last executing test programs: 2m48.295094421s ago: executing program 3 (id=5065): r0 = socket$kcm(0xa, 0x2, 0x0) open(&(0x7f0000000140)='./file0\x00', 0xa0000, 0xa1) openat$sndseq(0xffffffffffffff9c, 0x0, 0x202400) mkdir(0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x700, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2m47.334206181s ago: executing program 3 (id=5066): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000200)={r1, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x9, 0x6, &(0x7f0000000540)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ldst={0x2, 0x2, 0x2, 0xa, 0x0, 0xffffffffffffffe0, 0x8}], &(0x7f0000000180)='GPL\x00', 0x9, 0x29, &(0x7f00000001c0)=""/41, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0xa, 0x4, 0xff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000280)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x8, 0xa}, {0x5, 0x3, 0x3, 0x9}, {0x4, 0x5, 0x9, 0x2}, {0x2, 0x2, 0x3, 0xb}], 0x10, 0x3}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7000000fdffffffbfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff000000000f040000000000001d4002000000000065040000000000000f030000000000001d440000000000007a0a00fe000000000f00000000000000b5000000000000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b1100886475923906f88b53987ad0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d64360f56e24e6d2105bd901128c7e0ec82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7dfcb59b854e9d5a17f48a7382f1b3fa4526650ea6cef13d000000225d85ae49cee383f936ad657b303ab841dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c1070bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c22ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fd03000000022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b884114f244a9bf93f04bf072f0861f5c0b000000004000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99705cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0706a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2811e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96735600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922923806ca84d69ea370db27a5ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca311a28ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da7418fd3aa81cff202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c829aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0d0274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f4441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbf34c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cbf5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d9436220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd9000000000000f05fe239d3d6dafc367f12689b6700000000bd4990d9dc174a69aadffdea5445fd3c13350af85d308caee689736c06417b52541eb5871d820b850dcb00877bbe2ed19d911564f11adeb52ec3047cfdcac8a8bab6ee365941cf792155f589226758e9c8bec8289b3012ca74bfe210e0315b384ce982e16f93f3e0b1385cfaab63bd36b141dfbc7f96ee549b8b52c311e5c657943f2a5d177f03e10b3595ed13458472a2eab1ea987a0668e52fff5c716fb5950852186649ce7362b45225f050c1c37327b6833025cc1dff2d57df674be03bab30901188386d248370"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2m45.328107814s ago: executing program 3 (id=5074): timer_create(0x0, 0x0, &(0x7f0000000300)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (fail_nth: 1) 2m44.389059845s ago: executing program 3 (id=5077): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000300)={'dt2811\x00', [0x2f00, 0x5, 0xd09a, 0xfff80003, 0x2, 0x8, 0x20000044, 0x4000006, 0xffe, 0x9, 0x8, 0x11001, 0x11, 0x5, 0x1, 0x3, 0x1100005, 0x40000009, 0x830, 0x9, 0x7fffffff, 0x800002, 0x800, 0xe2dc, 0x2, 0x4, 0x1000007, 0x9, 0x4, 0xf358, 0x70f, 0x1000]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000300000020"}) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x8000}, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x7, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x10) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) 2m41.118858242s ago: executing program 3 (id=5088): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) (async) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r2], 0x9) (async, rerun: 64) syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 64) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read$char_usb(r4, &(0x7f0000000200)=""/73, 0x49) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m40.018018299s ago: executing program 3 (id=5094): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = syz_io_uring_setup(0x3685, &(0x7f00000000c0)={0x0, 0x79af, 0x800, 0x4, 0x216}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2000, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) r3 = fanotify_init(0x200, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x9, 0x7, 0x1, 0x4100, 0xffffffffffffffff}) sendfile(r4, r3, &(0x7f0000000040)=0x3, 0xac5) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000100)={0x23800080, &(0x7f0000000040), 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') r7 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000000)={0x10, 0x1, 0x1, "a90037e7f30f000080df4832c305f70000000000004840080000000000008300", 0x37303250}) read$FUSE(r6, 0x0, 0x0) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 2m22.861836971s ago: executing program 32 (id=5094): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = syz_io_uring_setup(0x3685, &(0x7f00000000c0)={0x0, 0x79af, 0x800, 0x4, 0x216}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2000, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) r3 = fanotify_init(0x200, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x9, 0x7, 0x1, 0x4100, 0xffffffffffffffff}) sendfile(r4, r3, &(0x7f0000000040)=0x3, 0xac5) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000100)={0x23800080, &(0x7f0000000040), 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') r7 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000000)={0x10, 0x1, 0x1, "a90037e7f30f000080df4832c305f70000000000004840080000000000008300", 0x37303250}) read$FUSE(r6, 0x0, 0x0) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 14.502863869s ago: executing program 0 (id=5532): socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x15) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0xff2e) read$FUSE(0xffffffffffffffff, &(0x7f0000002d40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[@ANYBLOB="800c00002100100027bd7000fddbdf25fe8000000000000000000000000000bbff0100000000000000000000000000014e2100004e2000000a0080005c000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="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"], 0xc80}, 0x1, 0x0, 0x0, 0x20040001}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x4}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) read$alg(r6, &(0x7f0000000780)=""/4110, 0x100e) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f00000000c0)=0x2, 0x4) getpid() setns(0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, 0xfffffffffffffffd, &(0x7f0000000180)=0x21) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x50}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 12.238256793s ago: executing program 2 (id=5539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000c7cf00000000000a78000000060a0b040000000000000000020000034c000480240001800b000100736f636b65740000"], 0xa0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000010) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f00000003c0)={@loopback}, &(0x7f0000000300)=0x14) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000000c0)='S', 0x1, 0x24000004, &(0x7f0000000140)={0xa, 0x4e23, 0x3, @loopback, 0x3510}, 0x1c) syz_open_dev$char_usb(0xc, 0xb4, 0x687a7ad7) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000034000000030a01020000000000000000010000000900030073797a310000000008000a40000000030900010073797a3100000000140000001100010000000000000000000000000abf0af28883a383a49ec19d"], 0x7c}}, 0x0) 11.83884449s ago: executing program 2 (id=5540): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e1f, 0x0, @loopback, 0x2}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) socket$caif_seqpacket(0x25, 0x5, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) madvise(&(0x7f0000283000/0x4000)=nil, 0x4000, 0x9) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 11.28850315s ago: executing program 4 (id=5541): mkdir(&(0x7f0000000140)='./control\x00', 0x5) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1fe, 0x4, 0x1}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) ptrace$ARCH_MAP_VDSO_X32(0x1e, r0, 0x10001, 0x2001) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1c}) read(0xffffffffffffffff, &(0x7f0000000200)=""/145, 0x91) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8) 11.177669959s ago: executing program 0 (id=5542): socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x15) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0xff2e) read$FUSE(0xffffffffffffffff, &(0x7f0000002d40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[@ANYBLOB="800c00002100100027bd7000fddbdf25fe8000000000000000000000000000bbff0100000000000000000000000000014e2100004e2000000a0080005c000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="b06b6e000100000008001d0006000000250c01007368613531322d6e656f6e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e85e0000c27a56a3af0ee88304243b7abb8fbeed88214aed6285d0ec1be006764eaf417cf41ee8f4537d711b0b0bbad340e410f4413d7ce146812324a7e79779ff2388dbeec67efccf459cfa0312ccb52450d7cfa445c7b1ef32ba72cafd5e7d237e22008338621b9e82fe5f804774865b789c60334b1681718c2a1dc0e8a21ac115e66f20d20bece7704a6a393fea1dc4ed062ea7e1271464085c4bfde9acdb2a53119f1fb7e7b4eeb523d81f9ec12e5bf5e7e232b7b952ae54fef5ab8ea3f486e3206572fbdd16199c6dc9207581da5e8f4d955885c68ef32c37f905a0788888717529a842655e600c2db3322b78fe42799c9c110c6dc8e1500b18c24608442be4ebd1b7215fa5b776aa45d19ae289b0915ac208711abfe3b70abccbc1087ecc9b3676a5365b1a2d91eb102fccde2474881b6211f2eb57c7ea328e7a099683890d90b0c234e19fadac59b0430003e4f7ac898a34326c0c3c7343011130f54b37a3e667edc93d9b175379441ee69681af9a7bfee47da79117f8750b7379fc293e60d583215c4820ac82b18c6c8557c0bcf6cf49961731b33fb6b1213e535ec60b9bb1a4abe5140eca29fd4d728e1bbd4b27205aae2f5c4fc2c7bbeda0142b35b699fd429d7e267b3abd5f47942c1ba3af1f05e5470f90b7f277cbb55867b6eb4f02232ae00bcb802352a7f431781232ec6574f6ca4c2c5c78a6af806a03c12abc28971038f9e15adbaa104f70cb86e08df2d9667f0c629a95971f4e9f33bf1217d4c455e3975dc9929ef06e9327ab2fab34f80be88a3c9a162f9cd33e6538d1b9888405caa97a389c6e206c28fc4ed25fa7e1155bc9e7682c664571792e00beca5e0a4c058bd51c1a24f747254caab1daf6916e8838b79f20e73f9424245ce531f1176f1dcd72fb0e881380162e4c3d0d4e5517c19d3e8ea1cfa7587403ff56e445d1bd10151300f8dbb0b4330b088216e26b55ea72960441859cc74ad10b3f3c6d28a392114afbd2c1263b34159b87ae53fa318db400980865da20303746dcb8968f26b752fc77283ce205f542847bd95631ca0c07203088809ea4dedd543d85fd0593adb1001a129c7ece1f2c321c1fa30ac9c7f24c90aedaa0bcde13c00cc4ae584c615c237c3702603fc3200d1da2646a1ddaa92650f5c998f50f0caf33a0205ea14e4de99da644e2cefeb6647b4a5525951237725c89a786e2b3304179b64b799836ba6f9fdfd6ac160c5bb8b14f252013bd204ab9d424e1c3092ecb774c116c36a5e353e4300bf76f610349d16e4d542862082439e540178e89adb1d54a9efe174ba33ceb3afb7feb5977e8f6036dd006f07d214f743bdcc2e429574026fd4a581f270dad57bac9baade152bbdab76c0c203aa262f347cd9ab5313ed9e884d71b8dd5d5ac1abaf147a587f703d388df263de8053b2ed95d2158530990168afadcb02116ea5985cd1132fa9b9f64a557b4c30a01c3e2cd891fe34b61e8b61de6a848ee6d864d0e2234e8f9b6702cc9939f5cf21415f402b8b9a67a0c5d20c68f4b29a6294aa39dbec96e213f9c99151728ed7aa9614356c44dd1c0e120a3e1665d8ff4914d0699f6f7ae3911cf6c90b1f8a499550436fe244b49cc6ecf85137a03aa1be9dd58c49375eab55e77ac451d55c1e17d6a13ccde36d49ad40359f3521ed2dd40c0a805ad3f8bd77f117d2bb359e1330c69527f6df8195a35b2550eb9d592c5993b746b83020f8fda3136b76cd291d6c62e95974feddf0ac784acf1268ada9235b0eb07c8e4c8026e4c273e9b98b9cb64777bc213664ba4dedb49a546ef3b50e9fe17de8d912c61d6207281e0e44f46255770f64d18e23e39d70d8c49eac50e06d3840909be357ed30f3cb04e745d488675eb282f526c2fd66f06bcf04bf2586a3c51d608aefb2bf5e5b351919b5249d6b2ca42419da7c25fc4999ea9c5d9ee95bbfec225e47903dd01c4aeab2e50db844028a756d40a6e46d57dc5dd1255c8168c07973ee86b57e91133f03155add06cdfa7f0baa2819ae8ff980ae66ba2aa7f24aef69addec39151e597e8965564439ca672fe8616fcc51365cf7c4ea1450d3eb40fe967954d10b85d8762177f5dd7f6e60552e8d31da062743a3ee11b6e5bbf7398d06b0f129db35d101198992fecc1af1029552917ad8b9ea2655e73bf6b79f72faad6cde339be24919ab366c5c9f5d3af3a172ba83a1fc1dbcdaff0b5df47c1239b1fbf935f9138f7a9969246771fa1b52a3beef7358bb9313ccdc4a32f4a130dd6fd4d96433a9f8e6e22d33f7949815aff7610105bb0c70ae2e41bc69343037975374974262c36af1526dd0dab1778887e2082fdbec941eaa57f31cbd62d14f4adc3fcdc1de729f1164390569dd0a8fc051e46378b50ad7c33b5afbd71a0f7c65b928c4c0368214af33d3e64b0cc27a73446c9ece59b900bfdc1859e89240645e26969b819bbec70ef069846a550aea6449e045c2a19199527acb92dfbad832f3ca19428f51b36c60f8aff3334fcec318c3db4bc52c3528241fec66d3bf74209f422029118c55e59e80371b475f091edff3c7c614e6f1f002ee3dfc069813c9bef6b00195b5d8b4898f6cd6d28b891462279005c0baa604b60473fc5a185c01e3366bc05ebf80f92fab85a8aea96f634344ba79b8407c4e3ed61d7d1df6ab77a34024c2d8252d8e50927e88e1c0a42685af36b2d01a6f50b3db187bd6ae36809146178702eb28456d1eb43ba3334dfa7e9c486ea431e52f8f5c56926fa52fe0986e4d10595e695c695e8ea4d289e551be0261eb2385d020be750dc17c070a849f57bd707cd01d68abed2cf4dd28bae7ba323105e1561884a52145319af75da1284db5372fd4d582caa8279cfebe62c8ed964cb32b8eeabe53cc9b5a7258fdc55ef6b01461e485b3b1897630a09d27a40901b2ec7b47e94da9889588ee339f08b4594799d299be67117ae41b7b74f868f74c278a07bcf87ba29b455291c9c5161b1318bae1f68ba81e3f9772c9750a5f9735c7e69817aaa64f17e77b5f4d1c6911af22ee159a8995fa75437a1c7a319f1815fba764d442ea69509edb7d5ed3ded780a96cace4a9e9ea1d007fecd0c9882450368adfbe7e3b114968e62f45642b695375aca14e29cb11bc8f4e2607bbded8f97052cb65ce178baa1bf7d903c17ca53299a34ee7efc1732b45e773f48f9267a887995c10efc7bf9e0aea56ae7804c3f900f3e454f529e8de26ae0fa4871ef30db12ded3aab98bd25a3feb70e3bc782165b0deaada39af126b3e66635d3710aca947e6e1ae5458fcae25ec3e10285ca9f9c33883a0ef73d120dffdef81d0451949f0a3a633211e1dd0cc3d653a7ec33108eb7dcbb295974528e79a1608ddddaf75edee6161eb0c70aa66a323e96aaa1b75fd872eefc482787332fdb696cfc5dd87636d4068b8b83387149123044ef95c816905c3c88cc79d62671670772350568856a2653e85fee5e1a5b9849d2acbe9011944a5fb8aee797f216909fa9a76f24cd2eed1d9c68a12f3aad45d27e5e1efcbc4877f9f41eaa0932fdb87e29462cdce56abebd38a39d8ba61c96a97521d97e308a8485565ce673daae1ea4a8f7a00c68a524c98385853f7195543e851f8d401d0a8b569615f74bca76889c60facae3017e92bace610ffee82fee71b972c8c73b104e8b839033bcbebf867dc9bcb8fca57d89a1beb3188244a8f63c9a465207cccfde0fe5fdb9087a0b82381c94837fc4ba46c7797c250fac01d19f25ecd38a0cbfc26cc9d0393d3b460859e29fab53a4da205b3ca5d1bc1022637a712155a47148cf926d9d056853edbe0b993b3cbd531e4d55b82b68bf28b73b2c1e8d491d226660b2fb079f85d1e3d0a2a869e18676aaabf40608c6cf125164ac08ba569112e2c876b397dde4aa57277671967319a4201dbae45d6e49e5b05b8b5c01c6d648924e68a723c19e0b93ed5f3199720f090f4803c067a64e5909f382cf124a16b90af34e949541158e989c0f1c5e19fd92e9705a6d21bf1342a4794a19062c64875066827b418c55e65b247d03211b506197213d53422f3da6146eff828db6b9ef89d17fcaa7923e31534d7d5a8d530335b9098aa8a3235c073119beff9faade8cae67ea616aa3d9f61236a4102fb767097adaa7b1599a1b9cfe280adfad3f47862d152f5379b8debbee1b807fc3b6f5afacac02a34e7a122b294166f7cc4ccb7530d976ae2c7df638c917c809f884a7fb097c7f62c31245ef0422664d4921405ee899a83d2d8ff9ffedbbd0a96692ccc8e6e8530237000000b3672872733102d95b0ac3ac6492dd4aa5e15253eb2caaf959982ebbed6c6560e635080e5e00e38a00f8a444d7dae2a47ad42413654b8b07efc19adc4ac0ffff5d826f5d4f4ba067412690afe0d5f946b691957ef5323150222c095db8eeb86cd4619619b8fd33"], 0xc80}, 0x1, 0x0, 0x0, 0x20040001}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x4}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) read$alg(0xffffffffffffffff, &(0x7f0000000780)=""/4110, 0x100e) getpid() r6 = socket$inet6_sctp(0xa, 0x1, 0x84) accept(r6, 0xfffffffffffffffd, &(0x7f0000000180)=0x21) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 10.386946439s ago: executing program 1 (id=5544): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) lsm_list_modules(0x0, 0x0, 0x0) 10.243777363s ago: executing program 1 (id=5545): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$inet6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) syz_emit_ethernet(0x5b, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500004d0000000000889078ac1eff01ac1414aa0b009078005c00004c050007006700080108fffdac1414aaffffffff83174ee00000017f000001ac1414210000007fac0703080000321032e044b51143bd20c38d342e90642fcdfc657a343dcf4aa98dd77a2715286af30c9cd2c91c83dbf6dd5cfa5f650cfd4576ebd33e402ccb74b85fe0ab3af5a5982cf80518a50bd0e0b73b12c0e01bf8334409a5ce0d087dc019a27ce5544bb6289904aae72bb83c6ff2000000"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = dup(r3) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x3, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, 0x2, @in=@empty, 0x3504, 0x4, 0x3, 0x0, 0x0, 0xfffffffe, 0x20000}]}]}, 0xfc}}, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f0000}, 0x0) getdents(0xffffffffffffffff, 0x0, 0x3b) io_uring_setup(0x1148, &(0x7f0000000300)={0x0, 0xc95e, 0x1, 0x2, 0x30f}) 10.212369096s ago: executing program 2 (id=5546): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_io_uring_setup(0xbe7, &(0x7f0000000400)={0x0, 0xe7a8, 0x80, 0x3, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000300), 0x1) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r8, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r8, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) setresgid(r5, 0xffffffffffffffff, 0x0) sendmmsg$unix(r3, &(0x7f0000009980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee00}}}], 0x20, 0x10}}], 0x1, 0x44) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400000, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socket$pptp(0x18, 0x1, 0x2) 7.841383385s ago: executing program 0 (id=5550): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) 7.74555665s ago: executing program 0 (id=5551): mkdir(&(0x7f0000000140)='./control\x00', 0x5) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1fe, 0x4, 0x1}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) ptrace$ARCH_MAP_VDSO_X32(0x1e, r0, 0x10001, 0x2001) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1c}) read(r3, &(0x7f0000000200)=""/145, 0x91) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8) 7.545700957s ago: executing program 4 (id=5552): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e1f, 0x0, @loopback, 0x2}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) socket$caif_seqpacket(0x25, 0x5, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) madvise(&(0x7f0000283000/0x4000)=nil, 0x4000, 0x9) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 7.461909095s ago: executing program 1 (id=5553): socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x15) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0xff2e) read$FUSE(0xffffffffffffffff, &(0x7f0000002d40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[@ANYBLOB="800c00002100100027bd7000fddbdf25fe8000000000000000000000000000bbff0100000000000000000000000000014e2100004e2000000a0080005c000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="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"], 0xc80}, 0x1, 0x0, 0x0, 0x20040001}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x4}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) read$alg(r6, &(0x7f0000000780)=""/4110, 0x100e) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f00000000c0)=0x2, 0x4) getpid() setns(0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, 0xfffffffffffffffd, &(0x7f0000000180)=0x21) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x50}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 7.340791867s ago: executing program 2 (id=5554): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x80, 0x80, 0x8, 0x4, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x64, 0x8, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000000000000000e000000850000000500000095"], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x40, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x18) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201080014ccea10f0031d1fbbbc010203010902240003010230070904030000508d79020904000d00ff"], 0x0) syz_usb_connect$cdc_ncm(0x1, 0x87, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0xd, 0x100, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x8d40, 0x8, 0x29}, {0x6, 0x24, 0x1a, 0xffff, 0x14}, [@mdlm={0x15, 0x24, 0x12, 0x1230}, @acm={0x4, 0x24, 0x2, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x7, 0x10, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x80, 0xdb, 0x4}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0xbd, 0x7c, 0x5, 0x20, 0x6}, 0x26, &(0x7f00000001c0)={0x5, 0xf, 0x26, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x8, 0x8, 0x54b8}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xd0, "0281f2e01aa3f2e2dc815063d2d1bc10"}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x42a}}, {0x18, &(0x7f0000000280)=@string={0x18, 0x3, "0da72443c255ae20f007814a2aac7ece51ce148b7e73"}}, {0x0, 0x0}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x480a}}]}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46043, 0x1) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x3, &(0x7f0000000100)=0x11006965) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0)='FREEZING\x00', 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0xa}]}}]}, 0x3c}}, 0x480c4) 5.697484667s ago: executing program 0 (id=5556): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$inet6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) syz_emit_ethernet(0x5b, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500004d0000000000889078ac1eff01ac1414aa0b009078005c00004c050007006700080108fffdac1414aaffffffff83174ee00000017f000001ac1414210000007fac0703080000321032e044b51143bd20c38d342e90642fcdfc657a343dcf4aa98dd77a2715286af30c9cd2c91c83dbf6dd5cfa5f650cfd4576ebd33e402ccb74b85fe0ab3af5a5982cf80518a50bd0e0b73b12c0e01bf8334409a5ce0d087dc019a27ce5544bb6289904aae72bb83c6ff2000000"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = dup(r3) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x3, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, 0x2, @in=@empty, 0x3504, 0x4, 0x3, 0x0, 0x0, 0xfffffffe, 0x20000}]}]}, 0xfc}}, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f0000}, 0x0) getdents(0xffffffffffffffff, 0x0, 0x3b) io_uring_setup(0x1148, &(0x7f0000000300)={0x0, 0xc95e, 0x1, 0x2, 0x30f}) 5.088997268s ago: executing program 5 (id=5558): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000040000000000000092030000534450000800000018300000040000000000000000000000185200000800000000000000000000008520000003000000181a", @ANYBLOB="0000000000000000186a00000000000000000000030000009dfcb8097b24008becaff14940675532c548cc8c6ae5c2aa6110301b29f04a8b754a5c3b77436880f5d7dee4011b72dd24bdae2e890d1c98fa422c9b7889d27257b623b04028d9b154f0446c65a610ad9ed0e2c260158e7c4a19d9c08566c408e3d612031e61f82a7be109bd7519f295bdb6a9c5"], &(0x7f0000000080)='GPL\x00', 0x200, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x5, 0x6, 0x1000}, 0x10, 0x2a9bf, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000140)=[{0x2, 0x4, 0x7}, {0x2, 0x2, 0x3, 0xa0a2cff5ddeefbdd}, {0x5, 0x2, 0x2}]}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000480)=0x9) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x11) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b2844869"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x20004801) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaabb080045000028006400e000000111009078e0000002000000020100000000000000"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0xc0000000, 0x1000000}}}}}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000040)}, 0x20000890) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="57c20102030109021b0001000010000904430001317d55000905020200020200"/45], 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x40, 0x0) 4.64593783s ago: executing program 4 (id=5559): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$inet6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) syz_emit_ethernet(0x5b, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500004d0000000000889078ac1eff01ac1414aa0b009078005c00004c050007006700080108fffdac1414aaffffffff83174ee00000017f000001ac1414210000007fac0703080000321032e044b51143bd20c38d342e90642fcdfc657a343dcf4aa98dd77a2715286af30c9cd2c91c83dbf6dd5cfa5f650cfd4576ebd33e402ccb74b85fe0ab3af5a5982cf80518a50bd0e0b73b12c0e01bf8334409a5ce0d087dc019a27ce5544bb6289904aae72bb83c6ff2000000"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = dup(r3) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x3, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, 0x2, @in=@empty, 0x3504, 0x4, 0x3, 0x0, 0x0, 0xfffffffe, 0x20000}]}]}, 0xfc}}, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f0000}, 0x0) getdents(0xffffffffffffffff, 0x0, 0x3b) io_uring_setup(0x1148, &(0x7f0000000300)={0x0, 0xc95e, 0x1, 0x2, 0x30f}) 4.389705482s ago: executing program 1 (id=5560): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000040000000000000092030000534450000800000018300000040000000000000000000000185200000800000000000000000000008520000003000000181a0000", @ANYBLOB="0000000000000000186a00000000000000000000030000009dfcb8097b24008becaff14940675532c548cc8c6ae5c2aa6110301b29f04a8b754a5c3b77436880f5d7dee4011b72dd24bdae2e890d1c98fa422c9b7889d27257b623b04028d9b154f0446c65a610ad9ed0e2c260158e7c4a19d9c08566c408e3d612031e61f82a7be109bd7519f295bdb6a9c5"], 0x0, 0x200, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x5, 0x6, 0x1000}, 0x10, 0x2a9bf, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000140)=[{0x2, 0x4, 0x7}, {0x2, 0x2, 0x3, 0xa0a2cff5ddeefbdd}, {0x5, 0x2, 0x2}]}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000480)=0x9) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x11) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x20004801) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaabb080045000028006400e000000111009078e0000002000000020100000000000000"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0xc0000000, 0x1000000}}}}}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000040)}, 0x20000890) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="57c20102030109021b0001000010000904430001317d55000905020200020200"/45], 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x40, 0x0) 4.125083323s ago: executing program 2 (id=5561): socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x15) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0xff2e) read$FUSE(0xffffffffffffffff, &(0x7f0000002d40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[@ANYBLOB="800c00002100100027bd7000fddbdf25fe8000000000000000000000000000bbff0100000000000000000000000000014e2100004e2000000a0080005c000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="b06b6e000100000008001d0006000000250c01007368613531322d6e656f6e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e85e0000c27a56a3af0ee88304243b7abb8fbeed88214aed6285d0ec1be006764eaf417cf41ee8f4537d711b0b0bbad340e410f4413d7ce146812324a7e79779ff2388dbeec67efccf459cfa0312ccb52450d7cfa445c7b1ef32ba72cafd5e7d237e22008338621b9e82fe5f804774865b789c60334b1681718c2a1dc0e8a21ac115e66f20d20bece7704a6a393fea1dc4ed062ea7e1271464085c4bfde9acdb2a53119f1fb7e7b4eeb523d81f9ec12e5bf5e7e232b7b952ae54fef5ab8ea3f486e3206572fbdd16199c6dc9207581da5e8f4d955885c68ef32c37f905a0788888717529a842655e600c2db3322b78fe42799c9c110c6dc8e1500b18c24608442be4ebd1b7215fa5b776aa45d19ae289b0915ac208711abfe3b70abccbc1087ecc9b3676a5365b1a2d91eb102fccde2474881b6211f2eb57c7ea328e7a099683890d90b0c234e19fadac59b0430003e4f7ac898a34326c0c3c7343011130f54b37a3e667edc93d9b175379441ee69681af9a7bfee47da79117f8750b7379fc293e60d583215c4820ac82b18c6c8557c0bcf6cf49961731b33fb6b1213e535ec60b9bb1a4abe5140eca29fd4d728e1bbd4b27205aae2f5c4fc2c7bbeda0142b35b699fd429d7e267b3abd5f47942c1ba3af1f05e5470f90b7f277cbb55867b6eb4f02232ae00bcb802352a7f431781232ec6574f6ca4c2c5c78a6af806a03c12abc28971038f9e15adbaa104f70cb86e08df2d9667f0c629a95971f4e9f33bf1217d4c455e3975dc9929ef06e9327ab2fab34f80be88a3c9a162f9cd33e6538d1b9888405caa97a389c6e206c28fc4ed25fa7e1155bc9e7682c664571792e00beca5e0a4c058bd51c1a24f747254caab1daf6916e8838b79f20e73f9424245ce531f1176f1dcd72fb0e881380162e4c3d0d4e5517c19d3e8ea1cfa7587403ff56e445d1bd10151300f8dbb0b4330b088216e26b55ea72960441859cc74ad10b3f3c6d28a392114afbd2c1263b34159b87ae53fa318db400980865da20303746dcb8968f26b752fc77283ce205f542847bd95631ca0c07203088809ea4dedd543d85fd0593adb1001a129c7ece1f2c321c1fa30ac9c7f24c90aedaa0bcde13c00cc4ae584c615c237c3702603fc3200d1da2646a1ddaa92650f5c998f50f0caf33a0205ea14e4de99da644e2cefeb6647b4a5525951237725c89a786e2b3304179b64b799836ba6f9fdfd6ac160c5bb8b14f252013bd204ab9d424e1c3092ecb774c116c36a5e353e4300bf76f610349d16e4d542862082439e540178e89adb1d54a9efe174ba33ceb3afb7feb5977e8f6036dd006f07d214f743bdcc2e429574026fd4a581f270dad57bac9baade152bbdab76c0c203aa262f347cd9ab5313ed9e884d71b8dd5d5ac1abaf147a587f703d388df263de8053b2ed95d2158530990168afadcb02116ea5985cd1132fa9b9f64a557b4c30a01c3e2cd891fe34b61e8b61de6a848ee6d864d0e2234e8f9b6702cc9939f5cf21415f402b8b9a67a0c5d20c68f4b29a6294aa39dbec96e213f9c99151728ed7aa9614356c44dd1c0e120a3e1665d8ff4914d0699f6f7ae3911cf6c90b1f8a499550436fe244b49cc6ecf85137a03aa1be9dd58c49375eab55e77ac451d55c1e17d6a13ccde36d49ad40359f3521ed2dd40c0a805ad3f8bd77f117d2bb359e1330c69527f6df8195a35b2550eb9d592c5993b746b83020f8fda3136b76cd291d6c62e95974feddf0ac784acf1268ada9235b0eb07c8e4c8026e4c273e9b98b9cb64777bc213664ba4dedb49a546ef3b50e9fe17de8d912c61d6207281e0e44f46255770f64d18e23e39d70d8c49eac50e06d3840909be357ed30f3cb04e745d488675eb282f526c2fd66f06bcf04bf2586a3c51d608aefb2bf5e5b351919b5249d6b2ca42419da7c25fc4999ea9c5d9ee95bbfec225e47903dd01c4aeab2e50db844028a756d40a6e46d57dc5dd1255c8168c07973ee86b57e91133f03155add06cdfa7f0baa2819ae8ff980ae66ba2aa7f24aef69addec39151e597e8965564439ca672fe8616fcc51365cf7c4ea1450d3eb40fe967954d10b85d8762177f5dd7f6e60552e8d31da062743a3ee11b6e5bbf7398d06b0f129db35d101198992fecc1af1029552917ad8b9ea2655e73bf6b79f72faad6cde339be24919ab366c5c9f5d3af3a172ba83a1fc1dbcdaff0b5df47c1239b1fbf935f9138f7a9969246771fa1b52a3beef7358bb9313ccdc4a32f4a130dd6fd4d96433a9f8e6e22d33f7949815aff7610105bb0c70ae2e41bc69343037975374974262c36af1526dd0dab1778887e2082fdbec941eaa57f31cbd62d14f4adc3fcdc1de729f1164390569dd0a8fc051e46378b50ad7c33b5afbd71a0f7c65b928c4c0368214af33d3e64b0cc27a73446c9ece59b900bfdc1859e89240645e26969b819bbec70ef069846a550aea6449e045c2a19199527acb92dfbad832f3ca19428f51b36c60f8aff3334fcec318c3db4bc52c3528241fec66d3bf74209f422029118c55e59e80371b475f091edff3c7c614e6f1f002ee3dfc069813c9bef6b00195b5d8b4898f6cd6d28b891462279005c0baa604b60473fc5a185c01e3366bc05ebf80f92fab85a8aea96f634344ba79b8407c4e3ed61d7d1df6ab77a34024c2d8252d8e50927e88e1c0a42685af36b2d01a6f50b3db187bd6ae36809146178702eb28456d1eb43ba3334dfa7e9c486ea431e52f8f5c56926fa52fe0986e4d10595e695c695e8ea4d289e551be0261eb2385d020be750dc17c070a849f57bd707cd01d68abed2cf4dd28bae7ba323105e1561884a52145319af75da1284db5372fd4d582caa8279cfebe62c8ed964cb32b8eeabe53cc9b5a7258fdc55ef6b01461e485b3b1897630a09d27a40901b2ec7b47e94da9889588ee339f08b4594799d299be67117ae41b7b74f868f74c278a07bcf87ba29b455291c9c5161b1318bae1f68ba81e3f9772c9750a5f9735c7e69817aaa64f17e77b5f4d1c6911af22ee159a8995fa75437a1c7a319f1815fba764d442ea69509edb7d5ed3ded780a96cace4a9e9ea1d007fecd0c9882450368adfbe7e3b114968e62f45642b695375aca14e29cb11bc8f4e2607bbded8f97052cb65ce178baa1bf7d903c17ca53299a34ee7efc1732b45e773f48f9267a887995c10efc7bf9e0aea56ae7804c3f900f3e454f529e8de26ae0fa4871ef30db12ded3aab98bd25a3feb70e3bc782165b0deaada39af126b3e66635d3710aca947e6e1ae5458fcae25ec3e10285ca9f9c33883a0ef73d120dffdef81d0451949f0a3a633211e1dd0cc3d653a7ec33108eb7dcbb295974528e79a1608ddddaf75edee6161eb0c70aa66a323e96aaa1b75fd872eefc482787332fdb696cfc5dd87636d4068b8b83387149123044ef95c816905c3c88cc79d62671670772350568856a2653e85fee5e1a5b9849d2acbe9011944a5fb8aee797f216909fa9a76f24cd2eed1d9c68a12f3aad45d27e5e1efcbc4877f9f41eaa0932fdb87e29462cdce56abebd38a39d8ba61c96a97521d97e308a8485565ce673daae1ea4a8f7a00c68a524c98385853f7195543e851f8d401d0a8b569615f74bca76889c60facae3017e92bace610ffee82fee71b972c8c73b104e8b839033bcbebf867dc9bcb8fca57d89a1beb3188244a8f63c9a465207cccfde0fe5fdb9087a0b82381c94837fc4ba46c7797c250fac01d19f25ecd38a0cbfc26cc9d0393d3b460859e29fab53a4da205b3ca5d1bc1022637a712155a47148cf926d9d056853edbe0b993b3cbd531e4d55b82b68bf28b73b2c1e8d491d226660b2fb079f85d1e3d0a2a869e18676aaabf40608c6cf125164ac08ba569112e2c876b397dde4aa57277671967319a4201dbae45d6e49e5b05b8b5c01c6d648924e68a723c19e0b93ed5f3199720f090f4803c067a64e5909f382cf124a16b90af34e949541158e989c0f1c5e19fd92e9705a6d21bf1342a4794a19062c64875066827b418c55e65b247d03211b506197213d53422f3da6146eff828db6b9ef89d17fcaa7923e31534d7d5a8d530335b9098aa8a3235c073119beff9faade8cae67ea616aa3d9f61236a4102fb767097adaa7b1599a1b9cfe280adfad3f47862d152f5379b8debbee1b807fc3b6f5afacac02a34e7a122b294166f7cc4ccb7530d976ae2c7df638c917c809f884a7fb097c7f62c31245ef0422664d4921405ee899a83d2d8ff9ffedbbd0a96692ccc8e6e8530237000000b3672872733102d95b0ac3ac6492dd4aa5e15253eb2caaf959982ebbed6c6560e635080e5e00e38a00f8a444d7dae2a47ad42413654b8b07efc19adc4ac0ffff5d826f5d4f4ba067412690afe0d5f946b691957ef5323150222c095db8eeb86cd4619619b8fd33"], 0xc80}, 0x1, 0x0, 0x0, 0x20040001}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x4}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) read$alg(0xffffffffffffffff, &(0x7f0000000780)=""/4110, 0x100e) getpid() r6 = socket$inet6_sctp(0xa, 0x1, 0x84) accept(r6, 0xfffffffffffffffd, &(0x7f0000000180)=0x21) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3.675834357s ago: executing program 5 (id=5562): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) futex(0x0, 0x9, 0x0, 0x0, &(0x7f0000000000), 0x14fffffe) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0x66, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, &(0x7f0000003080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = msgget$private(0x0, 0x200) msgsnd(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0xff, 0x0) msgrcv(r5, &(0x7f0000000f40)={0x0, ""/255}, 0x107, 0xffffffffffffffff, 0x2000) msgsnd(r5, &(0x7f0000000340)={0x3}, 0x8, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), r4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0], 0x50) close(0x3) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='zonefs\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000680)="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", 0x24a}], 0x1}}], 0x1, 0x4000001) 3.444159476s ago: executing program 1 (id=5563): r0 = socket(0x10, 0x3, 0x0) sendmsg$tipc(r0, &(0x7f0000000540)={&(0x7f0000000180)=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}, 0x2}}, 0x10, &(0x7f0000000480)=[{&(0x7f00000001c0)="2f82276db014964a9894fd3462745faa6dfe1e5710f67c9034988c860787464062934988d9bfc1de98e5605bc5084056065cf20631fdb1605346abf825", 0x3d}, {&(0x7f0000000200)="5bd5ac806f28de5864fe7a261fcbf99ed4c384b6", 0x14}, {&(0x7f0000000240)="ac98bc7781c91b5b5e1ecbf53161b48fa2d20a5c570a192bdd7132fd2889d86e145272b612d2550ee863fe9231fc6168a65a63ecb2ec51571b360d222296ebdd3a2e8ed57e06bdcc375977c427f9b4c009501ba6209becf972a72c20ec98ecf721a50899", 0x64}, {&(0x7f00000002c0)="b9b65441f9a06f0737ed321842da9be85a1e8eefcd7b4a2058cde1b11f1a325b23029e71dd0b12bc269f75f3165cde09f639575bde965087f74bee321ef7a1e1eeb4326a44e8d1c47af70eea7563984221abc66be5a9cb2b0107d93bd29bd43ebceec210d4890c0e5d6a5aee1247d7bc0e73447997fcc9058ad40a1bfa2b3f457cfc5603", 0x84}, {&(0x7f00000003c0)="62ee156f91155bd4a754f67251965ed5f8a027a22b8c6b8fec639a8387cd6c1abc7c542e144348bc12e90a60aa7701362286139f4dbade7cc013ac151528d5da2431f40299ae91e2f76de8960d54de134ad28de5fbb41e4dc21cece3c919f76bcf5f5efe44c87744fc25fb3ac646aa5d838040f8870da0dd4f25359e4fe115e53e85ce31fc4909023a38ab0c79135f", 0x8f}], 0x5, &(0x7f0000000500)="ef11afd96f2ac6a85bbfae14a4f31875a27ccf1afd1726f1944560e55f795f111a6942", 0x23, 0x10000000}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f00000002c0)='./file0/file0\x00') 3.044690859s ago: executing program 1 (id=5564): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x100, 0xffffffffffffffff, 0x10000}, 0x50) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) r5 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c9, 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r5) read$FUSE(r4, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={r3, &(0x7f0000000340), 0x0}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r9, 0x215, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r12, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[], 0x0) 3.03458003s ago: executing program 5 (id=5565): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.301911563s ago: executing program 4 (id=5566): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xe8, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r6 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x9, 0x400) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, &(0x7f0000000680)={{0x2, 0x2, 0x6, 0xc3b, 'syz1\x00', 0x8}, 0x4, 0x30, 0x80, 0x0, 0x3, 0x3, 'syz0\x00', &(0x7f0000000300)=['\x00', 'system.posix_acl_access\x00', 'system.posix_acl_access\x00'], 0x31}) r7 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8) r8 = socket$inet(0x2, 0x2, 0x8) r9 = socket$kcm(0x10, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0xb52b9c7732f7d2c0}, 0x24014844) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @fallback=0x18}, 0x94) 2.001440443s ago: executing program 5 (id=5567): socket$kcm(0x10, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) socket$l2tp6(0xa, 0x2, 0x73) syz_io_uring_setup(0x7d5b, &(0x7f0000000100)={0x0, 0xe773, 0x800, 0x2, 0x270}, 0x0, 0x0) syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xa2c2, 0x10100}, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_open_procfs(0x0, &(0x7f0000000680)='coredump_filter\x00') signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x4) sendfile(r5, r4, 0x0, 0x100000002) 1.547656512s ago: executing program 5 (id=5568): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x10, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x50) r2 = fanotify_init(0x202, 0x1000) fanotify_mark(r2, 0x1, 0x48000013, r0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000011140100fffffffd0000000008004a0000000000080003000100000008004b0013000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) 1.2210751s ago: executing program 5 (id=5569): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e1f, 0x0, @loopback, 0x2}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) socket$caif_seqpacket(0x25, 0x5, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) madvise(&(0x7f0000283000/0x4000)=nil, 0x4000, 0x9) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1.072823182s ago: executing program 4 (id=5570): r0 = socket(0x10, 0x3, 0x0) sendmsg$tipc(r0, &(0x7f0000000540)={&(0x7f0000000180)=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}, 0x2}}, 0x10, &(0x7f0000000480)=[{&(0x7f00000001c0)="2f82276db014964a9894fd3462745faa6dfe1e5710f67c9034988c860787464062934988d9bfc1de98e5605bc5084056065cf20631fdb1605346abf825", 0x3d}, {&(0x7f0000000200)="5bd5ac806f28de5864fe7a261fcbf99ed4c384b6", 0x14}, {&(0x7f0000000240)="ac98bc7781c91b5b5e1ecbf53161b48fa2d20a5c570a192bdd7132fd2889d86e145272b612d2550ee863fe9231fc6168a65a63ecb2ec51571b360d222296ebdd3a2e8ed57e06bdcc375977c427f9b4c009501ba6209becf972a72c20ec98ecf721a50899", 0x64}, {&(0x7f00000002c0)="b9b65441f9a06f0737ed321842da9be85a1e8eefcd7b4a2058cde1b11f1a325b23029e71dd0b12bc269f75f3165cde09f639575bde965087f74bee321ef7a1e1eeb4326a44e8d1c47af70eea7563984221abc66be5a9cb2b0107d93bd29bd43ebceec210d4890c0e5d6a5aee1247d7bc0e73447997fcc9058ad40a1bfa2b3f457cfc5603", 0x84}, {&(0x7f00000003c0)="62ee156f91155bd4a754f67251965ed5f8a027a22b8c6b8fec639a8387cd6c1abc7c542e144348bc12e90a60aa7701362286139f4dbade7cc013ac151528d5da2431f40299ae91e2f76de8960d54de134ad28de5fbb41e4dc21cece3c919f76bcf5f5efe44c87744fc25fb3ac646aa5d838040f8870da0dd4f25359e4fe115e53e85ce31fc4909023a38ab0c79135f", 0x8f}], 0x5, &(0x7f0000000500)="ef11afd96f2ac6a85bbfae14a4f31875a27ccf1afd1726f1944560e55f795f111a6942", 0x23, 0x10000000}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(0x0, 0x2480, 0x1) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f00000002c0)='./file0/file0\x00') 128.078385ms ago: executing program 0 (id=5571): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x80, 0x80, 0x8, 0x4, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x64, 0x8, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000000000000000e000000850000000500000095"], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x40, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x18) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201080014ccea10f0031d1fbbbc010203010902240003010230070904030000508d79020904000d00ff"], 0x0) syz_usb_connect$cdc_ncm(0x1, 0x87, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0xd, 0x100, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x8d40, 0x8, 0x29}, {0x6, 0x24, 0x1a, 0xffff, 0x14}, [@mdlm={0x15, 0x24, 0x12, 0x1230}, @acm={0x4, 0x24, 0x2, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x7, 0x10, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x80, 0xdb, 0x4}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0xbd, 0x7c, 0x5, 0x20, 0x6}, 0x26, &(0x7f00000001c0)={0x5, 0xf, 0x26, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x8, 0x8, 0x54b8}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xd0, "0281f2e01aa3f2e2dc815063d2d1bc10"}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x42a}}, {0x18, &(0x7f0000000280)=@string={0x18, 0x3, "0da72443c255ae20f007814a2aac7ece51ce148b7e73"}}, {0x0, 0x0}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x480a}}]}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46043, 0x1) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x3, &(0x7f0000000100)=0x11006965) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0)='FREEZING\x00', 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0xa}]}}]}, 0x3c}}, 0x480c4) 113.778013ms ago: executing program 2 (id=5572): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 0s ago: executing program 4 (id=5573): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='rtc_irq_set_state\x00', 0xffffffffffffffff, 0x0, 0x4000000}, 0x18) r5 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) r6 = dup3(0xffffffffffffffff, r5, 0x0) ioctl$MON_IOCG_STATS(r6, 0xc0109207, &(0x7f00000001c0)) listen(r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r8, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x43, "4c4cf5b8db9e3cc94d0bb742664e66ec89d3a5db6ba9026cc6653755ab02d19c50c81260a4a3b95132e20f62a4b5feea8d1b12dc81da0ba8b4009d4700a6d3373b3294"}, &(0x7f0000000080)=0x67) kernel console output (not intermixed with test programs): 03e syscall=16 compat=0 ip=0x7f647a38f34b code=0x7ffc0000 [ 1438.890390][T23863] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4907'. [ 1439.556509][T23841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1439.571681][T23841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1439.791066][ T30] audit: type=1326 audit(1765579140.135:4536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23840 comm="syz.3.4903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f647a38f34b code=0x7ffc0000 [ 1439.840311][ T5931] usb 4-1: USB disconnect, device number 17 [ 1439.856038][ T30] audit: type=1326 audit(1765579140.135:4537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23840 comm="syz.3.4903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f647a38f34b code=0x7ffc0000 [ 1439.882822][ T5171] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 1439.947047][ T30] audit: type=1326 audit(1765579140.135:4538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23840 comm="syz.3.4903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f647a38f34b code=0x7ffc0000 [ 1439.970792][ T30] audit: type=1326 audit(1765579140.135:4539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23840 comm="syz.3.4903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f647a38f34b code=0x7ffc0000 [ 1440.002732][ T30] audit: type=1326 audit(1765579140.135:4540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23840 comm="syz.3.4903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f647a38f34b code=0x7ffc0000 [ 1440.058604][ T30] audit: type=1326 audit(1765579140.135:4541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23840 comm="syz.3.4903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f647a3c2005 code=0x7ffc0000 [ 1440.260917][T18606] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1441.472082][T18606] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1441.480350][T18606] usb 5-1: config 0 has no interface number 0 [ 1441.500081][T18606] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1441.560145][T18606] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.568926][T18606] usb 5-1: Product: syz [ 1441.584805][T18606] usb 5-1: Manufacturer: syz [ 1441.589814][T18606] usb 5-1: SerialNumber: syz [ 1441.612821][T18606] usb 5-1: config 0 descriptor?? [ 1441.862188][T22880] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1441.877292][T18606] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1441.919170][ T6306] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1441.932107][T18606] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1441.972765][T18606] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1441.988508][T18606] usb 5-1: media controller created [ 1442.046098][T18606] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1442.065357][T22880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1442.088100][ T6306] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1442.598622][T22880] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1442.616408][ T6306] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1442.629381][T22880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.638722][ T6306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.662716][T22880] usb 1-1: config 0 descriptor?? [ 1442.682415][ T6306] usb 2-1: config 0 descriptor?? [ 1442.704668][ T6306] pwc: Askey VC010 type 2 USB webcam detected. [ 1442.716288][T23905] erspan1: entered allmulticast mode [ 1442.761446][T15025] Bluetooth: hci2: link tx timeout [ 1442.784478][T15025] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1442.813772][T23908] Bluetooth: hci2: link tx timeout [ 1442.820274][T23908] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1442.922654][T23913] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4925'. [ 1443.150372][T22880] keytouch 0003:0926:3333.0026: fixing up Keytouch IEC report descriptor [ 1443.164868][ T6306] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1443.176157][T22880] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0026/input/input133 [ 1443.190468][ T6306] pwc: recv_control_msg error -32 req 02 val 2700 [ 1443.197966][ T6306] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1443.206938][ T6306] pwc: recv_control_msg error -32 req 04 val 1000 [ 1443.215486][ T6306] pwc: recv_control_msg error -32 req 04 val 1300 [ 1443.223498][T16030] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1443.224337][ T6306] pwc: recv_control_msg error -32 req 04 val 1400 [ 1443.258505][ T6306] pwc: recv_control_msg error -32 req 02 val 2000 [ 1443.266404][ T6306] pwc: recv_control_msg error -32 req 02 val 2100 [ 1443.273854][ T6306] pwc: recv_control_msg error -32 req 04 val 1500 [ 1443.281850][ T6306] pwc: recv_control_msg error -32 req 02 val 2500 [ 1443.290899][ T6306] pwc: recv_control_msg error -32 req 02 val 2400 [ 1443.298570][ T6306] pwc: recv_control_msg error -32 req 02 val 2600 [ 1443.305527][ T6306] pwc: recv_control_msg error -32 req 02 val 2900 [ 1443.339548][T22880] keytouch 0003:0926:3333.0026: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 1443.418311][T16030] usb 4-1: config 2 has an invalid interface number: 220 but max is 0 [ 1443.427500][T16030] usb 4-1: config 2 has no interface number 0 [ 1443.435741][T16030] usb 4-1: config 2 interface 220 has no altsetting 0 [ 1443.490944][T16030] usb 4-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=94.f4 [ 1443.500377][T16030] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.513704][T16030] usb 4-1: Product: syz [ 1443.519317][T16030] usb 4-1: Manufacturer: syz [ 1443.529061][T16030] usb 4-1: SerialNumber: syz [ 1443.550277][ T6306] pwc: recv_control_msg error -71 req 04 val 1100 [ 1443.566585][ T6306] pwc: recv_control_msg error -71 req 04 val 1200 [ 1443.616118][ T6306] pwc: Registered as video103. [ 1443.647144][T22880] usb 1-1: USB disconnect, device number 22 [ 1443.659810][ T6306] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input134 [ 1443.679820][ T6306] usb 2-1: USB disconnect, device number 14 [ 1443.745042][T18606] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1443.794031][T23911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1443.816094][T23911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1443.861382][T23911] syzkaller1: entered promiscuous mode [ 1443.873574][T23911] syzkaller1: entered allmulticast mode [ 1443.944445][T18606] usb 5-1: USB disconnect, device number 83 [ 1445.019363][T23908] Bluetooth: hci2: command 0x0406 tx timeout [ 1447.985141][T23956] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4934'. [ 1448.226753][T23951] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.235050][T23951] bridge0: port 1(bridge_slave_0) entered blocking state [ 1448.240428][T22880] usb 4-1: USB disconnect, device number 18 [ 1448.242221][T23951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1448.380354][T23962] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4937'. [ 1448.720021][T23969] bridge0: left allmulticast mode [ 1448.735475][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1448.735491][ T30] audit: type=1326 audit(1765579149.648:4558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23965 comm="syz.3.4939" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f647a38f749 code=0x0 [ 1450.585431][T23996] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4948'. [ 1450.607553][T23987] netlink: 'syz.0.4945': attribute type 2 has an invalid length. [ 1450.638049][T23987] netlink: 'syz.0.4945': attribute type 1 has an invalid length. [ 1450.654285][T23987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4945'. [ 1450.676241][T23987] nbd: illegal input index 65544 [ 1450.831115][ T30] audit: type=1400 audit(1765579151.603:4559): avc: denied { connect } for pid=24004 comm="syz.4.4950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1451.270789][ T5931] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1451.484512][ T5931] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1451.818531][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1451.830463][ T5931] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1451.839647][ T5931] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1451.849602][ T5931] usb 5-1: Manufacturer: syz [ 1451.857313][ T5931] usb 5-1: config 0 descriptor?? [ 1451.927614][ T30] audit: type=1400 audit(1765579152.632:4560): avc: denied { create } for pid=24014 comm="syz.0.4953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1451.949337][ T5931] rc_core: IR keymap rc-hauppauge not found [ 1451.959552][T24015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1451.964323][ T30] audit: type=1400 audit(1765579152.660:4561): avc: denied { ioctl } for pid=24014 comm="syz.0.4953" path="socket:[85111]" dev="sockfs" ino=85111 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1451.970049][T24015] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1451.994250][ T5931] Registered IR keymap rc-empty [ 1452.024510][ T5931] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1452.045168][ T5931] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input135 [ 1452.143607][ T30] audit: type=1400 audit(1765579152.735:4562): avc: denied { read open } for pid=24018 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1452.192793][ T30] audit: type=1400 audit(1765579152.735:4563): avc: denied { getattr } for pid=24018 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1452.275394][ T30] audit: type=1400 audit(1765579152.735:4564): avc: denied { read } for pid=24014 comm="syz.0.4953" path="socket:[85113]" dev="sockfs" ino=85113 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1452.369931][T24029] kernel read not supported for file /¡sxt (pid: 24029 comm: syz.1.4955) [ 1452.383505][ T30] audit: type=1400 audit(1765579153.043:4565): avc: denied { add_name } for pid=24016 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1452.406202][ C1] igorplugusb 5-1:0.0: receive overflow invalid: 255 [ 1452.424483][T24029] SELinux: policydb string length 1886744434 does not match expected length 8 [ 1452.433930][ T30] audit: type=1400 audit(1765579153.043:4566): avc: denied { create } for pid=24016 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1452.439687][T24029] SELinux: failed to load policy [ 1452.456722][ T30] audit: type=1400 audit(1765579153.043:4567): avc: denied { write } for pid=24016 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb0.link" dev="tmpfs" ino=12737 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1452.565585][T24039] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4956'. [ 1452.621347][T24005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.630613][T24005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.722986][T18606] usb 5-1: USB disconnect, device number 84 [ 1453.489396][T24054] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4958'. [ 1453.892814][T24066] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4962'. [ 1458.843918][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1458.843933][ T30] audit: type=1400 audit(1765579159.105:4573): avc: denied { write } for pid=24120 comm="syz.2.4972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1459.085643][T24126] lo: entered allmulticast mode [ 1459.496959][T24125] lo: left allmulticast mode [ 1459.822380][ T30] audit: type=1400 audit(1765579160.021:4574): avc: denied { read } for pid=24141 comm="syz.1.4978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1460.371269][T22880] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1460.618141][T22880] usb 4-1: Using ep0 maxpacket: 16 [ 1460.742256][T22880] usb 4-1: config 1 has an invalid interface number: 3 but max is 2 [ 1460.773226][T22880] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1460.806083][T22880] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1460.829913][T22880] usb 4-1: config 1 has no interface number 1 [ 1460.925765][T22880] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1462.108959][T22880] usb 4-1: New USB device found, idVendor=03f0, idProduct=1f1d, bcdDevice=bc.bb [ 1462.119555][T22880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.140039][T22880] usb 4-1: Product: syz [ 1462.144345][T22880] usb 4-1: Manufacturer: syz [ 1462.149621][T22880] usb 4-1: SerialNumber: syz [ 1463.021505][T22880] usb 4-1: unknown number of interfaces: 2 [ 1463.505932][T22880] usb 4-1: USB disconnect, device number 19 [ 1464.394426][T24183] 9pnet_fd: Insufficient options for proto=fd [ 1465.545315][ T7364] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1465.889633][ T30] audit: type=1400 audit(1765579165.699:4575): avc: denied { read } for pid=24209 comm="syz.2.5000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1465.950184][T24211] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4999'. [ 1465.959551][ T30] audit: type=1400 audit(1765579165.699:4576): avc: denied { setopt } for pid=24209 comm="syz.2.5000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1466.018202][ T7364] usb 2-1: Using ep0 maxpacket: 16 [ 1466.024602][ T7364] usb 2-1: config 1 has an invalid interface number: 3 but max is 2 [ 1466.070277][ T7364] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1466.081080][ T7364] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1466.090068][ T7364] usb 2-1: config 1 has no interface number 1 [ 1466.097492][ T7364] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1466.228420][ T7364] usb 2-1: New USB device found, idVendor=03f0, idProduct=1f1d, bcdDevice=bc.bb [ 1466.244446][ T7364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.774615][ T7364] usb 2-1: Product: syz [ 1466.789391][ T7364] usb 2-1: Manufacturer: syz [ 1466.800556][ T7364] usb 2-1: SerialNumber: syz [ 1467.055427][T24200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.101884][T24200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1467.508245][ T7364] usb 2-1: unknown number of interfaces: 2 [ 1467.532876][ T7364] usb 2-1: USB disconnect, device number 15 [ 1468.444652][T24247] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5009'. [ 1469.620012][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1469.628708][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1472.199210][ T7364] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1472.215789][T24287] bond_slave_0: entered promiscuous mode [ 1472.221848][T24287] bond_slave_1: entered promiscuous mode [ 1472.231598][T24287] macvtap1: entered promiscuous mode [ 1472.236943][T24287] bond0: entered promiscuous mode [ 1472.243325][T24287] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1472.254109][T24287] bond0: left promiscuous mode [ 1472.263187][T24287] bond_slave_0: left promiscuous mode [ 1472.268679][T24287] bond_slave_1: left promiscuous mode [ 1472.467553][ T7364] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1472.479754][ T7364] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1472.491502][ T7364] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.850847][ T7364] usb 1-1: config 0 descriptor?? [ 1473.244737][T24306] netlink: 'syz.2.5023': attribute type 10 has an invalid length. [ 1473.257980][T24306] 8021q: adding VLAN 0 to HW filter on device team0 [ 1473.268939][ T30] audit: type=1400 audit(1765579172.528:4577): avc: denied { bind } for pid=24301 comm="syz.2.5023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1473.383550][ T30] audit: type=1400 audit(1765579172.696:4578): avc: denied { setopt } for pid=24301 comm="syz.2.5023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1473.420911][T24313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5025'. [ 1473.533979][ T7364] keytouch 0003:0926:3333.0027: fixing up Keytouch IEC report descriptor [ 1473.570789][ T7364] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0027/input/input136 [ 1473.809931][ T7364] keytouch 0003:0926:3333.0027: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 1474.767759][T24301] delete_channel: no stack [ 1474.811310][ T7364] usb 1-1: USB disconnect, device number 23 [ 1475.285460][T24322] fido_id[24322]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1475.846353][T24336] binder: 24334:24336 ioctl 40046205 0 returned -22 [ 1475.912513][T24336] xt_CONNSECMARK: invalid mode: 66 [ 1476.299880][ T30] audit: type=1400 audit(1765579175.418:4579): avc: denied { getopt } for pid=24334 comm="syz.1.5029" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1476.647572][T24350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5032'. [ 1478.106239][ T30] audit: type=1400 audit(1765579177.111:4580): avc: denied { getopt } for pid=24355 comm="syz.4.5034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1478.459627][T22880] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1479.063333][T22880] usb 5-1: config 2 has an invalid interface number: 194 but max is 0 [ 1479.082693][T22880] usb 5-1: config 2 has no interface number 0 [ 1479.102664][T22880] usb 5-1: config 2 interface 194 has no altsetting 0 [ 1479.168956][T22880] usb 5-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=ad.a7 [ 1479.198693][T22880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.224331][T22880] usb 5-1: Product: syz [ 1479.254592][T22880] usb 5-1: Manufacturer: syz [ 1479.272666][T22880] usb 5-1: SerialNumber: syz [ 1479.898104][T15025] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1479.906731][ T30] audit: type=1400 audit(1765579178.795:4581): avc: denied { write } for pid=24386 comm="syz.1.5045" path="socket:[86478]" dev="sockfs" ino=86478 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1479.966016][ T30] audit: type=1400 audit(1765579178.860:4582): avc: denied { setopt } for pid=24386 comm="syz.1.5045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1479.986894][T22880] cypress_m8 5-1:2.194: HID->COM RS232 Adapter converter detected [ 1480.055076][T22880] cyphidcom ttyUSB0: required endpoint is missing [ 1480.069387][T22880] usb 5-1: USB disconnect, device number 85 [ 1480.089640][T22880] cypress_m8 5-1:2.194: device disconnected [ 1480.109213][T24390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5042'. [ 1480.143335][ T30] audit: type=1400 audit(1765579179.029:4583): avc: denied { name_bind } for pid=24392 comm="syz.3.5047" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1480.498225][T24399] veth0: entered promiscuous mode [ 1480.503687][T24399] veth0: left promiscuous mode [ 1480.509643][ T30] audit: type=1400 audit(1765579179.366:4584): avc: denied { name_bind 0x1000000 } for pid=24398 comm="syz.0.5048" path="socket:[85811]" dev="sockfs" ino=85811 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1481.684286][T24416] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5053'. [ 1481.900779][ T30] audit: type=1400 audit(1765579180.666:4585): avc: denied { create } for pid=24405 comm="syz.4.5050" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1482.450451][ T30] audit: type=1400 audit(1765579181.190:4586): avc: denied { unlink } for pid=15024 comm="syz-executor" name="file0" dev="tmpfs" ino=2368 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1482.542181][ T30] audit: type=1400 audit(1765579181.264:4587): avc: denied { read } for pid=24428 comm="syz.4.5057" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1482.827370][T24438] loop6: detected capacity change from 0 to 524287487 [ 1482.835088][T24438] buffer_io_error: 54 callbacks suppressed [ 1482.835109][T24438] Buffer I/O error on dev loop6, logical block 0, async page read [ 1482.849031][T24438] Buffer I/O error on dev loop6, logical block 0, async page read [ 1482.857843][T24438] Buffer I/O error on dev loop6, logical block 0, async page read [ 1482.950562][T24438] Buffer I/O error on dev loop6, logical block 0, async page read [ 1482.958765][T24438] Buffer I/O error on dev loop6, logical block 0, async page read [ 1482.982654][T24438] Buffer I/O error on dev loop6, logical block 0, async page read [ 1482.999608][T24438] Buffer I/O error on dev loop6, logical block 0, async page read [ 1483.007682][T24438] Buffer I/O error on dev loop6, logical block 0, async page read [ 1483.015652][T24438] ldm_validate_partition_table(): Disk read failed. [ 1483.022389][T24438] Buffer I/O error on dev loop6, logical block 0, async page read [ 1483.030684][T24438] Buffer I/O error on dev loop6, logical block 0, async page read [ 1483.038787][T24438] Dev loop6: unable to read RDB block 0 [ 1483.046353][T24438] loop6: unable to read partition table [ 1483.059730][T24438] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1483.191037][T24449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5060'. [ 1483.741084][T24456] fuse: Bad value for 'fd' [ 1484.309804][T24464] lo speed is unknown, defaulting to 1000 [ 1484.321265][T24465] lo speed is unknown, defaulting to 1000 [ 1484.328671][T24465] wlan0 speed is unknown, defaulting to 1000 [ 1484.488819][T24464] wlan0 speed is unknown, defaulting to 1000 [ 1485.023807][ T5897] IPVS: starting estimator thread 0... [ 1485.126797][T24472] IPVS: using max 52 ests per chain, 124800 per kthread [ 1485.613445][T24482] xt_ecn: cannot match TCP bits for non-tcp packets [ 1485.722043][ T30] audit: type=1400 audit(1765579184.183:4588): avc: denied { mount } for pid=24479 comm="syz.4.5068" name="/" dev="autofs" ino=85986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1485.936136][ T30] audit: type=1400 audit(1765579184.426:4589): avc: denied { unmount } for pid=15024 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1486.580881][T24492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5071'. [ 1486.670044][ T30] audit: type=1400 audit(1765579185.128:4590): avc: denied { ioctl } for pid=24493 comm="syz.0.5073" path="socket:[86006]" dev="sockfs" ino=86006 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1487.018866][T24492] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1487.565494][T24509] FAULT_INJECTION: forcing a failure. [ 1487.565494][T24509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1487.601557][T24509] CPU: 0 UID: 0 PID: 24509 Comm: syz.3.5074 Tainted: G L syzkaller #0 PREEMPT(full) [ 1487.601590][T24509] Tainted: [L]=SOFTLOCKUP [ 1487.601596][T24509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1487.601607][T24509] Call Trace: [ 1487.601613][T24509] [ 1487.601620][T24509] dump_stack_lvl+0x16c/0x1f0 [ 1487.601654][T24509] should_fail_ex+0x512/0x640 [ 1487.601681][T24509] _copy_from_user+0x2e/0xd0 [ 1487.601703][T24509] get_timespec64+0x8b/0x240 [ 1487.601732][T24509] ? __pfx_get_timespec64+0x10/0x10 [ 1487.601758][T24509] ? __mutex_unlock_slowpath+0x161/0x790 [ 1487.601789][T24509] get_itimerspec64+0x1e/0x60 [ 1487.601817][T24509] __x64_sys_timer_settime+0x17d/0x2c0 [ 1487.601842][T24509] ? __pfx___x64_sys_timer_settime+0x10/0x10 [ 1487.601869][T24509] ? ksys_write+0x1ac/0x250 [ 1487.601900][T24509] do_syscall_64+0xcd/0xf80 [ 1487.601925][T24509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.601944][T24509] RIP: 0033:0x7f647a38f749 [ 1487.601961][T24509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1487.601978][T24509] RSP: 002b:00007f64785f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 1487.601997][T24509] RAX: ffffffffffffffda RBX: 00007f647a5e5fa0 RCX: 00007f647a38f749 [ 1487.602009][T24509] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000000 [ 1487.602019][T24509] RBP: 00007f64785f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1487.602030][T24509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1487.602041][T24509] R13: 00007f647a5e6038 R14: 00007f647a5e5fa0 R15: 00007fffb5437408 [ 1487.602066][T24509] [ 1487.891521][T24514] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5076'. [ 1490.813533][T24544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5083'. [ 1491.011387][T24544] bridge0: port 2(bridge_slave_1) entered disabled state [ 1491.018897][T24544] bridge0: port 1(bridge_slave_0) entered disabled state [ 1491.385209][T16030] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1491.534188][T17054] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1491.545104][T16030] usb 2-1: Using ep0 maxpacket: 16 [ 1491.552557][T16030] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1491.562635][T16030] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1491.574055][T16030] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1491.584332][T16030] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1491.593073][T16030] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1491.602309][T16030] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.610707][T16030] usb 2-1: Product: syz [ 1491.615267][T16030] usb 2-1: Manufacturer: syz [ 1491.620224][T16030] usb 2-1: SerialNumber: syz [ 1491.626189][T16030] usb 2-1: config 0 descriptor?? [ 1491.716342][T23234] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1491.724022][T17054] usb 4-1: Using ep0 maxpacket: 8 [ 1491.730947][T17054] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1491.741914][T17054] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1491.751240][T17054] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.761186][T17054] usb 4-1: config 0 descriptor?? [ 1491.855824][ T30] audit: type=1326 audit(1765579189.982:4591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24547 comm="syz.1.5085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6758f749 code=0x7ffc0000 [ 1491.881883][T16030] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input137 [ 1491.891527][ T30] audit: type=1326 audit(1765579189.982:4592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24547 comm="syz.1.5085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f2b6758f749 code=0x7ffc0000 [ 1491.917966][ T30] audit: type=1326 audit(1765579189.982:4593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24547 comm="syz.1.5085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6758f749 code=0x7ffc0000 [ 1491.918208][ T5171] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1491.941680][ T30] audit: type=1326 audit(1765579189.982:4594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24547 comm="syz.1.5085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b6758f34b code=0x7ffc0000 [ 1491.941721][ T30] audit: type=1326 audit(1765579189.982:4595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24547 comm="syz.1.5085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b6758f34b code=0x7ffc0000 [ 1491.941815][ T30] audit: type=1326 audit(1765579189.982:4596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24547 comm="syz.1.5085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b6758f34b code=0x7ffc0000 [ 1491.941857][ T30] audit: type=1326 audit(1765579189.982:4597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24547 comm="syz.1.5085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b6758f34b code=0x7ffc0000 [ 1491.941894][ T30] audit: type=1326 audit(1765579189.982:4598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24547 comm="syz.1.5085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b6758f34b code=0x7ffc0000 [ 1491.941963][ T30] audit: type=1326 audit(1765579189.982:4599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24547 comm="syz.1.5085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b6758f34b code=0x7ffc0000 [ 1491.942000][ T30] audit: type=1326 audit(1765579190.010:4600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24547 comm="syz.1.5085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b675c2005 code=0x7ffc0000 [ 1491.954813][T23234] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1492.081622][T24557] cgroup: fork rejected by pids controller in [ 1492.108172][T17054] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1492.125482][T24549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1492.134069][T24568] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5091'. [ 1492.148499][T24549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1492.173619][ T5171] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1492.181481][T23234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.206508][T24557] /syz3 [ 1492.218890][ T5171] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1492.232869][T23234] usb 5-1: Product: syz [ 1492.242486][T23234] usb 5-1: Manufacturer: syz [ 1492.247110][T23234] usb 5-1: SerialNumber: syz [ 1492.256351][ T5171] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1492.287635][T23234] usb 5-1: config 0 descriptor?? [ 1492.300953][T16030] usb 2-1: USB disconnect, device number 16 [ 1492.381338][T17054] usb 4-1: USB disconnect, device number 20 [ 1492.523430][T23234] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1492.531058][T24680] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5093'. [ 1492.770939][T23234] usb 5-1: USB disconnect, device number 86 [ 1494.011829][T24700] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5101'. [ 1494.166887][T24704] FAULT_INJECTION: forcing a failure. [ 1494.166887][T24704] name failslab, interval 1, probability 0, space 0, times 0 [ 1494.179532][T24704] CPU: 1 UID: 0 PID: 24704 Comm: syz.1.5100 Tainted: G L syzkaller #0 PREEMPT(full) [ 1494.179560][T24704] Tainted: [L]=SOFTLOCKUP [ 1494.179572][T24704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1494.179584][T24704] Call Trace: [ 1494.179592][T24704] [ 1494.179600][T24704] dump_stack_lvl+0x16c/0x1f0 [ 1494.179629][T24704] should_fail_ex+0x512/0x640 [ 1494.179653][T24704] ? fs_reclaim_acquire+0xae/0x150 [ 1494.179677][T24704] should_failslab+0xc2/0x120 [ 1494.179700][T24704] __kmalloc_noprof+0xeb/0x910 [ 1494.179725][T24704] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1494.179753][T24704] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1494.179772][T24704] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1494.179796][T24704] ? tomoyo_profile+0x47/0x60 [ 1494.179821][T24704] tomoyo_path_number_perm+0x245/0x580 [ 1494.179848][T24704] ? tomoyo_path_number_perm+0x237/0x580 [ 1494.179879][T24704] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1494.179909][T24704] ? find_held_lock+0x2b/0x80 [ 1494.179955][T24704] ? find_held_lock+0x2b/0x80 [ 1494.179976][T24704] ? hook_file_ioctl_common+0x144/0x410 [ 1494.180006][T24704] ? __fget_files+0x20e/0x3c0 [ 1494.180036][T24704] security_file_ioctl+0x9b/0x240 [ 1494.180058][T24704] __x64_sys_ioctl+0xb7/0x210 [ 1494.180081][T24704] do_syscall_64+0xcd/0xf80 [ 1494.180107][T24704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.180126][T24704] RIP: 0033:0x7f2b6758f749 [ 1494.180142][T24704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1494.180160][T24704] RSP: 002b:00007f2b684b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1494.180178][T24704] RAX: ffffffffffffffda RBX: 00007f2b677e6180 RCX: 00007f2b6758f749 [ 1494.180190][T24704] RDX: 0000200000000000 RSI: 0000000000008955 RDI: 0000000000000005 [ 1494.180202][T24704] RBP: 00007f2b684b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1494.180213][T24704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1494.180223][T24704] R13: 00007f2b677e6218 R14: 00007f2b677e6180 R15: 00007ffd8bbbf958 [ 1494.180249][T24704] [ 1494.180257][T24704] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1495.204756][T24714] blk_print_req_error: 55 callbacks suppressed [ 1495.204769][T24714] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1495.227455][T24714] buffer_io_error: 7 callbacks suppressed [ 1495.227471][T24714] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1495.266765][T24714] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1495.276043][T24714] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1495.285362][T24714] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1495.302638][T24714] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1495.314784][T24714] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1495.325574][T24714] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1495.335161][T24714] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1495.345916][T24714] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1495.355258][T24714] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1495.364994][T24714] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1495.374217][T24714] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1495.384376][T24714] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1495.411059][T24714] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1495.421595][T24714] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1495.434541][T24714] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1495.444313][T24714] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1495.458073][T24714] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1495.467508][T24714] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1495.486560][T24714] ldm_validate_partition_table(): Disk read failed. [ 1495.502460][T24714] Dev nbd0: unable to read RDB block 0 [ 1495.523754][T24714] nbd0: unable to read partition table [ 1496.467500][T24735] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5111'. [ 1497.916849][T23234] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1498.141072][T23234] usb 2-1: Using ep0 maxpacket: 16 [ 1498.148599][T23234] usb 2-1: config 1 has an invalid interface number: 3 but max is 2 [ 1498.157225][T23234] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1498.167702][T23234] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1498.176882][T23234] usb 2-1: config 1 has no interface number 1 [ 1498.183020][T23234] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1498.191374][T23234] usb 2-1: New USB device found, idVendor=03f0, idProduct=1f1d, bcdDevice=bc.bb [ 1498.200831][T23234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.208907][T23234] usb 2-1: Product: syz [ 1498.213104][T23234] usb 2-1: Manufacturer: syz [ 1498.218357][T23234] usb 2-1: SerialNumber: syz [ 1498.442761][T24751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1498.452714][T24751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1498.832514][T23234] usb 2-1: unknown number of interfaces: 2 [ 1498.962655][T23234] usb 2-1: USB disconnect, device number 17 [ 1499.534101][T24770] autofs: Unknown parameter 'ªªªªª9ªªªªªb' [ 1499.570431][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 1499.577640][ T30] audit: type=1400 audit(1765579197.194:4631): avc: denied { remount } for pid=24769 comm="syz.2.5122" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1499.662683][T24775] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5124'. [ 1499.905850][T24782] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5127'. [ 1500.106358][ T30] audit: type=1400 audit(1765579197.699:4632): avc: denied { create } for pid=24783 comm="syz.0.5128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1501.142969][ T30] audit: type=1400 audit(1765579198.307:4633): avc: denied { bind } for pid=24789 comm="syz.4.5130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1501.226865][T18608] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1501.411960][T24798] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5129'. [ 1501.508822][T18608] usb 1-1: Using ep0 maxpacket: 8 [ 1501.546556][T18608] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1501.561531][T18608] usb 1-1: config 8 has an invalid interface number: 255 but max is 0 [ 1501.582910][T18608] usb 1-1: config 8 has no interface number 0 [ 1501.590354][T18608] usb 1-1: config 8 interface 255 has no altsetting 0 [ 1501.608433][T18608] usb 1-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 1501.618003][T18608] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.635832][T18608] usb 1-1: Product: syz [ 1501.669710][T18608] usb 1-1: Manufacturer: syz [ 1501.674347][T18608] usb 1-1: SerialNumber: syz [ 1502.131831][T18608] catc 1-1:8.255: Can't set altsetting 1. [ 1502.137631][T18608] catc 1-1:8.255: probe with driver catc failed with error -5 [ 1502.177648][T18608] usb 1-1: USB disconnect, device number 24 [ 1502.332430][T24818] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5136'. [ 1503.257155][ T30] audit: type=1400 audit(1765579200.646:4634): avc: denied { bind } for pid=24825 comm="syz.2.5139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1504.566365][T24845] netlink: 'syz.1.5142': attribute type 10 has an invalid length. [ 1504.574297][T24845] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1504.585437][T24845] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1505.470565][ T30] audit: type=1400 audit(1765579202.713:4635): avc: denied { listen } for pid=24851 comm="syz.4.5145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1505.515994][T24834] futex_wake_op: syz.0.5141 tries to shift op by -1; fix this program [ 1505.817701][ T30] audit: type=1400 audit(1765579202.844:4636): avc: denied { write } for pid=24833 comm="syz.0.5141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1505.848683][ T30] audit: type=1400 audit(1765579202.853:4637): avc: denied { nlmsg_write } for pid=24833 comm="syz.0.5141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1505.999686][T24854] "syz.4.5145" (24854) uses obsolete ecb(arc4) skcipher [ 1506.576749][T24864] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5149'. [ 1507.456656][ T30] audit: type=1400 audit(1765579204.575:4638): avc: denied { create } for pid=24861 comm="syz.4.5148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1507.551805][ T30] audit: type=1400 audit(1765579204.575:4639): avc: denied { ioctl } for pid=24861 comm="syz.4.5148" path="socket:[88205]" dev="sockfs" ino=88205 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1507.658693][T24873] FAULT_INJECTION: forcing a failure. [ 1507.658693][T24873] name failslab, interval 1, probability 0, space 0, times 0 [ 1507.776148][T24873] CPU: 1 UID: 0 PID: 24873 Comm: syz.1.5151 Tainted: G L syzkaller #0 PREEMPT(full) [ 1507.776179][T24873] Tainted: [L]=SOFTLOCKUP [ 1507.776185][T24873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1507.776196][T24873] Call Trace: [ 1507.776203][T24873] [ 1507.776210][T24873] dump_stack_lvl+0x16c/0x1f0 [ 1507.776240][T24873] should_fail_ex+0x512/0x640 [ 1507.776263][T24873] ? fs_reclaim_acquire+0xae/0x150 [ 1507.776287][T24873] should_failslab+0xc2/0x120 [ 1507.776308][T24873] __kmalloc_noprof+0xeb/0x910 [ 1507.776341][T24873] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1507.776368][T24873] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1507.776387][T24873] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1507.776410][T24873] ? tomoyo_profile+0x47/0x60 [ 1507.776436][T24873] tomoyo_path_number_perm+0x245/0x580 [ 1507.776463][T24873] ? tomoyo_path_number_perm+0x237/0x580 [ 1507.776492][T24873] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1507.776522][T24873] ? find_held_lock+0x2b/0x80 [ 1507.776566][T24873] ? find_held_lock+0x2b/0x80 [ 1507.776585][T24873] ? hook_file_ioctl_common+0x144/0x410 [ 1507.776615][T24873] ? __fget_files+0x20e/0x3c0 [ 1507.776644][T24873] security_file_ioctl+0x9b/0x240 [ 1507.776665][T24873] __x64_sys_ioctl+0xb7/0x210 [ 1507.776688][T24873] do_syscall_64+0xcd/0xf80 [ 1507.776713][T24873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.776731][T24873] RIP: 0033:0x7f2b6758f749 [ 1507.776746][T24873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1507.776764][T24873] RSP: 002b:00007f2b684f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1507.776782][T24873] RAX: ffffffffffffffda RBX: 00007f2b677e5fa0 RCX: 00007f2b6758f749 [ 1507.776793][T24873] RDX: 0000200000000040 RSI: 00000000c0105512 RDI: 0000000000000003 [ 1507.776805][T24873] RBP: 00007f2b684f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1507.776816][T24873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1507.776827][T24873] R13: 00007f2b677e6038 R14: 00007f2b677e5fa0 R15: 00007ffd8bbbf958 [ 1507.776853][T24873] [ 1507.776860][T24873] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1509.762115][T23908] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1509.782432][T23908] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1509.790814][T23908] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1509.801532][T23908] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1509.812117][T23908] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1509.857476][T24896] lo speed is unknown, defaulting to 1000 [ 1509.915777][T24896] wlan0 speed is unknown, defaulting to 1000 [ 1509.979825][T24902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5159'. [ 1509.999695][T24902] netlink: 'syz.4.5159': attribute type 5 has an invalid length. [ 1510.022391][T24902] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5159'. [ 1510.232276][T24906] blk_print_req_error: 54 callbacks suppressed [ 1510.232324][T24906] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1510.248104][T24906] buffer_io_error: 54 callbacks suppressed [ 1510.248136][T24906] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1510.273944][T24906] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1510.283445][T24906] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1510.295189][T24906] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1510.304695][T24906] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1510.313127][T24906] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1510.325459][T24906] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1510.336109][T24906] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1510.345300][T24906] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1510.357781][T24906] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1510.367073][T24906] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1510.376042][T24906] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1510.388602][T24906] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1510.397627][T24906] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1510.406833][T24906] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1510.418590][T24906] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1510.427874][T24906] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1510.436808][T24906] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1510.451209][T24906] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1510.476513][T24906] ldm_validate_partition_table(): Disk read failed. [ 1510.497828][T24906] Dev nbd0: unable to read RDB block 0 [ 1510.520859][T24906] nbd0: unable to read partition table [ 1510.530338][T24906] syz.0.5160: attempt to access beyond end of device [ 1510.530338][T24906] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=127 [ 1510.549319][T24906] gfs2: error -5 reading superblock [ 1510.626420][T24909] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5161'. [ 1510.982141][T24896] chnl_net:caif_netlink_parms(): no params data found [ 1510.998663][ T30] audit: type=1400 audit(1765579207.886:4640): avc: denied { create } for pid=24903 comm="syz.0.5160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1511.098665][ T30] audit: type=1400 audit(1765579207.886:4641): avc: denied { accept } for pid=24903 comm="syz.0.5160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1511.282675][T24896] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.300660][T24896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.308148][T24896] bridge_slave_0: entered allmulticast mode [ 1511.316213][T24896] bridge_slave_0: entered promiscuous mode [ 1511.337866][T24896] bridge0: port 2(bridge_slave_1) entered blocking state [ 1511.345533][T24896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.352803][T24896] bridge_slave_1: entered allmulticast mode [ 1511.383486][T24896] bridge_slave_1: entered promiscuous mode [ 1511.687995][T24896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1511.732987][T24896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1511.985060][T24896] team0: Port device team_slave_0 added [ 1511.986514][T23908] Bluetooth: hci3: command tx timeout [ 1512.019462][T24896] team0: Port device team_slave_1 added [ 1512.089572][T24896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1512.113892][T24896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1512.140289][T24896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1512.153654][T24896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1512.166365][T24896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1512.221630][T24934] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5167'. [ 1512.577810][T24896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1512.651768][T24896] hsr_slave_0: entered promiscuous mode [ 1512.670176][T24896] hsr_slave_1: entered promiscuous mode [ 1512.701943][T24896] debugfs: 'hsr0' already exists in 'hsr' [ 1512.708785][T24896] Cannot create hsr debugfs directory [ 1513.867307][T15947] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1514.188178][T15947] usb 1-1: Using ep0 maxpacket: 16 [ 1514.209854][T23908] Bluetooth: hci3: command tx timeout [ 1514.250499][T15947] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1514.359149][T15947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1514.481551][ T30] audit: type=1400 audit(1765579211.132:4642): avc: denied { write } for pid=24950 comm="syz.4.5172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1514.510383][T15947] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1514.585636][T15947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.654931][T15947] usb 1-1: Product: syz [ 1514.715534][T15947] usb 1-1: Manufacturer: syz [ 1514.757551][T15947] usb 1-1: SerialNumber: syz [ 1514.904849][T15947] usb 1-1: config 0 descriptor?? [ 1515.101409][T15947] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1515.223700][T15947] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1515.420366][T24954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5173'. [ 1515.463287][T24954] FAULT_INJECTION: forcing a failure. [ 1515.463287][T24954] name failslab, interval 1, probability 0, space 0, times 0 [ 1515.470771][T24896] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1515.476737][T24954] CPU: 0 UID: 0 PID: 24954 Comm: syz.1.5173 Tainted: G L syzkaller #0 PREEMPT(full) [ 1515.476761][T24954] Tainted: [L]=SOFTLOCKUP [ 1515.476767][T24954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1515.476776][T24954] Call Trace: [ 1515.476782][T24954] [ 1515.476788][T24954] dump_stack_lvl+0x16c/0x1f0 [ 1515.476814][T24954] should_fail_ex+0x512/0x640 [ 1515.476833][T24954] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1515.476857][T24954] should_failslab+0xc2/0x120 [ 1515.476876][T24954] kmem_cache_alloc_noprof+0x83/0x770 [ 1515.476899][T24954] ? skb_clone+0x190/0x3f0 [ 1515.476926][T24954] ? skb_clone+0x190/0x3f0 [ 1515.476947][T24954] skb_clone+0x190/0x3f0 [ 1515.476970][T24954] netlink_deliver_tap+0xabd/0xd30 [ 1515.476992][T24954] netlink_unicast+0x64c/0x870 [ 1515.477012][T24954] ? __pfx_netlink_unicast+0x10/0x10 [ 1515.477038][T24954] netlink_sendmsg+0x8c8/0xdd0 [ 1515.477058][T24954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1515.477084][T24954] ____sys_sendmsg+0xa5d/0xc30 [ 1515.477103][T24954] ? copy_msghdr_from_user+0x10a/0x160 [ 1515.477125][T24954] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1515.477140][T24954] ? __lock_acquire+0x433/0x22f0 [ 1515.477178][T24954] ___sys_sendmsg+0x134/0x1d0 [ 1515.477202][T24954] ? __pfx____sys_sendmsg+0x10/0x10 [ 1515.477223][T24954] ? __lock_acquire+0x433/0x22f0 [ 1515.477277][T24954] __sys_sendmsg+0x16d/0x220 [ 1515.477299][T24954] ? __pfx___sys_sendmsg+0x10/0x10 [ 1515.477337][T24954] do_syscall_64+0xcd/0xf80 [ 1515.477359][T24954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1515.477375][T24954] RIP: 0033:0x7f2b6758f749 [ 1515.477388][T24954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1515.477403][T24954] RSP: 002b:00007f2b684f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1515.477422][T24954] RAX: ffffffffffffffda RBX: 00007f2b677e5fa0 RCX: 00007f2b6758f749 [ 1515.477433][T24954] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 0000000000000003 [ 1515.477443][T24954] RBP: 00007f2b684f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1515.477452][T24954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1515.477461][T24954] R13: 00007f2b677e6038 R14: 00007f2b677e5fa0 R15: 00007ffd8bbbf958 [ 1515.477484][T24954] [ 1515.477527][T24954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5173'. [ 1515.518830][ T30] audit: type=1400 audit(1765579212.114:4643): avc: denied { unmount } for pid=15024 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1515.522449][T24954] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5173'. [ 1515.532368][T24896] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1515.849906][T24896] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1515.885777][T24896] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1515.993763][T24896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1516.015339][T24896] 8021q: adding VLAN 0 to HW filter on device team0 [ 1516.039345][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.046450][ T5980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1516.055120][ T30] audit: type=1400 audit(1765579212.619:4644): avc: denied { read write } for pid=24960 comm="syz.1.5176" name="mouse0" dev="devtmpfs" ino=991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1516.088182][ T198] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.095441][ T198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1516.219950][T15947] em28xx 1-1:0.0: unknown em28xx chip ID (232) [ 1516.229894][ T30] audit: type=1400 audit(1765579212.778:4645): avc: denied { open } for pid=24960 comm="syz.1.5176" path="/dev/input/mouse0" dev="devtmpfs" ino=991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1516.684469][T24896] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1516.695358][T23908] Bluetooth: hci3: command tx timeout [ 1516.714024][T15947] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1516.732819][T24896] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1516.910414][T24856] Set syz1 is full, maxelem 65536 reached [ 1517.073613][T24978] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5179'. [ 1517.088547][T24896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1517.236319][T15947] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 1517.271586][T15947] em28xx 1-1:0.0: No AC97 audio processor [ 1517.434618][T15947] usb 1-1: USB disconnect, device number 25 [ 1517.435783][T15947] em28xx 1-1:0.0: Disconnecting em28xx [ 1517.544206][T15947] em28xx 1-1:0.0: Freeing device [ 1517.895646][T24896] veth0_vlan: entered promiscuous mode [ 1517.909497][T24896] veth1_vlan: entered promiscuous mode [ 1518.025741][T24896] veth0_macvtap: entered promiscuous mode [ 1518.282694][T24896] veth1_macvtap: entered promiscuous mode [ 1518.488242][T25006] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5183'. [ 1518.586599][T24896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1518.629010][T24896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1518.751673][ T5980] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.776847][ T5980] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.790005][ T5980] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.913173][T23908] Bluetooth: hci3: command tx timeout [ 1519.228158][ T2953] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1519.240775][T25018] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5185'. [ 1519.358798][ T3798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1519.379018][ T3798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1519.450739][ T30] audit: type=1400 audit(1765579215.799:4646): avc: denied { create } for pid=25019 comm="syz.4.5187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1519.477168][T16252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1519.544539][T16252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1519.745101][ T30] audit: type=1400 audit(1765579215.958:4647): avc: denied { setopt } for pid=25019 comm="syz.4.5187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1523.648290][T25070] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5197'. [ 1523.832731][T25071] netlink: 'syz.0.5199': attribute type 1 has an invalid length. [ 1523.879367][ T30] audit: type=1400 audit(1765579219.934:4648): avc: denied { read write } for pid=25067 comm="syz.0.5199" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1523.885960][T25071] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1523.992634][ T30] audit: type=1400 audit(1765579219.934:4649): avc: denied { open } for pid=25067 comm="syz.0.5199" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1524.667727][ T30] audit: type=1400 audit(1765579220.673:4650): avc: denied { getopt } for pid=25082 comm="syz.0.5204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1525.065198][ T30] audit: type=1400 audit(1765579220.748:4651): avc: denied { bind } for pid=25079 comm="syz.4.5203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1527.015777][ T30] audit: type=1400 audit(1765579222.862:4652): avc: denied { setopt } for pid=25105 comm="syz.2.5209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1527.392753][T25118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5211'. [ 1528.168526][T25120] netlink: 'syz.1.5214': attribute type 10 has an invalid length. [ 1528.192316][T25120] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1528.303421][T25120] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1528.721993][T25133] overlayfs: failed to clone upperpath [ 1528.796606][ T30] audit: type=1400 audit(1765579224.536:4653): avc: denied { setopt } for pid=25126 comm="syz.1.5215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1529.026300][ T30] audit: type=1400 audit(1765579224.536:4654): avc: denied { setopt } for pid=25126 comm="syz.1.5215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1530.065748][T25146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=25146 comm=syz.0.5221 [ 1530.597648][T18606] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1530.773749][T18606] usb 1-1: Using ep0 maxpacket: 16 [ 1530.878304][T18606] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1530.892587][T18606] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1530.921907][T18606] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1531.537304][T18606] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1531.555614][T18606] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1531.557345][T25169] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5227'. [ 1531.564808][T18606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.586852][T18606] usb 1-1: Product: syz [ 1531.653257][T18606] usb 1-1: Manufacturer: syz [ 1531.658819][T18606] usb 1-1: SerialNumber: syz [ 1531.746394][T18606] usb 1-1: config 0 descriptor?? [ 1532.361671][T15947] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1532.379411][ T30] audit: type=1326 audit(1765579227.885:4655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25152 comm="syz.0.5223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11bb8f749 code=0x7ffc0000 [ 1532.434479][T18606] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input138 [ 1532.523042][ T30] audit: type=1326 audit(1765579227.885:4656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25152 comm="syz.0.5223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11bb8f749 code=0x7ffc0000 [ 1532.553766][ T5171] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1532.610549][T15947] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1532.623835][ T5171] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1532.634957][T15947] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1532.712717][T15947] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1532.721982][ T30] audit: type=1326 audit(1765579227.885:4657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25152 comm="syz.0.5223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fe11bb8f749 code=0x7ffc0000 [ 1532.731548][T15947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1532.803112][ T5171] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1532.813396][T15947] usb 2-1: SerialNumber: syz [ 1532.827685][ T30] audit: type=1326 audit(1765579227.885:4658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25152 comm="syz.0.5223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11bb8f749 code=0x7ffc0000 [ 1532.884484][T25153] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1532.929502][ T5171] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1532.938294][ T30] audit: type=1326 audit(1765579227.885:4659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25152 comm="syz.0.5223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11bb8f749 code=0x7ffc0000 [ 1532.940314][T25183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1532.994003][T24989] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1533.022881][ T5171] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1533.042010][ T30] audit: type=1326 audit(1765579227.885:4660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25152 comm="syz.0.5223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe11bb8f34b code=0x7ffc0000 [ 1533.067713][ T5171] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1533.109129][T15947] usb 2-1: 0:2 : does not exist [ 1533.134836][T15947] usb 2-1: unit 5 not found! [ 1533.134838][ T30] audit: type=1326 audit(1765579227.885:4661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25152 comm="syz.0.5223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe11bb8f34b code=0x7ffc0000 [ 1533.134878][ T30] audit: type=1326 audit(1765579227.885:4662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25152 comm="syz.0.5223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe11bb8f34b code=0x7ffc0000 [ 1533.142649][T25183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1533.279646][T15947] usb 2-1: USB disconnect, device number 18 [ 1533.321425][T24947] udevd[24947]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1533.355007][T16375] usb 1-1: USB disconnect, device number 26 [ 1533.440654][ T30] audit: type=1326 audit(1765579227.885:4663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25152 comm="syz.0.5223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe11bb8f34b code=0x7ffc0000 [ 1533.510378][ T30] audit: type=1326 audit(1765579227.885:4664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25152 comm="syz.0.5223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe11bb8f34b code=0x7ffc0000 [ 1533.649648][T25182] futex_wake_op: syz.2.5230 tries to shift op by -1; fix this program [ 1534.352152][T25205] xt_hashlimit: size too large, truncated to 1048576 [ 1534.737946][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1534.875259][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1535.119160][T25214] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5239'. [ 1535.739332][T18608] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1535.903989][T18608] usb 2-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 1536.213330][T18608] usb 2-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1536.226881][T25231] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5242'. [ 1536.242291][T18608] usb 2-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1536.559247][T18608] usb 2-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 1536.605364][T18608] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1536.674145][T18608] usb 2-1: New USB device found, idVendor=056a, idProduct=0030, bcdDevice= 0.00 [ 1536.685882][T18608] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1536.685924][T25237] netlink: 'syz.2.5244': attribute type 10 has an invalid length. [ 1536.696757][T18608] usb 2-1: config 0 descriptor?? [ 1536.720024][T25237] bridge0: port 2(bridge_slave_1) entered blocking state [ 1536.727134][T25237] bridge0: port 2(bridge_slave_1) entered listening state [ 1536.734479][T25237] bridge0: port 1(bridge_slave_0) entered blocking state [ 1536.741551][T25237] bridge0: port 1(bridge_slave_0) entered listening state [ 1536.865947][T25237] bridge0: port 2(bridge_slave_1) entered disabled state [ 1536.873151][T25237] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.203435][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1538.203451][ T30] audit: type=1400 audit(1765579233.338:4681): avc: denied { map } for pid=25254 comm="syz.2.5249" path="socket:[91200]" dev="sockfs" ino=91200 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1538.275657][T25260] netlink: 'syz.4.5250': attribute type 4 has an invalid length. [ 1538.284639][T25260] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5250'. [ 1538.409508][T25266] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5253'. [ 1538.829159][T23908] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 1538.837805][T23908] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1539.052243][T18608] usbhid 2-1:0.0: can't add hid device: -71 [ 1539.160314][T25280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5255'. [ 1539.196726][T18608] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1539.246094][T18608] usb 2-1: USB disconnect, device number 19 [ 1539.696540][T25288] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5257'. [ 1539.829162][ T30] audit: type=1326 audit(1765579234.853:4682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25287 comm="syz.5.5258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92cb8f749 code=0x7ffc0000 [ 1539.915550][ T30] audit: type=1326 audit(1765579234.872:4683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25287 comm="syz.5.5258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92cb8f749 code=0x7ffc0000 [ 1540.017487][ T30] audit: type=1326 audit(1765579234.956:4684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25287 comm="syz.5.5258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7ff92cb8f749 code=0x7ffc0000 [ 1540.084233][ T30] audit: type=1326 audit(1765579234.956:4685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25287 comm="syz.5.5258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92cb8f749 code=0x7ffc0000 [ 1540.148215][ T30] audit: type=1326 audit(1765579234.956:4686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25287 comm="syz.5.5258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92cb8f749 code=0x7ffc0000 [ 1540.234733][T25297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5259'. [ 1540.276504][ T30] audit: type=1326 audit(1765579234.956:4687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25287 comm="syz.5.5258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff92cb8e1ff code=0x7ffc0000 [ 1540.310858][ T30] audit: type=1326 audit(1765579234.956:4688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25287 comm="syz.5.5258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92cb8f749 code=0x7ffc0000 [ 1540.391111][ T30] audit: type=1326 audit(1765579234.956:4689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25287 comm="syz.5.5258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92cb8f749 code=0x7ffc0000 [ 1540.417347][ T30] audit: type=1326 audit(1765579234.956:4690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25287 comm="syz.5.5258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff92cb8f749 code=0x7ffc0000 [ 1540.703728][T25316] netdevsim netdevsim5: Direct firmware load for þ failed with error -2 [ 1540.722793][T18608] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1540.742223][T25316] netdevsim netdevsim5: Falling back to sysfs fallback for: þ [ 1540.925107][T18608] usb 5-1: Using ep0 maxpacket: 16 [ 1540.931938][T18608] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1540.941867][T18608] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 1540.956499][T18608] usb 5-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=1f.2e [ 1540.966792][T18608] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.975235][T18608] usb 5-1: Product: syz [ 1540.981805][T18608] usb 5-1: Manufacturer: syz [ 1540.986597][T18608] usb 5-1: SerialNumber: syz [ 1540.995133][T18608] usb 5-1: config 0 descriptor?? [ 1541.003368][T18608] opticon 5-1:0.0: opticon converter detected [ 1541.014836][T18608] usb 5-1: opticon converter now attached to ttyUSB0 [ 1541.144960][T25326] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5269'. [ 1541.221282][T15245] usb 5-1: USB disconnect, device number 87 [ 1541.851596][T15245] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 1541.866095][T15245] opticon 5-1:0.0: device disconnected [ 1542.130355][T25333] netlink: 'syz.1.5270': attribute type 10 has an invalid length. [ 1542.139396][T25333] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1542.150925][T25333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1542.314649][T18608] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1542.849945][T15947] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1542.855597][T18608] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1543.023500][T18608] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65535, setting to 1024 [ 1543.128861][T23908] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1543.139835][T23908] Bluetooth: hci1: Injecting HCI hardware error event [ 1543.154344][T23908] Bluetooth: hci1: hardware error 0x00 [ 1543.224085][T18608] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1543.244798][T18608] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1543.245687][T15947] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1543.253849][T18608] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.330489][T15947] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65535, setting to 1024 [ 1543.352377][T15947] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1543.358366][T25332] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1543.364506][T15947] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1543.395079][T18608] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1543.405682][T15947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.565834][T25335] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1543.737771][T15947] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1543.747263][T18608] usb 6-1: USB disconnect, device number 2 [ 1543.832013][T25332] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5271'. [ 1543.862708][T15947] usb 1-1: USB disconnect, device number 27 [ 1544.773703][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1544.773721][ T30] audit: type=1400 audit(1765579238.922:4717): avc: denied { bind } for pid=25357 comm="syz.2.5279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1544.936410][T25364] udevd[25364]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1544.978079][T25335] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5272'. [ 1545.291561][T25372] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5282'. [ 1545.341189][T23908] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1546.405660][T25391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5289'. [ 1547.141822][T25400] gre0: entered promiscuous mode [ 1547.147244][T17054] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1547.154926][T25400] gre0: entered allmulticast mode [ 1547.398044][T17054] usb 2-1: config 2 has an invalid interface number: 219 but max is 0 [ 1547.901553][T17054] usb 2-1: config 2 has no interface number 0 [ 1547.921883][T17054] usb 2-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=b3.76 [ 1547.938965][T17054] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.984579][T17054] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 1548.555508][T17054] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -110 [ 1548.662094][T17054] pac7311 2-1:2.219: probe with driver pac7311 failed with error -110 [ 1548.796810][T15025] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1548.807147][T15025] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1548.816339][T15025] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1548.825911][T15025] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1548.833281][T15025] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1548.892030][T25412] lo speed is unknown, defaulting to 1000 [ 1548.976507][T25412] wlan0 speed is unknown, defaulting to 1000 [ 1549.110864][T15751] syz_tun (unregistering): left allmulticast mode [ 1549.197807][T17054] usb 2-1: USB disconnect, device number 20 [ 1549.380746][T25423] netlink: 'syz.4.5297': attribute type 4 has an invalid length. [ 1549.469506][T25412] chnl_net:caif_netlink_parms(): no params data found [ 1549.541413][T17054] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1549.595800][T25411] futex_wake_op: syz.5.5296 tries to shift op by -1; fix this program [ 1550.003822][T17054] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1550.025289][T17054] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65535, setting to 1024 [ 1550.055313][T17054] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1550.068870][T25412] bridge0: port 1(bridge_slave_0) entered blocking state [ 1550.076772][T17054] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1550.098294][T25412] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.161466][T17054] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.162198][T25412] bridge_slave_0: entered allmulticast mode [ 1550.280692][T25421] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1550.307236][T17054] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1550.315361][T25412] bridge_slave_0: entered promiscuous mode [ 1550.795959][T25412] bridge0: port 2(bridge_slave_1) entered blocking state [ 1550.890375][T25412] bridge0: port 2(bridge_slave_1) entered disabled state [ 1550.908221][T25412] bridge_slave_1: entered allmulticast mode [ 1550.946166][T25412] bridge_slave_1: entered promiscuous mode [ 1550.974964][T17054] usb 1-1: USB disconnect, device number 28 [ 1550.989231][T25421] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5299'. [ 1551.070539][T23908] Bluetooth: hci6: command tx timeout [ 1551.785199][T25447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=144 sclass=netlink_route_socket pid=25447 comm=syz.5.5303 [ 1552.046908][T25452] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5305'. [ 1552.303408][T25445] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.310755][T25445] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.556689][T15245] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1552.738480][T15245] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1552.747974][T15245] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.833777][T15245] usb 2-1: Product: syz [ 1552.846603][T15245] usb 2-1: Manufacturer: syz [ 1552.896840][T15245] usb 2-1: SerialNumber: syz [ 1552.912637][T15245] usb 2-1: config 0 descriptor?? [ 1553.109220][T25445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1553.199381][T25445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1553.294187][T23908] Bluetooth: hci6: command tx timeout [ 1553.582011][T15245] usb 2-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 1553.592198][T15245] f81604 2-1:0.0: Setting termination of CH#1 failed: -EREMOTEIO [ 1553.612587][T15245] f81604 2-1:0.0: probe with driver f81604 failed with error -121 [ 1554.895791][T25412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1554.921982][T16252] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.945366][T16252] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.973729][T25412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1554.984862][T16252] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.998720][T16252] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.125991][T25412] team0: Port device team_slave_0 added [ 1555.134961][T25412] team0: Port device team_slave_1 added [ 1555.341663][T25474] netlink: 'syz.5.5309': attribute type 10 has an invalid length. [ 1555.369273][T25474] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1555.378958][T25474] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1555.868880][T25478] Invalid source name [ 1555.872974][T25478] UBIFS error (pid: 25478): cannot open "./file0", error -22 [ 1555.878750][T25478] overlayfs: failed to get inode (-116) [ 1555.893857][T25478] overlayfs: failed to get inode (-116) [ 1555.902056][ T30] audit: type=1400 audit(1765579249.867:4718): avc: denied { read write } for pid=25470 comm="syz.4.5310" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1556.071029][T23908] Bluetooth: hci6: command tx timeout [ 1556.094613][ T7364] usb 2-1: USB disconnect, device number 21 [ 1556.146143][ T30] audit: type=1400 audit(1765579249.867:4719): avc: denied { open } for pid=25470 comm="syz.4.5310" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1556.238776][T25412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1556.255146][T25412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1556.315771][T25412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1556.340261][T25412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1556.351522][T25412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1556.384234][T25412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1556.580239][T25412] hsr_slave_0: entered promiscuous mode [ 1556.586391][T25412] hsr_slave_1: entered promiscuous mode [ 1556.592087][ T7364] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1556.603932][T25412] debugfs: 'hsr0' already exists in 'hsr' [ 1556.631464][T25412] Cannot create hsr debugfs directory [ 1556.759044][T17431] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1556.771365][ T7364] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1556.780679][ T7364] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1556.797543][ T7364] usb 6-1: Product: syz [ 1556.816218][ T7364] usb 6-1: Manufacturer: syz [ 1556.826240][ T7364] usb 6-1: SerialNumber: syz [ 1556.857267][ T7364] usb 6-1: config 0 descriptor?? [ 1556.873199][ T7364] ch341 6-1:0.0: ch341-uart converter detected [ 1556.899126][T25495] futex_wake_op: syz.4.5316 tries to shift op by -1; fix this program [ 1557.219148][T17431] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1557.228243][ T30] audit: type=1800 audit(1765579251.129:4720): pid=25488 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.5311" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 1557.240300][ T7364] usb 6-1: failed to receive control message: -121 [ 1557.257844][T17431] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 1557.271856][ T7364] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 1557.294278][T17431] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1557.312485][T25412] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1557.325078][T17431] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1557.334712][T17431] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.354769][T25492] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1557.355255][T25412] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.368603][T17431] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1557.474514][T25487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1557.485538][T25487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1557.586783][T25412] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1557.602837][T17431] usb 2-1: USB disconnect, device number 22 [ 1557.610658][T25412] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.739236][T25412] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1557.749994][T25412] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.865499][T25492] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5315'. [ 1557.920294][T25412] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1557.931121][T25412] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.932159][T25503] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5317'. [ 1558.254425][T23908] Bluetooth: hci6: command tx timeout [ 1558.288500][T25412] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1558.311782][T25412] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1558.322046][T25412] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1558.349948][T25412] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1558.780189][T25412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1559.054220][T25412] 8021q: adding VLAN 0 to HW filter on device team0 [ 1559.082613][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state [ 1559.089795][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1559.137320][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1559.144423][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1559.174570][T25412] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1559.185061][T25412] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1560.023166][T17431] usb 6-1: USB disconnect, device number 3 [ 1560.044693][T17431] ch341 6-1:0.0: device disconnected [ 1560.100504][T25412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1560.638353][T25543] Invalid source name [ 1560.638372][T25543] UBIFS error (pid: 25543): cannot open "./file0", error -22 [ 1560.851797][T25412] veth0_vlan: entered promiscuous mode [ 1560.878115][T25412] veth1_vlan: entered promiscuous mode [ 1560.924083][T25412] veth0_macvtap: entered promiscuous mode [ 1560.944257][T25412] veth1_macvtap: entered promiscuous mode [ 1561.024398][T25412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1561.066090][T25551] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5325'. [ 1561.474767][T25412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1561.616431][ T198] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.660605][ T198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.687271][ T198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.725611][ T198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1562.094872][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1562.189695][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1562.755669][ T6301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1562.790119][ T6301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1564.073099][T25574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5332'. [ 1564.564533][T25586] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5334'. [ 1564.847740][T25591] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5337'. [ 1565.636474][ T30] audit: type=1326 audit(1765579258.968:4721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25597 comm="syz.5.5339" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff92cb8f749 code=0x0 [ 1567.088108][T25645] Invalid source name [ 1567.092152][T25645] UBIFS error (pid: 25645): cannot open "./file0", error -22 [ 1567.104526][T25645] overlayfs: failed lookup in lower (newroot/509, name='file0', err=-40): overlapping layers [ 1568.279702][T25662] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5344'. [ 1568.599181][T25667] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5347'. [ 1568.984188][T25671] netlink: 'syz.2.5348': attribute type 10 has an invalid length. [ 1568.992530][T25671] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1569.004024][T25671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1571.331195][T25683] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1571.341159][T25683] block device autoloading is deprecated and will be removed. [ 1571.536087][T25694] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5353'. [ 1574.122012][T25464] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1574.333453][T25464] usb 5-1: Using ep0 maxpacket: 8 [ 1574.392541][T25464] usb 5-1: config 0 has an invalid interface number: 109 but max is 0 [ 1574.401540][T25464] usb 5-1: config 0 has no interface number 0 [ 1574.413181][T25464] usb 5-1: config 0 interface 109 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 1574.444001][T25464] usb 5-1: New USB device found, idVendor=0675, idProduct=1688, bcdDevice=7e.b6 [ 1574.464175][T25464] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.482908][T25464] usb 5-1: Product: syz [ 1574.487092][T25464] usb 5-1: Manufacturer: syz [ 1574.491683][T25464] usb 5-1: SerialNumber: syz [ 1574.524155][T25464] usb 5-1: config 0 descriptor?? [ 1574.545057][T25464] HFC-S_USB 5-1:0.109: probe with driver HFC-S_USB failed with error -5 [ 1574.893921][T25464] usb 5-1: USB disconnect, device number 88 [ 1575.438103][T15025] Bluetooth: hci2: command 0x0406 tx timeout [ 1577.034098][T25741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5365'. [ 1577.771234][T15947] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1578.527398][T15947] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1578.570167][T15947] usb 2-1: config 0 has no interfaces? [ 1578.636549][T15947] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1578.654966][T15947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.686172][T15947] usb 2-1: config 0 descriptor?? [ 1579.070850][T25764] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5373'. [ 1579.144796][T25766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5374'. [ 1580.951232][T18606] usb 2-1: USB disconnect, device number 23 [ 1581.040184][T25785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5379'. [ 1581.129399][T25787] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1581.400327][T25787] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1581.534355][T25775] futex_wake_op: syz.2.5376 tries to shift op by -1; fix this program [ 1584.105118][T24378] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1584.415683][T24378] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1584.430838][T24378] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 1584.443065][T24378] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1584.453841][T24378] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1584.478880][T24378] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.499967][T25813] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1584.524788][T24378] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1584.649545][T15245] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1584.970487][T15245] usb 3-1: Using ep0 maxpacket: 16 [ 1585.098841][T15245] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1585.108553][T15245] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1585.131232][T15947] usb 1-1: USB disconnect, device number 29 [ 1585.177232][T15245] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1585.188141][T15245] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1585.204034][T15245] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1585.218711][T15245] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.241516][T15245] usb 3-1: Product: syz [ 1585.253478][T15245] usb 3-1: Manufacturer: syz [ 1585.261582][T15245] usb 3-1: SerialNumber: syz [ 1585.359537][T25813] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5386'. [ 1585.381105][T15245] usb 3-1: config 0 descriptor?? [ 1586.016039][ T30] audit: type=1326 audit(1765579278.060:4722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25821 comm="syz.2.5387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f658f749 code=0x7ffc0000 [ 1586.082687][ T30] audit: type=1326 audit(1765579278.088:4723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25821 comm="syz.2.5387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f58f658f749 code=0x7ffc0000 [ 1586.084182][T15245] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input139 [ 1586.115719][ T30] audit: type=1326 audit(1765579278.088:4724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25821 comm="syz.2.5387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f658f749 code=0x7ffc0000 [ 1586.140875][ T30] audit: type=1326 audit(1765579278.088:4725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25821 comm="syz.2.5387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f658f749 code=0x7ffc0000 [ 1586.203725][ T30] audit: type=1326 audit(1765579278.088:4726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25821 comm="syz.2.5387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f58f658f34b code=0x7ffc0000 [ 1586.263192][T25822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1586.298451][ T30] audit: type=1326 audit(1765579278.088:4727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25821 comm="syz.2.5387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f58f658f34b code=0x7ffc0000 [ 1586.328989][ T30] audit: type=1326 audit(1765579278.088:4728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25821 comm="syz.2.5387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f58f658f34b code=0x7ffc0000 [ 1586.333411][T25822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1586.355696][ T30] audit: type=1326 audit(1765579278.088:4729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25821 comm="syz.2.5387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f58f658f34b code=0x7ffc0000 [ 1586.416009][ T5171] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1586.559281][T15245] usb 3-1: USB disconnect, device number 77 [ 1586.653595][ T30] audit: type=1326 audit(1765579278.088:4730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25821 comm="syz.2.5387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f58f658f34b code=0x7ffc0000 [ 1587.203165][ T30] audit: type=1326 audit(1765579278.088:4731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25821 comm="syz.2.5387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f58f658f34b code=0x7ffc0000 [ 1587.889209][T25856] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1587.912514][T25856] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1587.946032][T25854] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1588.660236][T25852] overlayfs: statfs failed on './file0' [ 1589.485731][T25878] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5399'. [ 1590.558357][T25899] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5404'. [ 1591.117228][T25464] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 1591.298482][T25464] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1591.319850][T25464] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.334078][T25464] usb 2-1: Product: syz [ 1591.338923][T25464] usb 2-1: Manufacturer: syz [ 1591.358288][T25464] usb 2-1: SerialNumber: syz [ 1591.389964][T25464] usb 2-1: config 0 descriptor?? [ 1591.423148][T25464] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1591.465576][T25464] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1591.490152][T25464] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 1591.501047][T16375] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1591.664706][T16375] usb 6-1: too many configurations: 63, using maximum allowed: 8 [ 1591.686650][T24378] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1591.948429][T15947] usb 2-1: USB disconnect, device number 24 [ 1591.977637][T16375] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1591.994549][T16375] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.006656][T16375] usb 6-1: Product: syz [ 1592.010888][T16375] usb 6-1: Manufacturer: syz [ 1592.017771][T16375] usb 6-1: SerialNumber: syz [ 1592.030212][T16375] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1592.057372][T25464] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1592.182558][T24378] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1592.198232][T24378] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1592.207395][T24378] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1592.239918][T24378] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.263520][T24378] usb 1-1: config 0 descriptor?? [ 1592.415058][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1592.415069][ T30] audit: type=1400 audit(1765579284.046:4748): avc: denied { open } for pid=25906 comm="syz.5.5407" path="/dev/ptyqe" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1592.645714][ T30] audit: type=1800 audit(1765579284.224:4749): pid=25922 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.5407" name="bus" dev="overlay" ino=247 res=0 errno=0 [ 1593.114357][T25922] bridge1: entered promiscuous mode [ 1593.379339][T25464] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1593.491554][T25464] ath9k_htc: Failed to initialize the device [ 1594.203818][T25464] usb 6-1: ath9k_htc: USB layer deinitialized [ 1594.486777][T25931] Invalid source name [ 1594.490829][T25931] UBIFS error (pid: 25931): cannot open "./file0", error -22 [ 1594.501260][T25931] overlayfs: failed to get inode (-116) [ 1594.515387][T25931] overlayfs: failed to get inode (-116) [ 1594.943211][T16030] usb 1-1: USB disconnect, device number 30 [ 1595.016024][T17054] usb 6-1: USB disconnect, device number 4 [ 1595.804664][T25940] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1597.162156][T25961] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5416'. [ 1598.397832][T23234] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1598.901197][T23234] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1598.942902][T23234] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1598.952002][T23234] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1598.981053][T23234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.007233][T23234] usb 6-1: config 0 descriptor?? [ 1600.514803][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1600.521496][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1600.610491][T23234] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1600.662969][T26008] Invalid source name [ 1600.667094][T26008] UBIFS error (pid: 26008): cannot open "./file0", error -22 [ 1600.681359][T26008] overlayfs: failed to get inode (-116) [ 1600.695946][T26008] overlayfs: failed to get inode (-116) [ 1600.878122][T23234] usb 5-1: Using ep0 maxpacket: 16 [ 1600.993778][T23234] usb 5-1: config 1 has an invalid interface number: 3 but max is 2 [ 1601.015051][T23234] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1601.027382][T23234] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1601.044153][T23234] usb 5-1: config 1 has no interface number 1 [ 1601.059098][T23234] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1601.068858][T23234] usb 5-1: New USB device found, idVendor=03f0, idProduct=1f1d, bcdDevice=bc.bb [ 1601.080683][T23234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.362869][T23234] usb 5-1: Product: syz [ 1601.429231][T23234] usb 5-1: Manufacturer: syz [ 1601.478838][T23234] usb 5-1: SerialNumber: syz [ 1601.767841][T17054] usb 6-1: USB disconnect, device number 5 [ 1601.950187][T26004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1601.980133][T26004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1602.545810][T23234] usb 5-1: unknown number of interfaces: 2 [ 1602.580693][T23234] usb 5-1: USB disconnect, device number 89 [ 1604.861468][T26052] Invalid source name [ 1604.865613][T26052] UBIFS error (pid: 26052): cannot open "./file0", error -22 [ 1604.871346][T26052] overlayfs: failed to get inode (-116) [ 1604.886544][T26052] overlayfs: failed to get inode (-116) [ 1605.277752][T26057] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5439'. [ 1605.823263][T26066] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5445'. [ 1606.233105][T26074] Invalid source name [ 1606.237538][T26074] UBIFS error (pid: 26074): cannot open "./file0", error -22 [ 1606.243915][T26074] overlayfs: failed to get inode (-116) [ 1606.259700][T26074] overlayfs: failed to get inode (-116) [ 1607.609427][T17054] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1607.837746][T17054] usb 6-1: Using ep0 maxpacket: 16 [ 1607.965973][T17054] usb 6-1: config 1 has an invalid interface number: 3 but max is 2 [ 1607.974051][T17054] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1607.984636][T17054] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1608.671875][T17054] usb 6-1: config 1 has no interface number 1 [ 1608.743724][T17054] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1608.849349][T17054] usb 6-1: New USB device found, idVendor=03f0, idProduct=1f1d, bcdDevice=bc.bb [ 1608.981368][T17054] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.073443][T26103] overlayfs: failed to get inode (-116) [ 1609.080427][T26103] overlayfs: failed to get inode (-116) [ 1609.451156][T17054] usb 6-1: Product: syz [ 1609.473800][T17054] usb 6-1: Manufacturer: syz [ 1609.481912][T17054] usb 6-1: SerialNumber: syz [ 1609.763547][T26084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1609.772160][T26084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1610.281688][T17054] usb 6-1: unknown number of interfaces: 2 [ 1610.350799][T17054] usb 6-1: USB disconnect, device number 6 [ 1611.024490][T26106] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5456'. [ 1613.374874][T26136] futex_wake_op: syz.1.5465 tries to shift op by -1; fix this program [ 1615.394386][T26160] netlink: 'syz.2.5469': attribute type 10 has an invalid length. [ 1615.402426][T26160] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1615.414953][T26160] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1616.391885][T26168] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5471'. [ 1618.020428][T26189] Invalid source name [ 1618.024742][T26189] UBIFS error (pid: 26189): cannot open "./file0", error -22 [ 1618.764408][T26196] overlayfs: failed to get inode (-116) [ 1618.779701][T26196] overlayfs: failed to get inode (-116) [ 1619.148151][T16030] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1619.637699][T16030] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1619.667509][T16030] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 1619.731884][T26203] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5481'. [ 1619.951260][T16030] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1620.065793][T16030] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1620.086884][T16030] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.234310][T26191] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1620.450642][T16030] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1620.745850][T16030] usb 5-1: USB disconnect, device number 90 [ 1620.787337][T26213] udevd[26213]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1620.869998][T26191] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5477'. [ 1621.665628][T26227] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5487'. [ 1623.915293][T15352] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1624.243912][T15352] usb 6-1: Using ep0 maxpacket: 16 [ 1624.290506][T16030] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1624.341741][T15352] usb 6-1: config 1 has an invalid interface number: 3 but max is 2 [ 1624.351023][T15352] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1624.361605][T15352] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1625.000966][T15352] usb 6-1: config 1 has no interface number 1 [ 1625.008117][T15352] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1625.016613][T15352] usb 6-1: New USB device found, idVendor=03f0, idProduct=1f1d, bcdDevice=bc.bb [ 1625.026436][T15352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.034899][T15352] usb 6-1: Product: syz [ 1625.039788][T15352] usb 6-1: Manufacturer: syz [ 1625.044460][T15352] usb 6-1: SerialNumber: syz [ 1625.092326][T16030] usb 5-1: Using ep0 maxpacket: 8 [ 1625.100804][T16030] usb 5-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 1625.113083][T16030] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1625.124400][T16030] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1625.136769][T16030] hub 5-1:32.0: bad descriptor, ignoring hub [ 1625.144013][T16030] hub 5-1:32.0: probe with driver hub failed with error -5 [ 1625.347055][T26253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1625.380884][T26253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1625.483158][T16030] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1625.860596][T16030] usb 3-1: Using ep0 maxpacket: 16 [ 1625.981214][T16030] usb 3-1: config 1 has an invalid interface number: 3 but max is 2 [ 1625.989227][T16030] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1626.001181][T16030] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1626.016097][T15352] usb 6-1: unknown number of interfaces: 2 [ 1626.027955][T16030] usb 3-1: config 1 has no interface number 1 [ 1626.039961][T16030] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1626.049853][T15352] usb 6-1: USB disconnect, device number 7 [ 1626.079012][T16030] usb 3-1: New USB device found, idVendor=03f0, idProduct=1f1d, bcdDevice=bc.bb [ 1626.099757][T16030] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.108359][T16030] usb 3-1: Product: syz [ 1626.123873][T16030] usb 3-1: Manufacturer: syz [ 1626.128700][T16030] usb 3-1: SerialNumber: syz [ 1626.302095][T24378] usb 5-1: reset high-speed USB device number 91 using dummy_hcd [ 1626.895633][T26268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1626.904557][T26268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1626.942531][T15352] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1627.324370][T15352] usb 2-1: Using ep0 maxpacket: 16 [ 1627.354627][T15352] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1627.385135][T15352] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1627.410356][T15352] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1627.417385][T16030] usb 3-1: unknown number of interfaces: 2 [ 1627.424972][T15352] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1627.457472][T16030] usb 3-1: USB disconnect, device number 78 [ 1627.579527][T15352] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1627.594050][T15352] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.602057][T15352] usb 2-1: Product: syz [ 1627.606996][T15352] usb 2-1: Manufacturer: syz [ 1627.612074][T15352] usb 2-1: SerialNumber: syz [ 1628.059465][T15352] usb 2-1: config 0 descriptor?? [ 1628.510876][ T30] audit: type=1326 audit(1765579317.805:4750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26277 comm="syz.1.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6758f749 code=0x7ffc0000 [ 1628.541205][T15352] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input140 [ 1628.573403][ T5171] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1628.587294][ T30] audit: type=1326 audit(1765579317.833:4751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26277 comm="syz.1.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f2b6758f749 code=0x7ffc0000 [ 1628.657908][ T5171] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1628.675508][ T30] audit: type=1326 audit(1765579317.833:4752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26277 comm="syz.1.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6758f749 code=0x7ffc0000 [ 1628.706127][T16030] usb 5-1: USB disconnect, device number 91 [ 1629.321355][ T30] audit: type=1326 audit(1765579317.833:4753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26277 comm="syz.1.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b6758f34b code=0x7ffc0000 [ 1629.427247][T26279] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1629.480558][T26307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1629.487268][T26158] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1629.493511][T26307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1629.523222][T16030] usb 2-1: USB disconnect, device number 25 [ 1629.532883][ T30] audit: type=1326 audit(1765579317.833:4754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26277 comm="syz.1.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b6758f34b code=0x7ffc0000 [ 1629.622257][ T5171] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 1629.632989][T26297] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1629.801482][ T30] audit: type=1326 audit(1765579317.833:4755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26277 comm="syz.1.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b6758f34b code=0x7ffc0000 [ 1629.882219][T26314] netlink: 'syz.4.5510': attribute type 10 has an invalid length. [ 1629.890161][T26314] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1629.900246][T26314] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1630.197864][ T30] audit: type=1326 audit(1765579317.833:4756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26277 comm="syz.1.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b6758f34b code=0x7ffc0000 [ 1630.262042][ T30] audit: type=1326 audit(1765579317.833:4757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26277 comm="syz.1.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b6758f34b code=0x7ffc0000 [ 1630.363858][ T30] audit: type=1326 audit(1765579317.833:4758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26277 comm="syz.1.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b6758f34b code=0x7ffc0000 [ 1630.403090][ T30] audit: type=1326 audit(1765579317.833:4759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26277 comm="syz.1.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b675c2005 code=0x7ffc0000 [ 1630.513169][T26320] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5512'. [ 1632.008803][T16375] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1632.361564][T16375] usb 6-1: Using ep0 maxpacket: 16 [ 1632.427083][T16375] usb 6-1: config 1 has an invalid interface number: 3 but max is 2 [ 1632.456759][T16375] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1632.476231][T16375] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1632.498999][T16375] usb 6-1: config 1 has no interface number 1 [ 1632.509720][T16375] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1632.527487][T16375] usb 6-1: New USB device found, idVendor=03f0, idProduct=1f1d, bcdDevice=bc.bb [ 1632.541658][T16375] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1632.564450][T16375] usb 6-1: Product: syz [ 1632.572101][T16375] usb 6-1: Manufacturer: syz [ 1632.596073][T16375] usb 6-1: SerialNumber: syz [ 1632.774016][T26345] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5518'. [ 1632.840110][T26330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1632.898255][T26330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1633.232402][T16375] usb 6-1: unknown number of interfaces: 2 [ 1633.270765][T16375] usb 6-1: USB disconnect, device number 8 [ 1634.506466][T26370] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5521'. [ 1634.970404][T26371] netlink: 'syz.5.5524': attribute type 10 has an invalid length. [ 1635.154310][T15245] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1635.202874][T26366] overlayfs: failed to get inode (-116) [ 1635.209906][T26366] overlayfs: failed to get inode (-116) [ 1635.296810][T26371] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1635.307257][T26371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1635.462205][T15245] usb 5-1: Using ep0 maxpacket: 16 [ 1635.475427][T15245] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1635.743565][T15245] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1635.803113][T15245] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1635.856256][T15245] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1635.915298][T15245] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1635.965812][T15245] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.207885][T15245] usb 5-1: Product: syz [ 1636.215561][T15245] usb 5-1: Manufacturer: syz [ 1636.232716][T15245] usb 5-1: SerialNumber: syz [ 1636.288154][T15245] usb 5-1: config 0 descriptor?? [ 1636.559018][T15245] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input141 [ 1636.571291][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1636.571307][ T30] audit: type=1326 audit(1765579325.335:4766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26362 comm="syz.4.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f698f749 code=0x7ffc0000 [ 1636.746505][ T30] audit: type=1326 audit(1765579325.335:4767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26362 comm="syz.4.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fc7f698f749 code=0x7ffc0000 [ 1636.747615][ T5171] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1636.814895][T26363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1636.828951][T26363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1636.849983][ T30] audit: type=1326 audit(1765579325.335:4768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26362 comm="syz.4.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f698f749 code=0x7ffc0000 [ 1636.998344][ T30] audit: type=1326 audit(1765579325.335:4769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26362 comm="syz.4.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7f698f34b code=0x7ffc0000 [ 1637.034527][T15245] usb 5-1: USB disconnect, device number 92 [ 1637.206601][ T30] audit: type=1326 audit(1765579325.335:4770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26362 comm="syz.4.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7f698f34b code=0x7ffc0000 [ 1637.365919][ T30] audit: type=1326 audit(1765579325.335:4771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26362 comm="syz.4.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7f698f34b code=0x7ffc0000 [ 1637.816016][ T30] audit: type=1326 audit(1765579325.335:4772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26362 comm="syz.4.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7f698f34b code=0x7ffc0000 [ 1637.842994][ T30] audit: type=1326 audit(1765579325.335:4773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26362 comm="syz.4.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7f698f34b code=0x7ffc0000 [ 1637.891801][ T30] audit: type=1326 audit(1765579325.335:4774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26362 comm="syz.4.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7f698f34b code=0x7ffc0000 [ 1637.923893][ T30] audit: type=1326 audit(1765579325.335:4775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26362 comm="syz.4.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc7f69c2005 code=0x7ffc0000 [ 1638.404565][T26409] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5533'. [ 1639.153796][T26407] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5534'. [ 1640.000938][T26423] overlayfs: failed to get inode (-116) [ 1640.007114][T26423] overlayfs: failed to get inode (-116) [ 1640.278452][T26427] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5539'. [ 1640.290699][T26427] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5539'. [ 1641.233616][T15025] Bluetooth: hci3: command 0x0406 tx timeout [ 1641.371321][T26430] futex_wake_op: syz.5.5538 tries to shift op by -1; fix this program [ 1643.808764][T26453] futex_wake_op: syz.1.5545 tries to shift op by -1; fix this program [ 1645.871862][T17054] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1646.077780][T17054] usb 3-1: Using ep0 maxpacket: 16 [ 1646.104112][T17054] usb 3-1: config 1 has an invalid interface number: 3 but max is 2 [ 1646.114181][T17054] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1646.178979][T17054] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1646.195780][T17054] usb 3-1: config 1 has no interface number 1 [ 1646.223861][T17054] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1646.453962][T17054] usb 3-1: New USB device found, idVendor=03f0, idProduct=1f1d, bcdDevice=bc.bb [ 1646.487677][T17054] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.730152][T17054] usb 3-1: Product: syz [ 1646.740416][T17054] usb 3-1: Manufacturer: syz [ 1646.762272][T17054] usb 3-1: SerialNumber: syz [ 1647.296438][T26483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1647.317543][T26483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1647.722481][T17054] usb 3-1: unknown number of interfaces: 2 [ 1647.837103][T17054] usb 3-1: USB disconnect, device number 79 [ 1648.322132][T26505] futex_wake_op: syz.4.5559 tries to shift op by -1; fix this program [ 1648.617203][T26496] futex_wake_op: syz.0.5556 tries to shift op by -1; fix this program [ 1649.330678][T26519] overlayfs: failed to get inode (-116) [ 1649.336562][T26519] overlayfs: failed to get inode (-116) [ 1650.556815][T26537] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5566'. [ 1650.567855][T15947] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1650.740305][T15947] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1650.754894][T15947] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 1650.802865][T15947] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1650.892602][T15947] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1650.923391][T15947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.225036][T26527] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1651.257103][T15947] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1651.495366][T18606] usb 2-1: USB disconnect, device number 26 [ 1651.772454][T26527] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5564'. [ 1651.881017][T26550] Invalid source name [ 1651.885397][T26550] UBIFS error (pid: 26550): cannot open "./file0", error -22 [ 1651.888513][T26550] overlayfs: failed lookup in lower (newroot/550, name='file0', err=-40): overlapping layers [ 1652.417289][ T31] INFO: task syz-executor:17189 blocked for more than 143 seconds. [ 1652.428100][ T31] Tainted: G L syzkaller #0 [ 1652.437079][ T31] Blocked by coredump. [ 1652.450775][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1652.459649][ T31] task:syz-executor state:D stack:23912 pid:17189 tgid:17189 ppid:1 task_flags:0x40014c flags:0x00080001 [ 1652.515147][ T31] Call Trace: [ 1652.542276][ T31] [ 1652.551102][ T31] ? __schedule+0x10b9/0x6150 [ 1652.556001][ T31] __schedule+0x1139/0x6150 [ 1652.589294][ T31] ? find_held_lock+0x2b/0x80 [ 1652.600147][ T31] ? __pfx___schedule+0x10/0x10 [ 1652.605711][ T31] ? find_held_lock+0x2b/0x80 [ 1652.618747][ T31] ? schedule+0x2d7/0x3a0 [ 1652.624551][ T31] schedule+0xe7/0x3a0 [ 1652.629800][ T31] schedule_timeout+0x257/0x290 [ 1652.638325][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1652.648487][ T31] ? rcu_is_watching+0x12/0xc0 [ 1652.664856][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1652.670207][ T31] do_wait_for_common+0x2d7/0x4c0 [ 1652.680562][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1652.687635][ T31] ? __pfx_do_wait_for_common+0x10/0x10 [ 1652.695854][T18606] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1652.719323][T15947] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1652.736482][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 1652.747940][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1652.767983][ T31] ? __pfx___might_resched+0x10/0x10 [ 1652.775275][ T31] ? __flush_work+0x4d0/0xcc0 [ 1652.790646][ T31] wait_for_completion+0x49/0x60 [ 1652.800862][ T31] __flush_work+0x7d7/0xcc0 [ 1652.805653][ T31] ? __pfx___flush_work+0x10/0x10 [ 1652.810758][ T31] ? try_to_grab_pending+0x450/0x850 [ 1652.816400][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 1652.821795][ T31] ? __pfx___might_resched+0x10/0x10 [ 1652.827301][ T31] __cancel_work_sync+0x10c/0x130 [ 1652.832376][ T31] hci_cmd_sync_clear+0x33/0x100 [ 1652.837952][ T31] hci_unregister_dev+0x1cc/0x640 [ 1652.843056][ T31] vhci_release+0x17d/0x230 [ 1652.848238][ T31] ? __pfx_vhci_release+0x10/0x10 [ 1652.853295][ T31] __fput+0x402/0xb70 [ 1652.858026][ T31] task_work_run+0x150/0x240 [ 1652.859003][T18606] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1652.863037][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1652.879340][ T31] do_exit+0x87f/0x2bd0 [ 1652.884688][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 1652.885749][T18606] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1652.900751][T18606] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.900774][T15947] usb 1-1: Using ep0 maxpacket: 16 [ 1652.914224][ T31] ? __pfx_do_exit+0x10/0x10 [ 1652.920714][ T31] ? rcu_is_watching+0x12/0xc0 [ 1652.921460][T18606] usb 3-1: config 0 descriptor?? [ 1652.925769][ T31] do_group_exit+0xd3/0x2a0 [ 1652.936264][ T31] __x64_sys_exit_group+0x3e/0x50 [ 1652.940906][T18606] pwc: Askey VC010 type 2 USB webcam detected. [ 1652.948993][T15947] usb 1-1: config 1 has an invalid interface number: 3 but max is 2 [ 1652.957367][T15947] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1652.967911][T15947] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1652.977849][ T31] x64_sys_call+0x151c/0x1740 [ 1652.982586][ T31] do_syscall_64+0xcd/0xf80 [ 1652.987264][T15947] usb 1-1: config 1 has no interface number 1 [ 1652.993576][T15947] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1653.001971][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1653.010918][ T31] RIP: 0033:0x7f647a38f749 [ 1653.016045][ T31] RSP: 002b:00007fffb5437668 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1653.025456][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f647a38f749 [ 1653.035176][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 1653.043318][ T31] RBP: 00007f647a415888 R08: 00007fffb5435406 R09: 00000000000927c0 [ 1653.051842][T15947] usb 1-1: New USB device found, idVendor=03f0, idProduct=1f1d, bcdDevice=bc.bb [ 1653.061723][T15947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.069835][T15947] usb 1-1: Product: syz [ 1653.074102][T15947] usb 1-1: Manufacturer: syz [ 1653.078781][T15947] usb 1-1: SerialNumber: syz [ 1653.088562][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 1653.110209][ T31] R13: 00000000000927c0 R14: 0000000000160962 R15: 00007fffb5437820 [ 1653.122608][ T31] [ 1653.126514][ T31] [ 1653.126514][ T31] Showing all locks held in the system: [ 1653.152146][ T31] 1 lock held by khungtaskd/31: [ 1653.185874][ T31] #0: ffffffff8e3c9460 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1653.329592][ T31] 2 locks held by getty/5577: [ 1653.334379][ T31] #0: ffff88814dbad0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1653.351746][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1653.354030][T26552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1653.363928][ T31] 3 locks held by kworker/u9:0/9754: [ 1653.373807][T26552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1653.377280][ T31] #0: [ 1653.802891][T18606] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1653.815191][T18606] pwc: recv_control_msg error -32 req 02 val 2700 [ 1653.820496][ T31] ffff8880582b9148 ( [ 1653.830284][T18606] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1653.847389][T18606] pwc: recv_control_msg error -32 req 04 val 1000 [ 1654.096267][T18606] pwc: recv_control_msg error -32 req 04 val 1300 [ 1654.103689][T18606] pwc: recv_control_msg error -32 req 04 val 1400 [ 1654.204260][ T31] (wq_completion)hci0){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 1654.206388][T18606] pwc: recv_control_msg error -32 req 02 val 2000 [ 1654.219972][ T31] #1: ffffc9001b527c90 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 1654.226335][T18606] pwc: recv_control_msg error -32 req 02 val 2100 [ 1654.237789][ T31] #2: ffff88804a454ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x430 [ 1654.238070][ T31] 4 locks held by kworker/1:3/15947: [ 1654.238099][ T31] #0: ffff8880212a8d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 1654.238277][ T31] #1: ffffc90003167c90 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 1654.238504][ T31] #2: ffff888029a08198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 1654.238684][ T31] #3: ffff888057be4198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 1654.238858][ T31] 3 locks held by kworker/u8:1/16157: [ 1654.238885][ T31] #0: ffff88813ff69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 1654.239228][ T31] #1: ffffc9000475fc90 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 1654.239409][ T31] #2: ffffffff8e3d4bb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1654.239601][ T31] 11 locks held by kworker/0:15/18606: [ 1654.239696][ T31] 4 locks held by udevd/26211: [ 1654.239723][ T31] #0: ffff888035afb790 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 [ 1654.372542][ T31] #1: ffff888034b6e088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 1654.382552][ T31] #2: ffff88801f757698 (kn->active#19){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 1654.394128][ T31] #3: ffff888057be4198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1654.394413][T18606] pwc: recv_control_msg error -32 req 04 val 1500 [ 1654.404115][ T31] 2 locks held by syz.0.5571/26559: [ 1654.404130][ T31] #0: ffffffff9012c408 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90 [ 1654.404197][ T31] #1: ffffffff8e3d4bb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 1654.404323][ T31] [ 1654.404329][ T31] ============================================= [ 1654.404329][ T31] [ 1654.404338][ T31] NMI backtrace for cpu 1 [ 1654.404351][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1654.404374][ T31] Tainted: [L]=SOFTLOCKUP [ 1654.404380][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1654.404391][ T31] Call Trace: [ 1654.404397][ T31] [ 1654.404404][ T31] dump_stack_lvl+0x116/0x1f0 [ 1654.404432][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1654.404462][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1654.404484][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1654.404515][ T31] watchdog+0xf14/0x1140 [ 1654.404544][ T31] ? rcu_is_watching+0x12/0xc0 [ 1654.404565][ T31] ? __pfx_watchdog+0x10/0x10 [ 1654.404587][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1654.404612][ T31] ? __kthread_parkme+0x19e/0x250 [ 1654.404634][ T31] ? __pfx_watchdog+0x10/0x10 [ 1654.404658][ T31] kthread+0x3c5/0x780 [ 1654.404683][ T31] ? __pfx_kthread+0x10/0x10 [ 1654.404709][ T31] ? rcu_is_watching+0x12/0xc0 [ 1654.404731][ T31] ? __pfx_kthread+0x10/0x10 [ 1654.404756][ T31] ret_from_fork+0x983/0xb10 [ 1654.404777][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1654.404800][ T31] ? __switch_to+0x7af/0x10d0 [ 1654.404824][ T31] ? __pfx_kthread+0x10/0x10 [ 1654.404849][ T31] ret_from_fork_asm+0x1a/0x30 [ 1654.404889][ T31] [ 1654.404911][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1654.482335][T18606] pwc: recv_control_msg error -32 req 02 val 2500 [ 1654.483177][ C0] NMI backtrace for cpu 0 [ 1654.483190][ C0] CPU: 0 UID: 0 PID: 18606 Comm: kworker/0:15 Tainted: G L syzkaller #0 PREEMPT(full) [ 1654.483216][ C0] Tainted: [L]=SOFTLOCKUP [ 1654.483221][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1654.483231][ C0] Workqueue: usb_hub_wq hub_event [ 1654.483254][ C0] RIP: 0010:io_serial_out+0x8f/0xb0 [ 1654.483274][ C0] Code: 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1c 66 03 5d 40 44 89 e8 89 da ee <5b> 5d 41 5c 41 5d e9 56 10 3e 06 e8 d1 aa fa fc eb a0 e8 5a ab fa [ 1654.483289][ C0] RSP: 0000:ffffc900049ae880 EFLAGS: 00000002 [ 1654.483300][ C0] RAX: 0000000000000034 RBX: 00000000000003f8 RCX: 0000000000000000 [ 1654.483311][ C0] RDX: 00000000000003f8 RSI: ffffffff852d2d15 RDI: ffffffff9ae8b960 [ 1654.483320][ C0] RBP: ffffffff9ae8b920 R08: 0000000000000001 R09: 000000000000001f [ 1654.483329][ C0] R10: 0000000000000000 R11: 0000000016505fbc R12: 0000000000000000 [ 1654.483338][ C0] R13: 0000000000000034 R14: ffffffff9ae8b920 R15: ffffffff852d2cb0 [ 1654.483347][ C0] FS: 0000000000000000(0000) GS:ffff888124956000(0000) knlGS:0000000000000000 [ 1654.483361][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1654.483370][ C0] CR2: 00007ff92cdb9358 CR3: 0000000033980000 CR4: 00000000003526f0 [ 1654.483379][ C0] Call Trace: [ 1654.483385][ C0] [ 1654.483391][ C0] serial8250_console_write+0xfbd/0x1890 [ 1654.483411][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1654.483427][ C0] ? lock_acquire+0x179/0x330 [ 1654.483453][ C0] console_flush_one_record+0x796/0xc60 [ 1654.483473][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 1654.483492][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1654.483512][ C0] console_unlock+0xef/0x240 [ 1654.483526][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1654.483541][ C0] ? lock_acquire+0x179/0x330 [ 1654.483564][ C0] vprintk_emit+0x407/0x6b0 [ 1654.483580][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1654.483597][ C0] ? usb_control_msg+0x39d/0x4a0 [ 1654.483617][ C0] _printk+0xc7/0x100 [ 1654.483636][ C0] ? __pfx__printk+0x10/0x10 [ 1654.483658][ C0] ? v4l2_ctrl_get_name+0x1b/0x21b0 [ 1654.483679][ C0] pwc_get_u8_ctrl+0x1b7/0x230 [ 1654.483698][ C0] pwc_init_controls+0x957/0x1d50 [ 1654.483717][ C0] ? __pfx_pwc_init_controls+0x10/0x10 [ 1654.483743][ C0] ? pwc_set_video_mode+0xc10/0x1740 [ 1654.483761][ C0] ? pwc_set_leds+0x1f8/0x310 [ 1654.483778][ C0] usb_pwc_probe+0xadb/0x1d70 [ 1654.483795][ C0] ? __pfx_usb_pwc_probe+0x10/0x10 [ 1654.483809][ C0] ? mark_held_locks+0x49/0x80 [ 1654.483829][ C0] ? __pm_runtime_set_status+0x13c/0xa80 [ 1654.483852][ C0] usb_probe_interface+0x303/0xa40 [ 1654.483875][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 1654.483897][ C0] really_probe+0x241/0xa90 [ 1654.483916][ C0] __driver_probe_device+0x1de/0x440 [ 1654.483936][ C0] driver_probe_device+0x4c/0x1b0 [ 1654.483954][ C0] __device_attach_driver+0x1df/0x310 [ 1654.483972][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 1654.483990][ C0] bus_for_each_drv+0x159/0x1e0 [ 1654.484006][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1654.484022][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1654.484046][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1654.484063][ C0] __device_attach+0x1e4/0x4b0 [ 1654.484081][ C0] ? __pfx___device_attach+0x10/0x10 [ 1654.484100][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 1654.484115][ C0] device_initial_probe+0xaa/0xc0 [ 1654.484134][ C0] bus_probe_device+0x64/0x150 [ 1654.484151][ C0] device_add+0x1148/0x1950 [ 1654.484165][ C0] ? __pfx_device_add+0x10/0x10 [ 1654.484178][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1654.484196][ C0] usb_set_configuration+0x1187/0x1e20 [ 1654.484221][ C0] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1654.484237][ C0] usb_generic_driver_probe+0xb1/0x110 [ 1654.484252][ C0] usb_probe_device+0xef/0x3e0 [ 1654.484270][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 1654.484290][ C0] really_probe+0x241/0xa90 [ 1654.484309][ C0] __driver_probe_device+0x1de/0x440 [ 1654.484328][ C0] ? usb_driver_applicable+0x1c7/0x220 [ 1654.484342][ C0] driver_probe_device+0x4c/0x1b0 [ 1654.484361][ C0] __device_attach_driver+0x1df/0x310 [ 1654.484379][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 1654.484397][ C0] bus_for_each_drv+0x159/0x1e0 [ 1654.484412][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1654.484426][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1654.484442][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1654.484462][ C0] __device_attach+0x1e4/0x4b0 [ 1654.484480][ C0] ? __pfx___device_attach+0x10/0x10 [ 1654.484498][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 1654.484514][ C0] device_initial_probe+0xaa/0xc0 [ 1654.484532][ C0] bus_probe_device+0x64/0x150 [ 1654.484549][ C0] device_add+0x1148/0x1950 [ 1654.484563][ C0] ? __pfx_device_add+0x10/0x10 [ 1654.484574][ C0] ? usb_detect_static_quirks+0x335/0x3e0 [ 1654.484592][ C0] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 1654.484616][ C0] usb_new_device+0xd07/0x1a60 [ 1654.484635][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 1654.484649][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 1654.484667][ C0] ? mark_held_locks+0x49/0x80 [ 1654.484686][ C0] hub_event+0x2f34/0x4fe0 [ 1654.484714][ C0] ? __pfx_hub_event+0x10/0x10 [ 1654.484730][ C0] ? assoc_array_insert+0xb30/0x3970 [ 1654.484752][ C0] ? finish_task_switch.isra.0+0x202/0xbd0 [ 1654.484773][ C0] ? rcu_is_watching+0x12/0xc0 [ 1654.484791][ C0] process_one_work+0x9ba/0x1b20 [ 1654.484815][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1654.484837][ C0] ? assign_work+0x1a0/0x250 [ 1654.484856][ C0] worker_thread+0x6c8/0xf10 [ 1654.484879][ C0] ? __kthread_parkme+0x19e/0x250 [ 1654.484897][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1654.484916][ C0] kthread+0x3c5/0x780 [ 1654.484934][ C0] ? __pfx_kthread+0x10/0x10 [ 1654.484953][ C0] ? rcu_is_watching+0x12/0xc0 [ 1654.484969][ C0] ? __pfx_kthread+0x10/0x10 [ 1654.484987][ C0] ret_from_fork+0x983/0xb10 [ 1654.485003][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1654.485020][ C0] ? __switch_to+0x7af/0x10d0 [ 1654.485045][ C0] ? __pfx_kthread+0x10/0x10 [ 1654.485063][ C0] ret_from_fork_asm+0x1a/0x30 [ 1654.485088][ C0] [ 1655.253172][T18606] pwc: recv_control_msg error -32 req 02 val 2400 [ 1655.258120][T15947] usb 1-1: unknown number of interfaces: 2 [ 1655.260140][T18606] pwc: recv_control_msg error -32 req 02 val 2600 [ 1655.275181][T18606] pwc: recv_control_msg error -32 req 02 val 2900 [ 1655.280671][T15947] usb 1-1: USB disconnect, device number 31 [ 1655.282141][T18606] pwc: recv_control_msg error -32 req 02 val 2800 [ 1655.299234][T18606] pwc: recv_control_msg error -32 req 04 val 1100 [ 1655.316755][T18606] pwc: recv_control_msg error -71 req 04 val 1200 [ 1655.325908][T18606] pwc: Registered as video103. [ 1655.332247][T18606] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input142 [ 1655.372449][T18606] usb 3-1: USB disconnect, device number 80