last executing test programs: 5m43.083905759s ago: executing program 3 (id=4): r0 = syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x18, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bcc70010000000003000000200001800c00028088800300050000000d0001005664703a73"], 0x34}}, 0x8080) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x106) fcntl$notify(r9, 0x402, 0x8000000f) fcntl$notify(r9, 0x402, 0x3000000) ioctl$I2C_PEC(r9, 0x708, 0x2) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) 5m39.405411001s ago: executing program 3 (id=12): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) io_setup(0x3fc, &(0x7f0000000500)=0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) getpid() r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x2401ffff) sendmsg$AUDIT_TRIM(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x3f6, 0x8, 0x70bd26, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x240000c0}, 0x4000000) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000300)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000010280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x4008010) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) r11 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r11, &(0x7f0000000240), 0x10) listen(r11, 0x4) accept4$unix(r11, 0x0, 0x0, 0x800) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000008, 0x13, r10, 0xac5bd000) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 5m23.358369214s ago: executing program 32 (id=12): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) io_setup(0x3fc, &(0x7f0000000500)=0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) getpid() r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x2401ffff) sendmsg$AUDIT_TRIM(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x3f6, 0x8, 0x70bd26, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x240000c0}, 0x4000000) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000300)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000010280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x4008010) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) r11 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r11, &(0x7f0000000240), 0x10) listen(r11, 0x4) accept4$unix(r11, 0x0, 0x0, 0x800) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000008, 0x13, r10, 0xac5bd000) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 3m54.744749383s ago: executing program 0 (id=267): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file2\x00') openat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x103042, 0x0) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r1, 0xc) r2 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000003, &(0x7f0000000040)) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$inet(0x2, 0x5, 0xc) close(r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, &(0x7f0000000240)) 3m53.01005146s ago: executing program 0 (id=271): ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x80045017, 0x1000000000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000003680)=[{{&(0x7f0000000080)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000001f40), 0x1}}, {{0x0, 0x0, &(0x7f0000002f80)=[{0x0, 0x1a}, {0x0}, {&(0x7f0000001f80)}], 0x3}}], 0x3, 0x4008040) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) syz_io_uring_setup(0x235, &(0x7f0000000140)={0x0, 0x4532, 0x10100, 0xfffffffd, 0x24c}, &(0x7f0000000680), 0x0, 0x0) syz_clone3(&(0x7f0000000600)={0x44000080, &(0x7f00000004c0), &(0x7f0000000300), &(0x7f0000000380), {0x34}, &(0x7f00000006c0)=""/54, 0x36, &(0x7f0000000700)=""/142, &(0x7f00000005c0)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x82) write$binfmt_misc(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r1}, 0x8) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r5) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) syz_usb_connect$uac2(0x5, 0x9a, &(0x7f00000007c0)=ANY=[@ANYBLOB="12110102000000200c201802000000000000000288000301018008b8e3f4b1ec1e76312f63080b0001010c200609040000000101200009240103007028070305030503030014241a030519cca726e699a7118c22a2e471b7770d11b36e6c1479624276c9d150734e8f0f320ffe7b559827f509ed52a3ca0f8580bdafe36bcfd33666"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) mount(0x0, 0x0, 0x0, 0x10005, &(0x7f0000000100)=',\xb3,,z\\)\x00Y/2}\x82\bg\x16/SRe\xffC\n\xc0\xc99\xd4\x88\x9bR\xcb\xa0\xcb\x14Z\x82\xbb\xc8LD.[\x8f\xab\xf1sRV\x9f=\x96\x02\x00\x00\x00\x00\x00\x00\x00z\x1b\x19\x00\x02a\b n\xd6\"\xbb\x81vw\xf2\x92\xdd\xca#Ex-\x81j\xb50x0}) write$P9_RSTATu(r3, &(0x7f00000004c0)={0x232, 0x7d, 0x0, {{0x500, 0xf1, 0x0, 0x0, {}, 0x0, 0x40000, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\x01\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, r4}}, 0x232) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg(r6, &(0x7f0000000040)={&(0x7f0000000080)=@ll={0x11, 0x4, r7, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000180)="cf3bdf15fd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x24008814) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x1, 'veth0_to_batadv\x00', {}, 0x9}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) socket$inet6(0xa, 0x80001, 0x0) (async) socket$inet(0x2, 0x5, 0x0) (async) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f00000001c0)={'HL\x00'}, &(0x7f0000000200)=0x1e) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}}}}, 0x108) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) (async) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)) (async) write$P9_RSTATu(r3, &(0x7f00000004c0)={0x232, 0x7d, 0x0, {{0x500, 0xf1, 0x0, 0x0, {}, 0x0, 0x40000, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\x01\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, r4}}, 0x232) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x11, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)) (async) sendmsg(r6, &(0x7f0000000040)={&(0x7f0000000080)=@ll={0x11, 0x4, r7, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000180)="cf3bdf15fd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x24008814) (async) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x1, 'veth0_to_batadv\x00', {}, 0x9}) (async) 3m46.587923664s ago: executing program 0 (id=296): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b0000000100100405000000ff03000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x008\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000) capset(&(0x7f0000000180)={0x20071026}, 0x0) socket$unix(0x1, 0x5, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x82000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x4a000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) 3m45.640087362s ago: executing program 33 (id=296): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b0000000100100405000000ff03000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x008\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000) capset(&(0x7f0000000180)={0x20071026}, 0x0) socket$unix(0x1, 0x5, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x82000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x4a000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) 18.422120412s ago: executing program 4 (id=862): socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000600)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/166, 0xa6, 0x0, &(0x7f0000000580)=""/128, 0x80}, &(0x7f0000000640)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000600)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/166, 0xa6, 0x0, &(0x7f0000000580)=""/128, 0x80}, &(0x7f0000000640)=0x40) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x1, 0xffffffff, 0x6, 0xe008, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x801) (async) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x801) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x82c1, 0x0) pwritev(r1, 0x0, 0x0, 0x7fffffffffffffff, 0x0) (async) pwritev(r1, 0x0, 0x0, 0x7fffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x0, 0x80, 0x3, {0x0, 0xea60}, {0x0, 0x2710}, {0x3, 0x1, 0x0, 0x1}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x2, 0x0, 0x0, 0x0, "fd53a9075c52f353"}}, 0x48}, 0x1, 0x0, 0x0, 0x24008080}, 0x20000040) (async) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x0, 0x80, 0x3, {0x0, 0xea60}, {0x0, 0x2710}, {0x3, 0x1, 0x0, 0x1}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x2, 0x0, 0x0, 0x0, "fd53a9075c52f353"}}, 0x48}, 0x1, 0x0, 0x0, 0x24008080}, 0x20000040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000180)={0x9, 0x400, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x0, 0x76a}) umount2(&(0x7f0000000340)='./cgroup\x00', 0x5) socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x803, 0x0) (async) socket(0x10, 0x803, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 14.833394523s ago: executing program 4 (id=873): syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000"], 0x0) shutdown(0xffffffffffffffff, 0x1) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) pipe2(0x0, 0x80000) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x0, 0x1040, 0x0, 0xfffffff8, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) syz_emit_ethernet(0x334, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000080)=0x8) mount$9p_fd(0x0, &(0x7f0000000280)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose}]}}) 12.961540035s ago: executing program 5 (id=876): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8805}, 0x10) 12.895909548s ago: executing program 5 (id=877): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a00100001000009058803"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002740)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="40098e00000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="0003030000001501"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r1, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 11.250902123s ago: executing program 1 (id=884): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r3, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f0000000100), r6}}, 0x18) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x54, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0xdc}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) 9.716014305s ago: executing program 1 (id=886): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x22}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x84800) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0xfffffffffffffff7, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x6c}, 0x0, @in6=@local, 0xfffffffc, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r4 = getpid() sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000160033060000000000000080ff0100000000000000000000000000017f00000100000000000000000000000000000000000000000a0020005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000001000000000000000004d2320000000000000000000000000000000000004100000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000ffffffffffffffff000000ffeb000000c10000000000000004000000020000000000000006000000020000000a00041819000000000000000c0015005c073500010000000000000000000000000020000000"], 0xfc}}, 0x0) r5 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r5, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r1, &(0x7f00000009c0)={&(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x4, @link_local, 'bridge_slave_1\x00'}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000700)="d1f4ba0f9425f09b0d53e62bd11ca08a1ff1f21e2ec11d72467ed08892943310938fa20ae8c0f2f5ef0db348628b5235c278c30267e627309370b7834b306364a0b9592c58b03fe32f3cd8d1dcd154f3ea3595088cc264f8b5b2ad61726b217dd03ae94ac59960ea12914b0e26c3d9ac5adb8818dadd23e61570ccf48dafd5da26bb23f1f30e46bf13153e85dcfecceecff007113780bb11b21f33012400e83b92b2f8331c449f9c6928b9eb1e366ba3081d4c69361b7b2f305de163cef88797703ce4bc6394d0e8ed5208ef65c4fc8b675bf8a3329fee1927052aafdb3f801a3726cfa8c58ef2aa98ce44", 0xeb}, {&(0x7f0000000800)="32e025545af2d702ca34", 0xa}, {&(0x7f0000000840)="a0634f662d88e6334a6465b8bbcdbb89d5b594259b3b2a78ebd9b2adc2fe8624550617a7bdff4840f9f56933fc009040d82a2f8875e1d3ede439eb9b7a5e37863b5c19c5601a6c04b1d7f5215dbac9e8ab9f7c9963d4285d103a86be14ccdf5a38cfcd503a6ab77a9afc56b744670f5dab7cd262ea94567b98b027dd75e86e3eca1f2e2e1b1328aa61412e8008819682413ba117535100add94d7c39780c1cc3e87b386cfba36ced14a15ad0f438e9cfc9bb3c4ad3d47d32864ca425dd0e96aee07d23f06aa445932064ef6c8097af621c3f7a0e93d0fabd1bef6c0bbcfefdf3c3328ecf2f16bac56cc68876", 0xec}], 0x3}, 0x20040010) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x8040) syz_usb_control_io$lan78xx(r5, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000a00)=ANY=[@ANYRES64=r4, @ANYRESDEC, @ANYBLOB="4a7af408a5879a382aad7335ba86d336ffdc75041c59ac20f6762d0825b80964ad7bcf2571620dcbc8acb6ed365f1d080978920000000000", @ANYRES32=r2, @ANYRES16=0x0, @ANYRESDEC=r4], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r5, 0x0, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000003c0)={r8, 0x48, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x1, @empty, 0x4}, @in6={0xa, 0x4e22, 0xfffffff9, @local, 0x1c000000}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000400)=0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'ip6gretap0\x00', 0x4}, 0x18) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000002, 0x810, r0, 0x10000) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18) write(r1, &(0x7f00000001c0)='functionfs', 0xa) read(r0, &(0x7f0000000100), 0xb) mount(&(0x7f0000000580)=@sg0, &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) fgetxattr(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="0000002080000000"], &(0x7f0000001180)=""/4096, 0x1000) 9.650748246s ago: executing program 4 (id=887): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8805}, 0x10) 9.480201726s ago: executing program 4 (id=890): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) shutdown(0xffffffffffffffff, 0x1) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) pipe2(0x0, 0x80000) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x0, 0x1040, 0x0, 0xfffffff8, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) syz_emit_ethernet(0x334, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000080)=0x8) mount$9p_fd(0x0, &(0x7f0000000280)='.\x00', &(0x7f0000000080), 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000002e80)=@filter={'filter\x00', 0xe, 0x4, 0x176, [0x0, 0x200027c0, 0x200029ec, 0x20002b82], 0x0, 0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="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"/374]}, 0x1ee) syz_usb_control_io$printer(r0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f0000000140)={0x28729f328c68897}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) 8.1274394s ago: executing program 6 (id=891): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x101) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x1e, 0x0, 0x29) r1 = gettid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x11, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x36}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x81) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) syz_open_procfs(r1, &(0x7f0000000040)='net/rfcomm\x00') setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000000)={@empty, @dev={0xac, 0x14, 0x14, 0x14}, 0x1, "103ddea1080ccd149bc203201089001e0a96a2acf04e42a64ad6ec6528956adb", 0xc, 0x1bffffd, 0xfffffff8, 0x6}, 0x3c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010102, @in=@remote, 0x4e20, 0x0, 0x4e22, 0xc, 0x2, 0x0, 0x0, 0x89, 0x0, 0xee01}, {0x2e6, 0x0, 0x1ff, 0x0, 0x0, 0x800, 0x0, 0x800000000}, {0x1, 0x0, 0x0, 0x1ffffffffe}, 0x20, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x3, 0x0, 0x0, 0xfffffc01, 0x4001, 0x6}}, 0xe8) listen(r3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x58, 0x2c, 0x10, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xd, 0xffe7}, {0x0, 0x8}, {0xb, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0x5}, @TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0xff, 0xff, 0x0, 0x1f8e8b2cf0a66a7d]}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x3}, @TCA_FLOWER_KEY_CT_STATE={0x6}]}}]}, 0x58}}, 0x4000) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002300)=@deltfilter={0x68, 0x2d, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xfff3, 0x5}, {0x0, 0x8}, {0xfff2, 0x5}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r6}, @TCA_ROUTE4_IIF={0x8, 0x4, r6}]}}, @TCA_RATE={0x6, 0x5, {0x7f, 0xb3}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0xfffffff1}, @TCA_CHAIN={0x8, 0xb, 0x200}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x2000c044) close(0xffffffffffffffff) r7 = syz_open_dev$sndctrl(&(0x7f0000000180), 0xfffffffffffffff1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc4c85513, &(0x7f00000001c0)={{0x5, 0x3, 0x3, 0x6, 'syz1\x00', 0x101}, 0x0, [0xa9, 0x8001, 0x7, 0x10, 0x1, 0x8, 0x101, 0x7, 0x7, 0x3, 0x0, 0x1, 0x5, 0x1, 0x10, 0x9, 0xa60, 0x7, 0x9, 0x2, 0x9, 0x7fffffff, 0x0, 0x4, 0x2, 0x7, 0x3b2, 0xffffffffffffffff, 0x7f, 0x200, 0x3, 0x5, 0x5, 0x2, 0x3, 0x6, 0xd, 0x2, 0x4, 0x7300000000, 0x1, 0xffffffffffffc4c0, 0x9, 0x9, 0x4, 0x5, 0x7, 0x5, 0x8, 0x1, 0x3, 0x1586, 0x6, 0x8000000000000001, 0x100000000, 0x4, 0x0, 0x1, 0xbce0, 0x3, 0x78, 0x6, 0x24000, 0x10, 0x7, 0x1004, 0x6, 0x100000001, 0x101, 0x80000000, 0x6, 0x0, 0x800, 0x8, 0x2, 0x3, 0x100, 0xa26, 0x3, 0x3, 0x1, 0x5d65740b, 0x2, 0xc, 0x5, 0x6, 0x8, 0x4, 0x2, 0x6, 0xfffffffffffffffa, 0x8, 0x8001, 0x6, 0x7, 0x8, 0x1, 0x9, 0x9, 0x200, 0x5, 0xff, 0x9, 0x90ca, 0x6, 0xfffffffffffffffd, 0xffffffff, 0x10001, 0x3, 0x2, 0x0, 0x5, 0x1, 0x1, 0x6eef, 0xffff, 0x0, 0x193, 0x3, 0x9, 0x3, 0x6, 0x80000000, 0x1, 0xffff, 0xc6, 0x5ab7, 0x5]}) 7.157044343s ago: executing program 2 (id=893): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0x8df, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0xffffff1f, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40821, 0x310bb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x98}}, 0x24008000) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0xffffff1f, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40821, 0x310bb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x98}}, 0x24008000) 7.125938914s ago: executing program 5 (id=894): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/failslab/cache-filter\x00', 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="8824", 0x2}], 0x1}, 0x45) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000100), 0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000003540)={0x2020}, 0x2020) recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) sendmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="0df5", 0x2}], 0x1, 0x0, 0x0, 0x9080}, 0x885) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc}) syz_open_dev$vim2m(&(0x7f0000000100), 0x208, 0x2) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000"]) r5 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/18, 0x12}], 0x1, 0xe, 0x4) ppoll(&(0x7f0000000000)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 6.196039689s ago: executing program 6 (id=895): socket(0x2b, 0x4, 0x4000000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='esdfs\x00', 0x3ea60bebe7f00e78, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x800, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@posixacl}, {@cache_fscache}]}}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80042, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) 5.488175825s ago: executing program 6 (id=896): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000)=0x1, 0x4) 5.367385574s ago: executing program 5 (id=897): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000040)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0x1, 0x10, [0xff]}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x5c2b}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x1d}, &(0x7f0000000700)={0x40, 0xb, 0x2, 'r^'}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0xb0}, &(0x7f0000000780)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, &(0x7f00000007c0)={0x40, 0x17, 0x6}, &(0x7f0000000800)={0x40, 0x19, 0x2, "c366"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0xe}, &(0x7f0000000a80)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000440)={0x40, 0x31, 0x2, "01ba"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.26645622s ago: executing program 4 (id=898): syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000"], 0x0) shutdown(0xffffffffffffffff, 0x1) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) pipe2(0x0, 0x80000) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x0, 0x1040, 0x0, 0xfffffff8, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) syz_emit_ethernet(0x334, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000080)=0x8) mount$9p_fd(0x0, &(0x7f0000000280)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose}]}}) 5.072139649s ago: executing program 2 (id=899): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_b']) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file2\x00') openat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x103042, 0x0) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r1, 0xc) r2 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000003, &(0x7f0000000040)) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$inet(0x2, 0x5, 0xc) close(r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, &(0x7f0000000240)) 4.910595781s ago: executing program 1 (id=900): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0xf8, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0xc, @void}, 0x10) (async) rt_sigprocmask(0x1, &(0x7f0000000580)={[0x800]}, &(0x7f00000005c0), 0x8) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000056544820e105080411250102030109022400010000000009040000022ec25d000905ff49"], 0x0) 3.888803456s ago: executing program 2 (id=901): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1900000004000000040000000200000018000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000e4ff000000000000000000000049ea4c3d2c"], 0x50) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8) bind(r1, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) ioctl$XFS_IOC_FSGEOMETRY(r1, 0x8100587e, &(0x7f0000000000)) connect(r2, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000140)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001008000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5, r4}, 0xc) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000700), 0x4) 3.199796716s ago: executing program 2 (id=902): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) write$cgroup_pid(r2, &(0x7f00000003c0), 0xffffffa0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000002240)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000080000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000ffffffffa000f2710263d2ac", 0x0, 0xe505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd}, 0x2e) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f00000001c0)) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r7], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000180)={0x0, 0x0, 0xff, 0x0, @vifc_lcl_ifindex=r8, @local}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x8000) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r10 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00') preadv(r10, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/131, 0x83}, {&(0x7f0000000040)=""/127, 0x7f}], 0x2, 0x98ca, 0x108000) 3.012619855s ago: executing program 2 (id=903): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000040)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, 0x0, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x6}, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0x1, 0x10, [0xff]}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x5c2b}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x1d}, &(0x7f0000000700)={0x40, 0xb, 0x2, 'r^'}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0xb0}, &(0x7f0000000780)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, &(0x7f00000007c0)={0x40, 0x17, 0x6}, &(0x7f0000000800)={0x40, 0x19, 0x2, "c366"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0xe}, &(0x7f0000000a80)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000440)={0x40, 0x31, 0x2, "01ba"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.672758615s ago: executing program 4 (id=904): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000714000/0x3000)=nil, 0x3000, 0x800000, 0x2, &(0x7f0000000000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = syz_clone3(&(0x7f0000000080)={0x40981800, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) syz_clone(0xa4830c00, &(0x7f0000000240)="1ad2d466489d4f6ba33209d3426d629382334dabe194b7cb56d64606cacfa350d73be7e6ce26082f33a5b89640920e818319ee3edfafc12aa5edb5369687d6cd96e728656a9e7d62020ba725a04ba9eccfacb6295104392ac5ab200648af44c98dac43c91fcf9a83cf896388080b", 0x6e, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000380)="69badacea666271076f166ca3a23df38657bc68c945a6709cbb6d6c556e32c53c98b2425969e6acd1b78d6ab5db4df8b6cc31304284d9c09a6f6bd4998a8ea29324526e81361fb2f67c74e29a6c64d4a24cbab478681885b6b7e98843ebb66bf304d224bab9fbb8e218a3d55d3f5fe0fc0c5b5f0a8640f1e290300f433d0813424f61ad510da438dce5956b38d2babd6bd2eb2c872382308865b3484da7796377d82063965a029eef9205e8121b44b7f183bccd369704476c3e58fa4ab36674e331957da3b2885c01bfceba2b991a25f8773ff3accf596ad40") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000100), 0x0, 0x40000020, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000480)="2adbf327c286701fc2cd511982401f85023ff2db143fb87a767c9083aa8b84973b47fd1b29c81c3ec23481411108b10c2a71d7b26eb1bf9b45628f250ebb54c87f6d5f36af7d706e6da3702bd84c19a292df746a18b3653f9326b33005c70ba9cae42018c8d71436ecf247431b15e1d0397cb119c176ab67777f4770e8c509635cd3edaa38ea37630000875f9418d88ab2d7f674ae3f518c7a4b6780f51433df54172ac17e2bb90586f1e78209323e4b7aef6a1a1d8e4b7d9946602a0689b017a5d84559b5a2", 0xc6}, {&(0x7f0000000580)="9688a143c8c551f18bcfceca9b7ac55438faf85c7ee532ae69ac8f07738d53dd0e293252504948a674578c795af5084a2ae48e5f7c935878cbfe741a7ef7a6cc5caf61a62e0ca7da263b800bd30b3c5e809a66ae74b25885f512a47565aedae42120f9b3a387bb0f223855745df0ae7c699908c93a9cf7af182e3c6c8b9ee8b207a41f95cb9b358d67df967283514fe378a5b213c6b73b0e7383fa72d1d7909b503b7e02574dd48c016474efa190b1ba7779edaa780dcf3c50cd04c37a15d81cd3e3e825ad1d0a89c6553b", 0xcb}, {&(0x7f0000000680)="9968b7a2020219169769cf2a52a679a4c7b4da434cbc9d7fec5bf757411aa0b551a966950acf227b7f8ea204bc4bdc22e97a15e6", 0x34}], 0x3, &(0x7f0000000700)=[@rights={{0x2c, 0x1, 0x1, [r2, r2, r2, r3, r6, r6, r2]}}, @rights={{0x2c, 0x1, 0x1, [r3, r6, r2, r5, r3, r6, r3]}}], 0x60, 0x24040000}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)="c126038a400457b29c1a4b7c06d257b61e3fe98bf6bc398a3b0d244f198ac2aa77da731ded61591378c7878fda81bd4d83f52309b989cb90261ea51f6a44e292c610818fa11ce2a2131c359228f2324cb97a014e97392b4b4d0c2bd4e60a87ef891c8a1c8d3d0bdf52e63bb88af55b85384114033bb582165a3aacf8", 0x7c}], 0x2, &(0x7f0000000a80)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r5, r3, r6, r2, r6, r6]}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}], 0x98, 0x40000}}, {{&(0x7f0000000b40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000bc0)="1ae30ed02776ed93da67e2532dab402786d9e94747247ec959b9c4ada53389d364bf078bb79b1a3f837c172de2", 0x2d}], 0x1, &(0x7f0000000c80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r3, r5, 0xffffffffffffffff, r2]}}], 0x30}}], 0x3, 0xc084) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000180)=0x7) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000001090101010000000000000002000001"], 0x14}, 0x1, 0x0, 0x0, 0x200008c0}, 0xc854) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x9080) 2.400234038s ago: executing program 1 (id=905): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a90000000060a010400000000000000000a0000040900010073797a310000000064000480340001800c0001007061796c6f61640024000280080001400000000a080003400000004f080004400000003808000240000000012c0001800a00010072656469720000001c00028008000240000000130800034000000029080001400000000e0900020073797a32"], 0x6c1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000800) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000080)=0x10) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$full(0xffffff9c, &(0x7f00000003c0), 0x8002, 0x0) io_uring_setup(0x2f08, &(0x7f00000007c0)={0x0, 0x768, 0x1000, 0x0, 0x14d, 0x0, r3}) r4 = openat$dsp1(0xffffffffffffff9c, 0x0, 0xc8a01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000002c80)={0x0, 0x5, 0x3, 0x1}) syz_emit_ethernet(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaa8aaaa88a800008100000086dd6076cd8a0028000020010000000000000000000000000000fe8000000000000000000000000000000004000000000000071800000000040000d604"], 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x1ac, &(0x7f0000000640)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f0000000480)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000004c0)='cramfs\x00', 0x208000, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000001a00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0xfffffffffffffc00, r6, 0x0, {0xa, 0xffffffffffffffff}, 0x4}, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r7, &(0x7f0000000180)=0xfe5f, 0x12) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x54, 0x0, 0x2, {0xeffd, 0x1}, {0x3a, 0x2}, @ramp={0x8, 0x3, {0x4, 0x31, 0x4, 0x9}}}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) ioctl$COMEDI_UNLOCK(r7, 0x6406) 2.343582016s ago: executing program 6 (id=906): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x143102) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x109, 0x100000001}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x7, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) futex(0x0, 0x8c, 0x1, 0x0, &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$UBLK_U_CMD_START_DEV(r0, 0xc0207506, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0x17b3\n\x00', 0x7) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x40041, 0x165) write(r3, &(0x7f00000001c0)='0x00', 0x4) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) 1.576919664s ago: executing program 5 (id=907): socket(0x2b, 0x4, 0x4000000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='esdfs\x00', 0x3ea60bebe7f00e78, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x800, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@posixacl}, {@cache_fscache}]}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) 1.319228864s ago: executing program 6 (id=908): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1b043}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x200000000000000, 0x240008c4}, 0x4054) 1.145661841s ago: executing program 1 (id=909): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x4}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xd, 0xc}, {0x0, 0xfff1}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4049080) r5 = mmap$IORING_OFF_CQ_RING(0x0, 0x3000, 0x2000003, 0x12, r0, 0x8000000) r6 = syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r6, 0x0, 0x0, r7, 0x0, 0x0) clock_gettime(0xfffffffffffffffe, 0x0) syz_io_uring_complete(0x0, r5) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r5, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0xc3c, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x18}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r8, &(0x7f0000000640)={0x0, 0xd, 0x0, 0xfffffffe, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x4, 0x1000000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x1000, 0x0, 0x6c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa0e7, 0x2, 0x1, 0x400001ec}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x8000001, 0xffffffff}}], 0x1, 0x0, 0x0) 293.194706ms ago: executing program 5 (id=910): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000000, 0x39071, 0xffffffffffffffff, 0x65969000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e20, @multicast2}]}, &(0x7f0000000140)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x355e42) sched_setscheduler(0x0, 0x5, &(0x7f0000000240)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsmount(0xffffffffffffffff, 0x0, 0x89) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) unshare(0x28000600) r5 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x8e) unshare(0x8000280) openat(r6, &(0x7f00000000c0)='.\x00', 0x0, 0x1d9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x62b1c63429a9de99) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$SNDCTL_SEQ_PANIC(r7, 0x5111) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00000003c0)={r1, 0x15e, "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"}, &(0x7f0000000180)=0x166) 287.39528ms ago: executing program 2 (id=911): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_har']) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file2\x00') openat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x103042, 0x0) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r1, 0xc) r2 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000003, &(0x7f0000000040)) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$inet(0x2, 0x5, 0xc) close(r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, &(0x7f0000000240)) 199.835371ms ago: executing program 6 (id=912): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000580108805400070100000000000000000800050000000000080005000000000008000500000000000800050000000000080005000000000008000500000000000800050000000000080006000000000008000500000000002c000780080005"], 0x198}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket(0x400000000010, 0x3, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r7, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = dup(r8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r10 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) mmap$IORING_OFF_SQ_RING(0x0, 0xde, 0x2000007, 0x20010, 0xffffffffffffffff, 0x0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r11, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r10, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xffff}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x200}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000f80000ffffffffff0000000000000000", @ANYRES32=r2, @ANYBLOB="ff0100"/20, @ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="0100000000000000010000000c00"/28], 0x50) futex_waitv(&(0x7f00000014c0)=[{0x2, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000001a00)={0x77359400}, 0x0) 0s ago: executing program 1 (id=913): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000005397dac07d01cb6e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000840000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400004d44e5c585000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r1, &(0x7f00000003c0)=@in={0x2, 0x4e24, @loopback}, 0x80) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) bind(0xffffffffffffffff, &(0x7f0000000180)=@qipcrtr={0x2a, 0x2, 0x1}, 0x80) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000140), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000001a00)={'das1800\x00', [0x2000, 0x3, 0x4, 0x4, 0x25, 0x0, 0x400, 0x7, 0x54c6cff3, 0xfa, 0x2, 0x3, 0xfffffff7, 0x7fffffff, 0x6, 0x5, 0x4, 0x1, 0x7, 0x40000003, 0x200089, 0x4, 0x4, 0x20001e5b, 0x3, 0xe66, 0xffffffff, 0x5, 0x4006, 0x0, 0x13]}) listen(r1, 0x5) connect(r2, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000700), 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)={0x28, r7, 0x435, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40) r10 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14, 0x80800) setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000080)=@req={0xffffffff, 0x2, 0x6, 0xc}, 0x10) kernel console output (not intermixed with test programs): available UDC or it's busy [ 274.412570][ T5712] dvb-usb: bulk message failed: -22 (6/0) [ 274.433143][ T8006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.443596][ T5712] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 274.465603][ T9] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 274.480688][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.489137][ T9] usb 5-1: Product: syz [ 274.493804][ T9] usb 5-1: Manufacturer: syz [ 274.502370][ T9] usb 5-1: SerialNumber: syz [ 274.515735][ T9] usb 5-1: config 0 descriptor?? [ 274.524224][ T9] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 032 [ 274.524483][ T5712] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input16 [ 274.579760][ T29] audit: type=1400 audit(1786195001.367:777): avc: denied { create } for pid=8015 comm="syz.1.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 274.607909][ T29] audit: type=1400 audit(1786195001.397:778): avc: denied { write } for pid=8015 comm="syz.1.533" path="socket:[19342]" dev="sockfs" ino=19342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 274.687714][ T5712] dvb-usb: schedule remote query interval to 150 msecs. [ 274.695704][ T5712] dvb-usb: bulk message failed: -22 (3/0) [ 274.715149][ T29] audit: type=1400 audit(1786195001.507:779): avc: denied { shutdown } for pid=8008 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 274.717765][ T8009] Cannot find map_set index 135 as target [ 274.741310][ T5712] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 274.780197][ T5712] usb 7-1: USB disconnect, device number 13 [ 274.841003][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 274.861697][ T5795] dvb-usb: bulk message failed: -22 (1/0) [ 274.907152][ T5795] dvb-usb: error while querying for an remote control event. [ 275.242692][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 275.252043][ T5712] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 275.255528][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 275.306906][ T10] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 275.328444][ T10] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 275.350049][ T9] (null): error -EIO: failure setting delay to 10us [ 275.360202][ T10] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 275.381767][ T9] i2c-tiny-usb 5-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 275.531431][ T10] usb 6-1: config 14 has no interface number 0 [ 275.664577][ T10] usb 6-1: config 14 has no interface number 1 [ 275.672695][ T9] usb 5-1: USB disconnect, device number 32 [ 275.687371][ T10] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 275.706359][ T10] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 64, changing to 7 [ 275.721285][ T10] usb 6-1: config 14 interface 228 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 275.736018][ T10] usb 6-1: config 14 interface 57 has no altsetting 0 [ 275.743268][ T10] usb 6-1: config 14 interface 228 has no altsetting 0 [ 275.753605][ T10] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 275.767743][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.778324][ T10] usb 6-1: Product: syz [ 275.783660][ T10] usb 6-1: Manufacturer: syz [ 275.788475][ T10] usb 6-1: SerialNumber: syz [ 275.875290][ T8030] tmpfs: Bad value for 'mpol' [ 276.114736][ T29] audit: type=1400 audit(1786195002.917:780): avc: denied { mount } for pid=8016 comm="syz.5.534" name="/" dev="rpc_pipefs" ino=19380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 276.701819][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 277.598440][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 277.610432][ T9] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 277.640387][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.659920][ T9] usb 7-1: Product: syz [ 277.665357][ T9] usb 7-1: Manufacturer: syz [ 277.665639][ T8029] Process accounting resumed [ 277.669994][ T9] usb 7-1: SerialNumber: syz [ 277.680559][ T9] usb 7-1: config 0 descriptor?? [ 277.741087][ T10] legousbtower 6-1:14.57: interrupt endpoints not found [ 277.765114][ T10] legousbtower 6-1:14.228: interrupt endpoints not found [ 277.807246][ T10] usb 6-1: USB disconnect, device number 18 [ 278.788437][ T9] airspy 7-1:0.0: usb_control_msg() failed -110 request 09 [ 278.812244][ T9] airspy 7-1:0.0: Could not detect board [ 278.823497][ T9] airspy 7-1:0.0: probe with driver airspy failed with error -110 [ 278.852934][ T5712] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 278.877565][ T29] audit: type=1400 audit(1786195005.675:781): avc: denied { unmount } for pid=5979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 279.107357][ T5712] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 279.117189][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.145031][ T5712] usb 5-1: Product: syz [ 279.149329][ T5712] usb 5-1: Manufacturer: syz [ 279.173530][ T5712] usb 5-1: SerialNumber: syz [ 279.270644][ T5712] usb 5-1: config 0 descriptor?? [ 279.386362][ T5712] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 033 [ 279.618694][ T8066] 9p: Bad value for 'rfdno' [ 279.642475][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 279.933465][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 279.997158][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 280.032725][ T10] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 280.288783][ T10] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 280.361389][ T8067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.383706][ T10] usb 6-1: Product: syz [ 280.392912][ T5711] usb 7-1: USB disconnect, device number 14 [ 280.404695][ T10] usb 6-1: Manufacturer: syz [ 280.414565][ T8067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.430370][ T10] usb 6-1: SerialNumber: syz [ 280.470171][ T10] usb 6-1: config 0 descriptor?? [ 280.490456][ T8061] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 280.675568][ T5712] (null): failure reading functionality [ 280.684581][ T5712] i2c i2c-1: failure reading functionality [ 280.693070][ T5712] i2c i2c-1: connected i2c-tiny-usb device [ 280.705093][ T29] audit: type=1401 audit(1786195007.504:782): op=fscreate invalid_context=CF [ 280.709193][ T5712] usb 5-1: USB disconnect, device number 33 [ 280.718372][ T29] audit: type=1400 audit(1786195007.514:783): avc: denied { lock } for pid=8073 comm="syz.1.549" path="socket:[20117]" dev="sockfs" ino=20117 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 281.234169][ T5614] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 282.423230][ T29] audit: type=1400 audit(1786195008.564:784): avc: denied { bind } for pid=8079 comm="syz.1.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 282.444315][ T5614] usb 3-1: config 0 has an invalid interface number: 205 but max is 0 [ 282.452739][ T5614] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.482572][ T5712] usb 6-1: USB disconnect, device number 19 [ 282.522203][ T5614] usb 3-1: config 0 has no interface number 0 [ 282.542497][ T29] audit: type=1400 audit(1786195009.333:785): avc: denied { write } for pid=8083 comm="syz.5.553" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 282.546946][ T5614] usb 3-1: config 0 interface 205 has no altsetting 0 [ 282.691037][ T8084] nfs: Unknown parameter '' [ 282.716113][ T5614] usb 3-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 282.716131][ T5614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.716144][ T5614] usb 3-1: Product: syz [ 282.716153][ T5614] usb 3-1: Manufacturer: syz [ 282.716161][ T5614] usb 3-1: SerialNumber: syz [ 282.823312][ T5614] usb 3-1: config 0 descriptor?? [ 282.913706][ T5614] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 282.913743][ T5614] dvb-usb: bulk message failed: -22 (3/0) [ 282.926980][ T5614] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 282.927817][ T5614] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 282.927867][ T5614] usb 3-1: media controller created [ 282.928754][ T5614] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 282.932312][ T5614] dvb-usb: bulk message failed: -22 (6/0) [ 282.932366][ T5614] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 282.995959][ T5614] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input17 [ 283.046192][ T5614] dvb-usb: schedule remote query interval to 150 msecs. [ 283.046226][ T5614] dvb-usb: bulk message failed: -22 (3/0) [ 283.068669][ T5614] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 283.114195][ T8075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.209930][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 283.209973][ T10] dvb-usb: error while querying for an remote control event. [ 283.365360][ T5614] dvb-usb: bulk message failed: -22 (1/0) [ 283.394963][ T5614] dvb-usb: error while querying for an remote control event. [ 283.511807][ T8075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.580981][ T8083] Process accounting resumed [ 283.664952][ T5799] dvb-usb: bulk message failed: -22 (1/0) [ 283.720858][ T5799] dvb-usb: error while querying for an remote control event. [ 283.748917][ T8075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.843996][ T8075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.959868][ T5799] dvb-usb: bulk message failed: -22 (1/0) [ 284.044019][ T8075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.060473][ T5799] dvb-usb: error while querying for an remote control event. [ 284.112381][ T8075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.274130][ T5799] dvb-usb: bulk message failed: -22 (1/0) [ 284.279974][ T5799] dvb-usb: error while querying for an remote control event. [ 284.295916][ T5799] usb 3-1: USB disconnect, device number 30 [ 284.907188][ T5799] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 285.067763][ T5712] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 285.222502][ T8103] netlink: 28 bytes leftover after parsing attributes in process `syz.2.557'. [ 285.600460][ T8109] netlink: 4 bytes leftover after parsing attributes in process `syz.6.558'. [ 285.635648][ T5712] usb 6-1: Using ep0 maxpacket: 8 [ 285.654075][ T8109] hsr_slave_0: left promiscuous mode [ 285.734351][ T8111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.552'. [ 285.752525][ T8109] hsr_slave_1: left promiscuous mode [ 286.318648][ T5712] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 286.329742][ T5712] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 286.339218][ T5712] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.366434][ T5712] usb 6-1: config 0 descriptor?? [ 286.711221][ T5712] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 286.764927][ T8120] usb usb5: usbfs: process 8120 (syz.1.561) did not claim interface 0 before use [ 286.788543][ T8119] usb usb5: usbfs: process 8119 (syz.4.560) did not claim interface 0 before use [ 286.843558][ T8120] random: crng reseeded on system resumption [ 286.895281][ T8119] random: crng reseeded on system resumption [ 287.080890][ T8127] FAULT_INJECTION: forcing a failure. [ 287.080890][ T8127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.094486][ T8127] CPU: 1 UID: 0 PID: 8127 Comm: syz.2.563 Not tainted syzkaller #0 PREEMPT(full) [ 287.094510][ T8127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 287.094520][ T8127] Call Trace: [ 287.094525][ T8127] [ 287.094532][ T8127] dump_stack_lvl+0x100/0x190 [ 287.094560][ T8127] should_fail_ex.cold+0x5/0xa [ 287.094582][ T8127] strncpy_from_user+0x3b/0x2d0 [ 287.094609][ T8127] do_getname+0x78/0x390 [ 287.094634][ T8127] __x64_sys_mkdirat+0x78/0xc0 [ 287.094654][ T8127] do_syscall_64+0x115/0x870 [ 287.094674][ T8127] ? clear_bhb_loop+0x40/0x90 [ 287.094696][ T8127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.094713][ T8127] RIP: 0033:0x7fb19459de99 [ 287.094728][ T8127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.094744][ T8127] RSP: 002b:00007fb1954bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 287.094762][ T8127] RAX: ffffffffffffffda RBX: 00007fb194826180 RCX: 00007fb19459de99 [ 287.094773][ T8127] RDX: 00000000000001ed RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 287.094784][ T8127] RBP: 00007fb1954bd090 R08: 0000000000000000 R09: 0000000000000000 [ 287.094793][ T8127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.094803][ T8127] R13: 00007fb194826218 R14: 00007fb194826180 R15: 00007fffcba9d6e8 [ 287.094827][ T8127] [ 287.241182][ T8098] netlink: 28 bytes leftover after parsing attributes in process `syz.5.555'. [ 287.254346][ T29] audit: type=1400 audit(1786195013.891:786): avc: denied { write } for pid=8121 comm="syz.2.563" name="functions" dev="configfs" ino=10653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 287.337271][ T5712] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 287.520144][ T5712] usb 7-1: not running at top speed; connect to a high speed hub [ 287.549449][ T5712] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 287.606276][ T5712] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 287.655608][ T5712] usb 7-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 287.670891][ T5712] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.686124][ T5712] usb 7-1: Product: syz [ 287.694636][ T5712] usb 7-1: Manufacturer: syz [ 287.703795][ T5712] usb 7-1: SerialNumber: syz [ 287.820155][ T5712] oti6858 7-1:1.0: oti6858 converter detected [ 288.031756][ T29] audit: type=1400 audit(1786195014.791:787): avc: denied { setopt } for pid=8122 comm="syz.6.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 288.192777][ T29] audit: type=1400 audit(1786195014.920:788): avc: denied { open } for pid=8129 comm="syz.4.564" path="/dev/ptyqc" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 288.282524][ T5712] usb 7-1: oti6858 converter now attached to ttyUSB0 [ 288.347633][ T5712] usb 7-1: USB disconnect, device number 15 [ 288.589515][ T5799] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 288.879957][ T5822] usb 6-1: USB disconnect, device number 20 [ 289.692709][ T5712] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 289.743235][ T5712] oti6858 7-1:1.0: device disconnected [ 289.818567][ T5799] usb 3-1: Using ep0 maxpacket: 8 [ 289.825522][ T5799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 289.847922][ T5799] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 289.866522][ T5799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.035044][ T5799] usb 3-1: config 0 descriptor?? [ 290.247992][ T5799] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 290.743301][ T8136] netlink: 28 bytes leftover after parsing attributes in process `syz.2.566'. [ 291.097853][ T8170] use of bytesused == 0 is deprecated and will be removed in the future, [ 291.106656][ T8170] use the actual size instead. [ 291.150861][ T29] audit: type=1400 audit(1786195017.929:789): avc: denied { read } for pid=8163 comm="syz.6.571" name="host_addr" dev="configfs" ino=20253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 291.532801][ T29] audit: type=1800 audit(1786195017.929:790): pid=8170 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.571" name="host_addr" dev="configfs" ino=20253 res=0 errno=0 [ 291.830078][ T5712] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 291.837848][ T5795] usb 3-1: USB disconnect, device number 31 [ 292.850758][ T5712] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 292.869456][ T5712] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 292.887540][ T29] audit: type=1400 audit(1786195019.668:791): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 292.916334][ T5712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 292.948431][ T5712] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 292.978520][ T5712] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 292.988780][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.008973][ T5712] usb 2-1: Product: syz [ 293.015852][ T5712] usb 2-1: Manufacturer: syz [ 293.020530][ T5712] usb 2-1: SerialNumber: syz [ 293.028904][ T5712] usb 2-1: config 0 descriptor?? [ 293.035372][ T8172] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 293.060702][ T5712] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input18 [ 293.100419][ T5795] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 293.262656][ T5795] usb 3-1: Using ep0 maxpacket: 8 [ 293.286727][ T5795] usb 3-1: unable to get BOS descriptor or descriptor too short [ 293.319856][ T9] usb 2-1: USB disconnect, device number 25 [ 293.349064][ T5795] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 194, changing to 7 [ 293.405128][ T5614] lo speed is unknown, defaulting to 1000 [ 293.461795][ T5795] usb 3-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 293.475077][ T8195] comedi comedi2: fl512: I/O base address not correctly aligned [ 293.490136][ T5795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.626178][ T5795] usb 3-1: Product: syz [ 293.638087][ T5795] usb 3-1: Manufacturer: syz [ 293.652426][ T5795] usb 3-1: SerialNumber: syz [ 294.402521][ T8180] netlink: 36 bytes leftover after parsing attributes in process `syz.2.576'. [ 294.473386][ T5795] usb 3-1: failed waiting for Axe-Fx III to boot: -71 [ 294.496246][ T5795] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 294.521145][ T29] audit: type=1400 audit(1786195021.297:792): avc: denied { read } for pid=8201 comm="syz.4.581" dev="sockfs" ino=20300 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 294.568080][ T5795] usb 3-1: USB disconnect, device number 32 [ 294.731089][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 294.941098][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 294.992393][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.017630][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.040251][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 295.077900][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 295.104370][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.130917][ T10] usb 2-1: config 0 descriptor?? [ 295.136227][ T5795] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 295.331107][ T5795] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.352727][ T5795] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.369291][ T5795] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 295.385237][ T5795] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.422478][ T5795] usb 7-1: config 0 descriptor?? [ 295.907115][ T8200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 296.065583][ T5795] hid_parser_main: 104 callbacks suppressed [ 296.065599][ T5795] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x2 [ 296.172733][ T5795] pyra 0003:1E7D:2CF6.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.6-1/input0 [ 296.360862][ T29] audit: type=1400 audit(1786195023.146:793): avc: denied { execute } for pid=8223 comm="syz.2.586" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=20465 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 296.683390][ T5795] pyra 0003:1E7D:2CF6.0007: couldn't init struct pyra_device [ 296.717201][ T5795] pyra 0003:1E7D:2CF6.0007: couldn't install mouse [ 296.733732][ T5795] pyra 0003:1E7D:2CF6.0007: probe with driver pyra failed with error -71 [ 296.764284][ T5795] usb 7-1: USB disconnect, device number 16 [ 297.107604][ T8236] fuse: Bad value for 'user_id' [ 297.112541][ T8236] fuse: Bad value for 'user_id' [ 297.139358][ T29] audit: type=1400 audit(1786195023.906:794): avc: denied { connect } for pid=8234 comm="syz.2.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 298.321472][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 298.332302][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 298.377250][ T10] usb 2-1: USB disconnect, device number 26 [ 298.482968][ T5822] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 298.526401][ T29] audit: type=1400 audit(1786195025.315:795): avc: denied { unlink } for pid=8251 comm="syz.4.593" name="#7" dev="tmpfs" ino=588 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 298.560995][ T8254] comedi comedi2: fl512: I/O base address not correctly aligned [ 298.671410][ T5822] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 298.674464][ T29] audit: type=1400 audit(1786195025.345:796): avc: denied { mount } for pid=8251 comm="syz.4.593" name="/" dev="overlay" ino=583 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 298.853096][ T5799] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 298.899681][ T5822] usb 7-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 19 [ 299.542815][ T5822] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 299.562787][ T5822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.571006][ T5822] usb 7-1: Product: syz [ 299.575277][ T5822] usb 7-1: Manufacturer: syz [ 299.579945][ T5822] usb 7-1: SerialNumber: syz [ 299.627816][ T5799] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.705385][ T5799] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.718768][ T5799] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 299.732568][ T5799] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 299.752926][ T8264] usb usb5: usbfs: process 8264 (syz.1.597) did not claim interface 0 before use [ 299.774947][ T5799] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.797652][ T5799] usb 6-1: config 0 descriptor?? [ 299.877153][ T8267] random: crng reseeded on system resumption [ 299.882201][ T8268] FAULT_INJECTION: forcing a failure. [ 299.882201][ T8268] name failslab, interval 1, probability 0, space 0, times 0 [ 299.896048][ T8268] CPU: 0 UID: 0 PID: 8268 Comm: syz.4.598 Not tainted syzkaller #0 PREEMPT(full) [ 299.896074][ T8268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 299.896084][ T8268] Call Trace: [ 299.896089][ T8268] [ 299.896096][ T8268] dump_stack_lvl+0x100/0x190 [ 299.896122][ T8268] should_fail_ex.cold+0x5/0xa [ 299.896144][ T8268] should_failslab+0xc2/0x120 [ 299.896166][ T8268] __kmalloc_noprof+0xfc/0x820 [ 299.896187][ T8268] ? rcu_is_watching+0x12/0xc0 [ 299.896211][ T8268] ? tomoyo_realpath_from_path+0xb6/0x690 [ 299.896231][ T8268] tomoyo_realpath_from_path+0xb6/0x690 [ 299.896251][ T8268] tomoyo_path_number_perm+0x23c/0x580 [ 299.896271][ T8268] ? tomoyo_path_number_perm+0x22e/0x580 [ 299.896293][ T8268] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 299.896342][ T8268] ? find_held_lock+0x2b/0x80 [ 299.896365][ T8268] ? __fget_files+0x215/0x3d0 [ 299.896380][ T8268] ? hook_file_ioctl_common+0x140/0x440 [ 299.896397][ T8268] ? __fget_files+0x215/0x3d0 [ 299.896416][ T8268] ? __fget_files+0x21f/0x3d0 [ 299.896436][ T8268] security_file_ioctl+0xd3/0x230 [ 299.896460][ T8268] __x64_sys_ioctl+0xb7/0x210 [ 299.896485][ T8268] do_syscall_64+0x115/0x870 [ 299.896503][ T8268] ? clear_bhb_loop+0x40/0x90 [ 299.896523][ T8268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.896538][ T8268] RIP: 0033:0x7fa3d819de99 [ 299.896552][ T8268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.896566][ T8268] RSP: 002b:00007fa3d910a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.896582][ T8268] RAX: ffffffffffffffda RBX: 00007fa3d8426090 RCX: 00007fa3d819de99 [ 299.896592][ T8268] RDX: 0000200000000040 RSI: 00000000402c542c RDI: 0000000000000005 [ 299.896602][ T8268] RBP: 00007fa3d910a090 R08: 0000000000000000 R09: 0000000000000000 [ 299.896611][ T8268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.896620][ T8268] R13: 00007fa3d8426128 R14: 00007fa3d8426090 R15: 00007ffd16763968 [ 299.896642][ T8268] [ 299.901093][ T8268] ERROR: Out of memory at tomoyo_realpath_from_path. [ 300.441998][ T5799] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 300.566363][ T29] audit: type=1400 audit(1786195027.344:797): avc: denied { setopt } for pid=8269 comm="syz.4.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 300.632399][ T29] audit: type=1400 audit(1786195027.414:798): avc: denied { validate_trans } for pid=8273 comm="syz.2.600" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 300.690975][ T29] audit: type=1400 audit(1786195027.444:799): avc: denied { map } for pid=8269 comm="syz.4.599" path="socket:[21701]" dev="sockfs" ino=21701 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 300.741955][ T5822] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 300.760382][ T5822] cdc_ncm 7-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 300.760708][ T29] audit: type=1400 audit(1786195027.444:800): avc: denied { read } for pid=8269 comm="syz.4.599" path="socket:[21701]" dev="sockfs" ino=21701 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 300.775461][ T5822] cdc_ncm 7-1:1.0: setting rx_max = 2048 [ 300.822064][ T8282] netlink: 40 bytes leftover after parsing attributes in process `syz.2.601'. [ 300.889689][ T5799] usb 6-1: USB disconnect, device number 21 [ 300.960700][ T5822] cdc_ncm 7-1:1.0: setting tx_max = 184 [ 301.284368][ T5822] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 301.342804][ T5822] usb 7-1: USB disconnect, device number 17 [ 301.362864][ T5822] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 302.797618][ T29] audit: type=1400 audit(1786195029.483:801): avc: denied { accept } for pid=8305 comm="syz.1.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 303.515325][ T8317] netlink: 'syz.2.610': attribute type 5 has an invalid length. [ 304.408937][ T29] audit: type=1400 audit(1786195031.192:802): avc: denied { listen } for pid=8328 comm="syz.1.613" lport=53201 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 304.459343][ T29] audit: type=1400 audit(1786195031.232:803): avc: denied { accept } for pid=8328 comm="syz.1.613" lport=53201 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 304.489904][ T29] audit: type=1400 audit(1786195031.242:804): avc: denied { write } for pid=8328 comm="syz.1.613" path="socket:[21257]" dev="sockfs" ino=21257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 304.515542][ T29] audit: type=1400 audit(1786195031.242:805): avc: denied { write } for pid=8328 comm="syz.1.613" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 304.579195][ T29] audit: type=1400 audit(1786195031.242:806): avc: denied { read } for pid=8328 comm="syz.1.613" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 304.610603][ T29] audit: type=1400 audit(1786195031.362:807): avc: denied { setopt } for pid=8328 comm="syz.1.613" lport=53201 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 304.825173][ T8338] Bluetooth: MGMT ver 1.23 [ 304.866428][ T8338] netlink: 12 bytes leftover after parsing attributes in process `syz.6.616'. [ 304.924325][ T29] audit: type=1400 audit(1786195031.702:808): avc: denied { bind } for pid=8337 comm="syz.6.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 304.976230][ T7328] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 305.191367][ T29] audit: type=1400 audit(1786195031.932:809): avc: denied { name_connect } for pid=8339 comm="syz.2.617" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 306.339335][ T29] audit: type=1400 audit(1786195033.121:810): avc: denied { unmount } for pid=5979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 307.716349][ T8375] syzkaller0: entered promiscuous mode [ 307.748707][ T8375] syzkaller0: entered allmulticast mode [ 307.813634][ T29] audit: type=1400 audit(1786195034.591:811): avc: denied { write } for pid=8383 comm="syz.1.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 308.213827][ T8374] netlink: 36 bytes leftover after parsing attributes in process `syz.6.625'. [ 308.346776][ T8380] netlink: 36 bytes leftover after parsing attributes in process `syz.6.625'. [ 309.524468][ T8398] PKCS8: Unsupported PKCS#8 version [ 310.360083][ T805] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 310.505043][ T805] usb 6-1: device descriptor read/64, error -71 [ 310.759084][ T805] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 310.909188][ T805] usb 6-1: device descriptor read/64, error -71 [ 311.027030][ T805] usb usb6-port1: attempt power cycle [ 311.369582][ T805] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 311.410105][ T805] usb 6-1: device descriptor read/8, error -71 [ 311.676560][ T805] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 311.722735][ T805] usb 6-1: device descriptor read/8, error -71 [ 311.847229][ T805] usb usb6-port1: unable to enumerate USB device [ 312.404687][ T8416] futex_wake_op: syz.2.634 tries to shift op by 144; fix this program [ 312.424371][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 312.424386][ T29] audit: type=1400 audit(1786195039.198:814): avc: denied { write } for pid=8411 comm="syz.4.635" path="socket:[21934]" dev="sockfs" ino=21934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 312.685595][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 312.686531][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 313.129555][ T10] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 313.180196][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.256295][ T10] usb 2-1: Product: syz [ 313.299390][ T10] usb 2-1: Manufacturer: syz [ 313.329107][ T10] usb 2-1: SerialNumber: syz [ 313.367779][ T10] usb 2-1: config 0 descriptor?? [ 313.431922][ T10] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 027 [ 314.575019][ T8414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.583846][ T8414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.754428][ T10] (null): failure reading functionality [ 314.760966][ T10] i2c i2c-1: failure reading functionality [ 314.790975][ T10] i2c i2c-1: connected i2c-tiny-usb device [ 314.812522][ T10] usb 2-1: USB disconnect, device number 27 [ 314.906111][ T8441] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 315.762725][ T8446] sg_write: data in/out 186/126 bytes for SCSI command 0x0-- guessing data in; [ 315.762725][ T8446] program syz.2.644 not setting count and/or reply_len properly [ 315.833313][ T29] audit: type=1400 audit(1786195042.616:815): avc: denied { write } for pid=8453 comm="syz.4.646" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 315.961161][ T29] audit: type=1400 audit(1786195042.736:816): avc: denied { search } for pid=5271 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 315.962942][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.5.641'. [ 316.010295][ T29] audit: type=1400 audit(1786195042.736:817): avc: denied { search } for pid=5271 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.051736][ T805] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 316.101169][ T29] audit: type=1400 audit(1786195042.736:818): avc: denied { search } for pid=5271 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.128102][ T8465] overlayfs: overlapping lowerdir path [ 316.211908][ T805] usb 3-1: Using ep0 maxpacket: 32 [ 316.217094][ T29] audit: type=1400 audit(1786195042.736:819): avc: denied { read } for pid=5271 comm="dhcpcd" name="n36" dev="tmpfs" ino=5359 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 316.230861][ T805] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 117, changing to 7 [ 316.910780][ T805] usb 3-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 316.936342][ T805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.953554][ T29] audit: type=1400 audit(1786195042.736:820): avc: denied { open } for pid=5271 comm="dhcpcd" path="/run/udev/data/n36" dev="tmpfs" ino=5359 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 316.980912][ T805] usb 3-1: Product: syz [ 316.995828][ T805] usb 3-1: Manufacturer: syz [ 317.006809][ T805] usb 3-1: SerialNumber: syz [ 317.033655][ T29] audit: type=1400 audit(1786195042.736:821): avc: denied { getattr } for pid=5271 comm="dhcpcd" path="/run/udev/data/n36" dev="tmpfs" ino=5359 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 317.106004][ T29] audit: type=1400 audit(1786195042.776:822): avc: denied { ioctl } for pid=8458 comm="syz.6.648" path="/dev/usbmon8" dev="devtmpfs" ino=741 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 317.190284][ T29] audit: type=1400 audit(1786195043.686:823): avc: denied { read } for pid=8477 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.246626][ T805] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 317.275768][ T805] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 317.307037][ T805] usb 3-1: unit 4 not found! [ 317.332166][ T8469] lo speed is unknown, defaulting to 1000 [ 317.493140][ T5712] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 317.546275][ T805] usb 3-1: USB disconnect, device number 33 [ 317.687554][ T6608] udevd[6608]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 317.710673][ T5712] usb 6-1: Using ep0 maxpacket: 8 [ 317.717489][ T5712] usb 6-1: too many endpoints for config 0 interface 0 altsetting 251: 223, using maximum allowed: 30 [ 317.766587][ T5712] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.816559][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 317.816574][ T29] audit: type=1400 audit(1786195044.595:826): avc: denied { write } for pid=8464 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.824928][ T5712] usb 6-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 317.870217][ T5712] usb 6-1: config 0 interface 0 has no altsetting 0 [ 317.886894][ T5712] usb 6-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00 [ 317.898344][ T5712] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.921510][ T5712] usb 6-1: config 0 descriptor?? [ 318.050587][ T29] audit: type=1400 audit(1786195044.595:827): avc: denied { add_name } for pid=8464 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 318.107424][ T5711] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 318.146183][ T29] audit: type=1400 audit(1786195044.595:828): avc: denied { create } for pid=8464 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 318.220026][ T8511] /dev/nullb0: Can't open blockdev [ 318.265282][ T8507] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 318.280340][ T29] audit: type=1400 audit(1786195044.595:829): avc: denied { write } for pid=8464 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=5386 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 318.282838][ T5795] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 318.319809][ T5711] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 318.327700][ T29] audit: type=1400 audit(1786195044.625:830): avc: denied { append } for pid=8464 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=5386 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 318.432061][ T29] audit: type=1400 audit(1786195045.035:831): avc: denied { write } for pid=8509 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 318.538754][ T29] audit: type=1400 audit(1786195045.035:832): avc: denied { remove_name } for pid=8509 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=5386 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 318.680259][ T29] audit: type=1400 audit(1786195045.085:833): avc: denied { unlink } for pid=8509 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=5386 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 318.881070][ T5712] smartjoyplus 0003:6666:8802.0009: unknown main item tag 0x0 [ 318.888642][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.896913][ T5712] smartjoyplus 0003:6666:8802.0009: item fetching failed at offset 9/40 [ 318.908174][ T5712] smartjoyplus 0003:6666:8802.0009: parse failed [ 318.916979][ T5711] usb 5-1: config 0 descriptor?? [ 318.922169][ T5712] smartjoyplus 0003:6666:8802.0009: probe with driver smartjoyplus failed with error -22 [ 318.935680][ T5711] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 319.115671][ T5712] usb 6-1: USB disconnect, device number 26 [ 319.203773][ T5795] usb 7-1: config 0 has an invalid interface number: 70 but max is 0 [ 319.274715][ T5795] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.286580][ T5795] usb 7-1: config 0 has no interface number 0 [ 319.300512][ T5795] usb 7-1: config 0 interface 70 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 319.311267][ T5795] usb 7-1: config 0 interface 70 altsetting 5 endpoint 0xB has invalid wMaxPacketSize 0 [ 319.321398][ T5795] usb 7-1: config 0 interface 70 has no altsetting 0 [ 319.356696][ T5711] gspca_cpia1: usb_control_msg 03, error -32 [ 319.390819][ T5711] cpia1 5-1:0.0: unexpected state after lo power cmd: 37 [ 319.401112][ T5795] usb 7-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e [ 319.410646][ T5795] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.420279][ T5795] usb 7-1: Product: syz [ 319.425520][ T5795] usb 7-1: Manufacturer: syz [ 319.430598][ T5795] usb 7-1: SerialNumber: syz [ 319.508849][ T5795] usb 7-1: config 0 descriptor?? [ 319.792590][ T5711] gspca_cpia1: usb_control_msg 02, error -71 [ 319.896353][ T5795] ti_usb_3410_5052 7-1:0.70: TI USB 3410 1 port adapter converter detected [ 319.919210][ T5711] gspca_cpia1: usb_control_msg 05, error -71 [ 319.946707][ T5795] ti_usb_3410_5052 7-1:0.70: missing endpoints [ 319.953217][ T5711] cpia1 5-1:0.0: unexpected systemstate: 37 [ 320.489439][ T5711] usb 5-1: USB disconnect, device number 34 [ 320.544872][ T5795] usb 7-1: USB disconnect, device number 18 [ 320.623405][ T29] audit: type=1400 audit(1786195047.394:834): avc: denied { write } for pid=8514 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 320.930948][ T29] audit: type=1400 audit(1786195047.704:835): avc: denied { write } for pid=8543 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.053380][ T8547] netlink: 'syz.4.659': attribute type 3 has an invalid length. [ 323.226596][ T8546] xt_NFQUEUE: number of total queues is 0 [ 323.425449][ T5711] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 323.555534][ T5711] usb 5-1: device descriptor read/64, error -71 [ 323.604719][ T8579] IPVS: set_ctl: invalid protocol: 58 172.20.20.17:20004 [ 323.613983][ T8579] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 323.615660][ T5614] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 323.789089][ T5614] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.806418][ T5711] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 323.809298][ T5614] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 323.828462][ T5614] usb 2-1: config 1 has no interface number 0 [ 323.834680][ T5614] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 323.846069][ T5614] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 323.874783][ T5614] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 323.884024][ T29] audit: type=1400 audit(1786195050.642:836): avc: denied { name_bind } for pid=8584 comm="syz.6.671" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 323.908887][ T5614] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 323.918338][ T5614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.926753][ T5614] usb 2-1: Product: syz [ 323.931009][ T5614] usb 2-1: Manufacturer: syz [ 323.939214][ T5614] usb 2-1: SerialNumber: syz [ 323.949340][ T8577] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 323.992428][ T5795] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 324.055758][ T5711] usb 5-1: device descriptor read/64, error -71 [ 324.149084][ T5795] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 324.158492][ T5795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.166712][ T5795] usb 3-1: Product: syz [ 324.171239][ T5711] usb usb5-port1: attempt power cycle [ 324.176706][ T5795] usb 3-1: Manufacturer: syz [ 324.182395][ T5795] usb 3-1: SerialNumber: syz [ 324.192615][ T5795] usb 3-1: config 0 descriptor?? [ 324.200249][ T5795] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 034 [ 324.368870][ T8577] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 324.526463][ T5711] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 324.619780][ T5711] usb 5-1: device descriptor read/8, error -71 [ 324.806651][ T8590] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 324.886886][ T8592] IPVS: stopping master sync thread 8593 ... [ 324.893079][ T8593] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 324.933188][ T8581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.941913][ T8581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.082269][ T8591] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 325.191619][ T8590] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 325.283241][ T8595] iommufd_mock iommufd_mock3: Adding to iommu group 3 [ 325.296389][ T5711] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 325.655029][ T5795] (null): failure reading functionality [ 326.397157][ T5795] i2c i2c-1: failure reading functionality [ 326.416237][ T5795] i2c i2c-1: connected i2c-tiny-usb device [ 326.429153][ T5795] usb 3-1: USB disconnect, device number 34 [ 326.461894][ T5711] usb 5-1: device descriptor read/8, error -71 [ 326.577620][ T5711] usb usb5-port1: unable to enumerate USB device [ 326.622275][ T5614] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 326.639812][ T5614] cdc_ncm 2-1:1.1: bind() failure [ 326.670157][ T5614] usb 2-1: USB disconnect, device number 28 [ 327.267351][ T5739] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 327.587703][ T5739] usb 7-1: Using ep0 maxpacket: 32 [ 327.677035][ T5739] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 327.723254][ T5739] usb 7-1: config 0 has no interface number 0 [ 327.751122][ T5739] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 327.793382][ T5739] usb 7-1: config 0 interface 85 has no altsetting 0 [ 327.842023][ T5739] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 327.876509][ T5739] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.903488][ T5739] usb 7-1: Product: syz [ 327.951451][ T5739] usb 7-1: Manufacturer: syz [ 328.012317][ T5739] usb 7-1: SerialNumber: syz [ 328.249566][ T5739] usb 7-1: config 0 descriptor?? [ 328.518017][ T5739] appletouch 7-1:0.85: Failed to read mode from device. [ 328.525511][ T5739] appletouch 7-1:0.85: probe with driver appletouch failed with error -5 [ 328.591794][ T8619] [U]  [ 328.855504][ T29] audit: type=1400 audit(1786195055.560:837): avc: denied { append } for pid=8634 comm="syz.5.681" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 329.127226][ T29] audit: type=1400 audit(1786195055.680:838): avc: denied { map } for pid=8634 comm="syz.5.681" path="socket:[23047]" dev="sockfs" ino=23047 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 329.152455][ T8638] loop5: detected capacity change from 0 to 2640 [ 329.237141][ T8649] /dev/nullb0: Can't open blockdev [ 329.243477][ T8638] Buffer I/O error on dev loop5, logical block 0, async page read [ 329.259029][ T8649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.267796][ T8649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.281042][ T8638] Buffer I/O error on dev loop5, logical block 0, async page read [ 329.330654][ T8638] Buffer I/O error on dev loop5, logical block 0, async page read [ 329.340356][ T8638] Buffer I/O error on dev loop5, logical block 0, async page read [ 329.361227][ T805] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 329.379238][ T8638] Buffer I/O error on dev loop5, logical block 0, async page read [ 329.410407][ T29] audit: type=1400 audit(1786195056.160:839): avc: denied { write } for pid=8625 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.433543][ T5711] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 329.450663][ T8638] Buffer I/O error on dev loop5, logical block 0, async page read [ 329.509641][ T8638] Buffer I/O error on dev loop5, logical block 0, async page read [ 329.533309][ T8638] Buffer I/O error on dev loop5, logical block 0, async page read [ 329.563547][ T8638] ldm_validate_partition_table(): Disk read failed. [ 329.579073][ T8638] Buffer I/O error on dev loop5, logical block 0, async page read [ 329.598553][ T5711] usb 3-1: Using ep0 maxpacket: 32 [ 329.603802][ T805] usb 5-1: Using ep0 maxpacket: 8 [ 329.609768][ T8638] Buffer I/O error on dev loop5, logical block 0, async page read [ 329.621868][ T8638] Dev loop5: unable to read RDB block 0 [ 329.623733][ T5711] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 329.640444][ T8638] loop5: unable to read partition table [ 329.647521][ T805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 329.668079][ T805] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 329.679053][ T8638] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 329.702567][ T29] audit: type=1400 audit(1786195056.470:840): avc: denied { write } for pid=8655 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.726926][ T5795] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 329.736470][ T5711] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 329.754081][ T805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.756919][ T4976] ldm_validate_partition_table(): Disk read failed. [ 329.762619][ T5711] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 329.780833][ T805] usb 5-1: config 0 descriptor?? [ 329.786075][ T5711] usb 3-1: Product: syz [ 329.792696][ T4976] Dev loop5: unable to read RDB block 0 [ 329.799380][ T5711] usb 3-1: Manufacturer: syz [ 329.804337][ T5711] usb 3-1: SerialNumber: syz [ 329.810103][ T4976] loop5: unable to read partition table [ 329.817322][ T5711] usb 3-1: config 0 descriptor?? [ 329.823418][ T8643] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 329.942816][ T5795] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 329.959967][ T5795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.994797][ T805] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 330.007044][ T5795] usb 2-1: Product: syz [ 330.026782][ T5795] usb 2-1: Manufacturer: syz [ 330.043163][ T5795] usb 2-1: SerialNumber: syz [ 330.054269][ T5799] usb 3-1: USB disconnect, device number 35 [ 330.064541][ T5795] usb 2-1: config 0 descriptor?? [ 330.094086][ T5795] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 029 [ 330.549301][ T8668] netlink: 28 bytes leftover after parsing attributes in process `syz.4.682'. [ 330.639740][ T8654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.648502][ T8654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.728663][ T5795] (null): failure reading functionality [ 330.741099][ T5795] i2c i2c-1: failure reading functionality [ 330.756897][ T5795] i2c i2c-1: connected i2c-tiny-usb device [ 330.770895][ T5795] usb 2-1: USB disconnect, device number 29 [ 330.867588][ T29] audit: type=1400 audit(1786195057.629:841): avc: denied { write } for pid=8657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 330.898967][ T5739] usb 7-1: USB disconnect, device number 19 [ 331.030379][ T29] audit: type=1400 audit(1786195057.789:842): avc: denied { write } for pid=8678 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.124301][ T29] audit: type=1400 audit(1786195057.889:844): avc: denied { write } for pid=8682 comm="syz.5.690" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 331.180455][ T29] audit: type=1400 audit(1786195057.889:843): avc: denied { write } for pid=8682 comm="syz.5.690" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 331.223322][ T29] audit: type=1400 audit(1786195057.919:845): avc: denied { map } for pid=8682 comm="syz.5.690" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 331.406246][ T29] audit: type=1400 audit(1786195058.159:846): avc: denied { name_bind } for pid=8680 comm="syz.6.689" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 331.815206][ T5795] usb 5-1: USB disconnect, device number 39 [ 331.984813][ T29] audit: type=1400 audit(1786195058.748:847): avc: denied { append } for pid=8692 comm="syz.4.692" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 332.781481][ T8700] SELinux: security_context_str_to_sid (unconfkned_u) failed with errno=-22 [ 332.790753][ T5795] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 332.951939][ T5795] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 332.972436][ T5795] usb 5-1: can't read configurations, error -61 [ 333.130301][ T5795] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 333.325771][ T5795] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 333.366772][ T5795] usb 5-1: can't read configurations, error -61 [ 333.415434][ T5795] usb usb5-port1: attempt power cycle [ 333.800861][ T5795] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 334.584367][ T805] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 334.614272][ T5795] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 334.642249][ T5795] usb 5-1: can't read configurations, error -61 [ 335.732691][ T805] usb 3-1: device descriptor read/64, error -71 [ 335.802643][ T5795] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 335.862264][ T5799] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 335.985654][ T8730] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 336.009948][ T805] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 336.036307][ T5795] usb 5-1: device not accepting address 43, error -71 [ 336.058983][ T5795] usb usb5-port1: unable to enumerate USB device [ 336.151835][ T805] usb 3-1: device descriptor read/64, error -71 [ 336.282829][ T805] usb usb3-port1: attempt power cycle [ 336.446442][ T5799] usb 2-1: Using ep0 maxpacket: 8 [ 336.797590][ T5799] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 336.812882][ T805] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 336.813262][ T5799] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 336.830643][ T5799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.857717][ T5799] usb 2-1: config 0 descriptor?? [ 336.898942][ T805] usb 3-1: device descriptor read/8, error -71 [ 336.959749][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 336.959766][ T29] audit: type=1400 audit(1786195063.726:852): avc: denied { remount } for pid=8735 comm="syz.5.702" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 336.994828][ T143] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 337.016162][ T8734] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 337.058090][ T29] audit: type=1400 audit(1786195063.826:853): avc: denied { ioctl } for pid=8726 comm="syz.4.700" path="socket:[23382]" dev="sockfs" ino=23382 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 337.119875][ T5799] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 337.312969][ T9] usb 2-1: USB disconnect, device number 30 [ 337.319004][ C0] iowarrior 2-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 337.658165][ T8750] Bluetooth: MGMT ver 1.23 [ 338.030211][ T8760] 9p: Bad value for 'wfdno' [ 338.414253][ T8770] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 340.649558][ T29] audit: type=1400 audit(1786195067.404:854): avc: denied { write } for pid=8754 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.754422][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 340.971593][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 341.028907][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 341.124611][ T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 341.179127][ T9] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 341.262905][ T9] usb 5-1: Product: syz [ 341.318194][ T9] usb 5-1: Manufacturer: syz [ 341.380757][ T9] usb 5-1: SerialNumber: syz [ 341.461873][ T9] usb 5-1: config 0 descriptor?? [ 341.491125][ T8778] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 341.507834][ T29] audit: type=1400 audit(1786195068.274:855): avc: denied { write } for pid=8786 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.622419][ T8802] FAULT_INJECTION: forcing a failure. [ 341.622419][ T8802] name failslab, interval 1, probability 0, space 0, times 0 [ 341.696791][ T8802] CPU: 0 UID: 0 PID: 8802 Comm: syz.1.718 Not tainted syzkaller #0 PREEMPT(full) [ 341.696818][ T8802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 341.696828][ T8802] Call Trace: [ 341.696834][ T8802] [ 341.696841][ T8802] dump_stack_lvl+0x100/0x190 [ 341.696868][ T8802] should_fail_ex.cold+0x5/0xa [ 341.696893][ T8802] should_failslab+0xc2/0x120 [ 341.696916][ T8802] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 341.696937][ T8802] ? __alloc_skb+0x5b7/0x710 [ 341.696956][ T8802] ? __alloc_skb+0x140/0x710 [ 341.696978][ T8802] __alloc_skb+0x140/0x710 [ 341.696996][ T8802] ? __alloc_skb+0x5b7/0x710 [ 341.697014][ T8802] ? __pfx___alloc_skb+0x10/0x10 [ 341.697040][ T8802] netlink_alloc_large_skb+0x69/0x150 [ 341.697060][ T8802] netlink_sendmsg+0x680/0xda0 [ 341.697082][ T8802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.697102][ T8802] ? selinux_socket_sendmsg+0x198/0x2f0 [ 341.697132][ T8802] ____sys_sendmsg+0xa4d/0xbe0 [ 341.697157][ T8802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.697176][ T8802] ? __pfx_____sys_sendmsg+0x10/0x10 [ 341.697212][ T8802] ___sys_sendmsg+0x190/0x1e0 [ 341.697245][ T8802] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.697269][ T8802] ? __lock_acquire+0x49f/0x1a40 [ 341.697290][ T8802] ? get_pid_task+0x106/0x250 [ 341.697338][ T8802] __sys_sendmsg+0x160/0x210 [ 341.697360][ T8802] ? __pfx___sys_sendmsg+0x10/0x10 [ 341.697392][ T8802] do_syscall_64+0x115/0x870 [ 341.697411][ T8802] ? clear_bhb_loop+0x40/0x90 [ 341.697433][ T8802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.697450][ T8802] RIP: 0033:0x7ff22719de99 [ 341.697464][ T8802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.697479][ T8802] RSP: 002b:00007ff227fc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.697496][ T8802] RAX: ffffffffffffffda RBX: 00007ff227426090 RCX: 00007ff22719de99 [ 341.697507][ T8802] RDX: 0000000000000000 RSI: 0000200000003b40 RDI: 0000000000000005 [ 341.697517][ T8802] RBP: 00007ff227fc4090 R08: 0000000000000000 R09: 0000000000000000 [ 341.697527][ T8802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.697537][ T8802] R13: 00007ff227426128 R14: 00007ff227426090 R15: 00007fff1484b648 [ 341.697559][ T8802] [ 342.019055][ T8809] FAULT_INJECTION: forcing a failure. [ 342.019055][ T8809] name failslab, interval 1, probability 0, space 0, times 0 [ 342.031855][ T8809] CPU: 0 UID: 0 PID: 8809 Comm: syz.5.721 Not tainted syzkaller #0 PREEMPT(full) [ 342.031880][ T8809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 342.031890][ T8809] Call Trace: [ 342.031896][ T8809] [ 342.031903][ T8809] dump_stack_lvl+0x100/0x190 [ 342.031931][ T8809] should_fail_ex.cold+0x5/0xa [ 342.031954][ T8809] should_failslab+0xc2/0x120 [ 342.031979][ T8809] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 342.032001][ T8809] ? __alloc_skb+0x140/0x710 [ 342.032025][ T8809] __alloc_skb+0x140/0x710 [ 342.032044][ T8809] ? __alloc_skb+0x5b7/0x710 [ 342.032064][ T8809] ? __pfx___alloc_skb+0x10/0x10 [ 342.032083][ T8809] ? genl_rcv_msg+0x4be/0x800 [ 342.032110][ T8809] netlink_ack+0x117/0xb80 [ 342.032130][ T8809] ? __lock_acquire+0x49f/0x1a40 [ 342.032156][ T8809] netlink_rcv_skb+0x333/0x420 [ 342.032173][ T8809] ? __pfx_genl_rcv_msg+0x10/0x10 [ 342.032195][ T8809] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 342.032223][ T8809] ? netlink_deliver_tap+0x1ae/0xcc0 [ 342.032260][ T8809] genl_rcv+0x28/0x40 [ 342.032278][ T8809] netlink_unicast+0x585/0x850 [ 342.032300][ T8809] ? __pfx_netlink_unicast+0x10/0x10 [ 342.032325][ T8809] netlink_sendmsg+0x8b0/0xda0 [ 342.032347][ T8809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.032368][ T8809] ? selinux_socket_sendmsg+0x198/0x2f0 [ 342.032400][ T8809] ____sys_sendmsg+0xa4d/0xbe0 [ 342.032425][ T8809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.032444][ T8809] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.032483][ T8809] ___sys_sendmsg+0x190/0x1e0 [ 342.032512][ T8809] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.032538][ T8809] ? __lock_acquire+0x49f/0x1a40 [ 342.032559][ T8809] ? get_pid_task+0x106/0x250 [ 342.032615][ T8809] __sys_sendmsg+0x160/0x210 [ 342.032638][ T8809] ? __pfx___sys_sendmsg+0x10/0x10 [ 342.032673][ T8809] do_syscall_64+0x115/0x870 [ 342.032693][ T8809] ? clear_bhb_loop+0x40/0x90 [ 342.032715][ T8809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.032733][ T8809] RIP: 0033:0x7f808519de99 [ 342.032748][ T8809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.032764][ T8809] RSP: 002b:00007f80860cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.032781][ T8809] RAX: ffffffffffffffda RBX: 00007f8085425fa0 RCX: 00007f808519de99 [ 342.032792][ T8809] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 342.032802][ T8809] RBP: 00007f80860cc090 R08: 0000000000000000 R09: 0000000000000000 [ 342.032813][ T8809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.032822][ T8809] R13: 00007f8085426038 R14: 00007f8085425fa0 R15: 00007ffce2f3cdd8 [ 342.032846][ T8809] [ 343.071680][ T8818] bond1: entered allmulticast mode [ 343.081569][ T8825] CIFS: enabling forcegid mount option implicitly because gid= option is specified [ 343.104522][ T8829] CIFS: enabling forcegid mount option implicitly because gid= option is specified [ 343.114743][ T8829] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 343.141665][ T8829] CIFS mount error: No usable UNC path provided in device string! [ 343.141665][ T8829] [ 343.152824][ T8829] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 343.162109][ T8825] CIFS mount error: No usable UNC path provided in device string! [ 343.162109][ T8825] [ 343.190356][ T8825] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 343.272481][ T8834] FAULT_INJECTION: forcing a failure. [ 343.272481][ T8834] name failslab, interval 1, probability 0, space 0, times 0 [ 343.297989][ T8834] CPU: 0 UID: 0 PID: 8834 Comm: syz.6.726 Not tainted syzkaller #0 PREEMPT(full) [ 343.298014][ T8834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 343.298024][ T8834] Call Trace: [ 343.298029][ T8834] [ 343.298035][ T8834] dump_stack_lvl+0x100/0x190 [ 343.298060][ T8834] should_fail_ex.cold+0x5/0xa [ 343.298083][ T8834] should_failslab+0xc2/0x120 [ 343.298106][ T8834] kmem_cache_alloc_noprof+0x91/0x6a0 [ 343.298127][ T8834] ? trace_kmem_cache_alloc+0xdd/0x100 [ 343.298163][ T8834] ? security_file_alloc+0x34/0x2c0 [ 343.298186][ T8834] security_file_alloc+0x34/0x2c0 [ 343.298204][ T8834] init_file+0x95/0x480 [ 343.298228][ T8834] alloc_empty_backing_file+0x50/0x150 [ 343.298252][ T8834] backing_tmpfile_open+0x7f/0x130 [ 343.298281][ T8834] ovl_tmpfile+0x3c0/0x9c0 [ 343.298304][ T8834] ? __pfx_ovl_tmpfile+0x10/0x10 [ 343.298325][ T8834] ? _raw_spin_unlock+0x28/0x50 [ 343.298356][ T8834] vfs_tmpfile+0x4d7/0xbb0 [ 343.298381][ T8834] path_openat+0x10b6/0x4280 [ 343.298404][ T8834] ? kasan_save_track+0x14/0x30 [ 343.298423][ T8834] ? __kasan_slab_alloc+0x89/0x90 [ 343.298442][ T8834] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 343.298462][ T8834] ? do_sys_openat2+0xc7/0x1e0 [ 343.298482][ T8834] ? __x64_sys_open+0xfe/0x1d0 [ 343.298500][ T8834] ? do_syscall_64+0x115/0x870 [ 343.298526][ T8834] ? __pfx_path_openat+0x10/0x10 [ 343.298552][ T8834] do_file_open+0x20e/0x430 [ 343.298569][ T8834] ? __lock_acquire+0x49f/0x1a40 [ 343.298592][ T8834] ? __pfx_do_file_open+0x10/0x10 [ 343.298628][ T8834] ? _raw_spin_unlock+0x28/0x50 [ 343.298654][ T8834] ? alloc_fd+0x471/0x7a0 [ 343.298678][ T8834] do_sys_openat2+0x10f/0x1e0 [ 343.298699][ T8834] ? __pfx_do_sys_openat2+0x10/0x10 [ 343.298723][ T8834] ? __fget_files+0x21f/0x3d0 [ 343.298745][ T8834] __x64_sys_open+0xfe/0x1d0 [ 343.298774][ T8834] ? __pfx___x64_sys_open+0x10/0x10 [ 343.298795][ T8834] ? ksys_write+0x1ac/0x250 [ 343.298833][ T8834] do_syscall_64+0x115/0x870 [ 343.298851][ T8834] ? clear_bhb_loop+0x40/0x90 [ 343.298871][ T8834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.298889][ T8834] RIP: 0033:0x7f24b719de99 [ 343.298904][ T8834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.298920][ T8834] RSP: 002b:00007f24b8120028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 343.298936][ T8834] RAX: ffffffffffffffda RBX: 00007f24b7425fa0 RCX: 00007f24b719de99 [ 343.298948][ T8834] RDX: 0000000000000000 RSI: 0000000000517002 RDI: 00002000000000c0 [ 343.298958][ T8834] RBP: 00007f24b8120090 R08: 0000000000000000 R09: 0000000000000000 [ 343.298968][ T8834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 343.298977][ T8834] R13: 00007f24b7426038 R14: 00007f24b7425fa0 R15: 00007ffe8ddd0b88 [ 343.299002][ T8834] [ 343.624309][ T29] audit: type=1400 audit(1786195070.383:856): avc: denied { write } for pid=8813 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 343.649195][ T9] usb 5-1: USB disconnect, device number 44 [ 343.745628][ T5739] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 343.803021][ T29] audit: type=1400 audit(1786195070.562:857): avc: denied { write } for pid=8845 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 343.926637][ T5739] usb 2-1: Using ep0 maxpacket: 8 [ 343.941910][ T5739] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 344.032035][ T5739] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 344.097341][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 344.225980][ T5799] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 344.282601][ T5739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.303281][ T9] usb 5-1: no configurations [ 344.313244][ T9] usb 5-1: can't read configurations, error -22 [ 344.321966][ T5739] usb 2-1: config 0 descriptor?? [ 344.416410][ T5799] usb 7-1: Using ep0 maxpacket: 32 [ 344.422717][ T5799] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 344.431892][ T5799] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.442335][ T5799] usb 7-1: config 0 descriptor?? [ 344.476026][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 344.596559][ T5739] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 344.659322][ T5799] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 344.669194][ T9] usb 5-1: no configurations [ 344.673830][ T9] usb 5-1: can't read configurations, error -22 [ 344.685267][ T5799] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 344.695377][ T9] usb usb5-port1: attempt power cycle [ 344.703085][ T5799] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 344.712943][ T5799] usb 7-1: media controller created [ 344.727004][ T5799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 344.870234][ T29] audit: type=1400 audit(1786195071.632:858): avc: denied { ioctl } for pid=8850 comm="syz.6.729" path="socket:[24584]" dev="sockfs" ino=24584 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 344.902709][ T8851] xt_HMARK: spi-set and port-set can't be combined [ 344.974041][ T29] audit: type=1400 audit(1786195071.702:859): avc: denied { bind } for pid=8850 comm="syz.6.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 345.068037][ T8830] netlink: 28 bytes leftover after parsing attributes in process `syz.1.723'. [ 345.575654][ T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 345.745694][ T5799] az6027: usb out operation failed. (-71) [ 345.751908][ T5799] az6027: usb out operation failed. (-71) [ 345.757750][ T5799] stb0899_attach: Driver disabled by Kconfig [ 345.763764][ T5799] az6027: no front-end attached [ 345.763764][ T5799] [ 345.771282][ T5799] az6027: usb out operation failed. (-71) [ 345.777072][ T5799] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 345.786080][ T5799] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input21 [ 345.800126][ T9] usb 5-1: no configurations [ 345.804788][ T9] usb 5-1: can't read configurations, error -22 [ 345.817107][ T5799] dvb-usb: schedule remote query interval to 400 msecs. [ 345.824131][ T5799] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 345.839902][ T5799] usb 7-1: USB disconnect, device number 20 [ 345.946750][ T9] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 345.979905][ T9] usb 5-1: no configurations [ 345.987934][ T9] usb 5-1: can't read configurations, error -22 [ 345.998897][ T9] usb usb5-port1: unable to enumerate USB device [ 346.126797][ T46] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 346.147334][ T9] usb 2-1: USB disconnect, device number 31 [ 346.216014][ T5799] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 346.319616][ T46] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 346.341896][ T46] usb 6-1: config 1 has no interface number 0 [ 346.360224][ T46] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 346.390341][ T46] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 346.419113][ T46] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 346.444729][ T46] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 346.481894][ T46] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 346.509973][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.528322][ T9] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 346.543292][ T46] usb 6-1: Product: syz [ 346.555682][ T46] usb 6-1: Manufacturer: syz [ 346.573861][ T46] usb 6-1: SerialNumber: syz [ 346.595352][ T8874] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 346.699346][ T9] usb 2-1: config 0 has an invalid interface number: 205 but max is 0 [ 346.716215][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.747212][ T9] usb 2-1: config 0 has no interface number 0 [ 346.763503][ T9] usb 2-1: config 0 interface 205 has no altsetting 0 [ 346.792526][ T9] usb 2-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 346.833412][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.872225][ T9] usb 2-1: Product: syz [ 346.889974][ T9] usb 2-1: Manufacturer: syz [ 346.915776][ T9] usb 2-1: SerialNumber: syz [ 346.933383][ T8874] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 346.951810][ T9] usb 2-1: config 0 descriptor?? [ 346.964016][ T8874] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 346.981550][ T9] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 347.007379][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 347.065231][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 347.113569][ T9] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 347.165437][ T9] usb 2-1: media controller created [ 347.281252][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 347.301620][ T8882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.318503][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 347.328532][ T8882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.760370][ T9] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 347.772426][ T8894] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 347.781773][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input22 [ 347.798112][ T8882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.808366][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 347.827773][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 347.838560][ T8882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.852890][ T9] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 347.933619][ T9] usb 2-1: USB disconnect, device number 32 [ 348.065246][ T8874] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 348.097948][ T8874] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 348.122942][ T46] cdc_ncm 6-1:1.1: bind() failure [ 348.147852][ T805] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 348.218511][ T9] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 348.351828][ T805] usb 3-1: Using ep0 maxpacket: 32 [ 348.363541][ T29] audit: type=1400 audit(1786195075.120:860): avc: denied { ioctl } for pid=8900 comm="syz.4.744" path="socket:[24636]" dev="sockfs" ino=24636 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 348.402225][ T805] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 349.254884][ T805] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 351.198912][ T805] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 351.207266][ T805] usb 3-1: Product: syz [ 351.211538][ T805] usb 3-1: Manufacturer: syz [ 351.216217][ T805] usb 3-1: SerialNumber: syz [ 351.223581][ T805] usb 3-1: config 0 descriptor?? [ 351.229924][ T805] usb 3-1: can't set config #0, error -71 [ 351.237471][ T805] usb 3-1: USB disconnect, device number 40 [ 351.506483][ T5799] usb 6-1: USB disconnect, device number 27 [ 351.579723][ T5614] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 351.709745][ T805] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 351.731171][ T5614] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 351.740617][ T5614] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.751487][ T5614] usb 5-1: config 0 descriptor?? [ 351.767077][ T5614] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 351.872988][ T805] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 351.883379][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.892085][ T805] usb 2-1: Product: syz [ 351.988280][ T5799] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 352.029833][ T805] usb 2-1: Manufacturer: syz [ 352.040607][ T805] usb 2-1: SerialNumber: syz [ 352.069190][ T805] usb 2-1: config 0 descriptor?? [ 352.094584][ T805] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 033 [ 352.132832][ T8926] hfsplus: unable to find HFS+ superblock [ 352.516273][ T5614] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 352.605033][ T5799] usb 6-1: config 7 has an invalid interface number: 223 but max is 0 [ 352.846839][ T5799] usb 6-1: config 7 has no interface number 0 [ 352.888121][ T5799] usb 6-1: config 7 interface 223 altsetting 7 has an invalid endpoint descriptor of length 2, skipping [ 352.921032][ T5799] usb 6-1: config 7 interface 223 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 352.981247][ T8918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.989952][ T8918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.037540][ T5799] usb 6-1: config 7 interface 223 has no altsetting 0 [ 353.045709][ T5614] cpia1 5-1:0.0: only firmware version 1 is supported (got: 55) [ 353.070139][ T5799] usb 6-1: New USB device found, idVendor=1199, idProduct=0023, bcdDevice=58.16 [ 353.087202][ T5799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.099176][ T5799] usb 6-1: Product: syz [ 353.105781][ T5799] usb 6-1: Manufacturer: syz [ 353.112752][ T5799] usb 6-1: SerialNumber: syz [ 353.123702][ T805] (null): failure reading functionality [ 353.147528][ T805] i2c i2c-1: failure reading functionality [ 353.167887][ T805] i2c i2c-1: connected i2c-tiny-usb device [ 353.183180][ T805] usb 2-1: USB disconnect, device number 33 [ 354.218832][ T29] audit: type=1400 audit(1786195080.428:861): avc: denied { execute } for pid=8929 comm="syz.2.751" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 354.280275][ T5799] sierra 6-1:7.223: Sierra USB modem converter detected [ 354.308872][ T5795] usb 5-1: USB disconnect, device number 49 [ 354.329047][ T5799] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 354.669364][ T5799] usb 6-1: USB disconnect, device number 28 [ 354.738131][ T5799] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 354.751655][ T5799] sierra 6-1:7.223: device disconnected [ 355.491623][ T805] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 355.853917][ T805] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 355.943694][ T805] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 355.960750][ T29] audit: type=1400 audit(1786195082.716:862): avc: denied { write } for pid=8943 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.991454][ T5799] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 356.023998][ T805] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 356.074637][ T805] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 356.128783][ T29] audit: type=1400 audit(1786195082.886:863): avc: denied { write } for pid=8964 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.169664][ T805] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 356.190302][ T5799] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 356.210396][ T805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.211189][ T5799] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.240990][ T805] usb 5-1: Product: syz [ 356.258242][ T805] usb 5-1: Manufacturer: syz [ 356.266041][ T29] audit: type=1400 audit(1786195083.026:864): avc: denied { read write } for pid=8962 comm="syz.1.759" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 356.296389][ T805] usb 5-1: SerialNumber: syz [ 356.313103][ T8946] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 356.324024][ T5799] usb 6-1: config 0 descriptor?? [ 356.354377][ T5799] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 356.363851][ T29] audit: type=1400 audit(1786195083.026:865): avc: denied { open } for pid=8962 comm="syz.1.759" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 356.439743][ T29] audit: type=1326 audit(1786195083.196:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8971 comm="syz.6.761" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b719de99 code=0x7ffc0000 [ 356.544564][ T8946] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 356.620920][ T29] audit: type=1326 audit(1786195083.196:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8971 comm="syz.6.761" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b719de99 code=0x7ffc0000 [ 356.648059][ T29] audit: type=1326 audit(1786195083.226:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8971 comm="syz.6.761" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f24b719de99 code=0x7ffc0000 [ 356.702127][ T29] audit: type=1326 audit(1786195083.226:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8971 comm="syz.6.761" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b719de99 code=0x7ffc0000 [ 356.820381][ T29] audit: type=1326 audit(1786195083.226:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8971 comm="syz.6.761" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b719de99 code=0x7ffc0000 [ 357.110487][ T5799] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 357.138122][ T5799] gspca_cpia1: usb_control_msg 01, error -32 [ 357.389632][ T5799] gspca_cpia1: usb_control_msg 02, error -71 [ 357.413876][ T5799] gspca_cpia1: usb_control_msg 05, error -71 [ 357.433925][ T5799] cpia1 6-1:0.0: unexpected systemstate: 00 [ 357.449871][ T5799] usb 6-1: USB disconnect, device number 29 [ 357.702699][ T5739] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 357.913369][ T5739] usb 7-1: no configurations [ 357.918152][ T5739] usb 7-1: can't read configurations, error -22 [ 358.052794][ T5739] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 358.921467][ T5739] usb 7-1: no configurations [ 358.926360][ T5739] usb 7-1: can't read configurations, error -22 [ 358.932883][ T5739] usb usb7-port1: attempt power cycle [ 359.253961][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 359.253998][ T29] audit: type=1400 audit(1786195086.015:889): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=42416 daddr=10.128.0.6 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 359.293806][ T5739] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 359.334915][ T5739] usb 7-1: no configurations [ 359.342060][ T5739] usb 7-1: can't read configurations, error -22 [ 359.358207][ T8989] lo speed is unknown, defaulting to 1000 [ 359.484244][ T5795] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 359.493458][ T5739] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 359.527095][ T5739] usb 7-1: no configurations [ 359.534241][ T5739] usb 7-1: can't read configurations, error -22 [ 359.564957][ T5739] usb usb7-port1: unable to enumerate USB device [ 359.658343][ T5795] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 359.681903][ T5795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.697868][ T5795] usb 2-1: Product: syz [ 359.707342][ T5795] usb 2-1: Manufacturer: syz [ 359.717190][ T5795] usb 2-1: SerialNumber: syz [ 359.764102][ T5795] usb 2-1: config 0 descriptor?? [ 359.780204][ T5795] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 034 [ 360.553562][ T9010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.606658][ T805] cdc_ncm 5-1:1.0: SET_NTB_FORMAT failed [ 360.633738][ T805] cdc_ncm 5-1:1.0: bind() failure [ 360.645640][ T9010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.697211][ T805] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 360.775268][ T805] cdc_ncm 5-1:1.1: bind() failure [ 361.310687][ T29] audit: type=1400 audit(1786195088.064:890): avc: denied { mount } for pid=9016 comm="syz.4.770" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 361.318065][ T9018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.770'. [ 361.375987][ T805] usb 5-1: USB disconnect, device number 50 [ 361.501697][ T9021] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 361.635699][ T5795] (null): failure reading functionality [ 361.790242][ T5795] i2c i2c-1: failure reading functionality [ 362.435582][ T5795] i2c i2c-1: connected i2c-tiny-usb device [ 362.589481][ T5795] usb 2-1: USB disconnect, device number 34 [ 363.296796][ T9035] netlink: 12 bytes leftover after parsing attributes in process `syz.6.774'. [ 363.605774][ T9029] can: request_module (can-proto-3) failed. [ 364.716102][ T29] audit: type=1400 audit(1786195091.462:891): avc: denied { ioctl } for pid=9052 comm="syz.6.777" path="socket:[24137]" dev="sockfs" ino=24137 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 364.796172][ T5739] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 364.956219][ T5739] usb 6-1: Using ep0 maxpacket: 8 [ 364.966937][ T9053] Mount JFS Failure: -5 [ 364.971246][ T9053] jfs_mount failed w/return code = -5 [ 364.983343][ T5739] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 365.015299][ T5739] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 365.029111][ T5739] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.083601][ T5739] usb 6-1: config 0 descriptor?? [ 365.276387][ T5799] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 365.314256][ T5739] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 365.346492][ T805] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 365.416432][ T5799] usb 5-1: device descriptor read/64, error -71 [ 365.518921][ T805] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 365.546689][ T805] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 365.562792][ T805] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 365.577312][ T805] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 365.590067][ T805] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 365.604132][ T805] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 365.608818][ T9065] tipc: Started in network mode [ 365.612749][ T805] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 365.617559][ T9065] tipc: Node identity 1664d0519f4b, cluster identity 4711 [ 365.630920][ T805] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 365.637522][ T9065] tipc: Enabled bearer , priority 0 [ 365.649592][ T805] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 365.657318][ T5799] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 365.675561][ T9069] syzkaller0: entered promiscuous mode [ 365.682113][ T9069] syzkaller0: entered allmulticast mode [ 365.698645][ T805] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 365.729421][ T9065] tipc: Resetting bearer [ 365.731733][ T805] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 365.745540][ T9064] tipc: Resetting bearer [ 365.797797][ T9050] netlink: 28 bytes leftover after parsing attributes in process `syz.5.776'. [ 365.877633][ T9073] netlink: 'syz.6.781': attribute type 11 has an invalid length. [ 365.893321][ T5799] usb 5-1: device descriptor read/64, error -71 [ 366.259540][ T9064] tipc: Disabling bearer [ 366.265776][ T805] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 366.277500][ T805] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 366.290878][ T805] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 366.303180][ T805] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 366.307295][ T5799] usb usb5-port1: attempt power cycle [ 366.323966][ T5711] usb 6-1: USB disconnect, device number 30 [ 366.332809][ T805] usb 2-1: string descriptor 0 read error: -22 [ 366.341304][ T805] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 366.356519][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.601658][ T805] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 367.163723][ T9056] syz.1.778 (9056): drop_caches: 2 [ 367.168974][ T5799] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 367.244435][ T805] usb 2-1: USB disconnect, device number 35 [ 367.869821][ T5799] usb 5-1: device descriptor read/8, error -71 [ 368.227861][ T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 368.319471][ T5739] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 369.842203][ T48] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 369.858671][ T9] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 369.873045][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.888086][ T9] usb 3-1: Product: syz [ 369.902391][ T9] usb 3-1: Manufacturer: syz [ 369.952609][ T5739] usb 7-1: Using ep0 maxpacket: 32 [ 370.967525][ T5739] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 370.978440][ T9] usb 3-1: SerialNumber: syz [ 370.988429][ T5739] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 371.006307][ T9] usb 3-1: config 0 descriptor?? [ 371.019370][ T5739] usb 7-1: config 0 interface 0 has no altsetting 0 [ 371.043027][ T5739] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 371.052217][ T5739] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.063831][ T5739] usb 7-1: Product: syz [ 371.070517][ T5739] usb 7-1: Manufacturer: syz [ 371.077210][ T5739] usb 7-1: SerialNumber: syz [ 371.088949][ T9] usb 3-1: can't set config #0, error -71 [ 371.258015][ T9] usb 3-1: USB disconnect, device number 41 [ 371.282227][ T5739] usb 7-1: config 0 descriptor?? [ 371.334099][ T5739] usb 7-1: can't set config #0, error -71 [ 371.357026][ T5739] usb 7-1: USB disconnect, device number 25 [ 371.438099][ T29] audit: type=1400 audit(1786195098.179:892): avc: denied { create } for pid=9109 comm="syz.6.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 372.089923][ T9] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 372.251849][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 372.265202][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 372.419926][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 372.431319][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.451992][ T9] usb 5-1: config 0 descriptor?? [ 372.897547][ T9] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 373.392024][ T9127] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 373.444088][ T9114] netlink: 28 bytes leftover after parsing attributes in process `syz.4.796'. [ 373.464527][ T29] audit: type=1400 audit(1786195100.148:893): avc: denied { relabelto } for pid=9123 comm="syz.5.797" name="161" dev="tmpfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 373.641917][ T29] audit: type=1400 audit(1786195100.148:894): avc: denied { associate } for pid=9123 comm="syz.5.797" name="161" dev="tmpfs" ino=856 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 374.141902][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 375.041060][ T5739] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 375.115006][ T805] usb 5-1: USB disconnect, device number 55 [ 375.143102][ T9112] netlink: 24 bytes leftover after parsing attributes in process `syz.6.795'. [ 375.302713][ T9112] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 375.317053][ T5739] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 375.341091][ T5739] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.384553][ T5739] usb 6-1: config 0 descriptor?? [ 375.405164][ T5739] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 376.742182][ T5739] gspca_cpia1: usb_control_msg 05, error -110 [ 377.315774][ T5739] gspca_cpia1: usb_control_msg 02, error -32 [ 377.331463][ T5739] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 377.423619][ T805] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 377.535069][ T5739] usb 6-1: USB disconnect, device number 31 [ 377.647450][ T805] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 377.684821][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.694817][ T805] usb 2-1: Product: syz [ 377.699312][ T805] usb 2-1: Manufacturer: syz [ 377.705156][ T805] usb 2-1: SerialNumber: syz [ 377.729845][ T805] usb 2-1: config 0 descriptor?? [ 377.774675][ T805] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 036 [ 377.799185][ T9146] netlink: 24 bytes leftover after parsing attributes in process `syz.2.800'. [ 377.846751][ T9146] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 377.958277][ T29] audit: type=1400 audit(1786195104.705:895): avc: denied { remount } for pid=9161 comm="syz.6.808" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 378.362499][ T9166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.373281][ T9166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.638340][ T805] (null): failure reading functionality [ 378.648522][ T29] audit: type=1400 audit(1786195105.385:896): avc: denied { read } for pid=9168 comm="syz.6.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 378.684092][ T805] i2c i2c-1: failure reading functionality [ 378.716946][ T805] i2c i2c-1: connected i2c-tiny-usb device [ 378.743421][ T805] usb 2-1: USB disconnect, device number 36 [ 378.792601][ T29] audit: type=1400 audit(1786195105.535:897): avc: denied { read } for pid=9168 comm="syz.6.809" dev="sockfs" ino=24491 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 379.237167][ T9] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 379.363505][ T805] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 379.403407][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 379.414151][ T9] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 379.424759][ T9] usb 5-1: config 0 has no interface number 0 [ 379.436946][ T9] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 379.470705][ T9] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 379.508895][ T9] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 379.541688][ T9] usb 5-1: config 0 interface 196 has no altsetting 0 [ 379.553641][ T805] usb 6-1: Using ep0 maxpacket: 8 [ 379.574761][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 379.576475][ T805] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 379.603559][ T805] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 379.616416][ T805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.617867][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.645872][ T805] usb 6-1: config 0 descriptor?? [ 379.648819][ T29] audit: type=1400 audit(1786195106.395:898): avc: denied { write } for pid=9186 comm="syz.1.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 379.682682][ T9] usb 5-1: Product: syz [ 379.703556][ T9] usb 5-1: Manufacturer: syz [ 379.711640][ T9] usb 5-1: SerialNumber: syz [ 379.739747][ T9] usb 5-1: config 0 descriptor?? [ 379.747353][ T9171] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 380.298574][ T805] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 380.535021][ T9180] netlink: 28 bytes leftover after parsing attributes in process `syz.5.812'. [ 381.102174][ T9199] SET target dimension over the limit! [ 381.270903][ T9] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -110 [ 382.250025][ T5795] usb 6-1: USB disconnect, device number 32 [ 382.735724][ T9] ipheth 5-1:0.196: probe with driver ipheth failed with error -110 [ 382.794832][ T9] usb 5-1: USB disconnect, device number 56 [ 382.859130][ T29] audit: type=1400 audit(1786195109.593:899): avc: denied { read } for pid=9203 comm="syz.5.819" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 383.036440][ T5739] IPVS: starting estimator thread 0... [ 383.990398][ T29] audit: type=1400 audit(1786195110.732:900): avc: denied { read } for pid=9207 comm="syz.4.822" path="socket:[24536]" dev="sockfs" ino=24536 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 385.096905][ T805] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 385.176695][ T9213] IPVS: using max 51 ests per chain, 122400 per kthread [ 386.142072][ T805] usb 7-1: unable to read config index 0 descriptor/all [ 386.573011][ T805] usb 7-1: can't read configurations, error -71 [ 386.671177][ T9234] SELinux: policydb magic number 0x1fc000 does not match expected magic number 0xf97cff8c [ 386.698679][ T9234] SELinux: failed to load policy [ 386.997570][ T805] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 387.097371][ T5712] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 387.114622][ T9246] overlayfs: overlapping lowerdir path [ 387.158593][ T9246] overlayfs: conflicting lowerdir path [ 387.187706][ T805] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 387.224061][ T805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.251858][ T805] usb 7-1: Product: syz [ 387.262454][ T805] usb 7-1: Manufacturer: syz [ 387.269337][ T5712] usb 3-1: Using ep0 maxpacket: 8 [ 387.287103][ T805] usb 7-1: SerialNumber: syz [ 387.296350][ T5712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 387.320391][ T5712] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 387.332603][ T805] usb 7-1: config 0 descriptor?? [ 387.356540][ T805] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 027 [ 387.367451][ T5712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.385890][ T5712] usb 3-1: config 0 descriptor?? [ 387.560304][ T9] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 387.608368][ T5799] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 387.687669][ T5739] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 387.692434][ T5712] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 387.759052][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 387.803065][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 387.825154][ T5799] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 387.844313][ T9] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 387.854348][ T5799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.862553][ T5739] usb 2-1: Using ep0 maxpacket: 32 [ 387.869914][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 387.928092][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 387.942977][ T5739] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 387.955234][ T9263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.966119][ T9263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.976409][ T5799] usb 5-1: config 0 descriptor?? [ 388.036640][ T9] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 388.074876][ T5739] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 388.125634][ T9240] netlink: 28 bytes leftover after parsing attributes in process `syz.2.829'. [ 388.140757][ T5799] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 388.142730][ T5712] usb 3-1: USB disconnect, device number 42 [ 388.146818][ T5739] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 388.146842][ T5739] usb 2-1: Product: syz [ 388.146856][ T5739] usb 2-1: Manufacturer: syz [ 388.146871][ T5739] usb 2-1: SerialNumber: syz [ 388.148390][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.243063][ T9] usb 6-1: Product: syz [ 388.305739][ T5739] usb 2-1: config 0 descriptor?? [ 388.358514][ T9260] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 388.401223][ T9] usb 6-1: Manufacturer: syz [ 388.417686][ T9] usb 6-1: SerialNumber: syz [ 388.443770][ T805] (null): failure reading functionality [ 388.458529][ T805] i2c i2c-1: failure reading functionality [ 388.467040][ T805] i2c i2c-1: connected i2c-tiny-usb device [ 388.477115][ T805] usb 7-1: USB disconnect, device number 27 [ 388.559918][ T5799] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 388.695614][ T9] usb 6-1: USB disconnect, device number 33 [ 388.769151][ T5799] gspca_cpia1: usb_control_msg 01, error -32 [ 388.785389][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 389.010922][ T5799] gspca_cpia1: usb_control_msg 02, error -71 [ 389.023828][ T5799] gspca_cpia1: usb_control_msg 05, error -71 [ 389.319789][ T5799] cpia1 5-1:0.0: unexpected systemstate: 00 [ 389.365059][ T5799] usb 5-1: USB disconnect, device number 57 [ 389.662789][ T9276] tmpfs: Unknown parameter 'grpquota_b' [ 389.911775][ T29] audit: type=1400 audit(1786195116.639:901): avc: denied { create } for pid=9277 comm="syz.5.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 389.942056][ T5712] usb 2-1: USB disconnect, device number 37 [ 389.985766][ T9281] netlink: 28 bytes leftover after parsing attributes in process `syz.6.843'. [ 390.095499][ T9281] netlink: 252 bytes leftover after parsing attributes in process `syz.6.843'. [ 391.401103][ T5799] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 391.592428][ T5799] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.638446][ T5739] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 391.754565][ T5799] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 391.865927][ T5799] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 391.928353][ T5739] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.097602][ T5799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.125874][ T5739] usb 3-1: config 0 has no interfaces? [ 392.139927][ T5799] usb 5-1: Product: syz [ 392.155843][ T5739] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 392.168602][ T5799] usb 5-1: Manufacturer: syz [ 392.191833][ T5799] usb 5-1: SerialNumber: syz [ 392.214541][ T5739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.251231][ T5799] usb 5-1: config 0 descriptor?? [ 392.257825][ T5739] usb 3-1: Product: syz [ 392.275236][ T5739] usb 3-1: Manufacturer: syz [ 392.291062][ T5739] usb 3-1: SerialNumber: syz [ 392.329183][ T5739] usb 3-1: config 0 descriptor?? [ 392.488806][ T9317] syz.1.852 (9317): drop_caches: 2 [ 392.576998][ T5712] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 393.726778][ T5712] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 393.740745][ T5712] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.751035][ T5712] usb 7-1: Product: syz [ 393.757293][ T5712] usb 7-1: Manufacturer: syz [ 394.223016][ T5712] usb 7-1: SerialNumber: syz [ 394.293269][ T805] usb 5-1: USB disconnect, device number 58 [ 394.303095][ T5712] usb 7-1: config 0 descriptor?? [ 394.356530][ T9323] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 394.431122][ T5712] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 028 [ 394.530286][ T5739] usb 3-1: USB disconnect, device number 43 [ 395.441714][ T5712] (null): error -EIO: failure setting delay to 10us [ 395.459078][ T5712] i2c-tiny-usb 7-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 395.486087][ T5712] usb 7-1: USB disconnect, device number 28 [ 395.579912][ T9339] tmpfs: Unknown parameter 'grpquota_b' [ 395.644223][ T9337] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 398.503910][ T9367] xt_hashlimit: size too large, truncated to 1048576 [ 398.603257][ T29] audit: type=1400 audit(1786195125.325:902): avc: denied { getattr } for pid=9366 comm="syz.5.867" path="pid:[4026533918]" dev="nsfs" ino=4026533918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 399.323693][ T5712] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 399.471209][ T9382] xt_hashlimit: size too large, truncated to 1048576 [ 399.499595][ T5712] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 399.520349][ T5712] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.544323][ T5712] usb 7-1: Product: syz [ 399.551922][ T5712] usb 7-1: Manufacturer: syz [ 399.561724][ T5712] usb 7-1: SerialNumber: syz [ 399.592382][ T5712] usb 7-1: config 0 descriptor?? [ 399.639359][ T5712] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 029 [ 399.653947][ T9385] vxcan3: entered promiscuous mode [ 399.679229][ T9385] vxcan3: entered allmulticast mode [ 399.839384][ T9264] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 399.953739][ T9394] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 400.105014][ T805] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 400.441957][ T9396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.453531][ T9396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.771114][ T9264] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.995495][ T9264] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 401.211218][ T805] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 401.353608][ T805] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 401.378563][ T5712] (null): failure reading functionality [ 401.389278][ T9264] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 401.415247][ T805] usb 3-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 401.439541][ T9264] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.448185][ T5712] i2c i2c-1: failure reading functionality [ 401.460216][ T805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 401.471702][ T5712] i2c i2c-1: connected i2c-tiny-usb device [ 401.478187][ T9264] usb 5-1: Product: syz [ 401.488680][ T805] usb 3-1: Product: syz [ 401.493041][ T9264] usb 5-1: Manufacturer: syz [ 401.498685][ T5712] usb 7-1: USB disconnect, device number 29 [ 401.505694][ T805] usb 3-1: Manufacturer: syz [ 401.510754][ T9264] usb 5-1: SerialNumber: syz [ 401.533696][ T9264] usb 5-1: config 0 descriptor?? [ 401.548859][ T9392] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 401.558722][ T9392] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 401.570716][ T805] usb_debug 3-1:1.0: debug converter detected [ 401.579403][ T805] usb 3-1: debug converter now attached to ttyUSB0 [ 401.666340][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 401.679338][ T5739] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 401.689930][ T9402] netlink: 'syz.1.878': attribute type 1 has an invalid length. [ 401.718042][ T9402] bond2: entered promiscuous mode [ 401.725257][ T9402] bond2: entered allmulticast mode [ 401.731983][ T9402] 8021q: adding VLAN 0 to HW filter on device bond2 [ 402.229674][ T5739] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 402.238547][ T9405] erspan2: entered allmulticast mode [ 402.247085][ T5739] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.268480][ T9405] bond2: (slave erspan2): making interface the new active one [ 402.276182][ T5739] usb 6-1: config 0 has no interface number 0 [ 402.283161][ T5739] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 402.302668][ T9405] erspan2: entered promiscuous mode [ 402.310463][ T5739] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 402.333831][ T9405] bond2: (slave erspan2): Enslaving as an active interface with an up link [ 402.346357][ T5739] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 402.400801][ T5739] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 402.434550][ T9408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.455285][ T5739] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.475201][ T5712] usb 5-1: USB disconnect, device number 59 [ 402.483642][ T5739] usb 6-1: Product: syz [ 402.502591][ T5739] usb 6-1: Manufacturer: syz [ 402.517120][ T5739] usb 6-1: SerialNumber: syz [ 402.529720][ T9408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.550753][ T5739] usb 6-1: config 0 descriptor?? [ 402.644116][ T9414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.881'. [ 402.755643][ T9414] input: syz1 as /devices/virtual/input/input24 [ 402.970795][ T9422] netlink: 'syz.1.882': attribute type 4 has an invalid length. [ 404.613931][ T9400] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 404.689435][ T29] audit: type=1400 audit(1786195131.402:903): avc: denied { view } for pid=9436 comm="syz.6.885" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 404.707285][ T5739] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.117/input/input23 [ 404.734637][ T5614] usb 3-1: USB disconnect, device number 44 [ 404.787217][ T5614] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 404.829809][ T5614] usb_debug 3-1:1.0: device disconnected [ 404.836428][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.886'. [ 405.450785][ T9264] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 405.465042][ T9448] netlink: 36 bytes leftover after parsing attributes in process `syz.6.889'. [ 405.502830][ T5739] usb 6-1: USB disconnect, device number 34 [ 405.553040][ T5614] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 405.766384][ T9264] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 405.789989][ T5799] IPVS: starting estimator thread 0... [ 405.826418][ T5614] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 405.846655][ T5614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.857426][ T5614] usb 2-1: Product: syz [ 405.861722][ T5614] usb 2-1: Manufacturer: syz [ 405.861795][ T9264] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.957219][ T9457] IPVS: using max 56 ests per chain, 134400 per kthread [ 405.983025][ T5614] usb 2-1: SerialNumber: syz [ 406.001007][ T9264] usb 5-1: Product: syz [ 406.119541][ T9264] usb 5-1: Manufacturer: syz [ 406.125197][ T9264] usb 5-1: SerialNumber: syz [ 406.136038][ T9264] usb 5-1: config 0 descriptor?? [ 406.158998][ T9264] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 060 [ 406.222301][ T9461] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 406.230536][ T29] audit: type=1400 audit(1786195132.951:904): avc: denied { mounton } for pid=9458 comm="syz.6.891" path="/111/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 407.096463][ T9461] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 407.329389][ T9439] netlink: 36 bytes leftover after parsing attributes in process `syz.1.886'. [ 407.509571][ T9465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.521979][ T9465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.724240][ T5614] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 407.793930][ T29] audit: type=1400 audit(1786195134.520:905): avc: denied { mount } for pid=9468 comm="syz.5.894" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 407.824486][ T5614] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 407.934553][ T9264] (null): failure reading functionality [ 407.948063][ T9264] i2c i2c-1: failure reading functionality [ 407.969112][ T9264] i2c i2c-1: connected i2c-tiny-usb device [ 407.998062][ T9264] usb 5-1: USB disconnect, device number 60 [ 408.264366][ T9439] IPVS: stopping backup sync thread 6502 ... [ 408.274383][ T29] audit: type=1400 audit(1786195134.950:906): avc: denied { map } for pid=9438 comm="syz.1.886" path="pipe:[26933]" dev="pipefs" ino=26933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 408.795898][ T5614] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 408.809785][ T5614] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 408.821391][ T5614] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 408.848192][ T5614] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 408.869631][ T5614] usb 2-1: USB disconnect, device number 38 [ 408.932457][ T29] audit: type=1400 audit(1786195135.660:907): avc: denied { unmount } for pid=5979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 409.148599][ T5739] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 409.228460][ T5799] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 409.274362][ T9493] tmpfs: Unknown parameter 'grpquota_b' [ 409.339340][ T5712] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 409.418466][ T5739] usb 7-1: device descriptor read/64, error -71 [ 409.539201][ T5712] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.595199][ T5712] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 409.750571][ T5712] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 409.817553][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.864959][ T5712] usb 5-1: Product: syz [ 409.873446][ T5712] usb 5-1: Manufacturer: syz [ 409.892659][ T5712] usb 5-1: SerialNumber: syz [ 409.970528][ T5712] usb 5-1: config 0 descriptor?? [ 410.093745][ T5799] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 410.176936][ T9264] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 410.321146][ T5799] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.339713][ T5799] usb 6-1: config 0 descriptor?? [ 410.348770][ T5799] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 410.438932][ T9264] usb 2-1: Using ep0 maxpacket: 32 [ 410.538507][ T9264] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.589998][ T5739] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 410.590483][ T9264] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 410.639836][ T9264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 410.930683][ T9264] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 410.948537][ T9264] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 410.960768][ T9264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.969792][ T9264] usb 2-1: Product: syz [ 410.974316][ T9264] usb 2-1: Manufacturer: syz [ 410.979984][ T9264] usb 2-1: SerialNumber: syz [ 410.995463][ T5739] usb 7-1: device descriptor read/64, error -71 [ 411.004744][ T9264] usb 2-1: config 0 descriptor?? [ 411.036019][ T9264] usb 2-1: no audio or video endpoints found [ 411.078588][ T5614] usb 5-1: USB disconnect, device number 61 [ 411.145646][ T5799] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 411.153343][ T5739] usb usb7-port1: attempt power cycle [ 411.216695][ T9264] usb 2-1: USB disconnect, device number 39 [ 411.354029][ T5799] gspca_cpia1: usb_control_msg 01, error -32 [ 411.499492][ T5739] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 411.520074][ T5739] usb 7-1: device descriptor read/8, error -71 [ 411.549465][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 411.561925][ T5799] gspca_cpia1: usb_control_msg 02, error -71 [ 411.568822][ T5799] gspca_cpia1: usb_control_msg 05, error -71 [ 411.574944][ T5799] cpia1 6-1:0.0: unexpected systemstate: 00 [ 411.585955][ T5799] usb 6-1: USB disconnect, device number 35 [ 411.721223][ T9] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 411.730391][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.742261][ T9] usb 3-1: config 0 descriptor?? [ 411.750036][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 411.905785][ T5739] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 411.929861][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 411.937074][ T5739] usb 7-1: device descriptor read/8, error -32 [ 412.050343][ T5739] usb usb7-port1: unable to enumerate USB device [ 412.108195][ T9516] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 412.210512][ T9] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 412.397620][ T9] gspca_cpia1: usb_control_msg 01, error -32 [ 412.706359][ T9] gspca_cpia1: usb_control_msg 02, error -71 [ 412.843008][ T9] gspca_cpia1: usb_control_msg 05, error -71 [ 412.896435][ T9] cpia1 3-1:0.0: unexpected systemstate: 00 [ 412.982620][ T9] usb 3-1: USB disconnect, device number 45 [ 414.247409][ T9534] tmpfs: Unknown parameter 'grpquota_block_har' [ 414.367579][ T9535] netlink: 24 bytes leftover after parsing attributes in process `syz.6.912'. [ 414.451190][ T9535] netlink: 212 bytes leftover after parsing attributes in process `syz.6.912'. [ 414.620131][ T9535] netlink: 32 bytes leftover after parsing attributes in process `syz.6.912'. [ 414.902730][ T9541] comedi: valid board names for 8255 driver are: [ 414.985850][ T9541] 8255 [ 415.029765][ T9541] comedi: valid board names for vmk80xx driver are: [ 415.142365][ T9541] vmk80xx [ 415.149925][ T9541] comedi: valid board names for usbduxsigma driver are: [ 415.410593][ T9541] usbduxsigma [ 415.420663][ T9541] comedi: valid board names for usbduxfast driver are: [ 415.504782][ T9541] usbduxfast [ 544.705940][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 544.712907][ C1] rcu: 0-...!: (1 GPs behind) idle=1a2c/1/0x4000000000000000 softirq=47423/47423 fqs=0 [ 544.723641][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5622/1:b..l P9538/1:b..l [ 544.732696][ C1] rcu: (detected by 1, t=10502 jiffies, g=47353, q=786 ncpus=2) [ 544.740403][ C1] Sending NMI from CPU 1 to CPUs 0: [ 544.740427][ C0] NMI backtrace for cpu 0 [ 544.740439][ C0] CPU: 0 UID: 0 PID: 5621 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 544.740455][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 544.740462][ C0] RIP: 0010:__lock_acquire+0x5e5/0x1a40 [ 544.740486][ C0] Code: 85 c0 74 dc 8b 0d 2b ca 3c 0f 85 c9 75 3d 45 85 ed 0f 85 b0 07 00 00 0f b7 43 20 66 25 ff 1f 0f b7 c0 48 0f a3 05 4b 2c 85 14 <0f> 83 ea 0a 00 00 48 8d 04 80 48 8d 04 80 48 8d 04 c5 e0 0d 6b 96 [ 544.740498][ C0] RSP: 0018:ffffc90000007d48 EFLAGS: 00000007 [ 544.740509][ C0] RAX: 0000000000000071 RBX: ffff888025ea8bc8 RCX: 0000000000000000 [ 544.740518][ C0] RDX: 00000000ffe2f3a6 RSI: 0000000010f50544 RDI: 000000009dc59b3c [ 544.740526][ C0] RBP: ffff888025ea8000 R08: 00000000ffffffff R09: 0000000000000071 [ 544.740535][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: bc101d9a73125dae [ 544.740543][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 544.740552][ C0] FS: 0000000000000000(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 [ 544.740566][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 544.740575][ C0] CR2: 000056516c7abbe0 CR3: 000000005afed000 CR4: 00000000003526f0 [ 544.740584][ C0] Call Trace: [ 544.740590][ C0] [ 544.740597][ C0] ? find_held_lock+0x2b/0x80 [ 544.740617][ C0] ? advance_sched+0x76b/0xd20 [ 544.740633][ C0] ? advance_sched+0x76b/0xd20 [ 544.740648][ C0] lock_acquire+0x1b9/0x370 [ 544.740663][ C0] ? __hrtimer_run_queues+0x1b7/0x9c0 [ 544.740685][ C0] _raw_spin_lock_irq+0x36/0x50 [ 544.740706][ C0] ? __hrtimer_run_queues+0x1b7/0x9c0 [ 544.740724][ C0] __hrtimer_run_queues+0x1b7/0x9c0 [ 544.740745][ C0] hrtimer_interrupt+0x3e5/0x940 [ 544.740760][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 544.740781][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 544.740801][ C0] [ 544.740805][ C0] [ 544.740810][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 544.740824][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 544.740838][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 f0 27 f6 48 89 df e8 de 3f 28 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 a5 4f 17 f6 65 8b 05 ee 38 a6 08 85 c0 74 16 5b [ 544.740850][ C0] RSP: 0018:ffffc90003c177b8 EFLAGS: 00000246 [ 544.740859][ C0] RAX: 0000000000000006 RBX: ffffffff9b9289b8 RCX: 0000000000000040 [ 544.740868][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a5b18 RDI: ffffffff8c401580 [ 544.740876][ C0] RBP: 0000000000000202 R08: 0000000000000001 R09: 0000000000000000 [ 544.740884][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 544.740892][ C0] R13: dffffc0000000000 R14: ffff88807624fbc0 R15: 1ffff92000782efe [ 544.740906][ C0] debug_object_active_state+0x2ea/0x3f0 [ 544.740926][ C0] ? __pfx_debug_object_active_state+0x10/0x10 [ 544.740945][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 544.740961][ C0] ? __put_anon_vma+0x114/0x3a0 [ 544.740980][ C0] __call_rcu_common.constprop.0+0x4e/0x9b0 [ 544.740999][ C0] ? __put_anon_vma+0x114/0x3a0 [ 544.741017][ C0] kmem_cache_free+0x43e/0x6b0 [ 544.741034][ C0] __put_anon_vma+0x114/0x3a0 [ 544.741053][ C0] unlink_anon_vmas+0x5f3/0x8e0 [ 544.741073][ C0] free_pgtables+0x2e7/0xd80 [ 544.741090][ C0] ? __pfx_free_pgtables+0x10/0x10 [ 544.741109][ C0] exit_mmap+0x44c/0xa00 [ 544.741131][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 544.741147][ C0] ? rcu_is_watching+0x12/0xc0 [ 544.741167][ C0] ? __lock_acquire+0x49f/0x1a40 [ 544.741182][ C0] ? find_held_lock+0x2b/0x80 [ 544.741222][ C0] ? uprobe_clear_state+0x5f/0x260 [ 544.741243][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 544.741261][ C0] ? arch_uprobe_clear_state+0x107/0x150 [ 544.741281][ C0] __mmput+0x12a/0x410 [ 544.741298][ C0] mmput+0x67/0x80 [ 544.741313][ C0] do_exit+0x8b1/0x2ae0 [ 544.741333][ C0] ? do_raw_spin_lock+0x128/0x260 [ 544.741350][ C0] ? __pfx_do_exit+0x10/0x10 [ 544.741367][ C0] ? do_group_exit+0x1bd/0x2a0 [ 544.741379][ C0] ? rcu_is_watching+0x12/0xc0 [ 544.741399][ C0] do_group_exit+0xd5/0x2a0 [ 544.741410][ C0] __x64_sys_exit_group+0x3e/0x50 [ 544.741423][ C0] x64_sys_call+0x102c/0x1530 [ 544.741441][ C0] do_syscall_64+0x115/0x870 [ 544.741454][ C0] ? clear_bhb_loop+0x40/0x90 [ 544.741468][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.741481][ C0] RIP: 0033:0x7f7cf4a286c5 [ 544.741491][ C0] Code: Unable to access opcode bytes at 0x7f7cf4a2869b. [ 544.741497][ C0] RSP: 002b:00007ffef58fede8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 544.741508][ C0] RAX: ffffffffffffffda RBX: 000056516c908660 RCX: 00007f7cf4a286c5 [ 544.741517][ C0] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 544.741525][ C0] RBP: 000056516c5712c0 R08: 0000000000000000 R09: 0000000000000000 [ 544.741533][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.741540][ C0] R13: 00007ffef58fee30 R14: 0000000000000000 R15: 0000000000000000 [ 544.741553][ C0] [ 544.742423][ C1] task:syz.2.911 state:R running task stack:27256 pid:9538 tgid:9531 ppid:5609 task_flags:0x40044c flags:0x00080000 [ 545.243154][ C1] Call Trace: [ 545.246426][ C1] [ 545.249351][ C1] __schedule+0x125c/0x6730 [ 545.253850][ C1] ? bpf_ksym_find+0x128/0x1c0 [ 545.258628][ C1] ? __pfx___schedule+0x10/0x10 [ 545.263476][ C1] ? mark_held_locks+0x40/0x70 [ 545.268236][ C1] preempt_schedule_irq+0x50/0x90 [ 545.273252][ C1] irqentry_exit+0x205/0xa00 [ 545.277837][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 545.283810][ C1] RIP: 0010:lock_acquire+0x5e/0x370 [ 545.289000][ C1] Code: 05 fb 4d 7e 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 86 81 3c 0f 0f 82 ac 02 00 00 8b 35 4e b5 3c 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 9d 4d 7e 12 0f 85 ec 02 00 00 48 83 c4 [ 545.308595][ C1] RSP: 0000:ffffc900053ef398 EFLAGS: 00000206 [ 545.314650][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 545.322613][ C1] RDX: 0000000000000000 RSI: ffffffff8e17fc5f RDI: ffffffff8c401580 [ 545.330577][ C1] RBP: ffffffff8ebe8180 R08: 000000000b2d5154 R09: 0000000000000007 [ 545.338532][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 545.346575][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 545.354555][ C1] ? unwind_next_frame+0x3be/0x2090 [ 545.359741][ C1] ? unwind_next_frame+0x3be/0x2090 [ 545.364929][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 545.371074][ C1] unwind_next_frame+0xd1/0x2090 [ 545.376003][ C1] ? unwind_next_frame+0xbd/0x2090 [ 545.381115][ C1] ? mmput+0x67/0x80 [ 545.385017][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 545.391174][ C1] arch_stack_walk+0x94/0xf0 [ 545.395778][ C1] ? mmput+0x67/0x80 [ 545.399676][ C1] ? tear_down_vmas+0x2a5/0x600 [ 545.404524][ C1] stack_trace_save+0x8e/0xc0 [ 545.409193][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 545.414563][ C1] ? __lock_acquire+0x49f/0x1a40 [ 545.419493][ C1] kasan_save_stack+0x30/0x50 [ 545.424163][ C1] ? kasan_save_stack+0x30/0x50 [ 545.429012][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 545.434383][ C1] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 545.440443][ C1] ? kmem_cache_free+0x43e/0x6b0 [ 545.445366][ C1] ? tear_down_vmas+0x2a5/0x600 [ 545.450217][ C1] ? exit_mmap+0x469/0xa00 [ 545.454648][ C1] ? __mmput+0x12a/0x410 [ 545.458881][ C1] ? mmput+0x67/0x80 [ 545.462802][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 545.467997][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 545.474138][ C1] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 545.480027][ C1] ? tear_down_vmas+0x2a5/0x600 [ 545.484869][ C1] kmem_cache_free+0x43e/0x6b0 [ 545.489630][ C1] tear_down_vmas+0x2a5/0x600 [ 545.494303][ C1] exit_mmap+0x469/0xa00 [ 545.498543][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 545.503298][ C1] ? rcu_is_watching+0x12/0xc0 [ 545.508062][ C1] ? uprobe_clear_state+0x49/0x260 [ 545.513167][ C1] ? find_held_lock+0x2b/0x80 [ 545.517840][ C1] ? uprobe_clear_state+0x5f/0x260 [ 545.522958][ C1] ? __mutex_unlock_slowpath+0x35d/0x930 [ 545.528683][ C1] ? arch_uprobe_clear_state+0x107/0x150 [ 545.534314][ C1] __mmput+0x12a/0x410 [ 545.538379][ C1] mmput+0x67/0x80 [ 545.542093][ C1] do_exit+0x8b1/0x2ae0 [ 545.546253][ C1] ? __pfx_do_exit+0x10/0x10 [ 545.550861][ C1] ? do_raw_spin_lock+0x128/0x260 [ 545.555878][ C1] ? find_held_lock+0x2b/0x80 [ 545.560552][ C1] ? get_signal+0x7e0/0x21e0 [ 545.565140][ C1] do_group_exit+0xd5/0x2a0 [ 545.569632][ C1] get_signal+0x1ec7/0x21e0 [ 545.574143][ C1] ? __pfx_get_signal+0x10/0x10 [ 545.578987][ C1] ? do_futex+0x190/0x440 [ 545.583322][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 545.588862][ C1] ? cap_task_prctl+0x104/0xa50 [ 545.593720][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 545.599881][ C1] exit_to_user_mode_loop+0x139/0x6f0 [ 545.605250][ C1] ? rcu_is_watching+0x12/0xc0 [ 545.610011][ C1] do_syscall_64+0x666/0x870 [ 545.614598][ C1] ? clear_bhb_loop+0x40/0x90 [ 545.619269][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.625152][ C1] RIP: 0033:0x7fb19459de99 [ 545.629568][ C1] RSP: 002b:00007fb1954bd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 545.637974][ C1] RAX: fffffffffffffe00 RBX: 00007fb194826188 RCX: 00007fb19459de99 [ 545.645931][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb194826188 [ 545.653895][ C1] RBP: 00007fb194826180 R08: 0000000000000000 R09: 0000000000000000 [ 545.661854][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.669809][ C1] R13: 00007fb194826218 R14: 00007fffcba9d600 R15: 00007fffcba9d6e8 [ 545.677783][ C1] [ 545.680788][ C1] task:udevd state:R running task stack:24632 pid:5622 tgid:5622 ppid:4976 task_flags:0x400140 flags:0x00080001 [ 545.694280][ C1] Call Trace: [ 545.697546][ C1] [ 545.700466][ C1] __schedule+0x125c/0x6730 [ 545.704974][ C1] ? __pfx___schedule+0x10/0x10 [ 545.709814][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 545.715178][ C1] preempt_schedule_common+0x42/0xc0 [ 545.720453][ C1] preempt_schedule_thunk+0x16/0x40 [ 545.725642][ C1] _raw_spin_unlock+0x3e/0x50 [ 545.730318][ C1] do_wp_page+0x13d2/0x4350 [ 545.734829][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 545.739685][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 545.745060][ C1] __handle_mm_fault+0x1ab6/0x2a00 [ 545.750177][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 545.755640][ C1] ? irqentry_exit+0x24d/0xa00 [ 545.760398][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 545.765588][ C1] ? irqentry_exit+0x24d/0xa00 [ 545.770356][ C1] handle_mm_fault+0x37b/0xa30 [ 545.775130][ C1] do_user_addr_fault+0x5a3/0x12f0 [ 545.780248][ C1] exc_page_fault+0x6f/0xd0 [ 545.784745][ C1] asm_exc_page_fault+0x26/0x30 [ 545.789602][ C1] RIP: 0033:0x7f7cf49ecdb7 [ 545.794006][ C1] RSP: 002b:00007ffef58fed20 EFLAGS: 00010202 [ 545.800062][ C1] RAX: 0000000000006010 RBX: 00000000000001f0 RCX: 000056516c7a5fe0 [ 545.808019][ C1] RDX: 0000000000006010 RSI: 000056516c79ffd0 RDI: 00007f7cf4b28ac0 [ 545.815978][ C1] RBP: 00007f7cf4b28ac0 R08: 00000000000001f0 R09: 0000000000000000 [ 545.823935][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000056516c79ffd0 [ 545.831893][ C1] R13: 00007f7cf4b28ac0 R14: 00000000000001f0 R15: 00007f7cf4b28ac0 [ 545.839868][ C1] [ 545.842874][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g47353 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 545.854057][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 545.864529][ C1] rcu: RCU grace-period kthread stack dump: [ 545.870398][ C1] task:rcu_preempt state:R running task stack:27672 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 545.883879][ C1] Call Trace: [ 545.887146][ C1] [ 545.890067][ C1] __schedule+0x125c/0x6730 [ 545.894583][ C1] ? __pfx___schedule+0x10/0x10 [ 545.899422][ C1] ? find_held_lock+0x2b/0x80 [ 545.904096][ C1] ? schedule+0x225/0x2c0 [ 545.908419][ C1] schedule+0xdd/0x2c0 [ 545.912478][ C1] schedule_timeout+0x127/0x280 [ 545.917326][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 545.922692][ C1] ? __pfx_process_timeout+0x10/0x10 [ 545.927978][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 545.933772][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 545.939228][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 545.943986][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 545.949268][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 545.954201][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 545.959391][ C1] ? rcu_is_watching+0x12/0xc0 [ 545.964150][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 545.969950][ C1] rcu_gp_kthread+0x179/0x230 [ 545.974619][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 545.979811][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 545.985618][ C1] ? __kthread_parkme+0x18c/0x230 [ 545.990645][ C1] ? kthread+0x13a/0x450 [ 545.994876][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 546.000065][ C1] kthread+0x370/0x450 [ 546.004138][ C1] ? __pfx_kthread+0x10/0x10 [ 546.008716][ C1] ret_from_fork+0x72b/0xd50 [ 546.013309][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 546.018422][ C1] ? __switch_to+0x800/0x10f0 [ 546.023091][ C1] ? __pfx_kthread+0x10/0x10 [ 546.027678][ C1] ret_from_fork_asm+0x1a/0x30 [ 546.032450][ C1] [ 546.035456][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 546.041772][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 546.050691][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 546.060731][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 546.066355][ C1] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 7e 10 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 546.085951][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000246 [ 546.092027][ C1] RAX: 000000000447d211 RBX: ffff88801eaca540 RCX: ffffffff8bbb22d5 [ 546.099985][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a5b18 RDI: ffffffff8c401580 [ 546.107946][ C1] RBP: ffffed1003d594a8 R08: 0000000000000001 R09: ffffed10170a678d [ 546.115907][ C1] R10: ffff8880b8533c6b R11: 0000000000000000 R12: 0000000000000000 [ 546.123873][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 546.131852][ C1] FS: 0000000000000000(0000) GS:ffff888123edc000(0000) knlGS:0000000000000000 [ 546.140784][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 546.147357][ C1] CR2: 00005555815b1a48 CR3: 000000007f30d000 CR4: 00000000003526f0 [ 546.155325][ C1] Call Trace: [ 546.158613][ C1] [ 546.161533][ C1] default_idle+0x9/0x10 [ 546.165787][ C1] default_idle_call+0x6c/0xb0 [ 546.170545][ C1] do_idle+0x3a7/0x5b0 [ 546.174614][ C1] ? __pfx_do_idle+0x10/0x10 [ 546.179196][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 546.185106][ C1] cpu_startup_entry+0x4f/0x60 [ 546.189886][ C1] start_secondary+0x21d/0x2d0 [ 546.194665][ C1] ? __pfx_start_secondary+0x10/0x10 [ 546.199974][ C1] common_startup_64+0x13e/0x158 [ 546.204943][ C1]