } for pid=10314 comm="syz.2.1093" path="socket:[28848]" dev="sockfs" ino=28848 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 359.032037][T10315] bond2: entered promiscuous mode [ 359.077354][ T3105] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 359.085832][T10315] 8021q: adding VLAN 0 to HW filter on device bond2 [ 359.110556][T10319] bridge0: Device is already in use. [ 359.145122][ T29] audit: type=1400 audit(2000000145.010:871): avc: denied { create } for pid=10314 comm="syz.2.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 359.168530][ T29] audit: type=1400 audit(2000000145.010:872): avc: denied { write } for pid=10314 comm="syz.2.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 359.193909][T10321] dvb-usb: bulk message failed: -22 (2/0) [ 359.209204][ T29] audit: type=1400 audit(2000000145.070:873): avc: denied { read } for pid=4967 comm="acpid" name="event4" dev="devtmpfs" ino=3342 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 359.236156][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 359.243017][ T10] dvb-usb: error while querying for an remote control event. [ 359.250891][ T29] audit: type=1400 audit(2000000145.070:874): avc: denied { open } for pid=4967 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3342 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 359.281864][ T29] audit: type=1400 audit(2000000145.070:875): avc: denied { ioctl } for pid=4967 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3342 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 359.807140][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 359.812962][ T10] dvb-usb: error while querying for an remote control event. [ 359.937152][T10332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.978944][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 359.984753][ T10] dvb-usb: error while querying for an remote control event. [ 360.285758][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 360.297836][ T10] dvb-usb: error while querying for an remote control event. [ 361.117590][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 361.125117][T10353] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1102'. [ 361.169632][ T10] dvb-usb: error while querying for an remote control event. [ 361.205830][ T10] usb 6-1: USB disconnect, device number 18 [ 361.287030][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 362.106773][ T29] audit: type=1400 audit(2000000148.220:876): avc: denied { map } for pid=10370 comm="syz.3.1109" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 362.365880][T10374] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 362.374343][T10374] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 362.383534][T10374] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 362.398154][ T29] audit: type=1400 audit(2000000148.460:877): avc: denied { execute } for pid=10373 comm="syz.0.1110" path="/dev/snd/midiC2D0" dev="devtmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 362.431814][T10372] xfrm0 speed is unknown, defaulting to 1000 [ 362.483602][T10376] /dev/nullb0: Can't open blockdev [ 362.655230][ T29] audit: type=1400 audit(2000000148.510:878): avc: denied { firmware_load } for pid=10373 comm="syz.0.1110" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 362.958159][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1106'. [ 363.912948][T10383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1111'. [ 363.922917][T10383] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1111'. [ 364.088803][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 364.088819][ T29] audit: type=1400 audit(2000000150.200:881): avc: denied { read } for pid=10386 comm="syz.2.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 364.120032][T10383] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1111'. [ 364.411820][ T10] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 364.680159][ T10] usb 6-1: config 0 has an invalid interface number: 15 but max is 0 [ 364.691189][ T10] usb 6-1: config 0 has no interface number 0 [ 364.691643][ T29] audit: type=1400 audit(2000000150.790:882): avc: denied { read } for pid=10402 comm="syz.0.1118" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 364.757120][T10403] xfrm0 speed is unknown, defaulting to 1000 [ 364.761137][ T10] usb 6-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 364.787141][T10407] comedi comedi2: comedi_config --init_data is deprecated [ 364.795252][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.811887][ T29] audit: type=1400 audit(2000000150.790:883): avc: denied { open } for pid=10402 comm="syz.0.1118" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 364.851129][ T10] usb 6-1: Product: syz [ 364.860891][ T10] usb 6-1: Manufacturer: syz [ 364.868295][ T10] usb 6-1: SerialNumber: syz [ 364.894941][ T10] usb 6-1: config 0 descriptor?? [ 364.918839][ T10] ftdi_sio 6-1:0.15: FTDI USB Serial Device converter detected [ 364.959503][ T10] ftdi_sio ttyUSB0: unknown device type: 0x223 [ 365.585354][T10419] comedi comedi2: comedi_config --init_data is deprecated [ 365.628378][T10413] xfrm0 speed is unknown, defaulting to 1000 [ 365.650582][T10421] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1122'. [ 365.688392][T10421] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1122'. [ 365.721892][ T10] usb 6-1: USB disconnect, device number 19 [ 365.738767][ T10] ftdi_sio 6-1:0.15: device disconnected [ 365.741228][T10421] gretap0: entered promiscuous mode [ 365.772906][ T29] audit: type=1400 audit(2000000151.890:884): avc: denied { mount } for pid=10420 comm="syz.1.1122" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 365.797372][T10422] overlayfs: failed to clone lowerpath [ 365.835268][T10421] gretap0: left promiscuous mode [ 365.852493][T10423] overlayfs: failed to clone lowerpath [ 365.960954][ T29] audit: type=1400 audit(2000000152.080:885): avc: denied { ioctl } for pid=10420 comm="syz.1.1122" path="socket:[29991]" dev="sockfs" ino=29991 ioctlcmd=0x7504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 366.150003][T10428] xfrm0 speed is unknown, defaulting to 1000 [ 366.194363][T10430] netlink: 'syz.3.1124': attribute type 1 has an invalid length. [ 366.225155][T10430] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1124'. [ 366.296343][T10430] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1124'. [ 366.335763][T10430] netlink: 'syz.3.1124': attribute type 1 has an invalid length. [ 366.404503][T10430] netlink: 'syz.3.1124': attribute type 8 has an invalid length. [ 366.468590][T10430] netlink: 606 bytes leftover after parsing attributes in process `syz.3.1124'. [ 366.548050][ T29] audit: type=1400 audit(2000000152.660:886): avc: denied { read } for pid=10425 comm="syz.0.1123" name="usbmon6" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 366.597952][ T29] audit: type=1400 audit(2000000152.700:887): avc: denied { open } for pid=10425 comm="syz.0.1123" path="/dev/usbmon6" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 366.638952][ T10] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 366.647803][ T29] audit: type=1400 audit(2000000152.700:888): avc: denied { ioctl } for pid=10425 comm="syz.0.1123" path="/dev/usbmon6" dev="devtmpfs" ino=735 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 366.749106][ T5721] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 366.831632][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 366.841823][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.885063][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 366.912291][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.960711][ T5721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.994394][ T5721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.024475][ T5721] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 367.061375][ T5721] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 367.087144][ T5721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.128305][ T5721] usb 3-1: config 0 descriptor?? [ 367.176461][ T10] usb 6-1: usb_control_msg returned -32 [ 367.187510][ T10] usbtmc 6-1:16.0: can't read capabilities [ 367.199068][ T5707] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 367.358976][ T5707] usb 1-1: Using ep0 maxpacket: 32 [ 367.374945][ T5707] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 367.403331][ T5707] usb 1-1: config 0 has no interface number 0 [ 367.418156][ T5707] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 367.430921][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.452831][ T5707] usb 1-1: Product: syz [ 367.463945][ T5707] usb 1-1: Manufacturer: syz [ 367.468629][ T5707] usb 1-1: SerialNumber: syz [ 367.504843][ T5707] usb 1-1: config 0 descriptor?? [ 367.515997][ T5707] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 367.617975][T10447] netlink: 208240 bytes leftover after parsing attributes in process `syz.5.1125'. [ 367.665092][ T5721] plantronics 0003:047F:FFFF.0009: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 367.678316][T10448] ALSA: seq fatal error: cannot create timer (-16) [ 367.766698][ T10] usb 3-1: USB disconnect, device number 49 [ 367.791823][ T5707] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 367.841844][ T29] audit: type=1400 audit(2000000153.960:889): avc: denied { block_suspend } for pid=10452 comm="syz.3.1131" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 367.870102][ T5707] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 367.899628][T10449] fido_id[10449]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 367.990991][T10455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1132'. [ 368.349417][ T5707] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 368.568939][ T5707] usb 4-1: device descriptor read/64, error -71 [ 369.416030][ T5707] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 369.539812][ T29] audit: type=1400 audit(2000000155.030:890): avc: denied { getopt } for pid=10462 comm="syz.2.1133" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 369.701419][ T42] usb 6-1: USB disconnect, device number 20 [ 369.713327][ T5707] usb 4-1: device descriptor read/64, error -71 [ 369.830173][ T5707] usb usb4-port1: attempt power cycle [ 369.966244][T10470] kAFS: No cell specified [ 370.090392][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 370.090694][ T3105] usb 1-1: USB disconnect, device number 35 [ 370.123609][ T3105] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 370.153867][ T3105] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 370.169098][ T5707] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 370.172056][ T3105] quatech2 1-1:0.51: device disconnected [ 370.221601][ T5707] usb 4-1: device descriptor read/8, error -71 [ 370.679208][ T5707] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 370.707852][ T5707] usb 4-1: device descriptor read/8, error -71 [ 370.840646][ T5707] usb usb4-port1: unable to enumerate USB device [ 371.745248][T10483] kvm: user requested TSC rate below hardware speed [ 371.825579][ T5623] Bluetooth: hci0: connection err: -111 [ 371.999222][ T42] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 372.266180][T10498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1144'. [ 372.299276][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 372.305809][T10498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1144'. [ 372.319503][ T42] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 372.330558][T10502] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1146'. [ 372.350403][ T42] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 372.399175][ T42] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 372.444834][ T42] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 372.451369][T10505] 9p: Bad value for 'wfdno' [ 372.480888][ T42] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 372.501723][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.521920][ T42] usb 4-1: Product: syz [ 372.543428][ T42] usb 4-1: Manufacturer: syz [ 372.554171][ T42] usb 4-1: SerialNumber: syz [ 372.596941][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 372.630503][ T42] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input28 [ 372.651433][ C1] Unknown status report in ack skb [ 372.926470][T10521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1140'. [ 372.963189][T10521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1140'. [ 372.981166][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.987813][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.014220][T10523] pim6reg: entered allmulticast mode [ 373.059041][T10523] pim6reg: left allmulticast mode [ 373.120613][T10525] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1153'. [ 373.525237][ T29] audit: type=1400 audit(2000000159.640:891): avc: denied { mounton } for pid=10528 comm="syz.5.1155" path="/syzcgroup/unified/syz5" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 373.611610][T10530] Can't find a SQUASHFS superblock on nullb0 [ 374.846751][ T42] imon:send_packet: packet tx failed (-71) [ 374.899070][ T42] imon 4-1:155.0: panel buttons/knobs setup failed [ 374.922242][ T42] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 374.940369][ T42] (id 0x00) [ 374.971406][ T29] audit: type=1400 audit(2000000161.090:892): avc: denied { setopt } for pid=10546 comm="syz.2.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 375.072439][ T42] rc_core: IR keymap rc-imon-pad not found [ 375.090775][ T42] Registered IR keymap rc-empty [ 375.098822][ T42] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 375.116195][ T42] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 375.133263][ T42] imon:send_packet: packet tx failed (-71) [ 375.168963][ T42] imon 4-1:155.0: remote input dev register failed [ 375.181992][ T42] imon 4-1:155.0: imon_init_intf0: rc device setup failed [ 375.306181][ T42] imon 4-1:155.0: unable to initialize intf0, err 0 [ 375.315187][ T42] imon:imon_probe: failed to initialize context! [ 375.321873][ T42] imon 4-1:155.0: unable to register, err -19 [ 375.355096][ T42] usb 4-1: USB disconnect, device number 40 [ 375.705592][ T5623] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 375.716983][ T29] audit: type=1400 audit(2000000161.840:893): avc: denied { read } for pid=10558 comm="syz.5.1161" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 375.740986][ T29] audit: type=1400 audit(2000000161.840:894): avc: denied { open } for pid=10558 comm="syz.5.1161" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 375.747195][T10559] netlink: 'syz.5.1161': attribute type 64 has an invalid length. [ 375.787748][ T29] audit: type=1400 audit(2000000161.900:895): avc: denied { create } for pid=10560 comm="syz.1.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 375.816248][T10561] netlink: 'syz.1.1162': attribute type 7 has an invalid length. [ 375.840228][T10559] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1161'. [ 375.846564][ T29] audit: type=1400 audit(2000000161.960:896): avc: denied { bind } for pid=10560 comm="syz.1.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 375.917448][ T29] audit: type=1400 audit(2000000161.960:897): avc: denied { connect } for pid=10560 comm="syz.1.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 376.228955][ T42] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 376.247773][T10582] ip6erspan0: entered allmulticast mode [ 376.401284][ T42] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 376.409539][ T42] usb 1-1: config 0 has no interface number 0 [ 376.415669][ T42] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 376.427640][ T42] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.437641][ T42] usb 1-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 376.449056][ T10] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 376.450672][ T42] usb 1-1: config 0 interface 1 has no altsetting 0 [ 376.464780][ T42] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 376.473877][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.483405][ T42] usb 1-1: config 0 descriptor?? [ 376.608930][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 376.618313][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.640473][ T10] usb 3-1: config 0 has no interfaces? [ 376.656478][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 376.668315][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.686382][ T10] usb 3-1: Product: syz [ 376.698944][ T10] usb 3-1: Manufacturer: syz [ 376.707652][ T10] usb 3-1: SerialNumber: syz [ 376.717833][T10587] bridge0: port 3(syz_tun) entered blocking state [ 376.725687][ T10] usb 3-1: config 0 descriptor?? [ 376.731599][T10587] bridge0: port 3(syz_tun) entered disabled state [ 376.743463][T10587] syz_tun: entered allmulticast mode [ 376.753645][T10587] syz_tun: entered promiscuous mode [ 376.760262][T10587] bridge0: port 3(syz_tun) entered blocking state [ 376.766825][T10587] bridge0: port 3(syz_tun) entered forwarding state [ 376.861486][T10587] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 376.937901][ T29] audit: type=1400 audit(2000000163.050:898): avc: denied { connect } for pid=10583 comm="syz.3.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 377.002000][ T3105] usb 3-1: USB disconnect, device number 50 [ 377.020415][ T29] audit: type=1400 audit(2000000163.050:899): avc: denied { write } for pid=10583 comm="syz.3.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 377.046262][ T29] audit: type=1400 audit(2000000163.100:900): avc: denied { write } for pid=10563 comm="syz.0.1163" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 377.070149][ T29] audit: type=1400 audit(2000000163.110:901): avc: denied { wake_alarm } for pid=10563 comm="syz.0.1163" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 377.774546][T10611] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1180'. [ 377.922903][T10620] FAULT_INJECTION: forcing a failure. [ 377.922903][T10620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.936735][T10620] CPU: 1 UID: 0 PID: 10620 Comm: syz.2.1184 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.936764][T10620] Tainted: [L]=SOFTLOCKUP [ 377.936773][T10620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 377.936783][T10620] Call Trace: [ 377.936789][T10620] [ 377.936796][T10620] dump_stack_lvl+0x100/0x190 [ 377.936821][T10620] should_fail_ex.cold+0x5/0xa [ 377.936845][T10620] _copy_to_user+0x32/0xd0 [ 377.936867][T10620] simple_read_from_buffer+0xcb/0x170 [ 377.936890][T10620] proc_fail_nth_read+0x1af/0x230 [ 377.936910][T10620] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 377.936930][T10620] ? rw_verify_area+0xce/0x6d0 [ 377.936946][T10620] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 377.936964][T10620] vfs_read+0x1e4/0xb30 [ 377.936986][T10620] ? __pfx_vfs_read+0x10/0x10 [ 377.937003][T10620] ? __fget_files+0x215/0x3d0 [ 377.937031][T10620] ? __fget_files+0x21f/0x3d0 [ 377.937058][T10620] ksys_read+0x12a/0x250 [ 377.937077][T10620] ? __pfx_ksys_read+0x10/0x10 [ 377.937097][T10620] ? rcu_is_watching+0x12/0xc0 [ 377.937126][T10620] do_syscall_64+0x115/0x870 [ 377.937147][T10620] ? clear_bhb_loop+0x40/0x90 [ 377.937169][T10620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.937185][T10620] RIP: 0033:0x7f909c15d68e [ 377.937199][T10620] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 377.937216][T10620] RSP: 002b:00007f909d069fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 377.937231][T10620] RAX: ffffffffffffffda RBX: 00007f909d06a6c0 RCX: 00007f909c15d68e [ 377.937242][T10620] RDX: 000000000000000f RSI: 00007f909d06a0a0 RDI: 0000000000000004 [ 377.937257][T10620] RBP: 00007f909d06a090 R08: 0000000000000000 R09: 0000000000000000 [ 377.937267][T10620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.937276][T10620] R13: 00007f909c416038 R14: 00007f909c415fa0 R15: 00007ffe467aa1f8 [ 377.937301][T10620] [ 378.185378][T10624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.268920][ T5734] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 378.432181][ T5734] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 378.446913][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.475803][ T5734] usb 4-1: Product: syz [ 378.485209][ T5734] usb 4-1: Manufacturer: syz [ 378.495263][ T5734] usb 4-1: SerialNumber: syz [ 378.516481][ T5734] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 378.725192][T10636] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1189'. [ 379.551441][ T42] usbhid 1-1:0.1: can't add hid device: -71 [ 379.577977][ T42] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 379.618115][ T3105] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 379.641897][ T42] usb 1-1: USB disconnect, device number 36 [ 379.648952][ T5734] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 379.707702][T10639] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1190'. [ 380.058043][ T42] usb 4-1: USB disconnect, device number 41 [ 380.360017][ T5734] usb 6-1: Using ep0 maxpacket: 32 [ 380.373081][ T5734] usb 6-1: config 91 has an invalid interface number: 231 but max is 0 [ 380.385844][ T5734] usb 6-1: config 91 has no interface number 0 [ 380.397549][ T5734] usb 6-1: config 91 interface 231 has no altsetting 0 [ 380.413101][ T5734] usb 6-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=4c.9c [ 380.426564][ T5734] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.438750][ T5734] usb 6-1: Product: syz [ 380.443194][ T5734] usb 6-1: Manufacturer: syz [ 380.447791][ T5734] usb 6-1: SerialNumber: syz [ 380.663610][ T3105] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 380.685327][ T3105] ath9k_htc: Failed to initialize the device [ 380.834836][ T42] usb 4-1: ath9k_htc: USB layer deinitialized [ 381.165727][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 381.165743][ T29] audit: type=1400 audit(2000000167.280:910): avc: denied { create } for pid=10667 comm="syz.1.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 381.193153][ T42] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 381.201612][ T29] audit: type=1400 audit(2000000167.330:911): avc: denied { write } for pid=10667 comm="syz.1.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 381.252822][ T5734] ums-cypress 6-1:91.231: USB Mass Storage device detected [ 381.358952][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 381.362766][ T5734] usb 6-1: USB disconnect, device number 21 [ 381.368151][ T42] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 381.403682][ T42] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 381.421946][ T29] audit: type=1400 audit(2000000167.540:912): avc: denied { ioctl } for pid=10679 comm="syz.5.1201" path="pid:[4026534072]" dev="nsfs" ino=4026534072 ioctlcmd=0xb708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 381.448971][ T42] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 381.463722][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 381.514417][T10682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22611 sclass=netlink_route_socket pid=10682 comm=syz.5.1201 [ 381.540228][T10682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22611 sclass=netlink_route_socket pid=10682 comm=syz.5.1201 [ 381.559918][ T42] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 381.609181][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 381.669776][ T42] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 381.712848][ T42] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 381.725191][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.760219][ T42] usb 4-1: config 0 descriptor?? [ 383.384367][T10692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.443698][T10694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1205'. [ 383.452658][T10694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1205'. [ 383.467755][T10694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1205'. [ 383.476700][T10694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1205'. [ 383.720270][ T42] usb 4-1: USB disconnect, device number 42 [ 383.738735][T10698] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 383.787840][T10698] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 383.998481][T10704] FAULT_INJECTION: forcing a failure. [ 383.998481][T10704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.012027][T10704] CPU: 1 UID: 0 PID: 10704 Comm: syz.3.1207 Tainted: G L syzkaller #0 PREEMPT(full) [ 384.012056][T10704] Tainted: [L]=SOFTLOCKUP [ 384.012062][T10704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 384.012072][T10704] Call Trace: [ 384.012078][T10704] [ 384.012085][T10704] dump_stack_lvl+0x100/0x190 [ 384.012110][T10704] should_fail_ex.cold+0x5/0xa [ 384.012135][T10704] _copy_from_user+0x2e/0xd0 [ 384.012157][T10704] memdup_user+0x6b/0xe0 [ 384.012176][T10704] strndup_user+0x78/0xe0 [ 384.012194][T10704] __x64_sys_fsopen+0x9e/0x220 [ 384.012214][T10704] do_syscall_64+0x115/0x870 [ 384.012236][T10704] ? clear_bhb_loop+0x40/0x90 [ 384.012257][T10704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.012274][T10704] RIP: 0033:0x7f4bb979ce59 [ 384.012289][T10704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.012305][T10704] RSP: 002b:00007f4bba5b2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 384.012337][T10704] RAX: ffffffffffffffda RBX: 00007f4bb9a16180 RCX: 00007f4bb979ce59 [ 384.012348][T10704] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 384.012358][T10704] RBP: 00007f4bba5b2090 R08: 0000000000000000 R09: 0000000000000000 [ 384.012368][T10704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.012377][T10704] R13: 00007f4bb9a16218 R14: 00007f4bb9a16180 R15: 00007ffe558122e8 [ 384.012401][T10704] [ 384.222372][T10708] overlayfs: failed to resolve './file0': -2 [ 384.293298][T10711] fuse: Bad value for 'fd' [ 384.664878][T10715] fuse: fd is not a fuse device [ 385.050860][T10724] smc: removing ib device syz0 [ 385.068631][T10724] smbdirect: ib_dev[syz0] removed [ 385.618417][T10724] ------------[ cut here ]------------ [ 385.623917][T10724] !xa_empty(&pool->xa) [ 385.623925][T10724] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#0: syz.1.1214/10724 [ 385.639315][T10724] Modules linked in: [ 385.643479][T10724] CPU: 0 UID: 0 PID: 10724 Comm: syz.1.1214 Tainted: G L syzkaller #0 PREEMPT(full) [ 385.654412][T10724] Tainted: [L]=SOFTLOCKUP [ 385.658721][T10724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 385.668789][T10724] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 385.674266][T10724] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 06 33 51 f9 5b e9 40 2f d5 02 e8 fb 32 51 f9 90 <0f> 0b 90 e8 f2 32 51 f9 5b c3 cc cc cc cc e8 a7 17 bf f9 eb d0 0f [ 385.693869][T10724] RSP: 0018:ffffc90004bc7160 EFLAGS: 00010246 [ 385.700506][T10724] RAX: 0000000000080000 RBX: ffff8880501ad398 RCX: ffffc900052e9000 [ 385.708462][T10724] RDX: 0000000000080000 RSI: ffffffff88b77d65 RDI: ffff8880501ad418 [ 385.716433][T10724] RBP: ffffffff88b5d950 R08: 0000000000000005 R09: 0000000000000001 [ 385.724410][T10724] R10: 0000000000000002 R11: 0000000000000000 R12: ffff8880501ac698 [ 385.732370][T10724] R13: ffff8880501abfe0 R14: ffff8880501abfe0 R15: ffff8880501ad0f8 [ 385.740332][T10724] FS: 00007fae173e86c0(0000) GS:ffff888124383000(0000) knlGS:0000000000000000 [ 385.749433][T10724] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 385.756006][T10724] CR2: 00007f909c4105c0 CR3: 0000000066316000 CR4: 00000000003526f0 [ 385.764043][T10724] Call Trace: [ 385.767317][T10724] [ 385.770248][T10724] rxe_dealloc+0x25/0xc0 [ 385.774481][T10724] ib_dealloc_device+0x49/0x230 [ 385.779366][T10724] __ib_unregister_device+0x396/0x480 [ 385.784725][T10724] ib_unregister_device_and_put+0x5a/0x80 [ 385.790452][T10724] nldev_dellink+0x308/0x430 [ 385.795029][T10724] ? __pfx_nldev_dellink+0x10/0x10 [ 385.800505][T10724] ? rcu_is_watching+0x12/0xc0 [ 385.805259][T10724] ? cap_capable+0x10b/0x440 [ 385.809848][T10724] ? bpf_lsm_capable+0x9/0x10 [ 385.814498][T10724] ? security_capable+0x80/0x260 [ 385.819541][T10724] ? ns_capable+0xd2/0xf0 [ 385.823848][T10724] ? __pfx_nldev_dellink+0x10/0x10 [ 385.828957][T10724] rdma_nl_rcv_msg+0x392/0x6f0 [ 385.833709][T10724] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 385.838998][T10724] ? __lock_acquire+0x4a5/0x2630 [ 385.843917][T10724] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 385.850331][T10724] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 385.857262][T10724] ? netlink_deliver_tap+0x1ae/0xcc0 [ 385.862545][T10724] netlink_unicast+0x585/0x850 [ 385.867290][T10724] ? __pfx_netlink_unicast+0x10/0x10 [ 385.872568][T10724] netlink_sendmsg+0x8b0/0xda0 [ 385.877320][T10724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.882602][T10724] ? __might_fault+0x60/0x140 [ 385.887277][T10724] ____sys_sendmsg+0x9e1/0xb70 [ 385.892034][T10724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.897297][T10724] ? __pfx_____sys_sendmsg+0x10/0x10 [ 385.902873][T10724] ? __pfx_futex_wake_mark+0x10/0x10 [ 385.908142][T10724] ___sys_sendmsg+0x190/0x1e0 [ 385.912810][T10724] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.918007][T10724] __sys_sendmsg+0x170/0x220 [ 385.922588][T10724] ? __pfx___sys_sendmsg+0x10/0x10 [ 385.927678][T10724] ? __x64_sys_futex+0x34f/0x4d0 [ 385.932617][T10724] ? rcu_is_watching+0x12/0xc0 [ 385.937373][T10724] do_syscall_64+0x115/0x870 [ 385.941969][T10724] ? clear_bhb_loop+0x40/0x90 [ 385.946644][T10724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.952529][T10724] RIP: 0033:0x7fae1659ce59 [ 385.956924][T10724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.976528][T10724] RSP: 002b:00007fae173e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.984931][T10724] RAX: ffffffffffffffda RBX: 00007fae16815fa0 RCX: 00007fae1659ce59 [ 385.992914][T10724] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000006 [ 386.001444][T10724] RBP: 00007fae16632d6f R08: 0000000000000000 R09: 0000000000000000 [ 386.009598][T10724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.017548][T10724] R13: 00007fae16816038 R14: 00007fae16815fa0 R15: 00007fff8a4e9c78 [ 386.025815][T10724] [ 386.028813][T10724] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 386.036069][T10724] CPU: 0 UID: 0 PID: 10724 Comm: syz.1.1214 Tainted: G L syzkaller #0 PREEMPT(full) [ 386.046971][T10724] Tainted: [L]=SOFTLOCKUP [ 386.051268][T10724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 386.061297][T10724] Call Trace: [ 386.064567][T10724] [ 386.067476][T10724] dump_stack_lvl+0x100/0x190 [ 386.072130][T10724] vpanic+0x552/0x970 [ 386.076084][T10724] ? __pfx_vpanic+0x10/0x10 [ 386.080562][T10724] panic+0xd1/0xe0 [ 386.084258][T10724] ? __pfx_panic+0x10/0x10 [ 386.088661][T10724] check_panic_on_warn.cold+0x19/0x34 [ 386.094614][T10724] ? rxe_pool_cleanup+0x46/0x60 [ 386.099441][T10724] __warn.cold+0x191/0x328 [ 386.103837][T10724] __report_bug+0x296/0x3d0 [ 386.108324][T10724] ? rxe_pool_cleanup+0x46/0x60 [ 386.113147][T10724] ? __pfx___report_bug+0x10/0x10 [ 386.118184][T10724] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 386.123968][T10724] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 386.129758][T10724] ? __flush_workqueue+0x426/0x1200 [ 386.134929][T10724] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 386.140541][T10724] ? rxe_pool_cleanup+0x46/0x60 [ 386.145377][T10724] report_bug+0xb2/0x220 [ 386.149595][T10724] ? rxe_pool_cleanup+0x46/0x60 [ 386.154417][T10724] handle_bug+0x16a/0x2a0 [ 386.158722][T10724] exc_invalid_op+0x17/0x50 [ 386.163201][T10724] asm_exc_invalid_op+0x1a/0x20 [ 386.168024][T10724] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 386.173453][T10724] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 06 33 51 f9 5b e9 40 2f d5 02 e8 fb 32 51 f9 90 <0f> 0b 90 e8 f2 32 51 f9 5b c3 cc cc cc cc e8 a7 17 bf f9 eb d0 0f [ 386.193119][T10724] RSP: 0018:ffffc90004bc7160 EFLAGS: 00010246 [ 386.199158][T10724] RAX: 0000000000080000 RBX: ffff8880501ad398 RCX: ffffc900052e9000 [ 386.207099][T10724] RDX: 0000000000080000 RSI: ffffffff88b77d65 RDI: ffff8880501ad418 [ 386.215039][T10724] RBP: ffffffff88b5d950 R08: 0000000000000005 R09: 0000000000000001 [ 386.222986][T10724] R10: 0000000000000002 R11: 0000000000000000 R12: ffff8880501ac698 [ 386.231019][T10724] R13: ffff8880501abfe0 R14: ffff8880501abfe0 R15: ffff8880501ad0f8 [ 386.238979][T10724] ? __pfx_rxe_dealloc+0x10/0x10 [ 386.243909][T10724] ? rxe_pool_cleanup+0x45/0x60 [ 386.248746][T10724] rxe_dealloc+0x25/0xc0 [ 386.252975][T10724] ib_dealloc_device+0x49/0x230 [ 386.257805][T10724] __ib_unregister_device+0x396/0x480 [ 386.263163][T10724] ib_unregister_device_and_put+0x5a/0x80 [ 386.268869][T10724] nldev_dellink+0x308/0x430 [ 386.273503][T10724] ? __pfx_nldev_dellink+0x10/0x10 [ 386.278647][T10724] ? rcu_is_watching+0x12/0xc0 [ 386.283414][T10724] ? cap_capable+0x10b/0x440 [ 386.288019][T10724] ? bpf_lsm_capable+0x9/0x10 [ 386.292683][T10724] ? security_capable+0x80/0x260 [ 386.297627][T10724] ? ns_capable+0xd2/0xf0 [ 386.301936][T10724] ? __pfx_nldev_dellink+0x10/0x10 [ 386.307033][T10724] rdma_nl_rcv_msg+0x392/0x6f0 [ 386.311784][T10724] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 386.317049][T10724] ? __lock_acquire+0x4a5/0x2630 [ 386.321964][T10724] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 386.328360][T10724] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 386.335276][T10724] ? netlink_deliver_tap+0x1ae/0xcc0 [ 386.340540][T10724] netlink_unicast+0x585/0x850 [ 386.345288][T10724] ? __pfx_netlink_unicast+0x10/0x10 [ 386.350556][T10724] netlink_sendmsg+0x8b0/0xda0 [ 386.355314][T10724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.360570][T10724] ? __might_fault+0x60/0x140 [ 386.365244][T10724] ____sys_sendmsg+0x9e1/0xb70 [ 386.369980][T10724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.375239][T10724] ? __pfx_____sys_sendmsg+0x10/0x10 [ 386.380502][T10724] ? __pfx_futex_wake_mark+0x10/0x10 [ 386.385758][T10724] ___sys_sendmsg+0x190/0x1e0 [ 386.390409][T10724] ? __pfx____sys_sendmsg+0x10/0x10 [ 386.395597][T10724] __sys_sendmsg+0x170/0x220 [ 386.400165][T10724] ? __pfx___sys_sendmsg+0x10/0x10 [ 386.405252][T10724] ? __x64_sys_futex+0x34f/0x4d0 [ 386.410617][T10724] ? rcu_is_watching+0x12/0xc0 [ 386.415359][T10724] do_syscall_64+0x115/0x870 [ 386.419925][T10724] ? clear_bhb_loop+0x40/0x90 [ 386.424573][T10724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.430436][T10724] RIP: 0033:0x7fae1659ce59 [ 386.434826][T10724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.454407][T10724] RSP: 002b:00007fae173e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.462798][T10724] RAX: ffffffffffffffda RBX: 00007fae16815fa0 RCX: 00007fae1659ce59 [ 386.470744][T10724] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000006 [ 386.478695][T10724] RBP: 00007fae16632d6f R08: 0000000000000000 R09: 0000000000000000 [ 386.486645][T10724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.494948][T10724] R13: 00007fae16816038 R14: 00007fae16815fa0 R15: 00007fff8a4e9c78 [ 386.502926][T10724] [ 386.506127][T10724] Kernel Offset: disabled [ 386.510432][T10724] Rebooting in 86400 seconds..