last executing test programs: 2m23.607041992s ago: executing program 0 (id=4228): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000200), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000240)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000000280)="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"}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000680), 0x381041, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000006c0)={0x42, 0x0, 0x2}, 0x10) r7 = syz_open_dev$sndctrl(&(0x7f0000000700), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0xc4c85513, &(0x7f0000000740)={0x1}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000780)={0xc}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000840)={0xffffe8d3, 0x1, 0x83, "ac9b94aaad0b79ae3a00000000000000dcfa577900", 0x31324d59}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000008c0)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x98, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'veth1_to_hsr\x00', 'macvlan1\x00', {}, {}, 0x6, 0x0, 0x61}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x12, 0x0, 0x2}}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'macvlan0\x00', 'gretap0\x00', {}, {}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x5, 0x2, 0x6, 0x1, 0x0, 0x1], 0x3, 0x1}, {0x1, [0x4, 0x3, 0x6697e4e8f2a2b31b, 0x5, 0x5, 0x1], 0x4, 0xa}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) r8 = syz_pidfd_open(r0, 0x0) setns(r8, 0x24020000) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2m21.919626112s ago: executing program 1 (id=4229): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/afs/rootcell\x00', 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000140), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xff, 0xfdfffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r5, &(0x7f00000002c0)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, &(0x7f0000019300)='./file0\x00', 0x20a000, 0x85) landlock_restrict_self(0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000019340)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000019380)='./file0\x00', 0x2) mkdir(0x0, 0x1ff) sched_setaffinity(r4, 0x2, &(0x7f00000193c0)=0x80000000000003) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000019400)={0x2, {0x2, 0x3bf, 0x804, 0x14a, 0x100}}) write(r0, &(0x7f0000019440)='syz0:127.0.0.1', 0xe) r7 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r7, &(0x7f0000019480)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) 2m18.138927339s ago: executing program 0 (id=4234): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0xb0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0xd902, 0x80000) setsockopt$MRT6_TABLE(r2, 0x29, 0xcf, &(0x7f0000000040)=0xff, 0x4) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000140)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000480)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000540)=[{&(0x7f00000005c0)=""/100, 0x64}, {&(0x7f0000000640)=""/85, 0x55}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000003f00)=""/106, 0x6a}, {&(0x7f0000003f80)=""/73, 0x49}, {&(0x7f0000004000)=""/77, 0x4d}, {&(0x7f0000004080)=""/154, 0x9a}], 0x7, &(0x7f0000004180)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000004240)={0x77359400}) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x840, 0x16f) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) close(0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x20400) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map=r6, 0x5, 0x0, 0xffffff8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r5, r4, 0x26, 0x0, @val=@iter={0x0}}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r7, &(0x7f0000004540)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000004500)={&(0x7f0000004280)={0x280, r8, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x3c, 0x3, "2848c7ba7869b51a7f43169669acbf090fd407317c92577f0b8f7374d077d6265a8283d3f95fa42ece2e93b448509497fcbee9ad0d1e6e41"}, @TIPC_NLA_NODE_ID={0x97, 0x3, "87db15c8845ccb779fff2b817ce9be76da2b7b3bd854f3cf752324eaf63406967c784b79cee8b626d8f6f70ae5042d792e0e2f215d943658ed6f005830aaa36b0e4f6dd199d0153cdacf82401cf56e621a9b07d50d978bab0c7fe0af3e98575bbbc262b75d4f3dba54243f9ad5c5daafeaa6e999ad5285d37780bba1438134aa1ae22bfde39707a8c563002a17da256d3520b9"}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd69}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb5}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x93}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r9 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') read$FUSE(r9, &(0x7f0000000ec0)={0x2020}, 0x2020) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r5, r6}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/sys/net/netfilter/nf_hooks_lwtunnel\x00', 0x1, 0x0) write(r10, &(0x7f00000007c0)='1', 0x1) syz_emit_ethernet(0x76, &(0x7f0000000400)=ANY=[@ANYBLOB="d4ef20ad2886aaaaaaaaaa3b0800481c00680066000006119078ac14143f0a010102440cbf81ac1414bb000000004e234e220048907803000000010000007f932709e7114200a7a873e6069028fd75a4c8ba2c128d1b7543e20aea847b076a1ff21d73a9fc64cbbed82ba1026fb2efde2bfba20cd7e7"], 0x0) 2m17.502130824s ago: executing program 1 (id=4235): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020, 0x0, 0x0}, 0x2020) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) read$FUSE(r2, &(0x7f0000002680)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000046c0)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000004740)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000006740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006800)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000006840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006900)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000000000300000008000000060000000000000009000000000000000400000000000000fc0000000000008003000000000000000000000000000000ffffff7f58000000040000000090000009000000475c4285a0f1306eec0424f21fd51ab517d1df4156571891262d6940b2d853b2ba9d788bcba8629ae86e45520273907208920df7bb5938b40abd1a8df00b8eeb57d4647f", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="010000000400000000000000000000000000200037050000000000002b000000f30000003a2d285cc980000009c30000f3397cd86d4d928d14d3a461b60245898556c20600000000002b133b0801000000000000"], 0x0, 0x0, 0x0}) stat(&(0x7f0000006a40)='./file0/file0\x00', &(0x7f0000006a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r0, &(0x7f0000006b00)={0x78, 0xfffffffffffffff5, r1, {0xfffffffffffff2fd, 0x5, 0x0, {0x4, 0x0, 0x6, 0x438, 0x2, 0x7, 0x6, 0x2, 0xe, 0x3800, 0x8, r4, r6, 0x8, 0x5}}}, 0x78) r7 = socket(0xa, 0x3, 0xff) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) r8 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r8, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000240)={0x0, 0x17, 0x1, "fd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000280)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x83, 0x2, "ab01"}, 0x0, 0x0}) r9 = socket$inet6(0xa, 0x1, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_control_io(r8, &(0x7f0000007000)={0x2c, &(0x7f0000006dc0)={0x20, 0x7, 0x94, {0x94, 0x23, "ce9478173e011f8b2224ee0d1e1f8fc956b5b1109a603ffdee1c1b5f440b2335d4ecf6c20dd5d1bb52c6164567c5f149e7dcd11fdaf8f11d403e9d05931560da051280359e1896411251e6b61ede0945f86257180d513eb3a408f7988d8277f6874e344fbd88c8414b86a6b8ba7f8d1e2812b56397ef486a3ed1f34052f571b0fd15d8c5e3097d9488e85c2545555e0224aa"}}, &(0x7f0000006e80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c0a}}, &(0x7f0000006ec0)={0x0, 0xf, 0x8a, {0x5, 0xf, 0x8a, 0x2, [@generic={0x71, 0x10, 0x1, "d6974c4dd2e857f1d077b736953b802e6d67b3028a39b42da12355b9df564e5f454f0529433f93b342888e0afa2db133976dc9455185184624f04c2504904bcd94ffff3201c7db1ab443942e4767bcdaab3952a9e390f2fa711a71c25693649310c8948263582c707ed40f210ca6"}, @ssp_cap={0x14, 0x10, 0xa, 0x8c, 0x2, 0xb, 0x1e0f, 0x7, [0xff00c0, 0xc0]}]}}, &(0x7f0000006f80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x6, 0x4, "5d62ccc3", "fe2fbf23"}}, &(0x7f0000006fc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0x1, 0x7, 0x0, 0x2, 0x80}}}, &(0x7f0000007540)={0x84, &(0x7f0000007040)={0x40, 0x17, 0xfc, "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"}, &(0x7f0000007180)={0x0, 0xa, 0x1, 0x62}, &(0x7f00000071c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000007200)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000007240)={0x20, 0x0, 0x8, {0x40, 0x40, [0xf000]}}, &(0x7f0000007280)={0x40, 0x7, 0x2}, &(0x7f00000072c0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000007300)={0x40, 0xb, 0x2, "aa02"}, &(0x7f0000007340)={0x40, 0xf, 0x2, 0xfcd}, &(0x7f0000007380)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000073c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000007400)={0x40, 0x19, 0x2, 'w\\'}, &(0x7f0000007440)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000007480)={0x40, 0x1c, 0x1, 0xa}, &(0x7f00000074c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000007500)={0x40, 0x21, 0x1, 0x2}}) shutdown(r10, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000006b80)={0x0, 0x10, &(0x7f0000006bc0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000006c00)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x7a, &(0x7f0000006c40)={r11, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000006d00)=0x84) setsockopt$inet6_int(r9, 0x29, 0x1000000000021, &(0x7f0000006d40)=0x9, 0x4) getpeername$inet6(r9, 0x0, &(0x7f0000006d80)) syz_usb_control_io(r8, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB="4001720000009bd6feb32467c819266b828eec2b809324e38bd1319f463398f2fd92"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) r12 = syz_open_dev$evdev(&(0x7f0000000540), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r12, 0x40284504, &(0x7f0000000580)={0xfb, 0x6, 0x0, 0x2ff, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"}) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x84, 0x3, "060000"}, 0x0}) setsockopt$inet6_opts(r7, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="611404"], 0xa8) 2m15.662648702s ago: executing program 0 (id=4239): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtaction={0x50, 0x30, 0x9, 0x70bd29, 0xffffffff, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x5, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x2ffff7f}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x50}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) set_mempolicy(0x6, 0x0, 0xe0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000480)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/ram0\x00', 0x2, 0x0) pwrite64(r5, &(0x7f00000005c0)="087ceae66a579c3188bcb63f505f2b17f3bcdadafa8616c8a0cc82024d07c8d5a9895aa33a47e357fb4cf14700b02c4ae38b48c721d1d99c0000090000000000941621244dc668d18d", 0x49, 0x1091) fsync(r5) 2m14.821318875s ago: executing program 0 (id=4241): futex_waitv(&(0x7f0000000300)=[{0x0, &(0x7f0000000380), 0x2}, {0x0, 0x0, 0x2}, {0x4, &(0x7f0000000400), 0x2}], 0x3, 0x0, 0x0, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2e4bceae653d713e, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000180)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000200), 0x2) read(r0, &(0x7f0000000480)=""/93, 0x5d) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_usb_connect(0x0, 0x32, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000600), 0x1, 0x802) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x10, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) bind$can_raw(r1, &(0x7f0000000080), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f00000000c0)=0x80000000, 0x4) r4 = socket(0x10, 0x2, 0x4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000440)={0x1, 0x7}, 0x2) setreuid(r5, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000500), 0x1, 0x2) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000580)='4', 0x1}], 0x1) fsopen(0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) sendmsg$NL80211_CMD_SET_CHANNEL(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010027bd7000fedbdf254100000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x40) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000000)=0xb021) 2m14.790642117s ago: executing program 3 (id=4242): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xff, 0xfdfffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f00000002c0)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f00000192c0)='./file1\x00', 0x1c0) landlock_restrict_self(0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000019340)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000019380)='./file0\x00', 0x2) mkdir(0x0, 0x1ff) sched_setaffinity(r2, 0x2, &(0x7f00000193c0)=0x80000000000003) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000019400)={0x2, {0x2, 0x3bf, 0x804, 0x14a, 0x100}}) write(0xffffffffffffffff, &(0x7f0000019440)='syz0:127.0.0.1', 0xe) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000019480)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) 2m12.835604146s ago: executing program 3 (id=4243): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x1a1740, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000180)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYRES64=r2, @ANYRES32=0x0, @ANYRES16=r3, @ANYBLOB="bc1458eb4137327a153e3f43260e16c1bcb751299cf10b1d7b96e7367f1f536ec1de7c7378bbf1ffa7965482175add767f6f9d3d719aeb1b9c1ac8fb95297c62c961d52088076bc17576e7d3371f1a982af71bade329000000", @ANYRESHEX=r5, @ANYRES32=r4], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xa, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300ffffffb7040000010000009500"/56], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x2c, 0x9, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100030010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0) 2m11.702802229s ago: executing program 2 (id=4245): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x82) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000006c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000700)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000740)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000900)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x3, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$sierra_net(r8, 0x0, &(0x7f00000008c0)={0x10, &(0x7f0000000380)=ANY=[], 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r9 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0xea}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x12, 0x0, 0xffffffffffffff9c, &(0x7f00000003c0)={0x200000, 0x1ac, 0x3c}, &(0x7f0000000580)='./file0\x00', 0x18, 0x0, 0x12345}) r13 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r13, 0x6, 0x1f, &(0x7f0000000040)='espintcp', 0x8) write(r13, &(0x7f0000000140)="f7d9a2eb", 0x4) close(0x3) io_uring_enter(r9, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 2m9.327910776s ago: executing program 1 (id=4246): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/afs/rootcell\x00', 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000140), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xff, 0xfdfffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r5, &(0x7f00000002c0)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, &(0x7f0000019300)='./file0\x00', 0x20a000, 0x85) landlock_restrict_self(0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000019340)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000019380)='./file0\x00', 0x2) mkdir(0x0, 0x1ff) sched_setaffinity(r4, 0x2, &(0x7f00000193c0)=0x80000000000003) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000019400)={0x2, {0x2, 0x3bf, 0x804, 0x14a, 0x100}}) write(r0, &(0x7f0000019440)='syz0:127.0.0.1', 0xe) r7 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r7, &(0x7f0000019480)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) 2m7.283425789s ago: executing program 1 (id=4247): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80003, 0x6) syz_extract_tcp_res$synack(&(0x7f0000000180)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000380)={0x41424344, 0x41424344}, 0x3fef, 0x8b7) syz_emit_ethernet(0x140, &(0x7f0000001400)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local, @val={@val={0x88a8, 0x3, 0x0, 0x4}, {0x8100, 0x6, 0x0, 0x4}}, {@ipv6={0x86dd, @tcp={0x2, 0x6, "087b1a", 0x102, 0x6, 0xff, @private1, @loopback, {[@fragment={0x2f, 0x0, 0x2, 0x1, 0x0, 0x0, 0x68}, @fragment={0x62, 0x0, 0x3e, 0x0, 0x0, 0x2, 0x68}, @fragment={0x88, 0x0, 0x5, 0x1, 0x0, 0x18, 0x65}, @srh={0xc, 0x8, 0x4, 0x4, 0x7, 0x38, 0xdb, [@mcast1, @private0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @dstopts={0x89, 0x3, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x8001}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}]}], {{0x4e21, 0x4e20, 0x41424344, r7, 0x1, 0x0, 0x6, 0x2, 0x2, 0x0, 0x7, {[@mss={0x2, 0x4, 0xe78}]}}, {"c3328e3a291d046f83e7e74880ba65a38819a53d880083f9db609bb0bbc891f261e37c2e90985103e99e6bb8edb6521e21ec9c625caeb0e8daa05ad291381181463d2dc03d949bb27d77470a0914745b52bdba71c99742918b1595645d80cbc752c5"}}}}}}}, &(0x7f0000001540)={0x1, 0x2, [0xf7, 0xe31, 0x5b0, 0xa32]}) syz_emit_ethernet(0xe4, &(0x7f0000000400)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @tcp={{0x24, 0x4, 0x3, 0x8, 0xd6, 0x64, 0x0, 0xff, 0x6, 0x0, @multicast1, @empty, {[@ssrr={0x89, 0x1b, 0x8f, [@multicast2, @multicast2, @multicast2, @local, @rand_addr=0x64010102, @broadcast]}, @noop, @generic={0x82, 0xc, "9d08968ab885ef5f1147"}, @timestamp_addr={0x44, 0x1c, 0x70, 0x1, 0x9, [{@broadcast, 0x7}, {@multicast1, 0x3}, {@multicast2, 0x5}]}, @end, @timestamp_prespec={0x44, 0x14, 0x4b, 0x3, 0x1, [{@multicast2, 0xa}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @cipso={0x86, 0x22, 0x2, [{0x2, 0x12, "5dcd74baa60c4b508ac683dda53347e4"}, {0x5, 0xa, "a003b7a33f2a3a07"}]}, @noop]}}, {{0x4e24, 0x4e21, r6, r7, 0x0, 0x0, 0x9, 0x4, 0xbb40, 0x0, 0xa, {[@fastopen={0x22, 0x8, "98c900063709"}, @window={0x3, 0x3, 0x5}, @window={0x3, 0x3, 0xf7}]}}, {"3933d2177751d3c6c8c62409379a7122350da6f8e1ad33c2e83122932fc9ddba1459"}}}}}}, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000000500)={0x7, {{0xa, 0x4e22, 0x6, @empty}}, {{0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00', 0x2192}}}, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file1\x00', 0x40, 0x83) 2m7.258079452s ago: executing program 3 (id=4248): sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000700"/20, @ANYRES32=0x0, @ANYBLOB="04010100010a0000140003007866726d30000000000000000000000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbce250100000000000000014100000018001700000000000000006574683a7465616d30000000"], 0x34}}, 0x20042000) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000440)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000e2793f10d10501200030000000010902120001000000000904"], 0x0) syz_usb_control_io$uac2(r6, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(0x0, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) connect$inet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x80800) getsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f00000000c0), &(0x7f0000000100)=0x4) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x89802) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) 2m7.213747542s ago: executing program 2 (id=4249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtaction={0x50, 0x30, 0x9, 0x70bd29, 0xffffffff, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x5, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x2ffff7f}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x50}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) set_mempolicy(0x6, 0x0, 0xe0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000480)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/ram0\x00', 0x2, 0x0) pwrite64(r5, &(0x7f00000005c0)="087ceae66a579c3188bcb63f505f2b17f3bcdadafa8616c8a0cc82024d07c8d5a9895aa33a47e357fb4cf14700b02c4ae38b48c721d1d99c0000090000000000941621244dc668d18d", 0x49, 0x1091) 2m6.345552358s ago: executing program 2 (id=4251): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0x1412, 0x1, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}]}, 0x30}}, 0x800) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='1', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x4, 0x4, 0x2, 0x4, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6, &(0x7f0000000040)}, 0x20) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x37}, 0x1ff}], 0x1c) listen(r1, 0x100) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="b2", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000084ffffffff0000007f00000100000000"], 0x18, 0x40}, 0x20048844) 2m4.632988157s ago: executing program 1 (id=4254): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xff, 0xfdfffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f00000002c0)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f00000192c0)='./file1\x00', 0x1c0) landlock_restrict_self(0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000019340)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000019380)='./file0\x00', 0x2) mkdir(0x0, 0x1ff) sched_setaffinity(r2, 0x2, &(0x7f00000193c0)=0x80000000000003) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000019400)={0x2, {0x2, 0x3bf, 0x804, 0x14a, 0x100}}) write(0xffffffffffffffff, &(0x7f0000019440)='syz0:127.0.0.1', 0xe) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000019480)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) 2m3.381738411s ago: executing program 3 (id=4256): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xf, 0x3, 0x2) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r3, @ANYBLOB="0100000000000000", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="240000001500010000000000000000000f00000008000100010000000800030000000000"], 0x24}}, 0x0) close(r6) sendto$inet6(r5, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x0) r7 = syz_ublk_setup_io_uring(0xd, 0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fspick(0xffffffffffffffff, 0x0, 0x1) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x39c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1002, 0x200015a, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed79, 0x500, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0x72}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20, 0x1, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) r14 = syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r14, 0xc0305602, &(0x7f00000005c0)={0x0, 0xb, 0x201d}) shutdown(r5, 0x1) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9", 0x45}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 2m2.770445963s ago: executing program 3 (id=4258): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b"], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet_tcp(0x2, 0x1, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xff, 0xfdfffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f00000002c0)=""/102392, 0x18ff8) landlock_restrict_self(0xffffffffffffffff, 0x0) sched_setaffinity(r2, 0x0, 0x0) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000019400)={0x2, {0x2, 0x3bf, 0x804, 0x14a, 0x100}}) write(0xffffffffffffffff, &(0x7f0000019440)='syz0:127.0.0.1', 0xe) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000019480)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) 2m2.738606409s ago: executing program 0 (id=4259): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100030010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000600)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f00000006c0)={0x308, r2, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x57, 0x3, "27efa290a70d4d75a60e4fb600daed68b059b6d977799fe3dbc97830ad52cd1e4cf99677c8af195b8d5e599e0f0683432bd55608d3f81984deb20faf7182d8a4895a35cdfcd5f5b5eb435e0541e98e52df75c5"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0xfffffffffffffdb3, 0x6, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd3}]}, @TIPC_NLA_NODE={0x25c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ID={0x85, 0x3, "a65cca147c2743732da5e00f490692ae928fa02231b2921fac5b0198f39adaa04c4a2556a76d037a6b731fb49e56157beda761336a0f5b3c9c37742d33ee9c1e9720ff475caaca461292c9ef352dac983955d2fc2e9a1839c79dd63c0dee49aebc6c5e25df6352ac922a33cce9934d9e317aadba176c2a78461a5711c653b06caa"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0xb9, 0x3, "bf9389c6dffaa6d5460e26d6628787ed8434d7720868ad8454b453c8d19848c366c6283b80030c29fc314ccf6f8e28a66d72c44ac490916452356d51ea8ec0043ffcbaf6963b3081b4ad67c7bd871a53de6631aa7d6a65e0041e13d5b0618bba12fe6aeeb188004bd6a477f65a97fdd87d4c53017b2ea42b7ee6b09a2f86fa46c5bbdfedc4937ce823d9e426d9833bee03b070e7c34203e636459d9e7b0a189e7985b4d39955be00b2e85c25066fcd96eb03f408ae"}, @TIPC_NLA_NODE_ID={0xe9, 0x3, "a844499f6e1f3d68da5e8899dd0985bd7fcc0af2f3dc8a26490bc6e93d51b15b59710f6a4fc9d267636dafd0728614418a2a63f2be8b112b03509b89d83a1a0996d92f48edf54db12a727dd44b30214233a98aa1805af5d3d749b7ec9a53bd6fcb1074eb9d4400e369739845810b02087ab77328efd0b33bcf4ad0ba0d03e999fc282668a01f0d559f133cc13eb71f54b94a810588b358574855efda408738f1929c148fed4cf7ea0f5c8d1ad662ddc29c30e62e879008b455320f8d413465f6566b20fa923fc3022d13015974668c26a8b0a9c6c006b9ead20a3e304af56b287be1b9a86d"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) 2m2.571108148s ago: executing program 0 (id=4260): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./trace\x00', &(0x7f0000000080)='tracefs\x00', 0x2, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000180), 0x0, 0x800) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f00000001c0)={0x0, {0x9, 0x5}}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/set_event\x00', 0x2, 0x0) write$vga_arbiter(r1, &(0x7f0000000100)=@other={'lock', ' ', 'none'}, 0xa) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x0) mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f00000004c0)='devtmpfs\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000600)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev/vhci\x00', 0x802, 0x1) write(r6, &(0x7f0000000540)="ffc0", 0x2) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x43) 2m1.400221199s ago: executing program 2 (id=4263): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0xb0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0xd902, 0x80000) setsockopt$MRT6_TABLE(r2, 0x29, 0xcf, &(0x7f0000000040)=0xff, 0x4) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000140)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000480)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000540)=[{&(0x7f00000005c0)=""/100, 0x64}, {&(0x7f0000000640)=""/85, 0x55}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000003f00)=""/106, 0x6a}, {&(0x7f0000003f80)=""/73, 0x49}, {&(0x7f0000004000)=""/77, 0x4d}, {&(0x7f0000004080)=""/154, 0x9a}, {0x0}], 0x8, &(0x7f0000004180)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000004240)={0x77359400}) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x840, 0x16f) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) close(0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x20400) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000000000000000000ffe000000000000000000000918495025451edd607498ad93ff6dcd02f7840440fdd4d7581f2d0b2211afe15feddb1af536fbc10cf31b28fbbcc0f821e2e88db6a280666f5ea5898defe55223cfa6a60a19bddaec3d501a07a03eb4ebef35cfb00e201abb8f27f2fb8c5e37928d749f0f59bffb49ebffe28b0f60ef87d80f24cc7f42e0eb5d6b1235a050cfe8e2c9061e7728ead975248be2b9b739b060a37a77c459244c56b35648f7137353585837fc0872fd012d442d924ed648d22ee31f8881a934b2ec4adcd57724ad2776d61b798ec2bc9b9057eeeae165b3b5814197fe2644a7bbb0b9e5eabd70993df0600626f4a73ecce37dc308ad17eb58b8bf31df69e0c3cd3eccb9017563f0751"], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map=r6, 0x5, 0x0, 0xffffff8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r5, r4, 0x26, 0x0, @val=@iter={0x0}}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r7, &(0x7f0000004540)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000004500)={&(0x7f0000004280)={0x280, r8, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x3c, 0x3, "2848c7ba7869b51a7f43169669acbf090fd407317c92577f0b8f7374d077d6265a8283d3f95fa42ece2e93b448509497fcbee9ad0d1e6e41"}, @TIPC_NLA_NODE_ID={0x97, 0x3, "87db15c8845ccb779fff2b817ce9be76da2b7b3bd854f3cf752324eaf63406967c784b79cee8b626d8f6f70ae5042d792e0e2f215d943658ed6f005830aaa36b0e4f6dd199d0153cdacf82401cf56e621a9b07d50d978bab0c7fe0af3e98575bbbc262b75d4f3dba54243f9ad5c5daafeaa6e999ad5285d37780bba1438134aa1ae22bfde39707a8c563002a17da256d3520b9"}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd69}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb5}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x93}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r9 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') read$FUSE(r9, &(0x7f0000000ec0)={0x2020}, 0x2020) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r5, r6}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/sys/net/netfilter/nf_hooks_lwtunnel\x00', 0x1, 0x0) write(r10, &(0x7f00000007c0)='1', 0x1) syz_emit_ethernet(0x76, &(0x7f0000000400)=ANY=[@ANYBLOB="d4ef20ad2886aaaaaaaaaa3b0800481c00680066000006119078ac14143f0a010102440cbf81ac1414bb000000004e234e220048907803000000010000007f932709e7114200a7a873e6069028fd75a4c8ba2c128d1b7543e20aea847b076a1ff21d73a9fc64cbbed82ba1026fb2efde2bfba20cd7e7"], 0x0) 2m1.103038589s ago: executing program 1 (id=4264): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={'veth1\x00', {0x2, 0x4e21, @private=0xa010102}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000ac0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b00)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000b40)=0x2) r2 = getpid() bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) rseq(0x0, 0xfde1, 0x0, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000b80)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000c00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000c80), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000cc0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000d00)=0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x2c0, 0x2c0, 0xfeffffff, 0x218, 0x218, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0xe01, 0x1, 0x1}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @broadcast, @broadcast, @port=0x4e23, @gre_key=0x40}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x600, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @broadcast, @remote, @gre_key=0xff, @port=0x4e20}}}}, {{@ip={@broadcast, @loopback, 0x0, 0x0, 'lo\x00', 'vxcan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, @icmp_id=0x64, @gre_key=0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000011c0)={0x9a, 0x0, 0x3, 0xe794f8a5}, 0xffffffffffffff36) write(0xffffffffffffffff, &(0x7f0000001200)="240000001e005f0214fffffffffffff80700000001000000000000000500090002000000", 0x24) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@updpolicy={0x13c, 0x19, 0xfd3649826d894c67, 0x270bd28, 0x0, {{@in6=@mcast1, @in=@multicast1, 0xffbe, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x7, 0x0, 0x77, 0x4}, {0x0, 0x0, 0xfffffffffffffffe}}, [@tmpl={0x84, 0x5, [{{@in6=@private2, 0x4d3, 0x2b}, 0xa, @in=@loopback, 0x3507, 0x4, 0x1, 0x6, 0x4, 0x9, 0x1}, {{@in6=@empty, 0x4d5, 0x3c}, 0xa, @in=@remote, 0x3502, 0x0, 0x0, 0xff, 0xe2, 0x5, 0x8}]}]}, 0x13c}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x67, 0x1, @private0, @mcast2}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 1m59.637218201s ago: executing program 2 (id=4265): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80003, 0x6) syz_extract_tcp_res$synack(&(0x7f0000000180)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000380)={0x41424344, 0x41424344}, 0x3fef, 0x8b7) syz_emit_ethernet(0x140, &(0x7f0000001400)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local, @val={@val={0x88a8, 0x3, 0x0, 0x4}, {0x8100, 0x6, 0x0, 0x4}}, {@ipv6={0x86dd, @tcp={0x2, 0x6, "087b1a", 0x102, 0x6, 0xff, @private1, @loopback, {[@fragment={0x2f, 0x0, 0x2, 0x1, 0x0, 0x0, 0x68}, @fragment={0x62, 0x0, 0x3e, 0x0, 0x0, 0x2, 0x68}, @fragment={0x88, 0x0, 0x5, 0x1, 0x0, 0x18, 0x65}, @srh={0xc, 0x8, 0x4, 0x4, 0x7, 0x38, 0xdb, [@mcast1, @private0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @dstopts={0x89, 0x3, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x8001}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}]}], {{0x4e21, 0x4e20, 0x41424344, r7, 0x1, 0x0, 0x6, 0x2, 0x2, 0x0, 0x7, {[@mss={0x2, 0x4, 0xe78}]}}, {"c3328e3a291d046f83e7e74880ba65a38819a53d880083f9db609bb0bbc891f261e37c2e90985103e99e6bb8edb6521e21ec9c625caeb0e8daa05ad291381181463d2dc03d949bb27d77470a0914745b52bdba71c99742918b1595645d80cbc752c5"}}}}}}}, &(0x7f0000001540)={0x1, 0x2, [0xf7, 0xe31, 0x5b0, 0xa32]}) syz_emit_ethernet(0xe4, &(0x7f0000000400)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @tcp={{0x24, 0x4, 0x3, 0x8, 0xd6, 0x64, 0x0, 0xff, 0x6, 0x0, @multicast1, @empty, {[@ssrr={0x89, 0x1b, 0x8f, [@multicast2, @multicast2, @multicast2, @local, @rand_addr=0x64010102, @broadcast]}, @noop, @generic={0x82, 0xc, "9d08968ab885ef5f1147"}, @timestamp_addr={0x44, 0x1c, 0x70, 0x1, 0x9, [{@broadcast, 0x7}, {@multicast1, 0x3}, {@multicast2, 0x5}]}, @end, @timestamp_prespec={0x44, 0x14, 0x4b, 0x3, 0x1, [{@multicast2, 0xa}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @cipso={0x86, 0x22, 0x2, [{0x2, 0x12, "5dcd74baa60c4b508ac683dda53347e4"}, {0x5, 0xa, "a003b7a33f2a3a07"}]}, @noop]}}, {{0x4e24, 0x4e21, r6, r7, 0x0, 0x0, 0x9, 0x4, 0xbb40, 0x0, 0xa, {[@fastopen={0x22, 0x8, "98c900063709"}, @window={0x3, 0x3, 0x5}, @window={0x3, 0x3, 0xf7}]}}, {"3933d2177751d3c6c8c62409379a7122350da6f8e1ad33c2e83122932fc9ddba1459"}}}}}}, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000000500)={0x7, {{0xa, 0x4e22, 0x6, @empty}}, {{0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00', 0x2192}}}, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file1\x00', 0x40, 0x83) 1m58.079989873s ago: executing program 3 (id=4266): mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x4) syz_open_dev$sndmidi(&(0x7f0000000340), 0x3a9, 0x1) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x11d) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000002680)={0x3, 0x9, 0x7ff, 0x4, 0x7f, "3f8606007198d7898ddf1425dc624dd84d9929", 0xad5a, 0x1}) write(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f00000026c0)={0xfc, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x1) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0), 0xa14000, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1m53.089598542s ago: executing program 2 (id=4267): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x82) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000006c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000700)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000740)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000900)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x3, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$sierra_net(r8, 0x0, &(0x7f00000008c0)={0x10, &(0x7f0000000380)=ANY=[], 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r9 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0xea}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x12, 0x0, 0xffffffffffffff9c, &(0x7f00000003c0)={0x200000, 0x1ac, 0x3c}, &(0x7f0000000580)='./file0\x00', 0x18, 0x0, 0x12345}) r13 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r13, 0x6, 0x1f, &(0x7f0000000040)='espintcp', 0x8) write(r13, &(0x7f0000000140)="f7d9a2eb", 0x4) close(0x3) io_uring_enter(r9, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1m46.088454043s ago: executing program 32 (id=4260): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./trace\x00', &(0x7f0000000080)='tracefs\x00', 0x2, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000180), 0x0, 0x800) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f00000001c0)={0x0, {0x9, 0x5}}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/set_event\x00', 0x2, 0x0) write$vga_arbiter(r1, &(0x7f0000000100)=@other={'lock', ' ', 'none'}, 0xa) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x0) mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f00000004c0)='devtmpfs\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000600)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev/vhci\x00', 0x802, 0x1) write(r6, &(0x7f0000000540)="ffc0", 0x2) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x43) 1m44.131409126s ago: executing program 33 (id=4264): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={'veth1\x00', {0x2, 0x4e21, @private=0xa010102}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000ac0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b00)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000b40)=0x2) r2 = getpid() bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) rseq(0x0, 0xfde1, 0x0, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000b80)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000c00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000c80), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000cc0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000d00)=0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x2c0, 0x2c0, 0xfeffffff, 0x218, 0x218, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0xe01, 0x1, 0x1}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @broadcast, @broadcast, @port=0x4e23, @gre_key=0x40}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x600, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @broadcast, @remote, @gre_key=0xff, @port=0x4e20}}}}, {{@ip={@broadcast, @loopback, 0x0, 0x0, 'lo\x00', 'vxcan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, @icmp_id=0x64, @gre_key=0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000011c0)={0x9a, 0x0, 0x3, 0xe794f8a5}, 0xffffffffffffff36) write(0xffffffffffffffff, &(0x7f0000001200)="240000001e005f0214fffffffffffff80700000001000000000000000500090002000000", 0x24) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@updpolicy={0x13c, 0x19, 0xfd3649826d894c67, 0x270bd28, 0x0, {{@in6=@mcast1, @in=@multicast1, 0xffbe, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x7, 0x0, 0x77, 0x4}, {0x0, 0x0, 0xfffffffffffffffe}}, [@tmpl={0x84, 0x5, [{{@in6=@private2, 0x4d3, 0x2b}, 0xa, @in=@loopback, 0x3507, 0x4, 0x1, 0x6, 0x4, 0x9, 0x1}, {{@in6=@empty, 0x4d5, 0x3c}, 0xa, @in=@remote, 0x3502, 0x0, 0x0, 0xff, 0xe2, 0x5, 0x8}]}]}, 0x13c}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x67, 0x1, @private0, @mcast2}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 1m35.166355963s ago: executing program 34 (id=4266): mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x4) syz_open_dev$sndmidi(&(0x7f0000000340), 0x3a9, 0x1) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x11d) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000002680)={0x3, 0x9, 0x7ff, 0x4, 0x7f, "3f8606007198d7898ddf1425dc624dd84d9929", 0xad5a, 0x1}) write(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f00000026c0)={0xfc, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x1) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0), 0xa14000, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1m32.376917641s ago: executing program 35 (id=4267): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x82) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000006c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000700)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000740)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000900)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x3, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$sierra_net(r8, 0x0, &(0x7f00000008c0)={0x10, &(0x7f0000000380)=ANY=[], 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r9 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0xea}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x12, 0x0, 0xffffffffffffff9c, &(0x7f00000003c0)={0x200000, 0x1ac, 0x3c}, &(0x7f0000000580)='./file0\x00', 0x18, 0x0, 0x12345}) r13 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r13, 0x6, 0x1f, &(0x7f0000000040)='espintcp', 0x8) write(r13, &(0x7f0000000140)="f7d9a2eb", 0x4) close(0x3) io_uring_enter(r9, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1m11.109029413s ago: executing program 4 (id=4275): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0xb0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0xd902, 0x80000) setsockopt$MRT6_TABLE(r2, 0x29, 0xcf, &(0x7f0000000040)=0xff, 0x4) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000140)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000480)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000540)=[{&(0x7f00000005c0)=""/100, 0x64}, {&(0x7f0000000640)=""/85, 0x55}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000003f00)=""/106, 0x6a}, {&(0x7f0000003f80)=""/73, 0x49}, {&(0x7f0000004000)=""/77, 0x4d}, {&(0x7f0000004080)=""/154, 0x9a}, {0x0}], 0x8, &(0x7f0000004180)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000004240)={0x77359400}) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x840, 0x16f) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) close(0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x20400) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000000000000000000ffe000000000000000000000918495025451edd607498ad93ff6dcd02f7840440fdd4d7581f2d0b2211afe15feddb1af536fbc10cf31b28fbbcc0f821e2e88db6a280666f5ea5898defe55223cfa6a60a19bddaec3d501a07a03eb4ebef35cfb00e201abb8f27f2fb8c5e37928d749f0f59bffb49ebffe28b0f60ef87d80f24cc7f42e0eb5d6b1235a050cfe8e2c9061e7728ead975248be2b9b739b060a37a77c459244c56b35648f7137353585837fc0872fd012d442d924ed648d22ee31f8881a934b2ec4adcd57724ad2776d61b798ec2bc9b9057eeeae165b3b5814197fe2644a7bbb0b9e5eabd70993df0600626f4a73ecce37dc308ad17eb58b8bf31df69e0c3cd3eccb9017563f0751"], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map=r6, 0x5, 0x0, 0xffffff8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r5, r4, 0x26, 0x0, @val=@iter={0x0}}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r7, &(0x7f0000004540)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000004500)={&(0x7f0000004280)={0x280, r8, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x3c, 0x3, "2848c7ba7869b51a7f43169669acbf090fd407317c92577f0b8f7374d077d6265a8283d3f95fa42ece2e93b448509497fcbee9ad0d1e6e41"}, @TIPC_NLA_NODE_ID={0x97, 0x3, "87db15c8845ccb779fff2b817ce9be76da2b7b3bd854f3cf752324eaf63406967c784b79cee8b626d8f6f70ae5042d792e0e2f215d943658ed6f005830aaa36b0e4f6dd199d0153cdacf82401cf56e621a9b07d50d978bab0c7fe0af3e98575bbbc262b75d4f3dba54243f9ad5c5daafeaa6e999ad5285d37780bba1438134aa1ae22bfde39707a8c563002a17da256d3520b9"}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd69}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb5}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x93}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r9 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') read$FUSE(r9, &(0x7f0000000ec0)={0x2020}, 0x2020) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r5, r6}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/sys/net/netfilter/nf_hooks_lwtunnel\x00', 0x1, 0x0) write(r10, &(0x7f00000007c0)='1', 0x1) syz_emit_ethernet(0x76, &(0x7f0000000400)=ANY=[@ANYBLOB="d4ef20ad2886aaaaaaaaaa3b0800481c00680066000006119078ac14143f0a010102440cbf81ac1414bb000000004e234e220048907803000000010000007f932709e7114200a7a873e6069028fd75a4c8ba2c128d1b7543e20aea847b076a1ff21d73a9fc64cbbed82ba1026fb2efde2bfba20cd7e7"], 0x0) 58.206933746s ago: executing program 4 (id=4276): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f00000011c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001200), 0x0, 0x10, &(0x7f0000001240), 0x36}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001280)={r0, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000001300)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001, 0x0, 0x0, 0x0, &(0x7f0000001340), &(0x7f0000001380)}, 0x28) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000c80)={0x84, &(0x7f00000007c0)={0x20, 0x30, 0x5, "60b87c7e61"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 47.756082657s ago: executing program 4 (id=4277): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x40, 0xfffffffc, {0xa, 0x3f, 0x0, 0x0, r0}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xfffff001, 0x0, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 40.30161596s ago: executing program 4 (id=4278): r0 = syz_open_procfs(0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000d00), 0xff7f) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) writev(r0, &(0x7f0000000a00)=[{&(0x7f00000003c0)="bdcac3711bd66fdfda5140d94de9a753c9745290672117d98c4a029a56318c1641ffc65d9b5015d5cac9efa29b64e9490ba978b9c70890d5bb4169005b4bc1d69536f69227646f44abf87c552562a45dfafd3288459efdcd5f750feeea838a4b09bdde762fd4fd6e476f96a4e11dc76a60ebcb962f25b901398d55d337cf531e0a798f649bb01bdff54d645a7572c93a3236b3156210f5809d2d4da4b90c1086e4aec84bb4ec30ac7c1a19caf955b1726ad4589922593caffecc11047e2e4ed9d7221b731f2f2882447046614dd88c3bb14f611e0bce005c4fe537defa2436139003a0c474f187e1c1aee4db652b26a2fb0a73", 0xf3}, {&(0x7f0000000500)="5c7fdfbf78744f14743574a54593cae40966ee7a545a373ee62e41a4b13cd96f76e9e0f6d8a6892482d2d3ee676c776697177585ed115f5b3917d57d4445624411d0c2bee75c8d00d4b26b40ce54a83309dc4c4f81588b19eb36a0ec7d1a259b1ae36fd872586b07a06582fd7d48dd52574dc39f803fd49bd4ccc630d4fd211d1b00d0c3326fa309e3fc46d4412e090e3111df04188be336cd6711dc7ecc92c999d0213725cc4e622025270fbb7a98a147fa9cb771baba823d56533e12cf6cd82edf83f293522e5ddfd4a714ea8d90c2d4b9f751112d3261705620a27682ec143ad467bf69efaeea", 0xe8}, {&(0x7f0000000600)="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", 0xfd}, {&(0x7f0000000700)="843d279dcc098838c134dcb8e91c499712696ffb583ba034c6b0fde16f41a9839211107cd318dee7e61245db3d8d38dd0d74028127e870aa32d5cc1a9f8c899d27b877896c11c8f1997ae77cb499654171a116e99627c4d34eed82b3d88089f07c5249d26945727e80eb77245155091a0610d0cd5b170862f5b7020cdc919350dced3558da6882ec559d84baa3ae1859ab4ee1c3ffee5561fceeaf808390a4031e7fdd05f7ce54283d6f540d0502b350d76a2d6924c7a9a3d7cfec972d9f7fcd4354437dc8bb16c2fd38eb7e38f06cf0dbbe297d56bae46abfd0c88f1111df1bd4f731abcf", 0xe5}, {&(0x7f0000000880)="8aca769119d2522b0ac78f04e8dbf061a79877b9fd94039ee26b4e1e78a3da6627566c174eb97dc66350d0f0379c2bbf5d8e833fd80e4359528d02114253d858a6816a801fc694e895627de9abb29cd07a3940a2bb12354dc89a05c5", 0x5c}, {&(0x7f0000000900)="c1bb60072e8af5ac2b14a9a58bc34078885b8929d18e97976ca17679b55c7e4abac520d6deae93c7e615c879e59537628c6eaab79a89d6c85bc34c89ba70f4455f01c17db6735f452c973dd702b1859faffb45166dd08301afa29587b9a29b5e49c078b39e06d248835a690761ca9173da733a1dae0cac116bd2bb69c492c744ec56cf3748b7d836d938b72544123abb590f79f46b55edea7ef830472ef3c1de2c901bd0866025c9f2817358e88a710322523c96616eec6577f62ed986ebcdcc63c03ef165ce8a0903392c292de8eb1ebac68ca326e4521722ca458da865c8", 0xdf}], 0x6) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='setgroups\x00') read$FUSE(r2, &(0x7f0000000a80)={0x2020}, 0x2020) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r4, &(0x7f00000004c0)=ANY=[], 0x102) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 27.782845332s ago: executing program 4 (id=4279): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mq_open(&(0x7f0000000980)='&\x00\x12|\xd6hJ\x1e\xc6\xea\xc3\xe5\xa3\xf9\xb8Bmp\x9e\xdb \x86\x11NLd\xe8\x8b\xacg\xf4\xd9L+\x95.\xf8\x00\x16sS\xef\x15\x9eii%\x7f\xba}MO\xb3\x82\xb4\xe8d-P\x99!\x84<,\xc0\xc2\xf4\xe4\x81\x80\xe4Y\xa9l\xf3\x7ff\x96\xc0d\xd7x$\x83\xb8\x80Xh\xe4g\xcdA\x8c\x83`^De\'\xd8\x18\x99\xaf\x95\xcd+\xa6\xa7\xda\x9bmT\x96&\x93\\\x93\xca0\x88\xb5Iq\x91?\xda\xc9]>K\xf4G9\x00\x00\x00\x00\xc4\x0e\x9e\xd3\xb5\x9d]\xabe\xef%\xb9\xf6Q\xc2\xb1\"r\x1d\x11\x81\xf7\xa0\x87T\xb0\x86\xcaw\xdb\xfe8J\x86,\xaa\x0e\a\xc1ac\xf3\xddf\xa4\x05\v\xe9\xf0d\n\x00\a\xdc\xea\x87\x00\xfc^/\xbcdD\x87\xa7C\xef\x85\xdd\x95\xca\a\x87\x16\x90/\n\x14\xb9e\x15\xc4\x8f\xe7\xfd\xb6y,~\x1c\xf7\xb7\x84\x02\x82T!\xd2\x8eWL\xeb\xdd\xe4\r/\xb3M\x00\rd\xdc\x944\xdc\xb3\xbb:|\xd3\xc8\xfb<\x9c\xc3\t\xc6M\xf9\f\x8c.\xde\xf3\x16_\xc9\x15Ua)\xf2\xbe\t\xc3\xa9\xc7\xee5{\x8f\xa8Y>\b\xfco\xab\x9b\x9f\xae7\xa2\xe0\x95pVl\x914\x86\xe0\xc3\xc2\x90\x9e\x9f%\xf3^\x107\xe6\xbd}\xfazE\x85\x91Lk\xb5O\xffK\xc9\xc8\x8eo\xeb)I\xaf\xf5\xd9\xbe\xba\'\xdb{wQS\xb0&\x92W\xb0\x87\x93\xf2\n\xc8U\xe5O\x1a\xfc&\xe2\xe4g.\x00&Z:\xec\xacp\x9a1n\xa6\t\xd3uc\xad\x0f\xd2\xc7\x0e\xc13J\x9cZ\xff\xdf\x8b\xd9\x8b\xcb\xe9\x90Gc\xd4\x83\x9a@\x86_\b\x00\x00\x00\xfd\xce\xa9\xe6hjU\xb3Qt\xc5\xf4\xd0\xf3\xec\xf8\x14LH\xfa\x13\xb5\b\xbek\xd5\x04\x8f3xC\x0e\xd2\xfe\xd8\xa1\xdb\xd4\xdak3\x9a\xb1\xcfX3\xfc_\xae\xd8\xe7aRa/\xf5\xdc^\xfa\xf3\xdd\x1a\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\x00\x00(\xdfJoa\x81\xaen\x88Z\x86\xc0\x05\xa8?\x86\xe9\xd2\xb43eA\x14\x01\x0f\x85Y5\xe5\xfb2\xa6\xbd{\x1d|P\x14\x82M\n\xcf\xa3\bfk\v\xb1Y\xa3\x16AE\xc6\x11>\x93\x05w\x87\xed\xb9\xd2\xb6\xa4\xfaT\xfa\xda\x91\x11\xb1*B\x17\x03\\{\xa0\xc8\xf3\xf7\xefYOs\xf7\xdc>\xd9,\xbe\x9dL\xdf\x0f\xd9\x8a~D\vU\\5\xee\xb8:\xf7\x01\xb7\xd1y\x83\x8c\xe6\xb4\xa3KY\xf1\xc5\xaf\xf2\x8dW\xaf\xf2\xae\xed\x01\xa0\x00\x87)A\x05\xdae\x9c;/\xf4/\xe4\xe9\xec\xb1ga4\xf9f\x1d*\x9aX\xff\xb7\x96t$\x05\x11y\xef\xb4+\x88db\x1a\x1e\x1f\x00\x00\x00\x00\x00\x00\x00\x00', 0x40, 0x80, 0x0) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x5b1542, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f00000001c0)={0x17c04, r3, 0x5000, 0x24000007, 0x2, 0x5}) r4 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x200000f) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRES8=r5], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), &(0x7f0000000240), 0xfffffffffffffff8, 0x0, 0x1}}, 0x40) r8 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r9 = openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000a0000010900010073797a3100000000400004802800018007000100637400001c000280050006000100000008000240000000150800014000000009140001800b0001007470726f78790000040002800900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, r9, 0x0) close_range(r7, r7, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) 17.695711515s ago: executing program 4 (id=4280): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xff, 0xfdfffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f00000002c0)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f00000192c0)='./file1\x00', 0x1c0) landlock_restrict_self(0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000019340)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000019380)='./file0\x00', 0x2) mkdir(0x0, 0x1ff) sched_setaffinity(r2, 0x2, &(0x7f00000193c0)=0x80000000000003) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000019400)={0x2, {0x2, 0x3bf, 0x804, 0x14a, 0x100}}) write(0xffffffffffffffff, &(0x7f0000019440)='syz0:127.0.0.1', 0xe) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000019480)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) 0s ago: executing program 36 (id=4280): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xff, 0xfdfffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f00000002c0)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f00000192c0)='./file1\x00', 0x1c0) landlock_restrict_self(0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000019340)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000019380)='./file0\x00', 0x2) mkdir(0x0, 0x1ff) sched_setaffinity(r2, 0x2, &(0x7f00000193c0)=0x80000000000003) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000019400)={0x2, {0x2, 0x3bf, 0x804, 0x14a, 0x100}}) write(0xffffffffffffffff, &(0x7f0000019440)='syz0:127.0.0.1', 0xe) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000019480)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) kernel console output (not intermixed with test programs): 1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2059.742686][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2059.789997][ T5690] usb 5-1: Using ep0 maxpacket: 8 [ 2059.790399][ T5690] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2059.791122][ T5690] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2059.791139][ T5690] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 2059.791153][ T5690] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2059.791183][ T5690] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2059.791200][ T5690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2059.794432][ T5690] usb 5-1: config 0 descriptor?? [ 2059.795322][T22795] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 2059.889865][T17801] usb 4-1: Using ep0 maxpacket: 32 [ 2059.890317][T17801] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 2059.891147][T17801] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 2059.891163][T17801] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2059.891177][T17801] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2059.891192][T17801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2059.892567][T17801] usb 4-1: config 0 descriptor?? [ 2060.332439][ T5690] input: HID 1b1c:1b3e as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:1B1C:1B3E.005B/input/input248 [ 2060.356910][ T1404] IPVS: starting estimator thread 0... [ 2060.368678][ T5690] corsair 0003:1B1C:1B3E.005B: input,hidraw0: USB HID v0.00 Joystick [HID 1b1c:1b3e] on usb-dummy_hcd.4-1/input0 [ 2060.394238][T17801] usbhid 4-1:0.0: can't add hid device: -71 [ 2060.394344][T17801] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2060.417126][T17801] usb 4-1: USB disconnect, device number 73 [ 2060.442559][T22802] IPVS: using max 75 ests per chain, 180000 per kthread [ 2060.511338][ T5690] usb 3-1: USB disconnect, device number 78 [ 2060.583099][ T5690] Unregistered device Abilis Systems DVB-Titan [ 2060.595498][T22791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2060.596423][T22791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2060.634873][T17801] usb 5-1: USB disconnect, device number 45 [ 2060.908534][ T5710] as10x_usb: device has been detected [ 2060.910064][ T5710] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 2060.916065][ T5690] as10x_usb: device has been disconnected [ 2060.944949][ T5710] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 2061.104088][ T5710] as10x_usb: error during firmware upload part1 [ 2061.104317][ T5710] Registered device Abilis Systems DVB-Titan [ 2062.019027][T22813] xt_NETMAP: bad MAP_IPS. [ 2062.098629][ T5690] usb 1-1: USB disconnect, device number 42 [ 2062.109079][ T5690] idmouse 1-1:1.0: disconnected [ 2062.317656][T21832] usb 2-1: USB disconnect, device number 45 [ 2062.348840][T21832] Unregistered device Abilis Systems DVB-Titan [ 2062.352141][T21832] as10x_usb: device has been disconnected [ 2063.112238][T22821] net_ratelimit: 147 callbacks suppressed [ 2063.112253][T22821] netlink: zone id is out of range [ 2063.112259][T22821] netlink: zone id is out of range [ 2063.112263][T22821] netlink: zone id is out of range [ 2063.112267][T22821] netlink: zone id is out of range [ 2063.112272][T22821] netlink: zone id is out of range [ 2063.112276][T22821] netlink: zone id is out of range [ 2063.112282][T22821] netlink: zone id is out of range [ 2063.112286][T22821] netlink: zone id is out of range [ 2063.112291][T22821] netlink: zone id is out of range [ 2063.112295][T22821] netlink: zone id is out of range [ 2063.116900][T17801] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2063.407190][T17801] usb 3-1: Using ep0 maxpacket: 8 [ 2063.516349][T17801] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2064.000246][T17801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2064.000265][T17801] usb 3-1: Product: syz [ 2064.000274][T17801] usb 3-1: Manufacturer: syz [ 2064.000283][T17801] usb 3-1: SerialNumber: syz [ 2064.131164][T17801] usb 3-1: config 0 descriptor?? [ 2064.137090][T17801] gspca_main: se401-2.14.0 probing 047d:5003 [ 2064.918451][T17801] gspca_se401: Bayer format not supported! [ 2065.395627][T22815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2065.395838][T22815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2066.107561][ T8540] usb 3-1: USB disconnect, device number 79 [ 2066.159537][T22819] syz.4.3897 (22819): drop_caches: 2 [ 2066.286960][T22828] syz.1.3900 (22828): drop_caches: 2 [ 2066.295782][T22840] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3901'. [ 2066.381880][T22848] tipc: Enabling of bearer rejected, failed to enable media [ 2067.478831][ T8540] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2067.871076][ T8540] usb 4-1: Using ep0 maxpacket: 16 [ 2067.871497][ T8540] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=30.00 [ 2067.872252][ T8540] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2067.873569][ T8540] usb 4-1: config 0 descriptor?? [ 2067.905725][ T8540] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 2067.906291][ T8540] usb 4-1: Detected FT2232HP [ 2067.920613][ T5710] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2068.070513][ T5710] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2068.071300][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2068.074667][ T5710] usb 2-1: config 0 descriptor?? [ 2068.111444][ T8540] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 2068.283904][ T5710] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2068.325298][ T8540] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2068.326791][ T8540] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2068.349602][ T8540] usb 4-1: USB disconnect, device number 74 [ 2068.417238][ T8540] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2068.417496][ T8540] ftdi_sio 4-1:0.0: device disconnected [ 2068.531592][ T5710] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 2068.531608][ T5710] [drm] Initialized udl on minor 1 [ 2068.731411][T17801] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2069.627997][T17801] usb 3-1: Using ep0 maxpacket: 8 [ 2069.636727][T17801] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2069.638810][T17801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2069.638835][T17801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2069.673416][T17801] usb 3-1: config 0 descriptor?? [ 2070.572568][T22865] busy [ 2070.589136][T17801] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2070.607672][T17801] usb 3-1: USB disconnect, device number 80 [ 2070.824444][T22877] net_ratelimit: 147 callbacks suppressed [ 2070.824458][T22877] ip_tables: iptables: counters copy to user failed while replacing table [ 2071.006425][T22879] zswap: compressor zs not available [ 2071.908776][T22887] xt_NETMAP: bad MAP_IPS. [ 2072.153523][ T31] audit: type=1326 audit(1792233133.322:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22885 comm="syz.0.3910" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb5079e559 code=0x0 [ 2073.578187][ T5710] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 2073.578429][ T5710] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 2073.677496][ T5710] usb 2-1: USB disconnect, device number 46 [ 2073.725901][T17801] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 2075.481998][T22915] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3923'. [ 2075.692941][T22920] 9p: Bad value for 'wfdno' [ 2075.713081][ T31] audit: type=1326 audit(1792233136.882:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22919 comm="syz.0.3925" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb5079e559 code=0x0 [ 2076.708046][T22927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3917'. [ 2077.049309][T22933] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2077.101347][T22927] netlink: 'syz.2.3917': attribute type 10 has an invalid length. [ 2077.101361][T22927] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3917'. [ 2078.195366][T17801] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 2078.439831][T17801] usb 2-1: Using ep0 maxpacket: 8 [ 2078.441605][T17801] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2078.442366][T17801] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2078.442390][T17801] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2078.446948][T17801] usb 2-1: config 0 descriptor?? [ 2080.021390][T22937] busy [ 2081.863936][T17801] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2081.905388][T17801] usb 2-1: USB disconnect, device number 47 [ 2083.597615][T22974] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2083.689729][T22975] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3939'. [ 2084.339556][ T31] audit: type=1400 audit(1792233145.502:1578): avc: denied { ioctl } for pid=22981 comm="syz.0.3944" path="socket:[74044]" dev="sockfs" ino=74044 ioctlcmd=0x9403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2085.680650][T22988] syz.1.3938 (22988): drop_caches: 2 [ 2085.700728][ T31] audit: type=1326 audit(1792233146.872:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22989 comm="syz.3.3945" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe7a39e559 code=0x0 [ 2086.865477][T23012] 9p: Bad value for 'wfdno' [ 2086.894770][ T31] audit: type=1326 audit(1792233148.062:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23010 comm="syz.1.3950" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03e119e559 code=0x0 [ 2086.944062][T21832] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 2087.100499][ T8540] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2087.175455][T21832] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2087.231016][T21832] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2087.231035][T21832] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2087.316761][ T8540] usb 3-1: Using ep0 maxpacket: 8 [ 2087.317293][ T8540] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2087.429184][T21832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2087.429215][T21832] usb 4-1: Product: syz [ 2087.429224][T21832] usb 4-1: Manufacturer: syz [ 2087.429233][T21832] usb 4-1: SerialNumber: syz [ 2087.462950][ T8540] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2087.462970][ T8540] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 2087.462984][ T8540] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2087.463007][ T8540] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2087.463025][ T8540] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2087.657400][ T8540] usb 3-1: config 0 descriptor?? [ 2087.730932][T23014] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2087.808804][T21832] usb 4-1: config 0 descriptor?? [ 2088.198648][T23030] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2088.242726][ T8540] input: HID 1b1c:1b3e as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:1B1C:1B3E.005C/input/input249 [ 2088.272064][ T8540] corsair 0003:1B1C:1B3E.005C: input,hidraw0: USB HID v0.00 Joystick [HID 1b1c:1b3e] on usb-dummy_hcd.2-1/input0 [ 2088.467677][T23009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2088.467872][T23009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2088.496715][T21832] usb 3-1: USB disconnect, device number 81 [ 2088.570582][T23035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3948'. [ 2088.670304][ T8540] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 2088.752733][ T31] audit: type=1400 audit(1792233149.922:1581): avc: denied { create } for pid=23027 comm="syz.1.3952" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2088.754263][ T31] audit: type=1400 audit(1792233149.922:1582): avc: denied { read write } for pid=23027 comm="syz.1.3952" name="file0" dev="tmpfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2088.755748][ T31] audit: type=1400 audit(1792233149.922:1583): avc: denied { append } for pid=23027 comm="syz.1.3952" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2088.833646][ T31] audit: type=1400 audit(1792233150.002:1584): avc: denied { read } for pid=23027 comm="syz.1.3952" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2088.834260][ T31] audit: type=1400 audit(1792233150.002:1585): avc: denied { open } for pid=23027 comm="syz.1.3952" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2088.866673][ T8540] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 2088.904899][ T8540] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2088.904925][ T8540] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2088.936450][ T8540] as10x_usb: device has been detected [ 2088.936788][ T8540] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 2088.964109][ T8540] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 2088.985400][ T8540] as10x_usb: error during firmware upload part1 [ 2088.988370][ T8540] Registered device Abilis Systems DVB-Titan [ 2089.522777][ T8540] usb 1-1: USB disconnect, device number 43 [ 2090.337507][ T8540] Unregistered device Abilis Systems DVB-Titan [ 2090.342933][ T8540] as10x_usb: device has been disconnected [ 2090.397609][T21832] usb 4-1: USB disconnect, device number 75 [ 2091.306034][T23053] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3959'. [ 2091.448881][T23058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3962'. [ 2091.469012][T23058] tipc: Enabling of bearer rejected, already enabled [ 2091.559881][T21832] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2091.711400][T21832] usb 3-1: Using ep0 maxpacket: 32 [ 2091.712284][T21832] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 2091.713070][T21832] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 2091.713084][T21832] usb 3-1: config 0 has no interface number 0 [ 2091.713102][T21832] usb 3-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2091.713113][T21832] usb 3-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 2091.713126][T21832] usb 3-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2091.713141][T21832] usb 3-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2091.714706][T21832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2091.714719][T21832] usb 3-1: Product: syz [ 2091.714727][T21832] usb 3-1: Manufacturer: syz [ 2091.714736][T21832] usb 3-1: SerialNumber: syz [ 2091.719046][T21832] usb 3-1: config 0 descriptor?? [ 2091.734045][T14458] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2091.844274][T21832] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input250 [ 2091.889991][T14458] usb 1-1: Using ep0 maxpacket: 16 [ 2091.891060][T14458] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=30.00 [ 2091.892262][T14458] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2091.893828][T14458] usb 1-1: config 0 descriptor?? [ 2091.895399][T14458] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 2091.896040][T14458] usb 1-1: Detected FT2232HP [ 2092.117818][T14458] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 2093.168794][ T8540] usb 3-1: USB disconnect, device number 82 [ 2093.168905][ C0] bcm5974 3-1:0.119: trackpad urb failed: -19 [ 2093.216863][T14458] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2093.232580][T14458] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2093.237091][T14458] usb 1-1: USB disconnect, device number 44 [ 2093.285999][T14458] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2093.286233][T14458] ftdi_sio 1-1:0.0: device disconnected [ 2093.302540][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 2093.302570][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 2093.851975][T23073] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2093.860560][T14458] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 2094.009925][T14458] usb 5-1: Using ep0 maxpacket: 8 [ 2094.010369][T14458] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2094.011184][T14458] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2094.011208][T14458] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2094.011221][T14458] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2094.011235][T14458] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2094.011248][T14458] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2094.011269][T14458] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2094.552391][T23082] cgroup: none used incorrectly [ 2095.033553][T14458] usb 5-1: GET_CAPABILITIES returned 0 [ 2095.033578][T14458] usbtmc 5-1:16.0: can't read capabilities [ 2095.723879][T23080] xt_NETMAP: bad MAP_IPS. [ 2096.642904][T23086] xt_NETMAP: bad MAP_IPS. [ 2097.432759][T21832] usb 5-1: USB disconnect, device number 46 [ 2097.738349][T23096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3960'. [ 2097.850006][T14458] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 2097.915554][T23096] dummy0: left promiscuous mode [ 2097.929301][T23096] netlink: 'syz.1.3960': attribute type 10 has an invalid length. [ 2097.929314][T23096] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3960'. [ 2098.019825][T14458] usb 4-1: Using ep0 maxpacket: 8 [ 2098.050210][T14458] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2098.303621][T14458] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2098.303642][T14458] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2098.303655][T14458] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2098.303670][T14458] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2098.303687][T14458] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2098.563043][T14458] usb 4-1: config 0 descriptor?? [ 2098.702096][T23096] dummy0: entered promiscuous mode [ 2099.184027][T23113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3976'. [ 2099.200297][T23113] tipc: Enabling of bearer rejected, already enabled [ 2099.338103][T14458] usbhid 4-1:0.0: can't add hid device: -71 [ 2099.338157][T14458] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2099.355525][T14458] usb 4-1: USB disconnect, device number 76 [ 2099.440262][ T5690] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 2099.521316][T23115] zswap: compressor zs not available [ 2099.657168][ T5690] usb 5-1: Using ep0 maxpacket: 16 [ 2099.665130][ T5690] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=30.00 [ 2099.665957][ T5690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2099.668053][ T5690] usb 5-1: config 0 descriptor?? [ 2099.698659][ T5690] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 2100.438516][ T5690] usb 5-1: Detected FT2232HP [ 2100.466549][ T5690] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 2100.625488][T23124] ip_tables: iptables: counters copy to user failed while replacing table [ 2100.681515][ T5690] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2100.689807][T14458] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 2100.691048][ T5690] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2100.695715][ T5690] usb 5-1: USB disconnect, device number 47 [ 2100.724236][ T5690] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2100.729561][ T5690] ftdi_sio 5-1:0.0: device disconnected [ 2100.845931][T14458] usb 3-1: Using ep0 maxpacket: 8 [ 2100.849158][T14458] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2100.863741][T14458] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 2100.863767][T14458] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2100.863779][T14458] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2100.863793][T14458] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2100.863807][T14458] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2100.863828][T14458] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2101.307792][T14458] usb 3-1: GET_CAPABILITIES returned 0 [ 2101.307822][T14458] usbtmc 3-1:16.0: can't read capabilities [ 2101.884225][T14458] usb 3-1: USB disconnect, device number 83 [ 2103.158287][T23129] syz.0.3980 (23129): drop_caches: 2 [ 2104.850367][T23151] xt_NETMAP: bad MAP_IPS. [ 2104.881208][T17801] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 2105.735882][T23152] xt_NETMAP: bad MAP_IPS. [ 2105.772186][T17801] usb 3-1: Using ep0 maxpacket: 32 [ 2105.828217][T17801] usb 3-1: device descriptor read/all, error -71 [ 2106.706996][ T31] audit: type=1400 audit(1792233167.872:1586): avc: denied { connect } for pid=23155 comm="syz.3.3989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2107.708754][ T31] audit: type=1400 audit(1792233168.872:1587): avc: denied { bind } for pid=23155 comm="syz.3.3989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2107.886956][T23170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3990'. [ 2107.933661][T23160] syz.4.3988 (23160): drop_caches: 2 [ 2107.991178][T23177] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3992'. [ 2107.996645][T23177] tipc: Enabling of bearer rejected, already enabled [ 2108.195265][T23170] netlink: 'syz.1.3990': attribute type 10 has an invalid length. [ 2108.195279][T23170] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3990'. [ 2109.008739][T23184] netlink: zone id is out of range [ 2109.008750][T23184] netlink: zone id is out of range [ 2109.008754][T23184] netlink: zone id is out of range [ 2109.008758][T23184] netlink: zone id is out of range [ 2109.008762][T23184] netlink: zone id is out of range [ 2109.008766][T23184] netlink: zone id is out of range [ 2109.008772][T23184] netlink: zone id is out of range [ 2109.008776][T23184] netlink: zone id is out of range [ 2109.008780][T23184] netlink: zone id is out of range [ 2109.008784][T23184] netlink: zone id is out of range [ 2109.891689][T23185] xt_NETMAP: bad MAP_IPS. [ 2109.915232][T17801] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 2110.081336][T17801] usb 1-1: Using ep0 maxpacket: 16 [ 2110.084720][T17801] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=30.00 [ 2110.088037][T17801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2110.124931][T17801] usb 1-1: config 0 descriptor?? [ 2110.128806][T17801] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 2110.159288][T17801] usb 1-1: Detected FT2232HP [ 2110.392866][T17801] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 2111.570626][T17801] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2111.573336][T17801] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2111.597682][T17801] usb 1-1: USB disconnect, device number 45 [ 2111.616174][T17801] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2111.616403][T17801] ftdi_sio 1-1:0.0: device disconnected [ 2113.448319][T23208] xt_NETMAP: bad MAP_IPS. [ 2114.560687][T23223] net_ratelimit: 147 callbacks suppressed [ 2114.560708][T23223] ip_tables: iptables: counters copy to user failed while replacing table [ 2115.316702][T23227] xt_NETMAP: bad MAP_IPS. [ 2115.332259][ T8540] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 2115.363439][ T31] audit: type=1326 audit(1792233176.532:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23220 comm="syz.4.4005" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f778439e559 code=0x0 [ 2115.481733][ T8540] usb 1-1: Using ep0 maxpacket: 32 [ 2115.482750][ T8540] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 2115.483561][ T8540] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2115.483574][ T8540] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2115.485182][ T8540] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2115.485197][ T8540] usb 1-1: Product: syz [ 2115.485206][ T8540] usb 1-1: Manufacturer: syz [ 2115.485214][ T8540] usb 1-1: SerialNumber: syz [ 2115.490738][ T8540] usb 1-1: config 0 descriptor?? [ 2116.145339][ T8540] usb 1-1: USB disconnect, device number 46 [ 2116.979371][T23244] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4012'. [ 2116.993437][T23244] tipc: Enabling of bearer rejected, already enabled [ 2117.010224][ T5690] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 2117.655931][ T5690] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2117.656299][ T5690] usb 5-1: not running at top speed; connect to a high speed hub [ 2117.656316][ T5690] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2117.657022][ T5690] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2117.657036][ T5690] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2117.659076][ T5690] usb 5-1: string descriptor 0 read error: -22 [ 2117.659130][ T5690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2117.740757][ T5690] usb 5-1: 0:2 : does not exist [ 2117.759985][T21832] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 2117.910072][T21832] usb 3-1: Using ep0 maxpacket: 16 [ 2117.912619][T21832] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=30.00 [ 2117.928976][T21832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2117.940130][T21832] usb 3-1: config 0 descriptor?? [ 2117.948518][T21832] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 2117.971803][T21832] usb 3-1: Detected FT2232HP [ 2118.130221][T11844] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 2118.149571][T21832] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 2118.231018][T23255] FAULT_INJECTION: forcing a failure. [ 2118.231018][T23255] name failslab, interval 1, probability 0, space 0, times 0 [ 2118.231040][T23255] CPU: 0 UID: 0 PID: 23255 Comm: syz.1.4017 Tainted: G L syzkaller #0 PREEMPT(full) [ 2118.231056][T23255] Tainted: [L]=SOFTLOCKUP [ 2118.231065][T23255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2118.231072][T23255] Call Trace: [ 2118.231076][T23255] [ 2118.231081][T23255] dump_stack_lvl+0x100/0x190 [ 2118.231107][T23255] should_fail_ex.cold+0x5/0xa [ 2118.231125][T23255] should_failslab+0xc2/0x120 [ 2118.231143][T23255] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 2118.231158][T23255] ? __alloc_skb+0x140/0x710 [ 2118.231174][T23255] __alloc_skb+0x140/0x710 [ 2118.231183][T23255] ? __alloc_skb+0x5b7/0x710 [ 2118.231194][T23255] ? __pfx___alloc_skb+0x10/0x10 [ 2118.231209][T23255] _sctp_make_chunk+0x51/0x270 [ 2118.231226][T23255] sctp_make_control+0x2f/0x2d0 [ 2118.231242][T23255] sctp_make_heartbeat+0xad/0x2f0 [ 2118.231258][T23255] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 2118.231274][T23255] ? kernel_text_address+0x8d/0x100 [ 2118.231288][T23255] ? sctp_sm_lookup_event+0x10e/0x520 [ 2118.231304][T23255] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 2118.231320][T23255] ? __pfx_sctp_pname+0x10/0x10 [ 2118.231335][T23255] sctp_sf_do_prm_requestheartbeat+0x27/0x220 [ 2118.231350][T23255] ? __pfx_sctp_pname+0x10/0x10 [ 2118.231365][T23255] sctp_do_sm+0x17a/0x5c30 [ 2118.231381][T23255] ? __lock_acquire+0x5c0/0x1f40 [ 2118.231393][T23255] ? _parse_integer_limit+0x1ac/0x220 [ 2118.231408][T23255] ? __pfx_sctp_do_sm+0x10/0x10 [ 2118.231421][T23255] ? kasan_save_track+0x14/0x30 [ 2118.231436][T23255] ? __kmalloc_node_track_caller_noprof+0x33d/0x870 [ 2118.231450][T23255] ? sctp_setsockopt+0x511/0xb370 [ 2118.231463][T23255] ? do_sock_setsockopt+0xf3/0x1d0 [ 2118.231475][T23255] ? __sys_setsockopt+0x195/0x220 [ 2118.231485][T23255] ? __x64_sys_setsockopt+0xbd/0x160 [ 2118.231516][T23255] sctp_primitive_REQUESTHEARTBEAT+0x9f/0xd0 [ 2118.231534][T23255] sctp_apply_peer_addr_params+0x110/0x3690 [ 2118.231556][T23255] sctp_setsockopt+0x28d6/0xb370 [ 2118.231573][T23255] ? __pfx_sctp_setsockopt+0x10/0x10 [ 2118.231585][T23255] ? __fget_files+0x215/0x3d0 [ 2118.231604][T23255] ? selinux_socket_setsockopt+0x6a/0x80 [ 2118.231618][T23255] ? sock_common_setsockopt+0x2e/0xf0 [ 2118.231631][T23255] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2118.231647][T23255] do_sock_setsockopt+0xf3/0x1d0 [ 2118.231662][T23255] __sys_setsockopt+0x195/0x220 [ 2118.231676][T23255] __x64_sys_setsockopt+0xbd/0x160 [ 2118.231687][T23255] ? do_syscall_64+0xae/0x790 [ 2118.231703][T23255] ? lockdep_hardirqs_on+0x7d/0x110 [ 2118.231718][T23255] do_syscall_64+0x123/0x790 [ 2118.231736][T23255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2118.231747][T23255] RIP: 0033:0x7f03e119e559 [ 2118.231757][T23255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2118.231768][T23255] RSP: 002b:00007f03e2000028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2118.231780][T23255] RAX: ffffffffffffffda RBX: 00007f03e1425fa0 RCX: 00007f03e119e559 [ 2118.231787][T23255] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 2118.231794][T23255] RBP: 00007f03e2000090 R08: 000000000000009c R09: 0000000000000000 [ 2118.231800][T23255] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 2118.231807][T23255] R13: 00007f03e1426038 R14: 00007f03e1425fa0 R15: 00007ffc3b19e918 [ 2118.231822][T23255] [ 2118.380585][T11844] usb 1-1: Using ep0 maxpacket: 8 [ 2118.506490][T11844] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2118.576527][T11844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2118.576554][T11844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2118.653525][T11844] usb 1-1: config 0 descriptor?? [ 2118.680630][T21832] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2118.681432][T21832] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2118.710911][T21832] usb 3-1: USB disconnect, device number 86 [ 2118.717245][T21832] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2118.718268][T21832] ftdi_sio 3-1:0.0: device disconnected [ 2119.613208][T23252] busy [ 2119.626938][T11844] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2119.651002][T11844] usb 1-1: USB disconnect, device number 47 [ 2119.653110][T23240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2119.653332][T23240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2119.901638][ T5690] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 2119.925147][ T5690] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2119.938338][ T5690] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 2120.001101][ T5690] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2120.067684][ T5690] usb 5-1: USB disconnect, device number 48 [ 2121.250477][ T31] audit: type=1326 audit(1792233182.422:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23273 comm="syz.1.4022" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03e119e559 code=0x0 [ 2122.308481][T23283] FAULT_INJECTION: forcing a failure. [ 2122.308481][T23283] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2122.308505][T23283] CPU: 0 UID: 0 PID: 23283 Comm: syz.4.4025 Tainted: G L syzkaller #0 PREEMPT(full) [ 2122.308522][T23283] Tainted: [L]=SOFTLOCKUP [ 2122.308527][T23283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2122.308535][T23283] Call Trace: [ 2122.308539][T23283] [ 2122.308545][T23283] dump_stack_lvl+0x100/0x190 [ 2122.308566][T23283] should_fail_ex.cold+0x5/0xa [ 2122.308583][T23283] get_futex_key+0x1d0/0x14f0 [ 2122.308603][T23283] ? __pfx_get_futex_key+0x10/0x10 [ 2122.308625][T23283] futex_wake+0xf4/0x5e0 [ 2122.308639][T23283] ? __pfx_futex_wake+0x10/0x10 [ 2122.308650][T23283] ? kasan_quarantine_put+0x104/0x240 [ 2122.308667][T23283] ? putname+0xb1/0x110 [ 2122.308676][T23283] ? kmem_cache_free+0x127/0x6c0 [ 2122.308692][T23283] do_futex+0x2b2/0x440 [ 2122.308711][T23283] ? __pfx_do_futex+0x10/0x10 [ 2122.308726][T23283] ? __pfx_do_sys_openat2+0x10/0x10 [ 2122.308741][T23283] __x64_sys_futex+0x34f/0x4d0 [ 2122.308758][T23283] ? __x64_sys_openat+0x12d/0x210 [ 2122.308770][T23283] ? __pfx___x64_sys_futex+0x10/0x10 [ 2122.308792][T23283] do_syscall_64+0x123/0x790 [ 2122.308810][T23283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2122.308822][T23283] RIP: 0033:0x7f778439e559 [ 2122.308832][T23283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2122.308843][T23283] RSP: 002b:00007f77852720e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2122.308856][T23283] RAX: ffffffffffffffda RBX: 00007f7784625fa8 RCX: 00007f778439e559 [ 2122.308863][T23283] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7784625fac [ 2122.308870][T23283] RBP: 00007f7784625fa0 R08: 0000000000000001 R09: 0000000000000000 [ 2122.308878][T23283] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 2122.308884][T23283] R13: 00007f7784626038 R14: 00007ffc81bd4090 R15: 00007ffc81bd4178 [ 2122.308900][T23283] [ 2123.662506][T23283] PKCS7: Unknown OID: [29] 1.2.137.0.0.0.401 [ 2123.662531][T23283] PKCS7: Unknown OID: [98] 1.2.156.10197.1(bad) [ 2123.662538][T23283] Unsupported digest algo: 106 [ 2123.827439][T23295] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4030'. [ 2123.850269][T23295] tipc: Enabling of bearer rejected, already enabled [ 2123.889539][ T31] audit: type=1400 audit(1792233185.052:1590): avc: denied { write } for pid=23296 comm="syz.4.4031" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2125.043964][T21832] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 2125.189842][T21832] usb 3-1: Using ep0 maxpacket: 16 [ 2125.190431][T21832] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=30.00 [ 2125.191165][T21832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2125.192461][T21832] usb 3-1: config 0 descriptor?? [ 2125.258347][T21832] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 2125.258880][T21832] usb 3-1: Detected FT2232HP [ 2125.397891][T21832] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 2125.408401][ T5690] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 2125.571705][ T5690] usb 1-1: Using ep0 maxpacket: 8 [ 2125.572163][ T5690] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2125.572978][ T5690] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 2125.573001][ T5690] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2125.573013][ T5690] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2125.573025][ T5690] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2125.573037][ T5690] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2125.573058][ T5690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2125.682452][T21832] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2125.685850][T21832] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2125.713292][T21832] usb 3-1: USB disconnect, device number 87 [ 2125.728376][T21832] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2125.728638][T21832] ftdi_sio 3-1:0.0: device disconnected [ 2125.783064][ T5690] usb 1-1: GET_CAPABILITIES returned 0 [ 2125.783089][ T5690] usbtmc 1-1:16.0: can't read capabilities [ 2126.690846][ T5690] usb 1-1: USB disconnect, device number 48 [ 2126.888468][ T31] audit: type=1400 audit(1792233188.052:1591): avc: denied { read } for pid=23316 comm="syz.1.4035" name="exports" dev="nfsd" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 2126.888780][ T31] audit: type=1400 audit(1792233188.052:1592): avc: denied { ioctl } for pid=23316 comm="syz.1.4035" path="/201/nfsd/exports" dev="nfsd" ino=2 ioctlcmd=0x5418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 2126.889106][ T31] audit: type=1400 audit(1792233188.052:1593): avc: denied { create } for pid=23316 comm="syz.1.4035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2127.049595][ T31] audit: type=1400 audit(1792233188.212:1594): avc: denied { accept } for pid=23316 comm="syz.1.4035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2127.071762][ T31] audit: type=1400 audit(1792233188.242:1595): avc: denied { create } for pid=23320 comm="syz.0.4037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2127.110851][ T31] audit: type=1400 audit(1792233188.272:1596): avc: denied { ioctl } for pid=23320 comm="syz.0.4037" path="socket:[75307]" dev="sockfs" ino=75307 ioctlcmd=0x89ec scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2127.518001][ T5690] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 2127.910073][ T5690] usb 1-1: Using ep0 maxpacket: 16 [ 2128.005445][ T5690] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 2128.217525][ T5690] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 2128.217545][ T5690] usb 1-1: config 1 has no interface number 0 [ 2128.217564][ T5690] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2128.217578][ T5690] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2128.217592][ T5690] usb 1-1: config 1 interface 105 has no altsetting 0 [ 2128.316447][ T5690] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2128.316465][ T5690] usb 1-1: Product: syz [ 2128.316474][ T5690] usb 1-1: Manufacturer: syz [ 2128.316482][ T5690] usb 1-1: SerialNumber: syz [ 2128.331229][T23322] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2128.331299][T23322] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2128.854895][T23322] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2128.854951][T23322] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2129.058910][ T5690] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 0 [ 2129.059052][ T5690] aqc111 1-1:1.105: probe with driver aqc111 failed with error -61 [ 2129.406223][T23344] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2130.358474][ T8540] usb 1-1: USB disconnect, device number 49 [ 2130.591042][T23359] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4048'. [ 2130.598219][T23359] tipc: Enabling of bearer rejected, already enabled [ 2130.989878][ T8540] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 2131.140041][ T8540] usb 1-1: Using ep0 maxpacket: 16 [ 2131.140504][ T8540] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=30.00 [ 2131.141312][ T8540] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2131.143772][ T8540] usb 1-1: config 0 descriptor?? [ 2131.183160][ T8540] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 2131.185967][ T8540] usb 1-1: Detected FT2232HP [ 2131.361186][ T8540] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 2132.300660][ T8540] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2132.303577][ T8540] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2132.332089][ T8540] usb 1-1: USB disconnect, device number 50 [ 2132.347514][ T8540] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2132.360222][ T8540] ftdi_sio 1-1:0.0: device disconnected [ 2132.860395][ T5690] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 2133.010313][ T5690] usb 3-1: Using ep0 maxpacket: 8 [ 2133.011417][ T5690] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2133.012346][ T5690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2133.012370][ T5690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2133.015698][ T5690] usb 3-1: config 0 descriptor?? [ 2133.244281][ T8540] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 2134.033677][ T5690] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2134.060635][ T5690] usb 3-1: USB disconnect, device number 88 [ 2134.110923][ T8540] usb 1-1: Using ep0 maxpacket: 8 [ 2134.111371][ T8540] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2134.127769][ T8540] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2134.127788][ T8540] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2134.127800][ T8540] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2134.127815][ T8540] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2134.127833][ T8540] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2134.190807][ T8540] usb 1-1: config 0 descriptor?? [ 2134.326128][T23388] syzkaller0: entered promiscuous mode [ 2134.326158][T23388] syzkaller0: entered allmulticast mode [ 2134.609571][ T8540] usbhid 1-1:0.0: can't add hid device: -71 [ 2134.609625][ T8540] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2134.632251][ T8540] usb 1-1: USB disconnect, device number 51 [ 2134.869621][ T31] audit: type=1326 audit(1792233196.032:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23395 comm="syz.3.4061" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe7a39e559 code=0x0 [ 2135.645152][T23402] xt_NETMAP: bad MAP_IPS. [ 2137.101937][T11844] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 2137.136793][T23424] FAULT_INJECTION: forcing a failure. [ 2137.136793][T23424] name failslab, interval 1, probability 0, space 0, times 0 [ 2137.136815][T23424] CPU: 0 UID: 0 PID: 23424 Comm: syz.1.4069 Tainted: G L syzkaller #0 PREEMPT(full) [ 2137.136831][T23424] Tainted: [L]=SOFTLOCKUP [ 2137.136835][T23424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2137.136842][T23424] Call Trace: [ 2137.136846][T23424] [ 2137.136851][T23424] dump_stack_lvl+0x100/0x190 [ 2137.136871][T23424] should_fail_ex.cold+0x5/0xa [ 2137.136887][T23424] should_failslab+0xc2/0x120 [ 2137.136904][T23424] kmem_cache_alloc_noprof+0x92/0x6a0 [ 2137.136920][T23424] ? alloc_empty_file+0x5b/0x1c0 [ 2137.136933][T23424] alloc_empty_file+0x5b/0x1c0 [ 2137.136944][T23424] path_openat+0xdb/0x2450 [ 2137.136963][T23424] ? __pfx_path_openat+0x10/0x10 [ 2137.136979][T23424] ? stack_trace_save+0x8e/0xc0 [ 2137.136999][T23424] ? __pfx_stack_trace_save+0x10/0x10 [ 2137.137013][T23424] do_file_open+0x20e/0x430 [ 2137.137031][T23424] ? __pfx_do_file_open+0x10/0x10 [ 2137.137046][T23424] ? kasan_save_track+0x14/0x30 [ 2137.137060][T23424] ? __kasan_slab_alloc+0x89/0x90 [ 2137.137075][T23424] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 2137.137105][T23424] do_open_execat+0xd1/0x360 [ 2137.137119][T23424] ? __pfx_do_open_execat+0x10/0x10 [ 2137.137134][T23424] ? __might_fault+0xc5/0x140 [ 2137.137145][T23424] ? __might_fault+0xc5/0x140 [ 2137.137159][T23424] alloc_bprm+0x2d/0x9e0 [ 2137.137174][T23424] do_execveat_common.isra.0+0x19c/0x580 [ 2137.137189][T23424] ? do_getname+0x191/0x390 [ 2137.137202][T23424] __x64_sys_execveat+0xdf/0x130 [ 2137.137218][T23424] do_syscall_64+0x123/0x790 [ 2137.137236][T23424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2137.137248][T23424] RIP: 0033:0x7f03e119e559 [ 2137.137258][T23424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2137.137269][T23424] RSP: 002b:00007f03e2000028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2137.137281][T23424] RAX: ffffffffffffffda RBX: 00007f03e1425fa0 RCX: 00007f03e119e559 [ 2137.137288][T23424] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2137.137295][T23424] RBP: 00007f03e2000090 R08: 0000000000001000 R09: 0000000000000000 [ 2137.137301][T23424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2137.137308][T23424] R13: 00007f03e1426038 R14: 00007f03e1425fa0 R15: 00007ffc3b19e918 [ 2137.137323][T23424] [ 2137.323354][T11844] usb 1-1: Using ep0 maxpacket: 32 [ 2137.328091][T11844] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 2137.359826][T11844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2137.359842][T11844] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2137.435717][T11844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2137.435734][T11844] usb 1-1: Product: syz [ 2137.435743][T11844] usb 1-1: Manufacturer: syz [ 2137.435752][T11844] usb 1-1: SerialNumber: syz [ 2137.473109][T11844] usb 1-1: config 0 descriptor?? [ 2137.588809][ T31] audit: type=1400 audit(1792233198.752:1598): avc: denied { listen } for pid=23425 comm="syz.2.4070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2137.684938][T11844] usb 1-1: USB disconnect, device number 52 [ 2137.827504][ T31] audit: type=1326 audit(1792233198.992:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23435 comm="syz.1.4073" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03e119e559 code=0x0 [ 2137.964439][ T31] audit: type=1326 audit(1792233199.132:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23446 comm="syz.2.4075" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57c139e559 code=0x0 [ 2138.049814][ T8540] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 2138.170518][T11844] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 2138.199797][ T8540] usb 5-1: Using ep0 maxpacket: 8 [ 2138.200258][ T8540] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2138.201087][ T8540] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2138.201103][ T8540] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 2138.201118][ T8540] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2138.201132][ T8540] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2138.201149][ T8540] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2138.202416][ T8540] usb 5-1: config 0 descriptor?? [ 2138.203153][T23433] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2138.343880][T11844] usb 4-1: Using ep0 maxpacket: 8 [ 2138.364540][T11844] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2138.546120][T11844] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2138.546155][T11844] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2138.546168][T11844] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2138.546183][T11844] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2138.546201][T11844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2139.004963][T11844] usb 4-1: config 0 descriptor?? [ 2139.335024][ T8540] input: HID 1b1c:1b3e as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:1B1C:1B3E.005D/input/input251 [ 2139.375980][T23451] syz.0.4076 (23451): drop_caches: 2 [ 2139.379249][ T8540] corsair 0003:1B1C:1B3E.005D: input,hidraw0: USB HID v0.00 Joystick [HID 1b1c:1b3e] on usb-dummy_hcd.4-1/input0 [ 2140.461527][T23439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2140.461752][T23439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2140.573420][T11844] usbhid 4-1:0.0: can't add hid device: -71 [ 2140.573474][T11844] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2140.578520][T11844] usb 4-1: USB disconnect, device number 77 [ 2140.811484][ T8540] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 2140.960000][ T8540] usb 2-1: Using ep0 maxpacket: 8 [ 2140.960900][ T8540] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2140.961691][ T8540] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2140.961715][ T8540] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2140.961728][ T8540] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2140.961740][ T8540] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2140.961752][ T8540] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2140.961772][ T8540] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2141.168402][ T8540] usb 2-1: GET_CAPABILITIES returned 0 [ 2141.168426][ T8540] usbtmc 2-1:16.0: can't read capabilities [ 2141.314911][T17801] usb 5-1: USB disconnect, device number 49 [ 2141.589811][T11844] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 2141.743726][T11844] usb 4-1: Using ep0 maxpacket: 8 [ 2141.744266][T11844] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2141.745030][T11844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2141.745081][T11844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2141.748615][T11844] usb 4-1: config 0 descriptor?? [ 2142.707874][T11844] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 2142.751062][T11844] usb 4-1: USB disconnect, device number 78 [ 2142.796058][T17801] usb 2-1: USB disconnect, device number 48 [ 2143.784832][T23487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4085'. [ 2143.784856][T23487] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4085'. [ 2144.098254][T17801] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 2144.270750][ T5690] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 2144.370792][T17801] usb 3-1: Using ep0 maxpacket: 32 [ 2144.393315][T17801] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 2144.456593][T17801] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 2144.456612][T17801] usb 3-1: config 0 has no interface number 0 [ 2144.456632][T17801] usb 3-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2144.456644][T17801] usb 3-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 2144.456659][T17801] usb 3-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2144.456673][T17801] usb 3-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2144.706140][T17801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2144.706157][T17801] usb 3-1: Product: syz [ 2144.706166][T17801] usb 3-1: Manufacturer: syz [ 2144.706175][T17801] usb 3-1: SerialNumber: syz [ 2144.834393][ T5690] usb 5-1: Using ep0 maxpacket: 8 [ 2144.878642][ T5690] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2144.906596][ T5690] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2144.906612][ T5690] usb 5-1: config 0 has no interfaces? [ 2144.906629][ T5690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2144.924955][T17801] usb 3-1: config 0 descriptor?? [ 2144.945628][ T5690] usb 5-1: config 0 descriptor?? [ 2144.966716][T17801] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input252 [ 2145.009676][T23494] syz.1.4089 (23494): drop_caches: 2 [ 2145.169691][T17801] usb 3-1: USB disconnect, device number 89 [ 2145.169735][ C0] bcm5974 3-1:0.119: trackpad urb failed: -19 [ 2145.764295][ T5690] usb 5-1: USB disconnect, device number 50 [ 2147.841064][T23510] xt_NETMAP: bad MAP_IPS. [ 2147.860866][ T5690] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 2148.010589][ T5690] usb 3-1: Using ep0 maxpacket: 8 [ 2148.011038][ T5690] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2148.016695][ T5690] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2148.016714][ T5690] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2148.016726][ T5690] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2148.016742][ T5690] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2148.016759][ T5690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2148.019295][ T5690] usb 3-1: config 0 descriptor?? [ 2148.178343][T23516] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4091'. [ 2148.287362][T23516] dummy0: left promiscuous mode [ 2148.492492][T23525] loop5: detected capacity change from 0 to 7 [ 2148.496097][T23525] Dev loop5: unable to read RDB block 7 [ 2148.496138][T23525] loop5: unable to read partition table [ 2148.496221][T23525] loop5: partition table beyond EOD, truncated [ 2148.496232][T23525] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2148.549502][ T5690] usbhid 3-1:0.0: can't add hid device: -71 [ 2148.549555][ T5690] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2148.568493][ T5690] usb 3-1: USB disconnect, device number 90 [ 2148.606261][T23525] Dev loop5: unable to read RDB block 7 [ 2148.606283][T23525] loop5: unable to read partition table [ 2148.606366][T23525] loop5: partition table beyond EOD, truncated [ 2148.606376][T23525] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2149.666242][T23530] syz.0.4100 (23530): drop_caches: 2 [ 2151.174672][T23541] xt_NETMAP: bad MAP_IPS. [ 2152.370608][T23545] syz.4.4102 (23545): drop_caches: 2 [ 2152.413040][ T31] audit: type=1400 audit(1792233213.572:1601): avc: denied { read write } for pid=23551 comm="syz.1.4104" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2152.413070][ T31] audit: type=1400 audit(1792233213.572:1602): avc: denied { open } for pid=23551 comm="syz.1.4104" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2152.486916][T17801] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 2152.650466][T17801] usb 1-1: Using ep0 maxpacket: 8 [ 2152.650917][T17801] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2152.651628][T17801] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2152.651641][T17801] usb 1-1: config 0 has no interfaces? [ 2152.651656][T17801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2152.658726][T17801] usb 1-1: config 0 descriptor?? [ 2152.849846][T21832] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 2152.915767][T23561] ip_tables: iptables: counters copy to user failed while replacing table [ 2153.484662][ T8540] usb 1-1: USB disconnect, device number 53 [ 2153.569944][T21832] usb 2-1: Using ep0 maxpacket: 32 [ 2153.570721][T21832] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 2153.571710][T21832] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2153.571724][T21832] usb 2-1: config 0 has no interface number 0 [ 2153.574722][T21832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2153.574735][T21832] usb 2-1: Product: syz [ 2153.574742][T21832] usb 2-1: Manufacturer: syz [ 2153.574750][T21832] usb 2-1: SerialNumber: syz [ 2153.577424][T21832] usb 2-1: config 0 descriptor?? [ 2153.646406][T21832] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2153.646424][T21832] usb 2-1: selecting invalid altsetting 1 [ 2153.646433][T21832] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2153.689085][T21832] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2153.689214][T21832] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2153.689235][T21832] usb 2-1: media controller created [ 2153.739078][T21832] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2153.892066][ T31] audit: type=1400 audit(1792233215.062:1603): avc: denied { read } for pid=23551 comm="syz.1.4104" name="transactions" dev="binder" ino=1049373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2153.892099][ T31] audit: type=1400 audit(1792233215.062:1604): avc: denied { open } for pid=23551 comm="syz.1.4104" path="/dev/binderfs/binder_logs/transactions" dev="binder" ino=1049373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2153.892644][ T31] audit: type=1400 audit(1792233215.062:1605): avc: denied { ioctl } for pid=23551 comm="syz.1.4104" path="/dev/binderfs/binder_logs/transactions" dev="binder" ino=1049373 ioctlcmd=0xaa03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2154.778569][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 2154.778600][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 2154.882910][T21832] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 2154.884268][T21832] zl10353_read_register: readreg error (reg=127, ret==-110) [ 2154.952858][T23553] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 2155.134346][T21832] usb 2-1: USB disconnect, device number 49 [ 2155.161138][T17801] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 2155.310595][T17801] usb 3-1: Using ep0 maxpacket: 8 [ 2155.311042][T17801] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2155.311843][T17801] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 2155.311867][T17801] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2155.311880][T17801] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2155.311893][T17801] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2155.311906][T17801] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2155.311933][T17801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2155.520929][T17801] usb 3-1: GET_CAPABILITIES returned 0 [ 2155.520957][T17801] usbtmc 3-1:16.0: can't read capabilities [ 2155.747212][ T31] audit: type=1400 audit(1792233216.912:1606): avc: denied { unmount } for pid=18504 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 2156.727834][T23585] syz.1.4113 (23585): drop_caches: 2 [ 2157.092058][T17801] usb 3-1: USB disconnect, device number 91 [ 2157.678373][ T31] audit: type=1400 audit(1792233218.842:1607): avc: denied { write } for pid=23586 comm="syz.3.4114" name="usb_gadget" dev="configfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2157.709550][ T31] audit: type=1400 audit(1792233218.872:1608): avc: denied { add_name } for pid=23586 comm="syz.3.4114" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2157.748039][ T31] audit: type=1400 audit(1792233218.912:1609): avc: denied { write } for pid=23586 comm="syz.3.4114" name="target" dev="configfs" ino=3476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2157.748071][ T31] audit: type=1400 audit(1792233218.912:1610): avc: denied { create } for pid=23586 comm="syz.3.4114" name="usb_gadget" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 2157.805178][T23594] syz.4.4115 (23594): drop_caches: 2 [ 2158.222404][T23610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2158.757928][ T31] audit: type=1400 audit(1792233219.922:1611): avc: denied { cmd } for pid=23626 comm="iou-wrk-23627" path="socket:[76975]" dev="sockfs" ino=76975 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2160.152300][T23639] syz.2.4128 (23639): drop_caches: 2 [ 2160.344380][ T31] audit: type=1400 audit(1792233221.512:1612): avc: denied { mount } for pid=23648 comm="syz.0.4130" name="/" dev="ramfs" ino=77120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 2160.394746][T23653] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2160.424336][ T31] audit: type=1400 audit(1792233221.592:1613): avc: denied { mounton } for pid=23648 comm="syz.0.4130" path="/file0" dev="ramfs" ino=77126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 2160.477038][T23650] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2160.477056][T23650] overlayfs: failed to set xattr on upper [ 2160.477060][T23650] overlayfs: ...falling back to redirect_dir=nofollow. [ 2160.477065][T23650] overlayfs: ...falling back to index=off. [ 2160.477069][T23650] overlayfs: ...falling back to uuid=null. [ 2160.527687][T23656] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 2160.778040][T23665] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4136'. [ 2161.287897][T23676] FAULT_INJECTION: forcing a failure. [ 2161.287897][T23676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2161.287919][T23676] CPU: 0 UID: 0 PID: 23676 Comm: syz.4.4139 Tainted: G L syzkaller #0 PREEMPT(full) [ 2161.287934][T23676] Tainted: [L]=SOFTLOCKUP [ 2161.287938][T23676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2161.287945][T23676] Call Trace: [ 2161.287950][T23676] [ 2161.287955][T23676] dump_stack_lvl+0x100/0x190 [ 2161.287975][T23676] should_fail_ex.cold+0x5/0xa [ 2161.287991][T23676] _copy_to_user+0x32/0xd0 [ 2161.288012][T23676] simple_read_from_buffer+0xcb/0x170 [ 2161.288030][T23676] proc_fail_nth_read+0x1af/0x230 [ 2161.288049][T23676] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2161.288066][T23676] ? rw_verify_area+0xce/0x6d0 [ 2161.288079][T23676] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2161.288095][T23676] vfs_read+0x1e4/0xb40 [ 2161.288115][T23676] ? lock_acquire+0x1d1/0x380 [ 2161.288128][T23676] ? __fget_files+0x34/0x3d0 [ 2161.288144][T23676] ? __pfx_vfs_read+0x10/0x10 [ 2161.288156][T23676] ? find_held_lock+0x2b/0x80 [ 2161.288173][T23676] ? __fget_files+0x215/0x3d0 [ 2161.288192][T23676] ? __fget_files+0x21f/0x3d0 [ 2161.288212][T23676] ksys_read+0x12a/0x250 [ 2161.288226][T23676] ? __pfx_ksys_read+0x10/0x10 [ 2161.288244][T23676] do_syscall_64+0x123/0x790 [ 2161.288262][T23676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2161.288274][T23676] RIP: 0033:0x7f778435ed8e [ 2161.288284][T23676] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2161.288295][T23676] RSP: 002b:00007f7785271fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2161.288306][T23676] RAX: ffffffffffffffda RBX: 00007f77852726c0 RCX: 00007f778435ed8e [ 2161.288313][T23676] RDX: 000000000000000f RSI: 00007f77852720a0 RDI: 0000000000000004 [ 2161.288320][T23676] RBP: 00007f7785272090 R08: 0000000000000000 R09: 0000000000000000 [ 2161.288327][T23676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2161.288334][T23676] R13: 00007f7784626038 R14: 00007f7784625fa0 R15: 00007ffc81bd4178 [ 2161.288349][T23676] [ 2161.362983][T11844] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 2161.603953][T11844] usb 3-1: Using ep0 maxpacket: 8 [ 2161.605726][T11844] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2161.609963][T11844] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2161.609982][T11844] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 2161.609997][T11844] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2161.610012][T11844] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2161.610028][T11844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2161.672907][T11844] usb 3-1: config 0 descriptor?? [ 2161.691425][T23669] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2162.680064][T23688] FAULT_INJECTION: forcing a failure. [ 2162.680064][T23688] name failslab, interval 1, probability 0, space 0, times 0 [ 2162.680087][T23688] CPU: 0 UID: 0 PID: 23688 Comm: syz.1.4141 Tainted: G L syzkaller #0 PREEMPT(full) [ 2162.680108][T23688] Tainted: [L]=SOFTLOCKUP [ 2162.680112][T23688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2162.680119][T23688] Call Trace: [ 2162.680124][T23688] [ 2162.680130][T23688] dump_stack_lvl+0x100/0x190 [ 2162.680150][T23688] should_fail_ex.cold+0x5/0xa [ 2162.680167][T23688] should_failslab+0xc2/0x120 [ 2162.680184][T23688] __kmalloc_noprof+0xfc/0x840 [ 2162.680198][T23688] ? is_bpf_text_address+0x25/0x1a0 [ 2162.680215][T23688] ? iovec_from_user+0x8d/0x140 [ 2162.680234][T23688] iovec_from_user+0x8d/0x140 [ 2162.680253][T23688] __import_iovec+0x81/0x640 [ 2162.680268][T23688] ? pti_set_user_pgtbl+0x50/0x50 [ 2162.680280][T23688] ? __might_fault+0xc5/0x140 [ 2162.680293][T23688] import_iovec+0x101/0x130 [ 2162.680312][T23688] copy_msghdr_from_user+0x2c6/0x4c0 [ 2162.680329][T23688] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2162.680346][T23688] ? _kstrtoull+0x144/0x200 [ 2162.680358][T23688] ? __pfx__kstrtoull+0x10/0x10 [ 2162.680372][T23688] ___sys_sendmsg+0x106/0x1e0 [ 2162.680388][T23688] ? __pfx____sys_sendmsg+0x10/0x10 [ 2162.680410][T23688] ? __fget_files+0x34/0x3d0 [ 2162.680437][T23688] __sys_sendmmsg+0x20c/0x440 [ 2162.680451][T23688] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2162.680462][T23688] ? ksys_write+0x190/0x250 [ 2162.680487][T23688] ? fput+0x7c/0x100 [ 2162.680503][T23688] ? ksys_write+0x1ac/0x250 [ 2162.680516][T23688] ? __pfx_ksys_write+0x10/0x10 [ 2162.680532][T23688] __x64_sys_sendmmsg+0x9c/0x100 [ 2162.680544][T23688] ? lockdep_hardirqs_on+0x7d/0x110 [ 2162.680560][T23688] do_syscall_64+0x123/0x790 [ 2162.680578][T23688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2162.680589][T23688] RIP: 0033:0x7f03e119e559 [ 2162.680600][T23688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2162.680611][T23688] RSP: 002b:00007f03e1fbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2162.680623][T23688] RAX: ffffffffffffffda RBX: 00007f03e1426180 RCX: 00007f03e119e559 [ 2162.680630][T23688] RDX: 0400000000000172 RSI: 0000200000001780 RDI: 0000000000000007 [ 2162.680637][T23688] RBP: 00007f03e1fbe090 R08: 0000000000000000 R09: 0000000000000000 [ 2162.680644][T23688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2162.680650][T23688] R13: 00007f03e1426218 R14: 00007f03e1426180 R15: 00007ffc3b19e918 [ 2162.680665][T23688] [ 2163.064358][T11844] input: HID 1b1c:1b3e as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:1B1C:1B3E.005E/input/input253 [ 2163.113274][T11844] corsair 0003:1B1C:1B3E.005E: input,hidraw0: USB HID v0.00 Joystick [HID 1b1c:1b3e] on usb-dummy_hcd.2-1/input0 [ 2164.142302][T11844] usb 3-1: USB disconnect, device number 92 [ 2164.172818][ T31] audit: type=1400 audit(1792233225.342:1614): avc: denied { write } for pid=23673 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2164.216999][T23694] syz.1.4143 (23694): drop_caches: 2 [ 2164.218383][T23696] fido_id[23696]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 2164.457846][ T31] audit: type=1400 audit(1792233225.622:1615): avc: denied { write } for pid=23710 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2164.585042][T23712] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2164.585057][T23712] overlayfs: failed to set xattr on upper [ 2164.585062][T23712] overlayfs: ...falling back to redirect_dir=nofollow. [ 2164.585067][T23712] overlayfs: ...falling back to index=off. [ 2164.585071][T23712] overlayfs: ...falling back to uuid=null. [ 2164.626502][T23715] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2164.644063][T23712] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 2164.878684][ T31] audit: type=1326 audit(1792233226.042:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23725 comm="syz.3.4150" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe7a39e559 code=0x0 [ 2165.001038][T11844] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 2165.936872][T23743] xt_NETMAP: bad MAP_IPS. [ 2165.981135][T11844] usb 1-1: Using ep0 maxpacket: 8 [ 2165.981538][T11844] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2165.982279][T11844] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2165.982296][T11844] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 2165.982311][T11844] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2165.982326][T11844] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2165.982342][T11844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2165.983600][T11844] usb 1-1: config 0 descriptor?? [ 2165.984305][T23717] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2167.186604][T11844] input: HID 1b1c:1b3e as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:1B1C:1B3E.005F/input/input254 [ 2167.243256][T11844] corsair 0003:1B1C:1B3E.005F: input,hidraw0: USB HID v0.00 Joystick [HID 1b1c:1b3e] on usb-dummy_hcd.0-1/input0 [ 2168.110359][T23717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2168.110571][T23717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2168.169268][T11844] usb 1-1: USB disconnect, device number 54 [ 2168.209073][T23756] fido_id[23756]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 2168.261620][ T31] audit: type=1400 audit(1792233229.432:1617): avc: denied { write } for pid=23727 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2168.429932][T17801] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 2168.841043][T17801] usb 3-1: not running at top speed; connect to a high speed hub [ 2168.841062][T17801] usb 3-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 2168.846311][T17801] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2169.337707][T17801] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 2169.337725][T17801] usb 3-1: Product: syz [ 2169.337734][T17801] usb 3-1: Manufacturer: syz [ 2169.419286][ T31] audit: type=1400 audit(1792233230.582:1618): avc: denied { write } for pid=23763 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2169.456553][T17801] uvcvideo 3-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 2169.456592][T17801] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770. [ 2169.508511][T23762] syz.1.4157 (23762): drop_caches: 2 [ 2170.386405][T14458] usb 3-1: USB disconnect, device number 93 [ 2172.141422][ T31] audit: type=1400 audit(1792233233.302:1619): avc: denied { write } for pid=23779 comm="syz.2.4162" name="functions" dev="configfs" ino=76785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2172.145840][ T31] audit: type=1400 audit(1792233233.312:1620): avc: denied { listen } for pid=23779 comm="syz.2.4162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2172.480974][T23787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=23787 comm=syz.0.4164 [ 2172.651312][ T31] audit: type=1400 audit(1792233233.822:1621): avc: denied { write } for pid=23777 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2172.903992][ T31] audit: type=1400 audit(1792233234.072:1622): avc: denied { write } for pid=23805 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2173.000141][T14458] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2173.008910][T23809] ip_tables: iptables: counters copy to user failed while replacing table [ 2173.150919][T14458] usb 4-1: Using ep0 maxpacket: 8 [ 2173.153302][T14458] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2173.154041][T14458] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2173.154066][T14458] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2173.155262][T14458] usb 4-1: config 0 descriptor?? [ 2175.041057][T14458] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2175.046348][T14458] usb 4-1: USB disconnect, device number 79 [ 2175.104480][T23829] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2176.214895][ T8540] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 2176.372524][ T31] audit: type=1400 audit(1792233237.542:1623): avc: denied { write } for pid=23812 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2176.533654][T14458] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 2176.679765][T14458] usb 5-1: Using ep0 maxpacket: 8 [ 2176.680300][T14458] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice=10.40 [ 2176.845925][T14458] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2176.845943][T14458] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2177.621282][T23842] syz.2.4171 (23842): drop_caches: 2 [ 2177.670599][ T31] audit: type=1400 audit(1792233238.832:1624): avc: denied { write } for pid=23844 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2177.786327][T14458] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2177.786345][T14458] usb 5-1: Product: syz [ 2177.786354][T14458] usb 5-1: Manufacturer: syz [ 2178.450993][T14458] usb 5-1: can't set config #1, error -71 [ 2178.453215][T14458] usb 5-1: USB disconnect, device number 51 [ 2180.391441][T23862] xt_NETMAP: bad MAP_IPS. [ 2181.296568][T23865] xt_NETMAP: bad MAP_IPS. [ 2181.380585][ T8540] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 2181.529790][ T8540] usb 3-1: Using ep0 maxpacket: 8 [ 2181.533053][ T8540] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2181.533868][ T8540] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 2181.533892][ T8540] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2181.533906][ T8540] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2181.533919][ T8540] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2181.533938][ T8540] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2181.533959][ T8540] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2181.682751][ T8540] usb 3-1: usb_control_msg returned -71 [ 2181.682777][ T8540] usbtmc 3-1:16.0: can't read capabilities [ 2181.706601][ T8540] usb 3-1: USB disconnect, device number 95 [ 2181.750030][T21832] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 2181.901111][T21832] usb 5-1: Using ep0 maxpacket: 16 [ 2181.901565][T21832] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2181.902433][T21832] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 2181.906020][T21832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2181.906035][T21832] usb 5-1: Product: syz [ 2181.906044][T21832] usb 5-1: Manufacturer: syz [ 2181.906052][T21832] usb 5-1: SerialNumber: syz [ 2181.907959][T21832] usb 5-1: config 0 descriptor?? [ 2181.908678][T23868] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2182.034534][T21832] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 2182.169347][T23868] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4179'. [ 2182.185055][ T31] audit: type=1400 audit(1792233243.352:1625): avc: denied { read write } for pid=23866 comm="syz.4.4179" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 2182.185084][ T31] audit: type=1400 audit(1792233243.352:1626): avc: denied { open } for pid=23866 comm="syz.4.4179" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 2182.241526][ T8540] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 2182.277842][T23879] syz.2.4183 (23879): drop_caches: 2 [ 2183.222010][T23889] xt_NETMAP: bad MAP_IPS. [ 2183.259046][ T8540] usb 4-1: Using ep0 maxpacket: 8 [ 2183.266060][ T8540] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2183.283020][ T8540] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2183.283054][ T8540] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2183.283067][ T8540] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2183.283082][ T8540] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2183.283099][ T8540] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2183.286906][ T8540] usb 4-1: config 0 descriptor?? [ 2184.298447][T23894] xt_NETMAP: bad MAP_IPS. [ 2184.714326][ T5690] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 2185.217203][ T5690] usb 1-1: Using ep0 maxpacket: 8 [ 2185.349335][ C0] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 2185.349380][ C0] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 2185.364031][T17801] usb 5-1: USB disconnect, device number 52 [ 2185.383969][T17801] mcba_usb 5-1:0.0 can0: device disconnected [ 2185.397426][ T8540] usbhid 4-1:0.0: can't add hid device: -71 [ 2185.397492][ T8540] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2185.432098][ T8540] usb 4-1: USB disconnect, device number 80 [ 2186.303637][ T5690] usb 1-1: device descriptor read/all, error -71 [ 2186.329913][T23893] syz.1.4185 (23893): drop_caches: 2 [ 2186.518168][T23911] FAULT_INJECTION: forcing a failure. [ 2186.518168][T23911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2186.518190][T23911] CPU: 0 UID: 0 PID: 23911 Comm: syz.4.4190 Tainted: G L syzkaller #0 PREEMPT(full) [ 2186.518206][T23911] Tainted: [L]=SOFTLOCKUP [ 2186.518210][T23911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2186.518217][T23911] Call Trace: [ 2186.518221][T23911] [ 2186.518226][T23911] dump_stack_lvl+0x100/0x190 [ 2186.518247][T23911] should_fail_ex.cold+0x5/0xa [ 2186.518263][T23911] _copy_from_user+0x2e/0xd0 [ 2186.518281][T23911] ctrl_cdev_ioctl+0x147/0x410 [ 2186.518296][T23911] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 2186.518311][T23911] ? selinux_file_ioctl+0x13b/0x290 [ 2186.518327][T23911] ? selinux_file_ioctl+0xb6/0x290 [ 2186.518344][T23911] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 2186.518358][T23911] __x64_sys_ioctl+0x18e/0x210 [ 2186.518374][T23911] do_syscall_64+0x123/0x790 [ 2186.518393][T23911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2186.518405][T23911] RIP: 0033:0x7f778439e559 [ 2186.518414][T23911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2186.518426][T23911] RSP: 002b:00007f7785272028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2186.518438][T23911] RAX: ffffffffffffffda RBX: 00007f7784625fa0 RCX: 00007f778439e559 [ 2186.518445][T23911] RDX: 0000200000000100 RSI: 0000000040186f40 RDI: 0000000000000003 [ 2186.518451][T23911] RBP: 00007f7785272090 R08: 0000000000000000 R09: 0000000000000000 [ 2186.518458][T23911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2186.518465][T23911] R13: 00007f7784626038 R14: 00007f7784625fa0 R15: 00007ffc81bd4178 [ 2186.518480][T23911] [ 2186.861328][ T31] audit: type=1400 audit(1792233248.032:1627): avc: denied { write } for pid=23884 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2187.015614][ T31] audit: type=1400 audit(1792233248.182:1628): avc: denied { write } for pid=23923 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2187.050650][T17801] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 2187.059930][ T5710] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 2187.099961][T14458] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 2187.201065][T17801] usb 2-1: Using ep0 maxpacket: 8 [ 2187.201498][T17801] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2187.202267][T17801] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2187.202284][T17801] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2187.202298][T17801] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2187.202313][T17801] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2187.202330][T17801] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2187.203537][T17801] usb 2-1: config 0 descriptor?? [ 2187.225427][ T5710] usb 4-1: Using ep0 maxpacket: 8 [ 2187.237081][ T5710] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2187.262763][T14458] usb 5-1: Using ep0 maxpacket: 8 [ 2187.271294][T14458] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2187.272485][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2187.272514][ T5710] usb 4-1: Product: syz [ 2187.272523][ T5710] usb 4-1: Manufacturer: syz [ 2187.272531][ T5710] usb 4-1: SerialNumber: syz [ 2187.282016][T14458] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2187.282039][T14458] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2187.312329][ T5710] usb 4-1: config 0 descriptor?? [ 2187.377687][T14458] usb 5-1: config 0 descriptor?? [ 2187.404174][ T5710] gspca_main: se401-2.14.0 probing 047d:5003 [ 2188.386092][T14458] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2188.389027][T14458] usb 5-1: USB disconnect, device number 53 [ 2188.417117][T17801] corsair 0003:1B1C:1B3E.0060: unknown main item tag 0x0 [ 2188.417136][T17801] corsair 0003:1B1C:1B3E.0060: unknown main item tag 0x0 [ 2188.417148][T17801] corsair 0003:1B1C:1B3E.0060: unknown main item tag 0x0 [ 2188.417161][T17801] corsair 0003:1B1C:1B3E.0060: unknown main item tag 0x0 [ 2188.417173][T17801] corsair 0003:1B1C:1B3E.0060: unknown main item tag 0x0 [ 2188.417185][T17801] corsair 0003:1B1C:1B3E.0060: unknown main item tag 0x0 [ 2188.417197][T17801] corsair 0003:1B1C:1B3E.0060: unknown main item tag 0x0 [ 2188.417209][T17801] corsair 0003:1B1C:1B3E.0060: unknown main item tag 0x0 [ 2188.417220][T17801] corsair 0003:1B1C:1B3E.0060: unknown main item tag 0x0 [ 2188.417232][T17801] corsair 0003:1B1C:1B3E.0060: unknown main item tag 0x0 [ 2188.417927][ T5710] gspca_se401: Bayer format not supported! [ 2188.504359][T17801] corsair 0003:1B1C:1B3E.0060: failed to start in urb: -90 [ 2188.535199][T17801] corsair 0003:1B1C:1B3E.0060: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.1-1/input0 [ 2188.616703][T23914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2188.616906][T23914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2188.664473][T17801] usb 4-1: USB disconnect, device number 81 [ 2188.697339][T14458] usb 2-1: USB disconnect, device number 50 [ 2188.751790][T23934] fido_id[23934]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 2189.574447][T23940] xt_NETMAP: bad MAP_IPS. [ 2189.668844][ T31] audit: type=1400 audit(1792233250.832:1629): avc: denied { write } for pid=23927 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2189.878900][ T31] audit: type=1400 audit(1792233251.042:1630): avc: denied { write } for pid=23946 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2190.101059][T14458] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 2190.940241][T14458] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 2190.941012][T14458] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2191.683423][T14458] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 2191.864107][T23956] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2191.864125][T23956] overlayfs: failed to set xattr on upper [ 2191.864130][T23956] overlayfs: ...falling back to redirect_dir=nofollow. [ 2191.864135][T23956] overlayfs: ...falling back to index=off. [ 2191.864140][T23956] overlayfs: ...falling back to uuid=null. [ 2191.907637][T23956] overlayfs: failed to resolve './file1': -2 [ 2192.172149][T23966] FAULT_INJECTION: forcing a failure. [ 2192.172149][T23966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2192.172170][T23966] CPU: 0 UID: 0 PID: 23966 Comm: syz.4.4203 Tainted: G L syzkaller #0 PREEMPT(full) [ 2192.172186][T23966] Tainted: [L]=SOFTLOCKUP [ 2192.172190][T23966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2192.172197][T23966] Call Trace: [ 2192.172201][T23966] [ 2192.172206][T23966] dump_stack_lvl+0x100/0x190 [ 2192.172227][T23966] should_fail_ex.cold+0x5/0xa [ 2192.172245][T23966] _copy_from_user+0x2e/0xd0 [ 2192.172263][T23966] __ext4_ioctl+0x144a/0x4200 [ 2192.172282][T23966] ? __pfx___ext4_ioctl+0x10/0x10 [ 2192.172298][T23966] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2192.172314][T23966] ? do_vfs_ioctl+0x226/0x13e0 [ 2192.172328][T23966] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2192.172341][T23966] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 2192.172359][T23966] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2192.172379][T23966] ? __fget_files+0x34/0x3d0 [ 2192.172401][T23966] ? selinux_file_ioctl+0x13b/0x290 [ 2192.172417][T23966] ? selinux_file_ioctl+0xb6/0x290 [ 2192.172434][T23966] ? __pfx_ext4_ioctl+0x10/0x10 [ 2192.172448][T23966] __x64_sys_ioctl+0x18e/0x210 [ 2192.172462][T23966] do_syscall_64+0x123/0x790 [ 2192.172480][T23966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2192.172492][T23966] RIP: 0033:0x7f778439e559 [ 2192.172502][T23966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2192.172513][T23966] RSP: 002b:00007f7785272028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2192.172524][T23966] RAX: ffffffffffffffda RBX: 00007f7784625fa0 RCX: 00007f778439e559 [ 2192.172531][T23966] RDX: 0000200000000300 RSI: 000000004004662b RDI: 0000000000000003 [ 2192.172538][T23966] RBP: 00007f7785272090 R08: 0000000000000000 R09: 0000000000000000 [ 2192.172545][T23966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2192.172551][T23966] R13: 00007f7784626038 R14: 00007f7784625fa0 R15: 00007ffc81bd4178 [ 2192.172566][T23966] [ 2192.263539][T17801] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 2192.451659][T17801] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=ea.e6 [ 2192.452990][T17801] usb 4-1: config 253 has an invalid interface number: 236 but max is 0 [ 2192.453006][T17801] usb 4-1: config 253 has no interface number 0 [ 2192.453024][T17801] usb 4-1: config 253 interface 236 altsetting 5 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 2192.453040][T17801] usb 4-1: config 253 interface 236 has no altsetting 0 [ 2192.458039][T17801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2192.458053][T17801] usb 4-1: Product: syz [ 2192.458062][T17801] usb 4-1: Manufacturer: syz [ 2192.458070][T17801] usb 4-1: SerialNumber: syz [ 2192.582284][T23972] 9pnet_virtio: no channels available for device syz [ 2192.623791][T23971] device-mapper: ioctl: Empty message received. [ 2192.782217][T17801] hub 4-1:253.236: bad descriptor, ignoring hub [ 2192.782235][T17801] hub 4-1:253.236: probe with driver hub failed with error -5 [ 2192.789570][T17801] usb_ehset_test 4-1:253.236: probe with driver usb_ehset_test failed with error -32 [ 2192.841533][T17801] usb 4-1: USB disconnect, device number 82 [ 2193.726857][T23979] xt_NETMAP: bad MAP_IPS. [ 2195.112414][T23988] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4207'. [ 2197.474430][T24003] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2197.474465][T24003] overlayfs: failed to set xattr on upper [ 2197.474470][T24003] overlayfs: ...falling back to redirect_dir=nofollow. [ 2197.474474][T24003] overlayfs: ...falling back to index=off. [ 2197.474479][T24003] overlayfs: ...falling back to uuid=null. [ 2197.526021][T24003] overlayfs: failed to resolve './file1': -2 [ 2197.596533][T24005] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4214'. [ 2197.600930][T24005] team0: Device xfrm0 is of different type [ 2197.653390][T24005] tipc: Enabling of bearer rejected, already enabled [ 2198.391272][T24007] busy [ 2198.459013][T17801] usb 3-1: USB disconnect, device number 96 [ 2198.580043][T14458] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 2198.730481][T14458] usb 2-1: Using ep0 maxpacket: 16 [ 2198.730925][T14458] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=30.00 [ 2198.731727][T14458] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2198.792244][T14458] usb 2-1: config 0 descriptor?? [ 2198.975910][T14458] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 2198.976429][T14458] usb 2-1: Detected FT2232HP [ 2199.571005][T14458] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 2199.577842][T24017] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4218'. [ 2199.577901][T24017] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 2199.828588][T24015] syz.0.4216 (24015): drop_caches: 2 [ 2199.858781][T14458] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2199.868045][T14458] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2199.892740][T14458] usb 2-1: USB disconnect, device number 51 [ 2199.907980][T14458] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2199.908242][T14458] ftdi_sio 2-1:0.0: device disconnected [ 2200.095236][ T31] audit: type=1326 audit(1792233261.262:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24023 comm="syz.4.4212" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f778439e559 code=0x0 [ 2200.219037][ T31] audit: type=1400 audit(1792233261.382:1632): avc: denied { mounton } for pid=24028 comm="syz.0.4219" path="/189/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 2200.591271][ T31] audit: type=1400 audit(1792233261.762:1633): avc: denied { write } for pid=24028 comm="syz.0.4219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2200.731934][T24040] ip_tables: iptables: counters copy to user failed while replacing table [ 2201.865614][T24049] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4222'. [ 2201.868452][ T5710] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 2202.922369][ T5710] usb 4-1: Using ep0 maxpacket: 8 [ 2202.924172][ T5710] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2202.927447][ T5710] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2202.927465][ T5710] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2202.927478][ T5710] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2202.927492][ T5710] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2202.927509][ T5710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2203.789015][ T5710] usb 4-1: config 0 descriptor?? [ 2203.968203][ T5710] usb 4-1: can't set config #0, error -71 [ 2203.980460][ T5710] usb 4-1: USB disconnect, device number 83 [ 2204.037657][ T31] audit: type=1400 audit(1792233265.202:1634): avc: denied { unmount } for pid=19655 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 2204.160101][T17801] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 2204.353238][T17801] usb 5-1: Using ep0 maxpacket: 8 [ 2204.379894][T17801] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2204.468058][T17801] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2204.468091][T17801] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2204.468105][T17801] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2204.468119][T17801] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2204.468132][T17801] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2204.468154][T17801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2205.026094][T17801] usb 5-1: usb_control_msg returned -71 [ 2205.026119][T17801] usbtmc 5-1:16.0: can't read capabilities [ 2205.055542][T17801] usb 5-1: USB disconnect, device number 54 [ 2205.160300][ T5690] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 2205.530476][ T5690] usb 2-1: Using ep0 maxpacket: 8 [ 2205.531341][ T5690] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2205.532537][ T5690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2205.532561][ T5690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2205.536780][ T5690] usb 2-1: config 0 descriptor?? [ 2205.609322][T24064] syz.3.4230 (24064): drop_caches: 2 [ 2207.598708][ T5690] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2207.755815][ T5690] usb 2-1: USB disconnect, device number 52 [ 2207.782169][T24082] FAULT_INJECTION: forcing a failure. [ 2207.782169][T24082] name failslab, interval 1, probability 0, space 0, times 0 [ 2207.782191][T24082] CPU: 0 UID: 0 PID: 24082 Comm: syz.3.4232 Tainted: G L syzkaller #0 PREEMPT(full) [ 2207.782207][T24082] Tainted: [L]=SOFTLOCKUP [ 2207.782211][T24082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2207.782217][T24082] Call Trace: [ 2207.782222][T24082] [ 2207.782227][T24082] dump_stack_lvl+0x100/0x190 [ 2207.782248][T24082] should_fail_ex.cold+0x5/0xa [ 2207.782264][T24082] should_failslab+0xc2/0x120 [ 2207.782288][T24082] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 2207.782304][T24082] ? __alloc_skb+0x140/0x710 [ 2207.782318][T24082] __alloc_skb+0x140/0x710 [ 2207.782328][T24082] ? __alloc_skb+0x5b7/0x710 [ 2207.782338][T24082] ? __pfx___alloc_skb+0x10/0x10 [ 2207.782349][T24082] ? rcu_is_watching+0x13/0xc0 [ 2207.782369][T24082] tcp_v6_send_response+0x2de/0x25b0 [ 2207.782389][T24082] ? __pfx_tcp_v6_send_response+0x10/0x10 [ 2207.782402][T24082] ? lock_acquire+0x1d1/0x380 [ 2207.782415][T24082] ? tcp_mstamp_refresh+0x16/0xa0 [ 2207.782430][T24082] ? lock_acquire+0x1d1/0x380 [ 2207.782442][T24082] ? tcp_v6_send_reset+0x27d/0x17c0 [ 2207.782457][T24082] tcp_v6_send_reset+0x1075/0x17c0 [ 2207.782475][T24082] ? __pfx_tcp_v6_send_reset+0x10/0x10 [ 2207.782497][T24082] tcp_v6_do_rcv+0xeb4/0x2030 [ 2207.782512][T24082] tcp_v6_rcv+0x2744/0x4380 [ 2207.782532][T24082] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 2207.782543][T24082] ? raw6_local_deliver+0x3f3/0xaf0 [ 2207.782558][T24082] ? raw6_local_deliver+0x3fd/0xaf0 [ 2207.782568][T24082] ? find_held_lock+0x2b/0x80 [ 2207.782587][T24082] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 2207.782599][T24082] ip6_protocol_deliver_rcu+0x1d8/0x15b0 [ 2207.782622][T24082] ip6_input_finish+0x1e4/0x4a0 [ 2207.782638][T24082] ip6_input+0x105/0x2f0 [ 2207.782651][T24082] ? __pfx_ip6_input+0x10/0x10 [ 2207.782665][T24082] ipv6_rcv+0x263/0x3d0 [ 2207.782680][T24082] ? __pfx_ipv6_rcv+0x10/0x10 [ 2207.782693][T24082] __netif_receive_skb_one_core+0x12d/0x1e0 [ 2207.782710][T24082] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 2207.782728][T24082] ? lock_acquire+0x1d1/0x380 [ 2207.782745][T24082] __netif_receive_skb+0x1f/0x120 [ 2207.782763][T24082] netif_receive_skb+0x139/0x7d0 [ 2207.782782][T24082] ? __pfx_netif_receive_skb+0x10/0x10 [ 2207.782803][T24082] tun_rx_batched.isra.0+0x3f6/0x750 [ 2207.782823][T24082] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 2207.782844][T24082] ? tun_get_user+0x1dc9/0x3da0 [ 2207.782857][T24082] tun_get_user+0x1f05/0x3da0 [ 2207.782874][T24082] ? __lock_acquire+0x5c0/0x1f40 [ 2207.782886][T24082] ? __pfx_tun_get_user+0x10/0x10 [ 2207.782898][T24082] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 2207.782916][T24082] ? find_held_lock+0x2b/0x80 [ 2207.782932][T24082] ? tun_get+0x191/0x370 [ 2207.782948][T24082] ? tun_get+0x191/0x370 [ 2207.782968][T24082] tun_chr_write_iter+0xdc/0x200 [ 2207.782980][T24082] vfs_write+0x6af/0x1050 [ 2207.782995][T24082] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 2207.783007][T24082] ? __pfx_vfs_write+0x10/0x10 [ 2207.783020][T24082] ? find_held_lock+0x2b/0x80 [ 2207.783045][T24082] ksys_write+0x12a/0x250 [ 2207.783059][T24082] ? __pfx_ksys_write+0x10/0x10 [ 2207.783077][T24082] do_syscall_64+0x123/0x790 [ 2207.783095][T24082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2207.783107][T24082] RIP: 0033:0x7efe7a35ed8e [ 2207.783117][T24082] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2207.783128][T24082] RSP: 002b:00007efe7b2a6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2207.783139][T24082] RAX: ffffffffffffffda RBX: 00007efe7b2a76c0 RCX: 00007efe7a35ed8e [ 2207.783146][T24082] RDX: 000000000000004a RSI: 0000200000000180 RDI: 00000000000000c8 [ 2207.783153][T24082] RBP: 00007efe7b2a7090 R08: 0000000000000000 R09: 0000000000000000 [ 2207.783160][T24082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2207.783167][T24082] R13: 00007efe7a626128 R14: 00007efe7a626090 R15: 00007ffd2e9eaac8 [ 2207.783182][T24082] [ 2209.083619][T24088] ip_tables: iptables: counters copy to user failed while replacing table [ 2209.905603][T24091] xt_NETMAP: bad MAP_IPS. [ 2210.186141][T24095] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4238'. [ 2211.759851][T14458] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 2211.909945][T14458] usb 3-1: Using ep0 maxpacket: 8 [ 2211.910345][T14458] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2211.912283][T14458] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2211.912300][T14458] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2211.912312][T14458] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2211.912327][T14458] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2211.912344][T14458] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2211.913626][T14458] usb 3-1: config 0 descriptor?? [ 2213.138016][T14458] hid_parser_main: 12 callbacks suppressed [ 2213.138032][T14458] corsair 0003:1B1C:1B3E.0061: unknown main item tag 0x0 [ 2213.138046][T14458] corsair 0003:1B1C:1B3E.0061: unknown main item tag 0x0 [ 2213.138058][T14458] corsair 0003:1B1C:1B3E.0061: unknown main item tag 0x0 [ 2213.138070][T14458] corsair 0003:1B1C:1B3E.0061: unknown main item tag 0x0 [ 2213.138082][T14458] corsair 0003:1B1C:1B3E.0061: unknown main item tag 0x0 [ 2213.138094][T14458] corsair 0003:1B1C:1B3E.0061: unknown main item tag 0x0 [ 2213.138106][T14458] corsair 0003:1B1C:1B3E.0061: unknown main item tag 0x0 [ 2213.138118][T14458] corsair 0003:1B1C:1B3E.0061: unknown main item tag 0x0 [ 2213.138130][T14458] corsair 0003:1B1C:1B3E.0061: unknown main item tag 0x0 [ 2213.138142][T14458] corsair 0003:1B1C:1B3E.0061: unknown main item tag 0x0 [ 2213.160490][ T5690] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 2213.232244][T14458] corsair 0003:1B1C:1B3E.0061: failed to start in urb: -90 [ 2213.236070][T14458] corsair 0003:1B1C:1B3E.0061: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.2-1/input0 [ 2213.313040][ T5690] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2213.313403][ T5690] usb 2-1: not running at top speed; connect to a high speed hub [ 2213.313420][ T5690] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2213.315602][ T5690] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2213.315616][ T5690] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2213.367579][ T5690] usb 2-1: string descriptor 0 read error: -22 [ 2213.367639][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2213.395741][ T5690] usb 2-1: 0:2 : does not exist [ 2213.447204][T14458] usb 3-1: USB disconnect, device number 97 [ 2213.523241][T24109] fido_id[24109]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 2215.779801][ T5710] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 2215.997422][ T5710] usb 3-1: Using ep0 maxpacket: 8 [ 2216.015359][ T5710] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2216.083516][ T5710] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 2216.083818][ T5710] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2216.083833][ T5710] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2216.083847][ T5710] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2216.083873][ T5710] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2216.083896][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2216.181634][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 2216.181687][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 2216.401291][ T5690] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 2216.439080][ T5690] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2216.456054][ T5690] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 2216.593720][ T5710] usb 3-1: GET_CAPABILITIES returned 0 [ 2216.593745][ T5710] usbtmc 3-1:16.0: can't read capabilities [ 2216.724398][ T5690] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2217.624839][ T5690] usb 2-1: USB disconnect, device number 53 [ 2218.403424][T24125] busy [ 2218.523243][T17801] usb 3-1: USB disconnect, device number 98 [ 2219.417844][T24135] tipc: Enabling of bearer rejected, failed to enable media [ 2219.437027][T24136] ip_tables: iptables: counters copy to user failed while replacing table [ 2219.670212][T17801] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 2219.779786][ T5690] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 2219.819853][T17801] usb 4-1: Using ep0 maxpacket: 16 [ 2219.820257][T17801] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=30.00 [ 2219.824601][T17801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2219.825805][T17801] usb 4-1: config 0 descriptor?? [ 2219.828482][T17801] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 2219.828968][T17801] usb 4-1: Detected FT2232HP [ 2219.931337][ T5690] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 2219.935111][ T5690] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2219.935137][ T5690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2219.985003][ T5690] as10x_usb: device has been detected [ 2219.985338][ T5690] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 2220.020936][ T5690] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 2220.043776][ T5690] as10x_usb: error during firmware upload part1 [ 2220.054452][ T5690] Registered device Abilis Systems DVB-Titan [ 2220.080537][T17801] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 2220.120712][ T31] audit: type=1326 audit(1792233281.292:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24143 comm="syz.4.4253" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f778439e559 code=0x0 [ 2220.309551][T17801] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2220.319513][T17801] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2220.338450][T17801] usb 4-1: USB disconnect, device number 84 [ 2220.353831][T17801] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2220.354076][T17801] ftdi_sio 4-1:0.0: device disconnected [ 2221.180690][ T5690] usb 1-1: USB disconnect, device number 57 [ 2221.218038][ T5690] Unregistered device Abilis Systems DVB-Titan [ 2221.224375][ T5690] as10x_usb: device has been disconnected [ 2222.527801][T24157] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4256'. [ 2222.651708][T24157] dummy0: left promiscuous mode [ 2223.870518][T17801] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 2224.210277][T17801] usb 4-1: Using ep0 maxpacket: 8 [ 2224.210729][T17801] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2224.211575][T17801] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2224.211588][T17801] usb 4-1: config 0 has no interfaces? [ 2224.211603][T17801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2224.213312][T17801] usb 4-1: config 0 descriptor?? [ 2225.917365][ T5690] usb 4-1: USB disconnect, device number 85 [ 2225.940781][T24183] ip_tables: iptables: counters copy to user failed while replacing table [ 2226.007829][T24180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4262'. [ 2226.007849][T24180] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4262'. [ 2226.347470][T21832] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 2227.366504][T21832] usb 5-1: Using ep0 maxpacket: 32 [ 2232.448874][T21832] usb 5-1: device descriptor read/all, error -110 [ 2232.889388][T21832] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 2233.160560][T21832] usb 5-1: device descriptor read/64, error -32 [ 2233.308324][T21832] usb usb5-port1: attempt power cycle [ 2234.022552][T21832] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 2234.114419][T21832] usb 5-1: device descriptor read/8, error -32 [ 2234.519980][T21832] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 2234.570688][T21832] usb 5-1: device descriptor read/8, error -32 [ 2234.746145][T21832] usb usb5-port1: unable to enumerate USB device [ 2235.394891][T24179] raw-gadget.0 gadget.4: failed to queue disconnect event [ 2239.808238][T24194] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4268'. [ 2241.525760][T24197] dummy0: left promiscuous mode [ 2258.224415][T24212] xt_NETMAP: bad MAP_IPS. [ 2259.208786][T24213] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2259.238125][T24213] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2259.324686][T24213] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2259.348699][T24213] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2259.378785][T24213] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2261.622567][ T5613] Bluetooth: hci4: command tx timeout [ 2262.759084][ T5613] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2262.816953][ T5613] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2262.876555][ T5613] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2262.935991][ T5613] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2262.961848][ T5613] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2263.726102][T24213] Bluetooth: hci4: command tx timeout [ 2265.067925][T24213] Bluetooth: hci6: command tx timeout [ 2265.780839][T24213] Bluetooth: hci4: command tx timeout [ 2267.143146][ T5613] Bluetooth: hci6: command tx timeout [ 2267.676876][T24226] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4274'. [ 2267.852773][ T5613] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2267.861305][ T5613] Bluetooth: hci4: command tx timeout [ 2267.913496][ T5613] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2267.931744][ T5613] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2267.972819][ T5613] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2268.027378][ T5613] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2268.963527][T24213] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2269.004488][T24213] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2269.048893][T24213] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2269.093276][T24213] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2269.145931][T24213] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2269.231095][ T5613] Bluetooth: hci6: command tx timeout [ 2270.101065][ T5613] Bluetooth: hci7: command tx timeout [ 2271.300152][ T5613] Bluetooth: hci8: command tx timeout [ 2271.302855][ T5613] Bluetooth: hci6: command tx timeout [ 2272.181195][T24213] Bluetooth: hci7: command tx timeout [ 2273.389998][T24213] Bluetooth: hci8: command tx timeout [ 2274.260449][T24213] Bluetooth: hci7: command tx timeout [ 2275.474916][T24213] Bluetooth: hci8: command tx timeout [ 2276.350959][T24213] Bluetooth: hci7: command tx timeout [ 2277.553439][T24213] Bluetooth: hci8: command tx timeout [ 2277.676048][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 2277.676318][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 2279.412991][T24245] ip_tables: iptables: counters copy to user failed while replacing table [ 2293.152289][ T5710] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 2293.444261][ T5710] usb 5-1: Using ep0 maxpacket: 32 [ 2293.525015][ T5710] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2297.658548][ T5710] usb 5-1: unable to read config index 0 descriptor/all [ 2297.658736][ T5710] usb 5-1: can't read configurations, error -71 [ 2303.378370][T21758] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2308.810507][T24211] rxe_eth0 speed is unknown, defaulting to 1000 [ 2312.906676][T21758] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2318.826523][T21758] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2318.936505][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2318.954475][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2318.972552][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2319.042512][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2319.066272][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2321.380266][T24213] Bluetooth: hci0: command tx timeout [ 2322.291212][ T5613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2322.321370][ T5613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2322.380866][ T5613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2322.427734][ T5613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2322.455658][ T5613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2322.698568][T21758] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2323.482191][ T5613] Bluetooth: hci0: command tx timeout [ 2324.665689][ T5613] Bluetooth: hci3: command tx timeout [ 2325.546098][ T5613] Bluetooth: hci0: command tx timeout [ 2326.741245][ T5613] Bluetooth: hci3: command tx timeout [ 2327.621559][ T5613] Bluetooth: hci0: command tx timeout [ 2328.874804][ T5613] Bluetooth: hci3: command tx timeout [ 2330.900744][ T5613] Bluetooth: hci3: command tx timeout [ 2333.158926][T24213] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2333.177400][T24213] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2333.202640][T24213] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2333.268670][T24213] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2333.300386][T24213] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2335.976063][ T5613] Bluetooth: hci9: command tx timeout [ 2338.019882][ T5613] Bluetooth: hci9: command tx timeout [ 2338.588458][T24213] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2338.633537][T24213] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2338.639816][T24213] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2338.704786][T24213] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2338.727039][T24213] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2339.095794][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 2339.096058][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 2340.109787][ T5613] Bluetooth: hci9: command tx timeout [ 2340.827203][ T5613] Bluetooth: hci5: command tx timeout [ 2342.190138][ T5613] Bluetooth: hci9: command tx timeout [ 2342.901940][ T5613] Bluetooth: hci5: command tx timeout [ 2344.983578][ T5613] Bluetooth: hci5: command tx timeout [ 2347.068281][ T5613] Bluetooth: hci5: command tx timeout [ 2348.896838][T21758] pimreg: left allmulticast mode [ 2360.926453][T24213] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2360.944643][T24213] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2360.964031][T24213] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2361.025013][T24213] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2361.049983][T24213] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2362.394162][T21758] team0: Port device xfrm0 removed [ 2363.385675][T24213] Bluetooth: hci10: command tx timeout [ 2365.462601][T24213] Bluetooth: hci10: command tx timeout [ 2367.539994][T24213] Bluetooth: hci10: command tx timeout [ 2369.619953][T24213] Bluetooth: hci10: command tx timeout [ 2370.522103][T21758] bond0 (unregistering): Released all slaves [ 2373.207230][T19103] syz_tun (unregistering): left allmulticast mode [ 2374.616421][T24217] rxe_eth0 speed is unknown, defaulting to 1000 [ 2377.545226][T21758] tipc: Disabling bearer [ 2377.933311][T21758] tipc: Left network mode [ 2381.575883][T24359] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2381.617300][T24359] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2381.644217][T24359] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2381.717690][T24359] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2381.822792][T24359] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2382.114420][T24359] Bluetooth: hci4: command 0x0406 tx timeout [ 2384.037187][T24213] Bluetooth: hci2: command tx timeout [ 2385.344000][ T5613] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 2385.378206][ T5613] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 2385.402036][ T5613] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 2385.496510][ T5613] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 2385.534052][ T5613] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 2386.112491][ T5613] Bluetooth: hci2: command tx timeout [ 2386.357040][ T31] audit: type=1400 audit(1792233447.522:1636): avc: denied { write } for pid=24331 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2387.224183][ T5613] Bluetooth: hci6: command 0x0406 tx timeout [ 2387.949115][T24359] Bluetooth: hci11: command tx timeout [ 2388.186442][T24359] Bluetooth: hci2: command tx timeout [ 2390.023305][ T5613] Bluetooth: hci11: command tx timeout [ 2390.273582][T24359] Bluetooth: hci2: command tx timeout [ 2392.107398][T18506] Bluetooth: hci11: command tx timeout [ 2392.352701][T18506] Bluetooth: hci7: command 0x0406 tx timeout [ 2392.353335][T18506] Bluetooth: hci8: command 0x0406 tx timeout [ 2394.196473][ T5613] Bluetooth: hci11: command tx timeout [ 2398.956606][T24359] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 2399.077398][T24359] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 2399.101694][T24359] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 2399.149412][T24359] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 2399.199468][T24359] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 2399.597455][ T31] audit: type=1400 audit(1792233460.732:1637): avc: denied { write } for pid=24375 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2400.520569][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 2400.520836][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 2401.463260][T24359] Bluetooth: hci12: command tx timeout [ 2401.901251][ T5613] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 2401.909101][ T5613] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 2401.958232][ T5613] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 2401.993991][ T5613] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 2402.018647][ T5613] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 2403.542987][ T5613] Bluetooth: hci12: command tx timeout [ 2404.192993][ T5613] Bluetooth: hci13: command tx timeout [ 2405.624052][ T5613] Bluetooth: hci12: command tx timeout [ 2406.260193][ T5613] Bluetooth: hci13: command tx timeout [ 2407.701278][ T5613] Bluetooth: hci12: command tx timeout [ 2408.350025][ T5613] Bluetooth: hci13: command tx timeout [ 2410.421130][ T5613] Bluetooth: hci13: command tx timeout [ 2412.893210][ T5267] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2427.978705][T24359] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2427.999555][T24359] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2428.020932][T24359] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2428.091636][T24359] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2428.156400][T24359] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2430.340795][ T5613] Bluetooth: hci0: command tx timeout [ 2432.421268][ T5613] Bluetooth: hci0: command tx timeout [ 2434.509427][ T5613] Bluetooth: hci0: command tx timeout [ 2436.583373][ T5613] Bluetooth: hci0: command tx timeout [ 2436.819333][T24225] rxe_eth0 speed is unknown, defaulting to 1000 [ 2445.887737][T24359] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2445.930217][T24359] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2445.933622][T24359] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2446.014824][T24359] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2446.029455][T24359] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2448.273446][T24359] Bluetooth: hci1: command tx timeout [ 2449.216940][ T5613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2449.257838][ T5613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2449.274510][ T5613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2449.361435][ T5613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2449.393544][ T5613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2450.352114][T24359] Bluetooth: hci1: command tx timeout [ 2451.627896][T24359] Bluetooth: hci3: command tx timeout [ 2452.424028][T24359] Bluetooth: hci1: command tx timeout [ 2453.710616][T24359] Bluetooth: hci3: command tx timeout [ 2454.509911][T24359] Bluetooth: hci1: command tx timeout [ 2455.780649][T24359] Bluetooth: hci3: command tx timeout [ 2457.859999][T24359] Bluetooth: hci3: command tx timeout [ 2459.632658][ T5613] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2459.657150][ T5613] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2459.688624][ T5613] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2459.725520][ T5613] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2459.748653][ T5613] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2461.962698][T24359] Bluetooth: hci5: command tx timeout [ 2461.977768][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 2461.978065][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 2462.834339][ T5613] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2462.872542][ T5613] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2462.892359][ T5613] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2462.952016][ T5613] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2463.000789][ T5613] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2464.020537][ T5613] Bluetooth: hci5: command tx timeout [ 2465.029509][ T31] audit: type=1400 audit(1792233526.182:1638): avc: denied { write } for pid=24410 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2465.149378][ T32] INFO: task syz-executor:24229 blocked for more than 143 seconds. [ 2465.149402][ T32] Tainted: G L syzkaller #0 [ 2465.149413][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2465.149423][ T32] task:syz-executor state:D stack:25256 pid:24229 tgid:24229 ppid:1 task_flags:0x400140 flags:0x00080002 [ 2465.149467][ T32] Call Trace: [ 2465.149477][ T32] [ 2465.149561][ T32] __schedule+0x1259/0x6920 [ 2465.149849][ T32] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 2465.149955][ T32] ? lock_acquire+0x1d1/0x380 [ 2465.150040][ T32] ? __pfx___schedule+0x10/0x10 [ 2465.150077][ T32] ? find_held_lock+0x2b/0x80 [ 2465.150139][ T32] ? schedule+0x225/0x2c0 [ 2465.150248][ T32] schedule+0xdd/0x2c0 [ 2465.150325][ T32] schedule_preempt_disabled+0x13/0x30 [ 2465.150370][ T32] __mutex_lock+0xccb/0x1bd0 [ 2465.150430][ T32] ? add_one_compat_dev+0x112/0x820 [ 2465.150546][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 2465.150654][ T32] ? rdma_dev_init_net+0x2ff/0x590 [ 2465.150946][ T32] ? add_one_compat_dev+0x112/0x820 [ 2465.150965][ T32] add_one_compat_dev+0x112/0x820 [ 2465.202605][ T32] rdma_dev_init_net+0x30a/0x590 [ 2465.202645][ T32] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 2465.202667][ T32] ? __kmalloc_noprof+0x350/0x840 [ 2465.202814][ T32] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 2465.202879][ T32] ops_init+0x1e2/0x5f0 [ 2465.202964][ T32] setup_net+0x118/0x3a0 [ 2465.203039][ T32] ? __pfx_setup_net+0x10/0x10 [ 2465.203218][ T32] copy_net_ns+0x345/0x7a0 [ 2465.203331][ T32] create_new_namespaces+0x3ea/0xac0 [ 2465.385862][ T5613] Bluetooth: hci9: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2465.453885][ T32] unshare_nsproxy_namespaces+0xf2/0x220 [ 2465.453971][ T32] ksys_unshare+0x4a2/0xb30 [ 2465.454024][ T32] ? __pfx_ksys_unshare+0x10/0x10 [ 2465.454072][ T32] ? __pfx_do_faccessat+0x10/0x10 [ 2465.454104][ T32] ? __pfx_fput_close_sync+0x10/0x10 [ 2465.454284][ T32] __x64_sys_unshare+0x31/0x40 [ 2465.454325][ T32] do_syscall_64+0x123/0x790 [ 2465.454439][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2465.454482][ T32] RIP: 0033:0x7fb77419f827 [ 2465.454531][ T32] RSP: 002b:00007ffcf96f7f38 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 2465.454548][ T32] RAX: ffffffffffffffda RBX: 00007fb774425f40 RCX: 00007fb77419f827 [ 2465.454558][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 2465.454568][ T32] RBP: 00007fb7744267b8 R08: 0000000000000000 R09: 0000000000000000 [ 2465.454578][ T32] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 2465.454588][ T32] R13: 0000000000000003 R14: 00007ffcf96f8178 R15: 0000000000000000 [ 2465.454838][ T32] [ 2465.454864][ T32] [ 2465.454864][ T32] Showing all locks held in the system: [ 2465.454878][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 2465.454891][ T32] #0: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 2465.454965][ T32] locks held by kworker/u8:6/227: 2, on CPU#0: [ 2465.454979][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 2465.455058][ T32] #1: ffffc90003077d08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 2465.455152][ T32] locks held by kworker/u8:8/1382: 4, last CPU#0: [ 2465.455168][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 2465.455241][ T32] #1: ffffc90005d1fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 2465.455296][ T32] #2: ffff888069780800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 2465.455354][ T32] #3: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 2465.455426][ T32] locks held by kworker/u8:9/1394: 2, on CPU#0: [ 2465.455440][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 2465.455523][ T32] #1: ffffc90005ccfd08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 2465.455640][ T32] locks held by kworker/u8:12/1440: 2, on CPU#0: [ 2465.455651][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 2465.455707][ T32] #1: ffffc90005e2fd08 [ 2465.530064][ T31] audit: type=1400 audit(1792233526.632:1639): avc: denied { write } for pid=5589 comm="syz-executor" path="pipe:[5316]" dev="pipefs" ino=5316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 2465.976045][ T32] ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 2465.976127][ T32] locks held by syslogd/4954: 1, last CPU#0: [ 2465.976142][ T32] #0: ffff88807de21f70 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x255/0xc30 [ 2465.976225][ T32] locks held by syz-executor/5589: 2, last CPU#0: [ 2465.976240][ T32] #0: ffff888036c0a800 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 2465.976331][ T32] #1: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 2465.976383][ T32] locks held by kworker/0:5/5710: 2, last CPU#0: [ 2465.976394][ T32] #0: ffff88801d059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 2465.976455][ T32] #1: ffffc90004a57d08 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 2465.976525][ T32] locks held by kworker/u8:17/6721: 3, last CPU#0: [ 2465.976538][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 2465.976617][ T32] #1: ffffc9001055fd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 2465.976707][ T32] #2: ffff888050a13258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 2465.976789][ T32] locks held by kworker/u8:2/15033: 3, last CPU#0: [ 2465.976799][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 2465.976856][ T32] #1: ffffc9000583fd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 2465.976922][ T32] #2: ffff88802b0d3258 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 2465.977002][ T32] locks held by kworker/u8:3/16442: 3, last CPU#0: [ 2465.977016][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 2465.977102][ T32] #1: ffffc900036afd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 2465.977190][ T32] #2: ffff888037fac258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 2465.977249][ T32] locks held by kworker/u8:4/21020: 2, on CPU#0: [ 2465.977260][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 2465.977324][ T32] #1: ffffc90003267d08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 2465.977396][ T32] locks held by kworker/u8:5/21021: 3, last CPU#0: [ 2465.977410][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 2465.977493][ T32] #1: ffffc9000386fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 2466.120384][ T5613] Bluetooth: hci5: command tx timeout [ 2466.174509][ T32] #2: ffff888060800800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 2466.174597][ T32] locks held by kworker/u8:7/21022: 2, on CPU#0: [ 2466.174611][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 2466.174695][ T32] #1: ffffc90003bf7d08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 2466.174788][ T32] locks held by kworker/u8:11/21169: 3, last CPU#0: [ 2466.174805][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 2466.174860][ T32] #1: ffffc9000369fd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 2466.174920][ T32] #2: ffff88802c94f258 (&devlink->lock_key#10){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 2466.174993][ T32] locks held by kworker/u8:13/21758: 4, on CPU#0: [ 2466.175007][ T32] #0: ffff88801e2e0940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 2466.175086][ T32] #1: ffffc9000402fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 2466.175174][ T32] #2: ffffffff91cbd048 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 2466.175245][ T32] #3: ffffffff918e41c8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x174/0x6b0 [ 2466.175298][ T32] locks held by getty/22700: 2, on CPU#0: [ 2466.175309][ T32] #0: ffff888034b730a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2466.175371][ T32] #1: ffffc90004e692e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 2466.175440][ T32] locks held by kworker/u8:15/24190: 3, last CPU#0: [ 2466.175455][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 2466.175538][ T32] #1: ffffc90003a8fd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 2466.175636][ T32] #2: ffff88807f3b6258 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 2466.175691][ T32] locks held by kworker/u8:16/24203: 6, last CPU#0: [ 2466.175703][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 2466.175763][ T32] #1: ffffc90004ebfd08 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 2466.175834][ T32] #2: ffffffff8fc7cb50 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 2466.175909][ T32] #3: ffffffff8ff414a0 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xb5/0x270 [ 2466.175994][ T32] #4: ffffffff8fc9c4c0 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 2466.176070][ T32] #5: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 2466.373432][ T32] locks held by syz-executor/24211: 2, on CPU#0: [ 2466.373448][ T32] #0: ffffffff91cbd048 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 2466.373512][ T32] #1: ffffffff918e41c8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x174/0x6b0 [ 2466.373579][ T32] locks held by syz-executor/24217: 2, on CPU#0: [ 2466.373596][ T32] #0: ffffffff91cbd048 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 2466.373674][ T32] #1: ffffffff918e41c8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x174/0x6b0 [ 2466.373758][ T32] locks held by syz-executor/24225: 4, last CPU#0: [ 2466.373774][ T32] #0: ffffffff91cbd048 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 2466.373837][ T32] #1: ffffffff918e4448 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590 [ 2466.373887][ T32] #2: ffffffff918e41c8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590 [ 2466.373946][ T32] #3: ffff88807a719020 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x112/0x820 [ 2466.374016][ T32] locks held by syz-executor/24229: 4, on CPU#0: [ 2466.374030][ T32] #0: ffffffff91cbd048 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 2466.374110][ T32] #1: ffffffff918e4448 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590 [ 2466.374198][ T32] #2: ffffffff918e41c8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590 [ 2466.374242][ T32] #3: ffff88807a719020 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x112/0x820 [ 2466.374296][ T32] locks held by kworker/u8:18/24281: 3, last CPU#0: [ 2466.374309][ T32] #0: ffff88803540c940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 2466.374379][ T32] #1: ffffc9000441fd08 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 2466.374459][ T32] #2: ffff8880501661c8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_send_outstanding_bat_ogm_packet+0x50f/0x7d0 [ 2466.374550][ T32] locks held by syz-executor/24364: 1, last CPU#0: [ 2466.374565][ T32] #0: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 2466.374642][ T32] locks held by syz-executor/24381: 3, on CPU#0: [ 2466.374652][ T32] #0: ffffffff91cbd048 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 2466.374704][ T32] #1: ffffffff918e4448 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590 [ 2466.374763][ T32] #2: ffffffff918e41c8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590 [ 2466.374831][ T32] locks held by dhcpcd-run-hook/24410: 1, last CPU#0: [ 2466.374845][ T32] #0: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 2466.374929][ T32] locks held by modprobe/24463: 2, last CPU#0: [ 2466.374944][ T32] #0: ffff888033bc5900 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x22c/0xa00 [ 2466.573420][ T32] #1: ffff8880b823bf60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 2466.573521][ T32] locks held by modprobe/24467: 4, last CPU#0: [ 2466.573536][ T32] #0: ffff8880947226c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 2466.573592][ T32] #1: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: do_fault+0x9a8/0x1830 [ 2466.573650][ T32] #2: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d7/0x2060 [ 2466.573719][ T32] #3: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 2466.573794][ T32] locks held by modprobe/24470: 1, last CPU#0: [ 2466.573809][ T32] #0: ffff88807ab28f80 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 2466.573894][ T32] locks held by kworker/u8:2/24471: 1, last CPU#0: [ 2466.573910][ T32] #0: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 2466.573984][ T32] [ 2466.573989][ T32] ============================================= [ 2466.573989][ T32] [ 2466.573998][ T32] NMI backtrace for cpu 0 [ 2466.574010][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2466.574028][ T32] Tainted: [L]=SOFTLOCKUP [ 2466.574036][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2466.574046][ T32] Call Trace: [ 2466.574061][ T32] [ 2466.574079][ T32] dump_stack_lvl+0x100/0x190 [ 2466.574169][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 2466.574273][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2466.574315][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 2466.574379][ T32] sys_info+0x141/0x190 [ 2466.574430][ T32] watchdog+0xcb1/0x1030 [ 2466.574598][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2466.574636][ T32] ? __pfx_watchdog+0x10/0x10 [ 2466.574699][ T32] ? __kthread_parkme+0x18f/0x230 [ 2466.574840][ T32] ? kthread+0x13a/0x450 [ 2466.574873][ T32] ? __pfx_watchdog+0x10/0x10 [ 2466.574895][ T32] kthread+0x373/0x450 [ 2466.574927][ T32] ? __pfx_kthread+0x10/0x10 [ 2466.574995][ T32] ret_from_fork+0x730/0xd60 [ 2466.575078][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 2466.575181][ T32] ? __switch_to+0x800/0x10f0 [ 2466.575222][ T32] ? __pfx_kthread+0x10/0x10 [ 2466.575292][ T32] ret_from_fork_asm+0x1a/0x30 [ 2466.575558][ T32] [ 2466.793082][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 2467.283120][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2467.293781][ T32] Tainted: [L]=SOFTLOCKUP [ 2467.298087][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2467.308121][ T32] Call Trace: [ 2467.311398][ T32] [ 2467.314327][ T32] dump_stack_lvl+0x100/0x190 [ 2467.319044][ T32] vpanic+0x553/0x970 [ 2467.323027][ T32] ? __pfx_vpanic+0x10/0x10 [ 2467.327695][ T32] panic+0xd1/0xe0 [ 2467.331412][ T32] ? __pfx_panic+0x10/0x10 [ 2467.335930][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 2467.342114][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 2467.348267][ T32] ? watchdog.cold+0x1ec/0x234 [ 2467.353064][ T32] watchdog.cold+0x1fd/0x234 [ 2467.357781][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2467.363602][ T32] ? __pfx_watchdog+0x10/0x10 [ 2467.368287][ T32] ? __kthread_parkme+0x18f/0x230 [ 2467.373392][ T32] ? kthread+0x13a/0x450 [ 2467.377628][ T32] ? __pfx_watchdog+0x10/0x10 [ 2467.382299][ T32] kthread+0x373/0x450 [ 2467.386404][ T32] ? __pfx_kthread+0x10/0x10 [ 2467.391010][ T32] ret_from_fork+0x730/0xd60 [ 2467.395628][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 2467.400797][ T32] ? __switch_to+0x800/0x10f0 [ 2467.405513][ T32] ? __pfx_kthread+0x10/0x10 [ 2467.410114][ T32] ret_from_fork_asm+0x1a/0x30 [ 2467.415100][ T32] [ 2467.418136][ T32] Kernel Offset: disabled [ 2467.422459][ T32] Rebooting in 86400 seconds..