last executing test programs: 5.851425431s ago: executing program 3 (id=1356): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @local}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRESHEX=r1], 0x6b}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000440)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000001c0)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.395009965s ago: executing program 4 (id=1362): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x8a400, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000100)) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000002280)="ed", 0x1}], 0x1}, 0x0) recvmmsg(r3, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000640)=""/189, 0xbd}], 0x1, &(0x7f0000000340)=""/72, 0x48}}], 0x1, 0x40002000, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = dup2(r4, r4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1800) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xf}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r5}, 0x4) recvmmsg(r0, &(0x7f00000002c0), 0x220, 0x100, 0x0) 3.627390407s ago: executing program 1 (id=1364): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x4000000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(r0, 0xd, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e24, @remote}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x800803, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}], [{@smackfshat={'smackfshat', 0x3d, 'nfs_export=on'}}, {@dont_appraise}, {@fowner_gt}, {@euid_gt}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) 3.583778239s ago: executing program 2 (id=1365): socket$packet(0x11, 0x3, 0x300) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000280), 0x200, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="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"], 0x20}}, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) clock_adjtime(0x0, 0x0) 3.435452686s ago: executing program 4 (id=1366): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x20008844) 3.419589079s ago: executing program 2 (id=1367): socket$nl_rdma(0x10, 0x3, 0x14) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000020008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES8=r1], 0x38}}, 0x10) 3.280919341s ago: executing program 4 (id=1368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xb, 0x6, "2656d6735a0274"}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xac}}, 0x8814) 3.211535843s ago: executing program 2 (id=1369): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) unshare(0x2a020400) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000040)={0x5, r1}) (async, rerun: 32) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) (rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) (async, rerun: 32) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000100)={0x8}) (rerun: 32) 3.16968276s ago: executing program 4 (id=1371): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0xf8, 0x59, 0x52, 0x20, 0x547, 0x6801, 0x113b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x87, 0xa, 0x40, 0x9, [{{0x9, 0x4, 0x98, 0x4, 0x0, 0x51, 0xb3, 0x42, 0x9}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100023a1c9d1099119168a0090102030109025b0002002a10000904091100fffffff809040906"], 0x0) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000700)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x80, 0xb, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x3, 0xfa, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x10, 0x4, 0xe}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0xe5, 0x3, 0x7f}}]}}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x310, 0x7, 0x2, 0x2, 0x10, 0x40}, 0xc, &(0x7f0000000780)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0xf, 0x3, 0x10}]}, 0x4, [{0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x2a, &(0x7f0000000a40)=@string={0x2a, 0x3, "376cef572d6fa717535b1af4ee5e26579176cdee48fb5a629385c639bb9df3272f0812f2ecbeb733"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x40c}}, {0x8b, &(0x7f00000008c0)=@string={0x8b, 0x3, "f90c34d180be4a9d1fb0e751a8dce949e2bf743d6ab881c0c24ec8aaa77eb816b3573da03c223320dfdd4851d0508e98b86d691206c5d9b9e4b00d1f6a18c20ca2c579d49535f9c937dfdf771a06287b8a936766483142faa1bc81c992e49e3f3e8eb6b727144596a2118b71c2125b44e566e3ff5d7e6e2b6935e496df7cf73bf3496f42d95e887644"}}]}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x3, 0x1ff, 0x0, 0xc5a, 0x40}, &(0x7f0000000100)=0x14) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mount$9p_unix(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f00000004c0), 0x3000080, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=unix,access=any,directio']) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000a00)=0x6) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e23, 0xff, @loopback, 0x8}}}, 0x84) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc086, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0x1, 0x6e, 0x1, {0x22, 0x97c}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xff, 0x7, 0x7}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x6, 0x40, 0x7f, 0x10, 0x8}, 0x45, &(0x7f0000000280)={0x5, 0xf, 0x45, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x7, 0x0, 0x4, [0x1fe3fc0, 0xc000, 0xd8, 0xc0]}, @ssp_cap={0x24, 0x10, 0xa, 0xc7, 0x6, 0x6, 0x65960609f4389cc1, 0x8, [0xcf, 0x0, 0xff0030, 0xff3f30, 0xcf, 0xc000]}]}, 0x8, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2c09}}, {0x34, &(0x7f0000000380)=@string={0x34, 0x3, "07b99148b64d009b23e8608e00840b8163a2f977aaf95e6b73c287becff94562dbee71e12ec131cbcb63281357915ceab3b3"}}, {0xad, &(0x7f0000000480)=@string={0xad, 0x3, "b7f48c9437114b73295e35edcb8777de4e951d3cb1416a14f65e7b78ea11b706de296ea62c6c25b7a3fa0e96614bc13887037da1539150cae88ad6da0d0fa4ecb77456b96405b2e912a048e0c96f04cb9e4d0a1928d0308bc9c6a45617260bef99fbe8d9050e67f87c54796d80e575c4c576608d161b8699acec68d8ec4fcfbff55a7b6c4dfa269672510b5d1faf2c13143a533159eabeec209bb30273f74e4d74dcafab80c69246c743d2"}}, {0xec, &(0x7f0000000540)=@string={0xec, 0x3, "bd6110940d98801c23a117e21e00d77c6a77678ee176a50fc063efe783d01357bdc02e40b627519246ab85a92176f21ad1c5adb57762557b60020ad43b33f6f916ccf3b3c2cbf2921c9814f01c297d4badeed34ff923f692ea334715065909d8cd682548659a1f8c913b9f7eefbf15fb50700a0461260158c285f25234bbd1ab7ca235f4a7e55fc0946bf7d20ba4775b637c75b76f0e44dda9b03b1f160cb847c6727e1370ab2184bfbb0c0a18779a8ce416992d1619a39837b9b4013a0449c7a8889ba1e2eb37648fe889c138d3adce021df70ccfe6ffc6d202db3a3dd3bdc913fe1cbb0f65b6095e9e"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x408}}]}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x10880, 0x0) 3.099569836s ago: executing program 3 (id=1372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x70000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x13) 3.077415119s ago: executing program 2 (id=1374): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = syz_open_dev$video(0x0, 0x8, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, &(0x7f0000000000)=0xffffffffffffff04, 0x3351, 0x2) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000041000/0x4000)=nil, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff030000000000000100000001"], 0x428}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x5, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r5, 0x420, 0x20c0}, [@IFLA_PROTO_DOWN={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000040)) 2.931210259s ago: executing program 3 (id=1375): io_destroy(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x1bc60, 0x1a704}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x2}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x4040044) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x64dc362e40de6c74, 0x0) write$fb(r1, &(0x7f0000000040)="19edcc679192259da3d39f40dd51c8f853b6f47824ca2409fc19570721b8a5e52e5d9e6a683e80c42e286b4c6ebc77f690343ac46923716f7a89e945cb1022a7eafb063dd18ea57ff350ab81921554ed4f2cab94dcdd2cec4d9974c8459b512c8000fe46cbdcb27a1adca2db0bfbe8a4b380d3d7f090fe5d9d71258e5c2ffc18c1b8c047477d5c0d60935e5978c92a3754e1fa799c23f5ed2c5b9ac6967b847ac89414a6f43b96f822cf5f0305091d7a80cd7e3cf263e50a74ea25cc6f59bb27f00d454b1a1223ab2371e618f74db02e27837f1ae3e92ffc77cf146be16f60f241f30c77da3c7e2dbca7810c4f1f1f262bd724c1223bf0ff", 0xf8) 2.509211634s ago: executing program 0 (id=1377): socket$packet(0x11, 0x3, 0x300) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000280), 0x200, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="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"], 0x20}}, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) clock_adjtime(0x0, 0x0) 2.40292734s ago: executing program 3 (id=1378): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x70, &(0x7f0000000100)={0x40, 0x8, 0x2, {0x2, 0x4}}, 0x0, &(0x7f0000000140)={0x0, 0xf, 0x89, {0x5, 0xf, 0x89, 0x2, [@generic={0x81, 0x10, 0x3, "1fb9b8ba2cbee0354f09c80447df361dc1cf0a8d10faa25ae2667d9bc284a7df16b5a501e90e75ceaa05e01653b629b2d55651a176e15b06bea6d290f574f9f65c1fbdd37fda3c75d6515aee91fd07b1716ca41389ce679066cf2e5515131342452c7360602ea5471ce928e118bba893cf1732718e86285d94f49958de44"}, @ptm_cap={0x3}]}}, 0x0, 0x0}, &(0x7f00000009c0)={0x84, &(0x7f0000000580)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001600)={0x84, &(0x7f0000001200)={0x20, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) (async) close(0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000380)={0x70, &(0x7f0000000100)={0x40, 0x8, 0x2, {0x2, 0x4}}, 0x0, &(0x7f0000000140)={0x0, 0xf, 0x89, {0x5, 0xf, 0x89, 0x2, [@generic={0x81, 0x10, 0x3, "1fb9b8ba2cbee0354f09c80447df361dc1cf0a8d10faa25ae2667d9bc284a7df16b5a501e90e75ceaa05e01653b629b2d55651a176e15b06bea6d290f574f9f65c1fbdd37fda3c75d6515aee91fd07b1716ca41389ce679066cf2e5515131342452c7360602ea5471ce928e118bba893cf1732718e86285d94f49958de44"}, @ptm_cap={0x3}]}}, 0x0, 0x0}, &(0x7f00000009c0)={0x84, &(0x7f0000000580)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001600)={0x84, &(0x7f0000001200)={0x20, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) (async) 2.299305613s ago: executing program 0 (id=1379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r6, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0xd8, 0x3f, 0x6, "3eccd25569e20900"}) 2.101741358s ago: executing program 0 (id=1380): socket$inet(0x10, 0xa, 0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x28) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x1, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10) r1 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @local}}) 2.02313077s ago: executing program 0 (id=1381): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000000)={0x84}, 0x8) (async) sendmmsg$inet6(r2, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)="f3", 0x1}], 0x1}}], 0x1, 0x4000841) (async) listen(r2, 0x2000fff) (async) r3 = accept(r2, 0xfffffffffffffffd, &(0x7f0000000180)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) (async) r4 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f0000008880)={0x2020}, 0x2020) (async) write$UHID_INPUT(r4, &(0x7f00000011c0)={0x8, {"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", 0x1000}}, 0x1006) (async) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000001080)) (async) getsockopt$bt_hci(r5, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r9, {0xffff, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.862543875s ago: executing program 0 (id=1382): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) r1 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x3f, 0x4, 0x70bd28, 0x25dfdbff, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00182b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c0000000706010100000000000000000a0000090900020073797a3100000000080006400000000608000640800000010900020073797a30005d15c2fbc46640c82c85caae831fa300000005000100070000000900020073797ab1000000000900020073797a300000000008000640000100000800064000007fff"], 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000004) setpgid(r5, 0x0) setpgid(0x0, r5) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @fwd, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018200000242d1ee2a0d639df27ee8d330de6f3c862f96c35072f02132ac808bcbfdff86909f6f4dc01a6cfdee22e57089a9d80511891c8601b561348f2952bc19f4fe3dd4a1c31e53a9e9ba4aaeda6f6735892aa0b7c4c5966c57d39107241838a1d8e37a3763a00cb2a60228030c9ba4e21cb5b3abad30cbb792acaf407b1c8ddbdfe27bf87d3f499143e90f4073b9cabdfa7", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) copy_file_range(r8, &(0x7f0000000000)=0x9, r1, &(0x7f0000000100)=0x5, 0x10001, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r5, 0x1, 0x2002) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x800000000000001) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000440)={0x1, 0x9, 0x1, 0x0}) 1.779782246s ago: executing program 1 (id=1383): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x7, 0x0, 0x1, r4, 0x5}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES8=r4], 0x14}}, 0x8011) 1.629996325s ago: executing program 1 (id=1384): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = syz_open_dev$video(0x0, 0x8, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, &(0x7f0000000000)=0xffffffffffffff04, 0x3351, 0x2) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000041000/0x4000)=nil, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff030000000000000100000001"], 0x428}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000040)) 1.451038155s ago: executing program 1 (id=1385): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) read$FUSE(r1, &(0x7f0000002700)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000002680)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000026c0), 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYBLOB="2b00a6fbdf094420854dd5772a8b3f7144520e68c793d673b08e9cd72dd260587d7113cbc1da4755232784a23bc465bb1085d2815d85b090f49331fda4ee748a3393d79781462da5a5b9360c0363e15376f1623c55fd298d81d359b55546f934fd4639f500c90e2302aac413e00d84e8fdf879d90ad3915cd99bc2d5d90e8de4ee07cd3116cb2a"]) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0x3a) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80000) accept4(r4, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r5}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00'], 0x48}, 0x1, 0x4801000000000000}, 0x0) 1.247239829s ago: executing program 1 (id=1386): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x40) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x40) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045518, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000280)={0x0, 0xec25, 0x400, 0x3, 0x40000330}, &(0x7f00000006c0), &(0x7f00000000c0)) (async) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000280)={0x0, 0xec25, 0x400, 0x3, 0x40000330}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x0) (async) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x8) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x28, 0x0, 0x0) 1.117056501s ago: executing program 4 (id=1387): r0 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028180000", @ANYRESDEC], 0x0, 0x2, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @sk_reuseport}, 0x94) write(r0, &(0x7f0000000040), 0x0) 967.152354ms ago: executing program 0 (id=1388): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$getownex(r3, 0x10, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000011c0)=""/109, 0x6d}], 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1"], 0x0) r6 = fsopen(&(0x7f0000000200)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000240)='\x00', &(0x7f0000000280)='\x00', 0x0) listen(r4, 0x3) 758.131305ms ago: executing program 4 (id=1389): syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') r0 = syz_io_uring_setup(0x891, &(0x7f0000000380)={0x0, 0x8c36, 0x400, 0x2, 0xbfdffdfc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x2a, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0x9, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0xe59) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@subsystem='memory'}, {@xattr}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0), 0x161) unshare(0x40020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) 755.680184ms ago: executing program 2 (id=1390): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0xe0, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800000e2, 0x0, 0x0, 0x0, 0x2000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r3, r5, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r6, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000400)={0x3, 0x0, 0x5, 0x8}, 0x10) write(r7, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0003000200", 0x41d) setsockopt$inet6_udp_int(r6, 0x11, 0xa, &(0x7f0000000040)=0x7, 0x4) r8 = fcntl$dupfd(r6, 0x406, r6) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x406, 0xfffa}, 0x3a, [0x8000, 0x7ff, 0x8, 0x8, 0x80, 0x8, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0xa, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c57, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x9, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x400, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0xffff8001, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0xffffffff, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0x388000, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2b, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xfff, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x4, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xf, 0xd86, 0x2, 0x4, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x200004, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0x71d, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x8, 0x8, 0x86, 0x3, 0x3038, 0xff, 0xb, 0x2, 0x2, 0x2, 0x7, 0x20000008, 0x4, 0x16d01, 0x6, 0x8, 0x800003, 0x600, 0x80, 0xaf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x7, 0x3, 0x7ff, 0x127, 0x4, 0x1, 0x542, 0x3, 0x5, 0x1b, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x80000000], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0xfffd, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x10000016, 0x3, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x3, 0x100, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0x40b1e, 0xd7, 0x200, 0x6, 0x4]}, 0x45c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1a, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffc, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x80000001, 0x62, &(0x7f0000000300)=""/98, 0x40f00, 0x0, '\x00', r5, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x1, 0x10, 0x7fff, 0x6}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000500)=[{0x3, 0x3, 0x4, 0x8}, {0x0, 0x4, 0x7, 0x5}], 0x10, 0x101}, 0x94) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) llistxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b16413b6139c84d300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbd2d00900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006ebe0d61ce320d1c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffe600", 0x2000, &(0x7f0000000440)={&(0x7f0000000140)={0x50, 0x7fffffffffffffff, 0x1000000000, {0x7, 0x2b, 0x0, 0x44db0860, 0x0, 0xfffc, 0x8, 0x0, 0x0, 0x0, 0x10, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 579.526745ms ago: executing program 2 (id=1391): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x10000007}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r3, 0x0, 0xe, 0x0, &(0x7f0000000440)="e02742e8680d85ff9782762f86dd", 0x0, 0xf86, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000380)="ebe3a0e961837b796cfd1647e2080000000000000080b3720022205e81f4a7f71c197baae1efd7e8004a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000006c0)="e8710e444d50a969ff678371e3214aeee71dee3819271482a4975a52c18b9b8b4db3945d1032005eabe97b4dc33a47d3a158da98255ccdd4c15eb6c9857345444d8456d30026b433a2efdd5b00186f35cdcdb93a4722bf356a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e8927d2a8103ef2f4b93766b756b66f74f46cf801704d27a8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511ce678c0bb8e26d7b48241847bf9e343ef4e55d45e2a0000000000000000000", 0xfffffe7f}, {&(0x7f0000000400)="04c6a9c756754e10ed8d88c06d7a674db97cd0e21437530a3945ac896fa7f8e368f87de990e40a896805e49ce1e13103d82fffe82237f587e63d95e01ef451eaba2dd01c56e7f23c1fcccbea54dae8e295f2e533e4a34175026a9964eebc1aaae05e44a19a27bee2f591abe2f456448754670a7c3e2e4b47a71bc7"}, {&(0x7f0000000300)}], 0x3}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r8, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r8, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) read$FUSE(r0, &(0x7f0000000b00)={0x2020}, 0x2020) 501.808145ms ago: executing program 3 (id=1392): r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x8000, 0x89) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(r2, 0x3b84, &(0x7f0000000100)={0x20, 0x0, 0x1, 0x0, &(0x7f00000000c0)=[{}]}) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000140)="cb0afa40529eeea77908e3ab862c54c2cdeb626a2d9685f52ca66df53ae49e77fba016eb6beed32561ba653074548eafcf382c3729d93903305b0670849fc96b281ff7619ac6aed2699782abeac49ed604b9526790253236212189f2") r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd0, 0xd0, 0xa, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xc, 0x5}, {0x7, 0x5}, {0x8}, {0xc, 0x2}, {0x3, 0x5}]}, @union={0x3, 0x7, 0x0, 0x5, 0x0, 0x0, [{0x1, 0x1, 0x9}, {0xe, 0x5, 0xffffffff}, {0xe, 0x1, 0x9}, {0x5, 0x5, 0x80000001}, {0x6, 0x1, 0x3}, {0x9, 0x2, 0xfff}, {0x3}]}, @struct={0xf, 0x2, 0x0, 0x4, 0x1, 0x79, [{0x4, 0x3, 0x3}, {0x0, 0x0, 0x3}]}, @restrict={0x3, 0x0, 0x0, 0xb, 0x4}, @volatile={0x2, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x5f, 0x61, 0x0, 0x5f, 0x61, 0x61, 0x2e, 0x5f]}}, &(0x7f00000002c0)=""/69, 0xf2, 0x45, 0x0, 0x106c2ca7}, 0x28) faccessat2(r1, &(0x7f0000000380)='./file0\x00', 0x0, 0x200) ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f00000003c0)={0xddc, 0x726d, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000015080), 0x8000, 0x0) ioctl$RNDADDTOENTCNT(r4, 0x40045201, &(0x7f00000150c0)=0x3) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r5, 0xaead) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000015100)="a12d858c5b848163e60ec433d5bdb90dcebd4067f19ee03e38cdb66e687569895d6e73344c9f58670dbbe8908eebde7c51df91fa1cafa09c295f5a6d4367f983bed23ae3c5ad06120921d4f4c873710d4841606493885fa3e93eed39981fbae65062e4ce9e7cb09ed94f27363c2be9c57410d4e21eb21019dbdc7334008e7914798b11b258cd25868b08067ea2047c797ad57723e9358729bd6820314c691f99737bbea0bdff5ac1c268b2d4193726069c09fca3a8817be28288574ed6ca81d87c2736c9c475a1ebb20749248436345705cbd9eea2f372f6295f325d7d933e117514c1aa58f911c62a5a97e81b4190da725600050c32a2396cc884ec5e181a78") r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f00000152c0)={&(0x7f0000015200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000015280)={&(0x7f0000015240)={0x40, 0x1412, 0x2, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000015300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfff, '\x00', 0x0, r3, 0x4, 0x1, 0x5}, 0x50) pipe(&(0x7f0000015380)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000153c0)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x7, '\x00', 0x0, r8, 0x3, 0x2}, 0x50) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000156c0)={0x18, 0x1e, &(0x7f0000015480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @generic={0x10, 0x3, 0xb, 0xabc, 0x80}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff8}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000015580)='GPL\x00', 0x4, 0x3c, &(0x7f00000155c0)=""/60, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000015600)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000015640)={0x3, 0x4, 0x80000000, 0x8}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000015680)=[{0x0, 0x4, 0x0, 0x9}, {0x2, 0x2, 0xc, 0xa}, {0x3, 0x4, 0xc, 0x4}], 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000015780)={&(0x7f0000015440)='cachefiles_coherency\x00', r11, 0x0, 0x59}, 0x18) fcntl$addseals(r10, 0x409, 0x7) setsockopt$MRT6_INIT(r9, 0x29, 0xc8, &(0x7f00000157c0), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r12 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000015800), 0x2000, 0x0) write$6lowpan_enable(r12, &(0x7f0000015840)='1', 0x1) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000015880)={0xc, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r9, 0x3b84, &(0x7f0000015900)={0x20, r13, 0x2, 0x0, &(0x7f00000158c0)=[{}, {}]}) set_mempolicy(0x4000, &(0x7f0000015940)=0xb716, 0x3) ioctl$F2FS_IOC_DEFRAGMENT(r9, 0xc010f508, &(0x7f0000015980)={0xd590, 0x7}) 178.488998ms ago: executing program 1 (id=1393): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = getpgid(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vcsu(&(0x7f00000000c0), 0xb, 0x200) lseek(r5, 0x7, 0x2) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000100)) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) r7 = socket$inet6(0xa, 0x80002, 0x0) r8 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r8, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) 0s ago: executing program 3 (id=1394): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setfsgid(0xee00) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/time\x00') setns(r3, 0x40020000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[], 0x0}, 0x94) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) write$binfmt_elf64(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df0120000400000000000000030038000100070002000100030000000000000003000000000101"], 0x509) close(r6) r7 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r7) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000405, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, 0x0, 0x0) r8 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_STORE(r8, 0x0, 0x29) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f00000002c0)={0x14, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0xf, 0x0, 0x8000000000000001, 0x48f, 0x5, 0xb, 0x425, 0x2, 0x8, 0xfffffffffffffffd, 0xfffffffffffffff9, 0x8, 0x3, 0x8001000000081, 0x5, 0x2, 0x3, 0x2, 0x9220000000000000, 0x3, 0x1, 0x80000001, 0x0, 0x7, 0x7}) kernel console output (not intermixed with test programs): T48] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 251.756522][ T8868] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 252.263183][ T8868] usb 3-1: too many configurations: 72, using maximum allowed: 8 [ 252.280156][ T48] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 252.305738][ T48] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 252.355655][ T8868] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 252.365889][ T48] usb 4-1: config 0 has no interface number 0 [ 252.373167][ T8868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.385992][ T48] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 252.396058][ T8868] usb 3-1: config 0 descriptor?? [ 252.401444][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.415512][ T48] usb 4-1: Product: syz [ 252.443779][ T48] usb 4-1: Manufacturer: syz [ 252.448864][ T48] usb 4-1: SerialNumber: syz [ 252.572902][ T48] usb 4-1: config 0 descriptor?? [ 252.677138][ T30] audit: type=1400 audit(1766056776.247:748): avc: denied { setattr } for pid=9028 comm="syz.1.789" name="[io_uring]" dev="anon_inodefs" ino=21516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 252.946062][ T9032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.954977][ T9032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.982447][ T5925] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 253.162460][ T5925] usb 1-1: device descriptor read/64, error -71 [ 253.421029][ T5925] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 253.562822][ T5925] usb 1-1: device descriptor read/64, error -71 [ 253.686004][ T5925] usb usb1-port1: attempt power cycle [ 253.772490][ T5873] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 254.017423][ T5873] usb 5-1: Using ep0 maxpacket: 8 [ 254.874588][ T5925] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 254.893441][ T9008] orangefs_mount: mount request failed with -4 [ 254.934438][ T5873] usb 5-1: unable to get BOS descriptor or descriptor too short [ 254.944128][ T5925] usb 1-1: device descriptor read/8, error -71 [ 254.965314][ T5873] usb 5-1: config 2 has an invalid interface number: 184 but max is 0 [ 254.977698][ T48] uvcvideo 4-1:0.64: probe with driver uvcvideo failed with error -22 [ 255.085245][ T5873] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 255.103045][ T89] usb 3-1: USB disconnect, device number 27 [ 255.112812][ T5873] usb 5-1: config 2 has no interface number 0 [ 255.221931][ T48] usb 4-1: USB disconnect, device number 29 [ 255.513096][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.519571][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.554234][ T5925] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 255.564488][ T5873] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=67.c4 [ 255.588750][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.602469][ T5873] usb 5-1: Product: syz [ 255.606737][ T5873] usb 5-1: Manufacturer: syz [ 255.611736][ T5873] usb 5-1: SerialNumber: syz [ 255.744546][ T5925] usb 1-1: device descriptor read/8, error -71 [ 255.865262][ T5925] usb usb1-port1: unable to enumerate USB device [ 255.872868][ T9035] cgroup2: Unknown parameter 'hash' [ 255.904743][ T5873] usbtest 5-1:2.184: couldn't get endpoints, -22 [ 255.911280][ T5873] usbtest 5-1:2.184: probe with driver usbtest failed with error -22 [ 255.940921][ T5873] usb 5-1: USB disconnect, device number 34 [ 256.036864][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.796'. [ 256.049658][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.796'. [ 256.063325][ T9060] netlink: 'syz.2.796': attribute type 7 has an invalid length. [ 256.082994][ T48] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 256.111040][ T9066] netlink: 20 bytes leftover after parsing attributes in process `syz.2.796'. [ 256.513068][ T48] usb 4-1: device descriptor read/64, error -71 [ 256.879279][ T48] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 256.894980][ T30] audit: type=1400 audit(1766056780.457:749): avc: denied { mounton } for pid=9077 comm="syz.4.799" path="/150/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 257.056164][ T9081] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 257.064281][ T48] usb 4-1: device descriptor read/64, error -71 [ 257.182799][ T48] usb usb4-port1: attempt power cycle [ 257.282572][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.802'. [ 257.332269][ T30] audit: type=1400 audit(1766056780.897:750): avc: denied { create } for pid=9091 comm="syz.1.805" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 257.383586][ T30] audit: type=1400 audit(1766056780.947:751): avc: denied { unlink } for pid=9091 comm="syz.1.805" name="file0" dev="ramfs" ino=21653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 257.461549][ T30] audit: type=1400 audit(1766056781.027:752): avc: denied { ioctl } for pid=9095 comm="syz.4.807" path="socket:[22581]" dev="sockfs" ino=22581 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 257.518706][ T9104] kAFS: unable to lookup cell '' [ 257.553084][ T48] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 257.583046][ T48] usb 4-1: device descriptor read/8, error -71 [ 257.642511][ T5926] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 257.741780][ T30] audit: type=1400 audit(1766056781.307:753): avc: denied { getopt } for pid=9095 comm="syz.4.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 257.842432][ T48] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 257.870989][ T48] usb 4-1: device descriptor read/8, error -71 [ 257.890838][ T5926] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 257.902471][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.919766][ T5926] usb 1-1: config 0 descriptor?? [ 258.179009][ T48] usb usb4-port1: unable to enumerate USB device [ 258.214955][ T5926] cp210x 1-1:0.0: cp210x converter detected [ 258.932467][ T5926] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 259.276261][ T5926] usb 1-1: cp210x converter now attached to ttyUSB0 [ 259.467748][ T5926] usb 1-1: USB disconnect, device number 24 [ 259.519111][ T5926] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 259.597929][ T5926] cp210x 1-1:0.0: device disconnected [ 261.119902][ T9160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.820'. [ 262.124726][ T9171] netlink: 92 bytes leftover after parsing attributes in process `syz.1.822'. [ 262.526879][ T30] audit: type=1400 audit(1766056786.097:754): avc: denied { setopt } for pid=9149 comm="syz.2.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 262.630842][ T30] audit: type=1400 audit(1766056786.097:755): avc: denied { shutdown } for pid=9149 comm="syz.2.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 262.884724][ T30] audit: type=1400 audit(1766056786.447:756): avc: denied { mount } for pid=9183 comm="syz.0.825" name="/" dev="configfs" ino=1184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 262.921884][ T9184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.041733][ T9184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.058257][ T9184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.542823][ T9184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.615004][ T9184] batman_adv: batadv0: Interface deactivated: vxlan0 [ 263.642920][ T9184] batman_adv: batadv0: Removing interface: vxlan0 [ 263.662945][ T9184] batman_adv: batadv0: Interface deactivated: gretap1 [ 263.688257][ T9184] batman_adv: batadv0: Removing interface: gretap1 [ 264.225550][ T30] audit: type=1400 audit(1766056787.797:757): avc: denied { write } for pid=9204 comm="syz.3.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 265.561574][ T790] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 265.742779][ T790] usb 4-1: Using ep0 maxpacket: 16 [ 265.760133][ T790] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 265.768269][ T790] usb 4-1: config 0 has no interface number 0 [ 265.774631][ T790] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.788897][ T790] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.816010][ T790] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 265.832731][ T790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.303921][ T30] audit: type=1400 audit(1766056789.427:758): avc: denied { connect } for pid=9222 comm="syz.1.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 266.325112][ T790] usb 4-1: config 0 descriptor?? [ 266.403973][ T9226] ip6gretap0: entered promiscuous mode [ 266.410261][ T9226] vlan2: entered promiscuous mode [ 266.622713][ T9210] netlink: 'syz.3.830': attribute type 10 has an invalid length. [ 266.642559][ T9210] team0: Port device dummy0 added [ 266.649811][ T9210] netlink: 'syz.3.830': attribute type 10 has an invalid length. [ 266.667650][ T9231] xt_SECMARK: invalid security context 'unconfined' [ 266.768429][ T9210] team0: Port device dummy0 removed [ 266.789745][ T30] audit: type=1400 audit(1766056790.347:759): avc: denied { mounton } for pid=9230 comm="syz.0.837" path="/proc/634/cgroup" dev="proc" ino=22801 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 266.856782][ T9210] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 266.893027][ T30] audit: type=1400 audit(1766056790.457:760): avc: denied { ioctl } for pid=9209 comm="syz.3.830" path="socket:[22798]" dev="sockfs" ino=22798 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 266.967968][ T9237] lo speed is unknown, defaulting to 1000 [ 267.219795][ T790] usbhid 4-1:0.1: can't add hid device: -71 [ 267.247397][ T790] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 267.291986][ T790] usb 4-1: USB disconnect, device number 34 [ 267.890920][ T30] audit: type=1400 audit(1766056791.457:761): avc: denied { mount } for pid=9251 comm="syz.1.843" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 268.041783][ T9258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56848 sclass=netlink_route_socket pid=9258 comm=syz.3.845 [ 268.061184][ T30] audit: type=1326 audit(1766056791.627:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9257 comm="syz.3.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ea98f749 code=0x7fc00000 [ 268.861581][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.849'. [ 269.235432][ T9280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.268750][ T9280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.743394][ T30] audit: type=1400 audit(1766056793.307:763): avc: denied { write } for pid=9285 comm="syz.2.851" path="socket:[22026]" dev="sockfs" ino=22026 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 269.852046][ T30] audit: type=1400 audit(1766056793.417:764): avc: denied { execute } for pid=9287 comm="syz.0.852" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 269.903347][ T30] audit: type=1400 audit(1766056793.477:765): avc: denied { write } for pid=9285 comm="syz.2.851" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 269.952621][ T30] audit: type=1400 audit(1766056793.477:766): avc: denied { open } for pid=9285 comm="syz.2.851" path="/167/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 270.009589][ T30] audit: type=1400 audit(1766056793.477:767): avc: denied { ioctl } for pid=9285 comm="syz.2.851" path="/167/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 270.408738][ T30] audit: type=1400 audit(1766056793.977:768): avc: denied { read } for pid=9304 comm="syz.2.857" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 270.435720][ T30] audit: type=1400 audit(1766056793.977:769): avc: denied { open } for pid=9304 comm="syz.2.857" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 270.525484][ T9306] trusted_key: encrypted_key: master key parameter '}bxk' is invalid [ 270.546030][ T9306] trusted_key: encrypted_key: keylen parameter is missing [ 270.710271][ T790] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 270.875413][ T790] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 270.984798][ T790] usb 5-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 271.042563][ T5940] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 271.067728][ T790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.146922][ T790] usb 5-1: Product: syz [ 271.192812][ T790] usb 5-1: Manufacturer: syz [ 271.217686][ T790] usb 5-1: SerialNumber: syz [ 271.243794][ T5940] usb 4-1: config 64 has an invalid interface number: 39 but max is 0 [ 271.266608][ T5940] usb 4-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 271.303609][ T5940] usb 4-1: config 64 has no interface number 0 [ 271.310062][ T5940] usb 4-1: config 64 interface 39 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 271.321679][ T5940] usb 4-1: config 64 interface 39 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 271.332118][ T5940] usb 4-1: config 64 interface 39 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 271.348097][ T5940] usb 4-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=71.df [ 271.359090][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.367274][ T5940] usb 4-1: Product: syz [ 271.371852][ T5940] usb 4-1: Manufacturer: syz [ 271.378370][ T5940] usb 4-1: SerialNumber: syz [ 271.513902][ T5940] usbtest 4-1:64.39: couldn't get endpoints, -22 [ 271.546040][ T5940] usbtest 4-1:64.39: probe with driver usbtest failed with error -22 [ 271.705428][ T5940] usb 4-1: USB disconnect, device number 35 [ 271.783079][ T9326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.863'. [ 271.791986][ T9326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.863'. [ 271.800897][ T9326] netlink: 'syz.2.863': attribute type 7 has an invalid length. [ 271.876885][ T790] as10x_usb: device has been detected [ 271.883903][ T790] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 271.914582][ T790] usb 5-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 271.988610][ T790] as10x_usb: error during firmware upload part1 [ 272.001623][ T790] Registered device Elgato EyeTV DTT Deluxe [ 272.008843][ T790] usb 5-1: USB disconnect, device number 35 [ 272.125573][ T790] Unregistered device Elgato EyeTV DTT Deluxe [ 272.132982][ T790] as10x_usb: device has been disconnected [ 272.181643][ T9328] SET target dimension over the limit! [ 272.579065][ T9302] syz.4.856 (9302) used greatest stack depth: 19688 bytes left [ 272.672410][ T89] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 272.832544][ T89] usb 4-1: Using ep0 maxpacket: 32 [ 272.897876][ T89] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 272.907591][ T9343] netlink: 'syz.1.869': attribute type 21 has an invalid length. [ 272.940795][ T89] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 272.971633][ T89] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 272.987927][ T9345] kAFS: No cell specified [ 273.381617][ T9346] netlink: 'syz.1.869': attribute type 21 has an invalid length. [ 273.384220][ T89] usb 4-1: config 1 has no interface number 0 [ 273.395861][ T89] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 273.408826][ T89] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 273.421998][ T89] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 273.431528][ T89] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.451546][ T9343] netlink: 128 bytes leftover after parsing attributes in process `syz.1.869'. [ 273.481536][ T9346] netlink: 128 bytes leftover after parsing attributes in process `syz.1.869'. [ 273.647466][ T9343] netlink: 3 bytes leftover after parsing attributes in process `syz.1.869'. [ 273.662565][ T89] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 273.680900][ T9346] netlink: 3 bytes leftover after parsing attributes in process `syz.1.869'. [ 273.744940][ T9354] netlink: 48 bytes leftover after parsing attributes in process `syz.0.871'. [ 274.134330][ T89] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 274.414879][ T30] audit: type=1400 audit(1766056797.987:770): avc: denied { getopt } for pid=9330 comm="syz.3.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 274.437299][ T9359] EXT4-fs (nbd4): unable to read superblock [ 274.454440][ T9360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.511290][ T9360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.556789][ T9360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.704901][ T9360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.124622][ T9360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.145180][ T9360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.171231][ T9360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.174255][ T89] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 275.227503][ T9360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.257453][ T9360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.285150][ T9360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.259551][ T9389] bridge0: entered promiscuous mode [ 276.265350][ T9389] bridge0: entered allmulticast mode [ 276.792405][ T5940] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 277.497203][ T5940] usb 3-1: Using ep0 maxpacket: 16 [ 277.520026][ T48] usb 4-1: USB disconnect, device number 36 [ 277.550674][ T48] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 278.185841][ T9410] overlayfs: failed to clone upperpath [ 278.346465][ T5940] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 278.360502][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 278.467751][ T30] audit: type=1400 audit(1766056802.037:771): avc: denied { setopt } for pid=9413 comm="syz.4.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 278.468926][ T5940] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 278.582474][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.612417][ T5940] usb 3-1: Product: syz [ 278.616589][ T5940] usb 3-1: Manufacturer: syz [ 278.647619][ T5940] usb 3-1: SerialNumber: syz [ 278.684986][ T5940] usb 3-1: config 0 descriptor?? [ 278.706013][ T5940] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 278.740498][ T9420] netlink: 32 bytes leftover after parsing attributes in process `syz.4.887'. [ 278.792512][ T48] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 278.832758][ T5940] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 278.988592][ T48] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 278.998029][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.014960][ T48] usb 4-1: Product: syz [ 279.036939][ T48] usb 4-1: Manufacturer: syz [ 279.058544][ T48] usb 4-1: SerialNumber: syz [ 279.197221][ T48] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 279.217678][ T89] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 279.409697][ T5940] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 279.484769][ T5940] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 280.303920][ T89] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 280.370805][ T5940] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 280.370884][ T89] ath9k_htc: Failed to initialize the device [ 280.412094][ T5940] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 280.572269][ T89] usb 4-1: ath9k_htc: USB layer deinitialized [ 280.614746][ T9435] netlink: 'syz.1.891': attribute type 20 has an invalid length. [ 280.637554][ T5940] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 280.651393][ T5940] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 280.670439][ T5940] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 280.692805][ T5940] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 280.707044][ T5940] usb 3-1: USB disconnect, device number 28 [ 280.941894][ T9445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.896'. [ 282.939247][ T10] usb 4-1: USB disconnect, device number 37 [ 282.972460][ T9469] netlink: 'syz.1.902': attribute type 13 has an invalid length. [ 283.003049][ T9471] netlink: 666 bytes leftover after parsing attributes in process `syz.3.905'. [ 283.012434][ T9469] netlink: 32 bytes leftover after parsing attributes in process `syz.1.902'. [ 283.487925][ T9482] faux_driver vgem: [drm] Unknown color mode 4091; guessing buffer size. [ 283.497199][ T30] audit: type=1400 audit(1766056807.067:772): avc: denied { map } for pid=9481 comm="syz.3.906" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 283.585530][ T30] audit: type=1400 audit(1766056807.067:773): avc: denied { execute } for pid=9481 comm="syz.3.906" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 283.705155][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 283.862950][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 283.873065][ T10] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 283.891573][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.918797][ T10] usb 5-1: Product: syz [ 283.928401][ T10] usb 5-1: Manufacturer: syz [ 283.938452][ T10] usb 5-1: SerialNumber: syz [ 283.957175][ T10] usb 5-1: config 0 descriptor?? [ 283.974129][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 284.192903][ T9473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.201590][ T9473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.214022][ T9504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.912'. [ 284.430045][ T10] gspca_se401: Bayer format not supported! [ 284.707088][ T8868] usb 5-1: USB disconnect, device number 36 [ 285.096915][ T9520] netlink: 666 bytes leftover after parsing attributes in process `syz.3.916'. [ 285.915689][ T30] audit: type=1400 audit(1766056809.487:774): avc: denied { mount } for pid=9529 comm="syz.3.921" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 287.341128][ T30] audit: type=1400 audit(1766056810.857:775): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 288.720399][ T9582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.931'. [ 288.729653][ T9582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.931'. [ 288.778979][ T30] audit: type=1326 audit(1766056812.327:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9583 comm="syz.1.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fc58f749 code=0x7ffc0000 [ 288.929230][ T30] audit: type=1326 audit(1766056812.327:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9583 comm="syz.1.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fc58f749 code=0x7ffc0000 [ 289.202652][ T30] audit: type=1326 audit(1766056812.327:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9583 comm="syz.1.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fa9fc58f749 code=0x7ffc0000 [ 289.385778][ T30] audit: type=1326 audit(1766056812.327:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9583 comm="syz.1.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fc58f749 code=0x7ffc0000 [ 289.442134][ T30] audit: type=1326 audit(1766056812.327:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9583 comm="syz.1.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa9fc58f749 code=0x7ffc0000 [ 289.520567][ T30] audit: type=1326 audit(1766056812.327:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9583 comm="syz.1.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fc58f749 code=0x7ffc0000 [ 289.610165][ T30] audit: type=1400 audit(1766056812.847:782): avc: denied { read } for pid=9581 comm="syz.4.932" lport=34586 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 289.818055][ T9604] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 289.852780][ T9604] netlink: 'syz.0.938': attribute type 2 has an invalid length. [ 289.873162][ T9604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.938'. [ 290.476103][ T9614] netlink: 'syz.1.936': attribute type 11 has an invalid length. [ 290.592027][ T9618] hub 1-0:1.0: USB hub found [ 290.599268][ T9618] hub 1-0:1.0: 1 port detected [ 290.634337][ T5873] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 290.802394][ T5873] usb 3-1: Using ep0 maxpacket: 8 [ 290.811715][ T5873] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 290.821201][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.829467][ T5873] usb 3-1: Product: syz [ 290.834596][ T5873] usb 3-1: Manufacturer: syz [ 290.840374][ T5873] usb 3-1: SerialNumber: syz [ 290.878806][ T5873] usb 3-1: config 0 descriptor?? [ 290.887326][ T5873] gspca_main: se401-2.14.0 probing 047d:5003 [ 290.902487][ T5924] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 291.062392][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 291.069460][ T5924] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.087947][ T5924] usb 5-1: config 0 interface 0 has no altsetting 0 [ 291.112963][ T5924] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 291.144569][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.163022][ T5924] usb 5-1: config 0 descriptor?? [ 291.465151][ T5873] gspca_se401: Frame size: 0x2 1/4th janggu [ 291.478007][ T5873] gspca_se401: Frame size: 0x65535 bayer [ 291.512377][ T5873] gspca_se401: Frame size: 65535x0 bayer [ 291.995695][ T5873] gspca_se401: Frame size: 1x0 bayer [ 292.001100][ T5873] gspca_se401: Frame size: 0x4 bayer [ 292.025107][ T5873] gspca_se401: Frame size: 0x0 1/16th janggu [ 292.039919][ T5924] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 292.047368][ T5873] gspca_se401: Frame size: 32x5 bayer [ 292.053077][ T5873] gspca_se401: Frame size: 0x1 1/16th janggu [ 292.059151][ T5924] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 292.066379][ T5873] gspca_se401: Frame size: 0x0 1/16th janggu [ 292.072741][ T5924] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 292.079767][ T5873] gspca_se401: Frame size: 0x0 1/16th janggu [ 292.086041][ T5924] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 292.093660][ T5924] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 292.095202][ T5873] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19 [ 292.110573][ T5924] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 292.118172][ T5924] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 292.128430][ T5924] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 292.140719][ T5873] usb 3-1: USB disconnect, device number 29 [ 292.146848][ T5924] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 292.157276][ T5924] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 292.253879][ T5924] cougar 0003:060B:500A.0005: hidraw0: USB HID v0.00 Device [HID 060b:500a] on usb-dummy_hcd.4-1/input0 [ 292.292480][ T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 292.352658][ T5924] usb 5-1: USB disconnect, device number 37 [ 292.447597][ T9636] fido_id[9636]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 292.473410][ T10] usb 1-1: device descriptor read/64, error -71 [ 292.478577][ T9630] "syz.3.947" (9630) uses obsolete ecb(arc4) skcipher [ 292.552715][ T5859] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 292.668298][ T9640] /dev/nullb0: Can't lookup blockdev [ 292.708743][ T5859] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 292.722464][ T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 292.726980][ T5859] usb 4-1: can't read configurations, error -61 [ 292.866048][ T10] usb 1-1: device descriptor read/64, error -71 [ 292.867497][ T9642] lo speed is unknown, defaulting to 1000 [ 292.882675][ T5859] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 292.891892][ T9644] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 292.913652][ T9644] netlink: 28 bytes leftover after parsing attributes in process `syz.4.950'. [ 292.994569][ T10] usb usb1-port1: attempt power cycle [ 293.228994][ T5859] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 293.240334][ T5859] usb 4-1: can't read configurations, error -61 [ 294.122418][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 294.135294][ T30] audit: type=1400 audit(1766056817.627:783): avc: denied { setopt } for pid=9649 comm="syz.4.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 294.158776][ T5859] usb usb4-port1: attempt power cycle [ 294.213189][ T10] usb 1-1: device descriptor read/8, error -71 [ 294.612451][ T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 294.842391][ T10] usb 1-1: device not accepting address 28, error -71 [ 294.842443][ T5859] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 294.849603][ T10] usb usb1-port1: unable to enumerate USB device [ 294.958559][ T5859] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 295.085076][ T5859] usb 4-1: can't read configurations, error -61 [ 295.644214][ T5859] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 296.225910][ T5859] usb 4-1: device not accepting address 41, error -71 [ 296.276122][ T5859] usb usb4-port1: unable to enumerate USB device [ 298.962477][ T5940] kernel read not supported for file /cpu/0/msr (pid: 5940 comm: kworker/0:6) [ 299.883213][ T9739] SELinux: Context is not valid (left unmapped). [ 300.004080][ T30] audit: type=1326 audit(1766056823.577:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9733 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06ed8f749 code=0x7ffc0000 [ 300.040062][ T9739] affs: No valid root block on device nullb0 [ 300.710313][ T30] audit: type=1400 audit(1766056823.607:785): avc: denied { connect } for pid=9735 comm="syz.0.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 300.738048][ T30] audit: type=1326 audit(1766056823.617:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9733 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06ed8f749 code=0x7ffc0000 [ 300.822532][ T30] audit: type=1326 audit(1766056823.617:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9733 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe06ed8f749 code=0x7ffc0000 [ 300.851270][ T30] audit: type=1326 audit(1766056823.627:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9733 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06ed8f749 code=0x7ffc0000 [ 300.953888][ T30] audit: type=1326 audit(1766056823.627:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9733 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe06ed8f749 code=0x7ffc0000 [ 301.240283][ T30] audit: type=1326 audit(1766056823.627:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9733 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06ed8f749 code=0x7ffc0000 [ 301.408327][ T30] audit: type=1326 audit(1766056823.627:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9733 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe06ed8f749 code=0x7ffc0000 [ 301.461630][ T30] audit: type=1326 audit(1766056823.627:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9733 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06ed8f749 code=0x7ffc0000 [ 301.516248][ T30] audit: type=1326 audit(1766056823.627:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9733 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe06ed8f749 code=0x7ffc0000 [ 302.082775][ T5812] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 302.242548][ T5812] usb 5-1: Using ep0 maxpacket: 16 [ 302.249570][ T5812] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 302.281749][ T5812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 302.319998][ T5812] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 302.332560][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.351010][ T5812] usb 5-1: Product: syz [ 302.355659][ T5812] usb 5-1: Manufacturer: syz [ 302.360311][ T5812] usb 5-1: SerialNumber: syz [ 302.384028][ T5812] usb 5-1: config 0 descriptor?? [ 302.404455][ T5812] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 302.415444][ T9774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.980'. [ 302.424428][ T9774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.980'. [ 302.433260][ T9774] netlink: 'syz.1.980': attribute type 7 has an invalid length. [ 302.492808][ T5812] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 302.612516][ T5873] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 302.812665][ T5873] usb 4-1: device descriptor read/64, error -71 [ 303.081889][ T5812] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 303.092287][ T5812] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 303.132572][ T5873] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 303.523742][ T5873] usb 4-1: device descriptor read/64, error -71 [ 303.632778][ T5873] usb usb4-port1: attempt power cycle [ 304.395122][ T5873] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 304.419205][ T5812] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 304.428108][ T5873] usb 4-1: device descriptor read/8, error -71 [ 304.435642][ T5812] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 304.582472][ T5812] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 304.589419][ T5812] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 304.596084][ T5812] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 304.605025][ T5812] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 305.027154][ T5812] usb 5-1: USB disconnect, device number 38 [ 305.073229][ T5873] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 305.232925][ T5873] usb 4-1: device descriptor read/8, error -71 [ 305.307908][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 305.307924][ T30] audit: type=1400 audit(1766056828.877:813): avc: denied { setattr } for pid=9800 comm="syz.2.989" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 305.373038][ T5873] usb usb4-port1: unable to enumerate USB device [ 305.435491][ T30] audit: type=1400 audit(1766056829.007:814): avc: denied { ioctl } for pid=9802 comm="syz.3.990" path="socket:[24198]" dev="sockfs" ino=24198 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 305.471855][ T9803] kAFS: unable to lookup cell '({^@' [ 305.888991][ T9813] x_tables: duplicate underflow at hook 2 [ 305.907217][ T9789] netlink: 32 bytes leftover after parsing attributes in process `syz.0.986'. [ 306.094487][ T5873] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 306.672413][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 306.687631][ T5873] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 306.708844][ T5873] usb 5-1: config 0 has no interface number 0 [ 306.718108][ T5873] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.730554][ T5873] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.740732][ T5873] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 306.750059][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.767680][ T5873] usb 5-1: config 0 descriptor?? [ 307.014188][ T9808] netlink: 'syz.4.991': attribute type 10 has an invalid length. [ 307.053087][ T9808] team0: Port device dummy0 added [ 307.076144][ T9810] netlink: 'syz.4.991': attribute type 10 has an invalid length. [ 307.158379][ T9810] team0: Port device dummy0 removed [ 307.174958][ T9834] random: crng reseeded on system resumption [ 307.367822][ T5873] usbhid 5-1:0.1: can't add hid device: -71 [ 307.381995][ T5873] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 307.856063][ T5873] usb 5-1: USB disconnect, device number 39 [ 308.518003][ T30] audit: type=1400 audit(1766056832.087:815): avc: denied { mount } for pid=9845 comm="syz.2.1001" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 308.669197][ T30] audit: type=1400 audit(1766056832.207:816): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 309.379081][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1004'. [ 309.388055][ T9863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1004'. [ 309.397045][ T9863] netlink: 'syz.4.1004': attribute type 13 has an invalid length. [ 309.404914][ T9863] netlink: 'syz.4.1004': attribute type 12 has an invalid length. [ 310.111843][ T9874] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1007'. [ 310.376773][ T30] audit: type=1400 audit(1766056833.947:817): avc: denied { write } for pid=9884 comm="syz.1.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 310.399836][ T9885] overlayfs: failed to clone upperpath [ 310.590911][ T5873] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 311.129562][ T5873] usb 5-1: Using ep0 maxpacket: 32 [ 311.235433][ T5873] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.261269][ T5873] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.313925][ T5873] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 311.359698][ T5873] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 311.368395][ T5873] usb 5-1: Product: syz [ 311.373137][ T5873] usb 5-1: Manufacturer: syz [ 311.389412][ T5873] hub 5-1:4.0: USB hub found [ 311.451979][ T30] audit: type=1400 audit(1766056835.017:818): avc: denied { getopt } for pid=9899 comm="syz.1.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 311.473583][ T9900] tmpfs: Invalid uid '0x00000000ffffffff' [ 311.776252][ T5924] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 311.784308][ T5873] hub 5-1:4.0: 2 ports detected [ 312.434866][ T5873] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 312.444141][ T5873] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 312.475083][ T5924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.493008][ T5873] usb 5-1: USB disconnect, device number 40 [ 312.617935][ T5924] usb 4-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 312.667733][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.676234][ T5924] usb 4-1: Product: syz [ 312.690611][ T5924] usb 4-1: Manufacturer: syz [ 312.700462][ T5924] usb 4-1: SerialNumber: syz [ 313.262648][ T5924] usb 4-1: config 0 descriptor?? [ 313.681526][ T5924] powermate 4-1:0.0: probe with driver powermate failed with error -22 [ 313.695207][ T5924] usb 4-1: USB disconnect, device number 46 [ 313.959328][ T9939] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 314.112703][ T5926] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 314.192532][ T5924] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 314.282434][ T5926] usb 1-1: Using ep0 maxpacket: 32 [ 314.288947][ T5926] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 314.297241][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.307533][ T5926] usb 1-1: config 0 has no interface number 0 [ 314.313656][ T5926] usb 1-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 314.328594][ T5926] usb 1-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 314.337731][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.345924][ T5926] usb 1-1: Product: syz [ 314.350139][ T5926] usb 1-1: Manufacturer: syz [ 314.354829][ T5926] usb 1-1: SerialNumber: syz [ 314.362460][ T5924] usb 5-1: not running at top speed; connect to a high speed hub [ 314.372029][ T5926] usb 1-1: config 0 descriptor?? [ 314.384166][ T5924] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 314.399672][ T5926] hub 1-1:0.89: bad descriptor, ignoring hub [ 314.402555][ T5924] usb 5-1: can't read configurations, error -61 [ 314.412104][ T5926] hub 1-1:0.89: probe with driver hub failed with error -5 [ 314.420151][ T8868] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 314.430267][ T5926] option 1-1:0.89: GSM modem (1-port) converter detected [ 315.183507][ T5924] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 315.222477][ T8868] usb 3-1: Using ep0 maxpacket: 8 [ 315.229807][ T8868] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 315.238921][ T8868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.259229][ T8868] pvrusb2: Hardware description: Terratec Grabster AV400 [ 315.321384][ T5926] usb 1-1: USB disconnect, device number 29 [ 315.328407][ T8868] pvrusb2: ********** [ 315.333146][ T5926] option 1-1:0.89: device disconnected [ 315.346175][ T8868] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 315.379628][ T8868] pvrusb2: Important functionality might not be entirely working. [ 315.389375][ T5924] usb 5-1: not running at top speed; connect to a high speed hub [ 315.401259][ T8868] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 315.413005][ T8868] pvrusb2: ********** [ 315.419938][ T5924] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 315.453173][ T9941] veth0: entered promiscuous mode [ 315.545176][ T9941] batadv_slave_1: entered promiscuous mode [ 315.551201][ T5924] usb 5-1: can't read configurations, error -61 [ 315.561755][ T9941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1028'. [ 315.571263][ T5924] usb usb5-port1: attempt power cycle [ 315.596052][ T9941] veth0 (unregistering): left promiscuous mode [ 315.661460][ T9940] batadv_slave_1: left promiscuous mode [ 315.671801][ T2335] pvrusb2: Invalid write control endpoint [ 315.679479][ T8868] usb 3-1: USB disconnect, device number 30 [ 315.689637][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1032'. [ 315.698656][ T9955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1032'. [ 315.707616][ T9955] netlink: 'syz.1.1032': attribute type 7 has an invalid length. [ 315.801577][ T2335] pvrusb2: Invalid write control endpoint [ 315.811662][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 315.829778][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 315.840447][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 315.869322][ T2335] pvrusb2: Device being rendered inoperable [ 315.895512][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 315.908423][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 315.922540][ T5924] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 315.930367][ T2335] pvrusb2: Attached sub-driver cx25840 [ 315.938938][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 315.959131][ T5924] usb 5-1: not running at top speed; connect to a high speed hub [ 315.962467][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 315.991337][ T5924] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 316.011637][ T5924] usb 5-1: can't read configurations, error -61 [ 316.132441][ T5859] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 316.152263][ T5924] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 316.175309][ T5924] usb 5-1: not running at top speed; connect to a high speed hub [ 316.184739][ T5924] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 316.192870][ T5924] usb 5-1: can't read configurations, error -61 [ 316.223714][ T5924] usb usb5-port1: unable to enumerate USB device [ 316.362425][ T5859] usb 1-1: Using ep0 maxpacket: 8 [ 316.375882][ T5859] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 316.389700][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.416223][ T5859] pvrusb2: Hardware description: Terratec Grabster AV400 [ 316.444816][ T5859] pvrusb2: ********** [ 316.448882][ T5859] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 316.465259][ T5859] pvrusb2: Important functionality might not be entirely working. [ 316.474107][ T5859] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 316.487396][ T5859] pvrusb2: ********** [ 316.672443][ T5926] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 316.681193][ T2335] pvrusb2: Invalid write control endpoint [ 316.752339][ T2335] pvrusb2: Invalid write control endpoint [ 316.781149][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.787669][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.815179][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 317.208330][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 317.218855][ T5926] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 317.230351][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 317.245793][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 317.267329][ T2335] pvrusb2: Device being rendered inoperable [ 317.277443][ T5926] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 317.290642][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 317.320953][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 317.339774][ T5926] usb 4-1: language id specifier not provided by device, defaulting to English [ 317.351569][ T2335] pvrusb2: Attached sub-driver cx25840 [ 317.366524][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 317.381079][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 317.394548][ T5926] usb 4-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 317.404263][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.412266][ T5926] usb 4-1: Manufacturer: ‰ [ 317.486001][ T5926] usb 4-1: SerialNumber: syz [ 317.505549][ T5926] usb 4-1: config 0 descriptor?? [ 317.535507][ T5926] em28xx 4-1:0.0: New device ‰ @ 480 Mbps (2013:0251, interface 0, class 0) [ 317.561685][ T5926] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 317.609591][ T9993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1042'. [ 317.632513][ T5940] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 317.662475][ T30] audit: type=1800 audit(1766056841.227:819): pid=9994 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1041" name="nullb0" dev="tmpfs" ino=296 res=0 errno=0 [ 317.725570][ T9962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1034'. [ 317.812609][ T5940] usb 3-1: Using ep0 maxpacket: 16 [ 317.819741][ T5940] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 317.856976][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 317.873148][ T5940] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 317.883314][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.891393][ T5940] usb 3-1: Product: syz [ 317.895889][ T5940] usb 3-1: Manufacturer: syz [ 317.900482][ T5940] usb 3-1: SerialNumber: syz [ 317.937881][ T5940] usb 3-1: config 0 descriptor?? [ 317.944459][ T5926] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 317.954539][ T5926] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 317.978461][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1043'. [ 318.004737][ T5940] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 318.014943][ T5940] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 318.022468][ T5926] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 318.288403][ T5926] em28xx 4-1:0.0: No AC97 audio processor [ 318.301392][ T5926] usb 4-1: USB disconnect, device number 47 [ 318.315344][ T5926] em28xx 4-1:0.0: Disconnecting em28xx [ 318.327695][ T5926] em28xx 4-1:0.0: Freeing device [ 318.741210][ T5940] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 318.750607][ T5940] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 318.777113][ T30] audit: type=1400 audit(1766056842.347:820): avc: denied { read } for pid=10007 comm="syz.3.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 319.427160][ T5924] usb 1-1: USB disconnect, device number 30 [ 319.593792][T10020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1047'. [ 320.066014][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1047'. [ 320.087168][T10020] netlink: 'syz.1.1047': attribute type 7 has an invalid length. [ 320.313898][ T30] audit: type=1400 audit(1766056843.877:821): avc: denied { append } for pid=10015 comm="syz.3.1048" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 320.504888][ T5940] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 320.559631][ T5940] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 320.587372][ T5940] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 320.650980][ T5940] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 320.668528][ T5940] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 320.706724][ T5940] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 320.823547][ T5940] usb 3-1: USB disconnect, device number 31 [ 321.267314][T10040] Malformed UNC in devname [ 321.267314][T10040] [ 321.284604][T10040] CIFS: VFS: Malformed UNC in devname [ 321.315816][ T30] audit: type=1326 audit(1766056844.887:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10039 comm="syz.3.1055" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89ea98f749 code=0x0 [ 321.390514][ T30] audit: type=1400 audit(1766056844.957:823): avc: denied { accept } for pid=10033 comm="syz.1.1053" lport=33976 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 321.472981][ T30] audit: type=1400 audit(1766056844.957:824): avc: denied { write } for pid=10033 comm="syz.1.1053" lport=33976 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 321.610762][ T30] audit: type=1400 audit(1766056844.957:825): avc: denied { setopt } for pid=10033 comm="syz.1.1053" lport=33976 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 321.795974][T10050] lo speed is unknown, defaulting to 1000 [ 322.099161][T10051] vivid-004: disconnect [ 322.105357][T10051] vivid-004: reconnect [ 323.271891][T10069] can0: slcan on ttyS3. [ 323.312412][ T5940] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 323.562818][ T5940] usb 1-1: Using ep0 maxpacket: 16 [ 323.564370][ T5940] usb 1-1: config 1 has an invalid interface number: 214 but max is 0 [ 323.564395][ T5940] usb 1-1: config 1 has no interface number 0 [ 323.564428][ T5940] usb 1-1: config 1 interface 214 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 323.564453][ T5940] usb 1-1: config 1 interface 214 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 323.564471][ T5940] usb 1-1: config 1 interface 214 has no altsetting 0 [ 323.567771][ T5940] usb 1-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 323.567835][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.567855][ T5940] usb 1-1: Product: syz [ 323.567870][ T5940] usb 1-1: Manufacturer: syz [ 323.567884][ T5940] usb 1-1: SerialNumber: syz [ 323.570640][T10057] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 323.570731][T10057] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 323.572035][ T5940] ums-alauda 1-1:1.214: USB Mass Storage device detected [ 323.597793][ T5940] scsi host1: usb-storage 1-1:1.214 [ 323.772894][T10054] can0 (unregistered): slcan off ttyS3. [ 323.859253][ T5940] usb 1-1: USB disconnect, device number 31 [ 324.037968][ T30] audit: type=1400 audit(1766056847.607:826): avc: denied { read } for pid=10094 comm="syz.4.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 325.229468][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1073'. [ 325.272136][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1073'. [ 325.431279][ T30] audit: type=1400 audit(1766056848.997:827): avc: denied { read } for pid=10150 comm="syz.2.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 325.497452][ T30] audit: type=1400 audit(1766056849.067:828): avc: denied { getopt } for pid=10126 comm="syz.0.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 326.200727][T10172] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 326.237766][T10172] block device autoloading is deprecated and will be removed. [ 326.402453][ T5822] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 326.565251][ T5822] usb 3-1: Using ep0 maxpacket: 16 [ 326.572490][ T5822] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 326.587878][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 326.607911][ T5822] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 326.617387][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.625946][ T5822] usb 3-1: Product: syz [ 326.631390][ T5822] usb 3-1: Manufacturer: syz [ 326.636739][ T5822] usb 3-1: SerialNumber: syz [ 326.650347][ T5822] usb 3-1: config 0 descriptor?? [ 326.667551][ T5822] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 326.686180][ T5822] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 326.793437][T10183] can0: slcan on ttyS3. [ 327.090256][ T30] audit: type=1400 audit(1766056850.597:829): avc: denied { write } for pid=10181 comm="syz.0.1084" path="socket:[25508]" dev="sockfs" ino=25508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 327.443154][ T5822] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 327.450343][T10190] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1085'. [ 327.450706][ T5822] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 328.058791][T10200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1086'. [ 328.089602][ T30] audit: type=1400 audit(1766056851.637:830): avc: denied { name_connect } for pid=10189 comm="syz.3.1085" dest=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 328.118450][T10200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1086'. [ 328.133439][T10200] netlink: 'syz.0.1086': attribute type 7 has an invalid length. [ 328.474185][ T5822] em28xx 3-1:0.0: AC97 vendor ID = 0x00fc00fe [ 328.634013][T10180] can0 (unregistered): slcan off ttyS3. [ 328.712592][ T5822] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 328.712967][ T5822] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 328.868014][ T5822] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 328.868272][ T5822] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 328.868528][ T5822] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 328.868780][ T5822] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 328.905866][ T5822] usb 3-1: USB disconnect, device number 32 [ 329.211421][T10221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.293587][T10221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.304034][T10215] 9p: Bad value for 'rfdno' [ 329.552610][ T8868] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 329.607506][T10238] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1093'. [ 329.848794][ T8868] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 329.862365][ T8868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.874644][ T8868] usb 5-1: Product: syz [ 329.879133][ T8868] usb 5-1: Manufacturer: syz [ 329.961668][ T8868] usb 5-1: SerialNumber: syz [ 331.056118][ T8868] rtl8150 5-1:1.0: couldn't reset the device [ 331.067792][ T8868] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 331.121028][ T8868] usb 5-1: USB disconnect, device number 45 [ 331.739735][T10270] Cannot find add_set index 1 as target [ 331.805419][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1101'. [ 331.814671][T10272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.850021][T10272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.018907][ T30] audit: type=1400 audit(1766056855.567:831): avc: denied { getopt } for pid=10273 comm="syz.3.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 332.512239][T10288] bridge1: entered promiscuous mode [ 332.517573][T10288] bridge1: entered allmulticast mode [ 333.503815][T10289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1105'. [ 333.542443][T10289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1105'. [ 333.551356][T10289] netlink: 'syz.4.1105': attribute type 7 has an invalid length. [ 334.151185][T10302] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1110'. [ 335.748479][T10329] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1115'. [ 335.906463][ T30] audit: type=1400 audit(1766056859.477:832): avc: denied { setopt } for pid=10334 comm="syz.0.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 336.119063][T10342] erofs (device nbd0): cannot find valid erofs superblock [ 336.161665][T10343] Cannot find add_set index 0 as target [ 336.534972][ T8868] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 336.804008][ T8868] usb 3-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 336.885720][ T8868] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 336.942272][ T8868] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 337.006705][ T8868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 337.025189][ T8868] usb 3-1: SerialNumber: syz [ 337.330874][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1122'. [ 337.361171][T10362] overlayfs: failed to clone upperpath [ 337.471365][T10360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1122'. [ 337.562443][T10360] netlink: 'syz.0.1122': attribute type 7 has an invalid length. [ 338.083636][ T8868] usb 3-1: 0:2 : does not exist [ 338.148326][ T8868] usb 3-1: USB disconnect, device number 33 [ 338.201491][ T5931] udevd[5931]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 338.300998][ T30] audit: type=1400 audit(1766056861.867:833): avc: denied { ioctl } for pid=10374 comm="syz.1.1126" path="socket:[27014]" dev="sockfs" ino=27014 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 338.491503][ T30] audit: type=1400 audit(1766056862.017:834): avc: denied { create } for pid=10382 comm="syz.1.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 338.542794][ T30] audit: type=1400 audit(1766056862.027:835): avc: denied { write } for pid=10382 comm="syz.1.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 338.569173][ T30] audit: type=1400 audit(1766056862.027:836): avc: denied { read } for pid=10382 comm="syz.1.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 338.894050][ T30] audit: type=1326 audit(1766056862.467:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.3.1132" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89ea98f749 code=0x0 [ 339.121338][ T8868] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 339.406273][T10416] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1134'. [ 339.422872][T10416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1134'. [ 339.427828][ T8868] usb 1-1: Using ep0 maxpacket: 16 [ 339.494819][ T8868] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 339.565662][ T8868] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.820368][ T8868] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 339.887874][ T8868] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 339.957973][ T8868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.986039][ T8868] usb 1-1: Product: syz [ 339.990482][ T8868] usb 1-1: Manufacturer: syz [ 339.997062][ T8868] usb 1-1: SerialNumber: syz [ 340.458499][ T8868] usb 1-1: 0:2 : does not exist [ 340.519308][ T8868] usb 1-1: USB disconnect, device number 32 [ 341.453937][ T30] audit: type=1400 audit(1766056865.027:838): avc: denied { execute } for pid=10442 comm="syz.4.1143" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 341.487377][T10444] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1143'. [ 341.816938][ T5940] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 342.142624][ T8868] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 342.247701][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.269289][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.284522][ T5940] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 342.306029][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.306191][ T8868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 342.346275][ T8868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 342.369809][ T5940] usb 5-1: config 0 descriptor?? [ 342.377854][ T8868] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 342.377883][ T8868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.377901][ T8868] usb 4-1: Product: syz [ 342.377914][ T8868] usb 4-1: Manufacturer: syz [ 342.377927][ T8868] usb 4-1: SerialNumber: syz [ 342.391359][T10457] 9p: Bad value for 'wfdno' [ 342.433463][ T8868] usb 4-1: config 0 descriptor?? [ 342.630212][T10468] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.1151'. [ 342.689531][ T8868] usb 4-1: USB disconnect, device number 48 [ 342.714130][ T5859] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 342.749992][ T6413] udevd[6413]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 342.808989][ T5940] hid_parser_main: 1260 callbacks suppressed [ 342.809009][ T5940] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 342.825566][ T30] audit: type=1400 audit(1766056866.397:839): avc: denied { connect } for pid=10471 comm="syz.0.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 342.834541][ T5940] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 342.875136][ T5940] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 342.889559][ T5940] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 342.898545][ T5940] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 342.912595][ T5859] usb 3-1: Using ep0 maxpacket: 16 [ 343.008414][T10444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.008826][ T5940] playstation 0003:054C:0DF2.0006: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 343.018937][ T5859] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 343.496924][T10444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.520029][ T5859] usb 3-1: config 0 has no interface number 0 [ 343.526506][ T5859] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.537770][ T5859] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.553971][ T5859] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 343.568518][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.592279][ T5859] usb 3-1: config 0 descriptor?? [ 343.650603][T10484] netlink: 356 bytes leftover after parsing attributes in process `syz.3.1154'. [ 343.689931][T10484] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1154'. [ 343.813668][T10457] netlink: 'syz.2.1147': attribute type 10 has an invalid length. [ 343.862589][T10457] dummy0: left allmulticast mode [ 343.870397][T10458] netlink: 'syz.2.1147': attribute type 10 has an invalid length. [ 343.902201][T10457] dummy0: left promiscuous mode [ 343.917341][T10457] bridge0: port 3(dummy0) entered disabled state [ 343.940080][T10494] netlink: 'syz.0.1155': attribute type 10 has an invalid length. [ 343.952477][T10494] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1155'. [ 343.991646][ T30] audit: type=1400 audit(1766056867.557:840): avc: denied { mount } for pid=10485 comm="syz.0.1155" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 344.017305][T10457] dummy0: entered promiscuous mode [ 344.024755][T10457] team0: Port device dummy0 added [ 344.045241][T10458] team0: Port device dummy0 removed [ 344.104034][T10458] dummy0: left promiscuous mode [ 344.110983][T10458] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 344.120888][T10494] dummy0: entered promiscuous mode [ 344.144045][ T5859] usbhid 3-1:0.1: can't add hid device: -71 [ 344.157954][ T5859] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 344.166612][T10494] bridge0: port 3(dummy0) entered blocking state [ 344.187401][ T5859] usb 3-1: USB disconnect, device number 34 [ 344.219113][T10494] bridge0: port 3(dummy0) entered disabled state [ 344.243347][T10494] dummy0: entered allmulticast mode [ 344.251116][T10494] bridge0: port 3(dummy0) entered blocking state [ 344.257604][T10494] bridge0: port 3(dummy0) entered forwarding state [ 344.670116][ T5940] playstation 0003:054C:0DF2.0006: Failed to retrieve feature with reportID 9: -71 [ 344.708350][ T5940] playstation 0003:054C:0DF2.0006: Failed to retrieve DualSense pairing info: -71 [ 344.770014][ T5940] playstation 0003:054C:0DF2.0006: Failed to get MAC address from DualSense [ 344.822782][ T5940] playstation 0003:054C:0DF2.0006: Failed to create dualsense. [ 344.855445][ T5940] playstation 0003:054C:0DF2.0006: probe with driver playstation failed with error -71 [ 344.893580][T10507] FAULT_INJECTION: forcing a failure. [ 344.893580][T10507] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 344.937610][ T5940] usb 5-1: USB disconnect, device number 46 [ 344.955069][T10507] CPU: 1 UID: 0 PID: 10507 Comm: syz.4.1160 Tainted: G L syzkaller #0 PREEMPT(full) [ 344.955096][T10507] Tainted: [L]=SOFTLOCKUP [ 344.955101][T10507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 344.955109][T10507] Call Trace: [ 344.955114][T10507] [ 344.955120][T10507] dump_stack_lvl+0x16c/0x1f0 [ 344.955143][T10507] should_fail_ex+0x512/0x640 [ 344.955170][T10507] _copy_from_user+0x2e/0xd0 [ 344.955194][T10507] copy_msghdr_from_user+0x98/0x160 [ 344.955212][T10507] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 344.955240][T10507] ___sys_sendmsg+0xfe/0x1d0 [ 344.955259][T10507] ? __pfx____sys_sendmsg+0x10/0x10 [ 344.955305][T10507] __sys_sendmsg+0x16d/0x220 [ 344.955323][T10507] ? __pfx___sys_sendmsg+0x10/0x10 [ 344.955355][T10507] do_syscall_64+0xcd/0xf80 [ 344.955378][T10507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.955395][T10507] RIP: 0033:0x7f4d93b8f749 [ 344.955409][T10507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.955425][T10507] RSP: 002b:00007f4d94944038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.955442][T10507] RAX: ffffffffffffffda RBX: 00007f4d93de5fa0 RCX: 00007f4d93b8f749 [ 344.955453][T10507] RDX: 0000000000040010 RSI: 0000200000000380 RDI: 0000000000000003 [ 344.955463][T10507] RBP: 00007f4d94944090 R08: 0000000000000000 R09: 0000000000000000 [ 344.955472][T10507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.955482][T10507] R13: 00007f4d93de6038 R14: 00007f4d93de5fa0 R15: 00007ffcb442deb8 [ 344.955505][T10507] [ 345.412087][T10513] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1163'. [ 345.461420][T10513] Cannot find add_set index 2 as target [ 345.593502][ T5940] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 345.754103][ T5940] usb 5-1: Using ep0 maxpacket: 8 [ 345.797411][ T5940] usb 5-1: unable to get BOS descriptor or descriptor too short [ 345.842418][ T5926] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 346.405881][ T5940] usb 5-1: config 8 has an invalid interface number: 24 but max is 0 [ 346.414865][ T5940] usb 5-1: config 8 has no interface number 0 [ 346.420989][ T5940] usb 5-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 1024 [ 346.432808][ T5940] usb 5-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 346.447027][ T5940] usb 5-1: config 8 interface 24 has no altsetting 0 [ 346.456048][ T5940] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 346.465972][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 346.477209][ T5940] usb 5-1: Product: syz [ 346.479295][T10535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1170'. [ 346.481430][ T5940] usb 5-1: Manufacturer: syz [ 346.495469][ T5940] usb 5-1: SerialNumber: syz [ 346.504371][T10509] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 346.550405][T10535] openvswitch: netlink: nsh attr 8 is out of range max 3 [ 346.556331][ T5822] kernel read not supported for file 801/task/802/pagemap (pid: 5822 comm: kworker/0:3) [ 346.568273][ T5926] usb 1-1: Using ep0 maxpacket: 16 [ 346.575932][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.586483][ T5926] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 346.595584][ T5926] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 346.606061][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.623396][ T5926] usb 1-1: config 0 descriptor?? [ 346.729364][ T5940] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 346.755545][ T5940] usb 5-1: USB disconnect, device number 47 [ 346.888988][ T30] audit: type=1400 audit(1766056870.457:841): avc: denied { write } for pid=10543 comm="syz.2.1173" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 347.048050][ T5926] usb 1-1: USB disconnect, device number 33 [ 347.406912][T10559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1176'. [ 347.582554][T10559] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10559 comm=syz.0.1176 [ 347.650195][T10562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5126 sclass=netlink_route_socket pid=10562 comm=syz.0.1176 [ 347.696689][T10572] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1179'. [ 348.288581][T10584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1183'. [ 348.312192][ T30] audit: type=1400 audit(1766056871.867:842): avc: denied { ioctl } for pid=10582 comm="syz.1.1183" path="socket:[27444]" dev="sockfs" ino=27444 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 348.739236][T10592] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1184'. [ 349.266423][ T5137] Bluetooth: hci2: command 0x0c1a tx timeout [ 349.532160][ T5822] lo speed is unknown, defaulting to 1000 [ 349.744042][T10608] ieee802154 phy0 wpan0: encryption failed: -22 [ 349.860521][T10610] [U] [ 349.863418][T10610] [U] \}K! 'Q+V [ 349.867653][T10610] [U] c.nzi3\QR9=qxV [ 349.873731][T10610] [U] t(z~WigR]c@]U`1h/X">VM5\8>lMqn,_%7$Ѐݞ'Z3*j"m *|( [ 349.885685][T10610] [U] Å17 nXC(~J(>怢%fî [ 349.891394][T10610] [U] BUVܓ# Eصg7r81^*}gC8]Uנ [ 349.898417][T10610] [U] ϙ_gYm%;Ʊ{N-tL&`KVߧ\2 9ŧ1b9kF|~0\ZL] 7P2fUc [ 349.945326][T10610] [U] NeΩIL ѣ}_◸y0,JLzr|x֓/F)¾,]i=X\LJ {>+4cz^@%tuPe`WoLC餽F]p̛@k:NRZV[FX{w BBhZ놀 [ 349.964050][T10610] [U] ~FJW2ڷRY7w_2)=M펮kPN^HvdՖ [ 349.971674][T10610] [U] =z FV)t}6Sv FP [ 349.977203][T10610] [U] ?࢒= [ 349.980567][T10610] [U] ۿ6t q^=cbKCMojʽN?y@H,(E> [ 349.988432][T10610] [U] -C%rK_u UUf:sAvs`BI(C0y{wn: [ 349.996926][T10610] [U] /6W- Z1\8-?O [ 350.002375][T10610] [U] };} [ 350.005462][T10610] [U] |x**t%WÞ[%m [ 350.010558][T10610] [U] Y m١ɝU*궝yNYgAC?sȪsb"! D?MnzTGwp^DL؎<Ɓ$O}iv8cxaJ` [ 350.022591][T10610] [U] yk8G78Y^^륦fwgQd3<z5\-Q:ZOs [ 350.029501][T10610] [U] UzvAg}dp=zܷT0$]| [ 350.035892][T10610] [U] *<[NwHThjD`[SoLF,vF3݂ZcS`!^|&b aFeOd*•r3-r [ 350.047754][T10610] [U] :-uD49Q:Zyl4Z3\>' [ 350.053364][T10610] [U] yv~}BOz~"+5ZD>73d`nFHPJ-ytx1GiG mjZw=T~hSHG+L קX)2ٕt횮<[R[9cYB$ٲ6'srp3Ibt P lj6!wM6riv?gHY~PqK'5 [ 350.090467][T10610] [U] °B\YneCm7D>4{_͌\0Dę}N,Tg60T9D"TTdva!  [ 350.101820][T10610] [U] [& [ 350.105211][T10610] [U] Y̵6 "l6ZlJȑ0F'0&f+DҔz+VЊK tp5֔L\e5}31}骟VT0UQoZ>nEA Tb'wR&DxsRi-cYm͍*G2j9"}ttH7W7SܸQN [ 350.126299][T10610] [U] O㍩%+Z?vJ\aX287RM{~ֹ)Kv2CV6/^~* NlTx)zDHE"-Bz(&)k[>& Q}kI>!hCtZᬧ}3 r囘FYU,c>Yt/:FjQ [ 350.145032][T10610] [U] X8vqVN" iixLbj÷JxB;mMS=2c~" [ 350.172541][T10610] [U] ?G ?tm3Çi疿\=Dk#x˒ =e [ 350.179434][T10610] [U] *@|vc\kuWoMWRA [ 350.184455][T10610] [U] q]22mpOw [ 350.189285][T10610] [U] =3|=THgkg\4ha-`FgSGut [ 350.197070][T10610] [U] 8+o! i8 {z [ 350.201574][T10610] [U] he/r 0܊.0A/I5;{cIh︴nS$1k%Tx [ 350.209517][T10610] [U] @ [ 350.236740][T10615] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1191'. [ 350.292846][T10607] [U] .e $L* ئ-*2²$L),VGRXލ>]] [ 350.369214][T10621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1193'. [ 350.399729][T10621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1193'. [ 350.438447][T10621] netlink: 'syz.3.1193': attribute type 7 has an invalid length. [ 350.531951][T10625] tipc: Enabled bearer , priority 0 [ 350.543893][T10625] syzkaller0: entered promiscuous mode [ 350.549384][T10625] syzkaller0: entered allmulticast mode [ 350.609711][T10625] tipc: Resetting bearer [ 350.623226][T10624] tipc: Resetting bearer [ 350.638769][T10624] tipc: Disabling bearer [ 350.958098][T10640] input: syz1 as /devices/virtual/input/input20 [ 350.992938][ T5924] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 351.179685][ T30] audit: type=1400 audit(1766056874.747:843): avc: denied { getopt } for pid=10644 comm="syz.0.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 351.282780][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 351.297431][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.707354][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.720813][ T5924] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 351.731405][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.744796][ T5924] usb 4-1: config 0 descriptor?? [ 351.804288][T10657] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1204'. [ 351.995287][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1207'. [ 352.004720][T10661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1207'. [ 352.013781][T10661] netlink: 'syz.1.1207': attribute type 7 has an invalid length. [ 352.082941][ T5812] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 352.176240][ T5924] usbhid 4-1:0.0: can't add hid device: -71 [ 352.192683][ T5924] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 352.827057][ T5812] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 353.032604][ T5924] usb 4-1: USB disconnect, device number 49 [ 353.124119][ T5812] usb 1-1: config 0 has no interface number 0 [ 353.132244][ T5812] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 353.171994][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.306159][ T5812] usb 1-1: Product: syz [ 353.331289][ T5812] usb 1-1: Manufacturer: syz [ 353.336744][ T5812] usb 1-1: SerialNumber: syz [ 353.846742][ T5812] usb 1-1: config 0 descriptor?? [ 353.848161][T10685] lo speed is unknown, defaulting to 1000 [ 353.873825][ T5812] hub 1-1:0.132: bad descriptor, ignoring hub [ 353.880608][ T30] audit: type=1400 audit(1766056877.447:844): avc: denied { append } for pid=10686 comm="syz.3.1212" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 353.930053][ T5812] hub 1-1:0.132: probe with driver hub failed with error -5 [ 353.966217][ T5812] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input22 [ 354.094864][T10656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.151175][T10656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.454435][ T5940] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 354.934672][ T5940] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 355.146905][T10701] fido_id[10701]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 355.615226][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1218'. [ 355.639242][T10715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1218'. [ 355.664478][T10715] netlink: 'syz.4.1218': attribute type 7 has an invalid length. [ 355.692113][T10717] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1219'. [ 355.860331][T10724] openvswitch: netlink: IP tunnel dst address not specified [ 355.873908][T10724] netlink: 'syz.1.1222': attribute type 10 has an invalid length. [ 356.545016][T10734] Illegal XDP return value 10734 on prog (id 341) dev syz_tun, expect packet loss! [ 356.556036][ T5924] usb 1-1: USB disconnect, device number 34 [ 356.822960][ T5924] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 357.119099][ T5924] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 357.231062][ T5924] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 357.306744][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.334075][ T5924] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 357.564186][ T5924] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 357.580324][ T8868] usb 3-1: USB disconnect, device number 35 [ 357.615098][T10756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1232'. [ 357.632858][T10756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1232'. [ 357.642239][T10756] netlink: 'syz.3.1232': attribute type 7 has an invalid length. [ 357.674610][T10758] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1233'. [ 357.737646][ T5924] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 357.749332][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.844217][ T5924] usb 5-1: Product: syz [ 357.848411][ T5924] usb 5-1: Manufacturer: syz [ 357.853758][ T5924] usb 5-1: SerialNumber: syz [ 358.501106][ T5924] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 358.534912][ T5924] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 358.666488][ T5924] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 358.696375][ T5924] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 358.720391][ T5924] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 358.731260][T10776] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 358.759174][ T5924] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 358.790895][ T30] audit: type=1400 audit(1766057138.360:845): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 358.821214][ T5924] usb 5-1: USB disconnect, device number 48 [ 358.880462][T10780] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1240'. [ 359.113577][T10794] FAULT_INJECTION: forcing a failure. [ 359.113577][T10794] name failslab, interval 1, probability 0, space 0, times 0 [ 359.129957][T10794] CPU: 1 UID: 0 PID: 10794 Comm: syz.4.1244 Tainted: G L syzkaller #0 PREEMPT(full) [ 359.129984][T10794] Tainted: [L]=SOFTLOCKUP [ 359.129990][T10794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 359.129999][T10794] Call Trace: [ 359.130005][T10794] [ 359.130011][T10794] dump_stack_lvl+0x16c/0x1f0 [ 359.130037][T10794] should_fail_ex+0x512/0x640 [ 359.130064][T10794] ? __kmalloc_noprof+0xca/0x910 [ 359.130091][T10794] should_failslab+0xc2/0x120 [ 359.130114][T10794] __kmalloc_noprof+0xeb/0x910 [ 359.130140][T10794] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 359.130170][T10794] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 359.130193][T10794] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 359.130218][T10794] ? cred_has_capability.isra.0+0x18f/0x310 [ 359.130243][T10794] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 359.130268][T10794] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 359.130299][T10794] ? bpf_lsm_capable+0x9/0x10 [ 359.130317][T10794] ? security_capable+0x7e/0x260 [ 359.130339][T10794] genl_rcv_msg+0x55c/0x800 [ 359.130364][T10794] ? __pfx_genl_rcv_msg+0x10/0x10 [ 359.130386][T10794] ? __pfx_netdev_nl_bind_rx_doit+0x10/0x10 [ 359.130416][T10794] netlink_rcv_skb+0x158/0x420 [ 359.130435][T10794] ? __pfx_genl_rcv_msg+0x10/0x10 [ 359.130459][T10794] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 359.130489][T10794] ? netlink_deliver_tap+0x1ae/0xd30 [ 359.130512][T10794] genl_rcv+0x28/0x40 [ 359.130537][T10794] netlink_unicast+0x5aa/0x870 [ 359.130561][T10794] ? __pfx_netlink_unicast+0x10/0x10 [ 359.130590][T10794] netlink_sendmsg+0x8c8/0xdd0 [ 359.130614][T10794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.130644][T10794] ____sys_sendmsg+0xa5d/0xc30 [ 359.130673][T10794] ? copy_msghdr_from_user+0x10a/0x160 [ 359.130690][T10794] ? __pfx_____sys_sendmsg+0x10/0x10 [ 359.130723][T10794] ___sys_sendmsg+0x134/0x1d0 [ 359.130741][T10794] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.130790][T10794] __sys_sendmsg+0x16d/0x220 [ 359.130807][T10794] ? __pfx___sys_sendmsg+0x10/0x10 [ 359.130840][T10794] do_syscall_64+0xcd/0xf80 [ 359.130863][T10794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.130880][T10794] RIP: 0033:0x7f4d93b8f749 [ 359.130893][T10794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.130909][T10794] RSP: 002b:00007f4d94944038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.130924][T10794] RAX: ffffffffffffffda RBX: 00007f4d93de5fa0 RCX: 00007f4d93b8f749 [ 359.130935][T10794] RDX: 0000000000040010 RSI: 0000200000000380 RDI: 0000000000000003 [ 359.130944][T10794] RBP: 00007f4d94944090 R08: 0000000000000000 R09: 0000000000000000 [ 359.130954][T10794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.130963][T10794] R13: 00007f4d93de6038 R14: 00007f4d93de5fa0 R15: 00007ffcb442deb8 [ 359.130987][T10794] [ 359.472359][ T30] audit: type=1400 audit(1766057139.020:846): avc: denied { mount } for pid=10790 comm="syz.1.1243" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 359.494579][ T790] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 359.518384][ T5137] Bluetooth: hci2: unexpected event for opcode 0x200f [ 359.672430][ T790] usb 3-1: Using ep0 maxpacket: 16 [ 359.679392][ T790] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 359.714230][ T790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 359.758522][ T790] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 359.768009][ T790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.789636][ T790] usb 3-1: Product: syz [ 359.798333][ T790] usb 3-1: Manufacturer: syz [ 359.808200][ T790] usb 3-1: SerialNumber: syz [ 359.828944][ T790] usb 3-1: config 0 descriptor?? [ 359.845418][ T790] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 359.912624][ T790] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 359.952474][ T5924] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 360.020963][T10816] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000 [ 360.030466][T10816] tipc: Enabled bearer , priority 10 [ 360.231305][ T5926] usb 4-1: new low-speed USB device number 50 using dummy_hcd [ 360.472408][ T5924] usb 1-1: Using ep0 maxpacket: 32 [ 360.480962][ T5924] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 360.497114][ T5926] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 360.506324][ T5924] usb 1-1: config 0 has no interface number 0 [ 360.514552][ T5924] usb 1-1: config 0 interface 184 has no altsetting 0 [ 360.518635][ T5926] usb 4-1: config 0 has no interface number 0 [ 360.527690][ T5924] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 360.547995][ T5926] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 61855, setting to 8 [ 360.549656][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.595216][ T5926] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 360.596033][ T5924] usb 1-1: Product: syz [ 360.738167][ T5924] usb 1-1: Manufacturer: syz [ 360.738327][ T790] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 360.743588][ T5924] usb 1-1: SerialNumber: syz [ 360.763310][ T5924] usb 1-1: config 0 descriptor?? [ 360.777535][ T5924] smsc75xx v1.0.0 [ 360.792970][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.801722][ T790] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 360.819497][ T5926] usb 4-1: config 0 descriptor?? [ 360.833217][T10813] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 360.871677][ T5926] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 361.079827][ T5926] usb 4-1: USB disconnect, device number 50 [ 361.085885][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 361.232924][T10837] FAULT_INJECTION: forcing a failure. [ 361.232924][T10837] name failslab, interval 1, probability 0, space 0, times 0 [ 361.245784][T10837] CPU: 0 UID: 0 PID: 10837 Comm: syz.4.1257 Tainted: G L syzkaller #0 PREEMPT(full) [ 361.245814][T10837] Tainted: [L]=SOFTLOCKUP [ 361.245819][T10837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 361.245828][T10837] Call Trace: [ 361.245835][T10837] [ 361.245839][T10837] dump_stack_lvl+0x16c/0x1f0 [ 361.245858][T10837] should_fail_ex+0x512/0x640 [ 361.245875][T10837] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 361.245888][T10837] should_failslab+0xc2/0x120 [ 361.245916][T10837] kmem_cache_alloc_node_noprof+0x86/0x800 [ 361.245932][T10837] ? __alloc_skb+0x156/0x410 [ 361.245960][T10837] ? __alloc_skb+0x156/0x410 [ 361.245979][T10837] __alloc_skb+0x156/0x410 [ 361.245997][T10837] ? __alloc_skb+0x35d/0x410 [ 361.246012][T10837] ? __pfx___alloc_skb+0x10/0x10 [ 361.246028][T10837] ? genl_rcv_msg+0x4c0/0x800 [ 361.246042][T10837] ? genl_rcv_msg+0x4bb/0x800 [ 361.246065][T10837] netlink_ack+0x15d/0xb80 [ 361.246090][T10837] netlink_rcv_skb+0x332/0x420 [ 361.246109][T10837] ? __pfx_genl_rcv_msg+0x10/0x10 [ 361.246135][T10837] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 361.246154][T10837] ? netlink_deliver_tap+0x1ae/0xd30 [ 361.246168][T10837] genl_rcv+0x28/0x40 [ 361.246181][T10837] netlink_unicast+0x5aa/0x870 [ 361.246196][T10837] ? __pfx_netlink_unicast+0x10/0x10 [ 361.246221][T10837] netlink_sendmsg+0x8c8/0xdd0 [ 361.246243][T10837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.246270][T10837] ____sys_sendmsg+0xa5d/0xc30 [ 361.246289][T10837] ? copy_msghdr_from_user+0x10a/0x160 [ 361.246299][T10837] ? __pfx_____sys_sendmsg+0x10/0x10 [ 361.246319][T10837] ___sys_sendmsg+0x134/0x1d0 [ 361.246330][T10837] ? __pfx____sys_sendmsg+0x10/0x10 [ 361.246367][T10837] __sys_sendmsg+0x16d/0x220 [ 361.246383][T10837] ? __pfx___sys_sendmsg+0x10/0x10 [ 361.246414][T10837] do_syscall_64+0xcd/0xf80 [ 361.246434][T10837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.246445][T10837] RIP: 0033:0x7f4d93b8f749 [ 361.246455][T10837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.246465][T10837] RSP: 002b:00007f4d94944038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.246475][T10837] RAX: ffffffffffffffda RBX: 00007f4d93de5fa0 RCX: 00007f4d93b8f749 [ 361.246482][T10837] RDX: 0000000000040010 RSI: 0000200000000380 RDI: 0000000000000003 [ 361.246488][T10837] RBP: 00007f4d94944090 R08: 0000000000000000 R09: 0000000000000000 [ 361.246495][T10837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.246503][T10837] R13: 00007f4d93de6038 R14: 00007f4d93de5fa0 R15: 00007ffcb442deb8 [ 361.246525][T10837] [ 361.524517][ T5924] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 361.542882][ T5924] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 361.560292][ T5924] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 361.577598][ T5924] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 361.587747][ T5924] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 361.598124][ T5924] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 361.607910][ T5924] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 361.656679][ T30] audit: type=1400 audit(1766057141.230:847): avc: denied { append } for pid=10841 comm="syz.4.1259" name="nbd4" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 361.954824][ T790] em28xx 3-1:0.0: AC97 vendor ID = 0x00fc00fe [ 362.249371][ T790] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 362.282885][ T790] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 362.317493][ T790] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 362.327782][ T790] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 362.334910][ T790] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 362.341774][ T790] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 362.519453][ T790] usb 3-1: USB disconnect, device number 36 [ 362.662632][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1264'. [ 362.823728][T10872] FAULT_INJECTION: forcing a failure. [ 362.823728][T10872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.860925][T10872] CPU: 1 UID: 0 PID: 10872 Comm: syz.4.1268 Tainted: G L syzkaller #0 PREEMPT(full) [ 362.860952][T10872] Tainted: [L]=SOFTLOCKUP [ 362.860958][T10872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 362.860966][T10872] Call Trace: [ 362.860971][T10872] [ 362.860977][T10872] dump_stack_lvl+0x16c/0x1f0 [ 362.861000][T10872] should_fail_ex+0x512/0x640 [ 362.861025][T10872] _copy_to_user+0x32/0xd0 [ 362.861046][T10872] simple_read_from_buffer+0xcb/0x170 [ 362.861069][T10872] proc_fail_nth_read+0x197/0x240 [ 362.861087][T10872] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 362.861102][T10872] ? rw_verify_area+0xcf/0x6c0 [ 362.861120][T10872] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 362.861136][T10872] vfs_read+0x1e4/0xcf0 [ 362.861156][T10872] ? __pfx___mutex_lock+0x10/0x10 [ 362.861180][T10872] ? __pfx_vfs_read+0x10/0x10 [ 362.861207][T10872] ? __fget_files+0x20e/0x3c0 [ 362.861238][T10872] ksys_read+0x12a/0x250 [ 362.861258][T10872] ? __pfx_ksys_read+0x10/0x10 [ 362.861286][T10872] do_syscall_64+0xcd/0xf80 [ 362.861309][T10872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.861326][T10872] RIP: 0033:0x7f4d93b8e15c [ 362.861339][T10872] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 362.861355][T10872] RSP: 002b:00007f4d94944030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 362.861371][T10872] RAX: ffffffffffffffda RBX: 00007f4d93de5fa0 RCX: 00007f4d93b8e15c [ 362.861382][T10872] RDX: 000000000000000f RSI: 00007f4d949440a0 RDI: 0000000000000004 [ 362.861390][T10872] RBP: 00007f4d94944090 R08: 0000000000000000 R09: 0000000000000000 [ 362.861399][T10872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.861409][T10872] R13: 00007f4d93de6038 R14: 00007f4d93de5fa0 R15: 00007ffcb442deb8 [ 362.861433][T10872] [ 363.110636][ T5940] usb 1-1: USB disconnect, device number 35 [ 363.389031][T10883] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1272'. [ 363.754447][ T5924] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 363.913882][ T5924] usb 4-1: not running at top speed; connect to a high speed hub [ 363.929825][ T5924] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 363.944386][ T5924] usb 4-1: config 95 has no interface number 0 [ 363.963742][ T5924] usb 4-1: config 95 interface 1 has no altsetting 0 [ 364.455369][ T5924] usb 4-1: string descriptor 0 read error: -22 [ 364.461808][ T5924] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 364.471118][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.542562][ T5926] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 364.836839][T10904] xt_socket: unknown flags 0x4c [ 365.579844][T10906] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1276'. [ 366.086912][T10866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.099864][T10866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.115857][ T5924] usb 4-1: USB disconnect, device number 51 [ 366.974169][T10921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=10921 comm=syz.3.1281 [ 366.990979][ T30] audit: type=1326 audit(1766057146.560:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10920 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fc58f749 code=0x7ffc0000 [ 367.135363][ T30] audit: type=1326 audit(1766057146.570:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10920 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fc58f749 code=0x7ffc0000 [ 367.163208][T10913] bridge0: entered promiscuous mode [ 367.168416][T10913] bridge0: entered allmulticast mode [ 367.174191][ T30] audit: type=1326 audit(1766057146.570:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10920 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fc58f749 code=0x7ffc0000 [ 367.219595][ T5924] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 367.219600][ T30] audit: type=1326 audit(1766057146.570:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10920 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fa9fc58f749 code=0x7ffc0000 [ 367.219639][ T30] audit: type=1326 audit(1766057146.570:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10920 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fc58f749 code=0x7ffc0000 [ 367.347396][ T30] audit: type=1326 audit(1766057146.570:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10920 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fc58f749 code=0x7ffc0000 [ 367.406534][ T30] audit: type=1326 audit(1766057146.570:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10920 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fc58f749 code=0x7ffc0000 [ 367.432711][ T30] audit: type=1326 audit(1766057146.570:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10920 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fc58f749 code=0x7ffc0000 [ 367.746522][ T5924] usb 3-1: Using ep0 maxpacket: 32 [ 367.754237][ T5924] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 367.765075][ T5924] usb 3-1: config 0 has no interface number 0 [ 367.773692][ T5924] usb 3-1: config 0 interface 184 has no altsetting 0 [ 367.789423][ T30] audit: type=1326 audit(1766057146.570:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10920 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fa9fc58f749 code=0x7ffc0000 [ 368.932281][ T5924] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 368.966153][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1289'. [ 368.975146][T10945] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1289'. [ 369.009280][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.015617][ T30] audit: type=1326 audit(1766057146.570:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10920 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fc58f749 code=0x7ffc0000 [ 369.069299][ T5924] usb 3-1: Product: syz [ 369.075809][ T5924] usb 3-1: Manufacturer: syz [ 369.085107][ T5924] usb 3-1: SerialNumber: syz [ 369.127322][ T5924] usb 3-1: config 0 descriptor?? [ 369.164501][ T5924] smsc75xx v1.0.0 [ 369.667138][T10968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1295'. [ 369.780960][T10969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1294'. [ 369.808773][ T5924] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 369.821900][ T5924] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 369.885271][ T5924] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 369.896892][T10969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1294'. [ 370.100088][ T5924] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 370.204547][ T5924] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 370.232503][ T5924] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 370.265845][ T5924] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 371.175580][T10999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1298'. [ 371.454602][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1301'. [ 371.463746][T11010] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1301'. [ 371.864021][T11013] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1302'. [ 371.885211][ T5926] usb 3-1: USB disconnect, device number 37 [ 372.773989][ T89] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 372.942400][ T89] usb 5-1: Using ep0 maxpacket: 16 [ 372.957346][ T89] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.006393][ T89] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.158799][ T89] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 373.331458][ T89] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.371398][ T89] usb 5-1: config 0 descriptor?? [ 373.770927][T11022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.814854][T11022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.419382][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 374.419395][ T30] audit: type=1400 audit(1766057153.990:881): avc: denied { setopt } for pid=11071 comm="syz.3.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 374.421081][ T89] usbhid 5-1:0.0: can't add hid device: -71 [ 374.425697][ T30] audit: type=1400 audit(1766057153.990:882): avc: denied { connect } for pid=11071 comm="syz.3.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 374.446453][ T89] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 374.514753][ T89] usb 5-1: USB disconnect, device number 50 [ 375.251712][T11095] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1318'. [ 375.284202][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1321'. [ 375.296078][T11097] /dev/nullb0: Can't lookup blockdev [ 375.542600][ T89] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 375.700451][ T89] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.776745][ T89] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 375.797287][ T89] usb 5-1: config 1 has no interface number 0 [ 375.804235][ T89] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 375.823967][ T89] usb 5-1: config 1 interface 1 has no altsetting 0 [ 375.843004][ T89] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 375.860605][ T89] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.953009][ T89] usb 5-1: Product: syz [ 375.957313][ T89] usb 5-1: Manufacturer: syz [ 375.962029][ T89] usb 5-1: SerialNumber: syz [ 375.968702][T11113] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 376.208451][T11118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.242296][T11118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.388894][ T89] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 376.410070][ T89] usb 5-1: USB disconnect, device number 51 [ 376.972207][T11127] lo speed is unknown, defaulting to 1000 [ 377.004567][T11130] IPVS: fo: FWM 3 0x00000003 - no destination available [ 377.011975][ T5924] IPVS: starting estimator thread 0... [ 377.134904][T11131] IPVS: using max 78 ests per chain, 187200 per kthread [ 377.218849][T11143] bridge1: left promiscuous mode [ 377.231393][T11143] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 377.262424][ T5924] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 377.462441][ T5924] usb 3-1: Using ep0 maxpacket: 32 [ 377.468996][ T5924] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 377.479346][ T5924] usb 3-1: config 0 has no interface number 0 [ 377.485536][ T5924] usb 3-1: config 0 interface 184 has no altsetting 0 [ 377.494143][ T5924] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 377.503811][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.639548][ T5924] usb 3-1: Product: syz [ 377.644522][ T5924] usb 3-1: Manufacturer: syz [ 377.649236][ T5924] usb 3-1: SerialNumber: syz [ 377.662741][ T5924] usb 3-1: config 0 descriptor?? [ 377.669730][ T5924] smsc75xx v1.0.0 [ 378.461422][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.467968][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.907819][ T5924] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 378.918817][ T5924] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 378.942433][ T48] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 379.012607][ T5822] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 379.107385][ T48] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 379.116679][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.124865][ T48] usb 5-1: Product: syz [ 379.129203][ T48] usb 5-1: Manufacturer: syz [ 379.134066][ T48] usb 5-1: SerialNumber: syz [ 379.140234][ T48] usb 5-1: config 0 descriptor?? [ 379.162430][ T5822] usb 4-1: Using ep0 maxpacket: 32 [ 379.169431][ T5822] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 379.179082][ T5822] usb 4-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 379.190509][ T5822] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 379.199805][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.207907][ T5822] usb 4-1: Product: syz [ 379.212093][ T5822] usb 4-1: Manufacturer: syz [ 379.216744][ T5822] usb 4-1: SerialNumber: syz [ 379.225959][ T5822] usb 4-1: config 0 descriptor?? [ 379.330482][ T5924] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 379.344560][ T5924] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 379.354437][ T5924] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 379.365001][ T5924] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 379.375096][ T5924] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 379.436705][ T5822] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 379.499373][ T5822] usb 4-1: USB disconnect, device number 52 [ 379.526982][ T30] audit: type=1400 audit(1766057159.100:883): avc: denied { setopt } for pid=11175 comm="syz.0.1343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 379.565500][ T48] airspy 5-1:0.0: Board ID: 00 [ 379.570383][ T48] airspy 5-1:0.0: Firmware version: [ 380.470931][T11195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1346'. [ 380.498355][ T5924] usb 3-1: USB disconnect, device number 38 [ 380.783003][ T48] airspy 5-1:0.0: usb_control_msg() failed -71 request 10 [ 380.815729][ T48] airspy 5-1:0.0: Registered as swradio24 [ 380.835267][ T48] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 381.634213][ T48] usb 5-1: USB disconnect, device number 52 [ 381.762436][ T5956] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 381.932556][ T5956] usb 3-1: Using ep0 maxpacket: 16 [ 381.945805][ T5956] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.958664][ T5956] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.974357][ T5956] usb 3-1: config 0 interface 0 has no altsetting 0 [ 381.991818][ T5956] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 382.011353][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.040839][ T5956] usb 3-1: config 0 descriptor?? [ 382.089309][T11214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1352'. [ 382.099733][T11214] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1352'. [ 382.426420][T11227] netlink: 'syz.1.1357': attribute type 1 has an invalid length. [ 382.454719][T11227] bond1: entered promiscuous mode [ 382.460172][T11227] 8021q: adding VLAN 0 to HW filter on device bond1 [ 382.497391][ T9] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 382.513978][ T5956] hid (null): unknown global tag 0xc [ 382.519352][ T5956] hid (null): unknown global tag 0xc [ 382.527196][T11227] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1357'. [ 382.536443][T11227] bond1: entered allmulticast mode [ 382.545858][ T5956] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 382.552826][T11227] bond1: (slave bridge3): making interface the new active one [ 382.552847][T11227] bridge3: entered promiscuous mode [ 382.552955][T11227] bridge3: entered allmulticast mode [ 382.565220][ T5956] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 382.567507][T11227] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 382.571721][ T5956] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 382.598833][ T5956] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 382.605977][ T5956] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 382.614010][ T5956] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 382.621125][ T5956] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 382.630970][ T5956] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 382.638642][ T5956] cougar 0003:060B:500A.0008: collection stack underflow [ 382.647195][ T5956] cougar 0003:060B:500A.0008: item 0 0 0 12 parsing failed [ 382.656948][ T5956] cougar 0003:060B:500A.0008: parse failed [ 382.663979][ T5956] cougar 0003:060B:500A.0008: probe with driver cougar failed with error -22 [ 382.673042][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 382.681918][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 382.718029][ T5956] usb 3-1: USB disconnect, device number 39 [ 382.792359][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 382.810710][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 382.820318][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.829424][ T9] usb 4-1: Product: syz [ 382.835664][ T9] usb 4-1: Manufacturer: syz [ 382.840892][ T9] usb 4-1: SerialNumber: syz [ 383.462561][ T30] audit: type=1326 audit(1766057163.040:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11215 comm="syz.4.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d93b8f749 code=0x7fc00000 [ 383.487969][ T9] usb 4-1: config 0 descriptor?? [ 383.506119][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 383.522398][ T9] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 383.710304][ T30] audit: type=1400 audit(1766057163.280:885): avc: denied { append } for pid=11242 comm="syz.4.1362" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 383.854237][ T30] audit: type=1400 audit(1766057163.280:886): avc: denied { create } for pid=11242 comm="syz.4.1362" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 383.875367][ T30] audit: type=1400 audit(1766057163.280:887): avc: denied { write } for pid=11242 comm="syz.4.1362" name="file0" dev="tmpfs" ino=1426 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 384.322071][ T30] audit: type=1400 audit(1766057163.280:888): avc: denied { open } for pid=11242 comm="syz.4.1362" path="/263/file0" dev="tmpfs" ino=1426 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 384.366170][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 384.372428][ T30] audit: type=1400 audit(1766057163.530:889): avc: denied { ioctl } for pid=11242 comm="syz.4.1362" path="/263/file0" dev="tmpfs" ino=1426 ioctlcmd=0x1276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 384.399072][ T9] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 384.406627][ T9] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 384.413995][ T9] em28xx 4-1:0.0: No AC97 audio processor [ 384.510458][ T9] usb 4-1: USB disconnect, device number 53 [ 384.523474][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 384.616433][ T9] em28xx 4-1:0.0: Freeing device [ 384.697213][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1366'. [ 384.730974][T11253] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1366'. [ 385.242479][ T5956] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 385.484672][T11276] bond2 (unregistering): Released all slaves [ 385.546947][T11280] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1376'. [ 385.561198][T11284] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 385.602412][ T5956] usb 5-1: Using ep0 maxpacket: 32 [ 385.610238][ T5956] usb 5-1: unable to get BOS descriptor or descriptor too short [ 385.621364][ T5956] usb 5-1: config 135 has an invalid interface number: 152 but max is 0 [ 385.631378][ T5956] usb 5-1: config 135 has no interface number 0 [ 385.642891][ T5956] usb 5-1: config 135 interface 152 has no altsetting 0 [ 385.651909][ T5956] usb 5-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=11.3b [ 385.676690][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.696267][ T5956] usb 5-1: Product: syz [ 385.704713][ T5956] usb 5-1: Manufacturer: syz [ 385.753880][ T5956] usb 5-1: SerialNumber: syz [ 386.006963][T11265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.028211][T11265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.042549][ T5822] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 386.083010][T11265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.121838][T11265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.235230][T11265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.237424][ T5822] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.329652][T11313] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1382'. [ 386.345018][T11265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.354619][ T5822] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 386.389846][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.401567][ T5956] gspca_main: touptek-2.14.0 probing 0547:6801 [ 386.419047][ T5822] usb 4-1: config 0 descriptor?? [ 386.431506][ T5956] usb 5-1: USB disconnect, device number 53 [ 386.448557][ T5822] pwc: Askey VC010 type 2 USB webcam detected. [ 386.708878][T11313] netlink: 'syz.0.1382': attribute type 3 has an invalid length. [ 386.719399][T11313] netlink: 'syz.0.1382': attribute type 3 has an invalid length. [ 386.750904][T11313] netlink: 'syz.0.1382': attribute type 3 has an invalid length. [ 386.794887][T11313] netlink: 'syz.0.1382': attribute type 3 has an invalid length. [ 386.825004][T11313] netlink: 'syz.0.1382': attribute type 3 has an invalid length. [ 386.861250][T11313] netlink: 'syz.0.1382': attribute type 3 has an invalid length. [ 386.862790][ T5822] pwc: recv_control_msg error -32 req 02 val 2b00 [ 386.891215][ T5822] pwc: recv_control_msg error -32 req 02 val 2700 [ 386.916629][T11313] netlink: 'syz.0.1382': attribute type 3 has an invalid length. [ 386.942245][ T5822] pwc: recv_control_msg error -32 req 02 val 2c00 [ 386.961745][T11313] netlink: 'syz.0.1382': attribute type 3 has an invalid length. [ 386.996789][T11313] netlink: 'syz.0.1382': attribute type 3 has an invalid length. [ 387.281152][ T30] audit: type=1326 audit(1766057166.850:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11335 comm="syz.4.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d93b8f749 code=0x7ffc0000 [ 387.322468][ T30] audit: type=1326 audit(1766057166.880:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11335 comm="syz.4.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d93b8f749 code=0x7ffc0000 [ 387.347744][ T30] audit: type=1326 audit(1766057166.880:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11335 comm="syz.4.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f4d93b8f749 code=0x7ffc0000 [ 387.371151][T11339] lo speed is unknown, defaulting to 1000 [ 387.384432][T11296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.412861][T11296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.434627][T11296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.461425][T11296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.548317][ T5822] pwc: recv_control_msg error -71 req 04 val 1400 [ 387.555347][ T5822] pwc: recv_control_msg error -71 req 02 val 2000 [ 387.562196][ T5822] pwc: recv_control_msg error -71 req 02 val 2100 [ 387.815544][ T5822] pwc: recv_control_msg error -71 req 04 val 1500 [ 387.822433][ T5822] pwc: recv_control_msg error -71 req 02 val 2500 [ 387.829280][ T5822] pwc: recv_control_msg error -71 req 02 val 2400 [ 387.836183][ T5822] pwc: recv_control_msg error -71 req 02 val 2600 [ 387.843021][ T5822] pwc: recv_control_msg error -71 req 02 val 2900 [ 387.849830][ T5822] pwc: recv_control_msg error -71 req 02 val 2800 [ 387.878140][ T5822] pwc: recv_control_msg error -71 req 04 val 1100 [ 387.905846][ T5822] pwc: recv_control_msg error -71 req 04 val 1200 [ 387.944700][ T5822] pwc: Registered as video103. [ 387.990895][ T5822] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input24 [ 388.183640][ T5822] usb 4-1: USB disconnect, device number 54 [ 494.332272][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 494.339348][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6850/1:b..l P5818/1:b..l [ 494.348779][ C1] rcu: (detected by 1, t=10502 jiffies, g=38593, q=547 ncpus=2) [ 494.356483][ C1] task:syz-executor state:R running task stack:23880 pid:5818 tgid:5818 ppid:5807 task_flags:0x400140 flags:0x00080000 [ 494.370952][ C1] Call Trace: [ 494.374328][ C1] [ 494.377242][ C1] ? __schedule+0x10b9/0x6150 [ 494.382007][ C1] __schedule+0x1139/0x6150 [ 494.386515][ C1] ? __pfx___schedule+0x10/0x10 [ 494.391340][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 494.396945][ C1] preempt_schedule_common+0x44/0xc0 [ 494.402749][ C1] preempt_schedule_thunk+0x16/0x30 [ 494.407918][ C1] _raw_spin_unlock+0x3e/0x50 [ 494.412584][ C1] copy_page_range+0x22d0/0x6780 [ 494.417556][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 494.422926][ C1] ? __pfx___might_resched+0x10/0x10 [ 494.428191][ C1] ? __pfx_mas_store+0x10/0x10 [ 494.432935][ C1] ? dup_mmap+0xba4/0x20e0 [ 494.437325][ C1] ? down_write+0x14d/0x200 [ 494.441817][ C1] ? up_write+0x282/0x4e0 [ 494.446152][ C1] dup_mmap+0xbea/0x20e0 [ 494.450399][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 494.455073][ C1] copy_process+0x3b9f/0x7430 [ 494.459741][ C1] ? do_wp_page+0x1c04/0x5010 [ 494.464397][ C1] ? __pfx_copy_process+0x10/0x10 [ 494.469436][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 494.474473][ C1] kernel_clone+0xfc/0x910 [ 494.478890][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 494.483899][ C1] __do_sys_clone+0xce/0x120 [ 494.488468][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 494.493648][ C1] ? count_memcg_events+0x122/0x290 [ 494.499091][ C1] ? do_user_addr_fault+0x843/0x1370 [ 494.504369][ C1] do_syscall_64+0xcd/0xf80 [ 494.508885][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.514774][ C1] RIP: 0033:0x7f89ea985e93 [ 494.519200][ C1] RSP: 002b:00007fffb7338fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 494.527607][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f89ea985e93 [ 494.535568][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 494.543512][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 494.551484][ C1] R10: 00005555762a57d0 R11: 0000000000000246 R12: 0000000000000000 [ 494.559439][ C1] R13: 00000000000927c0 R14: 000000000005eb5b R15: 00007fffb7339160 [ 494.567501][ C1] [ 494.570508][ C1] task:kworker/u8:19 state:R running task stack:25480 pid:6850 tgid:6850 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 494.584130][ C1] Workqueue: iou_exit io_ring_exit_work [ 494.589663][ C1] Call Trace: [ 494.593089][ C1] [ 494.595991][ C1] ? __schedule+0x10b9/0x6150 [ 494.600641][ C1] __schedule+0x1139/0x6150 [ 494.605129][ C1] ? __pfx___schedule+0x10/0x10 [ 494.609966][ C1] ? mark_held_locks+0x49/0x80 [ 494.614737][ C1] preempt_schedule_irq+0x51/0x90 [ 494.619761][ C1] irqentry_exit+0x1d8/0x8c0 [ 494.624429][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 494.630382][ C1] RIP: 0010:lock_acquire+0x62/0x330 [ 494.635580][ C1] Code: a4 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 72 b4 ee 0e 0f 82 74 02 00 00 8b 35 0a e5 ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 89 a4 18 12 0f 85 ad 02 00 00 48 83 c4 [ 494.655192][ C1] RSP: 0018:ffffc900102d74b0 EFLAGS: 00000206 [ 494.661358][ C1] RAX: 0000000000000046 RBX: ffffffff8e3c9620 RCX: 0000000085d2dfd4 [ 494.669325][ C1] RDX: 0000000000000000 RSI: ffffffff8daa7b4b RDI: ffffffff8bf2b380 [ 494.677268][ C1] RBP: 0000000000000002 R08: 00000000c5ffc98f R09: 00000000fc5ffc98 [ 494.685301][ C1] R10: 0000000000000002 R11: ffff88803081aff0 R12: 0000000000000000 [ 494.693245][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 494.701199][ C1] ? unwind_next_frame+0x3fe/0x20b0 [ 494.706378][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 494.712506][ C1] unwind_next_frame+0xd1/0x20b0 [ 494.717419][ C1] ? unwind_next_frame+0xbd/0x20b0 [ 494.722503][ C1] ? stack_trace_save+0x8e/0xc0 [ 494.727332][ C1] ? __unwind_start+0x45f/0x7f0 [ 494.732167][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 494.738554][ C1] arch_stack_walk+0x94/0x100 [ 494.743215][ C1] ? stack_trace_save+0x8e/0xc0 [ 494.748050][ C1] stack_trace_save+0x8e/0xc0 [ 494.752698][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 494.758041][ C1] ? __lock_acquire+0x436/0x2890 [ 494.762949][ C1] kasan_save_stack+0x33/0x60 [ 494.767645][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 494.772837][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 494.778967][ C1] __call_rcu_common.constprop.0+0xa5/0xa10 [ 494.784842][ C1] kmem_cache_free+0x171/0x770 [ 494.789580][ C1] ? __io_req_caches_free+0x19e/0x5c0 [ 494.795109][ C1] ? __io_req_caches_free+0x19e/0x5c0 [ 494.800485][ C1] __io_req_caches_free+0x19e/0x5c0 [ 494.805757][ C1] io_ring_exit_work+0x33c/0x1130 [ 494.811046][ C1] ? __pfx_io_ring_exit_work+0x10/0x10 [ 494.816527][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 494.821739][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 494.827546][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 494.833161][ C1] ? rcu_is_watching+0x12/0xc0 [ 494.837941][ C1] process_one_work+0x9ba/0x1b20 [ 494.842882][ C1] ? __pfx_process_one_work+0x10/0x10 [ 494.848236][ C1] ? assign_work+0x1a0/0x250 [ 494.852800][ C1] worker_thread+0x6c8/0xf10 [ 494.857385][ C1] ? __kthread_parkme+0x19e/0x250 [ 494.862388][ C1] ? __pfx_worker_thread+0x10/0x10 [ 494.867535][ C1] kthread+0x3c5/0x780 [ 494.871607][ C1] ? __pfx_kthread+0x10/0x10 [ 494.876187][ C1] ? rcu_is_watching+0x12/0xc0 [ 494.880924][ C1] ? __pfx_kthread+0x10/0x10 [ 494.885498][ C1] ret_from_fork+0x983/0xb10 [ 494.890065][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 494.895154][ C1] ? __switch_to+0x7af/0x10d0 [ 494.899826][ C1] ? __pfx_kthread+0x10/0x10 [ 494.904387][ C1] ret_from_fork_asm+0x1a/0x30 [ 494.909137][ C1] [ 494.912131][ C1] rcu: rcu_preempt kthread starved for 10557 jiffies! g38593 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 494.923300][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 494.933255][ C1] rcu: RCU grace-period kthread stack dump: [ 494.939112][ C1] task:rcu_preempt state:R running task stack:28440 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 494.952645][ C1] Call Trace: [ 494.955902][ C1] [ 494.958814][ C1] ? __schedule+0x10b9/0x6150 [ 494.963463][ C1] __schedule+0x1139/0x6150 [ 494.967936][ C1] ? __lock_acquire+0x436/0x2890 [ 494.972845][ C1] ? __mod_timer+0x8f2/0xd30 [ 494.977410][ C1] ? __pfx___schedule+0x10/0x10 [ 494.982238][ C1] ? find_held_lock+0x2b/0x80 [ 494.986894][ C1] ? schedule+0x2d7/0x3a0 [ 494.991206][ C1] schedule+0xe7/0x3a0 [ 494.995255][ C1] schedule_timeout+0x123/0x290 [ 495.000082][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 495.005425][ C1] ? __pfx_process_timeout+0x10/0x10 [ 495.010769][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 495.016738][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 495.022204][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 495.026951][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 495.032209][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 495.037727][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 495.042808][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 495.047636][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 495.053443][ C1] rcu_gp_kthread+0x26d/0x380 [ 495.058117][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 495.063284][ C1] ? rcu_is_watching+0x12/0xc0 [ 495.068023][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 495.073384][ C1] ? __kthread_parkme+0x19e/0x250 [ 495.078482][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 495.083653][ C1] kthread+0x3c5/0x780 [ 495.087693][ C1] ? __pfx_kthread+0x10/0x10 [ 495.092263][ C1] ? rcu_is_watching+0x12/0xc0 [ 495.097026][ C1] ? __pfx_kthread+0x10/0x10 [ 495.101591][ C1] ret_from_fork+0x983/0xb10 [ 495.106153][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 495.111240][ C1] ? __switch_to+0x7af/0x10d0 [ 495.115920][ C1] ? __pfx_kthread+0x10/0x10 [ 495.120615][ C1] ret_from_fork_asm+0x1a/0x30 [ 495.125385][ C1] [ 495.128383][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 495.134852][ C1] Sending NMI from CPU 1 to CPUs 0: [ 495.140052][ C0] NMI backtrace for cpu 0 [ 495.140065][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 495.140083][ C0] Tainted: [L]=SOFTLOCKUP [ 495.140087][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 495.140094][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 495.140112][ C0] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 59 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 495.140124][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 495.140135][ C0] RAX: 00000000020b8c77 RBX: 0000000000000000 RCX: ffffffff8b7806d9 [ 495.140143][ C0] RDX: 0000000000000000 RSI: ffffffff8dacdbe3 RDI: ffffffff8bf2b380 [ 495.140151][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 495.140159][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 495.140167][ C0] R13: ffffffff8e097b40 R14: ffffffff9088afd0 R15: 0000000000000000 [ 495.140175][ C0] FS: 0000000000000000(0000) GS:ffff8881248f6000(0000) knlGS:0000000000000000 [ 495.140189][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 495.140197][ C0] CR2: 00007fffed29ef60 CR3: 000000000e184000 CR4: 00000000003526f0 [ 495.140205][ C0] Call Trace: [ 495.140210][ C0] [ 495.140214][ C0] default_idle+0x13/0x20 [ 495.140231][ C0] default_idle_call+0x6c/0xb0 [ 495.140247][ C0] do_idle+0x38d/0x510 [ 495.140267][ C0] ? __pfx_do_idle+0x10/0x10 [ 495.140287][ C0] cpu_startup_entry+0x4f/0x60 [ 495.140305][ C0] rest_init+0x16b/0x2b0 [ 495.140321][ C0] ? acpi_subsystem_init+0x133/0x180 [ 495.140334][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 495.140347][ C0] start_kernel+0x3ef/0x4d0 [ 495.140366][ C0] x86_64_start_reservations+0x18/0x30 [ 495.140384][ C0] x86_64_start_kernel+0x130/0x190 [ 495.140402][ C0] common_startup_64+0x13e/0x148 [ 495.140422][ C0]