last executing test programs: 2m47.891823158s ago: executing program 4 (id=1544): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = getpid() mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') syz_open_procfs(r2, &(0x7f0000000040)='attr/sockcreate\x00') ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x7, 0x1}) 2m47.733798255s ago: executing program 4 (id=1547): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x2, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xfffffffb, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x6, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x6, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0x84, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x7, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x2, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x4000008, 0x8, 0x1ff, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x3, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xd, 0x8, 0xfffff3f6, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x0, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x7, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0xf, 0x7, 0x800, 0xc, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x2, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x400, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb6, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x80, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x0, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008400"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x13, 0x200, &(0x7f00000003c0)="1ae19327aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a730900000000fdfd000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000005000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c536689a4a62f872f9ca3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d228186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f91ffffffffd51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6ece06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a2a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0600000000000000a1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe021c773a6664b66ae04aa62c564d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000004000000000f800"}) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="090000000400000004", @ANYRES32], 0x48) 2m46.84148917s ago: executing program 4 (id=1548): r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) poll(&(0x7f0000000200), 0x0, 0x9) close(0xffffffffffffffff) r1 = socket(0xf, 0x803, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8) lseek(r2, 0xc, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x210, r4, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}], @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@broadcast}, @NL80211_ATTR_IE={0xe1, 0x2a, [@random={0x8, 0xa6, "fba0cf5030dad31c0a1881567ed60094f4db79a639d15ddaa070c92b3c33dfe5a3a928f6d63b94dc437d55aebde383ba705fc9827698a6a91485b1d90098af2df710bf4719d341a882f8c34d906eedbb4b76cde79be5fac44c77c0820ab5f1ef42cf0a2f1a35d7ecab651b642eeb2da1cca8bcbcdf34f847ad5571d9d44187db2037fbbd546e571f13d39a4c0de1ba5ffaa483491bc42406cf21c315ffdad10201bd14c546dc"}, @measure_req={0x26, 0x11, {0x5, 0x7, 0xfb, "26f77535277dc73cad4b74c22173"}}, @dsss={0x3, 0x1, 0xd}, @challenge={0x10, 0x1, 0x74}, @ht={0x2d, 0x1a, {0x300, 0x3, 0x3, 0x0, {0x7fffffff, 0x1, 0x0, 0x1b0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x6, 0x6, 0x7}}]}, @NL80211_ATTR_FILS_KEK={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_IE={0xdd, 0x2a, [@measure_req={0x26, 0x6d, {0x8, 0x1, 0x40, "d013c90e62536d678db3f7379b836bbdcc6f4c81873cdf4e94758c69a8d792f9fed97ffbe35274ed3dfedb55a2b66412f55f628a7caab3686fc412b4a42147b39258967ab60109366c40825e11e55ed538fbd7be38ccd28dd77289273ab3f96efabfb8826f674f0ee93a"}}, @gcr_ga={0xbd, 0x6, @broadcast}, @fast_bss_trans={0x37, 0x60, {0x9, 0x2, "77c559ffa44aab894ebdfb0b3ec4f53a", "e7226ecf073297abe3724b2a551786fb9aab35830f5338574662c1b35ee76b34", "878d2c3e7ca42103b5a7a08d62a036d34d4dc53e7a63fc0388a6320d757f525d", [{0x3, 0x2, "ced2"}, {0x3, 0x8, "d572f363f37b11d2"}]}}]}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}]}, 0x210}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008800) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r5 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="ac010000100000012dbd7000ffdbdf25fe800000000000000000000000000021fe8000000000000000000000000000aa4e2300004e21", @ANYRES32, @ANYBLOB="ac1e0001000000000000000000000000000004d32b000000e000000200000000000000000000000000100000000000000d00000000000000edc730070000000003000000000000000600000000000000030000000000000084000000000000000200000000000000070000000000000006000000000000000400000000000000030000000000000001000000ffffffff040000002dbd7000003500000a0004012100000000000000aa0001007467723132382d67656e65726963000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010030000a926ba8c7759e1dc087773fcd0d04ac5d08a1cb91ea41de9c23e10c79657dda8d97dc2701190808b9de172b0cc5022ee08c64ea4f630a87df8dedf7ac0a0f6f0da8ce3ca33bd4c6da362d3e19971d9078ff2e906aecb82ef3b0e7b3623116abd6457000008000c000400000005001900ff0000003656bbeb2a0dda9961bfe3a21272ab96ab0b61d09b265813d7cd671b07864885894cd4dd8bc26a5c0d5d85f0ddfffe4d65e26ab946a83c1db953465d90001209e45edff3bb6f576a1a4e27af51eeba6110dcc5051afe76f91224487b2579aa4643e2117536207c2a92cba42971010e95d53ee540b8a585de41664f984c"], 0x1ac}, 0x1, 0x0, 0x0, 0x4814}, 0x80) fstat(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000004280)={{0x2, 0x0, r6, 0x0, 0xee01, 0x2, 0x1}, 0x0, 0x2, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x0, 0x9}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'}) socket$nl_audit(0x10, 0x3, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='net\x00') getdents(r8, &(0x7f00000001c0)=""/47, 0x2f) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32, @ANYBLOB="0000000000003219a5ffbfa2000000000000060200009b04cae05c5ab88e08000000b70400000000001085000000450000009500000000000000000000000000000000000000000084bbe6ba6d3a5e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094ba78084e080110aeed040003010902220001000000000904000001437b6a000905000000000000f60705d4"], 0x0) 2m43.97970773s ago: executing program 4 (id=1553): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) close(r0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x4, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xfd}}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x2, 0x1, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xf, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r4, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) socket$inet(0x2, 0x800, 0x100) 2m43.741356461s ago: executing program 4 (id=1554): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) 2m43.717820818s ago: executing program 4 (id=1555): r0 = creat(&(0x7f0000000540)='./file0\x00', 0x0) r1 = fsopen(&(0x7f0000000000)='fusectl\x00', 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) dup(r2) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r3 = syz_open_pts(r2, 0x80) dup3(r3, r2, 0x80000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x218888, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) close_range(r4, 0xffffffffffffffff, 0x0) fanotify_mark(0xffffffffffffffff, 0xd0, 0x2, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x88) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) close(r0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) r8 = socket$packet(0x11, 0x3, 0x300) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r9, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r10 = epoll_create1(0x80000) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x20) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f00000000c0)={0xe000001a}) sendfile(r10, r11, 0x0, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r8}}) 2m28.67752391s ago: executing program 32 (id=1555): r0 = creat(&(0x7f0000000540)='./file0\x00', 0x0) r1 = fsopen(&(0x7f0000000000)='fusectl\x00', 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) dup(r2) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r3 = syz_open_pts(r2, 0x80) dup3(r3, r2, 0x80000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x218888, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) close_range(r4, 0xffffffffffffffff, 0x0) fanotify_mark(0xffffffffffffffff, 0xd0, 0x2, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x88) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) close(r0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) r8 = socket$packet(0x11, 0x3, 0x300) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r9, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r10 = epoll_create1(0x80000) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x20) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f00000000c0)={0xe000001a}) sendfile(r10, r11, 0x0, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r8}}) 9.884018668s ago: executing program 2 (id=2156): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000003b00010324bd702202dcdf2506650700000000000000fa7cb53c59547ea05ae5571430e0c05472212b8524de80aa379942fb5d5d40adacf3f30dcafb0bfde9707980a5613a8018300b00c31f3a3a8f971502ecd8dc8fd2589cfd8fcc1ab55806a1d860a8f51dd4559bcc69fc49250200000500000000000000e8cddc6b38f3187506df10eb9e19cea6e9cd8e246d0f9720292e290100000000000080230adb0900000000000000f5972df13bcfee2bf05e47fb6634593c9f375f02eb285ecee3d00631f05ea4385e1143484b213ce2dfc96aa69572deef5ad91af4061e6db029201beee926a73ea592e24e7c6d"], 0x14}}, 0x24040084) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x200) syz_fuse_handle_req(r2, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2d, 0x0, 0x10000050}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x121) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r4, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1b3ee3fc, 0x1a}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008000) 9.717091702s ago: executing program 2 (id=2159): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000100)="a7", 0x1}], 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xac2b9}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x4c}}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e22, 0x4, @loopback, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000029000000040000000200000000000000280000000000000029000000050000000002020100000000ff03000000000000000000000000000118"], 0x58}, 0x400a0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) r4 = eventfd(0x5ef) ioctl$KVM_IOEVENTFD(r3, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0xd000, 0x0, r4}) 9.096667327s ago: executing program 2 (id=2163): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) syz_open_dev$hidraw(&(0x7f0000000280), 0x4, 0x90743) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create(0x5) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="090000001800000008000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000580), 0x1000, r2}, 0x38) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 7.993603246s ago: executing program 2 (id=2166): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0], &(0x7f0000000200), 0x1}) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0) 7.565860731s ago: executing program 3 (id=2169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x2, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xfffffffb, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x6, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x6, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0x84, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x7, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x2, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x4000008, 0x8, 0x1ff, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x3, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xd, 0x8, 0xfffff3f6, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x0, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x7, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0xf, 0x7, 0x800, 0xc, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x2, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x400, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb6, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x80, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x0, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008400"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x13, 0x200, &(0x7f00000003c0)="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"}) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="090000000400000004", @ANYRES32], 0x48) 6.600444059s ago: executing program 3 (id=2172): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x48800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000180)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x1, 0xc6fe2, 0x11403f}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x470243, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r10, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0xc0, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@generic="484c8bb6c37a1e15b7613741991b4ef643737d199e7d5a8d22d70df270f11cf867cf8be640d47df49742711631ccde6902bf7a101542b2d20c3792835f523907b2fbc3c1fed365a96f847a1895cad6f32268fa44e5e9c76a15e76ccc1a8287f0a2cdb0d6d4c77026ea1cd656ead777f3119689d09b270fcadba2d9d0ddac75709aa4a63ef0ec25d9cf5075", @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r11}]}, 0xc0}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 6.517664404s ago: executing program 1 (id=2173): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 6.5007531s ago: executing program 1 (id=2174): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x8000060000000001}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x5, [@struct={0xe, 0x4, 0x0, 0x4, 0x0, 0x8fd3, [{0x5, 0x3, 0x2}, {0x9, 0x3, 0x2}, {0x9, 0x4, 0x7}, {0x80000000, 0x1, 0x8}]}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x1, 0x1}, @typedef={0x5, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000300)=""/180, 0x75, 0xb4, 0x1, 0xe83a}, 0x28) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000140)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r5, 0x40184810, &(0x7f0000000080)={0x2}) 5.348601933s ago: executing program 3 (id=2178): r0 = socket$netlink(0x10, 0x3, 0x15) readv(r0, &(0x7f00000024c0)=[{&(0x7f0000000440)=""/192, 0xc0}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x8000000004) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) epoll_create1(0x80000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e62367581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="34000000140001000400fc326cb5be250a00000004000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf4", 0x38}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYRESHEX], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.377438352s ago: executing program 2 (id=2181): rmdir(&(0x7f0000000280)='./file0/file0\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x0}) 2.875447027s ago: executing program 1 (id=2184): syz_open_dev$dri(0x0, 0x1ff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x320, &(0x7f0000001280)={0x0, 0xb70f, 0x800, 0x0, 0x1}, &(0x7f0000000000), &(0x7f0000001180), &(0x7f0000000000)) write(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x6, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x4, 0x100) ioctl$SNDRV_PCM_IOCTL_XRUN(r2, 0x4148, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) 2.852780741s ago: executing program 2 (id=2185): socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000140)={0x20, 0xd, 0x22, "16decd5a7e620cf1960934822516685f85f50e8a61bb09c151979cc33b88fde8c545"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x40, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0x1adf, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f0000000000)=[{0x34, 0x0, 0x0, 0x2}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r3, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_usb_connect$hid(0x3, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x412}}]}) syz_usb_disconnect(r4) r5 = syz_usb_connect$uac3(0x5, 0xdc, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xca, 0x3, 0x1, 0x5, 0x80, 0x5, {0x8, 0xb, 0x2, 0x1, 0x1, 0x22, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x2a, 0x2}, [@feature_unit={0x11, 0x24, 0x7, 0x2, 0x4, [0xc, 0x10, 0x0]}, @mixer_unit={0x7, 0x24, 0x5, 0x4, 0x7f, "0a01"}, @mixer_unit={0x8, 0x24, 0x5, 0x2, 0x5, "eecde0"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x8, 0x3, 0x2, 0x7, "458992", "973d"}, @as_header={0x17, 0x24, 0x1, 0x43, 0x680, 0x4, 0x4, 0xb1, 0x3, 0x100, 0x6}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xf4, 0x4, 0x9, 0x9, "b3", "2c4ea7"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x40, 0xff, 0x7, {0xa, 0x25, 0x25, 0x1000, 0x81, 0xc000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x97, 0x3, 0xff, 0x1, '\aR', "e618"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xe, 0x5, 0x5, {0xa, 0x25, 0x25, 0x3ff, 0x3, 0xc}}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x6, 0x81, 0x23, 0xff, 0xf}, 0x2e, &(0x7f00000003c0)={0x5, 0xf, 0x2e, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "c10f7942c8bc4c77bccde55213aa0b8b"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0xf7, 0x7, 0x3e, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x6, 0x9, 0x4}]}, 0x3, [{0xfc, &(0x7f0000000400)=@string={0xfc, 0x3, "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"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x449}}, {0xb9, &(0x7f0000000540)=@string={0xb9, 0x3, "b85b8d2b73917e33c7a83ab5c1498f9cfbf3b470fa450bf42d781bf0fe42f4094bc40ceec2b2aee8c9bc824c930f4c4248f88b018d4d9c258d1907e117c67e0fb206b7af72384320e8135cf1dc46df905dcde6b44fe999ca3e39fe3cbe9e3ef70b4bf527038c05235fe4931ae02a721ea28b4e93ef5e6278b151bfff70b1222e733d482d309f28cd26881f688858add5f0133b0174af837339e32beb2043bb6e77085b0cfdfbb00030841fbb7671f468d48b607dc9b227"}}]}) syz_usb_control_io$uac3(r5, &(0x7f0000000880)={0x14, &(0x7f0000000700)={0x20, 0xe, 0xfe, {0xfe, 0xd, "3a1b1bf362e6ce2d0fce23544770c6ff9515004ef840f2c9482cbc8586b060493bff6b4ee7d72b1169bd34e41a85f7344060b8e4dd366452365919e7aa437d394e7ff1efeb289258796a076d3b4dcaaa83751f07d5f39a27951cf894d8038807a5fd3fc70cfe13dc16e8540c60100d9bece9398a536dfb088524ac2476d223a2ca2ac26000a0dc9f4e7a8b92e0fbe2e81bc99e69d18203a2ee376d1c32c00f744afbfba635455bad63d0fe6a05454ebc1cc0b1c42fc2ede50c34f8ee03b6c4f359514c996a695d42aae563734f4d4909313e40ff15c9da6d941d17ea4516bdba820cf1b83f910e19d5bb14a14ab5e16b84d51edfed4db70ac7d9ecbd"}}, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x400a}}}, &(0x7f0000000b80)={0x44, &(0x7f00000008c0)={0x40, 0xe, 0xc0, "a7f22a586fca9a596c239647c1979f37f35782c40eeb375dd1ed1f274a6c6c88bb543d5d1176a1ad2a9c115ace0819bd693b4fd6c528b047e792c43d2cc9c14918f9c383fed24c6de26e6f34b4de8c2ff129b8b5c70e6a1a1efa91906fd75d833085ead919cd19f8b4f3c13f59f7086f1b620a92f2ec9aa9f4f91d1c8bb40766cf0ed51b24cf1258382c79ee1d1113c28a22d18be8f86e7df7575e31b32826ed88903af93d9b3e901fba5192b018ed0e0b3e6954c111710ae6710ec2468b2844"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0xfe}, &(0x7f0000000a40)={0x20, 0x81, 0x3, '6\\f'}, &(0x7f0000000a80)={0x20, 0x82, 0x2, "a527"}, &(0x7f0000000ac0)={0x20, 0x83, 0x3, "018410"}, &(0x7f0000000b00)={0x20, 0x84, 0x3, "ca90f6"}, &(0x7f0000000b40)={0x20, 0x85, 0x3, "fdbea1"}}) 2.804341233s ago: executing program 3 (id=2186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000090601020000000000000000000000000900020073797a310000000005000100070000000c000780080009400000000b"], 0x34}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 2.734793243s ago: executing program 3 (id=2188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 2.675287339s ago: executing program 0 (id=2190): r0 = socket$unix(0x1, 0x1, 0x0) r1 = accept$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) (async) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x50, r0, 0x96e79000) (rerun: 64) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x1000, 0x3, 0x0, 0x915, 0xf5, 0x0}) syz_open_procfs$namespace(r3, &(0x7f00000001c0)='ns/uts\x00') (async) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) (async, rerun: 64) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000002c0)={@empty, @remote, 0x0}, &(0x7f0000000300)=0xc) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'xfrm0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x25c, r4, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xdd6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6e3}}}]}}, {{0x8, 0x1, r5}, {0x1c4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x453}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x38f}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x7, 0x0, 0x1, 0x9}, {0x9, 0x8, 0xb, 0x2}, {0x2, 0x0, 0x3, 0x7}, {0x3, 0x81, 0x3, 0x3}, {0x6, 0x6, 0x9, 0x800}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}]}, 0x25c}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38) ioctl$KVM_SET_USER_MEMORY_REGION2(r9, 0x40a0ae49, &(0x7f00000006c0)={0x0, 0x0, 0x26000, 0x1000, &(0x7f0000ffd000/0x1000)=nil, 0xfffffffffffffffb}) (async) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000780)={{0x2, 0x4e21, @loopback}, {0x306, @remote}, 0x7, {0x2, 0x4e22, @rand_addr=0x64010101}, 'macvlan0\x00'}) (async) r10 = accept(r1, &(0x7f0000000800)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000880)=0x80) sendmsg(r10, &(0x7f00000010c0)={&(0x7f00000008c0)=@in={0x2, 0x9, @empty}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000940)="2ddd1fa5ed24f557d1417b15d2e1aee8d9cc61af615ac157241b07a437efa7c74375937945ee0ee57d07f8606f36aac7f36828f855311b08839b4972f5d6a7dd3f053eeed860475546e26eb4ef9b5b6a19ea93d61fff7f387347d9a2944375dc11d56cab42deb7995788d5667de9702012c0caa0c9d1a8f4312a1c45540fd30591af20506aaf31b71c60edd98fbcc1115e47abaa2331c9ff33ec157d24ff9eb135e4ca6fd9cf7090f7a2e8ea9e981e2f082312", 0xb3}, {&(0x7f0000000a00)="13caebc01cb47522b6b3cf4d4bc477334ae96da014486cc95255d94d71a8bcd1a2e089f667a93debc21e64aa3bab56ee3e3a8fe1dda27b4c50f47da805cf70f424e743af989f4f5ce5c68fa17e6d34768dfef7327a4d879656c34b6fc4ab6236196607ffa59c34d41d48ace4b68c450e5e0767e558157d9726451ff391da48af95c750210e0d72744ec2f9589d6cc76732f18f32f5b82bb888f21391e8a00dcba185aed6bc23f291eeb8a13f3447d4ec6e8800292b0305dc7fb5a8d54c42f8b2438df03d469726a4dde2f8bd", 0xcc}, {&(0x7f0000000b00)="1127e21de5023fbd8332b10dc916f7869d9ea21def6f50fd9984be4a6e97b3bc2de121c633a1d60f269bb522c512dd75d4c2e59f297c459667f5e4fe4a9e08097fd37ec7fe70ef", 0x47}, {&(0x7f0000000b80)="c3a42529c90a96e7ae08f1d1206f6becf495b3d8c95e690a06ff5d1bd62bef49c3533ce2a6f1e83fc3a3549e92caea81907853238a5309ae29f85ae65e2ccac739b3b3ac01cd76a98220169d5486", 0x4e}, {&(0x7f0000000c00)="eb0d0d45632f32c81d45f3851dd0bfc43e9204223d5dae57660325b2291a92b9e4dbf90725966552235d61095d3275b4014ad9dd26ac7d88fbec0fb05d436bb6d03236d6c4032373c62aec8f05a0", 0x4e}, {&(0x7f0000000c80)="03ef96a1954493a408cd62f2ada3c22b3b4f92310697c195e89db5ced16cd14b20b6509d6219aa7d6658f716656071b64bb8ee58cdf3e4848ba35eec58049da9dd44b6b33b6554699fd6361a8502ad8a8e7054bb2d6e1a6d748ffa2e068707a5c9ea68dab17304a8e344c4fe1c79e073c57693783b4d040ef6ca60dd307d4b3c415efcfb", 0x84}], 0x6, &(0x7f0000000dc0)=[{0xd0, 0x119, 0xd8, "76617937658c3f3c2ae8198ab48b30dc5666d49aea140e5c80e37e9687ff78233417601722345e0a1dd9b3dc9b5cb6c9170510bbbe84ee3171e0ee236e793d5b117c983e3844a5a1ff790f1062eaaa69fc4a7ea801bcfdb16642f804557fb80e53b3ab75bb763a9647b307b72595dd990dde692b726bc7216323e925ac3b8f34a4009cab78fd1d4bfa18f2c3b6bc159741c6cde7e2a3f60f2a1c936529e98d7db7d053a9dd731f83af9f5873039fecc5b9f952a2bb41af96efda10a6"}, {0xb8, 0xa3d02addbb26b21d, 0xc2, "db12993bab82d7d16807feba5e57b40cb69e0be97fc59f35317a019390eaaa23014831cd86aa89bcfc3117de6bf47d46c7fa61efc7b9d3f41a29dc492f7294ebeb66717ec344bbfb219039461860e2d1d5a320cd18d45294395b29e49b985b0357cfcfa623bcb0c883b91cc66808f355cd760ace498f74261533210b0f19da5a1920baa4426051202f44503f3c92d6d7708b810a87638574fe72aa747603e81a2a7b2e"}, {0xe0, 0x10c, 0x1fb, "c1f44901f3c433db41c93fa6867065f1e5f122e727b8b15ecd92525703ae9daf46658dd2d79eafc43b2da719f14543ad54419fd094af03c6b32a35584f96ec247cc71b5529a53a75b0c8dd6c18cda7d1b43669a295a9cc73c6aee7b5686d4bf79588b55c66e7d169026f9fbf5047f46ada880adc35a07cefd29394ac11f742a23967a8a384d2627814ca25fb63f697dc3220fefe98a5fd8aa8568f31b3cf48cb0670691e0951b40fb74eff53b48df0dc00dc2a2772e2bebb6eebcf2e8d7fdc20027348b01ae8324440be"}, {0x68, 0x117, 0x3, "0b8aee71213d9c60fe24f41a30e2c1394c600c0d9690bd88a4c9d2130258a50cbe129362cb6446445f8a11449b0dfac403ab3124b49de5145701ea63e89aa8259d507bfdf246d9fb640b5f9762c5e04655a0f50c6f"}], 0x2d0}, 0x4000000) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), r10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r10, &(0x7f0000001300)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000012c0)={&(0x7f00000011c0)={0xe4, r11, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x5, 0x7b}}}}, [@NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1ff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2a}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x62b}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x3]}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x6]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3d4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x29}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1a}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x257]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x17}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}]}, @NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5e}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x36}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x401, 0x1]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x101}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) fchdir(r2) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r10, 0x84, 0x70, &(0x7f0000001340)={0x0, @in={{0x2, 0x4e20, @local}}, [0x0, 0x0, 0x8000000000000000, 0x4, 0x6, 0x1, 0x7, 0x4, 0x5, 0x401, 0x1ff, 0x4, 0xf36, 0x5]}, &(0x7f0000001440)=0x100) (async) r14 = syz_open_dev$vivid(&(0x7f0000001480), 0x0, 0x2) ioctl$VIDIOC_G_DV_TIMINGS(r14, 0xc0845658, &(0x7f00000014c0)={0x0, @bt={0x0, 0x7ff, 0x0, 0x1, 0x3, 0xfffffff1, 0xffffffff, 0x6, 0x3, 0x8, 0x6, 0x3, 0x4, 0x6, 0x0, 0x1a, {0x6, 0xffffff93}, 0x7, 0x2}}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x73, &(0x7f0000001580)={r13, 0x7ff, 0x30, 0xf9, 0x10}, &(0x7f00000015c0)=0x18) (async) setxattr$trusted_overlay_origin(&(0x7f0000001600)='./file0\x00', &(0x7f0000001640), &(0x7f0000001680), 0x2, 0x0) (async) sendmsg$AUDIT_GET(r10, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x10, 0x3e8, 0x100, 0x70bd28, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004042}, 0x14040000) 2.621528323s ago: executing program 3 (id=2191): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0x1, {0xa, 0x4e20, 0x7, @local, 0xf}}}, 0x80, 0x0}, 0x2004b761) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_usb_connect$printer(0x4, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0x7, 0x1, 0x2, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x10, 0xa, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0x3, 0x1}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x201, 0x1, 0x9, 0x5f, 0x8, 0x4}, 0x2f, &(0x7f0000000340)={0x5, 0xf, 0x2f, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0x0, 0x5}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0xb2, 0x5, 0x8e, 0x101, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x4, 0x2, 0x101}, @wireless={0xb, 0x10, 0x1, 0x2, 0x100, 0xe6, 0x2, 0x48d8, 0x3}]}, 0x1, [{0x2, &(0x7f0000000380)=@string={0x2}}]}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x402, 0x0) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000200)=0x9) landlock_create_ruleset(&(0x7f00000002c0)={0x2000, 0x2, 0x3, 0x0, 0x0, 0x6}, 0x30, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100000020008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x22) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x5, @pix={0xb78d0f0, 0x27, 0x47425247, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x3, 0x2, 0x7}}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000000)=0x1) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x20008b88) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='task\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) getsockopt(r5, 0xc6, 0x9, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 2.621115605s ago: executing program 0 (id=2192): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8002) ioctl$SG_IO(r6, 0x2285, &(0x7f00000003c0)={0x53, 0xffffffffffffffff, 0xff, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="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", 0x0, 0x101, 0x2, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[], 0xc8}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0xd1, 0x0, 0x0, @loopback, @rand_addr=0x640100fe}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r8, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'pim6reg1\x00', &(0x7f00000001c0)=@ethtool_pauseparam={0x1b, 0x4, 0x62, 0x5}}) r9 = socket$kcm(0x10, 0x2, 0x0) removexattr(&(0x7f0000000280)='./file2\x00', &(0x7f00000002c0)=@random={'security.', 'sit0\x00'}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200}) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f00000002800000", 0x2c}], 0x1}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0) 2.075672065s ago: executing program 5 (id=2194): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2080012, &(0x7f0000000100)={[{@verity_require}, {@uuid_off}, {@nfs_export_off}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'batadv0\x00'}}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) ptrace$setsig(0x4203, r3, 0x5, &(0x7f0000000280)={0x35, 0x54bc, 0x7fffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000001780)={'batadv0\x00', &(0x7f0000000740)=@ethtool_gstrings={0x1b, 0x2}}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x36) syz_open_dev$mouse(&(0x7f0000000180), 0x7, 0x856fb86021bcdd8d) 1.845462842s ago: executing program 5 (id=2195): mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x2, 0x0, 0x5}) (async) mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x2, 0x0, 0x5}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000001c0007800c0004002e2e0000000000000c0003002d"], 0x30}, 0x1, 0x0, 0x0, 0x80001}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x40}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0xff}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x4}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x7fffffff}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40094}, 0x8881) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r4, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x4f}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000090}, 0x4) 1.845055224s ago: executing program 1 (id=2196): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10000000, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) 1.675968634s ago: executing program 5 (id=2197): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)={0x2, 0x3, 0x0, 0x5, 0xe, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0xc0000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @empty, 0x6}}]}, 0x70}, 0x1, 0x7}, 0x0) 1.651496051s ago: executing program 0 (id=2198): r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x80079a3) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x1, &(0x7f0000000340)=""/131, &(0x7f0000000100)=0x83) (async) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, {{0xa, 0x0, 0x94, @empty}}}, 0x108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) lseek(r0, 0x80000, 0x4) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xec, r3, 0xa04, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x38}}}}, [@NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x81, 0x4, 0xc16, 0x0, 0x0, 0xffffffff, 0x6, 0x5, 0x0, 0x8]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x100}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x14f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x46}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9f8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5c7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4b6}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x28}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2ad}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xf6c}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xc23}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xc5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x29}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7614}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x49}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004800) 1.57771927s ago: executing program 5 (id=2199): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x41, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x3}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 1.515423754s ago: executing program 1 (id=2200): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000100)="a7", 0x1}], 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xac2b9}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x4c}}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e22, 0x4, @loopback, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000029000000040000000200000000000000280000000000000029000000050000000002020100000000ff03000000000000000000000000000118"], 0x58}, 0x400a0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) r4 = eventfd(0x5ef) ioctl$KVM_IOEVENTFD(r3, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0xd000, 0x0, r4}) 1.47499849s ago: executing program 5 (id=2201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 1.381688666s ago: executing program 5 (id=2202): syz_open_dev$usbmon(&(0x7f0000000000), 0x7, 0xa2002) io_setup(0x8, &(0x7f0000004200)) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2c}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000018c0)=@raw={'raw\x00', 0x8, 0x3, 0x540, 0x0, 0x11, 0x148, 0x340, 0x7f000000, 0x4a8, 0x2a8, 0x2a8, 0x4a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, '\x00', {0x7}}}}, {{@uncond, 0x0, 0x128, 0x168, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth1_to_bridge\x00', {}, 'erspan0\x00', {0xff}, 0x4, 0x1e}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x3, {0xff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20010000100021040000000000000000fe880000000000000000000000000001e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000000002b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d983f8bebddd818700000000000000000000000000000000000000000000000002000000000000000000000014000e"], 0x120}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4000000) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r6, 0x0) keyctl$join(0x1, &(0x7f0000000340)={'syz', 0x1}) io_submit(0x0, 0x1, &(0x7f0000002100)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r6, 0x0, 0x0, 0x1, 0x0, 0x3, r6}]) write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x2000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x2, 0x5, 0x6, 0xce020b, 0x0, 0x9}, 0x9c) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='uid_map\x00') write$dsp(r7, &(0x7f0000000380)="9e2b2dd1232e61764b8180ba78a820a17a3a3f54d708b1d27e0c00a044ab3f3dd2f6646c5dada4c06aab7e80e2562fa097fc483a942c3f99d414bbe19152c6ff55b452a3b16781da33e5d6bc2d4cf8261215c7eb890c3909c89eb957645bb0c5fb58c4cf433110ff74333b39aaa23992e1cc2fe9a1211aa6dd13760b5e8df1035768ac66011e84119c7fa7b7d5b2a9f3df794b86f2842f66270e48175231afd180bff352bb059e879ea74642b4ffc7f8df4b956b1d27e3e0c6bbd072e48d0241dac3afea04c2cb5e153199f3ff130e36b683aee19e17034de5cd29bde5e391c9eac1d6fce881b3eed58629275452", 0xee) syz_open_dev$dvb_frontend(&(0x7f0000000200), 0x3, 0x2) io_setup(0x5, &(0x7f00000000c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2}]) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@empty, @remote}, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001000010400008ccf10de020000000000", @ANYRES32=0x0, @ANYBLOB="030500000002000008001d0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 509.545074ms ago: executing program 0 (id=2203): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="78000000100003040000000000000000000074", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000440)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x7, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x30, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1c, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "c1963bf57e73e3279fdb8334"}}}}, 0x3e) 255.999045ms ago: executing program 1 (id=2204): sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="aa305e084f7d181e9227199f4be0280801cfe8f7a0cd2526f0c460360e52201d004e5d989e22b2fe576063e8e4ab90ac22d268748a7a2cea85db55cfc84d6f93195a38c744a4386837f10ade1064249726760412f816f37d7240a40712155d1a10f61b32b02767507626b8ad1dfefa7acdb9ff7bc1bd5fa86b736fd34374dd5e96aac456d35bb2e1d8035e08e062297243e5dbcc5c51999d25cbbd4e9262b048de949f1a6adf8b60f1e17497c257717e97f7631d67bdd2b4c16b22587b932b181ede28ec85a2b142609fb0d43f850a"], 0x1c}}, 0x2000040) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000180)={0x0, 0x0, [0x6, 0x3, 0x3fffc000, 0x6, 0x7, 0x7, 0x10, 0x2]}) 141.415382ms ago: executing program 0 (id=2205): r0 = getpid() (async) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') syz_open_procfs(r0, &(0x7f0000000040)='attr/sockcreate\x00') 0s ago: executing program 0 (id=2206): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000000)="b9ffddc1ddcccdde75537d5326a4dfff70bf2dfe443b1b5e2a9080f3", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0xc, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)="4eb7627d651221dfe543962df18dd93e7a2359215df6d5f727cb368e8141290f4edd61ac885a27e5c5184995dc53ab918a6e26713db29a", &(0x7f0000000680)="4352228044cf0dffd6360c5b1650292e9f86c0f8f99b0479163bee4a816e13694fb7329f6f4aa78c21b85e7b8435028f1c51907ff9c9eca0cf3f7710ee7d6d74ed0cd6dc14faa9d4c3e720a0390b7e62753023f8c62254b1847a7c6d04749d86d22bfed856672ee1a66e40528d8a4ae309e4425cf88e4a2de1b61fe231a0ee4cbe3cf3ddbd4c9ca7595baeda80e297e35a3a37bb52258180c165d4aa21b1dd409c553c1c23bb80bf66d0cd25d3fdce1d8cb86423f0247d08ce3ef75718d6a20f62c0", 0x76, r1, 0x4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x4, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0x1}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x40}, {}, {}, {}, {}, {0x20, 0xf1}, {}, {}, {0x3}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x8, 0x8, {0x0, 0x1}, {0x74, 0x4}, @const={0xb0, {0x1, 0x464, 0x1ff, 0x69b}}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000001c0)={0x1, 0x10, &(0x7f00000024c0)="739c17c2c2cc029eecad068741dfda99"}) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xfff3, 0xb}, {0x5, 0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xf, [0xb, 0x4, 0xc, 0x0, 0x7, 0x5, 0xc, 0x3, 0x7, 0x8, 0xd, 0xc, 0xe, 0xf, 0xb, 0x8], 0x0, [0x7, 0x3, 0x2, 0x2, 0x823, 0x8000, 0x9, 0x7, 0x9, 0xeaf, 0x8, 0x8, 0x0, 0x100, 0x3ff, 0x9], [0xe, 0x7, 0x2, 0x0, 0x3, 0x2, 0x7, 0x7, 0x7, 0x3, 0x8, 0x3, 0x8, 0x8, 0x4bc3, 0xff]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24004070}, 0x24000890) write$char_usb(r2, &(0x7f0000000040)="e2", 0xff0f) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) mbind(&(0x7f000081e000/0x2000)=nil, 0x2000, 0x2005, 0x0, 0x241, 0x5) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x14, r6, 0x100, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x11) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x21, 0x1, 0xfffffffd, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3f) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000008000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ddffdcfffffdffffff006171edf06ea9cb2d80791146ae64000086aa0000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0c000000040000000400000001fcffff00000000", @ANYRES32=r9, @ANYBLOB="00003a27099facc5c8aef453b3413402eb0f9416c77417eb6a220e0b74539fae089c2f8f9a861f623336ee83290481ef35fa5f62a445fcce5dce8a1c76566411ac8366f7a1cfec78ce6d86c3b2d13cdf41f32af0694c1e1b0513ed4b36a07ed3a7537e1f57e29ce2ae77b027b5e976aa3cf21d31bf3444eba20162d25f21361268707532050144e2e3197d108d19231b31469688ecfcdb7a6355f925286d6ea1f73401695064fc73f2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x48e300, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) kernel console output (not intermixed with test programs): sadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 517.225588][ T30] audit: type=1400 audit(1782138464.687:589): avc: denied { mount } for pid=12249 comm="syz.3.1807" name="/" dev="overlay" ino=1823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 517.249170][ T24] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 517.474090][T10340] usb 3-1: USB disconnect, device number 79 [ 517.555265][ T30] audit: type=1400 audit(1782138464.715:590): avc: denied { watch watch_reads } for pid=12249 comm="syz.3.1807" path="/357/bus" dev="overlay" ino=1823 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 517.885226][ T24] usb 2-1: device descriptor read/64, error -71 [ 517.915810][T12263] netlink: 'syz.3.1810': attribute type 3 has an invalid length. [ 517.930530][T12263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1810'. [ 517.968563][T12267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.986966][T12267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.015614][T12267] syzkaller0: entered promiscuous mode [ 518.027409][T12267] syzkaller0: entered allmulticast mode [ 518.057929][ T30] audit: type=1400 audit(1782138465.619:591): avc: denied { setopt } for pid=12259 comm="syz.5.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 518.156163][ T24] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 518.318960][T10340] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 518.331243][ T24] usb 2-1: device descriptor read/64, error -71 [ 518.341029][ T5702] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 518.453105][ T24] usb usb2-port1: attempt power cycle [ 518.524662][ T5702] usb 4-1: Using ep0 maxpacket: 32 [ 518.534040][T10340] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 518.553360][T10340] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 518.567628][T12279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1817'. [ 518.567695][T10340] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 518.588134][T10340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.597461][ T5702] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 518.606747][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.616662][ T5702] usb 4-1: Product: syz [ 518.620922][ T5702] usb 4-1: Manufacturer: syz [ 518.621175][T12266] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 518.625880][ T5702] usb 4-1: SerialNumber: syz [ 518.649835][T10340] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 518.661335][ T5702] usb 4-1: config 0 descriptor?? [ 518.676079][ T5702] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 518.699540][ T5702] dvb-usb: bulk message failed: -22 (4/0) [ 518.705368][ T5702] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 518.715767][ T5702] dvb-usb: bulk message failed: -22 (5/0) [ 518.721914][ T5702] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 518.733239][ T5702] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 518.742844][ T5702] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 518.750902][ T5702] usb 4-1: media controller created [ 518.760667][ T5702] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 518.774733][ T5702] usb 4-1: selecting invalid altsetting 3 [ 518.780574][ T5702] ttusb2: set interface to alts=3 failed [ 518.802177][ T5702] DVB: Unable to find symbol tda10086_attach() [ 518.809031][ T5702] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 518.818151][ T5702] dvb-usb: bulk message failed: -22 (4/0) [ 518.823899][ T5702] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 518.828123][ T24] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 518.835199][ T5702] dvb-usb: bulk message failed: -22 (5/0) [ 518.847534][ T5702] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 518.858869][ T5702] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 518.861229][ T24] usb 2-1: device descriptor read/8, error -71 [ 518.892501][ T5726] usb 4-1: USB disconnect, device number 80 [ 518.904061][ T8122] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 518.929548][ T5726] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 519.010479][T12283] netlink: 'syz.2.1812': attribute type 10 has an invalid length. [ 519.019344][T12283] veth0_vlan: left promiscuous mode [ 519.027803][T12283] veth0_vlan: entered promiscuous mode [ 519.037750][T12283] team0: Device veth0_vlan failed to register rx_handler [ 519.123458][ T8122] usb 1-1: Using ep0 maxpacket: 8 [ 519.178367][ T8122] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 519.226094][ T8122] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 519.281146][ T8122] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 519.291549][ T8122] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 519.303665][ T8122] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 519.317726][ T8122] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 519.329231][ T8122] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.644088][ T8122] usb 1-1: usb_control_msg returned -32 [ 519.982879][ T8122] usbtmc 1-1:16.0: can't read capabilities [ 520.251500][ T8122] usb 1-1: USB disconnect, device number 79 [ 520.260016][ T5702] usb 3-1: USB disconnect, device number 80 [ 520.510251][T12300] netlink: 'syz.1.1824': attribute type 3 has an invalid length. [ 520.518416][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1824'. [ 520.649216][ T5726] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 520.824302][ T5726] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 520.854182][ T5726] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 520.869228][ T8122] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 520.886468][ T5726] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 520.897670][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.917123][T12298] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 520.937422][ T5726] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 521.063081][ T8122] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 521.077948][ T8122] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 521.111587][ T8122] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 521.140280][ T8122] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 521.633866][T12316] netlink: 'syz.3.1823': attribute type 10 has an invalid length. [ 521.650448][ T8122] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 521.661462][ T8122] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.672387][ T8122] usb 2-1: config 0 descriptor?? [ 521.691319][T12302] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 521.711443][T12316] veth0_vlan: left promiscuous mode [ 521.730363][T12316] veth0_vlan: entered promiscuous mode [ 521.759952][T12316] team0: Device veth0_vlan failed to register rx_handler [ 521.846488][T12318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.887873][T12318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.181068][ T5702] usb 4-1: USB disconnect, device number 81 [ 522.219727][ T8122] plantronics 0003:047F:FFFF.0029: reserved main item tag 0xd [ 522.241033][ T8122] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 522.296240][T11613] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 522.469622][T11613] usb 3-1: Using ep0 maxpacket: 32 [ 522.477773][T11613] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 522.487129][T11613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.495288][T11613] usb 3-1: Product: syz [ 522.499463][T11613] usb 3-1: Manufacturer: syz [ 522.504165][T11613] usb 3-1: SerialNumber: syz [ 522.511321][T11613] usb 3-1: config 0 descriptor?? [ 522.519309][T11613] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 522.522571][ T8122] usb 2-1: USB disconnect, device number 79 [ 522.588842][T10340] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 522.751390][T10340] usb 1-1: Using ep0 maxpacket: 32 [ 522.757807][T10340] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 522.768735][T10340] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 522.791174][T10340] usb 1-1: config 0 interface 0 has no altsetting 0 [ 522.802513][T10340] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 522.811858][T10340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.825423][T10340] usb 1-1: Product: syz [ 522.831806][T12329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.842094][T12329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.851629][T10340] usb 1-1: Manufacturer: syz [ 522.857427][T10340] usb 1-1: SerialNumber: syz [ 522.865449][T12329] xt_policy: output policy not valid in PREROUTING and INPUT [ 522.873398][T10340] usb 1-1: config 0 descriptor?? [ 522.988159][ T30] audit: type=1400 audit(1782138470.168:592): avc: denied { watch } for pid=12334 comm="syz.3.1835" path="/366/bus" dev="tmpfs" ino=1878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 523.014994][ T30] audit: type=1400 audit(1782138470.168:593): avc: denied { watch_sb watch_reads } for pid=12334 comm="syz.3.1835" path="/366/bus" dev="tmpfs" ino=1878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 523.083123][T12337] syzkaller0: entered promiscuous mode [ 523.089122][T12337] syzkaller0: entered allmulticast mode [ 523.854497][T12352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.855287][T12352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.994516][T12356] vxlan0: entered promiscuous mode [ 524.000095][T12356] vxlan0: entered allmulticast mode [ 524.007011][ T7125] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.016140][ T7125] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.025837][ T7125] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.034803][ T7125] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.039888][T12356] netlink: 'syz.0.1842': attribute type 2 has an invalid length. [ 524.073798][T11613] gspca_ov534_9: reg_w failed -110 [ 524.164988][ T30] audit: type=1400 audit(1782138471.266:594): avc: denied { getopt } for pid=12357 comm="syz.0.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 524.294480][T10340] gs_usb 1-1:0.0: Couldn't get device config: (err=-110) [ 524.304158][T10340] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -110 [ 524.760322][T11613] gspca_ov534_9: Unknown sensor 0000 [ 524.760399][T11613] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 525.390897][T12375] syzkaller0: entered promiscuous mode [ 525.397647][T12375] syzkaller0: entered allmulticast mode [ 525.518399][ T5726] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 525.662170][T12377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.714380][T12377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.767349][T11613] usb 3-1: USB disconnect, device number 81 [ 525.842854][ T5726] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 525.852309][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.860509][ T5726] usb 4-1: Product: syz [ 525.864845][ T5726] usb 4-1: Manufacturer: syz [ 525.869535][ T5726] usb 4-1: SerialNumber: syz [ 525.876096][ T5726] usb 4-1: config 0 descriptor?? [ 525.882893][ T5726] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 525.894432][ T5726] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 525.906458][ T5726] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 526.057156][ T24] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 526.100242][T11613] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 526.130900][T12386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.132951][ T7125] wlan0: Selected IBSS BSSID 66:f8:64:66:4a:a8 based on configured SSID [ 526.140890][T12386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.230428][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 526.367394][T12387] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1847'. [ 526.377171][ T24] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 526.386013][ T24] usb 2-1: config 0 has no interface number 0 [ 526.392440][ T24] usb 2-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 526.413784][ T24] usb 2-1: config 0 interface 85 has no altsetting 0 [ 526.437550][T11613] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 526.438122][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 526.458832][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.458838][T11613] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 526.477775][ T24] usb 2-1: Product: syz [ 526.482572][ T24] usb 2-1: Manufacturer: syz [ 526.486008][T11613] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 526.487377][ T24] usb 2-1: SerialNumber: syz [ 526.526829][ T24] usb 2-1: config 0 descriptor?? [ 526.538361][ T24] appletouch 2-1:0.85: Could not find int-in endpoint [ 526.548815][T11613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.548877][ T24] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 526.568389][ T24] usbhid 2-1:0.85: couldn't find an input interrupt endpoint [ 526.587552][T12379] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 526.609017][T12390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.617716][T11613] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 526.638340][T12390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.675727][ T5733] usb 4-1: USB disconnect, device number 82 [ 526.921591][T12392] netlink: 'syz.2.1850': attribute type 10 has an invalid length. [ 526.930438][T12392] veth0_vlan: left promiscuous mode [ 526.937431][T12392] veth0_vlan: entered promiscuous mode [ 526.945740][T12392] team0: Device veth0_vlan failed to register rx_handler [ 527.619454][ T30] audit: type=1400 audit(1782138474.440:595): avc: denied { unmount } for pid=11547 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 527.707492][T12403] FAULT_INJECTION: forcing a failure. [ 527.707492][T12403] name failslab, interval 1, probability 0, space 0, times 0 [ 527.756518][T12403] CPU: 1 UID: 0 PID: 12403 Comm: syz.5.1856 Tainted: G L syzkaller #0 PREEMPT(full) [ 527.756541][T12403] Tainted: [L]=SOFTLOCKUP [ 527.756546][T12403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 527.756552][T12403] Call Trace: [ 527.756558][T12403] [ 527.756563][T12403] dump_stack_lvl+0x100/0x190 [ 527.756581][T12403] should_fail_ex.cold+0x5/0xa [ 527.756594][T12403] ? __kmalloc_cache_noprof+0x53/0x6e0 [ 527.756610][T12403] should_failslab+0xc2/0x120 [ 527.756622][T12403] __kmalloc_cache_noprof+0x7a/0x6e0 [ 527.756636][T12403] ? vhost_task_create+0xee/0x370 [ 527.756647][T12403] ? trace_contention_end+0x126/0x160 [ 527.756660][T12403] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 527.756679][T12403] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 527.756691][T12403] vhost_task_create+0xee/0x370 [ 527.756701][T12403] ? __pfx_vhost_task_create+0x10/0x10 [ 527.756711][T12403] ? rcu_is_watching+0x12/0xc0 [ 527.756727][T12403] ? __pfx_vhost_task_fn+0x10/0x10 [ 527.756738][T12403] ? kvm_vcpu_ioctl+0x6f3/0x1700 [ 527.756750][T12403] kvm_mmu_post_init_vm+0x1b3/0x360 [ 527.756766][T12403] kvm_arch_vcpu_ioctl_run+0x66/0x1890 [ 527.756782][T12403] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 527.756792][T12403] ? lock_release+0x24d/0x310 [ 527.756804][T12403] kvm_vcpu_ioctl+0x730/0x1700 [ 527.756816][T12403] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 527.756827][T12403] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 527.756838][T12403] ? do_vfs_ioctl+0x226/0x13e0 [ 527.756851][T12403] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 527.756864][T12403] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 527.756876][T12403] ? rcu_is_watching+0x12/0xc0 [ 527.756891][T12403] ? hook_file_ioctl_common+0x140/0x440 [ 527.756904][T12403] ? selinux_file_ioctl+0x13b/0x290 [ 527.756914][T12403] ? selinux_file_ioctl+0xb6/0x290 [ 527.756923][T12403] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 527.756935][T12403] __x64_sys_ioctl+0x18e/0x210 [ 527.756948][T12403] do_syscall_64+0x115/0x870 [ 527.756958][T12403] ? clear_bhb_loop+0x40/0x90 [ 527.756970][T12403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.756983][T12403] RIP: 0033:0x7f3fa899ce59 [ 527.756993][T12403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.757004][T12403] RSP: 002b:00007f3fa97c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 527.757015][T12403] RAX: ffffffffffffffda RBX: 00007f3fa8c15fa0 RCX: 00007f3fa899ce59 [ 527.757022][T12403] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 527.757029][T12403] RBP: 00007f3fa97c2090 R08: 0000000000000000 R09: 0000000000000000 [ 527.757035][T12403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.757041][T12403] R13: 00007f3fa8c16038 R14: 00007f3fa8c15fa0 R15: 00007ffc9878b608 [ 527.757051][T12403] [ 528.078481][T12393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.087325][T12393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.119684][ T8122] usb 3-1: USB disconnect, device number 82 [ 528.147916][ T30] audit: type=1400 audit(1782138474.929:596): avc: denied { bind } for pid=12401 comm="syz.0.1858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 528.195900][T12402] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.207285][T12402] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.262451][T12402] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.274057][T12402] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.287993][T12408] syzkaller0: entered promiscuous mode [ 528.293985][T12408] syzkaller0: entered allmulticast mode [ 528.326503][T12402] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.338341][T12393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.347068][T12393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.356783][T12402] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.376120][T11613] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 528.425193][T12410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.436308][T12410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.448509][T12402] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.460438][T12402] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.595468][T11613] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 528.610400][ T6210] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.622519][T11613] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 528.638282][ T6210] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.653106][T11613] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 528.669132][T11613] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 528.690606][ T6210] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.699240][ T6210] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.742896][T11613] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 528.774013][T11613] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=3 [ 528.797987][T11613] usb 4-1: Manufacturer: syz [ 528.809103][T11613] usb 4-1: SerialNumber: syz [ 528.818357][ T6210] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.819832][T11613] usb 4-1: config 0 descriptor?? [ 528.854041][ T6210] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.889557][ T6210] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.920533][ T6210] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.336486][T12417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.346016][T12417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.524540][T10340] usb 2-1: USB disconnect, device number 80 [ 529.687282][T11613] usb 4-1: USB disconnect, device number 83 [ 529.809604][T12427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.825613][T12427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.838777][T12427] xt_policy: output policy not valid in PREROUTING and INPUT [ 529.948844][ T5726] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 530.002024][T10340] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 530.114308][ T5726] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 530.125850][ T5726] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 530.139006][T12431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.139028][ T5726] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 530.164852][T12431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.175350][ T5726] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 530.218072][T10340] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.228941][T10340] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 530.238138][T10340] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 530.252426][ T5726] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 530.253725][T10340] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 530.262315][ T5726] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=3 [ 530.271025][T10340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.287558][T10340] usb 2-1: Product: syz [ 530.287598][T10340] usb 2-1: Manufacturer: syz [ 530.287646][ T5726] usb 3-1: Manufacturer: syz [ 530.287659][T10340] usb 2-1: SerialNumber: syz [ 530.287718][ T5726] usb 3-1: SerialNumber: syz [ 530.295542][T10340] usb 2-1: config 0 descriptor?? [ 530.296276][ T5726] usb 3-1: config 0 descriptor?? [ 530.334520][T10340] uvcvideo 2-1:0.0: probe with driver uvcvideo failed with error -22 [ 530.377007][T12435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.377543][T12435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.538097][ T5726] usb 3-1: USB disconnect, device number 83 [ 530.563709][ T2392] usb 2-1: USB disconnect, device number 81 [ 530.641210][T10340] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 530.817294][T10340] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 530.827077][T10340] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.835094][T10340] usb 4-1: Product: syz [ 530.839308][T10340] usb 4-1: Manufacturer: syz [ 530.844030][T10340] usb 4-1: SerialNumber: syz [ 530.849774][T10340] usb 4-1: config 0 descriptor?? [ 530.857310][T10340] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 530.868308][T10340] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 530.880406][T10340] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 531.148590][T12437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1869'. [ 531.161123][T12437] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1869'. [ 531.194259][T12438] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1868'. [ 531.206261][T12440] syzkaller0: entered promiscuous mode [ 531.212072][T12440] syzkaller0: entered allmulticast mode [ 531.258322][T10340] usb 4-1: USB disconnect, device number 84 [ 531.409774][T12443] input: syz1 as /devices/virtual/input/input82 [ 531.478220][T12446] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1872'. [ 531.752217][ T30] audit: type=1400 audit(1782138478.260:597): avc: denied { listen } for pid=12447 comm="syz.1.1873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 531.773562][ T30] audit: type=1400 audit(1782138478.288:598): avc: denied { accept } for pid=12447 comm="syz.1.1873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 532.613801][T10340] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 532.673734][T12460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.682568][T12460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.693168][ T30] audit: type=1400 audit(1782138479.127:599): avc: denied { getopt } for pid=12459 comm="syz.5.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 532.815767][T10340] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 532.842182][T10340] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 532.855241][T10340] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 532.865638][T10340] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 532.877952][T10340] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 532.889875][T10340] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 532.906076][T10340] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 532.915694][T10340] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 532.924144][T10340] usb 3-1: Product: syz [ 532.933516][T10340] usb 3-1: Manufacturer: syz [ 532.949045][T12456] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 532.959059][T10340] cdc_wdm 3-1:1.0: skipping garbage [ 532.964479][T10340] cdc_wdm 3-1:1.0: skipping garbage [ 532.976847][T10340] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 532.985435][T10340] cdc_wdm 3-1:1.0: Unknown control protocol [ 533.020969][T12467] syzkaller0: entered promiscuous mode [ 533.029239][T12467] syzkaller0: entered allmulticast mode [ 533.112223][ T5702] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 533.181160][ T30] audit: type=1400 audit(1782138479.579:600): avc: denied { read write } for pid=12455 comm="syz.2.1876" name="cdc-wdm0" dev="devtmpfs" ino=4297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 533.181805][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 533.206774][ T30] audit: type=1400 audit(1782138479.579:601): avc: denied { open } for pid=12455 comm="syz.2.1876" path="/dev/cdc-wdm0" dev="devtmpfs" ino=4297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 533.211664][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 533.212967][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 533.248335][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 533.255284][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 533.261887][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 533.268131][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 533.274745][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 533.280999][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 533.287582][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 533.293851][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 533.300430][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 533.307404][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 533.313998][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 533.320422][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 533.327016][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 533.333254][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 533.339854][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 533.346096][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 533.352672][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 533.383217][ T5628] Bluetooth: hci2: command 0x0406 tx timeout [ 533.418520][ T8122] usb 3-1: USB disconnect, device number 84 [ 533.418560][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 533.465948][ T5702] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 533.487071][T12472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.510093][ T5702] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 533.526617][T12472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.538368][ T5702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 533.577677][ T5702] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 533.593653][T12475] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 533.607822][ T5702] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 533.621323][ T5702] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=3 [ 533.629625][ T5702] usb 2-1: Manufacturer: syz [ 533.634642][ T5702] usb 2-1: SerialNumber: syz [ 533.658352][ T5702] usb 2-1: config 0 descriptor?? [ 533.818641][ T5726] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 533.909134][ T5702] usb 2-1: USB disconnect, device number 82 [ 533.992239][ T5726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.003831][ T5726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.015249][ T5726] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 534.024804][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.035254][ T5726] usb 4-1: config 0 descriptor?? [ 534.611048][ T30] audit: type=1400 audit(1782138480.899:602): avc: denied { name_bind } for pid=12498 comm="syz.2.1894" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 534.662044][ T30] audit: type=1326 audit(1782138480.945:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12500 comm="syz.2.1895" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d0259ce59 code=0x0 [ 535.046303][ T5726] usbhid 4-1:0.0: can't add hid device: -71 [ 535.078263][ T5726] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 535.148095][T12509] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1896'. [ 535.196084][ T5726] usb 4-1: USB disconnect, device number 85 [ 535.295067][T12510] tipc: Enabled bearer , priority 0 [ 535.303661][T12510] syzkaller0: entered promiscuous mode [ 535.309476][T12510] syzkaller0: entered allmulticast mode [ 535.322779][T12510] tipc: Resetting bearer [ 535.335206][T12508] tipc: Resetting bearer [ 535.342182][T12508] tipc: Disabling bearer [ 536.111122][ T30] audit: type=1400 audit(1782138482.154:604): avc: denied { read } for pid=12519 comm="syz.2.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 536.373091][ T30] audit: type=1400 audit(1782138482.523:605): avc: denied { unmount } for pid=11547 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 536.471176][ T30] audit: type=1400 audit(1782138482.551:606): avc: denied { append } for pid=12524 comm="syz.1.1903" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 536.646029][T12535] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1902'. [ 536.823304][T12534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.834737][T12534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.374830][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 537.374860][ T30] audit: type=1400 audit(1782138483.455:609): avc: denied { ioctl } for pid=12542 comm="syz.3.1906" path="socket:[39816]" dev="sockfs" ino=39816 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 537.891801][ T5625] Bluetooth: hci2: command 0x0406 tx timeout [ 538.329198][ T30] audit: type=1400 audit(1782138484.331:610): avc: denied { write } for pid=12546 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 538.475677][T12545] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 538.495455][T12545] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 538.522214][T12545] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 538.560650][T12545] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 538.604316][T12545] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 538.623334][ T30] audit: type=1400 audit(1782138484.599:611): avc: denied { write } for pid=12565 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 538.700892][T12545] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 538.748909][T12545] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 538.769130][T12545] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 539.449040][T12545] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 539.467766][T12545] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 539.558516][T12576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.567654][T12576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.405735][ T30] audit: type=1400 audit(1782138486.241:612): avc: denied { write } for pid=12571 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 540.490646][ T30] audit: type=1400 audit(1782138486.324:613): avc: denied { write } for pid=12593 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 540.580235][T11613] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 540.771275][T12605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.781828][T12605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.821009][T11613] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 540.872199][T11613] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 540.904705][T11613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 540.917180][T11613] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 540.953405][T11613] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 540.969361][T11613] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=3 [ 540.979726][T11613] usb 2-1: Manufacturer: syz [ 540.984743][T11613] usb 2-1: SerialNumber: syz [ 540.996838][T11613] usb 2-1: config 0 descriptor?? [ 541.053244][ T30] audit: type=1400 audit(1782138486.841:614): avc: denied { write } for pid=12595 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 541.110640][ T30] audit: type=1400 audit(1782138486.887:615): avc: denied { write } for pid=12617 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 541.218889][ T5733] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 541.323877][ T5726] usb 2-1: USB disconnect, device number 83 [ 541.359643][ T30] audit: type=1400 audit(1782138487.118:616): avc: denied { write } for pid=12622 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 541.415554][ T5733] usb 3-1: unable to get BOS descriptor or descriptor too short [ 541.429900][ T5733] usb 3-1: not running at top speed; connect to a high speed hub [ 541.448924][T12635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.449739][ T5733] usb 3-1: config index 0 descriptor too short (expected 8920, got 105) [ 541.479096][ T30] audit: type=1400 audit(1782138487.229:617): avc: denied { write } for pid=12634 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 541.481150][ T5733] usb 3-1: config 105 has too many interfaces: 130, using maximum allowed: 32 [ 541.511788][T12635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.542200][ T5733] usb 3-1: config 105 has an invalid descriptor of length 183, skipping remainder of the config [ 541.831594][ T5733] usb 3-1: config 105 has 0 interfaces, different from the descriptor's value: 130 [ 541.853505][ T5733] usb 3-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40 [ 541.864411][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.882816][ T5733] usb 3-1: Product: syz [ 541.890036][ T5733] usb 3-1: Manufacturer: syz [ 541.908258][ T5733] usb 3-1: SerialNumber: syz [ 542.093288][ T30] audit: type=1400 audit(1782138487.801:618): avc: denied { write } for pid=12637 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 542.169655][ T5702] usb 3-1: USB disconnect, device number 85 [ 542.198604][T12656] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1920'. [ 542.286996][ T8122] usb 4-1: new low-speed USB device number 86 using dummy_hcd [ 542.455888][ T8122] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 542.476064][ T8122] usb 4-1: config 0 has no interface number 0 [ 542.483564][ T8122] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 542.519414][ T8122] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 542.555969][ T8122] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 542.588475][ T8122] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 542.612858][ T8122] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 542.638777][ T8122] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 542.671183][ T8122] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 542.691676][ T8122] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.717809][ T8122] usb 4-1: config 0 descriptor?? [ 542.735999][T12648] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 542.747208][T12648] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 542.770243][T12680] FAULT_INJECTION: forcing a failure. [ 542.770243][T12680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.795339][T12680] CPU: 0 UID: 0 PID: 12680 Comm: syz.5.1924 Tainted: G L syzkaller #0 PREEMPT(full) [ 542.795367][T12680] Tainted: [L]=SOFTLOCKUP [ 542.795374][T12680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 542.795385][T12680] Call Trace: [ 542.795391][T12680] [ 542.795398][T12680] dump_stack_lvl+0x100/0x190 [ 542.795421][T12680] should_fail_ex.cold+0x5/0xa [ 542.795442][T12680] _copy_from_user+0x2e/0xd0 [ 542.795464][T12680] do_tcp_getsockopt+0x20d1/0x2aa0 [ 542.795490][T12680] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 542.795512][T12680] ? is_bpf_text_address+0x8a/0x1a0 [ 542.795531][T12680] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 542.795556][T12680] ? is_bpf_text_address+0x8a/0x1a0 [ 542.795574][T12680] ? lock_release+0x24d/0x310 [ 542.795591][T12680] ? bpf_ksym_find+0x128/0x1c0 [ 542.795613][T12680] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 542.795639][T12680] ? unwind_get_return_address+0x59/0xa0 [ 542.795663][T12680] ? arch_stack_walk+0xa6/0xf0 [ 542.795688][T12680] ? rcu_is_watching+0x12/0xc0 [ 542.795711][T12680] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 542.795731][T12680] ? rcu_is_watching+0x12/0xc0 [ 542.795751][T12680] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 542.795769][T12680] ? lock_release+0x24d/0x310 [ 542.795787][T12680] ? avc_has_perm_noaudit+0x145/0x3b0 [ 542.795807][T12680] ? avc_has_perm+0x135/0x1e0 [ 542.795826][T12680] ? __pfx_avc_has_perm+0x10/0x10 [ 542.795845][T12680] ? rcu_is_watching+0x12/0xc0 [ 542.795866][T12680] ? __might_fault+0xc5/0x140 [ 542.795888][T12680] ? rcu_is_watching+0x12/0xc0 [ 542.795909][T12680] ? __might_fault+0xc5/0x140 [ 542.795934][T12680] ? _copy_from_user+0x59/0xd0 [ 542.795958][T12680] tcp_getsockopt+0xe4/0x110 [ 542.795981][T12680] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 542.796012][T12680] do_sock_getsockopt+0x50a/0x6e0 [ 542.796036][T12680] ? ksys_write+0x12a/0x250 [ 542.796058][T12680] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 542.796081][T12680] ? rcu_is_watching+0x12/0xc0 [ 542.796102][T12680] ? rcu_is_watching+0x12/0xc0 [ 542.796124][T12680] ? __fget_files+0x215/0x3d0 [ 542.796150][T12680] ? __fget_files+0x21f/0x3d0 [ 542.796173][T12680] __sys_getsockopt+0x148/0x260 [ 542.796194][T12680] ? __x64_sys_getsockopt+0xbd/0x160 [ 542.796213][T12680] __x64_sys_getsockopt+0xbd/0x160 [ 542.796232][T12680] ? trace_irq_enable.constprop.0+0x122/0x160 [ 542.796253][T12680] do_syscall_64+0x115/0x870 [ 542.796269][T12680] ? clear_bhb_loop+0x40/0x90 [ 542.796287][T12680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.796303][T12680] RIP: 0033:0x7f3fa899ce59 [ 542.796318][T12680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.796337][T12680] RSP: 002b:00007f3fa97c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 542.796369][T12680] RAX: ffffffffffffffda RBX: 00007f3fa8c15fa0 RCX: 00007f3fa899ce59 [ 542.796379][T12680] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 542.796390][T12680] RBP: 00007f3fa97c2090 R08: 0000200000000000 R09: 0000000000000000 [ 542.796400][T12680] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 542.796408][T12680] R13: 00007f3fa8c16038 R14: 00007f3fa8c15fa0 R15: 00007ffc9878b608 [ 542.796423][T12680] [ 542.802354][ T8122] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 543.014291][T12648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.017342][ T24] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 543.165447][T12648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.310540][ T5733] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 543.332336][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 543.344531][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 543.370094][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 543.383233][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.392379][ T24] usb 2-1: Product: syz [ 543.396901][ T24] usb 2-1: Manufacturer: syz [ 543.402060][ T24] usb 2-1: SerialNumber: syz [ 543.409721][ T24] usb 2-1: config 0 descriptor?? [ 543.420609][ T24] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 543.430648][ T24] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 543.456827][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 543.456855][ T30] audit: type=1400 audit(1782138489.065:626): avc: denied { append } for pid=12673 comm="syz.0.1923" name="sg0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 543.500877][ T5733] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 543.515006][ T5733] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 543.534435][ T5733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 543.550633][ T5733] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 543.576653][ T5733] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 543.597973][ T5733] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=3 [ 543.611729][ T5733] usb 3-1: Manufacturer: syz [ 543.619872][ T5733] usb 3-1: SerialNumber: syz [ 543.629351][ T5733] usb 3-1: config 0 descriptor?? [ 543.774116][ T30] audit: type=1400 audit(1782138489.351:627): avc: denied { setattr } for pid=12647 comm="syz.3.1919" name="PACKET" dev="sockfs" ino=40936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 543.980626][ T8122] usb 3-1: USB disconnect, device number 86 [ 544.472816][ T24] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 545.139407][T12706] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 545.283023][ T5733] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 545.360842][ T5702] usb 4-1: USB disconnect, device number 86 [ 545.369372][ T5702] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 545.460802][ T5733] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 545.473292][ T5733] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 545.484496][ T5733] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 545.493751][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.503643][T12705] raw-gadget.6 gadget.2: fail, usb_ep_enable returned -22 [ 545.513128][ T5733] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 545.822810][T12711] netlink: 'syz.2.1930': attribute type 10 has an invalid length. [ 545.831579][T12711] veth0_vlan: left promiscuous mode [ 545.839239][T12711] veth0_vlan: entered promiscuous mode [ 545.845112][ T5702] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 545.858730][T12711] team0: Device veth0_vlan failed to register rx_handler [ 546.081653][ T24] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 546.099733][ T24] em28xx 2-1:0.0: board has no eeprom [ 546.109753][ T5702] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.133555][ T5702] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 546.167039][ T5702] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 546.193895][ T24] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 546.219345][ T24] em28xx 2-1:0.0: dvb set to bulk mode. [ 546.236340][ T8122] em28xx 2-1:0.0: Binding DVB extension [ 546.249552][ T5702] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 546.291922][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.349212][ T5702] usb 4-1: Product: syz [ 546.366103][ T5726] usb 3-1: USB disconnect, device number 87 [ 546.376246][ T5733] usb 2-1: USB disconnect, device number 84 [ 546.382769][ T5702] usb 4-1: Manufacturer: syz [ 546.394640][ T8122] em28xx 2-1:0.0: Registering input extension [ 546.397669][ T5733] em28xx 2-1:0.0: Disconnecting em28xx [ 546.417675][ T5702] usb 4-1: SerialNumber: syz [ 546.442301][ T5702] usb 4-1: config 0 descriptor?? [ 546.448247][ T5733] em28xx 2-1:0.0: Closing input extension [ 546.467052][ T5702] uvcvideo 4-1:0.0: probe with driver uvcvideo failed with error -22 [ 546.481705][ T5733] em28xx 2-1:0.0: Freeing device [ 546.636244][T12726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.659508][T12726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.120188][ T5733] usb 4-1: USB disconnect, device number 87 [ 547.131239][ T7111] Bluetooth: hci1: Frame reassembly failed (-84) [ 547.142675][T12726] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 547.205001][ T30] audit: type=1326 audit(1782138492.525:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12717 comm="syz.1.1935" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82cdb9ce59 code=0x0 [ 547.625119][T12738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.635036][T12738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.316249][ T5726] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 549.336401][ T5625] Bluetooth: hci1: command 0x1003 tx timeout [ 549.336782][ T5628] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 549.878582][ T5726] usb 4-1: Using ep0 maxpacket: 32 [ 549.888605][ T5726] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 549.897643][ T5726] usb 4-1: config 0 has no interface number 0 [ 549.915057][ T5726] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 549.930458][ T5726] usb 4-1: config 0 interface 85 has no altsetting 0 [ 549.940561][ T5726] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 549.950983][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.959907][ T5726] usb 4-1: Product: syz [ 549.964390][ T5726] usb 4-1: Manufacturer: syz [ 549.969733][ T5726] usb 4-1: SerialNumber: syz [ 549.977564][ T5726] usb 4-1: config 0 descriptor?? [ 550.544471][ T5726] appletouch 4-1:0.85: Geyser mode initialized. [ 550.551727][ T5726] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input84 [ 550.691038][ T5702] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 550.768463][T12744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.777054][T12744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.853623][ T5702] usb 2-1: Using ep0 maxpacket: 32 [ 550.863257][ T5702] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 550.882632][ T5702] usb 2-1: config 0 has no interface number 0 [ 550.890674][ T5702] usb 2-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 550.910002][T12772] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 550.936207][T12772] CIFS mount error: No usable UNC path provided in device string! [ 550.936207][T12772] [ 550.946224][T12772] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 550.963364][ T5702] usb 2-1: config 0 interface 85 has no altsetting 0 [ 550.974290][ T5702] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 550.987089][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.998972][ T30] audit: type=1400 audit(1782138496.022:629): avc: denied { write } for pid=12771 comm="syz.5.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 551.075052][ T5702] usb 2-1: Product: syz [ 551.079282][ T5702] usb 2-1: Manufacturer: syz [ 551.084597][T12744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.093549][T12744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.103250][ T5726] usb 4-1: USB disconnect, device number 88 [ 551.117775][ T5702] usb 2-1: SerialNumber: syz [ 551.126694][ T5726] appletouch 4-1:0.85: input: appletouch disconnected [ 551.364217][ T5702] usb 2-1: config 0 descriptor?? [ 551.371785][ T5702] appletouch 2-1:0.85: Could not find int-in endpoint [ 551.378798][ T5702] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 551.387784][ T5702] usbhid 2-1:0.85: couldn't find an input interrupt endpoint [ 551.566206][T12784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.577055][T12784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.372198][T12794] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 552.478680][T12795] netlink: 'syz.0.1958': attribute type 4 has an invalid length. [ 552.575729][T12796] binder: 12791:12796 ioctl c0306201 200000000040 returned -14 [ 553.282697][T12788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.292050][T12788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.471083][T12811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.483294][T12811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.498121][ T5726] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 553.520524][T12788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.529223][T12788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.580086][T12809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.599451][T12809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.691606][T12809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.701515][T12809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.711867][ T5726] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 553.724133][ T5726] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 553.735914][ T5726] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 553.748428][ T5726] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 553.762994][ T5726] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 553.772510][ T5726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.982332][T12809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.993802][ T5726] usb 3-1: config 0 descriptor?? [ 553.999791][T12809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.009913][T12799] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 554.177759][T12817] hpfs: Bad magic ... probably not HPFS [ 554.188337][T12817] binder: 12816:12817 ioctl c0306201 0 returned -14 [ 554.197316][T12817] binder: 12816:12817 ioctl c0306201 200000000180 returned -22 [ 554.322487][T12819] binder: 12816:12819 ioctl 80047c05 200000000040 returned -22 [ 554.460046][ T5726] plantronics 0003:047F:FFFF.002A: reserved main item tag 0xd [ 554.482757][ T5726] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 554.671299][ T5726] usb 2-1: USB disconnect, device number 85 [ 555.570061][ T8122] usb 3-1: USB disconnect, device number 88 [ 555.839252][ T5726] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 555.870942][T12832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.880193][T12832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.225469][ T5726] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.242165][ T5726] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 556.242565][T12835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1970'. [ 556.255760][ T5726] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 556.283530][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.307786][ T5726] usb 2-1: config 0 descriptor?? [ 556.349822][T12835] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1970'. [ 556.491757][T12839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.500774][T12839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.922804][T12826] FAULT_INJECTION: forcing a failure. [ 556.922804][T12826] name failslab, interval 1, probability 0, space 0, times 0 [ 556.938451][T12844] cgroup: Invalid name [ 556.938951][T12826] CPU: 1 UID: 0 PID: 12826 Comm: syz.1.1967 Tainted: G L syzkaller #0 PREEMPT(full) [ 556.938979][T12826] Tainted: [L]=SOFTLOCKUP [ 556.938985][T12826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 556.938994][T12826] Call Trace: [ 556.939000][T12826] [ 556.939006][T12826] dump_stack_lvl+0x100/0x190 [ 556.939029][T12826] should_fail_ex.cold+0x5/0xa [ 556.939048][T12826] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 556.939073][T12826] should_failslab+0xc2/0x120 [ 556.939090][T12826] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 556.939112][T12826] ? alloc_empty_file+0x5b/0x1c0 [ 556.939126][T12826] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 556.939150][T12826] ? rcu_is_watching+0x12/0xc0 [ 556.939171][T12826] alloc_empty_file+0x5b/0x1c0 [ 556.939186][T12826] path_openat+0xe7/0x4280 [ 556.939207][T12826] ? __pfx__kstrtoull+0x10/0x10 [ 556.939222][T12826] ? __kernel_text_address+0xd/0x30 [ 556.939237][T12826] ? unwind_get_return_address+0x59/0xa0 [ 556.939261][T12826] ? __pfx_path_openat+0x10/0x10 [ 556.939282][T12826] ? stack_trace_save+0x8e/0xc0 [ 556.939305][T12826] do_file_open+0x20e/0x430 [ 556.939324][T12826] ? kstrtouint_from_user+0x13c/0x1d0 [ 556.939340][T12826] ? __pfx_do_file_open+0x10/0x10 [ 556.939360][T12826] ? kasan_save_stack+0x3f/0x50 [ 556.939374][T12826] ? kasan_save_stack+0x30/0x50 [ 556.939387][T12826] ? kasan_save_track+0x14/0x30 [ 556.939410][T12826] do_open_execat+0xd1/0x360 [ 556.939429][T12826] ? __pfx_do_open_execat+0x10/0x10 [ 556.939446][T12826] ? rcu_is_watching+0x12/0xc0 [ 556.939465][T12826] ? __might_fault+0xc5/0x140 [ 556.939486][T12826] ? rcu_is_watching+0x12/0xc0 [ 556.939505][T12826] ? __might_fault+0xc5/0x140 [ 556.939525][T12826] ? lock_release+0x24d/0x310 [ 556.939542][T12826] alloc_bprm+0x2d/0x9d0 [ 556.939561][T12826] do_execveat_common.isra.0+0x19c/0x580 [ 556.939581][T12826] ? do_getname+0x191/0x390 [ 556.939596][T12826] __x64_sys_execve+0x93/0xd0 [ 556.939615][T12826] do_syscall_64+0x115/0x870 [ 556.939630][T12826] ? clear_bhb_loop+0x40/0x90 [ 556.939646][T12826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.939662][T12826] RIP: 0033:0x7f82cdb9ce59 [ 556.939674][T12826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.939689][T12826] RSP: 002b:00007f82ceb22028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 556.939705][T12826] RAX: ffffffffffffffda RBX: 00007f82cde15fa0 RCX: 00007f82cdb9ce59 [ 556.939715][T12826] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000200000000080 [ 556.939725][T12826] RBP: 00007f82ceb22090 R08: 0000000000000000 R09: 0000000000000000 [ 556.939735][T12826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.939744][T12826] R13: 00007f82cde16038 R14: 00007f82cde15fa0 R15: 00007fff64cb9148 [ 556.939758][T12826] [ 556.940470][ T5726] ath6kl: Failed to read usb control message: -71 [ 557.241096][ T5733] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 557.242700][ T5726] ath6kl: Unable to read the bmi data from the device: -71 [ 557.258256][ T5726] ath6kl: Unable to recv target info: -71 [ 557.292596][ T5726] ath6kl: Failed to init ath6kl core: -71 [ 557.309972][ T5726] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 557.356182][ T5726] usb 2-1: USB disconnect, device number 86 [ 557.611480][T12850] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1974'. [ 557.701535][ T5733] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.729063][ T5733] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 557.738250][ T5733] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 557.753365][ T5733] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 557.762640][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.770842][ T5733] usb 3-1: Product: syz [ 557.778917][ T5733] usb 3-1: Manufacturer: syz [ 557.786642][ T5733] usb 3-1: SerialNumber: syz [ 557.795407][ T5733] usb 3-1: config 0 descriptor?? [ 557.805208][ T5733] uvcvideo 3-1:0.0: probe with driver uvcvideo failed with error -22 [ 557.877168][T12856] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=12856 comm=syz.0.1977 [ 558.577508][ T5726] usb 3-1: USB disconnect, device number 89 [ 558.641862][ T30] audit: type=1400 audit(1782138503.071:630): avc: denied { setopt } for pid=12872 comm="syz.1.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 558.666047][ T30] audit: type=1400 audit(1782138503.071:631): avc: denied { write } for pid=12872 comm="syz.1.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 559.143100][T12883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.158814][T12883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.647679][T12892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.657386][T12892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.010511][T12899] capability: warning: `syz.1.1988' uses deprecated v2 capabilities in a way that may be insecure [ 560.359441][T12906] 9p: Bad value for 'rfdno' [ 560.434213][T11613] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 560.791870][T11613] usb 2-1: Using ep0 maxpacket: 8 [ 560.803723][T11613] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 560.812500][T11613] usb 2-1: config 0 has no interface number 1 [ 560.824766][T11613] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 560.836355][T11613] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 560.850269][T11613] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 560.887205][T11613] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 560.900418][T11613] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 560.914902][T11613] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBB, changing to 0x8B [ 560.930820][T11613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 560.950271][T11613] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 560.960072][T11613] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.971370][T11613] usb 2-1: Product: syz [ 560.977552][T11613] usb 2-1: Manufacturer: syz [ 560.996731][T11613] usb 2-1: SerialNumber: syz [ 561.012284][T12915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.020894][T12915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.130690][T11613] usb 2-1: config 0 descriptor?? [ 561.303650][ T30] audit: type=1400 audit(1782138505.406:632): avc: denied { mount } for pid=12914 comm="syz.0.1994" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 561.335828][T12902] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 561.359266][T11613] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 561.406050][ T30] audit: type=1400 audit(1782138505.406:633): avc: denied { mounton } for pid=12914 comm="syz.0.1994" path="/390/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 561.429001][T11613] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 561.583868][ T8122] usb 2-1: USB disconnect, device number 87 [ 561.778502][ T24] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 561.832287][ T5726] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 561.928340][ T30] audit: type=1400 audit(1782138506.098:634): avc: denied { unmount } for pid=5613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 561.954941][ T24] usb 4-1: config 0 has an invalid interface number: 148 but max is 0 [ 561.963909][ T24] usb 4-1: config 0 has no interface number 0 [ 561.970354][ T24] usb 4-1: config 0 interface 148 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 561.983034][ T24] usb 4-1: config 0 interface 148 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 561.998196][ T24] usb 4-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec [ 562.008200][ T6210] Bluetooth: hci1: Frame reassembly failed (-84) [ 562.015031][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.023445][ T5726] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.034202][ T5726] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 562.043555][ T24] usb 4-1: Product: syz [ 562.048056][ T5726] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 562.061603][ T24] usb 4-1: Manufacturer: syz [ 562.066350][ T24] usb 4-1: SerialNumber: syz [ 562.072526][ T24] usb 4-1: config 0 descriptor?? [ 562.078934][ T5726] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 562.089344][ T24] kobil_sct 4-1:0.148: KOBIL USB smart card terminal converter detected [ 562.097975][ T5726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.107478][ T5726] usb 3-1: Product: syz [ 562.111958][ T24] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 562.120909][ T5726] usb 3-1: Manufacturer: syz [ 562.125730][ T5726] usb 3-1: SerialNumber: syz [ 562.135040][ T5726] usb 3-1: config 0 descriptor?? [ 562.146807][ T5726] uvcvideo 3-1:0.0: probe with driver uvcvideo failed with error -22 [ 562.322732][ T24] usb 4-1: USB disconnect, device number 89 [ 562.330304][ T24] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 562.340773][ T24] kobil_sct 4-1:0.148: device disconnected [ 562.373230][ T8122] usb 3-1: USB disconnect, device number 90 [ 562.515647][ T5726] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 562.688739][ T5726] usb 2-1: Using ep0 maxpacket: 32 [ 562.746019][ T5726] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 562.755397][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.763628][ T5726] usb 2-1: Product: syz [ 562.768366][ T5726] usb 2-1: Manufacturer: syz [ 562.773154][ T5726] usb 2-1: SerialNumber: syz [ 562.779742][ T5726] usb 2-1: config 0 descriptor?? [ 562.786895][ T5726] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 563.020343][T12946] FAULT_INJECTION: forcing a failure. [ 563.020343][T12946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.038006][T12946] CPU: 1 UID: 0 PID: 12946 Comm: syz.3.2002 Tainted: G L syzkaller #0 PREEMPT(full) [ 563.038036][T12946] Tainted: [L]=SOFTLOCKUP [ 563.038042][T12946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 563.038053][T12946] Call Trace: [ 563.038059][T12946] [ 563.038066][T12946] dump_stack_lvl+0x100/0x190 [ 563.038091][T12946] should_fail_ex.cold+0x5/0xa [ 563.038113][T12946] _copy_from_user+0x2e/0xd0 [ 563.038137][T12946] bpf_test_init.isra.0+0xaf/0x100 [ 563.038162][T12946] bpf_prog_test_run_xdp+0x57e/0x1670 [ 563.038189][T12946] ? __fget_files+0x215/0x3d0 [ 563.038213][T12946] ? lock_release+0x24d/0x310 [ 563.038232][T12946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 563.038260][T12946] ? fput+0x79/0x100 [ 563.038275][T12946] ? __bpf_prog_get+0x97/0x2a0 [ 563.038294][T12946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 563.038319][T12946] __sys_bpf+0x2a12/0x4e80 [ 563.038344][T12946] ? kstrtouint_from_user+0x110/0x1d0 [ 563.038362][T12946] ? __pfx___sys_bpf+0x10/0x10 [ 563.038384][T12946] ? rcu_is_watching+0x12/0xc0 [ 563.038407][T12946] ? get_pid_task+0xfc/0x250 [ 563.038429][T12946] ? rcu_is_watching+0x12/0xc0 [ 563.038449][T12946] ? get_pid_task+0xfc/0x250 [ 563.038471][T12946] ? lock_release+0x24d/0x310 [ 563.038492][T12946] ? ksys_write+0x12a/0x250 [ 563.038511][T12946] ? rcu_is_watching+0x12/0xc0 [ 563.038534][T12946] ? preempt_count_add+0x76/0x150 [ 563.038552][T12946] ? ksys_write+0x190/0x250 [ 563.038572][T12946] ? rcu_is_watching+0x12/0xc0 [ 563.038593][T12946] ? ksys_write+0x190/0x250 [ 563.038612][T12946] ? lock_release+0x24d/0x310 [ 563.038633][T12946] ? fput+0x79/0x100 [ 563.038648][T12946] ? __x64_sys_bpf+0xce/0x140 [ 563.038671][T12946] __x64_sys_bpf+0xce/0x140 [ 563.038695][T12946] ? trace_irq_enable.constprop.0+0x122/0x160 [ 563.038716][T12946] do_syscall_64+0x115/0x870 [ 563.038731][T12946] ? clear_bhb_loop+0x40/0x90 [ 563.038750][T12946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.038767][T12946] RIP: 0033:0x7eff1fd9ce59 [ 563.038780][T12946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.038795][T12946] RSP: 002b:00007eff20c38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 563.038819][T12946] RAX: ffffffffffffffda RBX: 00007eff20015fa0 RCX: 00007eff1fd9ce59 [ 563.038830][T12946] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 563.038841][T12946] RBP: 00007eff20c38090 R08: 0000000000000000 R09: 0000000000000000 [ 563.038851][T12946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.038860][T12946] R13: 00007eff20016038 R14: 00007eff20015fa0 R15: 00007ffd04b65418 [ 563.038875][T12946] [ 563.434194][T12954] FAULT_INJECTION: forcing a failure. [ 563.434194][T12954] name failslab, interval 1, probability 0, space 0, times 0 [ 563.448366][T12954] CPU: 0 UID: 0 PID: 12954 Comm: syz.5.2006 Tainted: G L syzkaller #0 PREEMPT(full) [ 563.448396][T12954] Tainted: [L]=SOFTLOCKUP [ 563.448402][T12954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 563.448412][T12954] Call Trace: [ 563.448418][T12954] [ 563.448425][T12954] dump_stack_lvl+0x100/0x190 [ 563.448449][T12954] should_fail_ex.cold+0x5/0xa [ 563.448469][T12954] ? kmem_cache_alloc_lru_noprof+0x59/0x6e0 [ 563.448497][T12954] should_failslab+0xc2/0x120 [ 563.448515][T12954] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 563.448540][T12954] ? __d_alloc+0x35/0xa50 [ 563.448557][T12954] __d_alloc+0x35/0xa50 [ 563.448573][T12954] d_alloc_pseudo+0x1c/0xc0 [ 563.448592][T12954] alloc_file_pseudo+0x118/0x290 [ 563.448610][T12954] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 563.448627][T12954] ? do_raw_spin_unlock+0x145/0x1e0 [ 563.448649][T12954] __anon_inode_getfile+0xe8/0x280 [ 563.448669][T12954] anon_inode_getfile_fmode+0x37/0xa0 [ 563.448688][T12954] do_eventfd+0x159/0x2b0 [ 563.448710][T12954] __x64_sys_eventfd2+0x53/0x80 [ 563.448731][T12954] do_syscall_64+0x115/0x870 [ 563.448747][T12954] ? clear_bhb_loop+0x40/0x90 [ 563.448766][T12954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.448782][T12954] RIP: 0033:0x7f3fa899ce59 [ 563.448796][T12954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.448812][T12954] RSP: 002b:00007f3fa97c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000122 [ 563.448829][T12954] RAX: ffffffffffffffda RBX: 00007f3fa8c15fa0 RCX: 00007f3fa899ce59 [ 563.448840][T12954] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 563.448850][T12954] RBP: 00007f3fa97c2090 R08: 0000000000000000 R09: 0000000000000000 [ 563.448860][T12954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.448869][T12954] R13: 00007f3fa8c16038 R14: 00007f3fa8c15fa0 R15: 00007ffc9878b608 [ 563.448884][T12954] [ 563.718055][T11613] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 563.718082][ T8122] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 563.858929][T11613] usb 3-1: device descriptor read/64, error -71 [ 563.865251][ T30] audit: type=1400 audit(1782138507.888:635): avc: denied { map } for pid=12957 comm="syz.5.2008" path="socket:[41703]" dev="sockfs" ino=41703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 563.888432][ T30] audit: type=1400 audit(1782138507.888:636): avc: denied { accept } for pid=12957 comm="syz.5.2008" path="socket:[41703]" dev="sockfs" ino=41703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 563.893316][ T8122] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 563.924179][ T8122] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 563.935474][ T8122] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 563.944707][ T8122] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 563.953060][ T8122] usb 4-1: SerialNumber: syz [ 564.115444][T12934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.124443][T12934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.140767][T11613] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 564.184633][ T8122] usb 4-1: 0:2 : does not exist [ 564.189707][ T8122] usb 4-1: unit 5: unexpected type 0x03 [ 564.206083][ T8122] usb 4-1: USB disconnect, device number 90 [ 564.249211][ T5628] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 564.303323][T11613] usb 3-1: device descriptor read/64, error -71 [ 564.422677][T11613] usb usb3-port1: attempt power cycle [ 564.422713][ T5726] gspca_ov534_9: reg_w failed -110 [ 564.758509][ T5726] gspca_ov534_9: Unknown sensor 0000 [ 564.758874][ T5726] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 564.914388][ T5726] usb 2-1: USB disconnect, device number 88 [ 565.031644][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 565.038499][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.068227][T11613] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 565.311262][T12977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.323253][ T5726] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 565.331660][T12977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.347021][T12977] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2014'. [ 565.594733][ T5726] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.616714][T12979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.625860][T12979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.696486][T11613] usb 3-1: device descriptor read/8, error -71 [ 565.704473][ T5726] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 565.714713][ T5726] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 565.739811][ T5726] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 565.749963][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.758310][ T5726] usb 2-1: Product: syz [ 565.764384][ T5726] usb 2-1: Manufacturer: syz [ 565.770633][ T5726] usb 2-1: SerialNumber: syz [ 565.790632][ T5726] usb 2-1: config 0 descriptor?? [ 565.838761][ T5726] uvcvideo 2-1:0.0: probe with driver uvcvideo failed with error -22 [ 566.169636][ T5726] usb 2-1: USB disconnect, device number 89 [ 566.253253][T11613] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 566.276187][T11613] usb 3-1: device descriptor read/8, error -71 [ 566.400835][T12987] openvswitch: netlink: Tunnel attr 99 out of range max 16 [ 566.414252][T11613] usb usb3-port1: unable to enumerate USB device [ 567.619625][T11613] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 567.853658][T12998] openvswitch: netlink: Actions may not be safe on all matching packets [ 568.485620][ T30] audit: type=1400 audit(1782138512.049:637): avc: denied { bind } for pid=12996 comm="syz.3.2020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 568.521588][ T30] audit: type=1400 audit(1782138512.049:638): avc: denied { write } for pid=12996 comm="syz.3.2020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 568.989960][T11613] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 569.003758][T11613] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 569.015246][T11613] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 569.054027][T11613] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 569.075628][T11613] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 569.109137][T11613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.228042][T11613] usb 3-1: config 0 descriptor?? [ 569.253387][T12991] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 569.747106][T11613] plantronics 0003:047F:FFFF.002B: reserved main item tag 0xd [ 569.850968][T11613] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 570.053285][T11613] usb 3-1: USB disconnect, device number 95 [ 570.120946][T13032] fido_id[13032]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 570.662532][T13042] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2031'. [ 571.152788][ T5726] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 571.317352][ T30] audit: type=1400 audit(1782138514.771:639): avc: denied { mounton } for pid=13053 comm="syz.2.2035" path="/414/file0" dev="tmpfs" ino=2126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 571.511758][ T5726] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 571.541409][ T5726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 571.559621][ T5726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 571.572026][ T5726] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 571.585847][ T5726] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 571.596603][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.614383][ T5726] usb 2-1: config 0 descriptor?? [ 571.623014][T13049] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 571.718118][T13063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.727852][T13063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.920786][ T8122] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 572.159033][T13068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.162697][ T8122] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 572.180674][ T8122] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 572.192205][T13068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.201632][ T8122] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 572.213660][ T8122] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 572.235468][ T5726] usbhid 2-1:0.0: can't add hid device: -71 [ 572.242066][ T5726] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 572.261472][ T5726] usb 2-1: USB disconnect, device number 90 [ 572.268435][ T8122] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 572.291868][ T8122] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.313810][ T8122] usb 3-1: config 0 descriptor?? [ 572.320669][T13057] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 572.434852][ T30] audit: type=1400 audit(1782138515.805:640): avc: denied { open } for pid=13069 comm="syz.3.2041" path="/dev/ptyqa" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 572.483304][ T30] audit: type=1400 audit(1782138515.823:641): avc: denied { ioctl } for pid=13069 comm="syz.3.2041" path="/dev/ptyqa" dev="devtmpfs" ino=129 ioctlcmd=0x5436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 572.564169][T13073] autofs4:pid:13073:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 572.761266][T13078] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2044'. [ 572.770710][T13078] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2044'. [ 572.816986][ T8122] plantronics 0003:047F:FFFF.002C: reserved main item tag 0xd [ 572.887090][ T8122] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 572.989865][T13081] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 574.151001][ T30] audit: type=1400 audit(1782138517.309:642): avc: denied { write } for pid=13084 comm="syz.1.2046" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 574.485622][ T5726] usb 3-1: USB disconnect, device number 96 [ 574.595316][T13088] syz.5.2044 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 574.829227][ T3949] Bluetooth: hci1: Frame reassembly failed (-84) [ 575.014767][ T30] audit: type=1400 audit(1782138518.185:643): avc: denied { name_bind } for pid=13100 comm="syz.5.2050" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 575.038562][T13101] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2050'. [ 575.049937][T13101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.060693][T13101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.369875][T10340] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 575.519368][T13110] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2054'. [ 575.532516][T10340] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 575.545596][T10340] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 575.556805][T10340] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 575.568187][T10340] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 575.577319][T10340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.586997][T13103] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 576.045047][T13120] lo speed is unknown, defaulting to 1000 [ 576.050930][T13120] lo speed is unknown, defaulting to 1000 [ 576.057191][T13120] lo speed is unknown, defaulting to 1000 [ 576.063329][T13120] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 576.078043][T13120] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 576.095675][T13120] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 576.106454][T13120] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 576.115741][T13120] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 576.131061][T13120] lo speed is unknown, defaulting to 1000 [ 576.137423][T13120] lo speed is unknown, defaulting to 1000 [ 576.144232][T13120] lo speed is unknown, defaulting to 1000 [ 576.150628][T13120] lo speed is unknown, defaulting to 1000 [ 576.156915][T13120] lo speed is unknown, defaulting to 1000 [ 576.163257][T13120] lo speed is unknown, defaulting to 1000 [ 576.499634][ T30] audit: type=1400 audit(1782138519.551:644): avc: denied { setopt } for pid=13128 comm="syz.5.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 576.528990][ T8122] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 577.081096][ T5625] Bluetooth: hci1: command 0x1003 tx timeout [ 577.083631][ T5628] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 577.101410][ T8122] usb 2-1: unable to get BOS descriptor or descriptor too short [ 577.119235][ T8122] usb 2-1: config 4 has an invalid interface number: 67 but max is 0 [ 577.129900][ T8122] usb 2-1: config 4 has no interface number 0 [ 577.144277][ T8122] usb 2-1: config 4 interface 67 has no altsetting 0 [ 577.158344][ T8122] usb 2-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 577.169674][ T8122] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.178094][ T8122] usb 2-1: Product: syz [ 577.182651][ T8122] usb 2-1: Manufacturer: syz [ 577.187528][ T8122] usb 2-1: SerialNumber: syz [ 577.422009][T13125] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2059'. [ 577.431620][T13125] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2059'. [ 577.441250][T13125] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2059'. [ 577.471524][ T2392] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 577.570562][T13147] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2065'. [ 577.690520][T13151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.699200][T13151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.708322][ T2392] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 577.769117][ T2392] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 577.850846][ T2392] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 577.879434][ T2392] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 577.918739][ T2392] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 577.928577][ T2392] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.990656][ T2392] usb 4-1: config 0 descriptor?? [ 578.027470][T13141] raw-gadget.6 gadget.3: fail, usb_ep_enable returned -22 [ 578.260317][ T8122] usb-storage 2-1:4.67: USB Mass Storage device detected [ 578.311129][ T8122] usb 2-1: USB disconnect, device number 91 [ 578.368731][T13157] FAULT_INJECTION: forcing a failure. [ 578.368731][T13157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.406496][T10340] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 578.417550][T13157] CPU: 0 UID: 0 PID: 13157 Comm: syz.0.2068 Tainted: G L syzkaller #0 PREEMPT(full) [ 578.417580][T13157] Tainted: [L]=SOFTLOCKUP [ 578.417586][T13157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 578.417595][T13157] Call Trace: [ 578.417601][T13157] [ 578.417607][T13157] dump_stack_lvl+0x100/0x190 [ 578.417631][T13157] should_fail_ex.cold+0x5/0xa [ 578.417652][T13157] _copy_from_user+0x2e/0xd0 [ 578.417675][T13157] kvm_arch_vm_ioctl+0x578/0x18d0 [ 578.417693][T13157] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 578.417712][T13157] ? rcu_is_watching+0x12/0xc0 [ 578.417734][T13157] ? lock_acquire+0x301/0x370 [ 578.417751][T13157] ? __pfx___might_resched+0x10/0x10 [ 578.417768][T13157] ? process_measurement+0x4c8/0x2350 [ 578.417787][T13157] ? rcu_is_watching+0x12/0xc0 [ 578.417810][T13157] ? rcu_is_watching+0x12/0xc0 [ 578.417844][T13157] ? unwind_next_frame+0x3be/0x2090 [ 578.417868][T13157] ? rcu_is_watching+0x12/0xc0 [ 578.417890][T13157] ? rcu_is_watching+0x12/0xc0 [ 578.417911][T13157] ? unwind_next_frame+0x3be/0x2090 [ 578.417936][T13157] ? rcu_is_watching+0x12/0xc0 [ 578.417958][T13157] ? is_bpf_text_address+0x8a/0x1a0 [ 578.417976][T13157] ? lock_release+0x24d/0x310 [ 578.417992][T13157] ? bpf_ksym_find+0x128/0x1c0 [ 578.418013][T13157] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 578.418039][T13157] ? is_bpf_text_address+0x94/0x1a0 [ 578.418057][T13157] ? kernel_text_address+0x8d/0x100 [ 578.418073][T13157] ? __pfx_widen_string+0x10/0x10 [ 578.418093][T13157] ? __kernel_text_address+0xd/0x30 [ 578.418108][T13157] ? unwind_get_return_address+0x59/0xa0 [ 578.418132][T13157] ? arch_stack_walk+0xa6/0xf0 [ 578.418157][T13157] ? tomoyo_path_number_perm+0x46d/0x580 [ 578.418181][T13157] ? stack_trace_save+0x8e/0xc0 [ 578.418205][T13157] ? __pfx_stack_trace_save+0x10/0x10 [ 578.418229][T13157] ? stack_depot_save_flags+0x27/0x9d0 [ 578.418253][T13157] ? tomoyo_path_number_perm+0x46d/0x580 [ 578.418275][T13157] ? kasan_save_stack+0x3f/0x50 [ 578.418290][T13157] ? kasan_save_stack+0x30/0x50 [ 578.418310][T13157] ? kasan_save_track+0x14/0x30 [ 578.418325][T13157] ? kasan_save_free_info+0x3b/0x70 [ 578.418346][T13157] kvm_vm_ioctl+0x1564/0x4030 [ 578.418373][T13157] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 578.418400][T13157] ? rcu_is_watching+0x12/0xc0 [ 578.418421][T13157] ? trace_irq_enable.constprop.0+0x122/0x160 [ 578.418442][T13157] ? tomoyo_path_number_perm+0x28f/0x580 [ 578.418465][T13157] ? rcu_is_watching+0x12/0xc0 [ 578.418488][T13157] ? tomoyo_path_number_perm+0x28f/0x580 [ 578.418510][T13157] ? lock_release+0x24d/0x310 [ 578.418528][T13157] ? tomoyo_path_number_perm+0x188/0x580 [ 578.418552][T13157] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 578.418578][T13157] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 578.418596][T13157] ? do_vfs_ioctl+0x226/0x13e0 [ 578.418616][T13157] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 578.418634][T13157] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 578.418653][T13157] ? rcu_is_watching+0x12/0xc0 [ 578.418674][T13157] ? hook_file_ioctl_common+0x140/0x440 [ 578.418696][T13157] ? selinux_file_ioctl+0x13b/0x290 [ 578.418710][T13157] ? selinux_file_ioctl+0xb6/0x290 [ 578.418725][T13157] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 578.418748][T13157] __x64_sys_ioctl+0x18e/0x210 [ 578.418767][T13157] do_syscall_64+0x115/0x870 [ 578.418781][T13157] ? clear_bhb_loop+0x40/0x90 [ 578.418799][T13157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.418816][T13157] RIP: 0033:0x7f6fa379ce59 [ 578.418829][T13157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.418846][T13157] RSP: 002b:00007f6fa4580028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 578.418864][T13157] RAX: ffffffffffffffda RBX: 00007f6fa3a15fa0 RCX: 00007f6fa379ce59 [ 578.418875][T13157] RDX: 0000200000000180 RSI: 000000004038ae7a RDI: 0000000000000004 [ 578.418885][T13157] RBP: 00007f6fa4580090 R08: 0000000000000000 R09: 0000000000000000 [ 578.418895][T13157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.418904][T13157] R13: 00007f6fa3a16038 R14: 00007f6fa3a15fa0 R15: 00007fff0c7f4578 [ 578.418919][T13157] [ 578.424784][T10340] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input88 [ 578.864740][ T2392] plantronics 0003:047F:FFFF.002D: reserved main item tag 0xd [ 578.867149][T10340] usb 3-1: USB disconnect, device number 97 [ 578.872364][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 578.920552][ T2392] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 579.174101][T11613] usb 4-1: USB disconnect, device number 91 [ 580.061353][T13178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2074'. [ 580.149061][T11613] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 580.267534][ T30] audit: type=1400 audit(1782138522.762:645): avc: denied { write } for pid=13174 comm="syz.0.2074" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 580.648020][T11613] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 580.658823][T11613] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 580.670592][T11613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 580.680599][T11613] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 580.707496][T13187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.717286][T13187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.725740][T11613] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 580.735095][T11613] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=3 [ 580.743165][T11613] usb 2-1: Manufacturer: syz [ 580.748638][T11613] usb 2-1: SerialNumber: syz [ 580.749798][T11613] usb 2-1: config 0 descriptor?? [ 580.776954][ T5702] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 580.805656][T13188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.805835][T13188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.939237][ T5702] usb 4-1: Using ep0 maxpacket: 32 [ 580.947488][ T5702] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 580.956900][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.965255][ T5702] usb 4-1: Product: syz [ 580.969549][ T5702] usb 4-1: Manufacturer: syz [ 580.982001][ T5702] usb 4-1: SerialNumber: syz [ 580.991733][T11613] usb 2-1: USB disconnect, device number 92 [ 581.001325][ T5702] usb 4-1: config 0 descriptor?? [ 581.008210][ T5702] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 581.112845][T13191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.123042][T13191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.756978][T13204] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2081'. [ 582.207355][ T5733] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 582.217316][T13184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.231638][T13184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.382275][ T5733] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 582.394738][ T5733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 582.406237][ T5733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 582.417655][ T5733] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 582.430801][ T5733] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 582.495153][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.507596][ T5733] usb 3-1: config 0 descriptor?? [ 582.513665][T13201] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 582.543704][ T5702] gspca_ov534_9: reg_w failed -110 [ 582.868408][ T5702] gspca_ov534_9: Unknown sensor 0000 [ 582.868478][ T5702] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 583.022347][ T5702] usb 4-1: USB disconnect, device number 92 [ 583.128460][T11613] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 583.170646][T13227] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 583.223744][ T5733] plantronics 0003:047F:FFFF.002E: reserved main item tag 0xd [ 583.304130][ T5733] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 583.338336][T11613] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 583.411440][T11613] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 583.477304][T11613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 583.990458][T11613] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 584.087150][T11613] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 584.127934][ T5733] usb 3-1: USB disconnect, device number 98 [ 584.137834][T11613] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=3 [ 584.195722][T11613] usb 2-1: Manufacturer: syz [ 584.211248][ T30] audit: type=1400 audit(1782138526.665:646): avc: denied { append } for pid=13230 comm="syz.5.2091" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 584.235769][T13231] input: syz0 as /devices/virtual/input/input91 [ 584.245681][T11613] usb 2-1: SerialNumber: syz [ 584.267871][T11613] usb 2-1: config 0 descriptor?? [ 584.277675][T13231] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2091'. [ 584.331455][ T5702] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 584.506816][ T5702] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 584.524399][ T24] usb 2-1: USB disconnect, device number 93 [ 584.537208][ T5702] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 584.578035][ T5702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 584.609829][ T5702] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 584.638325][ T5702] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 584.655964][ T5702] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=3 [ 584.680075][ T5702] usb 4-1: Manufacturer: syz [ 584.693934][ T5702] usb 4-1: SerialNumber: syz [ 584.715985][ T5702] usb 4-1: config 0 descriptor?? [ 584.731681][T13233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.746293][T13233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.803063][T13236] FAULT_INJECTION: forcing a failure. [ 584.803063][T13236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 584.816835][T13236] CPU: 1 UID: 0 PID: 13236 Comm: syz.0.2093 Tainted: G L syzkaller #0 PREEMPT(full) [ 584.816865][T13236] Tainted: [L]=SOFTLOCKUP [ 584.816872][T13236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 584.816882][T13236] Call Trace: [ 584.816888][T13236] [ 584.816894][T13236] dump_stack_lvl+0x100/0x190 [ 584.816921][T13236] should_fail_ex.cold+0x5/0xa [ 584.816943][T13236] _copy_to_user+0x32/0xd0 [ 584.816967][T13236] simple_read_from_buffer+0xcb/0x170 [ 584.816991][T13236] proc_fail_nth_read+0x1af/0x230 [ 584.817012][T13236] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 584.817032][T13236] ? security_file_permission+0x76/0x210 [ 584.817050][T13236] ? rw_verify_area+0xce/0x6d0 [ 584.817069][T13236] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 584.817090][T13236] vfs_read+0x1e4/0xb40 [ 584.817113][T13236] ? __pfx_vfs_read+0x10/0x10 [ 584.817133][T13236] ? rcu_is_watching+0x12/0xc0 [ 584.817165][T13236] ? __fget_files+0x21f/0x3d0 [ 584.817193][T13236] ksys_read+0x12a/0x250 [ 584.817215][T13236] ? __pfx_ksys_read+0x10/0x10 [ 584.817238][T13236] ? rcu_is_watching+0x12/0xc0 [ 584.817262][T13236] do_syscall_64+0x115/0x870 [ 584.817278][T13236] ? clear_bhb_loop+0x40/0x90 [ 584.817297][T13236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.817315][T13236] RIP: 0033:0x7f6fa375d68e [ 584.817329][T13236] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 584.817345][T13236] RSP: 002b:00007f6fa457ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 584.817362][T13236] RAX: ffffffffffffffda RBX: 00007f6fa45806c0 RCX: 00007f6fa375d68e [ 584.817373][T13236] RDX: 000000000000000f RSI: 00007f6fa45800a0 RDI: 0000000000000006 [ 584.817384][T13236] RBP: 00007f6fa4580090 R08: 0000000000000000 R09: 0000000000000000 [ 584.817394][T13236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.817403][T13236] R13: 00007f6fa3a16038 R14: 00007f6fa3a15fa0 R15: 00007fff0c7f4578 [ 584.817420][T13236] [ 585.175785][T13240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.196848][T13240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.290327][T13242] netlink: 'syz.0.2095': attribute type 10 has an invalid length. [ 585.309097][T13242] veth0_vlan: left promiscuous mode [ 585.316910][T13242] veth0_vlan: entered promiscuous mode [ 585.331389][T13242] team0: Device veth0_vlan failed to register rx_handler [ 585.545984][ T5733] usb 4-1: USB disconnect, device number 93 [ 585.566170][T13239] lo speed is unknown, defaulting to 1000 [ 585.928074][T13252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.936569][ T5702] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 585.951282][T13252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.082022][T13252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.090572][T13252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.122130][ T5702] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 586.137209][ T5702] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 586.151064][ T5702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 586.162947][ T5702] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 586.184786][ T5702] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 586.194436][ T5702] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=3 [ 586.202808][ T5702] usb 2-1: Manufacturer: syz [ 586.207571][ T5702] usb 2-1: SerialNumber: syz [ 586.213225][ T5702] usb 2-1: config 0 descriptor?? [ 586.224529][T13256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2100'. [ 586.314258][T13258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.324979][T13252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.333616][T13252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.341705][T13258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.444842][T11613] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 586.483334][ T5702] usb 2-1: USB disconnect, device number 94 [ 586.618231][T11613] usb 4-1: Using ep0 maxpacket: 32 [ 586.627153][T11613] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 586.637233][T11613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.645354][T11613] usb 4-1: Product: syz [ 586.649577][T11613] usb 4-1: Manufacturer: syz [ 586.654325][T11613] usb 4-1: SerialNumber: syz [ 586.660760][T11613] usb 4-1: config 0 descriptor?? [ 586.668399][T11613] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 586.995008][ T30] audit: type=1400 audit(1782138529.230:647): avc: denied { ioctl } for pid=13268 comm="syz.5.2104" path="socket:[43637]" dev="sockfs" ino=43637 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 587.572805][T13279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.583946][T13279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.903430][T13274] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 587.917688][T13274] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 587.934675][T13274] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 587.946895][T13274] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 587.963625][T13254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.028660][T13254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.089731][T13287] comedi comedi3: s526: I/O port conflict (0x100,64) [ 588.265618][T11613] gspca_ov534_9: reg_w failed -110 [ 588.454962][T13291] input: syz0 as /devices/virtual/input/input92 [ 588.905042][T11613] gspca_ov534_9: Unknown sensor 0000 [ 588.905096][T11613] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 588.973224][ T8122] usb 4-1: USB disconnect, device number 94 [ 589.284429][ T24] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 589.529084][T13309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2117'. [ 589.774058][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 589.780422][T13314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2119'. [ 589.791189][ T24] usb 2-1: config 0 has an invalid interface number: 32 but max is 0 [ 589.799499][ T24] usb 2-1: config 0 has no interface number 0 [ 589.806092][ T24] usb 2-1: config 0 interface 32 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 589.832048][ T24] usb 2-1: config 0 interface 32 has no altsetting 0 [ 589.841816][ T24] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 589.855512][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.864200][ T24] usb 2-1: Product: syz [ 589.869069][ T24] usb 2-1: Manufacturer: syz [ 589.875272][ T24] usb 2-1: SerialNumber: syz [ 589.893104][ T24] usb 2-1: config 0 descriptor?? [ 589.998940][ T30] audit: type=1400 audit(1782138531.998:648): avc: denied { getopt } for pid=13319 comm="syz.2.2121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 590.442099][ T30] audit: type=1400 audit(1782138531.998:649): avc: denied { connect } for pid=13319 comm="syz.2.2121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 590.885025][T13330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.885894][T13330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.848373][ T30] audit: type=1400 audit(1782138532.838:650): avc: denied { listen } for pid=13299 comm="syz.1.2115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 592.354649][ T30] audit: type=1400 audit(1782138534.185:651): avc: denied { mounton } for pid=13344 comm="syz.3.2128" path="/418/file0" dev="tmpfs" ino=2147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 592.414693][T13346] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2129'. [ 592.749008][ T5702] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 592.951063][T13354] openvswitch: netlink: Key type 149 is out of range max 32 [ 593.052262][ T5702] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 593.066779][ T5702] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 593.098154][ T5702] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 593.146534][ T5702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.182260][T13342] raw-gadget.6 gadget.2: fail, usb_ep_enable returned -22 [ 593.204227][ T5702] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 593.258488][ T24] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 593.276169][ T24] gspca_ov534_9: reg_w failed -71 [ 593.627379][T13363] syzkaller0: entered promiscuous mode [ 593.653327][T13363] syzkaller0: entered allmulticast mode [ 593.846848][T13365] netlink: 'syz.2.2127': attribute type 10 has an invalid length. [ 593.856557][T13365] veth0_vlan: left promiscuous mode [ 593.868745][T13365] veth0_vlan: entered promiscuous mode [ 593.890202][T13365] team0: Device veth0_vlan failed to register rx_handler [ 594.032302][ T24] gspca_ov534_9: Unknown sensor 0000 [ 594.032360][ T24] ov534_9 2-1:0.32: probe with driver ov534_9 failed with error -22 [ 594.082334][ T24] usb 2-1: USB disconnect, device number 95 [ 594.260088][T13370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.278844][T13370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.356526][T13370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.396716][T13370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.464937][ T24] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 594.549120][ T5726] usb 3-1: USB disconnect, device number 99 [ 594.714100][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 594.737118][ T24] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 594.753290][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.763189][ T24] usb 2-1: Product: syz [ 594.767509][ T24] usb 2-1: Manufacturer: syz [ 594.773641][ T24] usb 2-1: SerialNumber: syz [ 594.796544][ T24] usb 2-1: config 0 descriptor?? [ 594.820747][ T24] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 595.159025][ T24] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110 [ 595.680671][T13390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.691103][T13390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.992955][T11613] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 596.167630][T11613] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 596.179391][T11613] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 596.190639][T11613] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 596.201878][T11613] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 596.214842][T11613] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 596.223938][T11613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.233699][T11613] usb 3-1: config 0 descriptor?? [ 596.239096][T13393] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 596.371326][T13404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.379937][T13404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.565452][T13404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.574114][T13404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.677340][T13411] random: crng reseeded on system resumption [ 596.711892][T11613] plantronics 0003:047F:FFFF.002F: reserved main item tag 0xd [ 596.770509][T11613] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 596.815500][T13404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.824103][T13404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.454451][T10340] usb 3-1: USB disconnect, device number 100 [ 597.830282][T13421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.842094][T13421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.946128][ T5733] usb 2-1: USB disconnect, device number 96 [ 598.177189][T13427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2151'. [ 598.256430][T13429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2152'. [ 598.550433][T13435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2154'. [ 598.573456][T13435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2154'. [ 598.595916][T13435] netlink: 'syz.2.2154': attribute type 11 has an invalid length. [ 598.612117][T13437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.634865][T13435] netlink: 'syz.2.2154': attribute type 7 has an invalid length. [ 598.647857][T13437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.740886][T13434] mmap: syz.2.2154 (13434): VmData 25968640 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 598.853931][ T7125] Bluetooth: hci1: Frame reassembly failed (-84) [ 598.861793][ T7125] Bluetooth: hci1: Frame reassembly failed (-84) [ 599.771741][T13463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.781286][T13463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.072993][T13466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.092001][T13466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.537237][T13466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.680596][T13466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.902890][T13477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.911532][T13477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.919088][T13466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.934010][T13466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.999949][T10340] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 601.097585][ T5625] Bluetooth: hci1: command 0x1003 tx timeout [ 601.097913][ T5628] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 601.110163][ T5726] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 601.140827][T10340] usb 3-1: device descriptor read/64, error -71 [ 601.517479][ T5726] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 601.526245][ T5726] usb 2-1: can't read configurations, error -71 [ 601.650200][T10340] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 601.792993][T10340] usb 3-1: device descriptor read/64, error -71 [ 601.909085][T13487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.919313][T13486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.930356][T13487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.021142][T10340] usb usb3-port1: attempt power cycle [ 602.028574][T13486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.115567][T13486] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2171'. [ 602.124590][ T30] audit: type=1400 audit(1782138543.181:652): avc: denied { read } for pid=13485 comm="syz.0.2171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 602.148519][T13486] No control pipe specified [ 602.402283][T13495] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2172'. [ 602.413244][T10340] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 602.582784][T10340] usb 3-1: device descriptor read/8, error -71 [ 602.831548][ T5726] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 602.842379][T10340] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 602.864474][T10340] usb 3-1: device descriptor read/8, error -71 [ 602.983522][T10340] usb usb3-port1: unable to enumerate USB device [ 602.995289][ T5726] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 603.008521][ T5726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 603.019871][ T5726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 603.116997][T13502] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2176'. [ 603.329266][ T5726] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 603.347246][ T5726] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 603.360992][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.369932][ T5726] usb 2-1: config 0 descriptor?? [ 603.375372][T13493] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 603.875175][T13509] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=13509 comm=syz.3.2178 [ 603.908729][ T5726] plantronics 0003:047F:FFFF.0030: reserved main item tag 0xd [ 603.986167][ T5726] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 604.280469][ T8122] usb 2-1: USB disconnect, device number 98 [ 604.538589][T13512] fido_id[13512]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 604.662475][ T30] audit: type=1804 audit(1782138545.534:653): pid=13518 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.2182" name="/newroot/434/file0" dev="tmpfs" ino=2221 res=1 errno=0 [ 605.852362][ T5726] libceph: connect (1)[c::]:6789 error -101 [ 605.860166][ T5726] libceph: mon0 (1)[c::]:6789 connect error [ 605.904684][T13518] ceph: No mds server is up or the cluster is laggy [ 605.945407][T13537] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2187'. [ 605.967557][T13537] syzkaller1: entered promiscuous mode [ 605.979287][T13537] syzkaller1: entered allmulticast mode [ 606.032604][ T30] audit: type=1400 audit(1782138546.798:654): avc: denied { map } for pid=13543 comm="syz.0.2190" path="socket:[46181]" dev="sockfs" ino=46181 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 606.088885][T13551] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 606.245419][ T5733] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 606.321242][T10340] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 606.546188][T13556] netlink: 'syz.0.2192': attribute type 10 has an invalid length. [ 606.557955][T13556] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2192'. [ 606.810932][ T5733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.829721][T10340] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 606.844292][ T5733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.857881][T10340] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 606.868394][ T5733] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 606.877767][T13561] tipc: Cannot configure node identity twice [ 606.879707][T10340] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 606.893966][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.905931][ T30] audit: type=1400 audit(1782138547.601:655): avc: denied { read } for pid=5277 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 606.929328][T10340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.942292][ T5733] usb 3-1: config 0 descriptor?? [ 606.956204][T13549] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 606.976021][T10340] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 607.150307][T13576] openvswitch: netlink: IP tunnel dst address not specified [ 607.429911][T13587] netlink: 'syz.3.2191': attribute type 10 has an invalid length. [ 607.440192][T13587] veth0_vlan: left promiscuous mode [ 607.455113][T13587] veth0_vlan: entered promiscuous mode [ 607.470035][T13587] team0: Device veth0_vlan failed to register rx_handler [ 608.189673][ T30] audit: type=1400 audit(1782138548.791:656): avc: denied { write } for pid=13590 comm="syz.5.2202" name="usbmon7" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 608.265227][T13593] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2203'. [ 608.278344][T10340] usb 4-1: USB disconnect, device number 95 [ 608.293746][T13594] xt_hashlimit: max too large, truncated to 1048576 [ 608.325331][T13595] syzkaller1: entered promiscuous mode [ 608.335033][T13595] syzkaller1: entered allmulticast mode [ 608.336069][T13594] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2202'. [ 608.360701][ T30] audit: type=1400 audit(1782138548.939:657): avc: denied { write } for pid=13566 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 608.399480][T13532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.443603][T13532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.487935][ T30] audit: type=1400 audit(1782138549.059:658): avc: denied { write } for pid=13601 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 608.536126][ T5733] usbhid 3-1:0.0: can't add hid device: -71 [ 608.583535][ T5733] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 608.693602][ T5733] usb 3-1: USB disconnect, device number 105 [ 609.002718][ T31] INFO: task syz.4.1555:11333 blocked for more than 143 seconds. [ 609.045773][ T31] Tainted: G L syzkaller #0 [ 609.082703][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 609.104297][ T31] task:syz.4.1555 state:D stack:26656 pid:11333 tgid:11332 ppid:5612 task_flags:0x400140 flags:0x00080002 [ 609.143107][ T31] Call Trace: [ 609.146565][ T31] [ 609.149680][ T31] __schedule+0x125c/0x6730 [ 609.154472][ T31] ? debug_object_assert_init+0x1c4/0x300 [ 609.160498][ T31] ? __pfx___schedule+0x10/0x10 [ 609.165592][ T31] ? rcu_is_watching+0x12/0xc0 [ 609.170533][ T31] ? schedule+0x2bf/0x390 [ 609.175182][ T31] ? lock_release+0x24d/0x310 [ 609.180516][ T31] schedule+0xdd/0x390 [ 609.184838][ T31] schedule_timeout+0x1b2/0x280 [ 609.195437][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 609.202398][ T31] ? rcu_is_watching+0x12/0xc0 [ 609.207456][ T31] ? rcu_is_watching+0x12/0xc0 [ 609.212291][ T31] __wait_for_common+0x2e7/0x4c0 [ 609.217406][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 609.222850][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 609.228715][ T31] ? __flush_work+0x74b/0xcb0 [ 609.233453][ T31] ? __flush_work+0x4ca/0xcb0 [ 609.238866][ T31] ? rcu_is_watching+0x12/0xc0 [ 609.244048][ T31] ? __flush_work+0x74b/0xcb0 [ 609.251721][ T31] ? lock_release+0x24d/0x310 [ 609.259119][ T31] ? __flush_work+0x4ca/0xcb0 [ 609.263859][ T31] __flush_work+0x7c7/0xcb0 [ 609.268724][ T31] ? __pfx___flush_work+0x10/0x10 [ 609.274103][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 609.279471][ T31] ? __pfx___cancel_work+0x10/0x10 [ 609.285131][ T31] ? __pfx___might_resched+0x10/0x10 [ 609.290598][ T31] ? __pfx___might_resched+0x10/0x10 [ 609.296369][ T31] cancel_work_sync+0xd1/0xf0 [ 609.301191][ T31] p9_fd_close+0x2a5/0x5a0 [ 609.306073][ T31] p9_client_create+0x678/0xd40 [ 609.311076][ T31] ? __pfx_p9_client_create+0x10/0x10 [ 609.317028][ T31] ? lockdep_init_map_type+0x5c/0x250 [ 609.322602][ T31] ? __raw_spin_lock_init+0x3a/0x110 [ 609.328470][ T31] v9fs_session_init+0x3c/0xdd0 [ 609.333528][ T31] ? kasan_save_track+0x14/0x30 [ 609.340235][ T31] v9fs_get_tree+0xb8/0xb50 [ 609.345194][ T31] ? rcu_is_watching+0x12/0xc0 [ 609.350098][ T31] ? __pfx_v9fs_get_tree+0x10/0x10 [ 609.355500][ T31] ? bpf_lsm_capable+0x9/0x10 [ 609.361665][ T31] ? security_capable+0x80/0x260 [ 609.382150][ T31] vfs_get_tree+0x92/0x320 [ 609.428167][ T31] path_mount+0x7d0/0x23d0 [ 609.430351][ T30] audit: type=1400 audit(1782138549.935:659): avc: denied { write } for pid=13611 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 609.474499][ T31] ? __pfx_path_mount+0x10/0x10 [ 609.496954][ T31] ? putname+0xb1/0x110 [ 609.514745][ T31] ? kmem_cache_free+0x127/0x6b0 [ 609.521064][ T30] audit: type=1400 audit(1782138550.018:660): avc: denied { write } for pid=13628 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 609.531261][ T31] ? __x64_sys_mount+0x293/0x310 [ 609.595524][ T31] __x64_sys_mount+0x293/0x310 [ 609.605488][ T31] ? __pfx___x64_sys_mount+0x10/0x10 [ 609.610996][ T31] do_syscall_64+0x115/0x870 [ 609.616124][ T31] ? clear_bhb_loop+0x40/0x90 [ 609.621133][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.634655][ T31] RIP: 0033:0x7f77f4d9ce59 [ 609.640403][ T31] RSP: 002b:00007f77f5c88028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 609.650748][ T31] RAX: ffffffffffffffda RBX: 00007f77f5015fa0 RCX: 00007f77f4d9ce59 [ 609.658889][ T31] RDX: 0000200000000640 RSI: 0000200000000000 RDI: 0000000000000000 [ 609.667167][ T31] RBP: 00007f77f4e32e6f R08: 0000200000000200 R09: 0000000000000000 [ 609.675349][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.683743][ T31] R13: 00007f77f5016038 R14: 00007f77f5015fa0 R15: 00007ffd1636da18 [ 609.691902][ T31] [ 609.695023][ T31] INFO: lockdep is turned off. [ 609.699830][ T31] NMI backtrace for cpu 0 [ 609.699848][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 609.699870][ T31] Tainted: [L]=SOFTLOCKUP [ 609.699876][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 609.699886][ T31] Call Trace: [ 609.699892][ T31] [ 609.699898][ T31] dump_stack_lvl+0x100/0x190 [ 609.699922][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 609.699940][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 609.699954][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 609.699970][ T31] sys_info+0x141/0x190 [ 609.699982][ T31] watchdog+0xcb1/0x1030 [ 609.699994][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 609.700008][ T31] ? __pfx_watchdog+0x10/0x10 [ 609.700018][ T31] ? __kthread_parkme+0x18c/0x230 [ 609.700032][ T31] ? kthread+0x13a/0x450 [ 609.700047][ T31] ? __pfx_watchdog+0x10/0x10 [ 609.700056][ T31] kthread+0x370/0x450 [ 609.700071][ T31] ? __pfx_kthread+0x10/0x10 [ 609.700087][ T31] ret_from_fork+0x72b/0xd50 [ 609.700101][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 609.700114][ T31] ? __switch_to+0x800/0x10f0 [ 609.700130][ T31] ? __pfx_kthread+0x10/0x10 [ 609.700146][ T31] ret_from_fork_asm+0x1a/0x30 [ 609.700163][ T31] [ 609.700168][ T31] Sending NMI from CPU 0 to CPUs 1: [ 609.831437][ C1] NMI backtrace for cpu 1 [ 609.831455][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 609.831476][ C1] Tainted: [L]=SOFTLOCKUP [ 609.831481][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 609.831491][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 609.831517][ C1] Code: 86 88 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 c8 14 00 fb f4 fc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 609.831530][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000246 [ 609.831543][ C1] RAX: 00000000043ba15c RBX: ffff88801e682540 RCX: ffffffff8b96d2d5 [ 609.831553][ C1] RDX: 0000000000000001 RSI: ffffffff8c1e6100 RDI: ffffffff81de2aa7 [ 609.831563][ C1] RBP: ffffed1003cd04a8 R08: 0000000000000000 R09: ffffed10170a678d [ 609.831572][ C1] R10: ffff8880b8533c6b R11: ffffffff81d4ff9c R12: 0000000000000000 [ 609.831582][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 609.831591][ C1] FS: 0000000000000000(0000) GS:ffff888124416000(0000) knlGS:0000000000000000 [ 609.831606][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 609.831616][ C1] CR2: 0000200000032000 CR3: 0000000076d7a000 CR4: 00000000003526f0 [ 609.831626][ C1] Call Trace: [ 609.831632][ C1] [ 609.831638][ C1] default_idle+0x9/0x10 [ 609.831652][ C1] default_idle_call+0x6c/0xb0 [ 609.831666][ C1] do_idle+0x3a7/0x5b0 [ 609.831685][ C1] ? __pfx_do_idle+0x10/0x10 [ 609.831700][ C1] ? finish_task_switch.isra.0+0x14c/0x1010 [ 609.831720][ C1] cpu_startup_entry+0x4f/0x60 [ 609.831737][ C1] start_secondary+0x21d/0x2d0 [ 609.831754][ C1] ? __pfx_start_secondary+0x10/0x10 [ 609.831771][ C1] common_startup_64+0x13e/0x158 [ 609.831795][ C1] [ 610.008894][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 610.015752][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 610.026405][ T31] Tainted: [L]=SOFTLOCKUP [ 610.030706][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 610.040753][ T31] Call Trace: [ 610.044021][ T31] [ 610.046961][ T31] dump_stack_lvl+0x100/0x190 [ 610.051653][ T31] vpanic+0x552/0x970 [ 610.055616][ T31] ? __pfx_vpanic+0x10/0x10 [ 610.060097][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 610.066236][ T31] panic+0xd1/0xe0 [ 610.069952][ T31] ? __pfx_panic+0x10/0x10 [ 610.074363][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 610.080509][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 610.086662][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 610.092808][ T31] ? watchdog.cold+0x1ec/0x234 [ 610.097571][ T31] ? watchdog+0xcc1/0x1030 [ 610.101977][ T31] watchdog.cold+0x1fd/0x234 [ 610.106551][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 610.112617][ T31] ? __pfx_watchdog+0x10/0x10 [ 610.117279][ T31] ? __kthread_parkme+0x18c/0x230 [ 610.122299][ T31] ? kthread+0x13a/0x450 [ 610.126546][ T31] ? __pfx_watchdog+0x10/0x10 [ 610.131469][ T31] kthread+0x370/0x450 [ 610.135526][ T31] ? __pfx_kthread+0x10/0x10 [ 610.140102][ T31] ret_from_fork+0x72b/0xd50 [ 610.144676][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 610.149785][ T31] ? __switch_to+0x800/0x10f0 [ 610.154448][ T31] ? __pfx_kthread+0x10/0x10 [ 610.159033][ T31] ret_from_fork_asm+0x1a/0x30 [ 610.163801][ T31] [ 610.167179][ T31] Kernel Offset: disabled [ 610.171480][ T31] Rebooting in 86400 seconds..