last executing test programs: 4m24.192321141s ago: executing program 3 (id=303): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:modem_device_t:s0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f00000004c0), &(0x7f0000000300)}, 0x475f932b) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_getparam(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r6 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x6cc0, 0x0) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r6], 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r9, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r9], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) socket(0x10, 0x3, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010001000000040008801003000c800c000b8008000a00ffffffff"], 0x3c}}, 0x0) 4m23.691328511s ago: executing program 3 (id=305): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000001180)={0x3, [0x1, 0x6, 0x1]}, &(0x7f00000011c0)=0xa) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x3, 0xfffffffe, 0x3}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x40102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0xb0a3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0xffff, 0xfffffff3}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCL_BLANKSCREEN(r7, 0x4b67, &(0x7f0000000180)) 4m22.50922316s ago: executing program 3 (id=308): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), 0x0}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="68666d90669065efb8fd76db83645c28d6c19321f6cba42c280170f121eb4410ef9fff4351873b4958f32adf313dec28d5d826a2020e39b22f7660636d2a184af04e4d24f947a36808c75af1765e59d045df6753eccca07063b350cf05faedbb3ca2dce869cd1cda4ca64a8a661804367713376f5aa05ec05608d247f0d4241dd5d2846b2ad8898f95e1d0031ffdb2981bd47996c8bafc374cb59f703fb8835c5ee4b445bdd3ed20decab23a62d32b9e703594ba3090e74bb45e3df512fde3edcafece20fbc3e85a9d6cc3a15d830e84aaab284ec41cb5ee895e0e9235c6c97a53e11f5f6e5212"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_getparam(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) socket(0x10, 0x3, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010001000000040008801003000c800c000b8008000a00ffffffff"], 0x3c}}, 0x0) 4m21.81926305s ago: executing program 3 (id=311): mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0xc) r3 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r3, 0x35, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0d00000018000000", @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=r4], 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@netkit={@void, @value, @void, @void, r4}}, 0x1c) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@fallback=r1, r2, 0x0, 0x2000, 0x0, @value=r5, @void, @void, @void, r4}, 0x20) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000080)='./bus\x00', 0x0, 0x4000}, 0x18) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r0, 0x1e, 0x0, @val=@tcx={@void, @value=r6, @void, @void, r4}}, 0x1c) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r8, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$poke(0x5, r9, &(0x7f0000000080), 0xffffffffffffffd) lseek(r7, 0x0, 0x0) 4m20.723726863s ago: executing program 3 (id=313): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) socket$netlink(0x10, 0x3, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0xbe09, 0x800, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0xb, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x4, 0xfcc0, 0x41, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x6) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f00000000c0)=0x8, 0x4) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000000)={0x2, 0x2, 0x1}) 4m19.346713009s ago: executing program 3 (id=317): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$igmp6(0xa, 0x3, 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a40)={@cgroup, 0xffffffffffffffff, 0x2f, 0x2030, 0x4, @void, @void, @value=r6}, 0x27) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x4004804) 4m18.232226093s ago: executing program 32 (id=317): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$igmp6(0xa, 0x3, 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a40)={@cgroup, 0xffffffffffffffff, 0x2f, 0x2030, 0x4, @void, @void, @value=r6}, 0x27) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x4004804) 2m54.771629328s ago: executing program 0 (id=541): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@getnexthop={0x20, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbfd, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) close(0x3) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r5, &(0x7f0000000240)=ANY=[], 0x40000) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000c00)=[{{0x0, 0x33, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000007c0)=""/240, 0xf0}], 0x4d}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r6, &(0x7f00000004c0)=""/249, 0xf9, 0x40, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000001740)=0x7ffffffd, 0x4) write$binfmt_script(r3, 0x0, 0x6f4000) socket$inet_sctp(0x2, 0x1, 0x84) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r7) read$FUSE(r7, &(0x7f0000000280)={0x2020}, 0x2020) r8 = socket$vsock_stream(0x28, 0x1, 0x0) io_setup(0x9, &(0x7f0000000b80)=0x0) io_submit(r9, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x2}]) io_cancel(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0, 0x2}, 0x0) 2m53.756872797s ago: executing program 0 (id=544): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000012c0)=@nat={'nat\x00', 0x670, 0x5, 0x3d0, 0x270, 0x0, 0xfeffffff, 0x270, 0xf8, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffffff, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x3, 0xa}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0xff, 0x0, 'lo\x00', 'veth1_to_batadv\x00', {0xff}}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xe, "8a1c"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private=0xa010101, @rand_addr, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, r2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x5d54}}, 0x20) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f00000001c0)={'wlan1\x00', {0x2, 0x4e23, @private=0xfffffffc}}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r6, 0x107, 0x1, &(0x7f0000000500)="0482aeb79f5cc605f3f10192bf2813d8", 0x10) r7 = accept4(r4, 0x0, 0x0, 0x80000) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r8, r9, 0x25, 0x10, @val=@kprobe_multi=@addrs={0x0, 0x1, 0x0, &(0x7f0000000440)=[0x6], 0x4}}, 0x30) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_setup(0x6746, &(0x7f0000000100)={0x0, 0x8291, 0x4000, 0x3, 0x17a}, &(0x7f0000000240)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x0, @fd_index=0xa, 0x40000000000007f3, &(0x7f00000001c0)=[{0x0}], 0x1, 0x1a}) 2m53.571877176s ago: executing program 0 (id=545): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) get_robust_list(r1, &(0x7f0000000680)=&(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)}}, &(0x7f00000006c0)=0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) connect$qrtr(r0, &(0x7f0000000100)={0x2a, 0x2, 0x3fff}, 0xc) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000014006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020011b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) get_robust_list(r1, &(0x7f00000004c0)=&(0x7f00000003c0)={&(0x7f0000000280), 0x0, &(0x7f0000000340)}, &(0x7f0000000500)=0xc) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r7 = dup(r5) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 2m52.110346966s ago: executing program 0 (id=547): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000600)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f0000000c00), 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000000), 0x2, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x50400}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x40880) shutdown(0xffffffffffffffff, 0x1) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r6, &(0x7f0000000400), 0x2000011a) recvmmsg(r6, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/68, 0x44}], 0x1}, 0x3}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x10140, 0x0) write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f407000904ff80000000fe01000000000000", 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x4, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3400000006949687d8243b89462ac6612b2cced803000100"/34], 0x14}, 0x1, 0x0, 0x0, 0x80c4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0xc, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0xfc}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x4}, {0x2, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x7}, {0x5000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x26, 0x0, 0x58, 0x8, 0x4}, {0x4000, 0x8000000, 0xb, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5}, {0x2, 0x100000, 0x0, 0x8, 0x3, 0xfb, 0x0, 0x7, 0x1a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x7, 0x5}, {0x2000, 0x9}, {}, 0xddf8ffdb, 0x0, 0x0, 0x460, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2, 0x3]}) mount$bind(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3047c4a, 0x0) 2m50.948380456s ago: executing program 0 (id=552): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000009fc64f45fa9bee52e863d3b15132cefef06f8bfcd9c39da1b5c9b257d18648cb832ce1214b8fed40abcbf5f4bcc476e83b491423e4a08631ca21db660cff5845df8918b460b17916ae5c2de45a85c86ae77cac92f663903db3eaf0106bf17b0977b16ca3098788820dc324f9c60577e8601c7126f7fbdfba", @ANYRES16=0x0, @ANYBLOB="010004000000010000000900000004000380"], 0x18}, 0x1, 0x0, 0x0, 0x48c1}, 0x40000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f00000005c0)) read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020}, 0x2020) mount$nfs(&(0x7f0000000080)=']-#\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300), 0x1, 0x0) mmap(&(0x7f00002ec000/0x4000)=nil, 0x4000, 0x200000c, 0x100010, 0xffffffffffffffff, 0xffffe000) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, &(0x7f0000001400)=""/4088, 0xff8) syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0xf, 0x20, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x6}, [@feature_unit={0x13, 0x24, 0x6, 0x1, 0x3, 0x6, [0x9, 0x8, 0x2, 0x0, 0xa, 0xa], 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xfd, 0x1, 0x1, 0xad, "", '\b[g'}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x6, 0xb0, 0x5, {0x7, 0x25, 0x1, 0x0, 0x3, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0x4, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x40, 0xfb, {0x7, 0x25, 0x1, 0x0, 0xed, 0x1}}}}}}}]}}, 0x0) 2m50.462269646s ago: executing program 0 (id=555): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000000580)='./file1\x00', 0x0) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) 2m49.917550681s ago: executing program 33 (id=555): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000000580)='./file1\x00', 0x0) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) 15.586998813s ago: executing program 2 (id=998): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a40)={@cgroup=r6, r6, 0x2f, 0x2030, 0x4, @void, @void, @value=r7}, 0x27) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x4004804) 14.006158637s ago: executing program 1 (id=1000): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$join(0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x7e0, &(0x7f0000006680)) shmctl$IPC_RMID(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 13.309030948s ago: executing program 4 (id=1002): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000400)={0x3, @raw_data="e8221586de580820764e4cc7aff251c25ebe8f1ed325c4d99b7e8253c1e5b9dc743be30f67f728221d4a56e4dc287f6bccd35a4644e3fd37bb4714b640be153101907d415d96223334182e68b99162cdf1622b9e5245b083e6d1a50d54e1c7653d8a210829380779ef44a4188b649e8ca657a98edad611ad5ef62dd554ee4bdcf646984fcb915e9d4f71b44608fd5fb584fd6aa44a53af27b0cadd8ea78547ffe8046a4514aa5c62f9a50f03eb52240f908355c80dadfe3e0eeef0cc6ffb66be49dae50d88ea2424"}) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r6 = fanotify_init(0xf00, 0x1) fanotify_mark(r6, 0x105, 0x40009975, r5, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) 12.780124455s ago: executing program 1 (id=1003): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES8, @ANYRES8, @ANYBLOB="00000000000000000000000000000000000000000000000000000000943c3ad8a233186d15d1e37c50a9f7e524a50b136cc81ddf021b2c013fccda125c27cb8e29efe2bb2d6a4061f57724bb7be3a199e6d4990e139b01149adf6cfa6b40be9ba242f16b"], 0x50) unshare(0x62040200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000", @ANYRES32=r0, @ANYBLOB="18004e000000000000000000000000000098110008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="e766413a9dae4dbafbd0c8d356bb74c2320ac96ef264a1d5fdc5482f122ad4a063c4de499a51c06c7e4c925347ec32a5489485caf135eeef9787501d778e666771b7e44b9ef998c66e6d28f21be288d6289b09830bc4567abe89eccbd38c2ab14904cadc4ea9c9f8513016802d16e9780d90529424937fac", @ANYRES16=r0, @ANYRESOCT=r0, @ANYRES32, @ANYRES16=r0, @ANYRESOCT=r1, @ANYRES64=r1], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00', r2}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000001100)=ANY=[@ANYBLOB="1c0000f5000000000000000000450a00460068000000219078ac1414bbac1414aa4e214e210401907842b2a9850576d6bdd5747fec6f655f423e423224190a6f61f0915d9edb0752f1431a910bb6bbecff4ed40000000000"], 0x58) r5 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @remote, 0x7}], 0x1c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000300)={'wg0\x00', 0x8000}) socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) syz_socket_connect_nvme_tcp() syz_io_uring_setup(0x75a5, 0x0, &(0x7f0000000000), 0x0) 12.496141921s ago: executing program 2 (id=1004): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000001100000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)={0x50, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0xc085}, 0x40000c0) 12.253856176s ago: executing program 2 (id=1005): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x2a200) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port1\x00', 0x0, 0x60004, 0x0, 0xffffffff, 0x6da, 0x0, 0x0, 0x0, 0x1, 0x8f}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, 0x0) r1 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x100, 0x8, 0x40}, &(0x7f0000000240), &(0x7f0000000040)) io_uring_enter(r1, 0x47f6, 0xb277, 0x0, 0x0, 0x0) io_uring_setup(0x7f74, &(0x7f00000000c0)={0x0, 0x3d78, 0x10, 0x3, 0xab, 0x0, r1}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000390427bd5f00cb87e8dab3efc0cfeb6f165c470000000000000000", @ANYRES32=0x0, @ANYBLOB="3c4507000000000014001280090001007665746800000000040002800800200008000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24004805}, 0xc080) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r3, &(0x7f0000000840)=[{{&(0x7f00000001c0)=@generic, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000300)=""/31, 0x1f}, {&(0x7f00000004c0)=""/254, 0xfe}, {&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f00000006c0)=""/241, 0xf1}], 0x5, &(0x7f0000000940)=""/248, 0xf8}}], 0x1, 0x40, &(0x7f0000000880)={0x0, 0x3938700}) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) syz_io_uring_submit(0x0, 0x0, 0x0) 11.074891083s ago: executing program 2 (id=1009): syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x29, 0x5, 0x0, 0x4, 0x7, 0x0, 0x3, 0x28, 0x0, 0xfc, 0x3, 0x9, 0x4, 0xff, 0x0, 0x5}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc65, 0x5, &(0x7f0000006680)) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003a40)=ANY=[@ANYBLOB="2c000000b85c557d6d36d1ca0289b7b102060ed302f502dc7944f6ffe70de2b6796bb9a6bf415e699501f255791dec765a0c4829a9c33451875bf01371bf5d7fa110a8976de293dc005a84cf803841ff403dbce7f0977a1418a63cb8e0daeef18cb1490b9df10a7ab387fa1e776678b163c0f6914468143d80c7288c4c93183a9717d6f7a9848d4a220376fed0081fa950ed6e510cffaa32a9b00d41b690e70926dd91d85800cc62a49d2d1390e1563a376e8fe2f6f2d73eb54a3004313be80f009216b34db08615588f9cf7a2e615a0af8e5b94d1bcae122b73811ab1a2986db66bb490ea9d01c8f3406533fe4aee03dd67858c91ea863500f2d23eb6de47a01983409363d58b571a8b64ae871c33dee06d860507380fec9048177a", @ANYRES16=0x0, @ANYBLOB="01002abd7000fbdbdf2502000000180001801400020064756d6d793000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x4004824}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000002240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x4841) r5 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r5, &(0x7f0000002380)=""/253, 0xfd, 0x4eb) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r7, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002480)=""/239, 0xef}], 0x1, &(0x7f0000000180)=""/19, 0x13}, 0x6}, {{&(0x7f00000022c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}}}, 0x80, &(0x7f0000003940)=[{&(0x7f0000004ec0)=""/146, 0x92}, {&(0x7f0000002640)=""/128, 0x80}, {&(0x7f00000026c0)=""/186, 0xba}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/165, 0xa5}, {&(0x7f0000003840)=""/219, 0xdb}], 0x6, &(0x7f00000039c0)=""/102, 0x66}, 0x2}, {{0x0, 0x0, &(0x7f0000004c80), 0x0, &(0x7f0000004d00)=""/241, 0xf1}, 0x5}], 0x3, 0x40, 0x0) msgget$private(0x0, 0x193) 11.014259789s ago: executing program 1 (id=1011): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x2, 0x41db) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x4, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x3, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r4) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000300)={0xffffffffffffff5e, 0x0, 0x0}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x21c) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000180)='u', 0x1}], 0x1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r7 = getpid() sched_setattr(r7, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) sendmsg$NFT_BATCH(r8, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a310000"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r9, 0x1, 0x1, &(0x7f0000000380)=0xfffff272, 0x4) 10.22189814s ago: executing program 4 (id=1012): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x501000, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x8001}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0)={r1, 0xda21}, 0x8) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x3, 0x5, 0x1, "bfa9f5b0b5aafe1af1eeca7a85ee089565dc9b2ec5f9e676fc6ef65d491f51c4", 0x44495658}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xfffffffc}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={r1, 0x7ff}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)={r3, 0xd94}, &(0x7f0000000240)=0x8) sendto$netrom(r2, &(0x7f0000000280)="c68b2bd2390bf8e1f2226d8c417b4053d002afb8775fd3c9f3109ab482d7697f681dac5a424600d30146af6cc3687c726067442d4e49ca862030863f7c5578cbdb40f96c363e9f8cdb51952323c24e0b2d066fa9851321b9fa06397554bc07d6092b56be51b14c3f1bbb7482186fec3f0aa032b09853ded342f0eec395ebfaab6188823ea3b1467f633365b168f911b31877f633ff5a7e378455a28cad33292d8ba7c6657848310a3fa98499ba62cb42f75e0e969cf5349938cae5259ae015f4eba204c1a1f848e1", 0xc8, 0x4000040, &(0x7f0000000380)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001440)={r0, &(0x7f0000000400)="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", &(0x7f0000001400)=@tcp=r0, 0x1}, 0x20) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000014c0)={0x0, @local}, &(0x7f0000001500)=0xc) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000001640)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001540)={0xb4, 0x12, 0x800, 0x70bd2b, 0x25dfdbfd, {0x2, 0x6, 0x4, 0xa4, {0x4e24, 0x4e22, [0x3b2, 0x78, 0x7], [0x8, 0x6, 0x2, 0x9], r4, [0xfffffffb, 0x6]}, 0x0, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x65, 0x1, "3313d570ff324dc9186052d24d21ca39810c26823684be74c7fcee2d07c13e858b9e73eb11e72ebb6ec93bff1cf332f67f9f58d798527e9a8b22a629359c78b668a35ba3586cacc19c3c6e5e8f5c6b3c03e8001bef3401f7c58c800a051523207f"}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x5) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000001680)={0x18, 0x0, {0x0, @broadcast, 'ip6_vti0\x00'}}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000016c0)) r5 = syz_open_procfs(0x0, &(0x7f0000001700)='stack\x00') connect$inet(r0, &(0x7f0000001740)={0x2, 0x4e24, @empty}, 0x10) ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, &(0x7f0000001780)={0x2, 0x0, 0x1}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000017c0)={0x4, 0xffffffffffffffff}) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000001800), &(0x7f0000001840)='./file0\x00', 0x8, 0x1) socket$kcm(0x29, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x804000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x28, 0x1, 0x8, 0x401, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0xcf}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000001980)=0x0) syz_open_procfs(r7, &(0x7f00000019c0)='net/protocols\x00') r8 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000001a00), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000001a40)={{0x1, 0x1, 0x18, r8, {0x8}}, './file0\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r9, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x70, 0x0, 0x7, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4d}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) sendmsg$IPSET_CMD_RENAME(r5, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x38, 0x5, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4050}, 0x1) r10 = syz_open_dev$sndpcmc(&(0x7f0000001cc0), 0x4, 0x2040) ioctl$SNDRV_PCM_IOCTL_STATUS64(r10, 0x80984120, &(0x7f0000001d00)) write$dsp(r0, &(0x7f0000001dc0)="0c3efbc33fe44854037650f720dbb27ebf95fb6500cfaf95efe8a64173f5d72926a7df548921c08a31", 0x29) 10.148500848s ago: executing program 5 (id=1013): ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'hsr0\x00', &(0x7f0000000540)=@ethtool_test={0x1a, 0x1ff, 0x4, 0x7, [0x81, 0x0, 0x2, 0x5, 0xe000000000000, 0x2d, 0xe]}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r3, 0x3516, 0x5000000, 0x0, 0x0, 0xfffffdcf) 10.039416793s ago: executing program 2 (id=1014): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ff0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$mice(0xffffff9c, &(0x7f0000000140), 0x19d500) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0x1c, &(0x7f0000001800)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@updsa={0xf0, 0x1a, 0x0, 0x0, 0x0, {{@in=@empty, @in6=@empty}, {@in, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, {0x0, 0x62a39970}}}, 0xf0}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000200)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "76db40", 0x44, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x2, {0x8, 0x1}}}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000000700000006000000000000005e92b5c323018752e9d639e62370f9c600d47713822aee126eb932f0b141f0297367fe9e2c2b6c8d7b015fc5218c9da654393c6efb52f5210bc47479337d99a9aef2a1abff5013972adf6160b69ffd5785ac5629f8f892bc8d2ebfd0f04ba27b47f9f05981eaa3f2aa1fa22fa24c4d", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES8=r0, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x42002) syz_open_dev$vim2m(0x0, 0x0, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r2) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000017c0)={'syztnl2\x00', &(0x7f00000016c0)={'syztnl2\x00', 0x0, 0x700, 0x7800, 0x7f, 0x8000, {{0x2c, 0x4, 0x1, 0xf, 0xb0, 0x867, 0x0, 0x2, 0x29, 0x0, @multicast1, @multicast1, {[@noop, @rr={0x7, 0xb, 0x47, [@local, @private=0xa010100]}, @cipso={0x86, 0x32, 0x1, [{0x7, 0x7, "c649325dc9"}, {0x6, 0x6, '_i\'R'}, {0x2, 0x6, "a8c398ca"}, {0x1, 0xe, "27df3a6f148edb0f57ee16a2"}, {0x7, 0xb, "3eaea749b12720c8fb"}]}, @cipso={0x86, 0x31, 0x3, [{0x6, 0xd, "a72a185a6de892e11096ad"}, {0x7, 0x6, "bb136506"}, {0x5, 0x9, "abf5d7a517de6e"}, {0x2, 0x7, "2906f50d83"}, {0x1, 0x8, "03c6c11f054b"}]}, @timestamp={0x44, 0x10, 0xba, 0x0, 0x1, [0x101, 0x40a, 0x1]}, @timestamp_addr={0x44, 0x1c, 0xf3, 0x1, 0xf, [{@loopback, 0x6}, {@multicast2, 0x3}, {@private=0xa010101, 0xfffffffd}]}]}}}}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="ef1828e84d41d68b5eb2f41164443ec0d5bdfc7f91cad381465df86415a7ba92b71aeb32dfe8e538ee3a9f87027127115f1dc59e6e12c5b58539525ceda9ee8666788d7f39a3f6b1aed2ffb5b441084da38bb0f444634922edecb8e19739e148d5aab04160a6297ce138d413e135c0a6753dc534a40ff55481984574e2bafcf0b477699fa522a1b91e49164b8699f3c5450d5700df94c33a0da51651b4d15694c242429330877209c804cba56378326d31ab0a6f4736b94da0331e0f289798010af0302c8604fe604f50482b3f353201af2f678aef3ec5edef91ebda47a172a0", @ANYRESHEX=r3, @ANYBLOB=',\x00']) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') socket$inet_sctp(0x2, 0x1, 0x84) preadv(r6, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x740, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 9.065853167s ago: executing program 4 (id=1015): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$join(0x1, 0x0) r4 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000f9a000/0x3000)=nil) shmctl$IPC_RMID(r4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 9.036698685s ago: executing program 5 (id=1016): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r5 = fanotify_init(0xf00, 0x1) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) 7.612702553s ago: executing program 4 (id=1017): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000340)=0x0) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x6000, 0x40, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, r4, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {}, [{0x2, 0x6, r3}, {0x2, 0x7, r4}], {0x4, 0x1}, [{0x8, 0x1, 0xee01}, {0x8, 0x1, r5}, {0x8, 0x2, 0xee00}, {0x8, 0x2, r6}], {}, {0x20, 0xa}}, 0x54, 0x0) 7.465780428s ago: executing program 5 (id=1018): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x4a0}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000004ff92711641063e01bb0213a2e510187374136922fa44b23727477c1dc973ef23c3fce4d016d27d9bd5a36f495e1a6ca188e18e4a43795b2c8a00f4cdce28035ef9013574d0234edb25bdcb77b2f603a67a9ea82aeaf8e9987aed57bf41953aefe296eee3eea3512cd5416cd7b88e6084d88aa303ce784b656be7f", @ANYRES16=r2, @ANYBLOB="000227bd7000fedbdf25060000000500010001000000080004007f0000011400020000000000000000000000000000000000050001000100000014000300ff010000000000000000000000000001"], 0x54}, 0x1, 0x0, 0x0, 0x4c000}, 0x20000040) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x5) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r4, 0xc0305302, &(0x7f00000008c0)={0x1e66, 0x2b, 0x3, 0xe, 0x10, 0x6}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getxattr(0x0, 0x0, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r5 = syz_open_dev$radio(&(0x7f0000000740), 0x0, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0xf0f041, 0x0, '\x00', @value=0x7ff}}) read$FUSE(r6, 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, &(0x7f00000001c0)) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f0000007440)={0x0, 0x0, &(0x7f0000007400)={&(0x7f0000007480)=ANY=[@ANYBLOB="5000000004dbdf"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x20004080) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000, 0x1, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r8, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000000)="76389e624190d1b6e71319147583dd", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)=0x0) sched_setscheduler(r9, 0x2, &(0x7f0000000880)=0x8) 7.296893209s ago: executing program 6 (id=1019): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) acct(&(0x7f0000000040)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) modify_ldt$write(0x1, &(0x7f0000000440)={0x89, 0x20000000, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r9, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x21}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {0x5}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {0x0, 0x1}, {}, @connect={{0x1}, {0x0, 0x5}}}], 0x70) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x14, &(0x7f0000000880)=ANY=[@ANYRESHEX=r2, @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1, 0x9a, &(0x7f0000000500)=""/154, 0x41100, 0x1, '\x00', r8, 0x25, r9, 0x8, &(0x7f0000000280)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x1, 0x8590}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000640)=[r1, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x1, 0x4, 0xa, 0x1}, {0x0, 0x3, 0x7, 0x9}, {0x2, 0x1, 0xf}, {0x0, 0x2, 0x8, 0xb}, {0x1000005, 0x4, 0x8, 0x6}, {0x1, 0x3, 0xf, 0x8}, {0x4, 0x4, 0x10, 0x2}, {0x2, 0x1, 0x805, 0x6}, {0x0, 0x4, 0x2, 0xa}], 0x10, 0x4}, 0x94) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd700000000000010000000500060001000000050005000010000008000300010000001e30c24b17701962593c459deff50a7f03641ec1471b171894d1f7669c45839363c65e5156ab39bc4162b3380922752e9a62718877bf8c422c994c896b8f667be711ad19dc2a6704750d5507489d6bbca006aa0259cfae5709e02049383160fb0deec2a26d3db7a92cf2ddc5adb5671606393a474dd73fbecb"], 0x2c}}, 0x800) socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 7.049260914s ago: executing program 1 (id=1020): r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x25, 0x0, 0x0, 0x1, &(0x7f0000000100)={0x77359400}, 0x1, 0x0, 0x0, {0x0, r2}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x3}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2a243, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_create_resource$binfmt(&(0x7f00000003c0)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYRES16=0x0, @ANYBLOB="31030020000000000840080000000800", @ANYRES32=0x0, @ANYBLOB="5c36460800061c99", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x400c01c}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6.77521037s ago: executing program 5 (id=1021): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf2503"], 0x113c}}, 0x8004) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r3 = syz_usb_connect$sierra_net(0x5, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xd, 0x2, 0x400, 0x9, 0xf5, 0x31}, {0x9, 0x5, 0xb, 0x2, 0x8, 0x6, 0x2, 0xf}, {0x9, 0x5, 0x9, 0x3, 0x400, 0xb, 0x4, 0x2}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r3, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x40, 0xa, 0xb7, {0xb7, 0x3, "907e7670c3331fa19025ae9c71b2172d1fce0a6d18acb9fab28b687b342c8d1e4739342115a2c41f2f4236d824dc56088bbe62e0e2e0f6c2c0fe4a18451cfd2525c485c31be55476e641ac6eec6afe55fe07cbc52999f05d2ed2752f97a9b5f22fc4ec4fcf575318b7ef8d3dae981a6cb5adf8c4e98150c2cfa7401a54ca2ab873ee0f5f292a7eed07934b4a52df613f61b9d47c9013af8ea3e915a2a5c30870cc9faf7ececa57c130dfcea3c0c5637df8484016fe"}}, &(0x7f0000000240)={0x0, 0x3, 0x73, @string={0x73, 0x3, "bf11f32e30c9708f06b477a465b8d42de94ed5ed1904601050b142e38d20e521d19b0484c7edbd045528704cc828758de469b73cc74f499e489e593b3c6e5216e4cf73b33ab0458887253292312f540e2ddd473501f557d2c7f88219c0992add9c582c4016c8616d47433ce4301b0da846"}}}, &(0x7f00000003c0)={0x1c, &(0x7f0000000500)={0x0, 0x2, 0xbe, "ea9dbfd7972b9ac0c6e07cf2bcafd2e84c1d6a466facada7e913e67805d6333cb26ade8e9ce101442d103a1ffa2921ad5fb4252645aabd40405db99e3d2dfb2f2ecf3cca74fc1b282582939a89fa6d7afc23bd4ff5b5b8cce75d7cd041f4ec93449f9521610b26b8a62412d9fcf8e6c552b88c5983e7d40bda800963c8a23b88587f291b62fb9141a04649dde864c5007e0c4c228fab945c0dae3cfa71fe405f749c5b49ece57daad37a586119ca0a5a273eba9c13aeaa0a41f820a0f20d"}, &(0x7f00000008c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000002c0)={0x21, 0x0, 0x2, 'Pm'}}) 6.492318079s ago: executing program 4 (id=1022): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000400)={0x3, @raw_data="e8221586de580820764e4cc7aff251c25ebe8f1ed325c4d99b7e8253c1e5b9dc743be30f67f728221d4a56e4dc287f6bccd35a4644e3fd37bb4714b640be153101907d415d96223334182e68b99162cdf1622b9e5245b083e6d1a50d54e1c7653d8a210829380779ef44a4188b649e8ca657a98edad611ad5ef62dd554ee4bdcf646984fcb915e9d4f71b44608fd5fb584fd6aa44a53af27b0cadd8ea78547ffe8046a4514aa5c62f9a50f03eb52240f908355c80dadfe3e0eeef0cc6ffb66be49dae50d88ea2424"}) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r6 = fanotify_init(0xf00, 0x1) fanotify_mark(r6, 0x105, 0x40009975, r5, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) 5.39597714s ago: executing program 6 (id=1023): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r3, 0x1000500, 0x0) 4.615843175s ago: executing program 1 (id=1024): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000340)) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000009fc64f45fa9bee52e863d3b15132cefef06f8bfcd9c39da1b5c9b257d18648cb832ce1214b8fed40abcbf5f4bcc476e83b491423e4a08631ca21db660cff5845df8918b460b17916ae5c2de45a85c86ae77cac92f663903db3eaf0106bf17b0977b16ca3098788820dc324f9c60577e8601c7126f7fbdfba", @ANYRES16=0x0, @ANYBLOB="010004000000010000000900000004000380"], 0x18}, 0x1, 0x0, 0x0, 0x48c1}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020}, 0x2020) mmap(&(0x7f00002ec000/0x4000)=nil, 0x4000, 0x200000c, 0x100010, 0xffffffffffffffff, 0xffffe000) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, &(0x7f0000001400)=""/4088, 0xff8) 4.383529991s ago: executing program 6 (id=1025): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) read(r4, &(0x7f0000000080)=""/186, 0xba) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000010401028324a6b9000000000a000001fa163005000100"], 0x24}, 0x1, 0x0, 0x0, 0x24000844}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r6, r7, 0x26, 0x0, @val=@perf_event={0x7}}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r8, r6, 0x4, r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 4.359135622s ago: executing program 2 (id=1026): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, &(0x7f0000000780)={0x40, 0x1f, 0x2, "9612"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x82, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x1}, 0x8) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r7, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x14, r4, 0x1, 0x0, 0x0, {{0x8}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) listen(0xffffffffffffffff, 0x0) r13 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r13, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 3.438816215s ago: executing program 6 (id=1027): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x7e0, &(0x7f0000006680)) r4 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000f9a000/0x3000)=nil) shmctl$IPC_RMID(r4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 2.322858474s ago: executing program 6 (id=1028): r0 = socket(0x2b, 0x80801, 0x1) listen(r0, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x3, &(0x7f00000000c0)=0xffa4, 0x4) 1.835772021s ago: executing program 5 (id=1029): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="68666d90669065efb8fd76db83645c28d6c19321f6cba42c280170f121eb4410ef9fff4351873b4958f32adf313dec28d5d826a2020e39b22f7660636d2a184af04e4d24f947a36808c75af1765e59d045df6753eccca07063b350cf05faedbb3ca2dce869cd1cda4ca64a8a661804367713376f5aa05ec05608d247f0d4241dd5d2846b2ad8898f95e1d0031ffdb2981bd47996c8bafc374cb59f703fb8835c5ee4b445bdd3ed20decab23a62d32b9e703594ba3090e74bb45e3df512fde3edcafece20fbc3e85a9d6cc3a15d830e84aaab284ec4"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_getparam(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) socket(0x10, 0x3, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010001000000040008801003000c800c000b8008000a00ffffffff"], 0x3c}}, 0x0) 1.835276885s ago: executing program 6 (id=1030): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, 0x0, 0x1814) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x9, 0x800) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000080)={0x1, 0x7, 0x2, &(0x7f0000000040)={0x14, "1bb74a168693a234e0bf06d4fa49eaee61a40a593b680603215a060b9cebd03593"}}) sendmsg$kcm(r1, 0x0, 0x804) syz_open_dev$vim2m(0x0, 0x7ff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) inotify_init1(0x100800) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x80) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x1, 0x0, 0x5000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setresgid(0xee00, 0x0, 0x0) utimes(&(0x7f0000000100)='./file0\x00', 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x40000, 0x0, 0x1000000, 0x0, 0xc5c4, 0x2}, 0x0, 0x0) 1.007260574s ago: executing program 5 (id=1031): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = dup3(r0, r0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fanotify_init(0xf00, 0x1) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) socket(0x10, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/profiling', 0x22042, 0x0) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) splice(r6, 0x0, r8, 0x0, 0xbfd1, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)}, 0x10040) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3) syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001dc0)="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", 0x1000, r3}, 0x68) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r9, &(0x7f00000001c0)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mptcp_subflow_get_send\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r10 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) fsmount(r10, 0x0, 0x8) 975.952866ms ago: executing program 1 (id=1032): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000340)) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000009fc64f45fa9bee52e863d3b15132cefef06f8bfcd9c39da1b5c9b257d18648cb832ce1214b8fed40abcbf5", @ANYRES16=0x0], 0x18}, 0x1, 0x0, 0x0, 0x48c1}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020}, 0x2020) mmap(&(0x7f00002ec000/0x4000)=nil, 0x4000, 0x200000c, 0x100010, 0xffffffffffffffff, 0xffffe000) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, &(0x7f0000001400)=""/4088, 0xff8) 0s ago: executing program 4 (id=1033): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x38011, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/51, 0x33}], 0x1, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8021, 0x0, 0x3f26, 0xf01, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) r4 = syz_open_dev$video4linux(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES16=r7, @ANYRESHEX=r4], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB], 0x64}}, 0x0) getsockopt$ax25_int(r1, 0x101, 0xa, &(0x7f0000000000), &(0x7f00000002c0)=0x4) sync_file_range(r0, 0xba95, 0x6, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="570000006f010006000802000000030000000000000020020000000500000000000000200300000000000000000000002000000000010000000000000080010000000500000000000000080200000003000000000000009d8fa75dc951cbb80055a6f1a669d4ec1c6a9deaa3dedfd16abc8e01029dd8"], 0x57) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) kernel console output (not intermixed with test programs): 254.946643][ T5971] uvcvideo 2-1:220.0: No valid video chain found. [ 254.957289][ T5971] usb 2-1: selecting invalid altsetting 0 [ 254.966642][ T5971] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 254.986632][ T5971] usb 2-1: USB disconnect, device number 30 [ 255.342117][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.370897][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.084988][ T8239] syz.0.517 (8239): drop_caches: 2 [ 257.091071][ T8239] syz.0.517 (8239): drop_caches: 2 [ 257.111893][ T8239] syz.0.517 (8239): drop_caches: 2 [ 257.629460][ T8247] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 257.693234][ T6473] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 257.793118][ T8250] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 257.876633][ T6473] usb 6-1: Using ep0 maxpacket: 16 [ 257.890865][ T6473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.906556][ T6473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.928081][ T6473] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 258.031407][ T6473] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 258.051431][ T6473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.081315][ T6473] usb 6-1: config 0 descriptor?? [ 258.634757][ T8260] blktrace: Concurrent blktraces are not allowed on sg0 [ 258.709951][ T8262] blktrace: Concurrent blktraces are not allowed on sg0 [ 259.567547][ T8272] syz.2.525 (8272): drop_caches: 2 [ 259.575144][ T8272] syz.2.525 (8272): drop_caches: 2 [ 259.605786][ T8272] syz.2.525 (8272): drop_caches: 2 [ 259.694371][ T8275] netlink: 32 bytes leftover after parsing attributes in process `syz.4.528'. [ 260.763485][ T30] audit: type=1400 audit(1767297697.004:425): avc: denied { name_bind } for pid=8274 comm="syz.4.528" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 261.528965][ T6473] usbhid 6-1:0.0: can't add hid device: -71 [ 261.535266][ T6473] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 261.579519][ T6473] usb 6-1: USB disconnect, device number 12 [ 261.945444][ T8289] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 261.953407][ T8289] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 261.962036][ T8289] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 261.969947][ T8289] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 262.018401][ T8289] netlink: 16 bytes leftover after parsing attributes in process `syz.5.532'. [ 263.317645][ T30] audit: type=1400 audit(1767297700.104:426): avc: denied { setopt } for pid=8295 comm="syz.5.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 263.893253][ T8301] capability: warning: `syz.1.534' uses deprecated v2 capabilities in a way that may be insecure [ 264.143395][ T8309] FAULT_INJECTION: forcing a failure. [ 264.143395][ T8309] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 264.158792][ T8309] CPU: 0 UID: 0 PID: 8309 Comm: syz.1.536 Tainted: G L syzkaller #0 PREEMPT(full) [ 264.158821][ T8309] Tainted: [L]=SOFTLOCKUP [ 264.158826][ T8309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 264.158836][ T8309] Call Trace: [ 264.158842][ T8309] [ 264.158849][ T8309] dump_stack_lvl+0x16c/0x1f0 [ 264.158876][ T8309] should_fail_ex+0x512/0x640 [ 264.158905][ T8309] _copy_from_user+0x2e/0xd0 [ 264.158930][ T8309] copy_clone_args_from_user+0x150/0x7e0 [ 264.158960][ T8309] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 264.158991][ T8309] ? rcu_is_watching+0x12/0xc0 [ 264.159006][ T8309] ? finish_task_switch.isra.0+0x207/0xbd0 [ 264.159032][ T8309] ? lockdep_hardirqs_on+0x7c/0x110 [ 264.159063][ T8309] __do_sys_clone3+0xbd/0x290 [ 264.159079][ T8309] ? __pfx___do_sys_clone3+0x10/0x10 [ 264.159093][ T8309] ? __schedule+0x114c/0x6150 [ 264.159143][ T8309] do_syscall_64+0xcd/0xf80 [ 264.159166][ T8309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.159183][ T8309] RIP: 0033:0x7f64fbd8f749 [ 264.159197][ T8309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.159213][ T8309] RSP: 002b:00007f64fcc84f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 264.159230][ T8309] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f64fbd8f749 [ 264.159241][ T8309] RDX: 00007f64fcc84f20 RSI: 0000000000000058 RDI: 00007f64fcc84f20 [ 264.159251][ T8309] RBP: 00007f64fcc85090 R08: 0000000000000000 R09: 0000000000000058 [ 264.159261][ T8309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.159271][ T8309] R13: 00007f64fbfe6218 R14: 00007f64fbfe6180 R15: 00007ffe6b33e4f8 [ 264.159295][ T8309] [ 265.695554][ T30] audit: type=1400 audit(1767297702.344:427): avc: denied { read } for pid=8317 comm="syz.2.539" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 265.759121][ T8323] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 265.767148][ T8323] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 265.775724][ T8323] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 265.783610][ T8323] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 265.806629][ T8323] netlink: 16 bytes leftover after parsing attributes in process `syz.5.540'. [ 266.074243][ T30] audit: type=1400 audit(1767297702.344:428): avc: denied { open } for pid=8317 comm="syz.2.539" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 266.138649][ T30] audit: type=1400 audit(1767297702.344:429): avc: denied { ioctl } for pid=8317 comm="syz.2.539" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 266.338839][ T30] audit: type=1400 audit(1767297702.914:430): avc: denied { create } for pid=8315 comm="syz.1.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 266.359439][ T30] audit: type=1400 audit(1767297702.914:431): avc: denied { listen } for pid=8315 comm="syz.1.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 266.476672][ T30] audit: type=1400 audit(1767297702.924:432): avc: denied { accept } for pid=8315 comm="syz.1.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 266.540520][ T30] audit: type=1400 audit(1767297703.124:433): avc: denied { mounton } for pid=8317 comm="syz.2.539" path="/110" dev="tmpfs" ino=604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 266.567598][ T30] audit: type=1400 audit(1767297703.234:434): avc: denied { listen } for pid=8325 comm="syz.0.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 266.596762][ T30] audit: type=1400 audit(1767297703.234:435): avc: denied { connect } for pid=8325 comm="syz.0.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 266.626649][ T30] audit: type=1400 audit(1767297703.274:436): avc: denied { write } for pid=8325 comm="syz.0.541" path="socket:[21734]" dev="sockfs" ino=21734 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 266.755205][ T30] audit: type=1400 audit(1767297703.284:437): avc: denied { accept } for pid=8325 comm="syz.0.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 266.802462][ T8340] xt_TCPMSS: Only works on TCP SYN packets [ 266.911640][ T8341] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 266.920017][ T8341] overlayfs: overlapping lowerdir path [ 268.732608][ T8357] syz.1.548 (8357): drop_caches: 2 [ 268.738598][ T8357] syz.1.548 (8357): drop_caches: 2 [ 268.752594][ T8357] syz.1.548 (8357): drop_caches: 2 [ 269.243915][ T8359] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 269.366622][ T8364] syz.2.550 (8364): drop_caches: 2 [ 269.373923][ T8364] syz.2.550 (8364): drop_caches: 2 [ 269.386603][ T8364] syz.2.550 (8364): drop_caches: 2 [ 269.564096][ T8366] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 270.156637][ T6442] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.207620][ T6442] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 35454 - 0 [ 270.523529][ T6442] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.535026][ T6442] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 35454 - 0 [ 270.725818][ T8377] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 270.802857][ T8385] x_tables: ip_tables: osf match: only valid for protocol 6 [ 271.148839][ T6442] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.160119][ T6442] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 35454 - 0 [ 271.177728][ T8387] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 271.193874][ T8377] pic_ioport_write: 84 callbacks suppressed [ 271.193902][ T8377] kvm: pic: level sensitive irq not supported [ 271.216765][ T8377] picdev_read: 84 callbacks suppressed [ 271.216779][ T8377] kvm: pic: non byte read [ 271.236127][ T8377] kvm: pic: level sensitive irq not supported [ 271.236197][ T8377] kvm: pic: non byte read [ 271.297842][ T6442] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.338159][ T6442] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 35454 - 0 [ 271.417112][ T8391] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 271.431993][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 271.454651][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 271.464854][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 271.477020][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 271.484586][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 271.485232][ T8391] overlayfs: overlapping lowerdir path [ 271.504730][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 271.512180][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 271.519515][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 271.528425][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 271.539649][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 271.574137][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 271.574159][ T30] audit: type=1400 audit(1767297708.354:441): avc: denied { read } for pid=5483 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 271.582377][ T8395] wg1: entered promiscuous mode [ 271.634857][ T8395] wg1: entered allmulticast mode [ 271.766097][ T8390] lo speed is unknown, defaulting to 1000 [ 271.848669][ T6442] bridge_slave_1: left allmulticast mode [ 271.864544][ T6442] bridge_slave_1: left promiscuous mode [ 271.874781][ T6442] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.947121][ T6442] bridge_slave_0: left allmulticast mode [ 271.952773][ T6442] bridge_slave_0: left promiscuous mode [ 271.963106][ T6442] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.327919][ T8429] netlink: 12 bytes leftover after parsing attributes in process `syz.5.564'. [ 273.350471][ T6442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.369242][ T6442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.389089][ T6442] bond0 (unregistering): Released all slaves [ 273.576603][ T5819] Bluetooth: hci1: command tx timeout [ 274.810943][ T8457] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 274.817767][ T8457] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 274.828447][ T8457] vhci_hcd vhci_hcd.0: Device attached [ 274.996281][ T6442] hsr_slave_0: left promiscuous mode [ 275.014498][ T6442] hsr_slave_1: left promiscuous mode [ 275.027100][ T6442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.034530][ T6442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.085561][ T6442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.096602][ T5971] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 275.110804][ T6442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.152002][ T6442] veth1_macvtap: left promiscuous mode [ 275.165444][ T6442] veth0_macvtap: left promiscuous mode [ 275.183265][ T6442] veth1_vlan: left promiscuous mode [ 275.201098][ T6442] veth0_vlan: left promiscuous mode [ 275.207050][ T5896] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 275.367826][ T5896] usb 2-1: config index 0 descriptor too short (expected 8192, got 18) [ 275.384430][ T5896] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.412465][ T5896] usb 2-1: config 0 has no interfaces? [ 275.429360][ T5896] usb 2-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 275.453904][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.491079][ T5896] usb 2-1: config 0 descriptor?? [ 275.656666][ T5819] Bluetooth: hci1: command tx timeout [ 275.723530][ T8474] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 275.733655][ T8460] usb 35-1: recv xbuf, 0 [ 275.754236][ T5896] usb 2-1: string descriptor 0 read error: -71 [ 275.764183][ T8474] kvm: pic: level sensitive irq not supported [ 275.764252][ T8474] kvm: pic: non byte read [ 275.776345][ T5896] usb 2-1: USB disconnect, device number 31 [ 275.778365][ T3566] vhci_hcd vhci_hcd.1: stop threads [ 275.799412][ T3566] vhci_hcd vhci_hcd.1: release socket [ 275.805968][ T8474] kvm: pic: level sensitive irq not supported [ 275.806030][ T8474] kvm: pic: non byte read [ 275.826624][ T3566] vhci_hcd vhci_hcd.1: disconnect device [ 275.857019][ T5971] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 275.920680][ T6442] team0 (unregistering): Port device team_slave_1 removed [ 275.969670][ T6442] team0 (unregistering): Port device team_slave_0 removed [ 276.794973][ T8465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.570'. [ 276.813259][ T8390] chnl_net:caif_netlink_parms(): no params data found [ 276.998112][ T8390] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.005554][ T8390] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.014788][ T8390] bridge_slave_0: entered allmulticast mode [ 277.028167][ T8390] bridge_slave_0: entered promiscuous mode [ 277.034069][ T5896] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 277.036128][ T8390] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.049236][ T8390] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.062607][ T8390] bridge_slave_1: entered allmulticast mode [ 277.081818][ T8390] bridge_slave_1: entered promiscuous mode [ 277.155986][ T6442] IPVS: stop unused estimator thread 0... [ 277.157442][ T8390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.215486][ T8390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.235142][ T5896] usb 2-1: config 195 has an invalid descriptor of length 71, skipping remainder of the config [ 277.240404][ T8493] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 277.278791][ T5896] usb 2-1: config 195 has 0 interfaces, different from the descriptor's value: 1 [ 277.326674][ T5896] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=58.f9 [ 277.366352][ T8390] team0: Port device team_slave_0 added [ 277.373216][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.417955][ T6209] wlan0: Trigger new scan to find an IBSS to join [ 277.430488][ T8390] team0: Port device team_slave_1 added [ 277.436231][ T5896] usb 2-1: Product: syz [ 277.441180][ T5896] usb 2-1: Manufacturer: syz [ 277.461756][ T5896] usb 2-1: SerialNumber: syz [ 277.626760][ T5971] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 277.670912][ T8390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.678615][ T8390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.724904][ T5896] usb 2-1: USB disconnect, device number 32 [ 277.736603][ T5819] Bluetooth: hci1: command tx timeout [ 277.767553][ T8390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.783545][ T8502] tipc: Started in network mode [ 277.789572][ T5971] usb 3-1: Using ep0 maxpacket: 16 [ 277.796013][ T8502] tipc: Node identity aebb2d041087, cluster identity 4711 [ 277.824935][ T8502] tipc: Enabled bearer , priority 0 [ 277.844209][ T8507] syzkaller0: MTU too low for tipc bearer [ 277.854942][ T8507] tipc: Disabling bearer [ 277.865603][ T8390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.887044][ T8390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.930983][ T8390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.034172][ T8390] hsr_slave_0: entered promiscuous mode [ 278.043388][ T8390] hsr_slave_1: entered promiscuous mode [ 278.053190][ T8390] debugfs: 'hsr0' already exists in 'hsr' [ 278.061095][ T8390] Cannot create hsr debugfs directory [ 278.350373][ T5971] usb 3-1: unable to get BOS descriptor or descriptor too short [ 278.387103][ T5971] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 278.421177][ T5971] usb 3-1: can't read configurations, error -71 [ 278.485099][ T8390] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 278.504457][ T8390] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 278.550626][ T8390] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 278.568244][ T8390] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 278.777106][ T5896] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 278.956839][ T5896] usb 2-1: Using ep0 maxpacket: 16 [ 278.980237][ T8390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.088218][ T8390] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.128786][ T2907] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.135980][ T2907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.227334][ T2907] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.234457][ T2907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.666633][ T6212] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 279.808671][ T8390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.817720][ T5819] Bluetooth: hci1: command tx timeout [ 279.838921][ T6212] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 279.845053][ T8559] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 279.885689][ T6212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 279.937115][ T6212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 279.947306][ T6212] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 280.003957][ T5896] usb 2-1: unable to get BOS descriptor or descriptor too short [ 280.012946][ T6212] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 280.013727][ T5896] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 280.034498][ T6212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.045513][ T5896] usb 2-1: can't read configurations, error -71 [ 280.056818][ T8238] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 280.075897][ T6212] usb 3-1: config 0 descriptor?? [ 280.220755][ T8238] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 280.238773][ T8238] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 280.267246][ T8238] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 280.278334][ T8390] veth0_vlan: entered promiscuous mode [ 280.289456][ T8238] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 280.308175][ T8238] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 280.317687][ T8390] veth1_vlan: entered promiscuous mode [ 280.343152][ T8390] veth0_macvtap: entered promiscuous mode [ 280.349190][ T8238] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.360417][ T8390] veth1_macvtap: entered promiscuous mode [ 280.370445][ T8238] usb 6-1: config 0 descriptor?? [ 280.410664][ T8390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.430354][ T8390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.448744][ T4298] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.459138][ T4298] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.472318][ T4298] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.490653][ T4298] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.705656][ T6209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.736234][ T6209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.819476][ T4298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.844095][ T4298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.337642][ T6212] usbhid 3-1:0.0: can't add hid device: -71 [ 282.355970][ T6212] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 282.372346][ T6212] usb 3-1: USB disconnect, device number 29 [ 282.611123][ T8238] usbhid 6-1:0.0: can't add hid device: -71 [ 283.167879][ T8238] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 283.191925][ T8238] usb 6-1: USB disconnect, device number 13 [ 283.343999][ T30] audit: type=1400 audit(1767297720.124:442): avc: denied { wake_alarm } for pid=8592 comm="syz.1.588" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 283.380693][ T8591] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 283.403289][ T30] audit: type=1400 audit(1767297720.174:443): avc: denied { read } for pid=8592 comm="syz.1.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 284.040752][ T8598] xt_connbytes: Forcing CT accounting to be enabled [ 284.076739][ T8610] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 284.463769][ T8607] lo speed is unknown, defaulting to 1000 [ 284.616815][ T8613] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 284.679793][ T8613] kvm: pic: level sensitive irq not supported [ 284.679854][ T8613] kvm: pic: non byte read [ 284.713601][ T8613] kvm: pic: level sensitive irq not supported [ 284.713651][ T8613] kvm: pic: non byte read [ 285.317063][ T8628] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 285.369590][ T8628] overlayfs: overlapping lowerdir path [ 286.240396][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 286.437907][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 286.563051][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 286.707192][ T8647] syz.6.597 uses obsolete (PF_INET,SOCK_PACKET) [ 287.011293][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 287.065681][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 287.109772][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 287.119758][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.144916][ T24] usb 6-1: config 0 descriptor?? [ 287.273824][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 287.447739][ T8657] fuse: Bad value for 'fd' [ 287.458721][ T9] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 287.581424][ T9] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 287.601844][ T9] usb 2-1: config 220 has no interface number 2 [ 287.619150][ T9] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 287.650290][ T9] usb 2-1: config 220 interface 0 has no altsetting 0 [ 287.664002][ T9] usb 2-1: config 220 interface 76 has no altsetting 0 [ 287.678720][ T9] usb 2-1: config 220 interface 1 has no altsetting 0 [ 287.695579][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 287.713436][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.731227][ T9] usb 2-1: Product: syz [ 287.739452][ T9] usb 2-1: Manufacturer: syz [ 287.749539][ T9] usb 2-1: SerialNumber: syz [ 289.495469][ T9] usb 2-1: selecting invalid altsetting 0 [ 289.529780][ T9] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 289.558202][ T9] uvcvideo 2-1:220.0: No valid video chain found. [ 289.590567][ T9] usb 2-1: selecting invalid altsetting 0 [ 289.591898][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 289.617063][ T9] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 289.625470][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 289.661757][ T24] usb 6-1: USB disconnect, device number 14 [ 289.986752][ T9] usb 2-1: USB disconnect, device number 35 [ 290.219017][ T8681] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 290.253527][ T8681] kvm: pic: level sensitive irq not supported [ 290.253617][ T8681] kvm: pic: non byte read [ 290.298799][ T8681] kvm: pic: level sensitive irq not supported [ 290.298847][ T8681] kvm: pic: non byte read [ 290.452752][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.5.604'. [ 291.048650][ T8702] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 291.446591][ T8714] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 291.454432][ T8714] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 291.462813][ T8714] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 291.470640][ T8714] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 291.481792][ T8714] netlink: 16 bytes leftover after parsing attributes in process `syz.5.608'. [ 292.517980][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 292.746582][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 294.217249][ T8742] blktrace: Concurrent blktraces are not allowed on sg0 [ 294.428535][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 294.463948][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 294.487175][ T9] usb 2-1: can't read configurations, error -71 [ 294.856840][ T8238] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 295.029900][ T8238] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 295.072676][ T8238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 295.104784][ T8238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 295.126566][ T8238] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 295.146702][ T8238] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 295.156019][ T8238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.172079][ T8238] usb 5-1: config 0 descriptor?? [ 295.382186][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 295.548708][ T9] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 295.557052][ T9] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 295.639985][ T9] usb 2-1: config 220 has no interface number 2 [ 295.648260][ T9] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 295.670575][ T9] usb 2-1: config 220 interface 0 has no altsetting 0 [ 295.679964][ T9] usb 2-1: config 220 interface 76 has no altsetting 0 [ 295.687438][ T9] usb 2-1: config 220 interface 1 has no altsetting 0 [ 295.809201][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 295.818840][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.829395][ T9] usb 2-1: Product: syz [ 295.833874][ T9] usb 2-1: Manufacturer: syz [ 295.840044][ T9] usb 2-1: SerialNumber: syz [ 296.841388][ T9] usb 2-1: selecting invalid altsetting 0 [ 296.860644][ T9] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 296.924497][ T9] uvcvideo 2-1:220.0: No valid video chain found. [ 297.012840][ T9] usb 2-1: selecting invalid altsetting 0 [ 297.028350][ T9] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 297.070482][ T9] usb 2-1: USB disconnect, device number 37 [ 297.465129][ T8238] usbhid 5-1:0.0: can't add hid device: -71 [ 297.492884][ T8238] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 297.531659][ T8238] usb 5-1: USB disconnect, device number 24 [ 297.629133][ T8815] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 297.992537][ T30] audit: type=1400 audit(1767297734.774:444): avc: denied { ioctl } for pid=8820 comm="syz.5.628" path="socket:[24266]" dev="sockfs" ino=24266 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 298.036680][ T8238] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 298.206603][ T8238] usb 5-1: Using ep0 maxpacket: 16 [ 298.312032][ T8828] blktrace: Concurrent blktraces are not allowed on sg0 [ 298.322730][ T8827] netlink: 176 bytes leftover after parsing attributes in process `syz.2.631'. [ 298.352888][ T8827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.631'. [ 298.417669][ T8827] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.452525][ T8827] bridge_slave_1 (unregistering): left allmulticast mode [ 298.460076][ T8827] bridge_slave_1 (unregistering): left promiscuous mode [ 298.472851][ T8827] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.683416][ T8238] usb 5-1: unable to get BOS descriptor or descriptor too short [ 300.693653][ T30] audit: type=1400 audit(1767297737.464:445): avc: denied { ioctl } for pid=8838 comm="syz.6.632" path="socket:[23422]" dev="sockfs" ino=23422 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 300.740924][ T8238] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 300.786620][ T8238] usb 5-1: can't read configurations, error -71 [ 301.075097][ T8851] netlink: 116 bytes leftover after parsing attributes in process `syz.5.635'. [ 301.089608][ T8851] netlink: 116 bytes leftover after parsing attributes in process `syz.5.635'. [ 301.414814][ T8852] netlink: 35 bytes leftover after parsing attributes in process `syz.4.633'. [ 301.476105][ T8855] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 301.485137][ T30] audit: type=1400 audit(1767297738.264:446): avc: denied { accept } for pid=8838 comm="syz.6.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 301.513585][ T8855] overlayfs: overlapping lowerdir path [ 301.705391][ T792] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 301.948040][ T792] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 301.956930][ T792] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 301.987326][ T792] usb 3-1: config 220 has no interface number 2 [ 301.999194][ T792] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 302.037292][ T792] usb 3-1: config 220 interface 0 has no altsetting 0 [ 302.054373][ T792] usb 3-1: config 220 interface 76 has no altsetting 0 [ 302.066780][ T792] usb 3-1: config 220 interface 1 has no altsetting 0 [ 302.086473][ T792] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 302.095940][ T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.113954][ T792] usb 3-1: Product: syz [ 302.118369][ T792] usb 3-1: Manufacturer: syz [ 302.122946][ T792] usb 3-1: SerialNumber: syz [ 302.225048][ T8865] comedi comedi3: pcl812: I/O port conflict (0x4f27,16) [ 302.515744][ T8872] net_ratelimit: 10 callbacks suppressed [ 302.515770][ T8872] IPVS: wrr: FWM 1 0x00000001 - no destination available [ 302.662207][ T8865] netlink: 3 bytes leftover after parsing attributes in process `syz.6.638'. [ 302.674590][ T30] audit: type=1400 audit(1767297739.434:447): avc: denied { read write } for pid=8860 comm="syz.6.638" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 302.732029][ T792] usb 3-1: selecting invalid altsetting 0 [ 302.748319][ T792] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 302.755379][ T8865] batadv1: entered allmulticast mode [ 302.761162][ T792] uvcvideo 3-1:220.0: No valid video chain found. [ 302.767691][ T30] audit: type=1400 audit(1767297739.434:448): avc: denied { open } for pid=8860 comm="syz.6.638" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 302.810405][ T792] usb 3-1: selecting invalid altsetting 0 [ 302.830027][ T792] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 302.888955][ T792] usb 3-1: USB disconnect, device number 30 [ 302.893002][ T5889] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 303.086607][ T5889] usb 6-1: Using ep0 maxpacket: 8 [ 303.093641][ T5889] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 303.117504][ T5889] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 303.177435][ T5889] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 303.208829][ T5889] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.376637][ T5889] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 303.407394][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.955235][ T8887] kAFS: No cell specified [ 304.293671][ T5889] usb 6-1: GET_CAPABILITIES returned 0 [ 304.302317][ T5889] usbtmc 6-1:16.0: can't read capabilities [ 304.514589][ T5889] usb 6-1: USB disconnect, device number 15 [ 305.076673][ T9] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 305.226579][ T9] usb 5-1: device descriptor read/64, error -71 [ 305.582136][ T9] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 306.390789][ T9] usb 5-1: device descriptor read/64, error -71 [ 306.601722][ T9] usb usb5-port1: attempt power cycle [ 306.799284][ T8915] syz.1.653 (8915): drop_caches: 2 [ 306.805403][ T8915] syz.1.653 (8915): drop_caches: 2 [ 307.053744][ T9] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 307.077276][ T9] usb 5-1: device descriptor read/8, error -71 [ 307.417467][ T9] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 307.500058][ T8928] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 307.508043][ T8928] F2FS-fs (loop13): Can't find valid F2FS filesystem in 1th superblock [ 307.516601][ T8928] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 307.524454][ T8928] F2FS-fs (loop13): Can't find valid F2FS filesystem in 2th superblock [ 307.561764][ T8928] netlink: 16 bytes leftover after parsing attributes in process `syz.6.657'. [ 307.765850][ T9] usb 5-1: device descriptor read/8, error -71 [ 307.897567][ T9] usb usb5-port1: unable to enumerate USB device [ 308.052765][ T8930] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 308.098223][ T8933] overlayfs: failed to resolve './file1': -2 [ 308.345637][ T8939] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 308.364839][ T8938] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 308.379008][ T8938] overlayfs: overlapping lowerdir path [ 308.766857][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 309.066539][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 309.189684][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.664'. [ 309.427757][ T8950] FAULT_INJECTION: forcing a failure. [ 309.427757][ T8950] name failslab, interval 1, probability 0, space 0, times 0 [ 309.463825][ T8950] CPU: 0 UID: 0 PID: 8950 Comm: syz.1.665 Tainted: G L syzkaller #0 PREEMPT(full) [ 309.463844][ T8950] Tainted: [L]=SOFTLOCKUP [ 309.463848][ T8950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 309.463854][ T8950] Call Trace: [ 309.463858][ T8950] [ 309.463863][ T8950] dump_stack_lvl+0x16c/0x1f0 [ 309.463882][ T8950] should_fail_ex+0x512/0x640 [ 309.463898][ T8950] ? __kmalloc_cache_noprof+0x5f/0x800 [ 309.463916][ T8950] should_failslab+0xc2/0x120 [ 309.463930][ T8950] __kmalloc_cache_noprof+0x80/0x800 [ 309.463946][ T8950] ? __task_pid_nr_ns+0x1f5/0x500 [ 309.463958][ T8950] ? proc_self_get_link+0xf6/0x230 [ 309.463973][ T8950] ? proc_self_get_link+0xf6/0x230 [ 309.463985][ T8950] proc_self_get_link+0xf6/0x230 [ 309.463998][ T8950] vfs_readlink+0x213/0x440 [ 309.464009][ T8950] ? __pfx_vfs_readlink+0x10/0x10 [ 309.464022][ T8950] do_readlinkat+0x24a/0x3a0 [ 309.464041][ T8950] ? __pfx_do_readlinkat+0x10/0x10 [ 309.464056][ T8950] ? __might_fault+0x13b/0x190 [ 309.464070][ T8950] __x64_sys_readlinkat+0x96/0x100 [ 309.464081][ T8950] do_syscall_64+0xcd/0xf80 [ 309.464096][ T8950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.464107][ T8950] RIP: 0033:0x7f64fbd8f749 [ 309.464116][ T8950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.464126][ T8950] RSP: 002b:00007f64fccc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000010b [ 309.464137][ T8950] RAX: ffffffffffffffda RBX: 00007f64fbfe5fa0 RCX: 00007f64fbd8f749 [ 309.464143][ T8950] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000007 [ 309.464149][ T8950] RBP: 00007f64fccc7090 R08: 0000000000000000 R09: 0000000000000000 [ 309.464155][ T8950] R10: 00000000000000bd R11: 0000000000000246 R12: 0000000000000001 [ 309.464161][ T8950] R13: 00007f64fbfe6038 R14: 00007f64fbfe5fa0 R15: 00007ffe6b33e4f8 [ 309.464175][ T8950] [ 309.694190][ T30] audit: type=1400 audit(1767297746.474:449): avc: denied { create } for pid=8952 comm="syz.1.666" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 309.755748][ T30] audit: type=1400 audit(1767297746.534:450): avc: denied { setattr } for pid=8952 comm="syz.1.666" name="file1" dev="overlay" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 309.778639][ T30] audit: type=1400 audit(1767297746.534:451): avc: denied { rename } for pid=8952 comm="syz.1.666" name="#d" dev="tmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 309.800920][ T30] audit: type=1400 audit(1767297746.534:452): avc: denied { link } for pid=8952 comm="syz.1.666" name="00fb2100016c622fb33db24a70a3fca20305a262f901e65fd7ce02000000000000" dev="tmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 309.869531][ T8953] overlayfs: orphan index entry (index/00fb2100016c622fb33db24a70a3fca20305a262f901e65fd7ce02000000000000, ftype=2000, nlink=1) [ 310.192201][ T8959] netlink: 16 bytes leftover after parsing attributes in process `syz.6.668'. [ 310.216837][ T792] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 310.403064][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 310.415112][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 310.422784][ T9] usb 3-1: can't read configurations, error -71 [ 310.521419][ T792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 110, changing to 4 [ 310.544971][ T792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 11312, setting to 1023 [ 310.559384][ T792] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 310.598594][ T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.610275][ T792] usb 2-1: Product: syz [ 310.614451][ T792] usb 2-1: Manufacturer: syz [ 310.633104][ T792] usb 2-1: SerialNumber: syz [ 310.647369][ T792] usb 2-1: config 0 descriptor?? [ 310.677516][ T792] hub 2-1:0.0: bad descriptor, ignoring hub [ 310.683490][ T792] hub 2-1:0.0: probe with driver hub failed with error -5 [ 310.715994][ T792] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 311.113080][ T30] audit: type=1400 audit(1767297747.894:453): avc: denied { read } for pid=8952 comm="syz.1.666" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 311.136524][ T30] audit: type=1400 audit(1767297747.914:454): avc: denied { open } for pid=8952 comm="syz.1.666" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 311.503417][ T8974] syz.5.673 (8974): drop_caches: 2 [ 311.524853][ T8974] syz.5.673 (8974): drop_caches: 2 [ 311.915862][ T8977] overlayfs: failed to resolve './file1': -2 [ 312.169254][ T8983] 8021q: adding VLAN 0 to HW filter on device bond1 [ 312.279071][ T792] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 312.549628][ T24] usb 2-1: USB disconnect, device number 38 [ 312.563889][ T792] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 312.573253][ T792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.609487][ T792] usb 5-1: Product: syz [ 312.615981][ T792] usb 5-1: Manufacturer: syz [ 313.152085][ T792] usb 5-1: SerialNumber: syz [ 313.165209][ T792] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 313.305305][ T30] audit: type=1400 audit(1767297750.084:455): avc: denied { firmware_load } for pid=9 comm="kworker/0:0" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 313.371254][ T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 313.927708][ T9007] blktrace: Concurrent blktraces are not allowed on sg0 [ 313.936547][ T30] audit: type=1400 audit(1767297750.704:456): avc: denied { write } for pid=8979 comm="syz.4.675" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 313.959446][ T9008] binder: 8979:9008 ioctl 400c620e 2000000001c0 returned -22 [ 313.989867][ T8980] usb usb7: usbfs: process 8980 (syz.4.675) did not claim interface 0 before use [ 314.028072][ T5896] usb 5-1: USB disconnect, device number 31 [ 314.088702][ T9006] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 314.496610][ T9] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 314.517854][ T9] ath9k_htc: Failed to initialize the device [ 314.525919][ T5896] usb 5-1: ath9k_htc: USB layer deinitialized [ 315.047133][ T8665] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 315.223716][ T9022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.685'. [ 315.234308][ T9022] netlink: 16 bytes leftover after parsing attributes in process `syz.4.685'. [ 315.376563][ T8665] usb 2-1: Using ep0 maxpacket: 32 [ 315.382998][ T8665] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 315.399061][ T8665] usb 2-1: config 0 has no interface number 0 [ 315.412434][ T8665] usb 2-1: config 0 interface 184 has no altsetting 0 [ 315.430376][ T8665] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 315.452548][ T8665] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.477370][ T8665] usb 2-1: Product: syz [ 315.488997][ T8665] usb 2-1: Manufacturer: syz [ 315.504554][ T8665] usb 2-1: SerialNumber: syz [ 315.706249][ T8665] usb 2-1: config 0 descriptor?? [ 315.723116][ T8665] smsc75xx v1.0.0 [ 316.094646][ T30] audit: type=1400 audit(1767297752.874:457): avc: denied { write } for pid=9029 comm="syz.5.687" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 316.111668][ T9033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.688'. [ 316.347250][ T8665] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 316.356576][ T5896] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 316.372949][ T9038] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 316.381329][ T8665] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 316.393843][ T9038] overlayfs: overlapping lowerdir path [ 316.508295][ T5896] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 316.524116][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 316.545333][ T5896] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 316.554881][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.563860][ T5896] usb 6-1: Product: syz [ 316.568224][ T5896] usb 6-1: Manufacturer: syz [ 316.572949][ T5896] usb 6-1: SerialNumber: syz [ 316.592427][ T5896] usb 6-1: config 0 descriptor?? [ 316.600221][ T5896] powermate 6-1:0.0: probe with driver powermate failed with error -5 [ 317.179547][ T8665] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 317.181970][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.191118][ T8665] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 317.198886][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.215892][ T8665] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 317.279482][ T9047] syz.4.690 (9047): drop_caches: 2 [ 317.295481][ T9047] syz.4.690 (9047): drop_caches: 2 [ 317.316826][ T9047] syz.4.690 (9047): drop_caches: 2 [ 317.370382][ T792] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 317.438327][ T8665] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 317.442871][ T5896] usb 6-1: USB disconnect, device number 16 [ 317.480777][ T8665] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 317.529465][ T8665] usb 2-1: USB disconnect, device number 39 [ 317.566722][ T792] usb 7-1: Using ep0 maxpacket: 16 [ 317.711920][ T9054] netlink: 24 bytes leftover after parsing attributes in process `syz.5.693'. [ 318.446721][ T9055] geneve2: entered promiscuous mode [ 318.467218][ T3566] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 54549 - 0 [ 318.493120][ T3566] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 54549 - 0 [ 318.530192][ T3566] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 54549 - 0 [ 318.553872][ T3566] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 54549 - 0 [ 318.933515][ T9061] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 318.941461][ T9061] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 318.950162][ T9061] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 318.958143][ T9061] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 319.019591][ T9061] netlink: 16 bytes leftover after parsing attributes in process `syz.5.695'. [ 319.588757][ T792] usb 7-1: unable to get BOS descriptor or descriptor too short [ 319.598651][ T792] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 319.617227][ T792] usb 7-1: can't read configurations, error -71 [ 319.666969][ T9064] FAULT_INJECTION: forcing a failure. [ 319.666969][ T9064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.693304][ T9064] CPU: 0 UID: 0 PID: 9064 Comm: syz.1.694 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.693331][ T9064] Tainted: [L]=SOFTLOCKUP [ 319.693337][ T9064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 319.693345][ T9064] Call Trace: [ 319.693350][ T9064] [ 319.693357][ T9064] dump_stack_lvl+0x16c/0x1f0 [ 319.693381][ T9064] should_fail_ex+0x512/0x640 [ 319.693407][ T9064] _copy_to_user+0x32/0xd0 [ 319.693430][ T9064] simple_read_from_buffer+0xcb/0x170 [ 319.693454][ T9064] proc_fail_nth_read+0x197/0x240 [ 319.693473][ T9064] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 319.693490][ T9064] ? rw_verify_area+0xcf/0x6c0 [ 319.693506][ T9064] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 319.693519][ T9064] vfs_read+0x1e4/0xcf0 [ 319.693535][ T9064] ? __pfx___mutex_lock+0x10/0x10 [ 319.693555][ T9064] ? __pfx_vfs_read+0x10/0x10 [ 319.693575][ T9064] ? __fget_files+0x20e/0x3c0 [ 319.693598][ T9064] ksys_read+0x12a/0x250 [ 319.693613][ T9064] ? __pfx_ksys_read+0x10/0x10 [ 319.693634][ T9064] do_syscall_64+0xcd/0xf80 [ 319.693651][ T9064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.693664][ T9064] RIP: 0033:0x7f64fbd8e15c [ 319.693675][ T9064] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 319.693688][ T9064] RSP: 002b:00007f64fccc7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 319.693702][ T9064] RAX: ffffffffffffffda RBX: 00007f64fbfe5fa0 RCX: 00007f64fbd8e15c [ 319.693710][ T9064] RDX: 000000000000000f RSI: 00007f64fccc70a0 RDI: 0000000000000005 [ 319.693718][ T9064] RBP: 00007f64fccc7090 R08: 0000000000000000 R09: 0000000000000000 [ 319.693726][ T9064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.693734][ T9064] R13: 00007f64fbfe6038 R14: 00007f64fbfe5fa0 R15: 00007ffe6b33e4f8 [ 319.693752][ T9064] [ 320.747431][ T9070] netlink: 16 bytes leftover after parsing attributes in process `syz.4.698'. [ 321.068811][ T5819] Bluetooth: Frame is too long (len 18, expected len 4) [ 321.841910][ T9080] netlink: 16 bytes leftover after parsing attributes in process `syz.1.699'. [ 322.503348][ T30] audit: type=1400 audit(1767297758.644:458): avc: denied { listen } for pid=9081 comm="syz.4.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 322.523487][ T30] audit: type=1400 audit(1767297758.644:459): avc: denied { accept } for pid=9081 comm="syz.4.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 322.543189][ T30] audit: type=1400 audit(1767297758.644:460): avc: denied { ioctl } for pid=9081 comm="syz.4.700" path="socket:[25822]" dev="sockfs" ino=25822 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 322.648923][ T9085] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 322.847120][ T9086] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 323.362951][ T9106] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 323.750553][ T9107] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 323.982707][ T9111] syz.5.708 (9111): drop_caches: 2 [ 323.989585][ T9111] syz.5.708 (9111): drop_caches: 2 [ 324.337585][ T9115] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 324.681935][ T6212] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 324.870404][ T6212] usb 5-1: Using ep0 maxpacket: 16 [ 325.651731][ T9124] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 325.867012][ T6212] usb 5-1: unable to get BOS descriptor or descriptor too short [ 325.902293][ T6212] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 325.939004][ T6212] usb 5-1: can't read configurations, error -71 [ 326.006774][ T5922] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 326.306791][ T30] audit: type=1400 audit(1767297763.074:461): avc: denied { connect } for pid=9132 comm="syz.5.714" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 326.357626][ T9134] 9pnet_fd: Insufficient options for proto=fd [ 326.373378][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 326.422323][ T9135] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 326.766597][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 326.794975][ T30] audit: type=1400 audit(1767297763.574:462): avc: denied { setopt } for pid=9141 comm="syz.1.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 326.851073][ T30] audit: type=1400 audit(1767297763.634:463): avc: denied { ioctl } for pid=9141 comm="syz.1.715" path="socket:[24980]" dev="sockfs" ino=24980 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 326.976560][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 328.164692][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 328.196734][ T6212] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 328.215754][ T24] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 328.243055][ T24] usb 7-1: can't read configurations, error -71 [ 328.373725][ T5922] usb 3-1: unable to get BOS descriptor or descriptor too short [ 328.392840][ T6212] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 328.448840][ T6212] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 328.551026][ T6212] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 328.646065][ T6212] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 328.809890][ T6212] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 330.013773][ T5922] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 330.062902][ T6212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.138888][ T9161] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 330.147027][ T9161] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 330.155584][ T9161] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 330.163413][ T9161] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 330.186376][ T9161] netlink: 16 bytes leftover after parsing attributes in process `syz.1.720'. [ 330.435978][ T5922] usb 3-1: can't read configurations, error -71 [ 330.502745][ T6212] usb 5-1: config 0 descriptor?? [ 330.673914][ T9167] overlayfs: failed to resolve './file1': -2 [ 330.776792][ T9169] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 330.796306][ T6212] usb 5-1: can't set config #0, error -71 [ 331.275521][ T6212] usb 5-1: USB disconnect, device number 34 [ 331.356771][ T9180] loop8: detected capacity change from 0 to 8 [ 331.403010][ T9180] Dev loop8: unable to read RDB block 8 [ 331.412164][ T9180] loop8: unable to read partition table [ 331.428687][ T9180] loop8: partition table beyond EOD, truncated [ 331.523101][ T9180] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 331.682159][ T9184] blktrace: Concurrent blktraces are not allowed on sg0 [ 331.786625][ T5922] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 331.965746][ T9190] netlink: 16 bytes leftover after parsing attributes in process `syz.6.728'. [ 332.109256][ T9192] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 332.129756][ T9192] overlayfs: overlapping lowerdir path [ 332.236594][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 332.796947][ T9202] geneve2: entered promiscuous mode [ 332.849072][ T4017] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 41164 - 0 [ 332.869391][ T4017] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 41164 - 0 [ 333.185784][ T4017] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 41164 - 0 [ 333.213278][ T9203] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 333.226809][ T4017] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 41164 - 0 [ 333.855268][ T5922] usb 3-1: unable to get BOS descriptor or descriptor too short [ 333.885956][ T5922] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 333.953862][ T5922] usb 3-1: can't read configurations, error -71 [ 333.983104][ T5922] usb usb3-port1: attempt power cycle [ 334.103864][ T9207] syz.6.732 (9207): drop_caches: 2 [ 334.112829][ T9207] syz.6.732 (9207): drop_caches: 2 [ 334.129123][ T9207] syz.6.732 (9207): drop_caches: 2 [ 334.203354][ T9215] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 334.211186][ T9215] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 334.219828][ T9215] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 334.227604][ T9215] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 334.252056][ T9215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.733'. [ 335.118144][ T5953] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 335.301445][ T9229] ªªªªªª3a5ab4b2a: renamed from lo (while UP) [ 335.441383][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.483994][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.606618][ T5953] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 336.038149][ T9239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.742'. [ 336.049568][ T9239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24680 sclass=netlink_route_socket pid=9239 comm=syz.2.742 [ 336.079179][ T5953] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 336.089349][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.099070][ T5953] usb 2-1: config 0 descriptor?? [ 336.315017][ T9243] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 336.561581][ T5953] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 336.660034][ T9248] SELinux: Context system_u:object_r:mtrr_device_t:s0 is not valid (left unmapped). [ 337.014838][ T30] audit: type=1400 audit(1767297773.444:464): avc: denied { relabelfrom } for pid=9245 comm="syz.5.744" name="NETLINK" dev="sockfs" ino=25183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 337.163917][ T30] audit: type=1400 audit(1767297773.464:465): avc: denied { relabelto } for pid=9245 comm="syz.5.744" name="NETLINK" dev="sockfs" ino=25183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:mtrr_device_t:s0" [ 337.421693][ T9265] tmpfs: Unknown parameter '¾AùrÈ+Ápquota|bloc' [ 338.487699][ T8665] usb 2-1: reset high-speed USB device number 40 using dummy_hcd [ 338.636201][ T6212] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 338.846606][ T6212] usb 5-1: Using ep0 maxpacket: 16 [ 338.855582][ T6212] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 338.866532][ T6212] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.879249][ T24] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 338.880414][ T9279] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 338.889331][ T6212] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 338.929140][ T6212] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 338.945221][ T6212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.965667][ T6212] usb 5-1: Product: syz [ 338.977706][ T6212] usb 5-1: Manufacturer: syz [ 338.985981][ T6212] usb 5-1: SerialNumber: syz [ 339.049530][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 339.059961][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 339.079147][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 339.113985][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 339.128281][ T24] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 339.138123][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.146236][ T24] usb 3-1: Product: syz [ 339.153852][ T24] usb 3-1: Manufacturer: syz [ 339.162194][ T24] usb 3-1: SerialNumber: syz [ 339.186442][ T24] usb 3-1: config 0 descriptor?? [ 339.195132][ T24] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 339.274695][ T6212] usb 5-1: 0:2 : does not exist [ 339.295624][ T6212] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 339.431430][ T6212] usb 5-1: USB disconnect, device number 35 [ 339.510024][ T5959] udevd[5959]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.618236][ T9291] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 340.236280][ T30] audit: type=1326 audit(1767297776.974:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9294 comm="syz.5.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46958f749 code=0x7ffc0000 [ 340.397135][ T8238] usb 2-1: USB disconnect, device number 40 [ 340.520849][ T30] audit: type=1326 audit(1767297776.974:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9294 comm="syz.5.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46958f749 code=0x7ffc0000 [ 340.575764][ T30] audit: type=1326 audit(1767297776.974:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9294 comm="syz.5.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff46958f749 code=0x7ffc0000 [ 341.241976][ T9306] lo speed is unknown, defaulting to 1000 [ 342.725271][ T24] scsi host1: usb-storage 3-1:0.0 [ 342.823509][ T9327] syz.4.762 (9327): drop_caches: 2 [ 342.834422][ T9327] syz.4.762 (9327): drop_caches: 2 [ 342.844035][ T9327] syz.4.762 (9327): drop_caches: 2 [ 342.872547][ T24] usb 3-1: USB disconnect, device number 36 [ 343.146559][ T9160] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 343.205140][ T30] audit: type=1400 audit(1767297779.984:469): avc: denied { create } for pid=9330 comm="syz.2.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 343.316568][ T9160] usb 6-1: Using ep0 maxpacket: 32 [ 343.349541][ T30] audit: type=1400 audit(1767297780.134:470): avc: denied { write } for pid=9330 comm="syz.2.764" path="socket:[25377]" dev="sockfs" ino=25377 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 343.503838][ T9160] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 343.513016][ T9160] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 343.521869][ T9160] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 343.534943][ T9160] usb 6-1: config 1 has no interface number 0 [ 343.544530][ T9160] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 343.556432][ T9160] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 343.570388][ T9160] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 343.581064][ T9160] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.596683][ T9160] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 343.703018][ T30] audit: type=1400 audit(1767297780.484:471): avc: denied { read } for pid=9336 comm="syz.1.766" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 343.759152][ T30] audit: type=1400 audit(1767297780.484:472): avc: denied { open } for pid=9336 comm="syz.1.766" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 343.858473][ T9342] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 344.160531][ T9160] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 344.331840][ T30] audit: type=1400 audit(1767297781.094:473): avc: denied { getopt } for pid=9343 comm="syz.4.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 344.417705][ T9160] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 344.612576][ T6212] usb 6-1: USB disconnect, device number 17 [ 344.620712][ T6212] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 344.689501][ T9160] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.699757][ T9160] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x58, changing to 0x8 [ 344.713203][ T9160] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 344.734187][ T9160] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 344.743464][ T9160] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.751851][ T9160] usb 3-1: Product: syz [ 344.756387][ T9160] usb 3-1: Manufacturer: syz [ 344.761518][ T9160] usb 3-1: SerialNumber: syz [ 344.863447][ T8238] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 345.168690][ T8238] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 345.180777][ T8238] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 345.997269][ T8238] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 346.044684][ T8238] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 346.105737][ T8238] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 346.119999][ T8238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.147375][ T8238] usb 2-1: config 0 descriptor?? [ 346.169614][ T9363] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 346.178128][ T9363] overlayfs: overlapping lowerdir path [ 346.271726][ T9364] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 346.419919][ T9160] cdc_ncm 3-1:1.0: bind() failure [ 346.474580][ T9160] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 346.501410][ T9160] usb 3-1: USB disconnect, device number 37 [ 346.769183][ T9369] syz.4.775 (9369): drop_caches: 2 [ 346.789997][ T9369] syz.4.775 (9369): drop_caches: 2 [ 346.866933][ T6212] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 347.046676][ T6212] usb 7-1: Using ep0 maxpacket: 16 [ 347.382488][ T9374] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 348.148942][ T6212] usb 7-1: unable to get BOS descriptor or descriptor too short [ 348.317088][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.5.778'. [ 348.361056][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.5.778'. [ 348.368792][ T6212] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 348.390429][ T6212] usb 7-1: can't read configurations, error -71 [ 348.655119][ T9383] Can't find a SQUASHFS superblock on nullb0 [ 349.568597][ T8238] usbhid 2-1:0.0: can't add hid device: -71 [ 349.574625][ T8238] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 349.952033][ T8238] usb 2-1: USB disconnect, device number 41 [ 351.092890][ T9406] blktrace: Concurrent blktraces are not allowed on sg0 [ 352.214617][ T9414] netlink: 16 bytes leftover after parsing attributes in process `syz.5.781'. [ 352.707078][ T9421] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 353.196655][ T5953] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 353.369183][ T9430] Can't find a SQUASHFS superblock on nullb0 [ 354.066552][ T5953] usb 7-1: Using ep0 maxpacket: 16 [ 354.433619][ T9435] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 354.441463][ T9435] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 354.450464][ T9435] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 354.458505][ T9435] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 354.524052][ T9435] netlink: 16 bytes leftover after parsing attributes in process `syz.4.793'. [ 354.697595][ T30] audit: type=1400 audit(1767297791.484:474): avc: denied { unmount } for pid=7317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 354.902917][ T5953] usb 7-1: unable to get BOS descriptor or descriptor too short [ 354.914377][ T5953] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 354.922555][ T5953] usb 7-1: can't read configurations, error -71 [ 355.228378][ T9442] lo speed is unknown, defaulting to 1000 [ 356.410254][ T9466] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 356.418517][ T9466] overlayfs: overlapping lowerdir path [ 356.458288][ T9465] kvm: pic: level sensitive irq not supported [ 356.458335][ T9465] kvm: pic: non byte read [ 356.482069][ T9465] kvm: pic: level sensitive irq not supported [ 356.482137][ T9465] kvm: pic: non byte read [ 357.675374][ T9479] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 357.926601][ T5953] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 357.964264][ T9486] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 357.976290][ T6210] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 358.086938][ T5953] usb 3-1: Using ep0 maxpacket: 16 [ 358.269115][ T6210] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 358.280837][ T6210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 358.294398][ T6210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 358.314307][ T6210] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 358.443257][ T6210] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 358.457624][ T9489] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 358.469745][ T6210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.519944][ T6210] usb 2-1: config 0 descriptor?? [ 358.567525][ T8238] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 358.654253][ T30] audit: type=1400 audit(1767297795.434:475): avc: denied { connect } for pid=9494 comm="syz.4.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 358.679312][ T9496] netlink: 28 bytes leftover after parsing attributes in process `syz.4.808'. [ 358.736536][ T8238] usb 6-1: Using ep0 maxpacket: 16 [ 358.966558][ T6212] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 358.993809][ T5953] usb 3-1: unable to get BOS descriptor or descriptor too short [ 359.049843][ T5953] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 359.063167][ T5953] usb 3-1: can't read configurations, error -71 [ 359.128080][ T6212] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 359.140354][ T6212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.177896][ T6212] usb 5-1: config 0 descriptor?? [ 359.201730][ T6212] cp210x 5-1:0.0: cp210x converter detected [ 359.211017][ T8238] usb 6-1: unable to get BOS descriptor or descriptor too short [ 359.229662][ T8238] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 359.245786][ T8238] usb 6-1: can't read configurations, error -71 [ 360.288105][ T6210] usbhid 2-1:0.0: can't add hid device: -71 [ 360.294146][ T6210] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 360.321464][ T6210] usb 2-1: USB disconnect, device number 42 [ 360.352282][ T9509] ubi0: attaching mtd0 [ 360.369942][ T9509] ubi0: scanning is finished [ 360.388052][ T9509] ubi0: empty MTD device detected [ 360.427462][ T9515] kvm: pic: level sensitive irq not supported [ 360.431287][ T9515] kvm: pic: non byte read [ 360.487852][ T9515] kvm: pic: level sensitive irq not supported [ 360.525905][ T9515] kvm: pic: non byte read [ 360.865975][ T30] audit: type=1400 audit(1767297797.574:476): avc: denied { execute } for pid=9520 comm="syz.5.814" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=28066 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 361.639818][ T6212] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 361.667100][ T9509] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 361.674584][ T9509] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 361.697660][ T6212] cp210x 5-1:0.0: querying part number failed [ 361.766539][ T9509] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 361.818338][ T6212] usb 5-1: cp210x converter now attached to ttyUSB0 [ 361.826178][ T6212] usb 5-1: USB disconnect, device number 36 [ 361.843571][ T6212] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 362.286497][ T9533] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 362.294868][ T9533] overlayfs: overlapping lowerdir path [ 362.301253][ T6212] cp210x 5-1:0.0: device disconnected [ 362.322596][ T9509] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 362.355591][ T9509] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 362.372084][ T9509] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 363.059161][ T9509] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 977792899 [ 363.079579][ T9509] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 363.090897][ T9526] ubi0: background thread "ubi_bgt0d" started, PID 9526 [ 363.311246][ T9550] netlink: 16 bytes leftover after parsing attributes in process `syz.4.820'. [ 363.727980][ T30] audit: type=1400 audit(1767297800.484:477): avc: denied { getopt } for pid=9548 comm="syz.1.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 364.617769][ T9559] syz.6.822 (9559): drop_caches: 2 [ 364.815075][ T9559] syz.6.822 (9559): drop_caches: 2 [ 366.455228][ T9575] kvm: pic: level sensitive irq not supported [ 366.455294][ T9575] kvm: pic: non byte read [ 366.486804][ T9575] kvm: pic: level sensitive irq not supported [ 366.486862][ T9575] kvm: pic: non byte read [ 366.937170][ T9582] FAULT_INJECTION: forcing a failure. [ 366.937170][ T9582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.950604][ T9582] CPU: 1 UID: 0 PID: 9582 Comm: syz.2.832 Tainted: G L syzkaller #0 PREEMPT(full) [ 366.950632][ T9582] Tainted: [L]=SOFTLOCKUP [ 366.950638][ T9582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 366.950649][ T9582] Call Trace: [ 366.950655][ T9582] [ 366.950662][ T9582] dump_stack_lvl+0x16c/0x1f0 [ 366.950690][ T9582] should_fail_ex+0x512/0x640 [ 366.950725][ T9582] _copy_from_user+0x2e/0xd0 [ 366.950751][ T9582] core_sys_select+0x2c8/0xc20 [ 366.950781][ T9582] ? __pfx_core_sys_select+0x10/0x10 [ 366.950828][ T9582] ? set_user_sigmask+0x21b/0x2b0 [ 366.950851][ T9582] ? __pfx_set_user_sigmask+0x10/0x10 [ 366.950879][ T9582] do_pselect.constprop.0+0x19f/0x1e0 [ 366.950903][ T9582] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 366.950937][ T9582] __x64_sys_pselect6+0x182/0x240 [ 366.950961][ T9582] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 366.950990][ T9582] do_syscall_64+0xcd/0xf80 [ 366.951014][ T9582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.951031][ T9582] RIP: 0033:0x7fdb7138f749 [ 366.951047][ T9582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.951063][ T9582] RSP: 002b:00007fdb7219b038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 366.951081][ T9582] RAX: ffffffffffffffda RBX: 00007fdb715e5fa0 RCX: 00007fdb7138f749 [ 366.951091][ T9582] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000040 [ 366.951102][ T9582] RBP: 00007fdb7219b090 R08: 0000000000000000 R09: 0000000000000000 [ 366.951112][ T9582] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 366.951122][ T9582] R13: 00007fdb715e6038 R14: 00007fdb715e5fa0 R15: 00007fff0d5c03b8 [ 366.951146][ T9582] [ 369.351136][ T30] audit: type=1400 audit(1767297806.134:478): avc: denied { create } for pid=9588 comm="syz.4.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 370.579658][ T9592] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 370.674545][ T9601] netlink: 16 bytes leftover after parsing attributes in process `syz.5.834'. [ 371.030055][ T9602] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 371.446553][ T5953] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 371.519998][ T9615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.836'. [ 371.529629][ T9615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24680 sclass=netlink_route_socket pid=9615 comm=syz.2.836 [ 371.666562][ T5953] usb 7-1: Using ep0 maxpacket: 16 [ 371.674169][ T5953] usb 7-1: unable to get BOS descriptor or descriptor too short [ 371.702051][ T9616] netlink: 'syz.4.838': attribute type 10 has an invalid length. [ 371.706913][ T5953] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 371.752071][ T9616] netlink: 40 bytes leftover after parsing attributes in process `syz.4.838'. [ 371.761561][ T9621] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 371.774005][ T5953] usb 7-1: can't read configurations, error -71 [ 371.781455][ T9616] team0: entered promiscuous mode [ 371.788418][ T9616] team_slave_0: entered promiscuous mode [ 371.833967][ T9616] team_slave_1: entered promiscuous mode [ 371.848814][ T9616] team0: entered allmulticast mode [ 371.854567][ T9616] team_slave_0: entered allmulticast mode [ 371.861769][ T9616] team_slave_1: entered allmulticast mode [ 371.874488][ T9616] bridge0: port 3(team0) entered blocking state [ 371.904123][ T9616] bridge0: port 3(team0) entered disabled state [ 371.930896][ T9616] bridge0: port 3(team0) entered blocking state [ 371.937282][ T9616] bridge0: port 3(team0) entered forwarding state [ 372.032608][ T9626] syz.1.840 (9626): drop_caches: 2 [ 372.038790][ T9626] syz.1.840 (9626): drop_caches: 2 [ 372.049258][ T9626] syz.1.840 (9626): drop_caches: 2 [ 372.446568][ T9630] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 372.778869][ T9635] kvm: pic: level sensitive irq not supported [ 372.778936][ T9635] kvm: pic: non byte read [ 372.855702][ T9635] kvm: pic: level sensitive irq not supported [ 372.855763][ T9635] kvm: pic: non byte read [ 372.897915][ T9635] kvm: pic: level sensitive irq not supported [ 372.897959][ T9635] kvm: pic: non byte read [ 372.941146][ T9635] kvm: pic: level sensitive irq not supported [ 372.941205][ T9635] kvm: pic: non byte read [ 372.954173][ T9635] kvm: pic: level sensitive irq not supported [ 372.954232][ T9635] kvm: pic: non byte read [ 372.966563][ T6212] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 373.173398][ T9645] blktrace: Concurrent blktraces are not allowed on sg0 [ 373.596541][ T6212] usb 5-1: Using ep0 maxpacket: 16 [ 373.941745][ T9657] netlink: 16 bytes leftover after parsing attributes in process `syz.5.848'. [ 374.359067][ T6212] usb 5-1: unable to get BOS descriptor or descriptor too short [ 374.496177][ T6212] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 374.503869][ T6212] usb 5-1: can't read configurations, error -71 [ 374.656783][ T9661] syz.6.849 (9661): drop_caches: 2 [ 374.663869][ T9661] syz.6.849 (9661): drop_caches: 2 [ 374.682408][ T9661] syz.6.849 (9661): drop_caches: 2 [ 375.791194][ T9670] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 376.000765][ T9674] blktrace: Concurrent blktraces are not allowed on sg0 [ 376.754167][ T9680] ubi: mtd0 is already attached to ubi0 [ 376.842622][ T9681] ubi0: detaching mtd0 [ 376.861786][ T9681] ubi0: mtd0 is detached [ 377.137305][ T9695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.856'. [ 377.148102][ T9695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24680 sclass=netlink_route_socket pid=9695 comm=syz.4.856 [ 377.192918][ T9697] syz.6.857 (9697): drop_caches: 2 [ 377.206243][ T9697] syz.6.857 (9697): drop_caches: 2 [ 377.220896][ T9697] syz.6.857 (9697): drop_caches: 2 [ 377.314078][ T9699] netlink: 16 bytes leftover after parsing attributes in process `syz.1.858'. [ 377.758153][ T9704] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 377.856413][ T9705] netlink: 16 bytes leftover after parsing attributes in process `syz.1.860'. [ 378.145267][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.197952][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.247071][ T9704] overlayfs: overlapping lowerdir path [ 378.551710][ T6212] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 378.899481][ T30] audit: type=1400 audit(1767297815.414:479): avc: denied { connect } for pid=9708 comm="syz.5.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 379.096855][ T6212] usb 3-1: Using ep0 maxpacket: 16 [ 380.131739][ T6212] usb 3-1: unable to get BOS descriptor or descriptor too short [ 380.142354][ T6212] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 380.167602][ T6212] usb 3-1: can't read configurations, error -71 [ 380.250413][ T9728] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 383.579643][ T9746] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 383.635543][ T9747] netlink: 16 bytes leftover after parsing attributes in process `syz.4.870'. [ 383.671069][ T9746] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 383.671193][ T9746] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 383.703944][ T9746] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 384.319124][ T9754] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 384.328060][ T9754] overlayfs: overlapping lowerdir path [ 384.657979][ T9762] IPVS: set_ctl: invalid protocol: 0 172.30.1.6:20004 [ 384.755649][ T9763] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 384.956652][ T5953] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 385.029269][ T9770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.876'. [ 385.047770][ T9770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24680 sclass=netlink_route_socket pid=9770 comm=syz.4.876 [ 385.076544][ T6210] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 385.118756][ T5953] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 385.144177][ T5953] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 385.190647][ T5953] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 385.226511][ T6210] usb 2-1: Using ep0 maxpacket: 16 [ 385.325142][ T5953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.358917][ T9762] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 385.474538][ T5953] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 386.212070][ T9776] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 386.359997][ T6210] usb 2-1: unable to get BOS descriptor or descriptor too short [ 386.632314][ T6210] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 386.660241][ T6210] usb 2-1: can't read configurations, error -71 [ 386.708529][ T9781] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 386.718392][ T9781] block device autoloading is deprecated and will be removed. [ 386.967995][ T9787] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 386.976541][ T9787] overlayfs: overlapping lowerdir path [ 387.076337][ T9788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.881'. [ 387.088975][ T9788] netlink: 16 bytes leftover after parsing attributes in process `syz.4.881'. [ 387.178808][ T9790] autofs: Bad value for 'fd' [ 387.438935][ T9797] blktrace: Concurrent blktraces are not allowed on sg0 [ 387.509822][ T9758] delete_channel: no stack [ 387.527030][ T6212] usb 6-1: USB disconnect, device number 20 [ 387.564183][ T9799] /dev/nullb0: Can't open blockdev [ 388.076634][ T6212] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 388.407862][ T6212] usb 6-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 388.417010][ T6212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.435104][ T6212] usb 6-1: Product: syz [ 388.442350][ T6212] usb 6-1: Manufacturer: syz [ 388.452448][ T6212] usb 6-1: SerialNumber: syz [ 388.464123][ T6212] usb 6-1: config 0 descriptor?? [ 388.476800][ T6212] hub 6-1:0.0: bad descriptor, ignoring hub [ 388.492842][ T6212] hub 6-1:0.0: probe with driver hub failed with error -5 [ 388.518939][ T6212] f81232 6-1:0.0: f81534a converter detected [ 388.619811][ T9804] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 388.648180][ T9810] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 388.680042][ T30] audit: type=1400 audit(1767297825.464:480): avc: denied { execute } for pid=9798 comm="syz.5.885" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 388.877732][ T6212] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 388.886610][ T5953] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 388.903406][ T6212] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 388.958272][ T24] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 388.978693][ T6212] usb 6-1: USB disconnect, device number 21 [ 388.986628][ T6212] f81232 6-1:0.0: device disconnected [ 389.037011][ T5953] usb 5-1: Using ep0 maxpacket: 16 [ 389.055453][ T5953] usb 5-1: unable to get BOS descriptor or descriptor too short [ 389.065461][ T5953] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 389.073927][ T6210] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 389.096636][ T5953] usb 5-1: can't read configurations, error -71 [ 389.116696][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 389.157067][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 389.173127][ T24] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 389.185308][ T24] usb 3-1: can't read configurations, error -71 [ 389.319052][ T6210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 389.330048][ T6210] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 389.342194][ T6210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 389.379642][ T6210] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 389.390796][ T6210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.411257][ T6210] usb 2-1: Product: syz [ 389.415423][ T6210] usb 2-1: Manufacturer: syz [ 389.435441][ T6210] usb 2-1: SerialNumber: syz [ 389.466756][ T6210] usb 2-1: config 0 descriptor?? [ 389.491658][ T9802] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 389.499388][ T9802] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 389.507796][ T6210] usb 2-1: ucan: probing device on interface #0 [ 389.719271][ T6210] usb 2-1: ucan: device protocol version 0 is not supported [ 389.739317][ T6210] usb 2-1: ucan: probe failed; try to update the device firmware [ 390.416717][ T24] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 390.458038][ T5953] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 390.655360][ T9820] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 390.696765][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 390.699906][ T5953] usb 5-1: Using ep0 maxpacket: 16 [ 390.703157][ T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 1: 65, using maximum allowed: 30 [ 390.718143][ T24] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.731200][ T24] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 390.731425][ T5953] usb 5-1: unable to get BOS descriptor or descriptor too short [ 390.756207][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 390.763275][ T24] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 390.775362][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.795936][ T24] usb 3-1: config 0 descriptor?? [ 390.829405][ T5953] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 390.837097][ T5953] usb 5-1: can't read configurations, error -71 [ 390.843613][ T5953] usb usb5-port1: attempt power cycle [ 390.956834][ T6210] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 390.985086][ T9832] ntfs3(nullb0): Primary boot signature is not NTFS. [ 390.997346][ T9832] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 391.292402][ T6210] usb 7-1: Using ep0 maxpacket: 16 [ 391.294676][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 391.304150][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 391.324757][ T6210] usb 7-1: unable to get BOS descriptor or descriptor too short [ 391.345744][ T24] usb 3-1: USB disconnect, device number 44 [ 391.348001][ T6210] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 391.365915][ T6210] usb 7-1: can't read configurations, error -71 [ 391.621546][ T6473] usb 2-1: USB disconnect, device number 45 [ 391.694176][ T9847] dlm: non-version read from control device 8224 [ 391.867048][ T9851] overlayfs: failed to resolve './file1': -2 [ 391.919437][ T9851] netlink: 20 bytes leftover after parsing attributes in process `syz.1.898'. [ 392.167324][ T9857] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 392.277471][ T24] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 392.708127][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 393.027963][ T5953] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 393.119367][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 393.236612][ T5953] usb 6-1: Using ep0 maxpacket: 16 [ 393.242562][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 393.276124][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 393.574193][ T30] audit: type=1400 audit(1767297830.244:481): avc: denied { create } for pid=9866 comm="syz.1.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 393.586195][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 393.618019][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.244705][ T24] usb 3-1: config 0 descriptor?? [ 394.717332][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 394.851911][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 395.093060][ T5953] usb 6-1: unable to get BOS descriptor or descriptor too short [ 395.118229][ T5953] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 395.136966][ T5953] usb 6-1: can't read configurations, error -71 [ 395.162814][ T24] usb 3-1: USB disconnect, device number 45 [ 395.203683][ T9884] netlink: 8 bytes leftover after parsing attributes in process `syz.6.905'. [ 395.214439][ T9884] netlink: 16 bytes leftover after parsing attributes in process `syz.6.905'. [ 395.332523][ T30] audit: type=1400 audit(1767297832.104:482): avc: denied { ioctl } for pid=9885 comm="syz.4.908" path="socket:[27555]" dev="sockfs" ino=27555 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 395.361754][ T9890] netlink: 12 bytes leftover after parsing attributes in process `syz.5.907'. [ 395.477120][ T24] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 395.547370][ T30] audit: type=1400 audit(1767297832.104:483): avc: denied { bind } for pid=9885 comm="syz.4.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 395.648102][ T5819] Bluetooth: hci1: command 0x0406 tx timeout [ 395.696599][ T30] audit: type=1400 audit(1767297832.114:484): avc: denied { setopt } for pid=9885 comm="syz.4.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 395.726284][ T30] audit: type=1400 audit(1767297832.144:485): avc: denied { bind } for pid=9885 comm="syz.4.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 395.786560][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 395.813561][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 395.853543][ T24] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 395.883374][ T24] usb 3-1: can't read configurations, error -71 [ 395.906967][ T9894] FAULT_INJECTION: forcing a failure. [ 395.906967][ T9894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.920422][ T9891] netlink: 16 bytes leftover after parsing attributes in process `syz.6.909'. [ 395.935465][ T9894] CPU: 1 UID: 0 PID: 9894 Comm: syz.4.910 Tainted: G L syzkaller #0 PREEMPT(full) [ 395.935488][ T9894] Tainted: [L]=SOFTLOCKUP [ 395.935491][ T9894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 395.935497][ T9894] Call Trace: [ 395.935501][ T9894] [ 395.935505][ T9894] dump_stack_lvl+0x16c/0x1f0 [ 395.935523][ T9894] should_fail_ex+0x512/0x640 [ 395.935542][ T9894] _copy_from_user+0x2e/0xd0 [ 395.935557][ T9894] copy_msghdr_from_user+0x98/0x160 [ 395.935569][ T9894] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 395.935585][ T9894] ___sys_sendmsg+0xfe/0x1d0 [ 395.935596][ T9894] ? __pfx____sys_sendmsg+0x10/0x10 [ 395.935622][ T9894] __sys_sendmsg+0x16d/0x220 [ 395.935632][ T9894] ? __pfx___sys_sendmsg+0x10/0x10 [ 395.935648][ T9894] ? fput+0x70/0xf0 [ 395.935660][ T9894] do_syscall_64+0xcd/0xf80 [ 395.935674][ T9894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.935685][ T9894] RIP: 0033:0x7f5dd538f749 [ 395.935694][ T9894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.935705][ T9894] RSP: 002b:00007f5dd62d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.935715][ T9894] RAX: ffffffffffffffda RBX: 00007f5dd55e6090 RCX: 00007f5dd538f749 [ 395.935722][ T9894] RDX: 000000002000400c RSI: 0000200000000300 RDI: 0000000000000009 [ 395.935728][ T9894] RBP: 00007f5dd62d9090 R08: 0000000000000000 R09: 0000000000000000 [ 395.935734][ T9894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.935739][ T9894] R13: 00007f5dd55e6128 R14: 00007f5dd55e6090 R15: 00007ffd4aa13d78 [ 395.935753][ T9894] [ 396.266646][ T5953] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 396.636688][ T5953] usb 6-1: Using ep0 maxpacket: 32 [ 396.739893][ T5953] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 396.788041][ T9904] netlink: 20 bytes leftover after parsing attributes in process `syz.4.913'. [ 396.800763][ T5953] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99 [ 396.814967][ T5953] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 396.946562][ T5953] usb 6-1: Product: syz [ 396.954173][ T5953] usb 6-1: SerialNumber: syz [ 396.960301][ T5953] usb 6-1: config 0 descriptor?? [ 396.972959][ T9901] NFSD: Failed to start, no listeners configured. [ 397.695563][ T24] usb 6-1: USB disconnect, device number 23 [ 397.882056][ T9913] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 397.904470][ T9913] overlayfs: overlapping lowerdir path [ 398.365275][ T9925] F2FS-fs: Conflicting test_dummy_encryption options [ 398.538680][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.5.919'. [ 398.548206][ T9928] netlink: 16 bytes leftover after parsing attributes in process `syz.5.919'. [ 399.926581][ T9940] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 403.866569][ T6473] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 404.009531][ T9960] blktrace: Concurrent blktraces are not allowed on sg0 [ 404.069752][ T9962] blktrace: Concurrent blktraces are not allowed on sg0 [ 404.566570][ T6473] usb 3-1: Using ep0 maxpacket: 16 [ 404.581141][ T6473] usb 3-1: unable to get BOS descriptor or descriptor too short [ 404.593440][ T6473] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 404.601811][ T6473] usb 3-1: can't read configurations, error -71 [ 405.185491][ T9971] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 405.447712][ T30] audit: type=1400 audit(1767297842.234:486): avc: denied { create } for pid=9973 comm="syz.4.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 405.546573][ T5971] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 406.094473][ T9981] blktrace: Concurrent blktraces are not allowed on sg0 [ 406.857280][ T5971] usb 7-1: Using ep0 maxpacket: 16 [ 407.059098][ T9991] netlink: 16 bytes leftover after parsing attributes in process `syz.5.935'. [ 407.226392][ T5971] usb 7-1: unable to get BOS descriptor or descriptor too short [ 407.254294][ T5971] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 407.262167][ T5971] usb 7-1: can't read configurations, error -71 [ 408.145755][T10000] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 408.153713][T10000] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 408.162324][T10000] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 408.170198][T10000] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 408.192709][T10000] netlink: 16 bytes leftover after parsing attributes in process `syz.5.937'. [ 408.546328][T10002] syz.4.938 (10002): drop_caches: 2 [ 408.552451][T10002] syz.4.938 (10002): drop_caches: 2 [ 408.576581][T10002] syz.4.938 (10002): drop_caches: 2 [ 408.605810][T10002] netlink: 16 bytes leftover after parsing attributes in process `syz.4.938'. [ 408.634202][ T9988] netlink: 72 bytes leftover after parsing attributes in process `syz.1.934'. [ 409.139992][T10013] syz.6.941 (10013): drop_caches: 2 [ 409.760533][T10013] syz.6.941 (10013): drop_caches: 2 [ 409.922105][T10015] syz.6.941 (10015): drop_caches: 2 [ 409.931932][T10013] netlink: 44 bytes leftover after parsing attributes in process `syz.6.941'. [ 410.341036][T10023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.943'. [ 410.351630][T10023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24680 sclass=netlink_route_socket pid=10023 comm=syz.1.943 [ 411.626565][ T5953] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 412.042471][ T5953] usb 3-1: Using ep0 maxpacket: 16 [ 412.063034][ T5953] usb 3-1: unable to get BOS descriptor or descriptor too short [ 412.081672][ T5953] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 412.094050][ T5953] usb 3-1: can't read configurations, error -71 [ 412.272260][T10043] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 412.389033][T10044] netlink: 16 bytes leftover after parsing attributes in process `syz.5.950'. [ 412.956593][ T24] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 413.169063][T10051] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 413.177010][T10051] F2FS-fs (loop13): Can't find valid F2FS filesystem in 1th superblock [ 413.185562][T10051] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 413.193443][T10051] F2FS-fs (loop13): Can't find valid F2FS filesystem in 2th superblock [ 413.216332][T10051] netlink: 16 bytes leftover after parsing attributes in process `syz.6.951'. [ 413.476684][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 413.801786][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 413.810756][ T24] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 413.818403][ T24] usb 5-1: can't read configurations, error -71 [ 415.230352][T10073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.959'. [ 415.268670][T10071] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 415.316592][ T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 415.359638][T10077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.960'. [ 415.476626][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 415.486609][ T6212] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 415.522222][ T24] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 415.612063][ T5934] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 415.646984][ T6212] usb 2-1: Using ep0 maxpacket: 16 [ 415.717732][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.728587][T10082] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 415.767204][ T6212] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 415.779112][ T6212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.795001][ T24] usb 3-1: config 0 descriptor?? [ 415.810780][ T6212] usb 2-1: Product: syz [ 415.816566][ T6212] usb 2-1: Manufacturer: syz [ 415.821473][ T24] uvcvideo 3-1:0.0: probe with driver uvcvideo failed with error -22 [ 415.829808][ T6212] usb 2-1: SerialNumber: syz [ 415.848469][ T6212] usb 2-1: config 0 descriptor?? [ 415.871826][ T6212] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 415.878560][ T5934] usb 7-1: Using ep0 maxpacket: 16 [ 415.986770][ T6210] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 416.156614][ T6210] usb 5-1: Using ep0 maxpacket: 16 [ 416.164628][T10089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.173567][T10089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.394960][ T6212] usb 2-1: clie_3_5_startup: get config number failed: -71 [ 416.412693][ T6212] visor 2-1:0.0: probe with driver visor failed with error -71 [ 416.413373][ T6210] usb 5-1: unable to get BOS descriptor or descriptor too short [ 416.460222][ T6212] usb 2-1: USB disconnect, device number 46 [ 416.496190][ T6210] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 416.509757][ T6210] usb 5-1: can't read configurations, error -71 [ 416.654521][ T5934] usb 7-1: unable to get BOS descriptor or descriptor too short [ 416.663504][ T5934] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 416.675046][ T5934] usb 7-1: can't read configurations, error -71 [ 417.234940][T10097] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 417.242769][T10097] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 417.251374][T10097] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 417.259160][T10097] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 417.281864][T10097] netlink: 16 bytes leftover after parsing attributes in process `syz.1.965'. [ 417.675620][T10099] netlink: 24 bytes leftover after parsing attributes in process `syz.6.966'. [ 417.970669][T10108] netlink: 4 bytes leftover after parsing attributes in process `syz.5.968'. [ 417.981457][T10108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24680 sclass=netlink_route_socket pid=10108 comm=syz.5.968 [ 418.072798][ T6473] usb 3-1: USB disconnect, device number 52 [ 418.081098][ T6210] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 418.456319][ T6210] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 418.464468][ T6210] usb 7-1: config 0 has no interface number 0 [ 418.476324][ T6210] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.487859][ T6210] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.498402][ T6210] usb 7-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 418.513187][ T6210] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.689338][ T6210] usb 7-1: config 0 descriptor?? [ 418.761893][T10122] netlink: 'syz.4.972': attribute type 4 has an invalid length. [ 418.830722][T10122] netlink: 'syz.4.972': attribute type 4 has an invalid length. [ 418.905509][ T30] audit: type=1400 audit(1767297855.684:487): avc: denied { connect } for pid=10125 comm="syz.1.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 419.198422][ T6210] usbhid 7-1:0.1: can't add hid device: -71 [ 419.204453][ T6210] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 419.256130][ T6210] usb 7-1: USB disconnect, device number 18 [ 419.380508][T10134] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 419.417948][T10134] overlayfs: overlapping lowerdir path [ 419.670974][ T30] audit: type=1400 audit(1767297856.454:488): avc: denied { map } for pid=10130 comm="syz.4.976" path="socket:[30104]" dev="sockfs" ino=30104 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 420.001161][T10143] netlink: 24 bytes leftover after parsing attributes in process `syz.5.978'. [ 420.504678][T10147] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 420.575002][ T30] audit: type=1400 audit(1767297857.354:489): avc: denied { setopt } for pid=10150 comm="syz.4.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 420.613000][ T30] audit: type=1400 audit(1767297857.394:490): avc: denied { create } for pid=10153 comm="syz.5.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 420.635876][T10154] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 420.635876][T10154] program syz.5.982 not setting count and/or reply_len properly [ 420.652696][ T30] audit: type=1400 audit(1767297857.424:491): avc: denied { ioctl } for pid=10153 comm="syz.5.982" path="socket:[29549]" dev="sockfs" ino=29549 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 420.679201][T10154] netlink: 8 bytes leftover after parsing attributes in process `syz.5.982'. [ 420.747529][ T30] audit: type=1400 audit(1767297857.424:492): avc: denied { bind } for pid=10153 comm="syz.5.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 421.044564][ T6212] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 421.232228][ T6212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 421.245651][ T6212] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 421.269374][ T6212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 421.289466][ T6212] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 421.298553][ T6212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.306770][ T6212] usb 3-1: Product: syz [ 421.312104][ T6212] usb 3-1: Manufacturer: syz [ 421.320830][ T6212] usb 3-1: SerialNumber: syz [ 421.354174][ T6212] usb 3-1: config 0 descriptor?? [ 421.369901][T10149] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 421.377928][T10149] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 421.388589][ T6212] usb 3-1: ucan: probing device on interface #0 [ 421.878692][T10169] netlink: 16 bytes leftover after parsing attributes in process `syz.4.986'. [ 422.475427][ T6212] usb 3-1: ucan: could not read protocol version, ret=-110 [ 422.825203][ T6212] usb 3-1: ucan: probe failed; try to update the device firmware [ 422.867911][ T6212] usb 3-1: USB disconnect, device number 53 [ 423.066207][T10176] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 423.373575][T10182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.989'. [ 423.458926][T10182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24680 sclass=netlink_route_socket pid=10182 comm=syz.2.989 [ 423.566651][ T5927] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 423.635838][T10188] netlink: 'syz.5.991': attribute type 1 has an invalid length. [ 423.644189][T10188] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=43 sclass=netlink_xfrm_socket pid=10188 comm=syz.5.991 [ 423.704272][T10190] netlink: 24 bytes leftover after parsing attributes in process `syz.4.992'. [ 423.736574][ T5927] usb 2-1: Using ep0 maxpacket: 16 [ 423.749047][ T5927] usb 2-1: unable to get BOS descriptor or descriptor too short [ 423.763830][ T5927] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 423.780178][ T5927] usb 2-1: can't read configurations, error -71 [ 423.822688][ T6473] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 424.027695][T10194] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 424.166514][ T6473] usb 7-1: Using ep0 maxpacket: 8 [ 424.173005][ T6473] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 48, changing to 9 [ 424.186794][ T6473] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 8265, setting to 1024 [ 424.198973][ T6473] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 424.212485][ T6473] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.245454][ T6473] usb 7-1: config 0 descriptor?? [ 424.426646][ T5971] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 424.532555][ T6473] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 424.622147][ T5971] usb 6-1: Using ep0 maxpacket: 16 [ 424.672919][ T5971] usb 6-1: unable to get BOS descriptor or descriptor too short [ 424.687117][ T5971] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 424.706609][ T5971] usb 6-1: can't read configurations, error -71 [ 424.863665][T10209] netlink: 16 bytes leftover after parsing attributes in process `syz.1.997'. [ 426.660507][ T5927] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 426.762920][ T24] usb 7-1: USB disconnect, device number 19 [ 426.917843][ T5927] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 426.934984][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 426.949427][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 426.963939][ T5927] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 426.983460][ T5927] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 427.019855][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.057508][ T30] audit: type=1400 audit(1767297863.844:493): avc: denied { connect } for pid=10225 comm="syz.6.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 427.092249][ T30] audit: type=1400 audit(1767297863.844:494): avc: denied { ioctl } for pid=10225 comm="syz.6.1001" path="socket:[30245]" dev="sockfs" ino=30245 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 427.126163][ T5927] usb 6-1: config 0 descriptor?? [ 428.061564][T10237] lo speed is unknown, defaulting to 1000 [ 428.106664][T10236] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1004'. [ 428.769549][T10244] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1005'. [ 428.809002][ T30] audit: type=1400 audit(1767297865.584:495): avc: denied { read } for pid=10241 comm="syz.2.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 428.937273][ T5829] Bluetooth: hci1: unexpected event for opcode 0x0c1b [ 428.968090][T10248] bridge0: entered promiscuous mode [ 428.997795][T10248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10248 comm=syz.6.1006 [ 429.121634][ T30] audit: type=1400 audit(1767297865.904:496): avc: denied { audit_write } for pid=10249 comm="syz.6.1007" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 429.191549][ T30] audit: type=1400 audit(1767297865.924:497): avc: denied { setopt } for pid=10249 comm="syz.6.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 429.324758][ T30] audit: type=1400 audit(1767297865.974:498): avc: denied { connect } for pid=10249 comm="syz.6.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 429.359691][ T5927] usbhid 6-1:0.0: can't add hid device: -71 [ 429.365691][ T5927] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 429.586883][ T30] audit: type=1400 audit(1767297866.364:499): avc: denied { mounton } for pid=10258 comm="syz.5.1010" path="/proc/493/task" dev="proc" ino=30315 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 430.000976][ T5927] usb 6-1: USB disconnect, device number 26 [ 430.061802][T10265] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 430.323451][ T30] audit: type=1400 audit(1767297867.104:500): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 430.396661][ T5971] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 430.573349][T10275] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1011'. [ 430.594167][ T5971] usb 7-1: Using ep0 maxpacket: 16 [ 430.651961][ T8665] usb 3-1: new low-speed USB device number 54 using dummy_hcd [ 431.020924][ T8665] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 431.057025][ T8665] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 431.242439][ T8665] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 431.354201][ T8665] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 431.399054][ T8665] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 431.441419][ T8665] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 431.744781][ T8665] usb 3-1: string descriptor 0 read error: -22 [ 431.751130][ T8665] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 431.766509][ T8665] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.782408][ T8665] usb 3-1: config 0 descriptor?? [ 431.793200][T10273] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 431.928288][ T8665] hub 3-1:0.0: bad descriptor, ignoring hub [ 431.939105][ T8665] hub 3-1:0.0: probe with driver hub failed with error -5 [ 432.194256][T10273] 9p: Bad value for 'rfdno' [ 432.607176][ T8665] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9 [ 432.628151][T10269] syz.1.1011 (10269): drop_caches: 2 [ 433.126692][ T5971] usb 7-1: unable to get BOS descriptor or descriptor too short [ 433.148923][ T5971] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 433.188875][ T5971] usb 7-1: can't read configurations, error -71 [ 433.456766][T10291] mkiss: ax0: crc mode is auto. [ 433.506118][T10291] vivid-000: disconnect [ 433.526216][T10290] vivid-000: reconnect [ 433.978686][ T8665] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 434.125825][T10303] dlm: Unknown command passed to DLM device : 33 [ 434.125825][T10303] [ 434.137010][T10303] 9p: Bad value for 'wfdno' [ 434.156847][ T8665] usb 6-1: Using ep0 maxpacket: 8 [ 434.430006][ T8665] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 434.474017][ T8665] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.507718][ T8665] usb 6-1: Product: syz [ 434.520805][ T8665] usb 6-1: Manufacturer: syz [ 434.532657][ T8665] usb 6-1: SerialNumber: syz [ 434.553671][ T8665] usb 6-1: config 0 descriptor?? [ 434.575161][ T8665] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 435.872965][ T5927] usb 3-1: USB disconnect, device number 54 [ 435.941516][T10313] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 436.342223][T10319] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 436.350116][T10319] F2FS-fs (loop13): Can't find valid F2FS filesystem in 1th superblock [ 436.358680][T10319] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 436.366537][T10319] F2FS-fs (loop13): Can't find valid F2FS filesystem in 2th superblock [ 436.385318][T10319] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1025'. [ 436.606604][ T5927] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 436.846537][ T5927] usb 3-1: Using ep0 maxpacket: 16 [ 436.853221][ T5927] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 436.880125][ T5927] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.913218][ T5927] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 436.943923][ T5927] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 437.049374][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.728665][ T8665] gspca_sonixj: reg_w1 err -110 [ 437.746832][ T5927] usb 3-1: Product: syz [ 437.747048][T10300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.751004][ T5927] usb 3-1: Manufacturer: syz [ 437.751022][ T5927] usb 3-1: SerialNumber: syz [ 437.786638][ T8665] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 437.787046][T10300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.027653][ T8665] usb 6-1: USB disconnect, device number 27 [ 438.267842][ T5927] usb 3-1: 0:2 : does not exist [ 438.811543][T10330] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1029'. [ 438.831538][T10330] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1029'. [ 439.599924][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.647588][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.344152][ T5927] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 440.522472][T10335] [ 440.524802][T10335] ====================================================== [ 440.531791][T10335] WARNING: possible circular locking dependency detected [ 440.538778][T10335] syzkaller #0 Tainted: G L [ 440.544729][T10335] ------------------------------------------------------ [ 440.551804][T10335] syz.5.1031/10335 is trying to acquire lock: [ 440.557840][T10335] ffff888033de1c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 440.567111][T10335] [ 440.567111][T10335] but task is already holding lock: [ 440.574439][T10335] ffff888058992868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 440.582664][T10335] [ 440.582664][T10335] which lock already depends on the new lock. [ 440.582664][T10335] [ 440.593030][T10335] [ 440.593030][T10335] the existing dependency chain (in reverse order) is: [ 440.602009][T10335] [ 440.602009][T10335] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 440.609359][T10335] __mutex_lock+0x1aa/0x1ca0 [ 440.614444][T10335] anon_pipe_write+0x15d/0x1bd0 [ 440.619785][T10335] __kernel_write_iter+0x720/0xb10 [ 440.625393][T10335] __kernel_write+0xf5/0x140 [ 440.630472][T10335] autofs_notify_daemon+0x4db/0xd60 [ 440.636161][T10335] autofs_wait+0x10f3/0x1ac0 [ 440.641238][T10335] autofs_mount_wait+0x132/0x3c0 [ 440.646663][T10335] autofs_d_automount+0x4b2/0x960 [ 440.652177][T10335] __traverse_mounts+0x1b9/0x830 [ 440.657607][T10335] step_into_slowpath+0x772/0xf50 [ 440.663128][T10335] path_lookupat+0x627/0xc40 [ 440.668215][T10335] filename_lookup+0x224/0x5f0 [ 440.673469][T10335] kern_path+0x35/0x50 [ 440.678025][T10335] lookup_bdev+0xd8/0x280 [ 440.682857][T10335] resume_store+0x1d6/0x490 [ 440.687850][T10335] kobj_attr_store+0x58/0x80 [ 440.692929][T10335] sysfs_kf_write+0xf2/0x150 [ 440.698007][T10335] kernfs_fop_write_iter+0x3af/0x570 [ 440.703788][T10335] vfs_write+0x7d3/0x11d0 [ 440.708623][T10335] ksys_write+0x12a/0x250 [ 440.713445][T10335] do_syscall_64+0xcd/0xf80 [ 440.718447][T10335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.724841][T10335] [ 440.724841][T10335] -> #1 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 440.732544][T10335] __mutex_lock+0x1aa/0x1ca0 [ 440.737632][T10335] autofs_notify_daemon+0x4a6/0xd60 [ 440.743323][T10335] autofs_wait+0x10f3/0x1ac0 [ 440.748399][T10335] autofs_mount_wait+0x132/0x3c0 [ 440.753832][T10335] autofs_d_automount+0x4b2/0x960 [ 440.759353][T10335] __traverse_mounts+0x1b9/0x830 [ 440.764795][T10335] step_into_slowpath+0x772/0xf50 [ 440.770314][T10335] path_lookupat+0x627/0xc40 [ 440.776011][T10335] filename_lookup+0x224/0x5f0 [ 440.781278][T10335] kern_path+0x35/0x50 [ 440.785846][T10335] lookup_bdev+0xd8/0x280 [ 440.790728][T10335] resume_store+0x1d6/0x490 [ 440.795741][T10335] kobj_attr_store+0x58/0x80 [ 440.800830][T10335] sysfs_kf_write+0xf2/0x150 [ 440.805912][T10335] kernfs_fop_write_iter+0x3af/0x570 [ 440.811692][T10335] vfs_write+0x7d3/0x11d0 [ 440.816520][T10335] ksys_write+0x12a/0x250 [ 440.821439][T10335] do_syscall_64+0xcd/0xf80 [ 440.826433][T10335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.832828][T10335] [ 440.832828][T10335] -> #0 (&of->mutex){+.+.}-{4:4}: [ 440.840007][T10335] __lock_acquire+0x1669/0x2890 [ 440.845357][T10335] lock_acquire+0x179/0x330 [ 440.850356][T10335] __mutex_lock+0x1aa/0x1ca0 [ 440.855451][T10335] kernfs_fop_write_iter+0x28f/0x570 [ 440.861232][T10335] iter_file_splice_write+0xa24/0x12b0 [ 440.867185][T10335] do_splice+0x1478/0x1fc0 [ 440.872096][T10335] __do_splice+0x32a/0x360 [ 440.877546][T10335] __x64_sys_splice+0x187/0x250 [ 440.882902][T10335] do_syscall_64+0xcd/0xf80 [ 440.887898][T10335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.894281][T10335] [ 440.894281][T10335] other info that might help us debug this: [ 440.894281][T10335] [ 440.904473][T10335] Chain exists of: [ 440.904473][T10335] &of->mutex --> &sbi->pipe_mutex --> &pipe->mutex [ 440.904473][T10335] [ 440.916858][T10335] Possible unsafe locking scenario: [ 440.916858][T10335] [ 440.924272][T10335] CPU0 CPU1 [ 440.929603][T10335] ---- ---- [ 440.934955][T10335] lock(&pipe->mutex); [ 440.939080][T10335] lock(&sbi->pipe_mutex); [ 440.946068][T10335] lock(&pipe->mutex); [ 440.952707][T10335] lock(&of->mutex); [ 440.956656][T10335] [ 440.956656][T10335] *** DEADLOCK *** [ 440.956656][T10335] [ 440.964764][T10335] 2 locks held by syz.5.1031/10335: [ 440.969922][T10335] #0: ffff8880357ae420 (sb_writers#8){.+.+}-{0:0}, at: __do_splice+0x32a/0x360 [ 440.978944][T10335] #1: ffff888058992868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 440.987622][T10335] [ 440.987622][T10335] stack backtrace: [ 440.993497][T10335] CPU: 1 UID: 0 PID: 10335 Comm: syz.5.1031 Tainted: G L syzkaller #0 PREEMPT(full) [ 440.993513][T10335] Tainted: [L]=SOFTLOCKUP [ 440.993516][T10335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 440.993522][T10335] Call Trace: [ 440.993528][T10335] [ 440.993533][T10335] dump_stack_lvl+0x116/0x1f0 [ 440.993550][T10335] print_circular_bug+0x275/0x340 [ 440.993562][T10335] check_noncircular+0x146/0x160 [ 440.993575][T10335] __lock_acquire+0x1669/0x2890 [ 440.993587][T10335] ? __do_splice+0x32a/0x360 [ 440.993602][T10335] ? do_syscall_64+0xcd/0xf80 [ 440.993615][T10335] lock_acquire+0x179/0x330 [ 440.993626][T10335] ? kernfs_fop_write_iter+0x28f/0x570 [ 440.993643][T10335] ? __pfx___might_resched+0x10/0x10 [ 440.993669][T10335] __mutex_lock+0x1aa/0x1ca0 [ 440.993683][T10335] ? kernfs_fop_write_iter+0x28f/0x570 [ 440.993698][T10335] ? kernfs_fop_write_iter+0x28f/0x570 [ 440.993713][T10335] ? __asan_memcpy+0x3c/0x60 [ 440.993724][T10335] ? _copy_from_iter+0x161/0x16c0 [ 440.993739][T10335] ? __pfx___mutex_lock+0x10/0x10 [ 440.993752][T10335] ? __pfx__copy_from_iter+0x10/0x10 [ 440.993767][T10335] ? trace_kmalloc+0x2b/0xb0 [ 440.993779][T10335] ? __kmalloc_noprof+0x35d/0x910 [ 440.993794][T10335] ? kernfs_fop_write_iter+0x237/0x570 [ 440.993809][T10335] ? kernfs_fop_write_iter+0x28f/0x570 [ 440.993824][T10335] kernfs_fop_write_iter+0x28f/0x570 [ 440.993839][T10335] iter_file_splice_write+0xa24/0x12b0 [ 440.993857][T10335] ? __pfx_iter_file_splice_write+0x10/0x10 [ 440.993876][T10335] ? __pfx_iter_file_splice_write+0x10/0x10 [ 440.993891][T10335] do_splice+0x1478/0x1fc0 [ 440.993906][T10335] ? __lock_acquire+0x436/0x2890 [ 440.993918][T10335] ? __pfx_do_splice+0x10/0x10 [ 440.993932][T10335] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 440.993946][T10335] ? find_held_lock+0x2b/0x80 [ 440.993960][T10335] __do_splice+0x32a/0x360 [ 440.993975][T10335] ? __pfx___do_splice+0x10/0x10 [ 440.993991][T10335] __x64_sys_splice+0x187/0x250 [ 440.994006][T10335] do_syscall_64+0xcd/0xf80 [ 440.994018][T10335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.994029][T10335] RIP: 0033:0x7ff46958f749 [ 440.994044][T10335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.994054][T10335] RSP: 002b:00007ff46a397038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 440.994064][T10335] RAX: ffffffffffffffda RBX: 00007ff4697e6180 RCX: 00007ff46958f749 [ 440.994070][T10335] RDX: 000000000000000d RSI: 0000000000000000 RDI: 000000000000000b [ 440.994076][T10335] RBP: 00007ff469613f91 R08: 000000000000bfd1 R09: 0000000000000000 [ 440.994082][T10335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.994087][T10335] R13: 00007ff4697e6218 R14: 00007ff4697e6180 R15: 00007ffebb0c26a8 [ 440.994096][T10335] [ 441.289588][ T5927] usb 3-1: USB disconnect, device number 55 [ 441.321387][ T9765] udevd[9765]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 441.617405][T10341] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 441.677186][T10340] blktrace: Concurrent blktraces are not allowed on sg0