last executing test programs: 12.650988176s ago: executing program 3 (id=6054): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = creat(&(0x7f00000004c0)='./file0\x00', 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000000600)={0x48, 0x8, r2, 0x0, 0x7fffff, 0x0, 0x0}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x11) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = creat(&(0x7f0000000280)='./cgroup.net/devices.allow\x00', 0x141) syz_usb_control_io(r0, &(0x7f0000002d00)={0x2c, &(0x7f0000002a00)={0x0, 0x22, 0xfb, {0xfb, 0x3a, "d10d4c0bfd9eacc234ba4321783397febd513d4db408f4ac5fd1605224e45e8546cddadfb19dee80ac2367fa0e2563af4a13ba576eed7c13c46f3e5d37e6223a0476e80ea5b91ca9d2df97253b8d1fb5acde711677cde6c41f644417232a568d4f97e169f78c630b5d651276cd697a59614966c1136e63143eb28efdb0dbd2c9e91ddbfb24c28e8dccb03b64207c02992fa17ee00f39bc5a3c1b453679cdef98a36e8fcb78781b79540ca2b130513925d12baa69764be863ea38a236b78d922a682c1f922f591617db767327820ec3e48b5c275fffa6c9aa17708841ba43a810b32b0cc0f64382c3a3397e6b425716a77224b0b0b0caf9101d"}}, &(0x7f0000002b40)={0x0, 0x3, 0xd7, @string={0xd7, 0x3, "76d406ce1bac52e8ef07095807d235172bb0c737b516408977d092e6cc91bd4326c0561b57f12bd73456ec57106be0c4d9362290b1d8b43db298c0a5baa4f4e647cde7e4011f243721a8e69bbbae39534efa05059d18dc5d1be198d01d170c6b758df24dc7c452641d153ee324d5bf20a74861fefed7d77ee7db284723a6ea021a7bee852e0f826f63901adf0fd643918eb897dc626dc582586f677eb9ae77f434e20d3fc3ad4941499170f99a9cc1682131e10e776d453a0c2099b2b191b9ba3c1ecd54e0c92a58f74190f21771f5fe3eba1948c2"}}, &(0x7f0000002c40)={0x0, 0xf, 0x32, {0x5, 0xf, 0x32, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x48, 0x3e, 0x40, 0x1000, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "bef0af4c545789e40690d70e4f2979be"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x7f, 0x77, 0x9, 0xf}]}}, &(0x7f0000002c80)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa, 0x1, 0x5, 0x2, "146a00cd", "b864c41f"}}, &(0x7f0000002cc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x16, 0x3, 0x81, 0x4, 0xab, 0x10, 0x6}}}, &(0x7f00000031c0)={0x84, &(0x7f0000002d40)={0x0, 0x6, 0xa7, "9cfdff832800583c46bc65cb922e80ea0727e12c2b4ffea3f43c97a9e1c07e563a7a300668f5b510bec718f571c9c2776efaa9466985ab297ffa34149e683315f3378d6d36f31ff0c84dc7c728d8f544e644e80740ced050864cc0a126046ac3f8318dd4b3d81b1e7be1404487d1da217cc1d93481e57f10ae7d153079ba4114f6b832060c071312e74c82dab481771b145fa7efe9c69ca041dac02430b9b45f0b6e96ea80d6d5"}, &(0x7f0000002e00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000002e40)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000002e80)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000002ec0)={0x20, 0x0, 0x8, {0x1e0, 0x40, [0xf0f]}}, &(0x7f0000002f00)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000002f40)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000002f80)={0x40, 0xb, 0x2, "afd9"}, &(0x7f0000002fc0)={0x40, 0xf, 0x2, 0xff2a}, &(0x7f0000003000)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000003040)={0x40, 0x17, 0x6, @random="9454c87dc714"}, &(0x7f0000003080)={0x40, 0x19, 0x2, "bf39"}, &(0x7f00000030c0)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000003100)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000003140)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000003180)={0x40, 0x21, 0x1, 0x3}}) read$msr(r2, &(0x7f0000002980)=""/111, 0x6f) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x4, 0x0, 0x8000}, 0x50) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000c80)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) 12.463827609s ago: executing program 0 (id=6055): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 11.835047195s ago: executing program 0 (id=6057): r0 = socket$inet(0xa, 0x4, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000280)='T', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0xfffffffe}, 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410d7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000380)=0x60000) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000580)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3, 0x6, 0xfb, 0x0, 0x7, 0x9, 0x9, 0x80, 0x3, 0x9, 0x7, 0x9, 0x0, 0x8, 0x8, 0x4, 0x7, 0x2, 0x4, '\x00', 0xc, 0x8000000000000001}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_usb_connect(0x2, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r6) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xb8, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1025, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa6, 0x3, 0x1, 0x1, 0x10, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x29}, [@mixer_unit={0xb, 0x24, 0x4, 0x2, 0x6, "2974f2ee440a"}, @processing_unit={0x9, 0x24, 0x7, 0x3, 0x1, 0x74, '/Y'}, @feature_unit={0xb, 0x24, 0x6, 0x6, 0x1, 0x2, [0x1, 0x9], 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xd8, 0x1, 0x9, 0x2, 'y`4'}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1, 0x1, 0xd, 0xcb, "dc"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x4, 0x7, 0x50, "18b2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x6, 0x7, {0x7, 0x25, 0x1, 0x4, 0xf7, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xe, 0x4, 0x6, 0x2f, "", "aa"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x1, 0x77, {0x7, 0x25, 0x1, 0xc, 0x8, 0x5}}}}}}}}]}}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x2, [{0xfffffffffffffd81, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x414}}, {0x0, 0x0}]}) syz_usb_ep_write(r6, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") syz_usb_control_io$lan78xx(r5, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x80015b1b, 0x0) 10.970372955s ago: executing program 1 (id=6035): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='westwood', 0x8) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b9a48f10b1134200c90701020301090224000101001000090413020283671600090504020002"], 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x1) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000100)={'nat\x00', 0x73, "fa99ac619da5f12fe479dd9c08ad15eafecfcc92c87dfc4a2ed21d96e688fcb8d25d772b315496cc73a35652dc6410996dc49c0d0a85e00e71b12b4f5d2ff78362af2e66f70ede7b124a09738a425b616bdeadd957d3ecb467ed35afe144dd0e398feafd2433df2ab48f024b29a4870bc4e250"}, &(0x7f0000000200)=0x97) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4048aecb, &(0x7f0000000080)) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00'}, 0x80) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@o_path={0x0, r8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x48000, 0x0) fcntl$setlease(r1, 0x400, 0x0) 9.875031751s ago: executing program 3 (id=6063): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000880)=ANY=[@ANYRESHEX=r0], 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xc0600, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000340)=ANY=[@ANYBLOB="3786eadabba63c546162636465666768696a6b6c6d6e6f707172737475767778797a30313233343536"], 0x29, 0xffffffffffffffff) keyctl$set_timeout(0xf, r6, 0xa0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @meta={0x53314b52, 0x65946919, 0xa6e2, 0xdd92, 0x7034b2fc}}) r7 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x0, 0x28, 0x0, 0x0, 0x3}, 0x28) socket(0x2, 0x80805, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a00000609000200"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r7, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084000000"], 0x48}}, 0x4084) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000003c0)={0x0, 0x31, 0x1a}, &(0x7f0000000740)=ANY=[@ANYBLOB="656e633d21e3d63c206861734e35859b7c34c4e14394683d736861332d323536000000000000000000e8ff00000000000000000000000000000000000000000000000e00"/88], &(0x7f0000000700)="9cc272d79287a35bfc0cfe207c8b0fefb3a30555e5153f5269f17033a43885430f18d1565ff8c571a26b926f7b36e5933e", &(0x7f0000000400)=""/26) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r4, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES16=r3, @ANYRES16, @ANYRES16=r2, @ANYRES64=r2], 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x20000800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000020601010000000000000000000000000900020073797a3000000000050001000600000005000500000000000500040000000000140007800800114000000000050015007a8537350d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x20002080}, 0x4000) 7.892007874s ago: executing program 1 (id=6067): prctl$PR_SET_UNALIGN(0x6, 0x3) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000000400)=0xe8) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB="00008000000000000000", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000083c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895ca9bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, 0x0, 0x0, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}]}, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000440)={r0, r3}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e22, 0x400, @empty, 0x1}}, 0x8, 0xffffffff, 0x8d, 0x7fffffff, 0x8}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000001c0)={r5, 0x6e96}, &(0x7f0000000240)=0x8) syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) 7.786808629s ago: executing program 0 (id=6068): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) r1 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) dup3(r4, r2, 0x80000) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) syz_usb_disconnect(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() 7.632110044s ago: executing program 4 (id=6069): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) r1 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) dup3(r4, r2, 0x80000) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) syz_usb_disconnect(r1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() 7.57368184s ago: executing program 3 (id=6070): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000140)={0x6b, 0xa, 0x8, 0x8000000000000000, 0x1000}) 7.492604536s ago: executing program 3 (id=6073): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000004e80)={0x2020, 0x0, 0x0}, 0x2020) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xd) utimes(&(0x7f0000000180)='./file0\x00', 0x0) write$FUSE_GETXATTR(r1, &(0x7f0000000040)={0x18, 0x0, r2, {0x7}}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) 6.996109717s ago: executing program 1 (id=6076): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x16, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x25, 0x1, @thr={0x0, 0x0}}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x2fe, 0x400, 0xe0, 0xfffffff9, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x38) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="b702000001040000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80d0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57bbb19700f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d58625cf9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333a8b1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486d65ceec8bcaffbe800a041a378b40dc9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d7500760600f3ffb2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a08ff275df45508ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a03b4c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b1eb176d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e9101734a9e9c6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000061d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a381b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f2a70d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df620047bade4ba41ee0141843958479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2af2b96779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04edac11aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f41253a8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd02000000bf48ea48e0e1f463d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a24460e545c71e1940c998f39ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d596b5603895f265685fdd11263c946f8ef3ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0fb92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c3e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1a1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a1866b598a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c1423cd597345253ba5d5ab46938e8fb23fa7047bc59c4345e912585a8adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cea48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89e11a300510776934e87bb3c21394f46954a012b2a3b0760f5bad1dbd6b466ed7153bd18ee2c0b2353c38df9e0782eb000000000000000000000000001b58cadcc5aaf65e05663985a177aa1d1ea2ad1b8151c7d58f5b92827f550269b3585d98e1394e816a477e52ce2f6de2bd7192f46cf965e774968d151d2bda084b10ec4c8d2c6ab582b1e5e3ed874235ff128c661298ed75879d8a4025ad1c3d9ef6355dc7284c6e648a61da026a777fcc7ae2c60ce64a2f2b0000000000000000000000000000003022110d1230e998429a6fd8f35939a8ae5acc89125539d84b98df6f8ee2ad0b238759bf400ac14c591aefe9660076a494f73b0ea8f3cb4a9c2e4f745a2afb593fabb9481600b2f44e6415153c1f8cf974a226d2700608bb2838ef07d75aed8b082716be3c37f60f48b9995f6325fdaa1c164b1e2bcbde000000000000000000d4fd710a526223440f9df8d22bf9224e4b71b0757dbc8311a2ffbf680a2c09a893ffd79f0a645df3e2dce61e24c28750f50ccb9244fdb344773f79483ec0b6936fd853fda9ee154914a00831cf4bf6f9e6fe6cdfab5ab31de15450e6e703316d9597100d83d0444d511ec95edfc460461eef194209655b2a966078be83da84fe699fa66295c9995c869c18501c3d3bf6b17e5b2211c4903580dcdc7ea2bf9e3b202d7b01ea0b800868eb22cbb86e927b364c9c5642ea6188f53c36dffecbdeda61ceb3b1c1f4a7bc77e39a9ff7e547cef240c3cf78f61d3e000000000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xc6, 0x95, 0x37, 0x20, 0x93a, 0x50f, 0xbad2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x8, 0x80, 0x2, "", [{{0x9, 0x4, 0xf5, 0x5, 0x0, 0x41, 0x55, 0x2a, 0x9}}]}}]}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x4000, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 5.681691489s ago: executing program 3 (id=6077): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = creat(&(0x7f00000004c0)='./file0\x00', 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000000600)={0x48, 0x8, r2, 0x0, 0x7fffff, 0x0, 0x0}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x11) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = creat(&(0x7f0000000280)='./cgroup.net/devices.allow\x00', 0x141) syz_usb_control_io(r0, &(0x7f0000002d00)={0x2c, &(0x7f0000002a00)={0x0, 0x22, 0xfb, {0xfb, 0x3a, "d10d4c0bfd9eacc234ba4321783397febd513d4db408f4ac5fd1605224e45e8546cddadfb19dee80ac2367fa0e2563af4a13ba576eed7c13c46f3e5d37e6223a0476e80ea5b91ca9d2df97253b8d1fb5acde711677cde6c41f644417232a568d4f97e169f78c630b5d651276cd697a59614966c1136e63143eb28efdb0dbd2c9e91ddbfb24c28e8dccb03b64207c02992fa17ee00f39bc5a3c1b453679cdef98a36e8fcb78781b79540ca2b130513925d12baa69764be863ea38a236b78d922a682c1f922f591617db767327820ec3e48b5c275fffa6c9aa17708841ba43a810b32b0cc0f64382c3a3397e6b425716a77224b0b0b0caf9101d"}}, &(0x7f0000002b40)={0x0, 0x3, 0xd7, @string={0xd7, 0x3, "76d406ce1bac52e8ef07095807d235172bb0c737b516408977d092e6cc91bd4326c0561b57f12bd73456ec57106be0c4d9362290b1d8b43db298c0a5baa4f4e647cde7e4011f243721a8e69bbbae39534efa05059d18dc5d1be198d01d170c6b758df24dc7c452641d153ee324d5bf20a74861fefed7d77ee7db284723a6ea021a7bee852e0f826f63901adf0fd643918eb897dc626dc582586f677eb9ae77f434e20d3fc3ad4941499170f99a9cc1682131e10e776d453a0c2099b2b191b9ba3c1ecd54e0c92a58f74190f21771f5fe3eba1948c2"}}, &(0x7f0000002c40)={0x0, 0xf, 0x32, {0x5, 0xf, 0x32, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x48, 0x3e, 0x40, 0x1000, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "bef0af4c545789e40690d70e4f2979be"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x7f, 0x77, 0x9, 0xf}]}}, &(0x7f0000002c80)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa, 0x1, 0x5, 0x2, "146a00cd", "b864c41f"}}, &(0x7f0000002cc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x16, 0x3, 0x81, 0x4, 0xab, 0x10, 0x6}}}, &(0x7f00000031c0)={0x84, &(0x7f0000002d40)={0x0, 0x6, 0xa7, "9cfdff832800583c46bc65cb922e80ea0727e12c2b4ffea3f43c97a9e1c07e563a7a300668f5b510bec718f571c9c2776efaa9466985ab297ffa34149e683315f3378d6d36f31ff0c84dc7c728d8f544e644e80740ced050864cc0a126046ac3f8318dd4b3d81b1e7be1404487d1da217cc1d93481e57f10ae7d153079ba4114f6b832060c071312e74c82dab481771b145fa7efe9c69ca041dac02430b9b45f0b6e96ea80d6d5"}, &(0x7f0000002e00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000002e40)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000002e80)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000002ec0)={0x20, 0x0, 0x8, {0x1e0, 0x40, [0xf0f]}}, &(0x7f0000002f00)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000002f40)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000002f80)={0x40, 0xb, 0x2, "afd9"}, &(0x7f0000002fc0)={0x40, 0xf, 0x2, 0xff2a}, &(0x7f0000003000)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000003040)={0x40, 0x17, 0x6, @random="9454c87dc714"}, &(0x7f0000003080)={0x40, 0x19, 0x2, "bf39"}, &(0x7f00000030c0)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000003100)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000003140)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000003180)={0x40, 0x21, 0x1, 0x3}}) read$msr(r2, &(0x7f0000002980)=""/111, 0x6f) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x4, 0x0, 0x8000}, 0x50) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000c80)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x5, 0x200, 0x50, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x80, 0x8000, 0x7, 0x1}}) 4.969621199s ago: executing program 2 (id=6080): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x16, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x25, 0x1, @thr={0x0, 0x0}}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x2fe, 0x400, 0xe0, 0xfffffff9, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x38) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="b702000001040000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80d0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57bbb19700f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d58625cf9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333a8b1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486d65ceec8bcaffbe800a041a378b40dc9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d7500760600f3ffb2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a08ff275df45508ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a03b4c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b1eb176d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e9101734a9e9c6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000061d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a381b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f2a70d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df620047bade4ba41ee0141843958479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2af2b96779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04edac11aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f41253a8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd02000000bf48ea48e0e1f463d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a24460e545c71e1940c998f39ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d596b5603895f265685fdd11263c946f8ef3ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0fb92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c3e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1a1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a1866b598a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c1423cd597345253ba5d5ab46938e8fb23fa7047bc59c4345e912585a8adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cea48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89e11a300510776934e87bb3c21394f46954a012b2a3b0760f5bad1dbd6b466ed7153bd18ee2c0b2353c38df9e0782eb000000000000000000000000001b58cadcc5aaf65e05663985a177aa1d1ea2ad1b8151c7d58f5b92827f550269b3585d98e1394e816a477e52ce2f6de2bd7192f46cf965e774968d151d2bda084b10ec4c8d2c6ab582b1e5e3ed874235ff128c661298ed75879d8a4025ad1c3d9ef6355dc7284c6e648a61da026a777fcc7ae2c60ce64a2f2b0000000000000000000000000000003022110d1230e998429a6fd8f35939a8ae5acc89125539d84b98df6f8ee2ad0b238759bf400ac14c591aefe9660076a494f73b0ea8f3cb4a9c2e4f745a2afb593fabb9481600b2f44e6415153c1f8cf974a226d2700608bb2838ef07d75aed8b082716be3c37f60f48b9995f6325fdaa1c164b1e2bcbde000000000000000000d4fd710a526223440f9df8d22bf9224e4b71b0757dbc8311a2ffbf680a2c09a893ffd79f0a645df3e2dce61e24c28750f50ccb9244fdb344773f79483ec0b6936fd853fda9ee154914a00831cf4bf6f9e6fe6cdfab5ab31de15450e6e703316d9597100d83d0444d511ec95edfc460461eef194209655b2a966078be83da84fe699fa66295c9995c869c18501c3d3bf6b17e5b2211c4903580dcdc7ea2bf9e3b202d7b01ea0b800868eb22cbb86e927b364c9c5642ea6188f53c36dffecbdeda61ceb3b1c1f4a7bc77e39a9ff7e547cef240c3cf78f61d3e000000000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xc6, 0x95, 0x37, 0x20, 0x93a, 0x50f, 0xbad2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x8, 0x80, 0x2, "", [{{0x9, 0x4, 0xf5, 0x5, 0x0, 0x41, 0x55, 0x2a, 0x9}}]}}]}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000380)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8, 0x1}, 0xe) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x4000, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3.685666349s ago: executing program 1 (id=6081): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x6) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') write$binfmt_elf64(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x6, 0x0, 0x0, 0x0, 0x2, 0x3e, 0x9, 0x7c, 0x40, 0x2, 0x7f, 0x6, 0x38, 0x0, 0xfffe, 0x3, 0x3}}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) socket$inet(0x2, 0x80001, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setattr(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 3.664610762s ago: executing program 0 (id=6082): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={0x0}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000340), r0) 3.300912758s ago: executing program 4 (id=6083): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x6) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') write$binfmt_elf64(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x6, 0x0, 0x0, 0x0, 0x2, 0x3e, 0x9, 0x7c, 0x40, 0x2, 0x7f, 0x6, 0x38, 0x0, 0xfffe, 0x3, 0x3}}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) syz_io_uring_setup(0xf04, &(0x7f0000000500)={0x0, 0x1e58, 0x800, 0x0, 0x2ff}, &(0x7f0000000240), &(0x7f00000004c0), &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) socket$inet(0x2, 0x80001, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setattr(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 3.032087174s ago: executing program 0 (id=6084): openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) write$snddsp(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000400)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) (fail_nth: 1) 2.457045904s ago: executing program 4 (id=6085): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000035000000000000000000000008"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='loginuid\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r3 = epoll_create1(0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff000000000000000000000000000000004e2400000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000021000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002020000000044000500e0000001000000000000000000000000000004d632"], 0xfc}, 0x1, 0x0, 0x0, 0x20080004}, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @remote}}}], 0x20}, 0x20002880) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x10000001}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000180001efff000000"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x1010, r6, 0xddfa000) rt_sigqueueinfo(0x0, 0xb, &(0x7f00000038c0)={0x36, 0x208, 0xffffffc4}) fcntl$notify(r7, 0x402, 0x80000014) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000380)={0x0, &(0x7f0000000040)=[@in_dx={0x69, 0x20, {0xa26e, 0x6}}, @code={0xa, 0x42, {"660f605587450f90dd67f3470f1ef9650f7979b836243b8f69e897e93e410f211d0f2394f20f5e732e4c0fc79a00480000"}}, @nested_amd_invlpga={0x17d, 0x20, {0x7000, 0x2214}}, @nested_amd_invlpga={0x17d, 0x20, {0xddde1000, 0x1bdf}}, @wr_drn={0x68, 0x20, {0x4, 0x1}}, @set_irq_handler={0xc8, 0x20, {0x5d, 0x1}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0xda, 0x0, 0x2, 0x3}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control64=0x2026, 0x1, 0x8, 0x40}}, @cpuid={0x64, 0x18, {0x1, 0xfffffff8}}, @nested_amd_vmload={0x182, 0x18}, @nested_load_code={0x12e, 0x55, {0x3, "c4a36d48bebe82000074b90a0b00000f32f20f21c40f01d144cf440f350f20d835080000000f22d8662666420f38825100138278d6e479c40209cf7631"}}, @cpuid={0x64, 0x18, {0x4, 0x40}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x63, 0x2, 0x3, 0x3}}, @wr_crn={0x67, 0x20, {0x2, 0x1}}, @wr_crn={0x67, 0x20, {0x3, 0x2}}, @wr_drn={0x68, 0x20, {0x7, 0x3}}, @out_dx={0x6a, 0x28, {0x3c8, 0x1, 0x80000001}}, @wr_drn={0x68, 0x20, {0x0, 0xf15}}], 0x2f7}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2.432120455s ago: executing program 1 (id=6086): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0xfffffffffffffffc, 0x12) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0xbdb, &(0x7f0000000b40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xbcd, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, "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"}}}}, 0x0) shutdown(r6, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000001400)=[0x0]}) 1.894262458s ago: executing program 2 (id=6087): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000035000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='loginuid\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r4 = epoll_create1(0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff000000000000000000000000000000004e2400000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000021000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002020000000044000500e0000001000000000000000000000000000004d632"], 0xfc}, 0x1, 0x0, 0x0, 0x20080004}, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @remote}}}], 0x20}, 0x20002880) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x10000001}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000180001efff"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x1010, r7, 0xddfa000) rt_sigqueueinfo(0x0, 0xb, &(0x7f00000038c0)={0x36, 0x208, 0xffffffc4}) fcntl$notify(r8, 0x402, 0x80000014) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r9 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000380)={0x0, &(0x7f0000000040)=[@in_dx={0x69, 0x20, {0xa26e, 0x6}}, @code={0xa, 0x42, {"660f605587450f90dd67f3470f1ef9650f7979b836243b8f69e897e93e410f211d0f2394f20f5e732e4c0fc79a00480000"}}, @nested_amd_invlpga={0x17d, 0x20, {0x7000, 0x2214}}, @nested_amd_invlpga={0x17d, 0x20, {0xddde1000, 0x1bdf}}, @wr_drn={0x68, 0x20, {0x4, 0x1}}, @set_irq_handler={0xc8, 0x20, {0x5d, 0x1}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0xda, 0x0, 0x2, 0x3}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control64=0x2026, 0x1, 0x8, 0x40}}, @cpuid={0x64, 0x18, {0x1, 0xfffffff8}}, @nested_amd_vmload={0x182, 0x18}, @nested_load_code={0x12e, 0x55, {0x3, "c4a36d48bebe82000074b90a0b00000f32f20f21c40f01d144cf440f350f20d835080000000f22d8662666420f38825100138278d6e479c40209cf7631"}}, @cpuid={0x64, 0x18, {0x4, 0x40}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x63, 0x2, 0x3, 0x3}}, @wr_crn={0x67, 0x20, {0x2, 0x1}}, @wr_crn={0x67, 0x20, {0x3, 0x2}}, @wr_drn={0x68, 0x20, {0x7, 0x3}}, @out_dx={0x6a, 0x28, {0x3c8, 0x1, 0x80000001}}, @wr_drn={0x68, 0x20, {0x0, 0xf15}}], 0x2f7}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1.765147178s ago: executing program 4 (id=6088): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000035000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='loginuid\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r4 = epoll_create1(0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff000000000000000000000000000000004e2400000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000021000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002020000000044000500e0000001000000000000000000000000000004d632"], 0xfc}, 0x1, 0x0, 0x0, 0x20080004}, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @remote}}}], 0x20}, 0x20002880) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x10000001}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000001800"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x1010, r7, 0xddfa000) rt_sigqueueinfo(0x0, 0xb, &(0x7f00000038c0)={0x36, 0x208, 0xffffffc4}) fcntl$notify(r8, 0x402, 0x80000014) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r9 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000380)={0x0, &(0x7f0000000040)=[@in_dx={0x69, 0x20, {0xa26e, 0x6}}, @code={0xa, 0x42, {"660f605587450f90dd67f3470f1ef9650f7979b836243b8f69e897e93e410f211d0f2394f20f5e732e4c0fc79a00480000"}}, @nested_amd_invlpga={0x17d, 0x20, {0x7000, 0x2214}}, @nested_amd_invlpga={0x17d, 0x20, {0xddde1000, 0x1bdf}}, @wr_drn={0x68, 0x20, {0x4, 0x1}}, @set_irq_handler={0xc8, 0x20, {0x5d, 0x1}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0xda, 0x0, 0x2, 0x3}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control64=0x2026, 0x1, 0x8, 0x40}}, @cpuid={0x64, 0x18, {0x1, 0xfffffff8}}, @nested_amd_vmload={0x182, 0x18}, @nested_load_code={0x12e, 0x55, {0x3, "c4a36d48bebe82000074b90a0b00000f32f20f21c40f01d144cf440f350f20d835080000000f22d8662666420f38825100138278d6e479c40209cf7631"}}, @cpuid={0x64, 0x18, {0x4, 0x40}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x63, 0x2, 0x3, 0x3}}, @wr_crn={0x67, 0x20, {0x2, 0x1}}, @wr_crn={0x67, 0x20, {0x3, 0x2}}, @wr_drn={0x68, 0x20, {0x7, 0x3}}, @out_dx={0x6a, 0x28, {0x3c8, 0x1, 0x80000001}}, @wr_drn={0x68, 0x20, {0x0, 0xf15}}], 0x2f7}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1.659838142s ago: executing program 3 (id=6089): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x1, 0x70bd6c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2944d}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x1000, 0xfffffff9, 0xfffffffb}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004800}, 0x4000040) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002301000034020000020000000800", @ANYRES32, @ANYBLOB="ee15df3882d7a4bf864d076176ee15470727885bfaa6e70d2e8fd1379d22ee0adef36419f44cf46a2ed52e2a4fa43fc321d9eebee54c63f54e84ac969a942c2b39d2181bfe719d87a866c1bab98fa6e0e4e5c6d9f304256e6f42fbd1e236f68f2a400c6a28afa5f79dfcceacd3d3a19945cad7501a320584aaa696074d0c333f4acae493b57edf730da5342b57f2777c20a568d3da935b10062af35d9f27c94c8ed9cc8cc959275b77e4c84776c55145d22e5fb2363cc1ab1ddfc7f608d2f8c252"], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x1}}, @sadb_address={0x3, 0x6, 0x6c, 0x0, 0x0, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x31}}}]}, 0x50}}, 0x4004040) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x840) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) r14 = socket$inet6(0xa, 0x2, 0x0) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r15, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r14}, 0x20) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r16 = socket$kcm(0x2, 0x200000000000001, 0x106) getsockopt$sock_buf(r16, 0x1, 0x3d, 0x0, &(0x7f00000000c0)) r17 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r17, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040001}, 0xc015) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00f100", @ANYRES16=r17, @ANYBLOB="01002dbd7000fcdbdf251500000010002b8008000100000000000400038008000300", @ANYRES32=r18, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040) 1.641105139s ago: executing program 2 (id=6090): landlock_create_ruleset(0x0, 0x0, 0x5) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="18220000", @ANYRES32, @ANYBLOB="00000000020000008520000001000000ac090400ecffffff18110000", @ANYRES32, @ANYBLOB="00000b2505b62b05d86b9b00000000006e3c020718010000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000001c0)='syzkaller\x00', 0x80000000, 0xfa, &(0x7f0000000280)=""/250, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x3, 0xa3, 0xffffffff}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)=[{0x0, 0x2, 0xe, 0x5}], 0x10, 0x3}, 0x94) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) close_range(r0, r1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0xfff7ff1f, 0x1}}, 0x20) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) readlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000540)=""/112, 0x70) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483) ioctl$VIDIOC_DQEVENT(r6, 0x80885659, 0x0) 1.487982595s ago: executing program 1 (id=6091): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000180)='GPL\x00', 0x9, 0x88, &(0x7f0000000000)=""/136}, 0x90) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) syz_usb_connect(0x1, 0x81, &(0x7f0000000140)=ANY=[@ANYRESOCT=r2, @ANYRES16=r4, @ANYRES64=r0], 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 1.422240631s ago: executing program 4 (id=6092): openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$snddsp(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000400)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 1.195291734s ago: executing program 0 (id=6093): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e01000000010902120001000000000904"], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0xc) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=@newtaction={0x494, 0x30, 0x400, 0x70bd29, 0x25dfdbfb, {}, [{0x480, 0x1, [@m_mirred={0x11c, 0x4, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x3, 0x10000000, 0x5}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xfffffffc, 0xffffffffffffffff, 0xfffffffb, 0x2}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0xe8c, 0xffffffffffffffff, 0x7, 0x4}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffb43c, 0x8000, 0x10000000, 0x8e7, 0x2}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x401, 0x4, 0x6, 0x3}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x9, 0x8, 0x6, 0x73b3d9db}, 0x2, r3}}]}, {0x2d, 0x6, "426372a1131e229aeb6680ad5bf0f1a069495c34c365e88874e103b571db2440de74e012027f4e3f0e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x68, 0x1a, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x1, 0x2, 0x4, 0x40}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x8, 0x10000000, 0x1, 0x6}}]}, {0xa, 0x6, "54f0ab2dc293"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0x194, 0x12, 0x0, 0x0, {{0x7}, {0x128, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0xa1, 0x6, {0x6, 'nat\x00', 0xf, 0xff, "d1ce5fdedff6f89b571874e25ac4d002796e58c389da3d2cb2ded12e086e20b89cbab048461e7d9c2a439189d1e32582e3316acc2f962218764adcd6dd479c61f1c5bf6f6ad0e4180ccc108125845f52580c9e98675f8dba93d26a413f0c87ff6a1438ba05742b9c1321843b99db1ef61b23db715e36f7"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffa}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x10}]}, {0x48, 0x6, "f8ccd2b547676a2d2da89d4d445adc4c9ee3d0f64b429cda0f602498acf7d5e4bc8b3bd79f0326b26194d01cfd3e2bedf8de6f4c22e310ee20f388d01d06737d5f62a772"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbedit={0x74, 0x18, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0xb}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0x36, 0x6, "bb80b02dba61ee06a17f6b577b516cc5acdc50e792d1f5a40b4528317a38be996cdfcda14cac9e456034fc1df558ef945eef"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0xf0, 0x9, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}]}, {0x92, 0x6, "f78f43766572041f4b44a729790ca5ffe106a95a2f2834722186b1c9e1e9bb7aa69ac85e1f3aaeef347ceb7f1a432d163308b127933ed877f8272ac50447c542eb08e36f9ced209b932ad9a2fab3ec0acff8bd54407bd9b6889b0277059e4c1d8334402f24e6b96e9b8f7b0c5a248d421d58d999925b5814abdd065c09950e1d2cdfe725043e289628c9ed706d21"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x494}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xfff2}, {0x0, 0xfff1}, {0x2}}, [{0x8, 0xb, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)=0x10000) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000040)="e26c", 0x2}], 0x1) 970.329ms ago: executing program 4 (id=6094): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x50000, &(0x7f0000000140)=ANY=[]) write$FUSE_INIT(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) (fail_nth: 1) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, 0x0, &(0x7f0000000000), 0x80, r4, 0x4, 0x7}, 0x38) sendfile(r3, r3, 0x0, 0x1002000ff) userfaultfd(0x80001) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) 458.463636ms ago: executing program 2 (id=6095): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000001080)=[{{&(0x7f0000000400)={0xa, 0x4e22, 0x10000, @local, 0x7}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000440)='Z', 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x420}}], 0x1, 0x24000000) sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000080)="8fa5b6e46f33ed61eaf0e769a63f2951f83c3eb7f4d074785816927c223ee44c46afb213825053d87cc3c838be6f3f2d8649c1325d288663b0cc24b0e12d780087a2967751b55e22391e", 0x4a}], 0x1}}], 0x2, 0x40) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x4002, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1d188, 0x10230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0xc1b}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x24004004) 75.713844ms ago: executing program 2 (id=6097): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x18) 0s ago: executing program 2 (id=6098): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffffc, 0x12) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 5/0x3d0 [ 1294.907116][T27302] ? hook_file_ioctl_common+0x149/0x410 [ 1294.907133][T27302] ? lock_release+0x24d/0x310 [ 1294.907151][T27302] ? __fget_files+0x21f/0x3d0 [ 1294.907167][T27302] security_file_ioctl+0xd3/0x230 [ 1294.907189][T27302] __x64_sys_ioctl+0xb7/0x210 [ 1294.907213][T27302] do_syscall_64+0x115/0x870 [ 1294.907234][T27302] ? clear_bhb_loop+0x40/0x90 [ 1294.907254][T27302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.907271][T27302] RIP: 0033:0x7f7f1179ce59 [ 1294.907285][T27302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1294.907302][T27302] RSP: 002b:00007f7f12738028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1294.907319][T27302] RAX: ffffffffffffffda RBX: 00007f7f11a15fa0 RCX: 00007f7f1179ce59 [ 1294.907333][T27302] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 1294.907343][T27302] RBP: 00007f7f12738090 R08: 0000000000000000 R09: 0000000000000000 [ 1294.907354][T27302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1294.907365][T27302] R13: 00007f7f11a16038 R14: 00007f7f11a15fa0 R15: 00007ffd523a0ff8 [ 1294.907382][T27302] [ 1294.907398][T27302] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1295.076924][ T5746] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1295.154068][ T5707] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1295.170278][ T5707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.183391][ T5707] usb 2-1: Product: syz [ 1295.189417][ T5707] usb 2-1: Manufacturer: syz [ 1295.196427][ T5707] usb 2-1: SerialNumber: syz [ 1295.214657][ T5707] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1295.250435][ T24] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1295.358636][ T5746] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1295.382842][ T5746] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 1295.405895][ T5746] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1295.415085][ T5746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.426476][ T5699] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1295.449861][ T5746] usb 5-1: config 0 descriptor?? [ 1295.541694][T27296] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5830'. [ 1295.598695][ T5699] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.616345][ T5699] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1295.627729][ T5699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.656237][ T5699] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1295.682245][ T5746] ath6kl: Failed to submit usb control message: -71 [ 1295.702839][ T5746] ath6kl: unable to send the bmi data to the device: -71 [ 1295.739279][ T5746] ath6kl: Unable to send get target info: -71 [ 1295.777029][ T5746] ath6kl: Failed to init ath6kl core: -71 [ 1295.837795][ T5746] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1295.906142][ T5746] usb 5-1: USB disconnect, device number 28 [ 1296.370187][ T24] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1296.447398][ T24] ath9k_htc: Failed to initialize the device [ 1296.466929][ T5746] usb 2-1: USB disconnect, device number 55 [ 1296.478846][ T5746] usb 2-1: ath9k_htc: USB layer deinitialized [ 1296.972059][ T5699] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 1296.995235][ T5699] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 1297.015978][ T5699] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1297.027078][ T5699] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 1297.035177][ T5699] usb 1-1: USB disconnect, device number 20 [ 1297.047655][T27335] tipc: Started in network mode [ 1297.052615][T27335] tipc: Node identity 969b9c4e47c7, cluster identity 4711 [ 1297.060121][T27335] tipc: Enabled bearer , priority 0 [ 1297.068796][T27335] syzkaller0: entered promiscuous mode [ 1297.074329][T27335] syzkaller0: entered allmulticast mode [ 1297.084095][T27335] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1297.102336][T27335] tipc: Resetting bearer [ 1297.217182][T27335] tipc: Resetting bearer [ 1297.223896][T27335] tipc: Disabling bearer [ 1297.649838][ T29] audit: type=1400 audit(1781859960.949:1441): avc: denied { name_bind } for pid=27345 comm="syz.4.5846" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1298.508257][T13946] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1298.828812][T27362] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5851'. [ 1298.848563][T27363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5850'. [ 1298.858938][T13946] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1298.871218][T13946] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1298.881347][T13946] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1298.890607][T13946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.900639][T27353] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1298.939358][T13946] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1299.073913][ T5707] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1299.255403][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1299.273743][ T5707] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 1299.289716][ T5707] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1299.303785][ T5707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.323568][ T5721] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1299.325146][ T5707] usb 4-1: config 0 descriptor?? [ 1299.548913][ T5707] ath6kl: Failed to submit usb control message: -71 [ 1299.570296][ T5707] ath6kl: unable to send the bmi data to the device: -71 [ 1299.591340][ T5707] ath6kl: Unable to send get target info: -71 [ 1299.619036][ T5707] ath6kl: Failed to init ath6kl core: -71 [ 1299.636637][ T5707] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1299.674402][ T5707] usb 4-1: USB disconnect, device number 24 [ 1299.683625][ T5721] usb 1-1: Using ep0 maxpacket: 16 [ 1299.690135][ T5721] usb 1-1: config 1 has an invalid interface number: 33 but max is 0 [ 1299.706444][ T5721] usb 1-1: config 1 has no interface number 0 [ 1299.728120][ T5721] usb 1-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=78.85 [ 1299.759241][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.776962][ T5721] uvcvideo 1-1:1.33: Found UVC 0.00 device (1bcf:0b40) [ 1299.788462][ T5721] uvcvideo 1-1:1.33: Forcing UVC version to 1.0a [ 1299.803433][ T5721] uvcvideo 1-1:1.33: No valid video chain found. [ 1300.062855][ T5746] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1300.131362][ T5707] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1300.405773][ T5746] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.432508][ T5746] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1300.492825][ T5746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.531757][ T5746] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1300.547238][ T5707] usb 3-1: Using ep0 maxpacket: 8 [ 1300.570913][ T5707] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1300.583347][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.592605][ T5707] usb 3-1: Product: syz [ 1300.597739][ T5707] usb 3-1: Manufacturer: syz [ 1300.602787][ T5707] usb 3-1: SerialNumber: syz [ 1300.631413][ T5707] usb 3-1: config 0 descriptor?? [ 1300.648930][ T5707] gspca_main: se401-2.14.0 probing 047d:5003 [ 1301.075837][ T5707] gspca_se401: Bayer format not supported! [ 1301.379513][ T5700] usb 2-1: USB disconnect, device number 56 [ 1301.412842][ T5721] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1301.611950][ T5721] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1301.735722][ T5721] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1301.851547][ T5721] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1301.904229][T27382] can: request_module (can-proto-3) failed. [ 1301.973766][ T24] usb 1-1: USB disconnect, device number 21 [ 1302.256772][ T5721] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1302.285393][ T5721] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1302.302001][ T5746] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 1302.351455][ T5746] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 1302.383460][T27404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5860'. [ 1302.398974][T27404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5860'. [ 1302.586867][ T5746] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1302.596981][ T5721] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1302.601860][ T5746] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 1302.609576][ T5721] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1302.615598][ T29] audit: type=1400 audit(1781859965.921:1442): avc: denied { bind } for pid=27401 comm="syz.0.5861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1302.624683][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1302.645501][ T5746] usb 5-1: USB disconnect, device number 29 [ 1302.658295][ T5721] usb 4-1: Product: syz [ 1302.662637][ T5721] usb 4-1: Manufacturer: syz [ 1302.670464][T27394] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 1302.678360][ T5721] cdc_wdm 4-1:1.0: skipping garbage [ 1302.685032][ T5721] cdc_wdm 4-1:1.0: skipping garbage [ 1302.685872][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1302.700929][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1302.701449][ T5721] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1302.713401][ T5721] cdc_wdm 4-1:1.0: Unknown control protocol [ 1302.733609][ T5721] libceph: connect (1)[c::]:6789 error -101 [ 1302.739794][ T5721] libceph: mon0 (1)[c::]:6789 connect error [ 1303.151138][ T5721] libceph: connect (1)[c::]:6789 error -101 [ 1303.157731][ T5721] libceph: mon0 (1)[c::]:6789 connect error [ 1303.157892][ T5746] libceph: connect (1)[c::]:6789 error -101 [ 1303.163760][ T5746] libceph: mon0 (1)[c::]:6789 connect error [ 1303.178254][T27405] ceph: No mds server is up or the cluster is laggy [ 1303.194046][T27410] ceph: No mds server is up or the cluster is laggy [ 1303.204357][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1303.204622][ T29] audit: type=1400 audit(1781859966.502:1443): avc: denied { read write } for pid=27393 comm="syz.3.5859" name="cdc-wdm0" dev="devtmpfs" ino=6577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1303.210964][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1303.211148][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1303.240310][ T5746] usb 3-1: USB disconnect, device number 52 [ 1303.241107][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1303.260379][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1303.260385][ T29] audit: type=1400 audit(1781859966.502:1444): avc: denied { open } for pid=27393 comm="syz.3.5859" path="/dev/cdc-wdm0" dev="devtmpfs" ino=6577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1303.266971][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1303.267242][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1303.303551][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1303.310670][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1303.317274][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1303.323542][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1303.330140][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1303.336362][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1303.342971][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1303.349188][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1303.355773][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1303.365725][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1303.372330][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1303.379092][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1303.385692][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1303.394503][ T5721] usb 4-1: USB disconnect, device number 25 [ 1303.562597][T27430] loop2: detected capacity change from 0 to 7 [ 1303.569935][T27430] Dev loop2: unable to read RDB block 7 [ 1303.575661][T27430] loop2: AHDI p1 p2 p3 [ 1303.579906][T27430] loop2: partition table partially beyond EOD, truncated [ 1303.587232][T27430] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1303.595198][T27430] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1303.616987][ T4972] Dev loop2: unable to read RDB block 7 [ 1303.628656][ T4972] loop2: AHDI p1 p2 p3 [ 1303.632883][ T4972] loop2: partition table partially beyond EOD, truncated [ 1303.640079][ T4972] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1303.647029][ T4972] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1303.771564][ T5746] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1303.851711][ T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1303.921488][ T5746] usb 3-1: Using ep0 maxpacket: 8 [ 1303.949872][ T5746] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.995029][ T5746] usb 3-1: too many endpoints for config 168 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1304.017444][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 1304.045582][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1304.058506][ T5746] usb 3-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1304.072465][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1304.089489][ T5746] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1304.100915][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1304.118153][ T5746] usb 3-1: too many endpoints for config 168 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1304.130488][ T24] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1304.139835][ T5746] usb 3-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1304.160888][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.169937][ T5746] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1304.181100][ T5746] usb 3-1: too many endpoints for config 168 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1304.181440][ T5700] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1304.193045][ T24] usb 1-1: config 0 descriptor?? [ 1304.218102][ T5746] usb 3-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1304.251846][ T5746] usb 3-1: string descriptor 0 read error: -22 [ 1304.258727][ T5746] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1304.336587][ T5746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.389060][ T5746] adutux 3-1:168.0: interrupt endpoints not found [ 1304.765408][ T5700] usb 2-1: Using ep0 maxpacket: 8 [ 1304.783033][T27428] can0: slcan on ttyS3. [ 1304.911583][T27446] can0 (unregistered): slcan off ttyS3. [ 1305.253672][ T24] shield 0003:0955:7214.001E: item fetching failed at offset 0/5 [ 1305.385737][ T24] shield 0003:0955:7214.001E: Parse failed [ 1305.391760][ T29] audit: type=1400 audit(1781859968.633:1445): avc: denied { read } for pid=5267 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1305.477459][ T5700] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1305.478676][ T24] shield 0003:0955:7214.001E: probe with driver shield failed with error -22 [ 1305.485758][ T5700] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1305.485783][ T5700] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1305.485807][ T5700] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1305.485829][ T5700] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1305.485860][ T5700] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1305.485877][ T5700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.573947][ T29] audit: type=1400 audit(1781859968.863:1446): avc: denied { write } for pid=27423 comm="syz.2.5864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1306.523917][T27457] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1306.890086][ T5700] usb 2-1: usb_control_msg returned -32 [ 1306.896689][ T5700] usbtmc 2-1:16.0: can't read capabilities [ 1306.951222][ T24] usb 3-1: USB disconnect, device number 53 [ 1307.255240][ T5700] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1307.339107][T27434] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 1307.358633][T27474] FAULT_INJECTION: forcing a failure. [ 1307.358633][T27474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1307.372960][T27474] CPU: 1 UID: 0 PID: 27474 Comm: syz.4.5879 Tainted: G L syzkaller #0 PREEMPT(full) [ 1307.372988][T27474] Tainted: [L]=SOFTLOCKUP [ 1307.372994][T27474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1307.373004][T27474] Call Trace: [ 1307.373002][T27434] comedi comedi1: comedi_config --init_data is deprecated [ 1307.373009][T27474] [ 1307.373017][T27474] dump_stack_lvl+0x100/0x190 [ 1307.373038][T27474] should_fail_ex.cold+0x5/0xa [ 1307.373057][T27474] _copy_from_user+0x2e/0xd0 [ 1307.373074][T27474] copy_msghdr_from_user+0x9f/0x4c0 [ 1307.373093][T27474] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1307.373112][T27474] ? __pfx__kstrtoull+0x10/0x10 [ 1307.373132][T27474] ? putname+0xb1/0x110 [ 1307.373149][T27474] ___sys_sendmsg+0x106/0x1e0 [ 1307.373166][T27474] ? __pfx____sys_sendmsg+0x10/0x10 [ 1307.373187][T27474] ? rcu_is_watching+0x12/0xc0 [ 1307.373215][T27474] __sys_sendmmsg+0x20c/0x440 [ 1307.373237][T27474] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1307.373258][T27474] ? rcu_is_watching+0x12/0xc0 [ 1307.373276][T27474] ? ksys_write+0x190/0x250 [ 1307.373303][T27474] ? fput+0x79/0x100 [ 1307.373318][T27474] ? ksys_write+0x1ac/0x250 [ 1307.373338][T27474] ? __pfx_ksys_write+0x10/0x10 [ 1307.373360][T27474] __x64_sys_sendmmsg+0x9c/0x100 [ 1307.373382][T27474] do_syscall_64+0x115/0x870 [ 1307.373401][T27474] ? clear_bhb_loop+0x40/0x90 [ 1307.373418][T27474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.373433][T27474] RIP: 0033:0x7f675bf9ce59 [ 1307.373452][T27474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1307.373467][T27474] RSP: 002b:00007f675cf05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1307.373483][T27474] RAX: ffffffffffffffda RBX: 00007f675c215fa0 RCX: 00007f675bf9ce59 [ 1307.373494][T27474] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1307.373504][T27474] RBP: 00007f675cf05090 R08: 0000000000000000 R09: 0000000000000000 [ 1307.373514][T27474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1307.373523][T27474] R13: 00007f675c216038 R14: 00007f675c215fa0 R15: 00007ffe1c913ff8 [ 1307.373537][T27474] [ 1307.929398][ T5700] usb 4-1: Using ep0 maxpacket: 8 [ 1307.937729][ T5700] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 1307.946939][ T5700] usb 4-1: config 0 has no interface number 0 [ 1307.953531][ T5700] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1307.965132][ T5700] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1307.975465][ T5700] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1307.999034][T27481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=27481 comm=syz.4.5881 [ 1308.011861][T27481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=27481 comm=syz.4.5881 [ 1308.032367][ T5721] usb 2-1: USB disconnect, device number 57 [ 1308.060263][ T5700] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1308.124153][ T5700] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1308.176024][ T5699] usb 1-1: USB disconnect, device number 22 [ 1308.237195][ T5700] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1308.317558][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.386889][ T5700] usb 4-1: Product: syz [ 1308.418190][ T5700] usb 4-1: Manufacturer: syz [ 1308.441093][ T5700] usb 4-1: SerialNumber: syz [ 1308.522751][ T5700] usb 4-1: config 0 descriptor?? [ 1310.076151][ T5700] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 1310.652990][T27513] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1310.986552][ C0] iowarrior 4-1:0.186: iowarrior_callback - usb_submit_urb failed with result -1 [ 1311.056281][T27523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5892'. [ 1311.179559][ T5700] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1311.477773][ T5700] usb 5-1: Using ep0 maxpacket: 32 [ 1311.486218][ T5700] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1311.499059][ T5700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1311.669621][ T5700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1311.703285][ T5700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1311.726401][ T5700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1311.762889][ T5700] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1311.783719][ T5700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.807230][ T5700] usb 5-1: Product: syz [ 1311.820784][ T5700] usb 5-1: Manufacturer: syz [ 1311.892114][ T5700] usb 5-1: SerialNumber: syz [ 1311.907558][ T5699] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1311.922651][ T5700] usb 5-1: config 0 descriptor?? [ 1312.067374][ T5699] usb 1-1: Using ep0 maxpacket: 32 [ 1312.080174][ T5699] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.111031][ T5699] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1312.129687][ T5746] usb 4-1: USB disconnect, device number 26 [ 1312.162956][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.176894][ T5699] usb 1-1: Product: syz [ 1312.187338][ T5699] usb 1-1: Manufacturer: syz [ 1312.192300][ T5699] usb 1-1: SerialNumber: syz [ 1312.202342][ T5699] usb 1-1: config 0 descriptor?? [ 1312.213566][ T5699] gs_usb 1-1:0.0: Required endpoints not found [ 1313.225421][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -110 [ 1313.231897][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1313.239277][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1313.247112][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1313.256704][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1313.266205][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1313.278520][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1313.292374][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1313.304792][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1313.316365][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1313.325163][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1313.336414][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1313.347031][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1313.353351][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1313.360484][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1313.377874][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1313.603820][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1313.610197][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1313.696289][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1313.712914][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1313.723201][ T5700] input input73: Timeout waiting for response from device. [ 1313.750244][ T5700] usb 5-1: USB disconnect, device number 30 [ 1314.459009][ T24] usb 1-1: USB disconnect, device number 23 [ 1314.506089][ T5699] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1314.761631][ T5699] usb 2-1: Using ep0 maxpacket: 16 [ 1314.848176][ T5699] usb 2-1: config 1 has an invalid interface number: 19 but max is 0 [ 1314.865920][ T5699] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1314.961952][ T5699] usb 2-1: config 1 has no interface number 0 [ 1314.981406][ T5699] usb 2-1: config 1 interface 19 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1315.004198][ T5699] usb 2-1: config 1 interface 19 has no altsetting 0 [ 1315.013025][ T5699] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 1315.023428][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.039881][ T5699] usb 2-1: Product: syz [ 1315.044975][ T5699] usb 2-1: Manufacturer: syz [ 1315.062438][ T5699] usb 2-1: SerialNumber: syz [ 1315.082520][ T5699] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1315.231756][T27591] FAULT_INJECTION: forcing a failure. [ 1315.231756][T27591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1315.245651][T27591] CPU: 0 UID: 0 PID: 27591 Comm: syz.4.5912 Tainted: G L syzkaller #0 PREEMPT(full) [ 1315.245682][T27591] Tainted: [L]=SOFTLOCKUP [ 1315.245688][T27591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1315.245698][T27591] Call Trace: [ 1315.245704][T27591] [ 1315.245710][T27591] dump_stack_lvl+0x100/0x190 [ 1315.245733][T27591] should_fail_ex.cold+0x5/0xa [ 1315.245748][T27591] _copy_from_user+0x2e/0xd0 [ 1315.245759][T27591] copy_msghdr_from_user+0x9f/0x4c0 [ 1315.245775][T27591] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1315.245796][T27591] ? __pfx__kstrtoull+0x10/0x10 [ 1315.245816][T27591] ? putname+0xb1/0x110 [ 1315.245834][T27591] ___sys_sendmsg+0x106/0x1e0 [ 1315.245852][T27591] ? __pfx____sys_sendmsg+0x10/0x10 [ 1315.245869][T27591] ? rcu_is_watching+0x12/0xc0 [ 1315.245886][T27591] __sys_sendmmsg+0x20c/0x440 [ 1315.245902][T27591] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1315.245917][T27591] ? rcu_is_watching+0x12/0xc0 [ 1315.245937][T27591] ? ksys_write+0x190/0x250 [ 1315.245966][T27591] ? fput+0x79/0x100 [ 1315.245982][T27591] ? ksys_write+0x1ac/0x250 [ 1315.246003][T27591] ? __pfx_ksys_write+0x10/0x10 [ 1315.246022][T27591] __x64_sys_sendmmsg+0x9c/0x100 [ 1315.246038][T27591] do_syscall_64+0x115/0x870 [ 1315.246051][T27591] ? clear_bhb_loop+0x40/0x90 [ 1315.246063][T27591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1315.246078][T27591] RIP: 0033:0x7f675bf9ce59 [ 1315.246092][T27591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1315.246108][T27591] RSP: 002b:00007f675cee4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1315.246124][T27591] RAX: ffffffffffffffda RBX: 00007f675c216090 RCX: 00007f675bf9ce59 [ 1315.246134][T27591] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000004 [ 1315.246144][T27591] RBP: 00007f675cee4090 R08: 0000000000000000 R09: 0000000000000000 [ 1315.246153][T27591] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 1315.246160][T27591] R13: 00007f675c216128 R14: 00007f675c216090 R15: 00007ffe1c913ff8 [ 1315.246169][T27591] [ 1315.900409][T16823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1315.908046][T16823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1315.915632][T16823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1315.924934][T16823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1315.932542][T16823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1316.196628][ T1085] usb 2-1: Failed to submit usb control message: -110 [ 1316.208300][ T1085] usb 2-1: unable to send the bmi data to the device: -110 [ 1316.221751][ T1085] usb 2-1: unable to get target info from device [ 1316.239927][ T1085] usb 2-1: could not get target info (-110) [ 1316.259966][ T1085] usb 2-1: could not probe fw (-110) [ 1316.308903][T27604] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1316.317613][T27604] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1316.339909][T27604] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1316.358911][T27604] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1316.373329][T27604] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1316.382894][T27604] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1316.389348][T27604] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1316.397020][T27604] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1316.665136][ T5746] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1316.815117][ T5746] usb 1-1: device descriptor read/64, error -71 [ 1317.084400][ T5700] usb 2-1: USB disconnect, device number 58 [ 1317.096099][ T5746] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1317.113006][T27631] FAULT_INJECTION: forcing a failure. [ 1317.113006][T27631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1317.147080][T27631] CPU: 0 UID: 0 PID: 27631 Comm: syz.1.5921 Tainted: G L syzkaller #0 PREEMPT(full) [ 1317.147099][T27631] Tainted: [L]=SOFTLOCKUP [ 1317.147103][T27631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1317.147110][T27631] Call Trace: [ 1317.147114][T27631] [ 1317.147118][T27631] dump_stack_lvl+0x100/0x190 [ 1317.147134][T27631] should_fail_ex.cold+0x5/0xa [ 1317.147148][T27631] _copy_from_user+0x2e/0xd0 [ 1317.147160][T27631] copy_msghdr_from_user+0x9f/0x4c0 [ 1317.147174][T27631] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1317.147187][T27631] ? kstrtouint_from_user+0x13c/0x1d0 [ 1317.147203][T27631] ___sys_sendmsg+0x106/0x1e0 [ 1317.147215][T27631] ? __pfx____sys_sendmsg+0x10/0x10 [ 1317.147227][T27631] ? get_pid_task+0x106/0x250 [ 1317.147243][T27631] ? rcu_is_watching+0x12/0xc0 [ 1317.147260][T27631] __sys_sendmsg+0x160/0x210 [ 1317.147276][T27631] ? __pfx___sys_sendmsg+0x10/0x10 [ 1317.147293][T27631] ? rcu_is_watching+0x12/0xc0 [ 1317.147307][T27631] do_syscall_64+0x115/0x870 [ 1317.147320][T27631] ? clear_bhb_loop+0x40/0x90 [ 1317.147332][T27631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.147343][T27631] RIP: 0033:0x7f1b4299ce59 [ 1317.147352][T27631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1317.147362][T27631] RSP: 002b:00007f1b4392b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1317.147373][T27631] RAX: ffffffffffffffda RBX: 00007f1b42c15fa0 RCX: 00007f1b4299ce59 [ 1317.147380][T27631] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1317.147386][T27631] RBP: 00007f1b4392b090 R08: 0000000000000000 R09: 0000000000000000 [ 1317.147393][T27631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1317.147399][T27631] R13: 00007f1b42c16038 R14: 00007f1b42c15fa0 R15: 00007ffc4ac30818 [ 1317.147409][T27631] [ 1317.341709][ T5746] usb 1-1: device descriptor read/64, error -71 [ 1317.427406][T27599] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.435356][T27599] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.452212][T27599] bridge_slave_0: entered allmulticast mode [ 1317.459229][T27599] bridge_slave_0: entered promiscuous mode [ 1317.464714][ T5746] usb usb1-port1: attempt power cycle [ 1317.466443][T27599] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.478002][T27599] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.487825][T27599] bridge_slave_1: entered allmulticast mode [ 1317.494488][T27599] bridge_slave_1: entered promiscuous mode [ 1317.513307][T10009] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1317.523452][T10009] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.552995][T27599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1317.565774][T27599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1317.587211][T10009] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1317.598895][T10009] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.622241][T27599] team0: Port device team_slave_0 added [ 1317.630912][T27599] team0: Port device team_slave_1 added [ 1317.645231][T27599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1317.652354][T27599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1317.679082][T27599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1317.691139][T10009] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1317.701183][T10009] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.714007][T27599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1317.721206][T27599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1317.747378][T27599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1317.775759][T10009] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1317.786098][T10009] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.811671][T27599] hsr_slave_0: entered promiscuous mode [ 1317.818639][T27599] hsr_slave_1: entered promiscuous mode [ 1317.824933][ T5746] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1317.825511][T27599] debugfs: 'hsr0' already exists in 'hsr' [ 1317.839429][T27599] Cannot create hsr debugfs directory [ 1317.854919][ T5746] usb 1-1: device descriptor read/8, error -71 [ 1317.894436][ T5707] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1317.927616][T10009] bridge_slave_1: left allmulticast mode [ 1317.933340][T10009] bridge_slave_1: left promiscuous mode [ 1317.939672][T10009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.951580][T10009] bridge_slave_0: left allmulticast mode [ 1317.957673][T10009] bridge_slave_0: left promiscuous mode [ 1317.963911][T10009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.043546][T10009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1318.055653][ T5707] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1318.064958][T10009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1318.073865][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.082806][ T5707] usb 5-1: Product: syz [ 1318.087803][T10009] bond0 (unregistering): Released all slaves [ 1318.100541][ T5707] usb 5-1: Manufacturer: syz [ 1318.105232][ T5707] usb 5-1: SerialNumber: syz [ 1318.114416][ T5707] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1318.124358][ T5746] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1318.141031][ T24] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1318.163213][T10009] tipc: Left network mode [ 1318.185162][ T5746] usb 1-1: device descriptor read/8, error -71 [ 1318.304319][T24751] Bluetooth: hci5: command 0x0406 tx timeout [ 1318.314303][ T5746] usb usb1-port1: unable to enumerate USB device [ 1318.342484][T10009] hsr_slave_0: left promiscuous mode [ 1318.362339][T10009] hsr_slave_1: left promiscuous mode [ 1318.389404][T10009] veth1_macvtap: left promiscuous mode [ 1318.394158][T24751] Bluetooth: hci0: command 0x041b tx timeout [ 1318.404330][T16823] Bluetooth: hci3: command 0x0c1a tx timeout [ 1318.404335][T24775] Bluetooth: hci4: command 0x0c1a tx timeout [ 1318.418162][T10009] veth0_macvtap: left promiscuous mode [ 1318.433014][T10009] veth1_vlan: left promiscuous mode [ 1318.439850][ T29] audit: type=1400 audit(1781859981.749:1447): avc: denied { write } for pid=27645 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1318.443357][T10009] veth0_vlan: left promiscuous mode [ 1318.532933][ T29] audit: type=1400 audit(1781859981.839:1448): avc: denied { write } for pid=27656 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1319.184620][T13946] usb 5-1: USB disconnect, device number 31 [ 1319.186415][ T24] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1319.213855][ T24] ath9k_htc: Failed to initialize the device [ 1319.225556][T10009] team0 (unregistering): Port device team_slave_1 removed [ 1319.239617][T13946] usb 5-1: ath9k_htc: USB layer deinitialized [ 1319.254444][T10009] team0 (unregistering): Port device team_slave_0 removed [ 1319.357575][ T5267] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1319.521871][T27682] Invalid ELF header type: 2051 != 1 [ 1319.559236][ T29] audit: type=1400 audit(1781859982.830:1449): avc: denied { module_load } for pid=27681 comm="syz.0.5932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1319.573267][T27599] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1319.579044][ T29] audit: type=1400 audit(1781859982.850:1450): avc: denied { write } for pid=27681 comm="syz.0.5932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1319.612685][T27599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1319.630867][T27599] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1319.978985][T27599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1319.986661][T27599] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1319.994965][T27599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1320.005267][T10009] IPVS: stop unused estimator thread 0... [ 1320.011385][T27599] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1320.020637][T27599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1320.049645][ T29] audit: type=1400 audit(1781859983.360:1451): avc: denied { write } for pid=27684 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1320.095500][T27599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1320.102215][ T29] audit: type=1400 audit(1781859983.410:1452): avc: denied { write } for pid=27704 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1320.130383][T27599] 8021q: adding VLAN 0 to HW filter on device team0 [ 1320.137382][T13946] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1320.141388][T10009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.152054][T10009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1320.162392][T24645] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.169483][T24645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1320.213332][ T5746] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1320.273238][ T5721] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 1320.294891][T13946] usb 5-1: Using ep0 maxpacket: 16 [ 1320.303250][T13946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1320.318292][T13946] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1320.337692][T13946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.353339][T13946] usb 5-1: Product: syz [ 1320.357646][T13946] usb 5-1: Manufacturer: syz [ 1320.362331][T13946] usb 5-1: SerialNumber: syz [ 1320.373257][ T5746] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1320.376709][T13946] usb 5-1: config 0 descriptor?? [ 1320.388852][ T5746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.401643][ T5746] usb 3-1: Product: syz [ 1320.403724][T27599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1320.407781][ T5746] usb 3-1: Manufacturer: syz [ 1320.415572][T13946] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1320.425086][ T5746] usb 3-1: SerialNumber: syz [ 1320.427886][ T5721] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1320.435834][ T5746] usb 3-1: config 0 descriptor?? [ 1320.443934][T13946] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1320.452741][ T5721] usb 1-1: not running at top speed; connect to a high speed hub [ 1320.463462][T24775] Bluetooth: hci0: command 0x041b tx timeout [ 1320.463690][T24751] Bluetooth: hci3: command 0x0c1a tx timeout [ 1320.469922][ T5721] usb 1-1: config 1 has an invalid interface number: 139 but max is 0 [ 1320.485466][ T5721] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.503374][ T5721] usb 1-1: config 1 has no interface number 0 [ 1320.514734][ T5721] usb 1-1: config 1 interface 139 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1320.517270][T27599] veth0_vlan: entered promiscuous mode [ 1320.528205][ T5721] usb 1-1: config 1 interface 139 has no altsetting 0 [ 1320.547361][ T5721] usb 1-1: New USB device found, idVendor=041e, idProduct=4038, bcdDevice=4a.17 [ 1320.557242][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.559944][T27599] veth1_vlan: entered promiscuous mode [ 1320.599441][T27599] veth0_macvtap: entered promiscuous mode [ 1320.610542][T27599] veth1_macvtap: entered promiscuous mode [ 1320.631400][T27599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1320.646341][ T5721] usb 1-1: Product: syz [ 1320.657792][T27599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1320.676730][ T5746] usb 3-1: Firmware version (0.0) predates our first public release. [ 1320.684974][ T5721] usb 1-1: Manufacturer: syz [ 1320.696488][T10009] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.705444][ T5721] usb 1-1: SerialNumber: syz [ 1320.724577][ T5746] usb 3-1: Please update to version 0.2 or newer [ 1320.732535][T10009] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.753274][T10009] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.787961][T10009] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.815103][ T5746] usb 3-1: USB disconnect, device number 54 [ 1320.857899][T10009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1320.875517][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1320.885697][T10009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1320.908676][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1320.925322][ T5721] gspca_main: sq930x-2.14.0 probing 041e:4038 [ 1320.977065][ T5721] gspca_sq930x: reg_r 001f failed -71 [ 1321.000857][ T5721] sq930x 1-1:1.139: probe with driver sq930x failed with error -71 [ 1321.033736][T13946] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1321.075620][ T5721] usb 1-1: USB disconnect, device number 28 [ 1321.516438][T13946] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1321.529138][T13946] em28xx 5-1:0.0: board has no eeprom [ 1321.535904][ T5746] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1321.692628][ T5746] usb 4-1: Using ep0 maxpacket: 16 [ 1321.705904][ T5746] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.716795][ T5746] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1321.729046][ T5746] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1321.739227][T27743] FAULT_INJECTION: forcing a failure. [ 1321.739227][T27743] name failslab, interval 1, probability 0, space 0, times 0 [ 1321.748936][ T5746] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1321.748983][ T5746] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1321.749924][ T5746] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1321.762341][T27743] CPU: 0 UID: 0 PID: 27743 Comm: syz.0.5939 Tainted: G L syzkaller #0 PREEMPT(full) [ 1321.762368][T27743] Tainted: [L]=SOFTLOCKUP [ 1321.762373][T27743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1321.762382][T27743] Call Trace: [ 1321.762391][T27743] [ 1321.762397][T27743] dump_stack_lvl+0x100/0x190 [ 1321.762419][T27743] should_fail_ex.cold+0x5/0xa [ 1321.762436][T27743] ? fs_reclaim_acquire+0x70/0x100 [ 1321.762460][T27743] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1321.762482][T27743] should_failslab+0xc2/0x120 [ 1321.762503][T27743] __kmalloc_noprof+0xe0/0x840 [ 1321.762520][T27743] ? kfree+0x1e5/0x6c0 [ 1321.762536][T27743] tomoyo_realpath_from_path+0xb6/0x690 [ 1321.762567][T27743] tomoyo_path_number_perm+0x23c/0x580 [ 1321.762585][T27743] ? tomoyo_path_number_perm+0x22e/0x580 [ 1321.762603][T27743] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1321.762624][T27743] ? preempt_count_add+0x76/0x150 [ 1321.762644][T27743] ? rcu_is_watching+0x12/0xc0 [ 1321.762663][T27743] ? __fget_files+0x215/0x3d0 [ 1321.762677][T27743] ? hook_file_ioctl_common+0x149/0x410 [ 1321.762692][T27743] ? lock_release+0x24d/0x310 [ 1321.762708][T27743] ? __fget_files+0x21f/0x3d0 [ 1321.762723][T27743] security_file_ioctl+0xd3/0x230 [ 1321.762743][T27743] __x64_sys_ioctl+0xb7/0x210 [ 1321.762763][T27743] do_syscall_64+0x115/0x870 [ 1321.762781][T27743] ? clear_bhb_loop+0x40/0x90 [ 1321.762798][T27743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.762813][T27743] RIP: 0033:0x7effd3b9ce59 [ 1321.762826][T27743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1321.762841][T27743] RSP: 002b:00007effd4a78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1321.762857][T27743] RAX: ffffffffffffffda RBX: 00007effd3e16090 RCX: 00007effd3b9ce59 [ 1321.762868][T27743] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 1321.762877][T27743] RBP: 00007effd4a78090 R08: 0000000000000000 R09: 0000000000000000 [ 1321.762886][T27743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1321.762896][T27743] R13: 00007effd3e16128 R14: 00007effd3e16090 R15: 00007fffba77bb88 [ 1321.762911][T27743] [ 1321.763404][T27743] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1322.039945][ T5746] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1322.048642][ T5746] usb 4-1: Manufacturer: syz [ 1322.084775][ T5746] usb 4-1: config 0 descriptor?? [ 1322.092271][T13946] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1322.100147][T13946] em28xx 5-1:0.0: dvb set to bulk mode. [ 1322.108263][ T5721] em28xx 5-1:0.0: Binding DVB extension [ 1322.286737][ T29] audit: type=1400 audit(1781859985.591:1453): avc: denied { ioctl } for pid=27674 comm="syz.4.5929" path="socket:[111895]" dev="sockfs" ino=111895 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1322.381596][T27753] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1322.696015][T16823] Bluetooth: hci3: command 0x0c1a tx timeout [ 1322.696014][T24751] Bluetooth: hci0: command 0x041b tx timeout [ 1322.735067][ T5746] rc_core: IR keymap rc-hauppauge not found [ 1322.741124][ T5746] Registered IR keymap rc-empty [ 1322.746932][ T5746] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1322.772000][ T5746] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1322.792459][ T5746] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1322.805022][ T5746] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input74 [ 1322.826405][ T5746] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1322.852233][ T5746] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1323.020463][ T5746] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1323.071849][ T24] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1323.082429][ T5746] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1323.103703][T27676] em28xx 5-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 1323.162252][ T5746] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1323.195161][ T5728] usb 5-1: USB disconnect, device number 32 [ 1323.206216][ T5721] em28xx 5-1:0.0: Registering input extension [ 1323.210857][ T5728] em28xx 5-1:0.0: Disconnecting em28xx [ 1323.220068][ T5728] em28xx 5-1:0.0: Closing input extension [ 1323.232643][ T5746] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1323.245200][ T5728] em28xx 5-1:0.0: Freeing device [ 1323.262568][ T5746] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1323.273367][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1323.282808][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1323.293198][ T5746] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1323.300754][ T24] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1323.310417][ T24] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1323.321946][ T5746] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1323.329157][ T24] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1323.342889][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1323.353730][ T24] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1323.361768][ T5746] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1323.369776][ T24] usb 3-1: string descriptor 0 read error: -22 [ 1323.376132][ T24] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1323.386202][ T5746] mceusb 4-1:0.0: Registered î’  with mce emulator interface version 1 [ 1323.394930][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.403146][ T5746] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1323.426851][ T5746] usb 4-1: USB disconnect, device number 27 [ 1323.629723][T27752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5943'. [ 1323.648510][T27752] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.783585][T27773] FAULT_INJECTION: forcing a failure. [ 1323.783585][T27773] name failslab, interval 1, probability 0, space 0, times 0 [ 1323.796243][T27773] CPU: 0 UID: 0 PID: 27773 Comm: syz.1.5947 Tainted: G L syzkaller #0 PREEMPT(full) [ 1323.796274][T27773] Tainted: [L]=SOFTLOCKUP [ 1323.796280][T27773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1323.796290][T27773] Call Trace: [ 1323.796297][T27773] [ 1323.796304][T27773] dump_stack_lvl+0x100/0x190 [ 1323.796329][T27773] should_fail_ex.cold+0x5/0xa [ 1323.796350][T27773] ? __kmalloc_cache_noprof+0x53/0x6e0 [ 1323.796371][T27773] should_failslab+0xc2/0x120 [ 1323.796397][T27773] __kmalloc_cache_noprof+0x7a/0x6e0 [ 1323.796416][T27773] ? alloc_pipe_info+0x10e/0x590 [ 1323.796435][T27773] alloc_pipe_info+0x10e/0x590 [ 1323.796454][T27773] splice_direct_to_actor+0x78f/0xa30 [ 1323.796479][T27773] ? __pfx_direct_splice_actor+0x10/0x10 [ 1323.796497][T27773] ? kstrtouint_from_user+0x13c/0x1d0 [ 1323.796521][T27773] ? rcu_is_watching+0x12/0xc0 [ 1323.796545][T27773] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1323.796562][T27773] ? rcu_is_watching+0x12/0xc0 [ 1323.796583][T27773] ? get_pid_task+0xfc/0x250 [ 1323.796605][T27773] ? lock_release+0x24d/0x310 [ 1323.796626][T27773] do_splice_direct+0x174/0x240 [ 1323.796645][T27773] ? __pfx_do_splice_direct+0x10/0x10 [ 1323.796663][T27773] ? avc_policy_seqno+0x9/0x20 [ 1323.796680][T27773] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1323.796697][T27773] ? bpf_lsm_file_permission+0x9/0x10 [ 1323.796720][T27773] ? security_file_permission+0x76/0x210 [ 1323.796746][T27773] ? rw_verify_area+0xce/0x6d0 [ 1323.796769][T27773] do_sendfile+0xadc/0xe20 [ 1323.796795][T27773] ? __pfx_do_sendfile+0x10/0x10 [ 1323.796818][T27773] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1323.796841][T27773] ? __fget_files+0x21f/0x3d0 [ 1323.796866][T27773] __x64_sys_sendfile64+0x1d8/0x220 [ 1323.796885][T27773] ? ksys_write+0x1ac/0x250 [ 1323.796910][T27773] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1323.796930][T27773] ? rcu_is_watching+0x12/0xc0 [ 1323.796953][T27773] do_syscall_64+0x115/0x870 [ 1323.796973][T27773] ? clear_bhb_loop+0x40/0x90 [ 1323.796993][T27773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1323.797011][T27773] RIP: 0033:0x7f1b4299ce59 [ 1323.797027][T27773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1323.797044][T27773] RSP: 002b:00007f1b4390a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1323.797062][T27773] RAX: ffffffffffffffda RBX: 00007f1b42c16090 RCX: 00007f1b4299ce59 [ 1323.797074][T27773] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 1323.797085][T27773] RBP: 00007f1b4390a090 R08: 0000000000000000 R09: 0000000000000000 [ 1323.797095][T27773] R10: 00000001002000ff R11: 0000000000000246 R12: 0000000000000001 [ 1323.797105][T27773] R13: 00007f1b42c16128 R14: 00007f1b42c16090 R15: 00007ffc4ac30818 [ 1323.797123][T27773] [ 1324.616109][T27752] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.661579][T27752] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.781485][T24751] Bluetooth: hci0: command 0x041b tx timeout [ 1324.846975][T27788] FAULT_INJECTION: forcing a failure. [ 1324.846975][T27788] name failslab, interval 1, probability 0, space 0, times 0 [ 1324.859863][T27788] CPU: 1 UID: 0 PID: 27788 Comm: syz.0.5950 Tainted: G L syzkaller #0 PREEMPT(full) [ 1324.859892][T27788] Tainted: [L]=SOFTLOCKUP [ 1324.859899][T27788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1324.859909][T27788] Call Trace: [ 1324.859915][T27788] [ 1324.859922][T27788] dump_stack_lvl+0x100/0x190 [ 1324.859946][T27788] should_fail_ex.cold+0x5/0xa [ 1324.859971][T27788] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1324.859996][T27788] should_failslab+0xc2/0x120 [ 1324.860021][T27788] __kmalloc_noprof+0xe0/0x840 [ 1324.860039][T27788] ? kfree+0x1e5/0x6c0 [ 1324.860058][T27788] tomoyo_realpath_from_path+0xb6/0x690 [ 1324.860085][T27788] tomoyo_path_number_perm+0x23c/0x580 [ 1324.860105][T27788] ? tomoyo_path_number_perm+0x22e/0x580 [ 1324.860127][T27788] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1324.860147][T27788] ? finish_task_switch.isra.0+0x2c0/0x1010 [ 1324.860169][T27788] ? rcu_is_watching+0x12/0xc0 [ 1324.860193][T27788] ? rcu_is_watching+0x12/0xc0 [ 1324.860219][T27788] ? rcu_is_watching+0x12/0xc0 [ 1324.860240][T27788] ? __fget_files+0x215/0x3d0 [ 1324.860256][T27788] ? hook_file_ioctl_common+0x149/0x410 [ 1324.860273][T27788] ? lock_release+0x24d/0x310 [ 1324.860291][T27788] ? __fget_files+0x21f/0x3d0 [ 1324.860308][T27788] security_file_ioctl+0xd3/0x230 [ 1324.860332][T27788] __x64_sys_ioctl+0xb7/0x210 [ 1324.860357][T27788] do_syscall_64+0x115/0x870 [ 1324.860378][T27788] ? clear_bhb_loop+0x40/0x90 [ 1324.860398][T27788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.860415][T27788] RIP: 0033:0x7effd3b9ce59 [ 1324.860430][T27788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1324.860447][T27788] RSP: 002b:00007effd4a57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1324.860465][T27788] RAX: ffffffffffffffda RBX: 00007effd3e16180 RCX: 00007effd3b9ce59 [ 1324.860476][T27788] RDX: 0000200000000000 RSI: 00000000800448d4 RDI: 0000000000000006 [ 1324.860488][T27788] RBP: 00007effd4a57090 R08: 0000000000000000 R09: 0000000000000000 [ 1324.860498][T27788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1324.860509][T27788] R13: 00007effd3e16218 R14: 00007effd3e16180 R15: 00007fffba77bb88 [ 1324.860525][T27788] [ 1325.084129][T27788] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1325.402270][T13946] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1325.755399][T27752] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.850103][T24645] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.861301][T13946] usb 5-1: Using ep0 maxpacket: 16 [ 1325.871113][T13946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1325.901021][ T1085] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.912550][T13946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1325.929784][T24645] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.180304][T24645] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.195941][T13946] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1326.231959][T13946] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1326.258143][T13946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.337781][ T24] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 1326.344905][T13946] usb 5-1: config 0 descriptor?? [ 1326.663239][ T24] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1326.672552][ T24] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1326.682284][ T24] usb 3-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 1327.332253][T24751] Bluetooth: hci0: command 0x041b tx timeout [ 1327.365387][ T24] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1327.382443][ T24] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1327.934095][ T24] usb 3-1: USB disconnect, device number 55 [ 1327.950890][T27781] can0: slcan on ttyS3. [ 1327.977287][T27815] fuse: Unknown parameter '' [ 1328.031531][T27781] can0 (unregistered): slcan off ttyS3. [ 1328.052097][T13946] shield 0003:0955:7214.001F: item fetching failed at offset 0/5 [ 1328.111458][T13946] shield 0003:0955:7214.001F: Parse failed [ 1328.126644][T13946] shield 0003:0955:7214.001F: probe with driver shield failed with error -22 [ 1328.161444][T27828] NILFS (nullb0): couldn't find nilfs on the device [ 1328.911578][ T29] audit: type=1400 audit(1781859992.225:1454): avc: denied { write } for pid=27825 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1328.977415][ T29] audit: type=1400 audit(1781859992.285:1455): avc: denied { write } for pid=27852 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1329.076492][T27855] FAULT_INJECTION: forcing a failure. [ 1329.076492][T27855] name failslab, interval 1, probability 0, space 0, times 0 [ 1329.089274][T27855] CPU: 0 UID: 0 PID: 27855 Comm: syz.2.5966 Tainted: G L syzkaller #0 PREEMPT(full) [ 1329.089303][T27855] Tainted: [L]=SOFTLOCKUP [ 1329.089309][T27855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1329.089320][T27855] Call Trace: [ 1329.089325][T27855] [ 1329.089332][T27855] dump_stack_lvl+0x100/0x190 [ 1329.089357][T27855] should_fail_ex.cold+0x5/0xa [ 1329.089377][T27855] ? fs_reclaim_acquire+0x70/0x100 [ 1329.089404][T27855] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1329.089480][T27855] should_failslab+0xc2/0x120 [ 1329.089503][T27855] __kmalloc_noprof+0xe0/0x840 [ 1329.089519][T27855] ? kfree+0x1e5/0x6c0 [ 1329.089535][T27855] tomoyo_realpath_from_path+0xb6/0x690 [ 1329.089561][T27855] tomoyo_path_number_perm+0x23c/0x580 [ 1329.089581][T27855] ? tomoyo_path_number_perm+0x22e/0x580 [ 1329.089603][T27855] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1329.089627][T27855] ? preempt_count_add+0x76/0x150 [ 1329.089649][T27855] ? rcu_is_watching+0x12/0xc0 [ 1329.089672][T27855] ? __fget_files+0x215/0x3d0 [ 1329.089688][T27855] ? hook_file_ioctl_common+0x149/0x410 [ 1329.089705][T27855] ? lock_release+0x24d/0x310 [ 1329.089723][T27855] ? __fget_files+0x21f/0x3d0 [ 1329.089740][T27855] security_file_ioctl+0xd3/0x230 [ 1329.089763][T27855] __x64_sys_ioctl+0xb7/0x210 [ 1329.089786][T27855] do_syscall_64+0x115/0x870 [ 1329.089808][T27855] ? clear_bhb_loop+0x40/0x90 [ 1329.089827][T27855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1329.089845][T27855] RIP: 0033:0x7f8c75b9ce59 [ 1329.089859][T27855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1329.089876][T27855] RSP: 002b:00007f8c769ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1329.089893][T27855] RAX: ffffffffffffffda RBX: 00007f8c75e15fa0 RCX: 00007f8c75b9ce59 [ 1329.089905][T27855] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 1329.089916][T27855] RBP: 00007f8c769ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1329.089926][T27855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1329.089936][T27855] R13: 00007f8c75e16038 R14: 00007f8c75e15fa0 R15: 00007ffe9f803328 [ 1329.089952][T27855] [ 1329.089960][T27855] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1329.343458][T24751] Bluetooth: hci0: command 0x041b tx timeout [ 1329.525058][T27870] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5970'. [ 1329.640837][ T24] usb 5-1: USB disconnect, device number 33 [ 1330.018507][ T5728] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1330.248434][ T5728] usb 3-1: Using ep0 maxpacket: 8 [ 1330.277144][ T5728] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1330.305710][ T5728] usb 3-1: config 0 has no interface number 0 [ 1330.333789][ T5728] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1330.384610][ T5728] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1330.453166][ T5728] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1330.501650][ T5728] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1330.557228][ T5728] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1330.601805][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.631154][ T29] audit: type=1400 audit(1781859993.945:1456): avc: denied { write } for pid=27856 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1330.664418][ T5728] usb 3-1: config 0 descriptor?? [ 1330.687730][ T5728] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1330.774891][ T29] audit: type=1400 audit(1781859994.086:1457): avc: denied { write } for pid=27890 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1331.162726][T27899] CIFS: VFS: UNC: missing share name [ 1331.168225][T27899] CIFS: VFS: Malformed UNC in devname [ 1331.728060][ T5700] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1332.021649][ T5699] usb 3-1: USB disconnect, device number 56 [ 1332.021703][ C1] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 1332.053769][ T5699] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1332.750067][T27917] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1333.366721][T13946] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1333.526758][T13946] usb 4-1: Using ep0 maxpacket: 16 [ 1333.538321][T13946] usb 4-1: config 1 has an invalid interface number: 19 but max is 0 [ 1333.552777][T13946] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1333.576541][T13946] usb 4-1: config 1 has no interface number 0 [ 1333.587385][ T5700] usb 5-1: device descriptor read/64, error -71 [ 1333.609666][T13946] usb 4-1: config 1 interface 19 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1333.637365][T13946] usb 4-1: config 1 interface 19 has no altsetting 0 [ 1333.645595][T13946] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 1333.665195][T13946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.673252][T13946] usb 4-1: Product: syz [ 1333.682225][T13946] usb 4-1: Manufacturer: syz [ 1333.693674][T13946] usb 4-1: SerialNumber: syz [ 1333.715630][T13946] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1334.094931][ T5700] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1334.256193][ T5700] usb 5-1: Using ep0 maxpacket: 32 [ 1334.263877][ T5700] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1334.275708][ T5700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1334.286815][ T5700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1334.296799][ T5700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1334.308198][ T5700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1334.321258][ T5700] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1334.330627][ T5700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.338905][ T5700] usb 5-1: Product: syz [ 1334.343175][ T5700] usb 5-1: Manufacturer: syz [ 1334.348040][ T5700] usb 5-1: SerialNumber: syz [ 1334.355128][ T5700] usb 5-1: config 0 descriptor?? [ 1334.776008][ T35] usb 4-1: Failed to submit usb control message: -110 [ 1334.786431][ T35] usb 4-1: unable to send the bmi data to the device: -110 [ 1334.793867][ T35] usb 4-1: unable to get target info from device [ 1334.800713][ T35] usb 4-1: could not get target info (-110) [ 1334.806836][ T35] usb 4-1: could not probe fw (-110) [ 1334.945868][ T24] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1335.095819][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1335.104212][ T24] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1335.113688][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.121935][ T24] usb 3-1: Product: syz [ 1335.126399][ T24] usb 3-1: Manufacturer: syz [ 1335.131061][ T24] usb 3-1: SerialNumber: syz [ 1335.137303][ T24] usb 3-1: config 0 descriptor?? [ 1335.262725][T13946] usb 4-1: USB disconnect, device number 28 [ 1335.351685][ T24] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 057 [ 1335.415881][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -110 [ 1335.422535][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1335.428871][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1335.435112][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1335.441350][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1335.447610][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1335.453769][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1335.460063][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1335.466332][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1335.472692][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1335.478978][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1335.485193][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1335.491812][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1335.498044][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1335.504208][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1335.510450][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1335.516824][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1335.523008][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1335.529367][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1335.535655][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1335.541829][ T5700] input input76: Timeout waiting for response from device. [ 1335.583001][ T5700] usb 3-1: USB disconnect, device number 57 [ 1335.591855][T27940] i2c i2c-1: adapter quirk: no zero length (addr 0x0006, size 0, read) [ 1335.600825][T13946] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1335.669734][ T5721] usb 5-1: USB disconnect, device number 35 [ 1335.776859][T13946] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1335.785270][T13946] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1335.795967][T13946] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1335.807401][T13946] usb 4-1: string descriptor 0 read error: -22 [ 1335.878927][T27946] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1336.184520][T13946] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1336.198844][T13946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.210015][T13946] usb 4-1: selecting invalid altsetting 1 [ 1336.217206][T13946] usb 4-1: unit 3 not found! [ 1336.221861][T13946] usb 4-1: unit 6 not found! [ 1336.241181][T13946] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1336.434887][T27942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1336.454876][T27942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1336.666604][T27955] FAULT_INJECTION: forcing a failure. [ 1336.666604][T27955] name failslab, interval 1, probability 0, space 0, times 0 [ 1336.679354][T27955] CPU: 0 UID: 0 PID: 27955 Comm: syz.1.5990 Tainted: G L syzkaller #0 PREEMPT(full) [ 1336.679384][T27955] Tainted: [L]=SOFTLOCKUP [ 1336.679390][T27955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1336.679401][T27955] Call Trace: [ 1336.679407][T27955] [ 1336.679414][T27955] dump_stack_lvl+0x100/0x190 [ 1336.679438][T27955] should_fail_ex.cold+0x5/0xa [ 1336.679458][T27955] ? __kmalloc_cache_noprof+0x53/0x6e0 [ 1336.679480][T27955] should_failslab+0xc2/0x120 [ 1336.679511][T27955] __kmalloc_cache_noprof+0x7a/0x6e0 [ 1336.679530][T27955] ? alloc_pipe_info+0x10e/0x590 [ 1336.679550][T27955] alloc_pipe_info+0x10e/0x590 [ 1336.679568][T27955] splice_direct_to_actor+0x78f/0xa30 [ 1336.679589][T27955] ? __pfx_direct_splice_actor+0x10/0x10 [ 1336.679607][T27955] ? trace_hrtimer_start+0x77/0x220 [ 1336.679631][T27955] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1336.679653][T27955] do_splice_direct+0x174/0x240 [ 1336.679672][T27955] ? __pfx_do_splice_direct+0x10/0x10 [ 1336.679690][T27955] ? avc_policy_seqno+0x9/0x20 [ 1336.679707][T27955] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1336.679726][T27955] ? bpf_lsm_file_permission+0x9/0x10 [ 1336.679747][T27955] ? security_file_permission+0x76/0x210 [ 1336.679773][T27955] ? rw_verify_area+0xce/0x6d0 [ 1336.679796][T27955] do_sendfile+0xadc/0xe20 [ 1336.679822][T27955] ? __pfx_do_sendfile+0x10/0x10 [ 1336.679845][T27955] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1336.679870][T27955] ? __pfx___schedule+0x10/0x10 [ 1336.679891][T27955] __x64_sys_sendfile64+0x1d8/0x220 [ 1336.679910][T27955] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1336.679929][T27955] ? trace_hardirqs_off+0x70/0x170 [ 1336.679949][T27955] ? rcu_is_watching+0x12/0xc0 [ 1336.679973][T27955] do_syscall_64+0x115/0x870 [ 1336.679995][T27955] ? clear_bhb_loop+0x40/0x90 [ 1336.680014][T27955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1336.680032][T27955] RIP: 0033:0x7f1b4299ce59 [ 1336.680047][T27955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1336.680064][T27955] RSP: 002b:00007f1b438e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1336.680083][T27955] RAX: ffffffffffffffda RBX: 00007f1b42c16180 RCX: 00007f1b4299ce59 [ 1336.680095][T27955] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 1336.680105][T27955] RBP: 00007f1b438e9090 R08: 0000000000000000 R09: 0000000000000000 [ 1336.680116][T27955] R10: 00000001002000ff R11: 0000000000000246 R12: 0000000000000001 [ 1336.680127][T27955] R13: 00007f1b42c16218 R14: 00007f1b42c16180 R15: 00007ffc4ac30818 [ 1336.680143][T27955] [ 1338.783936][ T5699] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1339.102774][ T5728] usb 4-1: USB disconnect, device number 29 [ 1339.163760][ T5699] usb 5-1: Using ep0 maxpacket: 8 [ 1339.471414][ T5699] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1339.495984][ T5699] usb 5-1: config 0 has no interface number 0 [ 1339.510370][ T5699] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1339.538746][ T5699] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1339.588184][ T5699] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1339.622833][ T5699] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1339.668738][ T5699] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1339.758230][T27994] FAULT_INJECTION: forcing a failure. [ 1339.758230][T27994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1339.771405][T27994] CPU: 0 UID: 0 PID: 27994 Comm: syz.2.6000 Tainted: G L syzkaller #0 PREEMPT(full) [ 1339.771434][T27994] Tainted: [L]=SOFTLOCKUP [ 1339.771439][T27994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1339.771446][T27994] Call Trace: [ 1339.771450][T27994] [ 1339.771454][T27994] dump_stack_lvl+0x100/0x190 [ 1339.771470][T27994] should_fail_ex.cold+0x5/0xa [ 1339.771483][T27994] _copy_from_user+0x2e/0xd0 [ 1339.771495][T27994] io_submit_one+0xbd/0x1fb0 [ 1339.771509][T27994] ? __pfx___schedule+0x10/0x10 [ 1339.771521][T27994] ? preempt_schedule_irq+0x7b/0x90 [ 1339.771535][T27994] ? __pfx_io_submit_one+0x10/0x10 [ 1339.771555][T27994] ? irqentry_exit+0x24d/0xa00 [ 1339.771575][T27994] ? rcu_is_watching+0x12/0xc0 [ 1339.771597][T27994] ? __might_fault+0xc5/0x140 [ 1339.771615][T27994] ? lock_release+0x24d/0x310 [ 1339.771626][T27994] ? __x64_sys_io_submit+0x1b1/0x3a0 [ 1339.771641][T27994] __x64_sys_io_submit+0x1b1/0x3a0 [ 1339.771656][T27994] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 1339.771671][T27994] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 1339.771684][T27994] do_syscall_64+0x115/0x870 [ 1339.771697][T27994] ? clear_bhb_loop+0x40/0x90 [ 1339.771709][T27994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.771720][T27994] RIP: 0033:0x7f8c75b9ce59 [ 1339.771730][T27994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1339.771741][T27994] RSP: 002b:00007f8c769b4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1339.771752][T27994] RAX: ffffffffffffffda RBX: 00007f8c75e16180 RCX: 00007f8c75b9ce59 [ 1339.771758][T27994] RDX: 0000200000000780 RSI: 0000000000000020 RDI: 00007f8c769b5000 [ 1339.771765][T27994] RBP: 00007f8c769b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1339.771771][T27994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1339.771777][T27994] R13: 00007f8c75e16218 R14: 00007f8c75e16180 R15: 00007ffe9f803328 [ 1339.771787][T27994] [ 1339.985931][ T5699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.995606][ T5699] usb 5-1: config 0 descriptor?? [ 1340.085334][ T5699] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1340.363255][ T5728] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1340.600810][ T5728] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1340.641407][ T5728] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1340.672164][ T5728] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1340.741028][ T5728] usb 1-1: string descriptor 0 read error: -22 [ 1340.785717][ T5728] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1340.795923][ T5728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.887569][ T5728] usb 1-1: selecting invalid altsetting 1 [ 1340.907672][ T5728] usb 1-1: unit 3 not found! [ 1340.921122][ T5728] usb 1-1: unit 6 not found! [ 1341.265512][ T24] usb 5-1: USB disconnect, device number 36 [ 1341.265559][ C1] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 1341.284765][T27996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1341.296001][T27996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1341.304863][ T24] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1341.313471][ T5728] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1344.314688][T13946] usb 1-1: USB disconnect, device number 29 [ 1345.129313][ T29] audit: type=1400 audit(1781860008.273:1458): avc: denied { audit_write } for pid=28049 comm="syz.4.6014" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1345.284991][T28062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6017'. [ 1345.400122][T28062] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.482113][T11682] bridge_slave_1: left allmulticast mode [ 1345.494261][T11682] bridge_slave_1: left promiscuous mode [ 1345.544439][T11682] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.679343][T11682] bridge_slave_0: left allmulticast mode [ 1345.729416][T11682] bridge_slave_0: left promiscuous mode [ 1345.830114][T11682] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.407199][T11682] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1346.433716][T11682] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1346.453824][T11682] bond0 (unregistering): Released all slaves [ 1346.469256][T11682] bond1 (unregistering): Released all slaves [ 1346.489420][T11682] bond2 (unregistering): (slave dummy0): Releasing active interface [ 1346.517773][T11682] bond2 (unregistering): Released all slaves [ 1346.539291][T28062] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.555192][T28057] SELinux: failed to load policy [ 1346.641681][T28062] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.948359][T28062] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.302053][ T48] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.324070][ T48] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.332808][T16823] Bluetooth: hci1: command 0x1003 tx timeout [ 1347.889743][ T48] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.898433][ T48] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.923276][T24751] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1347.959083][T11682] hsr_slave_0: left promiscuous mode [ 1347.988427][T11682] hsr_slave_1: left promiscuous mode [ 1348.013176][T11682] veth1_macvtap: left promiscuous mode [ 1348.022319][T11682] veth0_macvtap: left promiscuous mode [ 1348.029190][T11682] veth1_vlan: left promiscuous mode [ 1348.235876][T11682] team0 (unregistering): Port device team_slave_1 removed [ 1348.252452][ T24] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1348.290855][ T5721] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1348.370035][T11682] team0 (unregistering): Port device team_slave_0 removed [ 1348.440556][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1348.451730][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1348.477450][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1348.510154][ T24] usb 3-1: string descriptor 0 read error: -22 [ 1348.516987][ T24] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1348.530741][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.539108][ T5721] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1348.548209][ T5721] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1348.551770][ T24] usb 3-1: selecting invalid altsetting 1 [ 1348.566604][ T5721] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1348.570888][ T24] usb 3-1: unit 3 not found! [ 1348.693468][ T24] usb 3-1: unit 6 not found! [ 1348.695436][ T5721] usb 2-1: string descriptor 0 read error: -22 [ 1348.708054][ T5721] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1348.717778][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.746447][ T5721] usb 2-1: selecting invalid altsetting 1 [ 1348.847017][T28091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.856260][T28091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1348.877227][ T24] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1348.878112][ T5721] usb 2-1: unit 3 not found! [ 1348.898984][ T5721] usb 2-1: unit 6 not found! [ 1348.934592][ T5721] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1348.961361][T28087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.989108][T28087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1349.083587][T15440] udevd[15440]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1350.248221][ T5721] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1350.337472][T28126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6033'. [ 1350.361876][T28126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6033'. [ 1350.632169][ T5721] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1350.641150][ T5721] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1350.652453][ T5721] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1350.669823][ T5721] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1350.888278][ T5721] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1350.903575][ T5721] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1350.915408][ T5721] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1350.934986][ T5721] usb 5-1: string descriptor 0 read error: -22 [ 1350.942336][ T5721] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1350.953350][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.979173][ T5700] usb 2-1: USB disconnect, device number 59 [ 1351.105459][T13946] usb 3-1: USB disconnect, device number 58 [ 1351.177388][T28118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6031'. [ 1351.217092][T28118] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.407748][ T5746] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1351.637673][ T5746] usb 4-1: Using ep0 maxpacket: 32 [ 1351.693401][ T5746] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 1351.779639][ T5746] usb 4-1: config 0 has no interface number 0 [ 1351.848575][ T5746] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1351.983516][T16823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1351.991910][T16823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1352.002201][T16823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1352.020912][T16823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1352.029713][T16823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1352.069018][ T5746] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1352.226331][ T5746] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1352.340967][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.434818][ T5746] usb 4-1: Product: syz [ 1352.473329][ T5746] usb 4-1: Manufacturer: syz [ 1352.511810][ T5746] usb 4-1: SerialNumber: syz [ 1352.579163][ T5746] usb 4-1: config 0 descriptor?? [ 1352.891468][ T5746] radio-si470x 4-1:0.35: this is not a si470x device. [ 1352.945364][T28118] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.014314][T28140] Scaler: ================= START STATUS ================= [ 1353.022228][T28140] Scaler: ================== END STATUS ================== [ 1353.033810][T12139] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.071551][ T5746] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 1353.085071][T28118] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.111768][ T5746] usb 4-1: USB disconnect, device number 30 [ 1353.141889][T12139] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.189483][T28118] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.208861][ T5699] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1353.244228][T12139] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.294250][T28150] syz.0.6038 (28150): drop_caches: 2 [ 1353.321896][T12139] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.355580][ T3481] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.378182][ T5699] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1353.388978][ T3481] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.398820][ T5699] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.409751][ T5699] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1353.422065][ T5699] usb 3-1: string descriptor 0 read error: -22 [ 1353.424562][ T48] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.438792][ T5699] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1353.448227][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.471000][ T5699] usb 3-1: selecting invalid altsetting 1 [ 1353.483317][ T5721] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 1353.492449][ T3481] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.495710][ T5721] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1353.511783][ T5721] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1353.521443][ T5721] usb 5-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 1353.537233][ T5721] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1353.550707][ T5721] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1353.559378][ T5699] usb 3-1: unit 3 not found! [ 1353.565722][ T5699] usb 3-1: unit 6 not found! [ 1353.570451][ T5700] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 1353.580544][ T5721] usb 5-1: USB disconnect, device number 37 [ 1353.659190][T12139] bridge_slave_1: left allmulticast mode [ 1353.670002][T12139] bridge_slave_1: left promiscuous mode [ 1353.677547][T12139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1353.696374][ T5699] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1353.712828][T28148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1353.713243][T12139] bridge_slave_0: left allmulticast mode [ 1353.732276][T12139] bridge_slave_0: left promiscuous mode [ 1353.737786][ T5700] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 1353.742856][T15486] udevd[15486]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1353.752083][T28148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1353.762295][T12139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1353.780412][ T5700] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1353.802820][ T5700] usb 4-1: config 150 has no interface number 0 [ 1353.811485][ T5700] usb 4-1: too many endpoints for config 150 interface 1 altsetting 49: 56, using maximum allowed: 30 [ 1353.825335][T12139] veth0: left allmulticast mode [ 1353.826666][ T5700] usb 4-1: config 150 interface 1 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 56 [ 1353.861316][ T5700] usb 4-1: config 150 interface 204 has no altsetting 0 [ 1353.872298][ T5700] usb 4-1: config 150 interface 1 has no altsetting 0 [ 1353.891627][ T5700] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1353.910486][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.923776][ T5700] usb 4-1: Product: syz [ 1353.939537][ T5700] usb 4-1: Manufacturer: syz [ 1353.995070][ T5700] usb 4-1: SerialNumber: syz [ 1354.000524][T12139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1354.021467][T12139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1354.045087][T12139] bond0 (unregistering): Released all slaves [ 1354.056531][T16823] Bluetooth: hci1: command tx timeout [ 1354.070915][ T29] audit: type=1400 audit(1781860017.397:1459): avc: denied { write } for pid=28170 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1354.109336][T12139] tipc: Disabling bearer [ 1354.114730][T12139] tipc: Disabling bearer [ 1354.123281][T12139] tipc: Left network mode [ 1354.174972][T28141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1354.192125][ T29] audit: type=1400 audit(1781860017.517:1460): avc: denied { write } for pid=28185 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1354.195113][T28141] bridge0: port 1(bridge_slave_0) entered disabled state [ 1354.222730][T28141] bridge_slave_0: entered allmulticast mode [ 1354.230021][T28141] bridge_slave_0: entered promiscuous mode [ 1354.248356][T28141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1354.258520][T28141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1354.260368][T28162] XFS (nbd3): SB validate failed with error -5. [ 1354.265796][T28141] bridge_slave_1: entered allmulticast mode [ 1354.279009][T28141] bridge_slave_1: entered promiscuous mode [ 1354.292245][ T5267] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1354.294095][T28162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.310160][T28162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.334207][ T5700] xr_serial 4-1:150.204: skipping garbage [ 1354.347353][ T5700] xr_serial 4-1:150.204: xr_serial converter detected [ 1354.361980][T28141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1354.373843][ T5700] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1354.380644][ T5700] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1354.403174][T28141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1354.418832][ T24] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1354.418866][ T5700] usb 4-1: USB disconnect, device number 31 [ 1354.495405][T12139] hsr_slave_0: left promiscuous mode [ 1354.503850][ T5700] xr_serial 4-1:150.204: device disconnected [ 1354.517160][T12139] veth1_macvtap: left promiscuous mode [ 1354.533645][T12139] veth0_macvtap: left promiscuous mode [ 1354.540015][T12139] veth1_vlan: left promiscuous mode [ 1354.545278][T12139] veth0_vlan: left promiscuous mode [ 1354.584195][ T29] audit: type=1400 audit(1781860017.907:1461): avc: denied { write } for pid=28195 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1354.636791][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1354.648200][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1354.662956][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1354.673452][ T29] audit: type=1400 audit(1781860017.997:1462): avc: denied { write } for pid=28209 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1354.696471][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1354.709717][ T24] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1354.719169][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.734307][ T24] usb 5-1: config 0 descriptor?? [ 1354.753345][T12139] team0 (unregistering): Port device team_slave_1 removed [ 1354.780217][T12139] team0 (unregistering): Port device team_slave_0 removed [ 1354.836773][T28141] team0: Port device team_slave_0 added [ 1354.843250][ T5267] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1354.854402][T28141] team0: Port device team_slave_1 added [ 1355.121130][T28141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1355.217875][T28141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1355.341131][T28218] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1355.592866][T28141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1355.608742][T28141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1355.625387][T28141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1355.656468][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1355.662953][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1355.671405][T28141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1355.692674][T28187] can0: slcan on ttyS3. [ 1355.825624][ T5746] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1355.880708][ T24] shield 0003:0955:7214.0020: item fetching failed at offset 0/5 [ 1355.895006][ T24] shield 0003:0955:7214.0020: Parse failed [ 1355.903913][ T24] shield 0003:0955:7214.0020: probe with driver shield failed with error -22 [ 1355.991832][ T5707] usb 3-1: USB disconnect, device number 59 [ 1356.025704][T28223] can0 (unregistered): slcan off ttyS3. [ 1356.033911][T28141] hsr_slave_0: entered promiscuous mode [ 1356.074294][T28141] hsr_slave_1: entered promiscuous mode [ 1356.085399][ T5746] usb 4-1: Using ep0 maxpacket: 32 [ 1356.099142][ T5746] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1356.101363][T28141] debugfs: 'hsr0' already exists in 'hsr' [ 1356.125374][T16823] Bluetooth: hci1: command tx timeout [ 1356.135953][ T5746] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1356.151693][ T5746] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1356.161628][T28141] Cannot create hsr debugfs directory [ 1356.162757][ T5746] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1356.179096][ T5746] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1356.193526][ T5746] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1356.206753][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.214954][ T5746] usb 4-1: Product: syz [ 1356.219563][T28228] can0: slcan on ttyS3. [ 1356.225425][ T5746] usb 4-1: Manufacturer: syz [ 1356.227470][ T5700] usb 5-1: USB disconnect, device number 38 [ 1356.247581][ T5746] usb 4-1: SerialNumber: syz [ 1356.261968][ T5746] usb 4-1: config 0 descriptor?? [ 1356.298340][T28224] can0 (unregistered): slcan off ttyS3. [ 1356.305282][ T29] audit: type=1400 audit(1781860019.628:1463): avc: denied { write } for pid=28221 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1356.345325][ T5707] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1356.400647][ T29] audit: type=1400 audit(1781860019.728:1464): avc: denied { write } for pid=28241 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1356.505686][ T5707] usb 3-1: Using ep0 maxpacket: 16 [ 1356.513965][ T5707] usb 3-1: config 1 has an invalid interface number: 19 but max is 0 [ 1356.522326][ T5707] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.532704][ T5707] usb 3-1: config 1 has no interface number 0 [ 1356.554000][ T5707] usb 3-1: config 1 interface 19 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1356.582831][ T5707] usb 3-1: config 1 interface 19 has no altsetting 0 [ 1356.601136][ T5707] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 1356.616454][T28141] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1356.625323][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.633766][T28141] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1356.642186][T28141] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1356.649178][ T5707] usb 3-1: Product: syz [ 1356.652989][ T29] audit: type=1400 audit(1781860019.978:1465): avc: denied { write } for pid=28245 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1356.653391][ T5707] usb 3-1: Manufacturer: syz [ 1356.682350][ T5707] usb 3-1: SerialNumber: syz [ 1356.683984][T28141] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1356.696740][T28141] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1356.712307][T28141] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1356.726937][ T5707] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1356.732545][ T29] audit: type=1400 audit(1781860020.058:1466): avc: denied { write } for pid=28256 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1356.737314][T28141] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1356.777749][T28141] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1356.842062][T28141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1356.857948][T28141] 8021q: adding VLAN 0 to HW filter on device team0 [ 1356.874285][ T3481] bridge0: port 1(bridge_slave_0) entered blocking state [ 1356.881393][ T3481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1356.932296][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.939426][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1357.378544][T28284] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=28284 comm=syz.4.6051 [ 1357.391489][T28284] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=28284 comm=syz.4.6051 [ 1357.579988][ T29] audit: type=1400 audit(1781860020.889:1467): avc: denied { write } for pid=28267 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1357.652292][ T5746] iforce 4-1:0.0: usb_submit_urb failed: -110 [ 1357.804845][T12139] usb 3-1: Failed to submit usb control message: -110 [ 1357.815262][T12139] usb 3-1: unable to send the bmi data to the device: -110 [ 1357.886288][T12139] usb 3-1: unable to get target info from device [ 1357.931671][T12139] usb 3-1: could not get target info (-110) [ 1357.973438][T12139] usb 3-1: could not probe fw (-110) [ 1358.105417][ T29] audit: type=1400 audit(1781860021.439:1468): avc: denied { write } for pid=28289 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1358.204627][T16823] Bluetooth: hci1: command tx timeout [ 1358.807402][ T5746] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1359.148597][ T5746] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1359.155001][ T5746] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1359.161313][ T5746] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1359.167662][ T5746] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1359.174003][ T5746] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1359.180324][ T5746] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1359.186687][ T5746] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1359.193019][ T5746] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1359.200605][ T5746] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1359.209228][ T5746] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1359.215663][ T5746] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1359.223312][ T5746] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1359.229976][ T5746] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1359.237427][ T5746] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1359.250310][ T5746] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1359.262124][ T5746] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1359.269615][ T5746] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1359.275964][ T5746] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1359.283139][ T5746] input input77: Timeout waiting for response from device. [ 1359.300989][ T5746] usb 4-1: USB disconnect, device number 32 [ 1359.562907][ T29] audit: type=1400 audit(1781860022.890:1469): avc: denied { write } for pid=28300 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1359.613508][ T5746] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1359.681766][ T29] audit: type=1400 audit(1781860022.930:1470): avc: denied { write } for pid=28321 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1359.758738][ T5707] usb 3-1: USB disconnect, device number 60 [ 1359.793486][ T5746] usb 4-1: Using ep0 maxpacket: 16 [ 1359.821388][T28141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1359.834926][ T5746] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1359.844906][T28141] veth0_vlan: entered promiscuous mode [ 1359.866008][ T5746] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1359.890309][T28141] veth1_vlan: entered promiscuous mode [ 1359.892635][ T5746] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1359.908674][ T29] audit: type=1400 audit(1781860023.230:1471): avc: denied { ioctl } for pid=28333 comm="syz.4.6058" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x565a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1359.934936][T28141] veth0_macvtap: entered promiscuous mode [ 1359.948684][ T5746] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1359.955721][T28141] veth1_macvtap: entered promiscuous mode [ 1359.984711][ T5746] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.994634][T28141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1360.003210][ T5746] usb 4-1: config 0 descriptor?? [ 1360.030869][ T29] audit: type=1400 audit(1781860023.360:1472): avc: denied { write } for pid=28324 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1360.097787][T28141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1360.143408][ T5707] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1360.283625][T16823] Bluetooth: hci1: command tx timeout [ 1360.303407][ T5707] usb 3-1: Using ep0 maxpacket: 16 [ 1360.339192][ T5707] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1360.352638][ T5707] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1360.378755][ T5707] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1360.380212][T10009] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.411359][ T5707] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1360.432008][T10009] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.455297][ T5707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.474634][ T29] audit: type=1400 audit(1781860023.800:1473): avc: denied { write } for pid=28349 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1360.498542][ T5707] usb 3-1: config 0 descriptor?? [ 1360.527671][T10009] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.555640][T10009] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.569770][T28302] can0: slcan on ttyS3. [ 1360.598776][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1360.610970][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1360.635153][ T5746] shield 0003:0955:7214.0021: item fetching failed at offset 0/5 [ 1360.636163][T28302] can0 (unregistered): slcan off ttyS3. [ 1360.655936][ T5746] shield 0003:0955:7214.0021: Parse failed [ 1360.661777][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1360.661801][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1360.673145][ T5700] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 1360.683183][ T5746] shield 0003:0955:7214.0021: probe with driver shield failed with error -22 [ 1361.089862][ T5707] nzxt-smart2 0003:1E71:2009.0022: item fetching failed at offset 1/5 [ 1361.154104][ T5700] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 1361.162316][ T5700] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 1361.164560][ T5707] nzxt-smart2 0003:1E71:2009.0022: probe with driver nzxt-smart2 failed with error -22 [ 1361.183195][ T24] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1361.183389][ T5699] usb 4-1: USB disconnect, device number 33 [ 1361.199976][ T5700] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 1361.211020][ T29] audit: type=1400 audit(1781860024.541:1474): avc: denied { write } for pid=28357 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1361.247718][ T5700] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1361.253869][ T29] audit: type=1400 audit(1781860024.591:1475): avc: denied { write } for pid=28376 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1361.260945][ T5700] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1361.294105][ T5700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.345996][T28330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1361.355785][T28330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1361.363063][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1361.367894][T13946] usb 3-1: USB disconnect, device number 61 [ 1361.370467][ T24] usb 2-1: config 1 has an invalid interface number: 19 but max is 0 [ 1361.388159][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1361.400475][ T24] usb 2-1: config 1 has no interface number 0 [ 1361.407050][ T24] usb 2-1: config 1 interface 19 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1361.420366][ T24] usb 2-1: config 1 interface 19 has no altsetting 0 [ 1361.429552][ T24] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 1361.439002][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.447361][ T24] usb 2-1: Product: syz [ 1361.451720][ T24] usb 2-1: Manufacturer: syz [ 1361.456622][ T24] usb 2-1: SerialNumber: syz [ 1361.478223][ T24] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1361.518122][ T29] audit: type=1400 audit(1781860024.851:1476): avc: denied { write } for pid=28378 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1361.546981][T28339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1361.555728][T28339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1361.589221][ T29] audit: type=1400 audit(1781860024.921:1477): avc: denied { write } for pid=28392 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1361.769023][T28339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1361.778039][T28339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1361.790848][T28339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1361.801445][T28339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1361.846755][ T5700] usb 1-1: GET_CAPABILITIES returned 0 [ 1361.856345][ T5700] usbtmc 1-1:16.0: can't read capabilities [ 1361.995335][T28399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=28399 comm=syz.3.6063 [ 1362.008499][T28399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=28399 comm=syz.3.6063 [ 1362.522504][T11430] usb 2-1: Failed to submit usb control message: -110 [ 1362.807908][T22136] usb 1-1: USB disconnect, device number 30 [ 1362.826141][T11430] usb 2-1: unable to send the bmi data to the device: -110 [ 1362.925991][T11430] usb 2-1: unable to get target info from device [ 1363.009679][T11430] usb 2-1: could not get target info (-110) [ 1363.094396][T11430] usb 2-1: could not probe fw (-110) [ 1363.820174][T22136] usb 2-1: USB disconnect, device number 60 [ 1364.183411][ T5699] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1364.294138][T28430] fuse: Bad value for 'fd' [ 1364.321328][ T5700] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1364.351156][ T5699] usb 1-1: Using ep0 maxpacket: 8 [ 1364.357862][ T5699] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1364.366012][ T5699] usb 1-1: config 0 has no interface number 0 [ 1364.372449][ T5699] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1364.383393][ T5699] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1364.395219][ T5699] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1364.407713][ T5699] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1364.422375][ T5699] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1364.431575][ T5699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.481153][ T5700] usb 5-1: Using ep0 maxpacket: 8 [ 1364.490005][ T5699] usb 1-1: config 0 descriptor?? [ 1364.500124][ T5700] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1364.641019][ T5699] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1364.650006][ T5700] usb 5-1: config 0 has no interface number 0 [ 1364.701781][ T5700] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1364.730524][ T5700] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1364.743045][ T5700] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1364.829963][ T5700] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1364.849139][ T5700] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1364.861750][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.873052][ T5700] usb 5-1: config 0 descriptor?? [ 1365.832953][ T5700] ldusb 5-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 1366.270184][ T5700] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1366.311902][T13946] usb 1-1: USB disconnect, device number 31 [ 1366.311932][ C1] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 1366.387098][T13946] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1366.460158][ T5700] usb 4-1: Using ep0 maxpacket: 16 [ 1366.621943][T15717] usb 5-1: USB disconnect, device number 39 [ 1366.623160][ T5700] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1366.639632][ T5700] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1366.649666][ T5700] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1366.663186][ T5700] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1366.664617][T15717] ldusb 5-1:0.55: LD USB Device #1 now disconnected [ 1366.672510][ T5700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.689083][ T5700] usb 4-1: config 0 descriptor?? [ 1368.505629][T28441] can0: slcan on ttyS3. [ 1368.899415][T28441] can0 (unregistered): slcan off ttyS3. [ 1368.927687][T28470] FAULT_INJECTION: forcing a failure. [ 1368.927687][T28470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1368.944744][ T5700] shield 0003:0955:7214.0023: item fetching failed at offset 0/5 [ 1368.953008][ T5700] shield 0003:0955:7214.0023: Parse failed [ 1368.972196][ T5700] shield 0003:0955:7214.0023: probe with driver shield failed with error -22 [ 1368.984610][T28470] CPU: 0 UID: 0 PID: 28470 Comm: syz.0.6084 Tainted: G L syzkaller #0 PREEMPT(full) [ 1368.984638][T28470] Tainted: [L]=SOFTLOCKUP [ 1368.984644][T28470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1368.984655][T28470] Call Trace: [ 1368.984661][T28470] [ 1368.984668][T28470] dump_stack_lvl+0x100/0x190 [ 1368.984691][T28470] should_fail_ex.cold+0x5/0xa [ 1368.984712][T28470] _copy_to_user+0x32/0xd0 [ 1368.984724][T28470] rng_dev_read+0x223/0x910 [ 1368.984736][T28470] ? __pfx_rng_dev_read+0x10/0x10 [ 1368.984746][T28470] ? avc_policy_seqno+0x9/0x20 [ 1368.984757][T28470] ? bpf_lsm_file_permission+0x9/0x10 [ 1368.984771][T28470] ? security_file_permission+0x76/0x210 [ 1368.984786][T28470] ? rw_verify_area+0xce/0x6d0 [ 1368.984800][T28470] ? __pfx_rng_dev_read+0x10/0x10 [ 1368.984810][T28470] vfs_readv+0x5d8/0x8d0 [ 1368.984829][T28470] ? get_pid_task+0x106/0x250 [ 1368.984844][T28470] ? __pfx_vfs_readv+0x10/0x10 [ 1368.984858][T28470] ? preempt_count_add+0x76/0x150 [ 1368.984869][T28470] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1368.984887][T28470] ? do_preadv+0x1ac/0x270 [ 1368.984900][T28470] do_preadv+0x1ac/0x270 [ 1368.984913][T28470] ? __pfx_do_preadv+0x10/0x10 [ 1368.984928][T28470] ? rcu_is_watching+0x12/0xc0 [ 1368.984942][T28470] do_syscall_64+0x115/0x870 [ 1368.984955][T28470] ? clear_bhb_loop+0x40/0x90 [ 1368.984967][T28470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.984977][T28470] RIP: 0033:0x7effd3b9ce59 [ 1368.984986][T28470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1368.984997][T28470] RSP: 002b:00007effd4a78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1368.985008][T28470] RAX: ffffffffffffffda RBX: 00007effd3e16090 RCX: 00007effd3b9ce59 [ 1368.985015][T28470] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000004 [ 1368.985021][T28470] RBP: 00007effd4a78090 R08: 0000000000000000 R09: 0000000000000000 [ 1368.985027][T28470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1368.985034][T28470] R13: 00007effd3e16128 R14: 00007effd3e16090 R15: 00007fffba77bb88 [ 1368.985043][T28470] [ 1369.270117][ T5700] usb 4-1: USB disconnect, device number 34 [ 1369.897010][ T29] audit: type=1400 audit(1781860033.225:1478): avc: denied { write } for pid=28472 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1369.941912][ T29] audit: type=1400 audit(1781860033.275:1479): avc: denied { write } for pid=28492 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1370.312721][ T29] audit: type=1400 audit(1781860033.645:1480): avc: denied { write } for pid=28498 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1370.382671][ T29] audit: type=1400 audit(1781860033.705:1481): avc: denied { write } for pid=28523 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1370.508074][ T5721] usb 2-1: new low-speed USB device number 61 using dummy_hcd [ 1370.648144][ T5721] usb 2-1: device descriptor read/64, error -71 [ 1370.737936][ T5707] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1370.792096][T28530] FAULT_INJECTION: forcing a failure. [ 1370.792096][T28530] name failslab, interval 1, probability 0, space 0, times 0 [ 1370.805235][T28530] CPU: 0 UID: 0 PID: 28530 Comm: syz.4.6094 Tainted: G L syzkaller #0 PREEMPT(full) [ 1370.805266][T28530] Tainted: [L]=SOFTLOCKUP [ 1370.805273][T28530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1370.805284][T28530] Call Trace: [ 1370.805290][T28530] [ 1370.805297][T28530] dump_stack_lvl+0x100/0x190 [ 1370.805320][T28530] should_fail_ex.cold+0x5/0xa [ 1370.805342][T28530] ? __kmalloc_cache_noprof+0x53/0x6e0 [ 1370.805364][T28530] should_failslab+0xc2/0x120 [ 1370.805390][T28530] __kmalloc_cache_noprof+0x7a/0x6e0 [ 1370.805409][T28530] ? alloc_pipe_info+0x10e/0x590 [ 1370.805427][T28530] ? do_raw_spin_unlock+0x145/0x1e0 [ 1370.805451][T28530] alloc_pipe_info+0x10e/0x590 [ 1370.805469][T28530] splice_direct_to_actor+0x78f/0xa30 [ 1370.805490][T28530] ? __pfx_direct_splice_actor+0x10/0x10 [ 1370.805509][T28530] ? __pfx___schedule+0x10/0x10 [ 1370.805531][T28530] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1370.805550][T28530] ? rcu_is_watching+0x12/0xc0 [ 1370.805573][T28530] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1370.805596][T28530] do_splice_direct+0x174/0x240 [ 1370.805615][T28530] ? __pfx_do_splice_direct+0x10/0x10 [ 1370.805633][T28530] ? avc_policy_seqno+0x9/0x20 [ 1370.805651][T28530] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1370.805670][T28530] ? bpf_lsm_file_permission+0x9/0x10 [ 1370.805692][T28530] ? security_file_permission+0x76/0x210 [ 1370.805718][T28530] ? rw_verify_area+0xce/0x6d0 [ 1370.805743][T28530] do_sendfile+0xadc/0xe20 [ 1370.805770][T28530] ? __pfx_do_sendfile+0x10/0x10 [ 1370.805794][T28530] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1370.805817][T28530] ? __fget_files+0x21f/0x3d0 [ 1370.805838][T28530] __x64_sys_sendfile64+0x1d8/0x220 [ 1370.805857][T28530] ? ksys_write+0x1ac/0x250 [ 1370.805881][T28530] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1370.805901][T28530] ? trace_hardirqs_off+0x70/0x170 [ 1370.805921][T28530] ? rcu_is_watching+0x12/0xc0 [ 1370.805951][T28530] do_syscall_64+0x115/0x870 [ 1370.805974][T28530] ? clear_bhb_loop+0x40/0x90 [ 1370.805994][T28530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.806013][T28530] RIP: 0033:0x7f675bf9ce59 [ 1370.806028][T28530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1370.806046][T28530] RSP: 002b:00007f675cee4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1370.806065][T28530] RAX: ffffffffffffffda RBX: 00007f675c216090 RCX: 00007f675bf9ce59 [ 1370.806078][T28530] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 1370.806089][T28530] RBP: 00007f675cee4090 R08: 0000000000000000 R09: 0000000000000000 [ 1370.806101][T28530] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001 [ 1370.806112][T28530] R13: 00007f675c216128 R14: 00007f675c216090 R15: 00007ffe1c913ff8 [ 1370.806130][T28530] [ 1371.147876][ T5721] usb 2-1: new low-speed USB device number 62 using dummy_hcd [ 1371.277725][ T5721] usb 2-1: device descriptor read/64, error -71 [ 1371.398412][ T5721] usb usb2-port1: attempt power cycle [ 1371.654836][T24751] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1371.662151][T24751] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1371.669347][T24751] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1371.676826][T24751] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1371.684269][T24751] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1371.717463][ T5707] usb 1-1: Using ep0 maxpacket: 32 [ 1371.724045][ T5707] usb 1-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 1371.743935][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.757495][ T5721] usb 2-1: new low-speed USB device number 63 using dummy_hcd [ 1371.766014][ T5707] usb 1-1: config 0 descriptor?? [ 1371.773972][ T5707] usb 1-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 1371.777835][ T5721] usb 2-1: device descriptor read/8, error -71 [ 1371.931838][ T5707] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1371.971065][ T5707] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 1372.088066][ T5707] usb 1-1: media controller created [ 1372.095828][T28527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1372.114679][T28527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.134896][T28527] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN NOPTI [ 1372.145664][ T5707] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1372.146975][T28527] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 1372.146997][T28527] CPU: 0 UID: 0 PID: 28527 Comm: syz.0.6093 Tainted: G L syzkaller #0 PREEMPT(full) [ 1372.168955][ T29] audit: type=1400 audit(1781860035.466:1482): avc: denied { read } for pid=4954 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1372.174625][T28527] Tainted: [L]=SOFTLOCKUP [ 1372.174637][T28527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1372.210923][T28527] RIP: 0010:__mutex_lock+0x15d/0x1bd0 [ 1372.216293][T28527] Code: 08 84 d2 0f 85 67 14 00 00 44 8b 3d dd db 88 0f 45 85 ff 75 29 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 5e 14 00 00 48 3b 5b 58 0f 85 8b 07 00 00 bf 01 [ 1372.235883][T28527] RSP: 0018:ffffc90003dff590 EFLAGS: 00010206 [ 1372.241934][T28527] RAX: dffffc0000000000 RBX: 0000000000000068 RCX: 0000000000000000 [ 1372.249889][T28527] RDX: 0000000000000018 RSI: 000000000000026f RDI: 00000000000000c0 [ 1372.257842][T28527] RBP: ffffc90003dff700 R08: ffffffff880dae25 R09: 0000000000000000 [ 1372.265795][T28527] R10: ffffc90003dff718 R11: 0000000000000000 R12: 0000000000000000 [ 1372.273744][T28527] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 1372.281697][T28527] FS: 00007effd4a996c0(0000) GS:ffff888124332000(0000) knlGS:0000000000000000 [ 1372.290613][T28527] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1372.297181][T28527] CR2: 000000110c415f65 CR3: 000000003bbd1000 CR4: 00000000003526f0 [ 1372.305146][T28527] Call Trace: [ 1372.308407][T28527] [ 1372.311321][T28527] ? dvb_usbv2_generic_write+0x25/0x50 [ 1372.316770][T28527] ? __mutex_lock+0x26d/0x1bd0 [ 1372.321524][T28527] ? mxl111sf_ctrl_msg+0xb8/0x2b0 [ 1372.326704][T28527] ? number+0x983/0xc90 [ 1372.330873][T28527] ? __pfx___mutex_lock+0x10/0x10 [ 1372.335894][T28527] ? __pfx___mutex_lock+0x10/0x10 [ 1372.340905][T28527] ? rcu_is_watching+0x12/0xc0 [ 1372.345657][T28527] ? lock_acquire+0x301/0x370 [ 1372.350320][T28527] ? dvb_usbv2_generic_write+0x25/0x50 [ 1372.355761][T28527] dvb_usbv2_generic_write+0x25/0x50 [ 1372.361050][T28527] mxl111sf_ctrl_msg+0x179/0x2b0 [ 1372.365984][T28527] mxl111sf_write_reg+0x96/0x130 [ 1372.370919][T28527] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 1372.376465][T28527] ? sched_clock+0x38/0x60 [ 1372.380875][T28527] ? __kernel_text_address+0xd/0x30 [ 1372.386069][T28527] ? unwind_get_return_address+0x59/0xa0 [ 1372.391691][T28527] ? arch_stack_walk+0xa6/0xf0 [ 1372.396440][T28527] mxl111sf_i2c_start+0x6e/0x220 [ 1372.401362][T28527] mxl111sf_i2c_xfer+0x178e/0x3240 [ 1372.406473][T28527] ? stack_trace_save+0x8e/0xc0 [ 1372.411326][T28527] ? __pfx_stack_trace_save+0x10/0x10 [ 1372.416686][T28527] ? stack_depot_save_flags+0x27/0x9d0 [ 1372.422146][T28527] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 1372.427604][T28527] ? __kasan_kmalloc+0xaa/0xb0 [ 1372.432365][T28527] ? __kmalloc_node_track_caller_noprof+0x31e/0x890 [ 1372.438938][T28527] ? memdup_user+0x2a/0xe0 [ 1372.443356][T28527] ? i2cdev_write+0xe4/0x240 [ 1372.447932][T28527] ? vfs_writev+0x5ed/0xdd0 [ 1372.452420][T28527] ? do_writev+0x13e/0x340 [ 1372.456822][T28527] ? do_syscall_64+0x115/0x870 [ 1372.461576][T28527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.467692][T28527] ? do_raw_spin_lock+0x128/0x260 [ 1372.472700][T28527] __i2c_transfer+0x5d9/0x1740 [ 1372.477449][T28527] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1372.483501][T28527] ? __pfx___i2c_transfer+0x10/0x10 [ 1372.488684][T28527] ? rt_mutex_slowtrylock+0x93/0x100 [ 1372.493958][T28527] i2c_transfer+0x15f/0x380 [ 1372.498709][T28527] i2c_transfer_buffer_flags+0x10c/0x190 [ 1372.504328][T28527] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 1372.510467][T28527] ? _copy_from_user+0x59/0xd0 [ 1372.515226][T28527] i2cdev_write+0x11e/0x240 [ 1372.519714][T28527] ? __pfx_i2cdev_write+0x10/0x10 [ 1372.524720][T28527] vfs_writev+0x5ed/0xdd0 [ 1372.529036][T28527] ? futex_wake+0x220/0x5e0 [ 1372.533527][T28527] ? __pfx_vfs_writev+0x10/0x10 [ 1372.538365][T28527] ? rcu_is_watching+0x12/0xc0 [ 1372.543114][T28527] ? __fget_files+0x21f/0x3d0 [ 1372.547773][T28527] ? do_writev+0x13e/0x340 [ 1372.552176][T28527] do_writev+0x13e/0x340 [ 1372.556405][T28527] ? __pfx_do_writev+0x10/0x10 [ 1372.561154][T28527] ? rcu_is_watching+0x12/0xc0 [ 1372.565904][T28527] do_syscall_64+0x115/0x870 [ 1372.570477][T28527] ? clear_bhb_loop+0x40/0x90 [ 1372.575136][T28527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.581008][T28527] RIP: 0033:0x7effd3b9ce59 [ 1372.585405][T28527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1372.605011][T28527] RSP: 002b:00007effd4a99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1372.613410][T28527] RAX: ffffffffffffffda RBX: 00007effd3e15fa0 RCX: 00007effd3b9ce59 [ 1372.621365][T28527] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000009 [ 1372.629319][T28527] RBP: 00007effd3c32e6f R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1372.637270][T28527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1372.645223][T28527] R13: 00007effd3e16038 R14: 00007effd3e15fa0 R15: 00007fffba77bb88 [ 1372.653193][T28527] [ 1372.656202][T28527] Modules linked in: [ 1372.661611][T28527] ---[ end trace 0000000000000000 ]--- [ 1372.668605][ T29] audit: type=1400 audit(1781860035.466:1483): avc: denied { search } for pid=4954 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1372.691959][ T29] audit: type=1400 audit(1781860035.466:1484): avc: denied { write search } for pid=4954 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1372.714207][ T29] audit: type=1400 audit(1781860035.466:1485): avc: denied { add_name } for pid=4954 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1372.735119][ T29] audit: type=1400 audit(1781860035.466:1486): avc: denied { create } for pid=4954 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1372.756075][ T5707] usb 1-1: selecting invalid altsetting 1 [ 1372.756095][ T5707] set interface failed [ 1372.775974][T28527] RIP: 0010:__mutex_lock+0x15d/0x1bd0 [ 1372.785768][T28527] Code: 08 84 d2 0f 85 67 14 00 00 44 8b 3d dd db 88 0f 45 85 ff 75 29 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 5e 14 00 00 48 3b 5b 58 0f 85 8b 07 00 00 bf 01 [ 1372.805884][ T29] audit: type=1400 audit(1781860035.466:1487): avc: denied { append open } for pid=4954 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1372.806936][T28527] RSP: 0018:ffffc90003dff590 EFLAGS: 00010206 [ 1372.829082][ T5721] usb 2-1: new low-speed USB device number 64 using dummy_hcd [ 1372.853491][T28527] [ 1372.857960][ T5721] usb 2-1: device descriptor read/8, error -71 [ 1372.863240][T28527] RAX: dffffc0000000000 RBX: 0000000000000068 RCX: 0000000000000000 [ 1372.877885][T28527] RDX: 0000000000000018 RSI: 000000000000026f RDI: 00000000000000c0 [ 1372.885956][T28527] RBP: ffffc90003dff700 R08: ffffffff880dae25 R09: 0000000000000000 [ 1372.894200][T28527] R10: ffffc90003dff718 R11: 0000000000000000 R12: 0000000000000000 [ 1372.939980][T28501] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1372.961714][T28527] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 1372.970057][ T5721] usb usb2-port1: unable to enumerate USB device [ 1373.061424][ T1085] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.073606][T28527] FS: 00007effd4a996c0(0000) GS:ffff888124432000(0000) knlGS:0000000000000000 [ 1373.083151][T28527] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1373.089769][T28527] CR2: 00007f8c76947e20 CR3: 000000003bbd1000 CR4: 00000000003526f0 [ 1373.097851][T28527] Kernel panic - not syncing: Fatal exception [ 1373.104118][T28527] Kernel Offset: disabled [ 1373.108430][T28527] Rebooting in 86400 seconds..