last executing test programs: 9m2.537802419s ago: executing program 4 (id=383): bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x6}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20004880}, 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000001680)="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", 0x1000, 0x800, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000681000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/220, 0xdc, 0x1, 0x0}, &(0x7f00000001c0)=0x40) 9m2.465745075s ago: executing program 4 (id=384): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000"], 0xb8}}, 0x0) 9m2.460403646s ago: executing program 4 (id=385): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) listen(0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000300)=0x6e) sendto$unix(r1, &(0x7f0000000880)="8eb974afa993ac42d339afe0866d067d7b74e092e79ba2dbba83188825b3f52d7aad06d4de9237759a27b4776c2f6dfbe697bc24719c410f04378780d24586f58fbd42612af00f69b262c520514273bcdabe87c9d76e3aa1171a41c4cf2d76321a679e1ba1d596d57222778a88b83c6d341d4717e44f985c14cd03e1443c337bf0d0d71e9550a87ee28caec06d53e3bab99b939d64860678a329d03139ca2164d955640ec01900e869d50459391a", 0xae, 0x44, &(0x7f0000000980)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000000)={0x8, 0xfffffffffffffffa}, &(0x7f00000002c0)) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(0xffffffffffffffff, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000050000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000fc0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010030bd7000fbdbdf25ffffffff07000700000000001800018014000200766574683000"/46], 0x34}, 0x1, 0x0, 0x0, 0x4009}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 9m2.423001805s ago: executing program 4 (id=386): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) syz_usb_connect(0x3, 0x46, &(0x7f0000001d80)=ANY=[@ANYBLOB="12010002508bf5088205cae60bd30102030109023400010301600209042d0202ff6229010a24010c000302010209050101000203ff0609050a03080003010107250108"], 0x0) 9m0.99411839s ago: executing program 4 (id=394): bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x6}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20004880}, 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000001680)="b9ef8212ba17f604599f3722f428456aab0fb0d3c5b3d018585ea897898ca1e79823c19094fc06b997daacddd3d180c019eb6f161f9958d8d6fbf584389ead2c68b39d0b300b59d32b55a6e30d28c23883a5788366553ae9e2c1eb5203f2517b51e78014fd48a0e52748b1eae38841cac670d250b53474927b66c0ab92bcd654d1441dac91524adb3166ca60cf14a60f2797c9c176c1315d9a97f4a511da42387c8fd86f6adfddc6012da81e87837eade167f991b8fa67352a62d0baca8be64087360badd566cd1bc5e45f40571f3d44b1fac4fc5bbcc806cd05b42a39894aff60a3c3f84f105585b191110d51be1604cf9b5ec068c5e278222c31326b40f904b4644fd85c67b0ebe612f95a091b4b579df9cdbca6721aa73eb2f26cf2ab5f3eaefbfa13bcbd926a0bc499a0a7385795cd6ec661bb0e017a8371e131e7017ea391cc47b251b27973973076b7388d142449e980d7ece71fc7b1dfd85af078f4f227b8e7d0e455097381c346c43b32c415ec394a5bc5813b40e3a1f127443f0bf225225152a0f3ee9de0346daacccfec4168d6b75a6ae512465047d745d8e8596d6fc87cbddd81da947054645d89daadceca24b681a875c41a1a3888f64dd46198ce87b57b8819bcd23a5e5c05d62bf9b3f039276db26ec29f202921ed175d0c7cfac7315bc743eff2656881a4020e91b7aed33ff20f0a57ae782f0bb104edbe7400e7cab3d5da4b02b63f0be4fc1ffb71381905b68eeb7d2c7c6863235ab85797316818746bf96cea69980bb53bb5de6072d57a10e28123e015e5f1cbc469446b93f21099e9bea9d4b957396852fe868b1e43bc98ff92d6ce711532e5cb5fb5ce14cbfc3aeee2ec7866e902cd8236e3a002d78cac84b56e61d2295acf51dd1a5c39adcade57cb3ad31b907ec5f9c50024de943970ebf9ccc598d5b8a64879fc55f506e2e766c3b93e9bf72be46d9b20dd13e84be312176abd565ba6674fda55feb64a39b4ca495aec63cb236c7e8f9e2808a0d76ab0fdac3738fb09eec2ac80cbf70de6b8c0fd49f405eb8af001be6d3414c388a71cf8a18989590e927f44470d468643a9d1edd158db214d9334829b9fdbf97983ad3d10766487fad570e25f82a744c7db1c5c074310dca8bb4298fc0991f565733033ff39f01dc3443e86b43e0335cec9203706d47226f24289da6d1306f1b3785fcb37cb00ea8aa4a84c023bf06d1c18ffb07ebde06a6f3c0116b652c7e187a2ac098a2a2b5855f478e274919bfdeb486a161f7a266cca0208a872e7cb000f85ec5945bd44fcc166c7776992f125478a22656d63f50f8df0335c9e453f75ddcece858b6a1e73511c5d628e4896fbb830391b8beb809c1fe19913f0423700a6fe3505893d8d55f267ac8981c44a59f3785e9f9a8c6ba5a5d6beafeee8a2af68519dd3439a3cdd3062d85a2cddfc91806529f78d11deeeb7976c2c131232fd08eb1e9607eb9064179b67961b6a269175019c690f4ad4c18dd00169954fbcceb27a49dffc286d32c9c0194e14f6d0c3512cb71f2564a271c2c553d03d62124327ddd477e67f037dd7f730474f6dfbd1a48953aacded0b0ccf86c3a4bd3b54f624ab047dddfa25448ecaf458aee7bae055f39b19f3f3c3360e91a95642e667160dcdca8df7345f18378e6b4c1306dadb99f944962dff157d6514644e0387d6adbe461df933de7928f5584fe82ab2103bb0ccb0bafef1542041d3524002901f22a73ce5a87d5d15da6b71beb37029f002dffeca6fd8a4cd0c1beb2dadad605884c9df712a643362244bed50bb04e3ef8496ce145712df9167c29dfdf9373fc54874927d94b5e36d84550772c22ac95c6cb2d23579826bb6b3d1952a06be230bfefc25ff48a14745deb04f7d81348d5da287737793d30213f723ca7f868328b9596b6d2459a9afbeb103410a9ade84e955ecf9cba5cfc2a051110c7acce72b67745452c66321327405e23f692226657f1cd140070cc1eed7ceffd062f0623fdd205486279b52e310867b4c175e95451c35df2d05d061695b525ac069d85f19f78d54f8c47b612ee99f210d606689f3f5f2c6bdf79cb61449e865f66f053af29498dd5cd63be52949aa15b9b5c6d29d8d0b6a12520522a4c9e0dc7419319b3b290087cc57102d1ca18f72e263973f9e869f0fec44de8e5a42ef147f4aee004359cc5265549fc23053e28320ff8b41cd3a7d79aeae087f357f8d66ef1b620561ca036be7d8beb710c1a91b7d1eacca097cfe765ac499d50dedeab46ffe6c6ad63cc5f42546bb2d0fe04359fc24ab6380b93abf9465b16a879e7648706d1eac1182f2410b90d2915f26b8ec79a295360ebcdc76f1bbd5aef5f401d6e3a8fe72e33331961b2004342e20a08e181f76e632022e4c0ba64c00f555d24cce1d54c1a7884413b4a5eb5065e7324a8b08b8465aeb9c16a8a392696d3ab826e5b11da2dde9199dcb3bd597db58d7b2594e1dedf5d3ea8c7975ca2ea860583bbe10f8ad39b39ad9349f493a82bc016e48c02c377517c3f9cc62850f429a06a3d630661e154b44e62ce577bd07833748646875a1117f099903205291165194b6d560011c61f0e2ba5e562c669510ebfe25a38b8cf563a9013557b163841cdc95482acc0d238d46dee78429cc383139d8042a0350595bd394087c599abf77a2e057f55ceb28c82ecd3c281a95d80cf37dbb3397e7097d34c57684133e4813f74d177f61b9410cb902753a5d1df4d4a4515465dd8ccf86bba50eaff3064725446b0e9fa29fa08c6e9c706550fcbea658145769fbd9aafd753ede5a74adf0b6f93ec457efe4adcf3feedd0cc4c5de721cf88f07d88321fabb5aa5d7fcc36ea957a81449b05ccb152770b315c8ae3f2fdba5531da63eca6f93c8de0500b395d417c1d72120452f026cbcbe48c4b4f8e2bb14033db95914071102dec99c8b06efe82db76aa36735a95d666f3e057cdbc0664d6c9c339eaa6d5af40d6379d03075ed5f17573ec7b6f5eb75584584cd04148ebff8df6a6a93c39c3323c612830e2746b822f32a47a926ad38e9a83e8aeea1fac3e0e3372a26a642dd7c44a850146673e3981e38f9b20ce91c9d353b23fff12e756cc44a6a36408213c70e0f6a0ade881450c1d0b4c9957ae0ebc9dd03e78b7f4090b9022359db4b020222d0d89b34efc98175160c5b9d3e81cfb1ebd4d4a9a372e15a8efda18a4530aab2babab9e04900a18d7abcb65390d77aa90c2ae40f3870c88b30e35ffa6233170015be03127caac2a8de4dc70e83476dca55659bc81fa2ca90677b31cc19146050b131efb108a0c521df97432da5dc3db46077e4dea1417cd458993b1f35d6dc396daedd33fc255e64496d5244468f94579dfb8c31e4351f448fb4df7aeeb7d8de54c7680ab765ef5efe7fb5d7aac9199b8419064670ab2197943cc6b2bfb1583c3a55db8258d023e100981a0860a034a8ab3e600065998724aa2d5d5b0e1f734e98c040db8777a038d16ef87c1e6a97f0db479c43b68d3e541129109d2a835c44649c7a8a6bd736eca52bec88a8872b1db7a8e48fb2abfc185c1f8a8f62b506e2ef34e8ccf6bbf14213d0095a8cba6b08d0ae8e5e319d667e1a4a4272f89e866db05350287a460f6b2bd170cd97d39867fdd4655b26d313be81894b3c4d61a1e177461c9406e4fab974154a70bbf62025158fa40ba997a89ea40192ff874ab43a77ce213c86b68b2d3124af6390e9eca5e7acdeb8d8504204a213dce50c2595940a33d0a4f3bb57408abfb74b36ac009c924daa231fbaa3a9b81287c7da8992b5268b08ef732715c4ffc9e523182fef5eb8151641d0c56c5780aa0675fd6d04ad79dbb34e5f7cf0c5eb612248d16664f81c9dd4cf9a7f570aa3643195b04130aa73ea6fe2fcd980699bba50bdd6132c9bcf523e754d4bbb6d17cbd12e6525ccd36dcc0f58724ac935120e2c74ab00ea4106ef261641637f3cac4a108b6d54c87a73da8d1772825e3633e4dfbc52e468647098dfd0690a00128e84acbbd09af5683f98095525a74829cbdd268abd1c138db64cefbf06e83e89b716a08fa166a9dadfcf70ed0c4a25225a5b5422d601f4c0655cdd59ac4e42bc11911e1196a7e90163eabe5a639bf8205269225f2d79efeafaa5fbf047bd4cbebbbb8bd05f97fdb1cd81ffb3c4e4db8241fb3f2ca4173df32d0b69aa30effb6e5d3ae91bfaf5695d0d954912662f2ab6c4d2ee4c0591c4a2a9060c97847fc07f7acbdb1100a945b9c084a88c348add558a593cdb5ec9dcb5c37a30e08e1d7014a5616d106f2e4f66f0aad59745712dbb0632d432ce99cd7711cecc74f1f96e74636f6a3a931f4e830246caad8ee19c50aaa4c72ff60544a4c20f1e44a4b1d6706043810a40ae29cc01eb224ba8a0f7a53d7a0c5543fbb7ad112427bb0022c0a549566c883fc4fe03c19e18e67bf82a5259c0702d4a0c6e79896e2da28b72c9406c9dcd4dc15d6fa514b68558a0bbb96d8d815eb6e42f0fe6d5c946e42d77597aa99da66fc1cf5b6731163a01d44177c1d4062b46c780bc1241728da94b6c838084d3fac7775952b5c14e47ef61bc1d2d920d9d7904e69a5109eb4e2162a933cccaa0b8fb729a26cfd57aaa0053dbc04a3e311611bd0046d7076ba8c746d834956811201664f17f0340cc69a407a3e26fdd8b84863f5f8d087c06eca65cb2c8ad650ca8d2a0d3474753c51c2cf1e2bf5ad585b83ca1f8176b20d715652ce5ec3fb5dc3a777126afb88e32f21b1d241b712bb001571d6c4af81f3f606f96630d0f700fa8727a0fcf257a207d9905c957d2b476ca18882a0505f2e8b5594afa34d79c694cde811387e15416869f24eaa9fd244c5a1f3129c1e03df386ef62a1ce47f13a3c2f50da984e7ede1e6c8c76a12457cf27648bd55c12b321d640ea13cb2ed77495cdad715a9ce1b15f9af4708fdedbd8f6d1c96c19b7119fa8f33ea3782ebeb11e3420ede7fd3bc745b2bd5bc98536ec00e57562852175d06af1bda0997b05ca0276a8bbb21459071e6dab225a7691a83ec52ea2e4ac0fa9779a94031140a9c7a77e7ba8bc9a9ec51953d586698c805459ad636575f04d605da0acb1613926b097b9e6e7b2d8f0c8634af00a3b7698f2b798404ddb7233bf1280398d38c1d399c071866dd33aa2f5d6a6e0c41e14414542770b4887e1f347946e93743eba421eb15e37d7ad084bbd95433be64bdf7c639842e3c5b749f1735b2b51fb5a0941a6579ace5af5c2cb5f3e2e8f59460bc1fe8f802b0788a973a59a1f8e4d1bea7ac35867288ad81eb1cb085139146624ef48a1e0d91bebe40a0f53eb0dbeb1fc7ba826b72f38112e6d97f849aff81005af1d6703632fd4bdc782ac732916d57322dd5cc2b5d1c9b738afd23f3334616d813111c9f665cdf486e6b069d92fa2de498c6fb61e8057a6fa5699d856b130a44d4740ab6415f9c585ede77cfc0853332c3850cc478a344b6bf860b17b6cfca06a3cc254ba2cbfba43998faa2225a0a388b9081c8abf511b3f9c6319241cfd164c581f00d014754f418e9b3359a8718421e917e24a5390dba71073855152cf1340fb5b53564f43cedf6123c228282501bbb6db0969927d457ce38f784f6c6d85ba43fe7407185315022cced5929d69b71b69710a8ffa2c02caf03fa0e9e520d06145dce0922e8fcb066625524c6eec028d3c2622f361fd3ffb91af78d5b6bbd648d5c857e0f1184e22f3865aea7d3f023fec4cb7ddfb7e529ce6ef39eaca3b2c434a41e89711e37dd80ff0bc52fe6338e117fe", 0x1000, 0x800, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000681000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/220, 0xdc, 0x1, 0x0}, &(0x7f00000001c0)=0x40) 9m0.453685956s ago: executing program 4 (id=399): socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x62400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0xffff, 0x5}, 0x20) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r3, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xd0) 9m0.13564083s ago: executing program 32 (id=399): socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x62400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0xffff, 0x5}, 0x20) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r3, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xd0) 2m37.292355675s ago: executing program 3 (id=1490): capset(&(0x7f0000000040)={0x20080522}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) socket$kcm(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xe, &(0x7f0000000200)=ANY=[@ANYRES32=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0xfffffffffffffdbe, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8, 0x10, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x7}, 0x10}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa11, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010700000180000000000a000000"], 0x14}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000580)="73d1234d75957470fc6dc68a216374e7c6d220ff63e1844e7ecc1e98c08dd3c430d7e5d286a1d89db96e57f7490bbaaa681727cc2ebbf15b3fe9a6b7dddbb5ea2c1357452b68e37783397c15fa3bfdcbc7eec7ccefed1ddb3d28f6c18af12ba83075a2ab6f8c8893e1ef87e47e5ebaf1e28a3c0cc7478bdf0b108064ca3d4b34520d36a8234e8859c03248264fa27ce49ee07b402c98813067104b06f5b55cfe951a852aae093a07e3b4e3b3691a2904e1248f52462650fd3a052e610f9a662396572d2c5bbaa912096d0bfe2c345dbe9321c40f55be0a49a95771b0adc08ae5755fcd8719ce976a0d0137fa71ffc5e16312", 0xf2}, {&(0x7f0000000680)="a9ef9933f99f6a4576286bde0d2fbec93cddb983543ea47477693ed2c8cf5c763f", 0x21}], 0x2, &(0x7f0000000700)=[{0xa8, 0x1, 0x4, "5213b1f6c0b62eafaf82f33112900890eb124e68359f977ac3429b22df911495093ff6c0ea8646d5b074854e8c1947f8697c72245d51ff3e30576b089f25982efac2e4851a3279012b43914be9fbdea92582f0e5d2d741c937dedeb790fbc327534db4d5dc42a56685d5c2f140e4835407edb4661b7de86bd179f7761378409ac5af74989b873ebf1e6809460415eceb9a46b71c"}, {0xe0, 0x115, 0xffffffff, "3576563e3ab509d082b2a1b15de6ff89eb20e8659e727ef65a11687f9a519c26cf1fc011555fe173dd3d3da01e59844891bf2c7062683dbcf7148efc329ded5e8f04b2dd585198a58dbed55edf6a31788b229c887e7a7543526e0c1115489299995e462b6579b8403380d3c4d853b3e8ac0c817d8a866109ad827464aa9e2f11e29ce51fc8982e7032bd4472c85907f07bdea9e658fa72a5b61f0878c25e3c956dfff0e320cb18896094cc53cf72469891db463303e65011c2b917557bc0e0b02fc75b8e9e412f391342"}, {0x20, 0x84, 0x4, "14c6e85c44618aad1e533cc87f70d1"}], 0x1a8}}, {{&(0x7f00000008c0)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000940)="5a27cf4bfe8e2cd6a1aef02eeee0702e917d02364a4a366e9bc0fed6046b1ca7ad3aa84126d0bba445fc8d4d1d7bccdc5267a1f07866abe769929a3b3638dfaff69af93354174bf026113d93de572c3fa4b655af185d80fab42725f8f536985ed346cbae92eb85746f86cbcba4370da2ef576990d5bdea68edf40ab83938203a017aa4ec8a8bbd5b7bac4856c8bcae8a328c8b7e53c23898", 0x98}, {&(0x7f0000000a00)="af50d588c5bab8bc626aad3816192d88474b8a2e980bad35486bfe431d30797febc1760798ac43d207e93296ff94b5ea29e68450cbc27e2f902d36bbf37bae65791a353d2ccf4ccf29965a9b99d1cab017c6664ba645f2952f7de8932b56d21516e8d6303acf6f38e7824fc4a942db5b7cac5522dd1a4a0ca1223f5763b47f65812ab108c47b4552de79efb1bc435eb13eba88bf239561a0c4bf0f3c8c1d3c73a0c65d16918cc6003c77b725c95072d89e5023237af5aeb797d746399b26631d93c6002162b6fbf48f65222e02ac55d983def4bf847ebcab692111e2df85d805661c405edc", 0xe5}, {&(0x7f0000000b00)="bef0b630c7a52b952912be80b2f92deb0700c848b56f0aa97bf3b51b3e8fe46ae4d0eb67c5568a07c51a824d14e756413adddff08b85263e9e8fde24c7f652d89ac2233e779e043d583e745eb3a52ec05c8d4a3c4382081994c716953367a89ef7295ca6eeb0c021", 0x68}, {&(0x7f0000000b80)="26b80b79332823090052b8d942727602fbb9a635d5b6fb9572f3bf2225e5882e6f", 0x21}, {&(0x7f0000000bc0)="a23cced26086625930d73d8d0552a475d9abe252796b", 0x16}, {&(0x7f0000000c00)="86294d425ed3b954", 0x8}, {&(0x7f0000000c40)="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", 0x1000}], 0x7, &(0x7f0000001cc0)=[{0x38, 0x103, 0x7f, "5496e0b03fdd31ddf91fc838adfbfe16d91e96c50ec475107728caed050ba9ab2704616c04"}, {0xd0, 0x0, 0x5, "c0b46c1a1816f3363252c83ea20d76f41d0b743885dfc94d542904c98f79a29ff98ab1ac1f2390ba590aae0f3f4343135705687e1f56394d894b599a83a5771cfce95e02911a2694220de057a785b993e5b8e5cc0b73ca179be8b5a0197c9013bfa892a21eee46fa88a9214d616b3a02823b4ac246a12a31134de820e5f3bc08c9f513602951b8699221fa53f314dd59666835a6a0007175c653dc1e317ccefc3a57b34cd2cf5912c54a3d02f3f74ba32d37990d15c8ebb198da"}], 0x108}}], 0x2, 0x1c) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000100001040006004000000000ffff0000", @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8014000700fc020000000000000000000000000000140003006970766c616e30000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2m33.283249791s ago: executing program 3 (id=1504): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f", 0xe4}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507", 0x70}, {&(0x7f00000011c0)}], 0x4}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$sock(r3, &(0x7f0000001800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@mark={{0x14, 0x1, 0x24, 0x81}}], 0x18}}], 0x1, 0x4004) fallocate(r2, 0x2, 0x3, 0x9000f4) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x8000000, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0xf000, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x80, 0xb7, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0xd, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x5, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x94, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) accept4(r1, 0x0, 0x0, 0x800) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f00000000c0)={0x82, 0x3, 0x2, 0x717e387b, 0xf, "1ae34e0626788a22b2fb12dab240794233a5bd", 0xffffffff, 0x2}) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e20, 0x2, 0x1bd, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000380)={{0x84, @empty, 0x4e24, 0x3, 'none\x00', 0x0, 0x60000000, 0xc}, {@loopback, 0x4e26, 0x1, 0x8, 0x48001, 0x2000000}}, 0x44) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 2m32.268322159s ago: executing program 3 (id=1507): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x8890}, 0x400c0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="08000000fe000000070000000000c1c1"], 0x2241c2) 2m31.297631664s ago: executing program 3 (id=1512): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r3, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000140)={0x28, 0x4, r4, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000010000), 0x20080, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r6 = gettid() timer_create(0x3, &(0x7f0000000040)={0x0, 0x11, 0x4, @tid=r6}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r7 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) read$FUSE(r7, &(0x7f0000000c00)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000032680)=""/102400, 0x19000) close(0x3) 2m26.421533005s ago: executing program 3 (id=1525): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c00018008000100000002000c0002"], 0x30}}, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 2m25.177179776s ago: executing program 3 (id=1529): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x40085503, &(0x7f0000000080)=0x400000b) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0x5) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000280), 0x4) getsockopt$inet_buf(r3, 0x0, 0x4, &(0x7f0000000100)=""/161, &(0x7f00000001c0)=0xa1) ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, 0x0) ioctl$IOMMU_DESTROY$ioas(r5, 0x3b80, &(0x7f0000000540)={0x8, r6}) 2m9.956804172s ago: executing program 33 (id=1529): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x40085503, &(0x7f0000000080)=0x400000b) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0x5) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000280), 0x4) getsockopt$inet_buf(r3, 0x0, 0x4, &(0x7f0000000100)=""/161, &(0x7f00000001c0)=0xa1) ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, 0x0) ioctl$IOMMU_DESTROY$ioas(r5, 0x3b80, &(0x7f0000000540)={0x8, r6}) 9.018331698s ago: executing program 5 (id=2037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a50000000000a03000000000000000000070000003a000600ca79838cb4b5a65a9bb2a482407b124066acb2b81705042f8f46659949451fa887934274acdffdcc397d14628e5921955fca560fc230000068000000090a010400000000000000000700000408000a40000000000900020073797a31000000000900010073797a3000000000080005400000001f200011800a00010071756f7461000000100002800c00014000000000000000040c0009800800014000000009140000001000010000000000000000000a84000af35d1bf9e516cfe615772d4f6eb4505381e3073ae0942f2ed427aabfcab239b3ca38e361f7d7134ef0ec85d37eaa4e017190cb6909"], 0xe0}, 0x1, 0x0, 0x0, 0x4000058}, 0x20008844) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x2, 0xa, 0x6, 0x2, 0x2, 0x0, 0x70bd2d, 0x25dfdbfb}, 0x10}}, 0x24000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32, @ANYBLOB="000096040a000200aaaaaaaaaa0c00000600050001"], 0x30}}, 0x48010) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="000425bd7000ffdbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="500017800000030000000600040005000a00e800ffffffffffff000012fee7008c105a5e32106800e8d823b6204d3f0f00007153c85582ac000018000303030303030000000018000383030303030000"], 0x80}, 0x1, 0x0, 0x0, 0x44}, 0x40000) write(0xffffffffffffffff, &(0x7f00000002c0)="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", 0xfc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 8.986070986s ago: executing program 1 (id=2038): r0 = socket$key(0xf, 0x3, 0x2) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) close(0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r7, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) syz_open_dev$usbfs(0x0, 0x76, 0x342) epoll_create1(0x0) r8 = socket$packet(0x11, 0x1, 0x300) getsockname$packet(r8, &(0x7f0000000040), &(0x7f0000000080)=0x14) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x2, 0x0, 0x2, 0x12, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x5, 0x6, 0x6c, 0x20, 0x0, @in6={0xa, 0x0, 0x5, @mcast1}}, @sadb_sa={0x2, 0x1, 0x4d5, 0x0, 0x0, 0x3d, 0x0, 0x40000000}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, @in6={0xa, 0x4e20, 0x6, @mcast2, 0x3}}]}, 0x90}, 0x1, 0x7}, 0x0) 8.773855697s ago: executing program 5 (id=2041): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x5e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r3, 0xffffffff80000500, 0x0, &(0x7f00000002c0)) 7.360238841s ago: executing program 1 (id=2045): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000800010000000065"], 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 7.26581908s ago: executing program 5 (id=2046): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x884) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x842}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_route(0x10, 0x3, 0x0) 7.196049429s ago: executing program 1 (id=2048): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r4, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000140)={0x28, 0x4, r5, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000010000), 0x20080, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r7 = gettid() timer_create(0x3, &(0x7f0000000040)={0x0, 0x11, 0x4, @tid=r7}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r8 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) read$FUSE(r8, &(0x7f0000000c00)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000032680)=""/102400, 0x19000) close(0x3) 7.164631475s ago: executing program 5 (id=2049): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xb, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r9, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001180)={0x50, r0, 0xe781807875749a15, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "dda4e3bf1186ceee009ac8db2d8d5f94"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8}, @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_PMK={0x14, 0xfe, "db90a83ba127040d0df26b066d08ad87"}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) 6.941221418s ago: executing program 5 (id=2050): set_mempolicy(0x8000, &(0x7f0000000000)=0x2, 0x40000000005) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) fcntl$setstatus(r0, 0x4, 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x4, 0x7, 0xfb, 0x7fff7ffc}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000300)={0x2, &(0x7f0000000340)=[{0x8, 0x7, 0x0, 0x404}, {0x9, 0x8, 0xf3, 0x80000001}]}) r4 = syz_clone(0x2011, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0xa, 0x5, 0x200800) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r4) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000040)={0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2180, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xfff, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0xa, 0x1, 0x0, 0x2}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_hsr\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x8001, 0xd1, "889e2587d87e0a8960c73d886368a82e95dd66fe87fec712bf274495900c446e0dba3f6e69b67c824c93d9ca362d4e20caab699e6562ebfb122e09ed643db3b8c76438e6d333a4a498d7eed79a619bf1715b49eb4ee8338b16f4dd94d6fd5126b201b85260a3decb6068aee62ae1fdaa893389187bed199bd4d2f504c936f7a3af1490a460982ef12c8f1a2def334fdffa7781cb3cc0574763f63a2d1fe29a490ab5cae4e1c02d9b26c4863b3fc0dd6f88c481065ca608ab67062d5c18e8ac35f218dff35c4fc6d43d2d78bdd7af18a7e2"}}) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000240)=0x1) r7 = socket(0x21, 0xfb1f7336e3aa2d03, 0xfffffff8) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x8607, 0x0, 0x0, 0x5}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001600010a00000000000000001f0082edb4e3e2000004000000080000"], 0x20}}, 0x8000) 6.58413643s ago: executing program 6 (id=2054): openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) truncate(0x0, 0x8fff5) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]}) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r6 = socket(0x10, 0x3, 0x0) sendto$inet(r6, 0x0, 0x0, 0x240087f8, &(0x7f0000000100)={0x2, 0x4e27, @loopback}, 0xfffffffffffffda6) fallocate(r5, 0x0, 0x1, 0x8ffff) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x20, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x0, 0x7, 0x1, 0xb, 0xfffffffffffffffc}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10}, @call={0x85, 0x0, 0x0, 0x55}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000580)='syzkaller\x00', 0x10001, 0x26, &(0x7f00000005c0)=""/38, 0x41100, 0x49, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), 0x10, 0x7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x8000, 0x8], 0x0, 0x0, 0x2, 0x1}}, 0x40) 6.251434102s ago: executing program 2 (id=2055): epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0x40405515, 0x0) socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socket$alg(0x26, 0x5, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001800dd8d00000000fedbdf25022010000201fe020000002008001e000100000008000f0002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x400a044}, 0x20004090) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.082600478s ago: executing program 6 (id=2056): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_usbip_server_init(0x3) r2 = dup(r1) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x6) 5.001579151s ago: executing program 0 (id=2057): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000200), 0x2, 0x501000) r1 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r5, &(0x7f0000003f80)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000005c0)=0xd) ioctl$sock_SIOCADDDLCI(r0, 0x5452, &(0x7f0000000100)={'veth1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="b80000001000ffff27bd7000fbd9df2500000000", @ANYRES32=0x0, @ANYBLOB="1720000005200400880012800e0001006970366772657461700000007400028014000600fc02000000000000000000000000000108000c000600000006000f0007000000060003000f00000014000700fe80000000000000000000000000003206000f00090000000500170001000000060010004e20000008000d"], 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) rt_tgsigqueueinfo(0x0, 0x0, 0xb, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) r7 = syz_io_uring_setup(0x3ff1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x3de}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_FILES(r7, 0x3, 0x2000000, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x10a, 0x0, 0x6}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x83, 0x4a, 0x5d, 0x40, 0x9fb, 0x602d, 0x91fd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xca, 0x1, 0xa0, 0x5, "", [{{0x9, 0x4, 0x2, 0x4, 0x0, 0x6d, 0x64, 0x23, 0x10}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 4.331825635s ago: executing program 2 (id=2058): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000800010000000065"], 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 4.162942475s ago: executing program 2 (id=2059): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) 4.02267713s ago: executing program 2 (id=2060): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x4f}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000202505a1a440000000010109024a000101000000090400001702020000052406000005240000000d240f010000000006000000200624070407000905810340000000000905820210000000000905030240"], 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffcfb, {0x0, 0x0, 0x0, r2, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x200484dd}, 0x4000080) 3.745144496s ago: executing program 0 (id=2061): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x26, 0x9, 0x70bd26, 0x25dfdbfd, {0x8}, [@typed={0xb, 0x1, 0x0, 0x0, @str='autofs\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 3.741868285s ago: executing program 1 (id=2062): close(0xffffffffffffffff) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@enum={0x3, 0x2, 0x0, 0xf, 0x4000000, [{0x5}, {0xd, 0xb16c}]}, @union={0x7, 0x0, 0x0, 0x5, 0x1, 0x20200}]}, {0x0, [0x0, 0x2e, 0x2e]}}, 0x0, 0x45}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x3, 0x4, 0x4, 0x1, 0x60011, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x18, 0x1}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCNXCL(r0, 0x540d) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="8af481", 0x3, 0x4040044, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r8, &(0x7f0000001080)={0x2020}, 0x2020) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000180)={0x20071026, r1}, &(0x7f0000001040)={0x6fe4, 0x7, 0x401, 0x8, 0x4, 0x3}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) 3.641584537s ago: executing program 6 (id=2063): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CAP_SYNC_REGS(r3, 0x4068aea3, &(0x7f0000000380)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setrlimit(0x8, &(0x7f0000000100)={0x3c, 0x9}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000480)=0x7) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r6 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r8, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r8, 0x5b) read$watch_queue(r7, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r6) readv(r2, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, &(0x7f0000000280)={0xfbca, 0x1ff, 0x1, 0xf9, 0x7, 0x0, 0xd}, 0xc) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) r10 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r10, 0xc0884113, &(0x7f0000000940)={0x1, 0xfffffffe, 0xffff4f11, 0xfffd, 0xffffe00000000003, 0x7fb, 0x0, 0x200, 0x0, 0x28, 0x4e0, 0xd54bf2b9c9a9a4fb}) 2.983735185s ago: executing program 1 (id=2064): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket(0x21, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x9, 0x1, 0xffffffffedab07b6}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_dev$vcsu(0x0, 0x8, 0x100) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a00000800", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x4048030}, 0xc000) 2.721308145s ago: executing program 5 (id=2065): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003700)=""/4100, 0x1004}], 0x0, 0x1}, 0x20) r1 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x6c4d, 0x400, 0xfffffffe, 0x262, 0x0, r0}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000540)={'bridge_slave_0\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x4b, 0xc, "5c76276f6c86622447099377"}}) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8], 0x0) fsopen(&(0x7f0000000200)='hfs\x00', 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 2.001575949s ago: executing program 6 (id=2066): openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) truncate(0x0, 0x8fff5) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]}) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r6 = socket(0x10, 0x3, 0x0) sendto$inet(r6, 0x0, 0x0, 0x240087f8, &(0x7f0000000100)={0x2, 0x4e27, @loopback}, 0xfffffffffffffda6) fallocate(r5, 0x0, 0x1, 0x8ffff) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x20, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x0, 0x7, 0x1, 0xb, 0xfffffffffffffffc}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10}, @call={0x85, 0x0, 0x0, 0x55}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000580)='syzkaller\x00', 0x10001, 0x26, &(0x7f00000005c0)=""/38, 0x41100, 0x49, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), 0x10, 0x7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x8000, 0x8], 0x0, 0x0, 0x2, 0x1}}, 0x40) 1.825922373s ago: executing program 0 (id=2067): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) syz_clone3(&(0x7f0000000100)={0x801400, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) socket$packet(0x11, 0x3, 0x300) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 1.367416952s ago: executing program 2 (id=2068): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = fsopen(&(0x7f0000000040)='exfat\x00', 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0), 0x106, 0x8}}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010102}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) 1.252814428s ago: executing program 0 (id=2069): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000800010000000065"], 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 1.12139598s ago: executing program 0 (id=2070): openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_rdma(0x10, 0x3, 0x14) syz_io_uring_setup(0x117a, 0x0, 0x0, &(0x7f0000000140), 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x6) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, &(0x7f0000006680)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000600000006", @ANYRESOCT=r2], 0x66) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000000000), 0xb97a, r3}, 0x38) 1.052391443s ago: executing program 6 (id=2071): openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]}) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r6 = socket(0x10, 0x3, 0x0) sendto$inet(r6, 0x0, 0x0, 0x240087f8, &(0x7f0000000100)={0x2, 0x4e27, @loopback}, 0xfffffffffffffda6) fallocate(r5, 0x0, 0x1, 0x8ffff) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x20, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x0, 0x7, 0x1, 0xb, 0xfffffffffffffffc}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10}, @call={0x85, 0x0, 0x0, 0x55}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000580)='syzkaller\x00', 0x10001, 0x26, &(0x7f00000005c0)=""/38, 0x41100, 0x49, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), 0x10, 0x7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x8000, 0x8], 0x0, 0x0, 0x2, 0x1}}, 0x40) 995.682196ms ago: executing program 2 (id=2072): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000080)=""/125, 0x26, 0x7d, 0x1, 0x8}, 0x28) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) sendmsg$key(0xffffffffffffffff, 0x0, 0x4008000) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x268c0, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$inet(0x2b, 0x801, 0x0) eventfd(0xf68d) r2 = syz_usb_connect$midi(0x4, 0x100, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x763, 0x150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee, 0x1, 0x1, 0x9, 0x0, 0xb, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x30, 0x30, [@ms_header={0x7, 0x24, 0x1, 0xaa, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x78, 0x10}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x8, 0x4}, @ms_header={0x7, 0x24, 0x1, 0x7ba, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0xe}, @ms_header={0x7, 0x24, 0x1, 0xffff, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x8, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x7777e0a78f66d313, 0x9d, 0x1}, @midi_out_jack={0x9, 0x24, 0x3, 0x1c8a8b1208ce0464, 0xe, 0x1, [{0x4a, 0xbd}], 0x3}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xbf, 0x32}], [{{0x9, 0x5, 0x5, 0x10, 0x20, 0x63, 0x0, 0x0, {0xf, 0x25, 0x1, 0xb, "f68ad951e654f08ba149b8"}}}, {{0x9, 0x5, 0xc, 0x1, 0x3ff, 0x81, 0x1, 0x3c, {0x13, 0x25, 0x1, 0xf, "9357c4e5509ac97245bb9ba65fc7c2"}}}, {{0x9, 0x5, 0x5, 0x2, 0x40, 0x2, 0xf1, 0xf7, {0x7, 0x25, 0x1, 0x3, "7a1850"}}}, {{0x9, 0x5, 0x2, 0xcacb76ea86278212, 0x10, 0x6, 0x4, 0x2, {0xb, 0x25, 0x1, 0x7, "029e7a82d30d5a"}}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0xf6, 0x7, 0x4, {0x5, 0x25, 0x1, 0x1, "ec"}}}, {{0x9, 0x5, 0xf, 0x8, 0x200, 0x4, 0x3, 0xbd, {0x14, 0x25, 0x1, 0x10, "ff2fd09c08550575620c40fcb2155f9d"}}}, {{0x9, 0x5, 0x3, 0xc, 0x200, 0x8, 0x81, 0x3, {0xd, 0x25, 0x1, 0x9, "4a8f2f95608a35550d"}}}]}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x0, 0x25, 0x10, 0x93, 0x10, 0xc}, 0x10, &(0x7f0000000380)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xce0ed9f6c9fb7189, 0x0, 0xff, 0x2, 0x6, 0x1}]}, 0x6, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x7e13}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x40d}}, {0x5a, &(0x7f00000004c0)=@string={0x5a, 0x3, "76f4d928ce1f747b6531d58b5e2812c000b162d6f976327756a5587d7c8a54eb0fd1f4ad91a89dbbfe9f0a0da31f68079cd2c229bf2359da09f51f11425aef34f07b6e10db6d8c57da63b9ed1f097561646ab4588396011e"}}, {0x18, &(0x7f0000000540)=@string={0x18, 0x3, "3b723c4ad26959f27f05be8bd39186b23754770c3699"}}, {0xf1, &(0x7f0000000580)=@string={0xf1, 0x3, "a3a4cdc3123e2247043797712dc12f5a3904a255184c12d47e3f598ee39e0883f8809ab68617f7832a7d973b0605b5000a22f160fd9fbccc09eb422a0ef03fdfe7f2b61d17ba7d830a2467106a566aae30e861bfb7006c4f320292ce063dd21edd633f0593b879e62c942c2b8d0f633de17894080cfc9065da41e912d48dd00f5ddf38ee73fc9b82a3595d0e5d58ecd5f95e7cc647cc6d85e8e40bc8db2e1959c0be34bce7082c20003639b26476150a2bf8c1738da338e4c5523d459dc9bd782b996f57929d646704b8a1654407e55bcab9a1cb30b86999cf4e42a12f463cfc947e2a456220833d8fb19f8659fef5"}}, {0x7c, &(0x7f0000000680)=@string={0x7c, 0x3, "ebc3a957fa76f135978575460be6d3b78b82b74afefabaf44ca73325005c1d27a0d06c720893396ecbba9ec02c79902cae00a23475eefa16ac001928be864d8e080e6204bf143b618367a4d799a7f234913e0e575c52f7a456e51dbae5c0e58cb31c478a1a8b602add73769767604548fff2a37fe547b4d84af7"}}]}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0x7b, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x2, 0xc0, 0xa, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0xf5, 0xd8, 0x7b, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x5, 0x4, 0x5c, {0x7, 0x25, 0x1, 0x8, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x2, 0x6, 0x80, {0x7, 0x25, 0x1, 0xc, 0x0, 0x6}}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0xa, "43a7cf93"}, @local=@item_4={0x3, 0x2, 0x8, "00109400"}, @global=@item_4={0x3, 0x1, 0x3, "591400"}]}}, 0x0}, 0x0) syz_usb_control_io$rtl8150(r2, &(0x7f00000008c0)={0x14, &(0x7f0000000780)={0x20, 0xa, 0xbf, {0xbf, 0x31, "f2872b08c39d6c87c5bbe8b075eb7a74b0271cc8b825e52fcf1e34bab79f172229960a161a95745c58c8bb82abd1ad56884ab7e367b5ccc48d2caa1b90232125787bca5c0e432ceffaac70e3c46b8a59a350244c41e66ee839c6b283f3c3c6c850db8bfa6e0ce4aac3cb46431ccafd65b177fab000d0c14896fe8f63025d537528667d2ef0683f33ace585c22945161de4c6e573c29826d7b206978db77666577edb661346b213c6613d84b5dddb960c4c8353f4e69b1facaad75265ca"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}}, &(0x7f0000000b40)={0x2c, &(0x7f0000000900)={0x60, 0x3, 0xed, "7662ce68889198c0e4db5d898da89ff23e8e8e5122d2589ea2d1d06b029a604c0577fe24a143bbe9001cf7ea3cca10214bb1fa4adc1e897522242c15788c0662593990b1fd13be662b595ba3de3ae073a3683af38644250d09c55212f7cacd1a01c38e5b5a8989e8a4cb33ec89bc76202eb3f12158d5a99f875e06f10fd2690ad391ca3c9682b8523b9ab6838813bf3e82f18b9223c0e14cb09cc1ae5852423a7a6992a8d60e1e4ae357266fabb79709fce149cd3841c778725da02028f0bb94a023f9fe23cb60f3028f487d363c0560fd8edc6ba7fcd1bf5bc121377c3243ff1bac96b07f25e5241892a1caae"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x45}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000ac0)={0xc0, 0x5, 0x5, 'mCK2?'}, &(0x7f0000000b00)={0x40, 0x5, 0x6, "f2906adc0606"}}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000100)={0x2, 0x100, 0x2, 0x401, 0x3, 0x80000001}) 917.658644ms ago: executing program 0 (id=2073): memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0xffffffffffffffff, 0x1, &(0x7f0000000100)=[{}], 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={[0x25e]}, 0x8}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000200)={0x21800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102384, 0x18ff0) r4 = open(&(0x7f0000000240)='./file1\x00', 0x84242, 0x1df2a23c5997fa5f) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="04010000100001002bbd7000f4dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000008000200140003006e657464657673696d300000000000000a000100aaaaaaaaaaaa0000c4001680c0000180100006"], 0x104}, 0x1, 0x0, 0x0, 0x4044810}, 0x0) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x1ff, 0x2, 0x1, {0x6, 0xfd, 0x20ff, 0x8, 0xe, 0xf33a, 0x9, 0x4, 0xfffffffc, 0x6000, 0x6, 0x0, 0x0, 0x5, 0x8}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) io_submit(r0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 268.8605ms ago: executing program 1 (id=2074): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x24060400) r3 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r3, &(0x7f00000002c0)=""/75, 0x4b, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x228000, 0x0, 0x9, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000083c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x0, {0x0, 0x18}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xa6c81, 0xc0) writev(r4, &(0x7f0000000400)=[{&(0x7f0000001580)="03", 0x1}], 0x1) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x18, 0xffffffffffffffda, 0x5, {0x7fff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) writev(r5, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) 0s ago: executing program 6 (id=2075): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$nci(0xffffffffffffffff, 0x0, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x300) kernel console output (not intermixed with test programs): 672.929325][T12294] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 672.938917][T12182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.949705][T12182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.976950][T12182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.007089][T12285] lo speed is unknown, defaulting to 1000 [ 673.387742][ T5718] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 673.725939][T12182] hsr_slave_0: entered promiscuous mode [ 673.729921][ T5718] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -61 [ 673.794820][T12182] hsr_slave_1: entered promiscuous mode [ 673.864885][T12182] debugfs: 'hsr0' already exists in 'hsr' [ 673.937286][ T5718] asix 2-1:0.251: probe with driver asix failed with error -61 [ 674.457045][T12182] Cannot create hsr debugfs directory [ 674.494782][T12314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38928 sclass=netlink_route_socket pid=12314 comm=syz.2.1618 [ 674.773724][T12321] overlay: filesystem on ./file0 not supported as upperdir [ 675.091535][T12182] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 675.122096][T12182] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 675.140725][T12182] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 675.156661][T12182] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 675.171101][T12182] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 675.184595][T12182] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 675.196516][T12182] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 675.223758][T12182] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 675.235716][T12321] Driver unsupported XDP return value 0 on prog (id 151) dev N/A, expect packet loss! [ 675.330660][ T5615] usb 2-1: USB disconnect, device number 52 [ 675.478111][T12182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.487658][ T8866] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 675.514910][T12182] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.547915][ T9800] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.554987][ T9800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.596343][ T9800] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.603410][ T9800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.785882][ T8866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 676.079079][ T8866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 676.111488][ T8866] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 676.123691][ T8866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.134420][ T8866] usb 3-1: Product: syz [ 676.139620][ T8866] usb 3-1: Manufacturer: syz [ 676.145648][ T8866] usb 3-1: SerialNumber: syz [ 676.158706][ T8866] usb 3-1: config 0 descriptor?? [ 676.164957][ T8866] hub 3-1:0.0: bad descriptor, ignoring hub [ 676.175089][ T8866] hub 3-1:0.0: probe with driver hub failed with error -5 [ 676.206844][ T8866] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input22 [ 676.449369][ T29] audit: type=1400 audit(1779942681.266:1046): avc: denied { setattr } for pid=12343 comm="syz.1.1624" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 676.702401][T12351] tipc: Enabled bearer , priority 0 [ 676.726801][T12351] syzkaller0: entered promiscuous mode [ 676.732271][T12351] syzkaller0: entered allmulticast mode [ 676.738208][T12351] tipc: Resetting bearer [ 676.754883][T12349] tipc: Resetting bearer [ 677.207317][ T5615] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 677.255205][ T8868] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 677.391715][ T5615] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 677.415035][ T8868] usb 1-1: Using ep0 maxpacket: 16 [ 677.416870][ T5615] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 677.422964][ T8868] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.443475][ T8868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 677.455914][ T8868] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 677.465664][ T5615] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 677.468510][ T8868] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 677.489734][ T5615] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.490699][ T8868] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 677.506996][ T8868] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 677.528218][ T8868] usb 1-1: Manufacturer: syz [ 677.555597][ T5615] usbtmc 6-1:16.0: bulk endpoints not found [ 677.569278][ T8868] usb 1-1: config 0 descriptor?? [ 677.794919][T12360] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1627'. [ 677.865885][ T9] usb 3-1: USB disconnect, device number 62 [ 678.037254][ T9] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 678.198985][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 678.208040][ T9] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 678.216367][ T9] usb 3-1: config 8 has no interface number 0 [ 678.223632][ T9] usb 3-1: config 8 interface 177 has no altsetting 0 [ 678.232269][ T9] usb 3-1: New USB device found, idVendor=0ace, idProduct=1602, bcdDevice=50.c7 [ 678.241620][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.249735][ T9] usb 3-1: Product: syz [ 678.254038][ T9] usb 3-1: Manufacturer: syz [ 678.258715][ T9] usb 3-1: SerialNumber: syz [ 678.300875][ T29] audit: type=1400 audit(1779942683.126:1047): avc: denied { ioctl } for pid=12358 comm="syz.5.1628" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 678.371074][ T8866] hid_parser_main: 7 callbacks suppressed [ 678.371094][ T8866] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 678.390394][ T8866] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 678.936397][T12349] tipc: Disabling bearer [ 678.946899][ T8866] usb 1-1: USB disconnect, device number 70 [ 678.966002][T12182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 679.003617][ T9] usb 3-1: USB disconnect, device number 63 [ 679.150168][T12182] veth0_vlan: entered promiscuous mode [ 679.161763][T12182] veth1_vlan: entered promiscuous mode [ 679.180705][T12182] veth0_macvtap: entered promiscuous mode [ 679.189082][T12182] veth1_macvtap: entered promiscuous mode [ 679.202355][T12182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 679.215801][T12182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 679.229646][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.240235][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.249848][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.258891][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.362213][ T9794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.374487][ T9794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.397791][ T9794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.406161][ T9794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.417351][ T29] audit: type=1400 audit(1779942684.236:1048): avc: denied { mounton } for pid=12182 comm="syz-executor" path="/root/syzkaller.iZbvZv/syz-tmp" dev="sda1" ino=2050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 679.450039][ T29] audit: type=1400 audit(1779942684.256:1049): avc: denied { mounton } for pid=12182 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 679.580720][T12378] netlink: 'syz.1.1631': attribute type 12 has an invalid length. [ 679.876829][ T5711] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 680.068031][T12382] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 680.156816][ T24] usb 6-1: USB disconnect, device number 36 [ 680.170917][ T5711] usb 2-1: too many configurations: 25, using maximum allowed: 8 [ 680.191781][ T5711] usb 2-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 680.203521][ T5711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.220950][ T5711] usb 2-1: config 0 descriptor?? [ 680.237235][ T5711] pwc: Creative Labs Webcam Pro Ex detected. [ 680.243315][ T5711] pwc: Warning: more than 1 configuration available. [ 680.426453][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.576398][ T5711] pwc: Failed to set LED on/off time (-71) [ 680.648695][ T5711] pwc: send_video_command error -71 [ 680.769681][ T5711] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 680.813841][ T5711] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 680.835062][ T5711] usb 2-1: USB disconnect, device number 53 [ 681.056684][T12398] : entered promiscuous mode [ 681.077420][ T24] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 681.246483][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.256919][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 681.266643][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 681.277542][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 681.291378][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 681.300974][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.314221][ T24] usb 6-1: config 0 descriptor?? [ 681.326888][ T24] hdpvr 6-1:0.0: Could not find bulk-in endpoint [ 681.333271][ T24] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 681.396036][ T804] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 681.485599][ T29] audit: type=1400 audit(1779942686.296:1050): avc: denied { set_context_mgr } for pid=12416 comm="syz.0.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 681.508311][ T29] audit: type=1400 audit(1779942686.326:1051): avc: denied { call } for pid=12416 comm="syz.0.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 681.529961][ T29] audit: type=1400 audit(1779942686.326:1052): avc: denied { transfer } for pid=12416 comm="syz.0.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 681.548983][ T8866] usb 6-1: USB disconnect, device number 37 [ 681.565219][ T804] usb 3-1: Using ep0 maxpacket: 16 [ 681.571881][ T804] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.768885][ T804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 681.913761][ T804] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 682.066355][T12426] FAULT_INJECTION: forcing a failure. [ 682.066355][T12426] name failslab, interval 1, probability 0, space 0, times 0 [ 682.086231][T12426] CPU: 1 UID: 0 PID: 12426 Comm: syz.0.1645 Tainted: G L syzkaller #0 PREEMPT(full) [ 682.086263][T12426] Tainted: [L]=SOFTLOCKUP [ 682.086270][T12426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 682.086280][T12426] Call Trace: [ 682.086286][T12426] [ 682.086293][T12426] dump_stack_lvl+0x100/0x190 [ 682.086319][T12426] should_fail_ex.cold+0x5/0xa [ 682.086344][T12426] should_failslab+0xc2/0x120 [ 682.086365][T12426] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 682.086391][T12426] ? __alloc_skb+0x140/0x710 [ 682.086419][T12426] ? __alloc_skb+0x5b7/0x710 [ 682.086447][T12426] __alloc_skb+0x140/0x710 [ 682.086470][T12426] ? __alloc_skb+0x5b7/0x710 [ 682.086494][T12426] ? __pfx___alloc_skb+0x10/0x10 [ 682.086525][T12426] netlink_alloc_large_skb+0x69/0x150 [ 682.086550][T12426] netlink_sendmsg+0x680/0xda0 [ 682.086576][T12426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.086596][T12426] ? __might_fault+0xa0/0x140 [ 682.086631][T12426] ____sys_sendmsg+0x9e1/0xb70 [ 682.086650][T12426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.086679][T12426] ? __pfx_____sys_sendmsg+0x10/0x10 [ 682.086710][T12426] ___sys_sendmsg+0x190/0x1e0 [ 682.086733][T12426] ? __pfx____sys_sendmsg+0x10/0x10 [ 682.086783][T12426] __sys_sendmsg+0x170/0x220 [ 682.086810][T12426] ? __pfx___sys_sendmsg+0x10/0x10 [ 682.086846][T12426] ? rcu_is_watching+0x12/0xc0 [ 682.086876][T12426] do_syscall_64+0x115/0x870 [ 682.086897][T12426] ? clear_bhb_loop+0x40/0x90 [ 682.086917][T12426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.086934][T12426] RIP: 0033:0x7f8e5139ce59 [ 682.086950][T12426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.086966][T12426] RSP: 002b:00007f8e522b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 682.086983][T12426] RAX: ffffffffffffffda RBX: 00007f8e51615fa0 RCX: 00007f8e5139ce59 [ 682.086995][T12426] RDX: 0000000040000010 RSI: 0000200000002900 RDI: 0000000000000003 [ 682.087006][T12426] RBP: 00007f8e522b8090 R08: 0000000000000000 R09: 0000000000000000 [ 682.087016][T12426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.087027][T12426] R13: 00007f8e51616038 R14: 00007f8e51615fa0 R15: 00007fff55e4c208 [ 682.087051][T12426] [ 682.087853][ T804] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 682.176507][T12428] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 682.180950][ T804] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 682.344826][ T804] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 682.353032][ T804] usb 3-1: Manufacturer: syz [ 682.379085][ T804] usb 3-1: config 0 descriptor?? [ 682.386024][T12430] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1646'. [ 682.454455][T12433] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!' [ 682.462920][T12433] CPU: 1 UID: 0 PID: 12433 Comm: syz.0.1648 Tainted: G L syzkaller #0 PREEMPT(full) [ 682.462951][T12433] Tainted: [L]=SOFTLOCKUP [ 682.462958][T12433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 682.462970][T12433] Call Trace: [ 682.462978][T12433] [ 682.462986][T12433] dump_stack_lvl+0x100/0x190 [ 682.463013][T12433] sysfs_warn_dup.cold+0x1c/0x28 [ 682.463042][T12433] sysfs_do_create_link_sd+0x113/0x140 [ 682.463071][T12433] sysfs_create_link+0x61/0xc0 [ 682.463094][T12433] device_add+0x675/0x1950 [ 682.463115][T12433] ? __pfx_device_add+0x10/0x10 [ 682.463146][T12433] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 682.463170][T12433] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 682.463205][T12433] wiphy_register+0x1edd/0x2d90 [ 682.463225][T12433] ? __rtnl_unlock+0xb9/0xf0 [ 682.463253][T12433] ? __pfx_wiphy_register+0x10/0x10 [ 682.463274][T12433] ? __asan_memset+0x23/0x50 [ 682.463302][T12433] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 682.463341][T12433] ieee80211_register_hw+0x3055/0x4570 [ 682.463382][T12433] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 682.463408][T12433] ? __pfx___debug_object_init+0x10/0x10 [ 682.463436][T12433] ? find_held_lock+0x2b/0x80 [ 682.463455][T12433] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 682.463478][T12433] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 682.463505][T12433] ? __hrtimer_setup+0x208/0x330 [ 682.463537][T12433] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 682.463574][T12433] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 682.463597][T12433] ? __asan_memcpy+0x3c/0x60 [ 682.463631][T12433] hwsim_new_radio_nl+0xc5f/0x1370 [ 682.463652][T12433] ? rcu_is_watching+0x12/0xc0 [ 682.463690][T12433] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 682.463719][T12433] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 682.463748][T12433] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 682.463783][T12433] genl_family_rcv_msg_doit+0x214/0x300 [ 682.463813][T12433] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 682.463849][T12433] ? bpf_lsm_capable+0x9/0x10 [ 682.463869][T12433] ? security_capable+0x80/0x260 [ 682.463894][T12433] ? ns_capable+0xd2/0xf0 [ 682.463922][T12433] genl_rcv_msg+0x560/0x800 [ 682.463951][T12433] ? __pfx_genl_rcv_msg+0x10/0x10 [ 682.463977][T12433] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 682.464006][T12433] netlink_rcv_skb+0x159/0x420 [ 682.464029][T12433] ? __pfx_genl_rcv_msg+0x10/0x10 [ 682.464054][T12433] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 682.464089][T12433] ? netlink_deliver_tap+0x1ae/0xcc0 [ 682.464115][T12433] genl_rcv+0x28/0x40 [ 682.464138][T12433] netlink_unicast+0x585/0x850 [ 682.464165][T12433] ? __pfx_netlink_unicast+0x10/0x10 [ 682.464195][T12433] netlink_sendmsg+0x8b0/0xda0 [ 682.464224][T12433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.464246][T12433] ? __might_fault+0xa0/0x140 [ 682.464283][T12433] ____sys_sendmsg+0x9e1/0xb70 [ 682.464305][T12433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.464330][T12433] ? __pfx_____sys_sendmsg+0x10/0x10 [ 682.464357][T12433] ? __pfx_futex_wake_mark+0x10/0x10 [ 682.464379][T12433] ___sys_sendmsg+0x190/0x1e0 [ 682.464403][T12433] ? __pfx____sys_sendmsg+0x10/0x10 [ 682.464458][T12433] __sys_sendmsg+0x170/0x220 [ 682.464489][T12433] ? __pfx___sys_sendmsg+0x10/0x10 [ 682.464517][T12433] ? __x64_sys_futex+0x34f/0x4d0 [ 682.464554][T12433] ? rcu_is_watching+0x12/0xc0 [ 682.464587][T12433] do_syscall_64+0x115/0x870 [ 682.464611][T12433] ? clear_bhb_loop+0x40/0x90 [ 682.464633][T12433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.464652][T12433] RIP: 0033:0x7f8e5139ce59 [ 682.464677][T12433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.464695][T12433] RSP: 002b:00007f8e522b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 682.464714][T12433] RAX: ffffffffffffffda RBX: 00007f8e51615fa0 RCX: 00007f8e5139ce59 [ 682.464727][T12433] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000005 [ 682.464740][T12433] RBP: 00007f8e51432d6f R08: 0000000000000000 R09: 0000000000000000 [ 682.464752][T12433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 682.464763][T12433] R13: 00007f8e51616038 R14: 00007f8e51615fa0 R15: 00007fff55e4c208 [ 682.464790][T12433] [ 682.906529][T12409] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1640'. [ 682.918966][ T804] usb 3-1: USB disconnect, device number 64 [ 683.167717][T12437] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1649'. [ 684.019502][ T29] audit: type=1400 audit(1779942688.836:1053): avc: denied { write } for pid=12446 comm="syz.0.1652" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 684.511209][T12460] rdma_op ffff88804cf831f0 conn xmit_rdma 0000000000000000 [ 684.631831][T12462] fuse: Bad value for 'fd' [ 685.628623][ T5626] Bluetooth: hci3: unexpected event for opcode 0x080d [ 685.675876][ T804] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 685.744105][T12474] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1660'. [ 685.779978][T12474] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1660'. [ 685.849099][T12474] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1660'. [ 685.902182][ T804] usb 6-1: unable to get BOS descriptor or descriptor too short [ 685.933464][ T804] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 685.956751][T12474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1660'. [ 685.982753][ T804] usb 6-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 686.071309][ T804] usb 6-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 33 [ 686.178941][ T804] usb 6-1: config 1 interface 0 has no altsetting 0 [ 686.401341][ T804] usb 6-1: string descriptor 0 read error: -22 [ 686.450646][ T804] usb 6-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.50 [ 686.490932][ T804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.511951][ T29] audit: type=1400 audit(1779942691.286:1054): avc: denied { sys_admin } for pid=12480 comm="syz.0.1661" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 686.565502][ T804] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 686.696469][ T24] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 686.749508][T12494] lo speed is unknown, defaulting to 1000 [ 686.857000][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 686.869312][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 686.880796][ T24] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 686.890224][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.898447][ T24] usb 3-1: Product: syz [ 686.903006][ T24] usb 3-1: Manufacturer: syz [ 686.909072][ T24] usb 3-1: SerialNumber: syz [ 686.985256][ T8866] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 687.125530][T12486] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1662'. [ 687.136935][ T8866] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 687.166599][ T8866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 687.186881][ T8866] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 687.200413][ T8866] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 687.202278][T12486] hpfs: Bad magic ... probably not HPFS [ 687.219085][ T8866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.240576][ T8866] usb 2-1: config 0 descriptor?? [ 687.246370][T12496] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 687.258019][T12486] hpfs: Bad magic ... probably not HPFS [ 687.427407][ T24] usb 3-1: unit 4 not found! [ 687.452567][ T24] usb 3-1: USB disconnect, device number 65 [ 687.488979][T12503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.508202][T12503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.669905][ T8866] hid-multitouch 0003:1FD2:6007.000C: hidraw0: USB HID v0.05 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 688.301406][T12520] lo speed is unknown, defaulting to 1000 [ 688.918640][ T8866] usb 6-1: USB disconnect, device number 38 [ 689.000434][ T29] audit: type=1326 audit(1779942693.816:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12529 comm="syz.5.1675" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fadb279ce59 code=0x0 [ 689.114393][ T29] audit: type=1400 audit(1779942693.926:1056): avc: denied { mount } for pid=12529 comm="syz.5.1675" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 689.385351][ T11] block nbd3: Possible stuck request ffff8880280d5080: control (read@0,1024B). Runtime 60 seconds [ 689.396087][ T11] block nbd3: Possible stuck request ffff8880280d5240: control (read@1024,1024B). Runtime 60 seconds [ 689.407095][ T11] block nbd3: Possible stuck request ffff8880280d5400: control (read@2048,1024B). Runtime 60 seconds [ 689.417995][ T11] block nbd3: Possible stuck request ffff8880280d55c0: control (read@3072,1024B). Runtime 60 seconds [ 689.624452][ T5626] Bluetooth: hci5: ISO packet for unknown connection handle 1039 [ 689.631396][T12545] netlink: 'syz.6.1679': attribute type 10 has an invalid length. [ 689.679282][T12545] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 689.693558][T12545] team0: Port device netdevsim1 added [ 689.704528][T12545] netlink: 'syz.6.1679': attribute type 10 has an invalid length. [ 689.724226][T12545] team0: Port device netdevsim1 removed [ 689.730886][T12545] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 689.740693][T12545] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 689.752836][ T804] usb 2-1: USB disconnect, device number 54 [ 689.779172][ T29] audit: type=1400 audit(1779942694.596:1057): avc: denied { read } for pid=12544 comm="syz.6.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 689.862018][T12551] ubi8: attaching mtd0 [ 689.881145][T12551] ubi8: scanning is finished [ 689.886271][T12551] ubi8: empty MTD device detected [ 689.891921][T12551] ubi8 error: ubi_read_volume_table: LEB size too small for a volume record [ 690.358035][T12557] lo speed is unknown, defaulting to 1000 [ 690.387941][T12551] ubi8 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 690.591442][ T29] audit: type=1326 audit(1779942695.406:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12554 comm="syz.2.1683" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc6c7d9ce59 code=0x0 [ 690.709182][ T29] audit: type=1400 audit(1779942695.526:1059): avc: denied { ioctl } for pid=12554 comm="syz.2.1683" path="socket:[42501]" dev="sockfs" ino=42501 ioctlcmd=0x6e83 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 691.149597][T12575] binder: binder_mmap: 12574 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 691.554673][T12578] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 691.877629][T12587] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 691.953289][ T29] audit: type=1400 audit(1779942696.766:1060): avc: denied { read } for pid=12586 comm="syz.2.1692" lport=39973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 692.469259][T12590] FAULT_INJECTION: forcing a failure. [ 692.469259][T12590] name failslab, interval 1, probability 0, space 0, times 0 [ 692.503268][T12590] CPU: 1 UID: 0 PID: 12590 Comm: syz.2.1693 Tainted: G L syzkaller #0 PREEMPT(full) [ 692.503301][T12590] Tainted: [L]=SOFTLOCKUP [ 692.503309][T12590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 692.503320][T12590] Call Trace: [ 692.503326][T12590] [ 692.503334][T12590] dump_stack_lvl+0x100/0x190 [ 692.503361][T12590] should_fail_ex.cold+0x5/0xa [ 692.503387][T12590] ? tomoyo_encode2+0xfb/0x3c0 [ 692.503413][T12590] should_failslab+0xc2/0x120 [ 692.503434][T12590] __kmalloc_noprof+0xe0/0x850 [ 692.503460][T12590] ? d_absolute_path+0x136/0x1b0 [ 692.503484][T12590] tomoyo_encode2+0xfb/0x3c0 [ 692.503518][T12590] tomoyo_encode+0x29/0x50 [ 692.503543][T12590] tomoyo_realpath_from_path+0x18c/0x690 [ 692.503577][T12590] tomoyo_path_number_perm+0x23c/0x580 [ 692.503601][T12590] ? tomoyo_path_number_perm+0x22e/0x580 [ 692.503626][T12590] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 692.503672][T12590] ? find_held_lock+0x2b/0x80 [ 692.503688][T12590] ? __fget_files+0x215/0x3d0 [ 692.503707][T12590] ? hook_file_ioctl_common+0x149/0x410 [ 692.503724][T12590] ? __fget_files+0x215/0x3d0 [ 692.503749][T12590] ? __fget_files+0x21f/0x3d0 [ 692.503774][T12590] security_file_ioctl+0xd3/0x230 [ 692.503798][T12590] __x64_sys_ioctl+0xb7/0x210 [ 692.503816][T12590] do_syscall_64+0x115/0x870 [ 692.503836][T12590] ? clear_bhb_loop+0x40/0x90 [ 692.503855][T12590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.503871][T12590] RIP: 0033:0x7fc6c7d9ce59 [ 692.503885][T12590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 692.503901][T12590] RSP: 002b:00007fc6c8bac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 692.503917][T12590] RAX: ffffffffffffffda RBX: 00007fc6c8015fa0 RCX: 00007fc6c7d9ce59 [ 692.503927][T12590] RDX: 00002000000002c0 RSI: 00000000c0845657 RDI: 0000000000000007 [ 692.503936][T12590] RBP: 00007fc6c8bac090 R08: 0000000000000000 R09: 0000000000000000 [ 692.503946][T12590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.503955][T12590] R13: 00007fc6c8016038 R14: 00007fc6c8015fa0 R15: 00007fff69a21e98 [ 692.503977][T12590] [ 692.504184][T12590] ERROR: Out of memory at tomoyo_realpath_from_path. [ 693.115281][ T804] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 693.265294][ T804] usb 3-1: Using ep0 maxpacket: 16 [ 693.289464][ T804] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 693.311699][ T804] usb 3-1: config 0 has no interface number 0 [ 693.346966][ T804] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 693.388405][ T804] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 693.406908][ T804] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 693.417592][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.427685][ T804] usb 3-1: Product: syz [ 693.438481][ T804] usb 3-1: Manufacturer: syz [ 693.455375][ T804] usb 3-1: SerialNumber: syz [ 693.502988][ T804] usb 3-1: config 0 descriptor?? [ 693.537901][T12593] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 693.548629][T12593] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 693.660185][T12597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1697'. [ 693.704751][T12598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1697'. [ 693.775018][T12593] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 693.815300][T12593] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 693.903998][ T29] audit: type=1400 audit(1779942698.716:1061): avc: denied { mount } for pid=12599 comm="syz.1.1698" name="/" dev="autofs" ino=43235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 694.055556][ T804] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 694.911270][T12612] block device autoloading is deprecated and will be removed. [ 695.324815][T12553] syz.6.1682 (12553): drop_caches: 1 [ 697.037451][T12628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1703'. [ 697.069747][T12628] openvswitch: netlink: Missing key (keys=40, expected=80) [ 697.077769][ T804] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 697.096174][ T804] asix 3-1:0.34: probe with driver asix failed with error -71 [ 697.121760][ T804] usb 3-1: USB disconnect, device number 66 [ 697.644221][T12639] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 698.110602][ T29] audit: type=1400 audit(1779942702.926:1062): avc: denied { sys_module } for pid=12632 comm="syz.1.1705" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 698.267661][T12651] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1709'. [ 698.525185][ T5719] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 698.935226][ T5719] usb 2-1: Using ep0 maxpacket: 32 [ 698.945809][ T5719] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 698.962277][ T5719] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 698.982609][ T5719] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 698.996232][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.009504][ T5719] usb 2-1: Product: syz [ 699.016684][ T29] audit: type=1400 audit(1779942703.836:1063): avc: denied { write } for pid=12655 comm="syz.6.1710" name="usbmon9" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 699.046395][ T5719] usb 2-1: Manufacturer: syz [ 699.058407][ T5719] usb 2-1: SerialNumber: syz [ 699.135387][ T804] usb 3-1: new low-speed USB device number 67 using dummy_hcd [ 699.267885][T12674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12674 comm=syz.5.1712 [ 699.272766][T12675] fuse: Bad value for 'fd' [ 699.306157][ T804] usb 3-1: Invalid ep0 maxpacket: 16 [ 699.372938][ T5719] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 699.392624][ T5719] usb 2-1: unit 255 not found! [ 699.401855][T12675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1714'. [ 699.414848][T12675] openvswitch: netlink: Missing key (keys=40, expected=80) [ 699.435308][ T804] usb 3-1: new low-speed USB device number 68 using dummy_hcd [ 699.580470][ T5719] usb 2-1: disable ehci-hcd to run US-144 [ 699.599167][ T5719] usb 2-1: disable ehci-hcd to run US-144 [ 699.605047][ T804] usb 3-1: Invalid ep0 maxpacket: 16 [ 699.611888][ T804] usb usb3-port1: attempt power cycle [ 699.619976][ T5719] usb 2-1: USB disconnect, device number 55 [ 699.673110][T10424] udevd[10424]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 700.045501][ T804] usb 3-1: new low-speed USB device number 69 using dummy_hcd [ 700.227667][T12691] overlayfs: missing 'lowerdir' [ 700.959314][ T804] usb 3-1: Invalid ep0 maxpacket: 16 [ 701.265585][ T804] usb 3-1: new low-speed USB device number 70 using dummy_hcd [ 701.306490][ T804] usb 3-1: Invalid ep0 maxpacket: 16 [ 701.317697][ T804] usb usb3-port1: unable to enumerate USB device [ 701.922880][ T29] audit: type=1400 audit(1779942706.736:1064): avc: denied { name_bind } for pid=12714 comm="syz.0.1725" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 702.060309][T12717] siw: device registration error -23 [ 702.079368][T12717] netlink: 'syz.2.1726': attribute type 1 has an invalid length. [ 702.365799][T12702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 703.482009][T12717] netlink: 'syz.2.1726': attribute type 1 has an invalid length. [ 703.502999][T12656] Set syz1 is full, maxelem 65536 reached [ 703.789844][T12738] overlayfs: missing 'lowerdir' [ 704.216674][T12745] 9p: Bad value for 'rfdno' [ 704.803729][T12751] FAULT_INJECTION: forcing a failure. [ 704.803729][T12751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 704.825986][T12751] CPU: 0 UID: 0 PID: 12751 Comm: syz.2.1733 Tainted: G L syzkaller #0 PREEMPT(full) [ 704.826013][T12751] Tainted: [L]=SOFTLOCKUP [ 704.826020][T12751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 704.826031][T12751] Call Trace: [ 704.826037][T12751] [ 704.826044][T12751] dump_stack_lvl+0x100/0x190 [ 704.826070][T12751] should_fail_ex.cold+0x5/0xa [ 704.826096][T12751] _copy_to_user+0x32/0xd0 [ 704.826120][T12751] simple_read_from_buffer+0xcb/0x170 [ 704.826145][T12751] proc_fail_nth_read+0x1af/0x230 [ 704.826166][T12751] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 704.826188][T12751] ? rw_verify_area+0xce/0x6d0 [ 704.826204][T12751] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 704.826224][T12751] vfs_read+0x1e4/0xb30 [ 704.826246][T12751] ? __pfx_vfs_read+0x10/0x10 [ 704.826265][T12751] ? __fget_files+0x215/0x3d0 [ 704.826292][T12751] ? __fget_files+0x21f/0x3d0 [ 704.826321][T12751] ksys_read+0x12a/0x250 [ 704.826341][T12751] ? __pfx_ksys_read+0x10/0x10 [ 704.826361][T12751] ? rcu_is_watching+0x12/0xc0 [ 704.826391][T12751] do_syscall_64+0x115/0x870 [ 704.826415][T12751] ? clear_bhb_loop+0x40/0x90 [ 704.826438][T12751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.826457][T12751] RIP: 0033:0x7fc6c7d5d68e [ 704.826471][T12751] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 704.826489][T12751] RSP: 002b:00007fc6c8babfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 704.826506][T12751] RAX: ffffffffffffffda RBX: 00007fc6c8bac6c0 RCX: 00007fc6c7d5d68e [ 704.826518][T12751] RDX: 000000000000000f RSI: 00007fc6c8bac0a0 RDI: 0000000000000003 [ 704.826528][T12751] RBP: 00007fc6c8bac090 R08: 0000000000000000 R09: 0000000000000000 [ 704.826538][T12751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 704.826548][T12751] R13: 00007fc6c8016038 R14: 00007fc6c8015fa0 R15: 00007fff69a21e98 [ 704.826573][T12751] [ 704.842785][T12753] overlay: filesystem on ./file0 not supported as upperdir [ 704.893369][T12755] lo speed is unknown, defaulting to 1000 [ 707.513307][T12781] binder: binder_mmap: 12780 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 707.719324][T12791] netlink: 'syz.2.1745': attribute type 9 has an invalid length. [ 707.875450][ T5615] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 708.080793][T12794] binder: 12792:12794 ioctl c0306201 200000000240 returned -14 [ 708.190905][ T5615] usb 6-1: Using ep0 maxpacket: 16 [ 708.259899][ T5615] usb 6-1: config index 0 descriptor too short (expected 52, got 36) [ 708.313821][ T5615] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 708.361997][ T5615] usb 6-1: config 0 has no interface number 0 [ 708.375725][ T5615] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 708.410684][ T5615] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 708.526875][ T804] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 708.539810][ T5615] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 708.560590][ T5615] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.570596][ T5615] usb 6-1: Product: syz [ 708.575337][ T5615] usb 6-1: Manufacturer: syz [ 708.581049][ T5615] usb 6-1: SerialNumber: syz [ 708.591241][ T5615] usb 6-1: config 0 descriptor?? [ 708.596757][T12785] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 708.608774][T12785] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 708.725427][ T804] usb 2-1: device descriptor read/64, error -71 [ 708.826285][T12799] ubi16: attaching mtd0 [ 708.903117][T12799] ubi16: scanning is finished [ 708.907955][T12799] ubi16: empty MTD device detected [ 708.989537][ T804] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 709.128265][T12800] fuse: Unknown parameter 'üwXÀz͆w' [ 709.163309][T12800] netlink: 'syz.2.1748': attribute type 10 has an invalid length. [ 709.171425][T12800] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1748'. [ 709.186657][T12800] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 709.244253][T12785] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 709.255304][T12785] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 709.273495][T12803] netlink: 'syz.0.1749': attribute type 12 has an invalid length. [ 709.352959][T12799] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 709.360641][ T804] usb 2-1: device descriptor read/64, error -71 [ 709.367618][T12799] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 709.399091][T12799] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 709.421915][T12799] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 709.436683][T12799] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 709.443759][T12799] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 709.452359][T12799] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2956835136 [ 709.463234][T12799] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 709.478496][T12806] ubi16: background thread "ubi_bgt16d" started, PID 12806 [ 709.486121][ T804] usb usb2-port1: attempt power cycle [ 709.713060][ T5615] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 709.725194][ T5615] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -61 [ 709.742696][ T5615] asix 6-1:0.251: probe with driver asix failed with error -61 [ 709.855190][ T5732] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 709.866183][ T804] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 709.885544][ T804] usb 2-1: device descriptor read/8, error -71 [ 710.007457][ T5732] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 710.024640][ T5732] usb 3-1: config 0 has no interface number 0 [ 710.040676][ T5732] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 710.065145][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.083376][ T5732] usb 3-1: Product: syz [ 710.089897][ T5732] usb 3-1: Manufacturer: syz [ 710.098519][ T5732] usb 3-1: SerialNumber: syz [ 710.115551][ T5732] usb 3-1: config 0 descriptor?? [ 710.375257][ T804] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 710.882141][ T5732] usb 3-1: Firmware version (0.0) predates our first public release. [ 710.987375][ T5732] usb 3-1: Please update to version 0.2 or newer [ 711.369090][ T5732] usb 3-1: USB disconnect, device number 71 [ 711.377949][ T5719] usb 6-1: USB disconnect, device number 39 [ 711.553584][ T804] usb 2-1: device not accepting address 59, error -71 [ 711.564614][ T804] usb usb2-port1: unable to enumerate USB device [ 712.482236][T12837] overlayfs: failed to clone upperpath [ 712.510680][T12837] overlayfs: failed to clone upperpath [ 712.932026][T12839] netlink: 'syz.1.1758': attribute type 12 has an invalid length. [ 713.185964][ T5719] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 713.365798][ T5719] usb 2-1: too many configurations: 25, using maximum allowed: 8 [ 713.384413][ T5719] usb 2-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 713.405200][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.426011][ T5719] usb 2-1: config 0 descriptor?? [ 713.438369][ T5719] pwc: Creative Labs Webcam Pro Ex detected. [ 713.453829][ T5719] pwc: Warning: more than 1 configuration available. [ 713.924914][ T5719] pwc: Failed to set LED on/off time (-71) [ 713.944962][ T5719] pwc: send_video_command error -71 [ 713.964470][T12853] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 713.976664][ T5719] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 713.984221][ T5719] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 714.004906][ T5719] usb 2-1: USB disconnect, device number 60 [ 715.969764][T12862] smbdirect: ib_dev[syz0] removed [ 716.172254][ T29] audit: type=1400 audit(1779942720.986:1065): avc: denied { create } for pid=12865 comm="syz.6.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 716.250667][ T29] audit: type=1400 audit(1779942721.066:1066): avc: denied { map_create } for pid=12865 comm="syz.6.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 716.254594][T12867] Bluetooth: MGMT ver 1.23 [ 716.625274][ T24] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 717.045650][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 717.102198][ T24] usb 3-1: config index 0 descriptor too short (expected 52, got 36) [ 717.149454][ T24] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 717.237735][ T24] usb 3-1: config 0 has no interface number 0 [ 717.253110][ T24] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 717.269318][T12881] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1772'. [ 717.320040][T12881] openvswitch: netlink: Missing key (keys=40, expected=80) [ 717.327400][ T24] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 717.387824][ T24] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 717.413022][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.435232][ T24] usb 3-1: Product: syz [ 717.494117][ T24] usb 3-1: Manufacturer: syz [ 717.510991][T12884] FAULT_INJECTION: forcing a failure. [ 717.510991][T12884] name failslab, interval 1, probability 0, space 0, times 0 [ 717.512972][ T24] usb 3-1: SerialNumber: syz [ 717.537703][T12884] CPU: 1 UID: 0 PID: 12884 Comm: syz.1.1773 Tainted: G L syzkaller #0 PREEMPT(full) [ 717.537730][T12884] Tainted: [L]=SOFTLOCKUP [ 717.537736][T12884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 717.537747][T12884] Call Trace: [ 717.537753][T12884] [ 717.537759][T12884] dump_stack_lvl+0x100/0x190 [ 717.537784][T12884] should_fail_ex.cold+0x5/0xa [ 717.537808][T12884] should_failslab+0xc2/0x120 [ 717.537825][T12884] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 717.537853][T12884] ? vfs_parse_fs_qstr+0x112/0x1c0 [ 717.537879][T12884] ? vfs_parse_fs_qstr+0x80/0x1c0 [ 717.537905][T12884] kmemdup_nul+0x49/0xd0 [ 717.537923][T12884] vfs_parse_fs_qstr+0x112/0x1c0 [ 717.537948][T12884] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 717.537979][T12884] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 717.538007][T12884] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 717.538032][T12884] vfs_parse_monolithic_sep+0x195/0x210 [ 717.538061][T12884] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 717.538087][T12884] ? v9fs_init_fs_context+0x439/0x590 [ 717.538107][T12884] ? alloc_fs_context+0x65a/0xf40 [ 717.538138][T12884] path_mount+0x77f/0x23d0 [ 717.538168][T12884] ? __pfx_path_mount+0x10/0x10 [ 717.538192][T12884] ? lockdep_hardirqs_on+0x78/0x100 [ 717.538221][T12884] ? putname+0xb1/0x110 [ 717.538243][T12884] ? kmem_cache_free+0x127/0x6c0 [ 717.538276][T12884] ? __x64_sys_mount+0x293/0x310 [ 717.538300][T12884] __x64_sys_mount+0x293/0x310 [ 717.538327][T12884] ? __pfx___x64_sys_mount+0x10/0x10 [ 717.538355][T12884] ? rcu_is_watching+0x12/0xc0 [ 717.538385][T12884] do_syscall_64+0x115/0x870 [ 717.538407][T12884] ? clear_bhb_loop+0x40/0x90 [ 717.538429][T12884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.538446][T12884] RIP: 0033:0x7f9aa719ce59 [ 717.538461][T12884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.538476][T12884] RSP: 002b:00007f9aa53f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 717.538494][T12884] RAX: ffffffffffffffda RBX: 00007f9aa7415fa0 RCX: 00007f9aa719ce59 [ 717.538506][T12884] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000000000000000 [ 717.538516][T12884] RBP: 00007f9aa53f6090 R08: 0000200000000300 R09: 0000000000000000 [ 717.538527][T12884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 717.538537][T12884] R13: 00007f9aa7416038 R14: 00007f9aa7415fa0 R15: 00007ffdf67c9ea8 [ 717.538560][T12884] [ 717.551234][T12888] overlay: filesystem on ./file0 not supported as upperdir [ 717.741544][ T24] usb 3-1: config 0 descriptor?? [ 717.830533][T12874] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 717.875629][T12874] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 717.908019][T12893] fuse: Bad value for 'fd' [ 717.913687][ T29] audit: type=1400 audit(1779942722.726:1067): avc: denied { setopt } for pid=12892 comm="syz.0.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 717.957264][T12893] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1776'. [ 717.959925][ T29] audit: type=1400 audit(1779942722.756:1068): avc: denied { bpf } for pid=12887 comm="syz.5.1775" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 717.988937][ T29] audit: type=1400 audit(1779942722.756:1069): avc: denied { map_read map_write } for pid=12887 comm="syz.5.1775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 718.031593][T12895] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 718.076107][ T29] audit: type=1400 audit(1779942722.756:1070): avc: denied { prog_load } for pid=12887 comm="syz.5.1775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 718.100119][ T29] audit: type=1400 audit(1779942722.756:1071): avc: denied { perfmon } for pid=12887 comm="syz.5.1775" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 718.130036][ T29] audit: type=1400 audit(1779942722.756:1072): avc: denied { prog_run } for pid=12887 comm="syz.5.1775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 718.211674][T12874] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 718.236738][T12874] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 718.245343][ T5719] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 718.668971][ T24] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 718.703316][ T24] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -61 [ 718.759241][ T24] asix 3-1:0.251: probe with driver asix failed with error -61 [ 718.826594][ T5719] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 718.844246][ T5719] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 718.857564][ T5719] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 718.869630][ T5719] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.878256][ T5719] usb 6-1: Product: syz [ 718.882511][ T5719] usb 6-1: Manufacturer: syz [ 718.887427][ T5719] usb 6-1: SerialNumber: syz [ 718.903853][ T5719] usb 6-1: config 0 descriptor?? [ 718.916949][ T5719] hub 6-1:0.0: bad descriptor, ignoring hub [ 718.933544][ T5719] hub 6-1:0.0: probe with driver hub failed with error -5 [ 718.966054][ T5719] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input27 [ 719.032163][ T29] audit: type=1400 audit(1779942723.846:1073): avc: denied { create } for pid=12915 comm="syz.1.1784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 719.189851][ T29] audit: type=1400 audit(1779942723.876:1074): avc: denied { write } for pid=12915 comm="syz.1.1784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 719.465663][ T11] block nbd3: Possible stuck request ffff8880280d5080: control (read@0,1024B). Runtime 90 seconds [ 719.476483][ T11] block nbd3: Possible stuck request ffff8880280d5240: control (read@1024,1024B). Runtime 90 seconds [ 719.485799][ T24] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 719.487625][ T11] block nbd3: Possible stuck request ffff8880280d5400: control (read@2048,1024B). Runtime 90 seconds [ 719.505986][ T11] block nbd3: Possible stuck request ffff8880280d55c0: control (read@3072,1024B). Runtime 90 seconds [ 719.656267][T12926] overlay: Unknown parameter 'fsname' [ 719.693295][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 719.705960][ T24] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 719.721983][ T24] usb 2-1: config 179 has no interface number 0 [ 719.741246][ T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 719.757466][ T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 719.770597][ T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 719.782901][ T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 719.795269][ T24] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 719.808937][ T24] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 719.818514][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.836407][T12923] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 719.912561][ T804] usb 3-1: USB disconnect, device number 72 [ 720.090646][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input28 [ 720.332014][ T5615] usb 2-1: USB disconnect, device number 61 [ 720.332111][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 720.347498][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 720.705486][ T5615] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 720.795648][ T24] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 720.865159][ T5615] usb 2-1: Using ep0 maxpacket: 8 [ 720.871915][ T5615] usb 2-1: unable to get BOS descriptor or descriptor too short [ 720.880533][ T5615] usb 2-1: config 4 interface 0 has no altsetting 0 [ 720.889393][ T5615] usb 2-1: string descriptor 0 read error: -22 [ 720.895776][ T5615] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 720.904885][ T5615] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 720.918421][ T5615] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 720.929875][ T5615] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 720.940357][ T5615] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 720.945834][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 720.947538][ T5615] usb 2-1: media controller created [ 720.958046][ T24] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 720.965519][ T5615] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 720.980902][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.989626][ T24] usb 3-1: Product: syz [ 720.993831][ T24] usb 3-1: Manufacturer: syz [ 720.998522][ T24] usb 3-1: SerialNumber: syz [ 721.005031][ T24] usb 3-1: config 0 descriptor?? [ 721.013924][ T24] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 721.022670][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 721.032286][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 721.042118][ T24] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 721.051087][ T24] usb 3-1: media controller created [ 721.062869][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 721.687135][T12937] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 722.102052][ T5615] zl10353_read_register: readreg error (reg=127, ret==0) [ 722.259424][T12940] fuse: fd is not a fuse device [ 722.835833][ T5719] usb 6-1: USB disconnect, device number 40 [ 723.410847][ T5615] usb 2-1: USB disconnect, device number 62 [ 723.690703][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 723.690720][ T29] audit: type=1400 audit(1779942728.496:1077): avc: denied { mount } for pid=12944 comm="syz.1.1793" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 723.743269][ T24] cxusb: set interface failed [ 723.767003][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 723.850389][ T24] DVB: Unable to find symbol mt352_attach() [ 723.859888][ T24] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 723.975178][ T24] rc_core: IR keymap rc-dvico-portable not found [ 723.995844][ T24] Registered IR keymap rc-empty [ 724.042542][ T24] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 724.137577][ T24] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input29 [ 724.284120][T12962] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1798'. [ 724.298389][T12962] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 724.320391][ T24] dvb-usb: schedule remote query interval to 100 msecs. [ 724.411182][ T24] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 724.543056][ T8866] dvb-usb: bulk message failed: -22 (1/0) [ 724.551662][ T24] usb 3-1: USB disconnect, device number 73 [ 725.683294][ T24] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 725.720488][T12971] kAFS: unable to lookup cell '(,c¾ûL' [ 725.868978][ T29] audit: type=1400 audit(1779942730.686:1078): avc: denied { bind } for pid=12977 comm="syz.1.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 725.934211][ T29] audit: type=1400 audit(1779942730.686:1079): avc: denied { name_bind } for pid=12977 comm="syz.1.1801" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 725.962078][ T29] audit: type=1400 audit(1779942730.686:1080): avc: denied { node_bind } for pid=12977 comm="syz.1.1801" saddr=224.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 726.048578][T12984] FAULT_INJECTION: forcing a failure. [ 726.048578][T12984] name failslab, interval 1, probability 0, space 0, times 0 [ 726.061286][T12984] CPU: 1 UID: 0 PID: 12984 Comm: syz.5.1804 Tainted: G L syzkaller #0 PREEMPT(full) [ 726.061313][T12984] Tainted: [L]=SOFTLOCKUP [ 726.061320][T12984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 726.061329][T12984] Call Trace: [ 726.061336][T12984] [ 726.061342][T12984] dump_stack_lvl+0x100/0x190 [ 726.061369][T12984] should_fail_ex.cold+0x5/0xa [ 726.061394][T12984] ? tomoyo_realpath_from_path+0xb6/0x690 [ 726.061419][T12984] should_failslab+0xc2/0x120 [ 726.061440][T12984] __kmalloc_noprof+0xe0/0x850 [ 726.061466][T12984] ? kfree+0x1dd/0x6c0 [ 726.061493][T12984] tomoyo_realpath_from_path+0xb6/0x690 [ 726.061526][T12984] tomoyo_path_perm+0x276/0x460 [ 726.061549][T12984] ? tomoyo_path_perm+0x262/0x460 [ 726.061574][T12984] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 726.061596][T12984] ? get_pid_task+0xfc/0x250 [ 726.061641][T12984] ? hook_file_truncate+0xc3/0x240 [ 726.061668][T12984] security_file_truncate+0xb5/0x1e0 [ 726.061687][T12984] do_ftruncate+0x216/0x8e0 [ 726.061711][T12984] ? __pfx_do_ftruncate+0x10/0x10 [ 726.061739][T12984] ksys_ftruncate+0x61/0xb0 [ 726.061762][T12984] __x64_sys_ftruncate+0x55/0x80 [ 726.061783][T12984] do_syscall_64+0x115/0x870 [ 726.061805][T12984] ? clear_bhb_loop+0x40/0x90 [ 726.061828][T12984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.061847][T12984] RIP: 0033:0x7fadb279ce59 [ 726.061862][T12984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.061879][T12984] RSP: 002b:00007fadb35c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 726.061897][T12984] RAX: ffffffffffffffda RBX: 00007fadb2a15fa0 RCX: 00007fadb279ce59 [ 726.061909][T12984] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 726.061920][T12984] RBP: 00007fadb35c9090 R08: 0000000000000000 R09: 0000000000000000 [ 726.061930][T12984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.061941][T12984] R13: 00007fadb2a16038 R14: 00007fadb2a15fa0 R15: 00007ffe2abd5278 [ 726.061966][T12984] [ 726.061973][T12984] ERROR: Out of memory at tomoyo_realpath_from_path. [ 726.399967][T12988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12988 comm=syz.5.1805 [ 726.477026][T12993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1806'. [ 726.554757][T12995] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1807'. [ 726.676149][ T5615] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 727.209940][ T5615] usb 6-1: device descriptor read/64, error -71 [ 727.465169][ T5615] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 727.625290][ T5615] usb 6-1: device descriptor read/64, error -71 [ 727.637046][T13016] FAULT_INJECTION: forcing a failure. [ 727.637046][T13016] name failslab, interval 1, probability 0, space 0, times 0 [ 727.664521][T13016] CPU: 1 UID: 0 PID: 13016 Comm: syz.1.1815 Tainted: G L syzkaller #0 PREEMPT(full) [ 727.664547][T13016] Tainted: [L]=SOFTLOCKUP [ 727.664554][T13016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 727.664564][T13016] Call Trace: [ 727.664569][T13016] [ 727.664576][T13016] dump_stack_lvl+0x100/0x190 [ 727.664601][T13016] should_fail_ex.cold+0x5/0xa [ 727.664624][T13016] ? tomoyo_realpath_from_path+0xb6/0x690 [ 727.664649][T13016] should_failslab+0xc2/0x120 [ 727.664668][T13016] __kmalloc_noprof+0xe0/0x850 [ 727.664692][T13016] ? kfree+0x1dd/0x6c0 [ 727.664717][T13016] tomoyo_realpath_from_path+0xb6/0x690 [ 727.664747][T13016] tomoyo_path_number_perm+0x23c/0x580 [ 727.664768][T13016] ? tomoyo_path_number_perm+0x22e/0x580 [ 727.664790][T13016] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 727.664831][T13016] ? find_held_lock+0x2b/0x80 [ 727.664846][T13016] ? __fget_files+0x215/0x3d0 [ 727.664866][T13016] ? hook_file_ioctl_common+0x149/0x410 [ 727.664882][T13016] ? __fget_files+0x215/0x3d0 [ 727.664905][T13016] ? __fget_files+0x21f/0x3d0 [ 727.664930][T13016] security_file_ioctl+0xd3/0x230 [ 727.664954][T13016] __x64_sys_ioctl+0xb7/0x210 [ 727.664975][T13016] do_syscall_64+0x115/0x870 [ 727.664996][T13016] ? clear_bhb_loop+0x40/0x90 [ 727.665018][T13016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.665035][T13016] RIP: 0033:0x7f9aa719ce59 [ 727.665058][T13016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.665076][T13016] RSP: 002b:00007f9aa53f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 727.665093][T13016] RAX: ffffffffffffffda RBX: 00007f9aa7415fa0 RCX: 00007f9aa719ce59 [ 727.665104][T13016] RDX: 0000000000000000 RSI: 0000000000005460 RDI: 0000000000000003 [ 727.665114][T13016] RBP: 00007f9aa53f6090 R08: 0000000000000000 R09: 0000000000000000 [ 727.665124][T13016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.665134][T13016] R13: 00007f9aa7416038 R14: 00007f9aa7415fa0 R15: 00007ffdf67c9ea8 [ 727.665157][T13016] [ 727.894691][ T5615] usb usb6-port1: attempt power cycle [ 727.927085][T13016] ERROR: Out of memory at tomoyo_realpath_from_path. [ 728.168519][T13029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1819'. [ 728.179329][T13029] nbd: must specify an index to disconnect [ 728.245591][ T5615] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 728.266085][ T5615] usb 6-1: device descriptor read/8, error -71 [ 728.328418][T13033] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 728.515370][ T5615] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 728.610252][T13039] netlink: 'syz.2.1821': attribute type 2 has an invalid length. [ 728.730411][T13040] netlink: 'syz.2.1821': attribute type 2 has an invalid length. [ 730.690029][T13046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1823'. [ 730.723536][T13046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1823'. [ 730.734032][T13046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1823'. [ 730.747840][T13046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1823'. [ 730.761959][T13046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1823'. [ 730.785398][ T5615] usb 6-1: device not accepting address 44, error -71 [ 730.851732][ T5615] usb usb6-port1: unable to enumerate USB device [ 731.061823][T13043] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1822'. [ 731.328084][ T29] audit: type=1326 audit(1779942736.146:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13044 comm="syz.5.1823" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb279ce59 code=0x7ffc0000 [ 731.381930][ T29] audit: type=1326 audit(1779942736.146:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13044 comm="syz.5.1823" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb279ce59 code=0x7ffc0000 [ 731.418602][ T29] audit: type=1326 audit(1779942736.176:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13044 comm="syz.5.1823" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb279ce59 code=0x7ffc0000 [ 731.447296][ T29] audit: type=1326 audit(1779942736.176:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13044 comm="syz.5.1823" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb279ce59 code=0x7ffc0000 [ 731.476788][ T29] audit: type=1326 audit(1779942736.176:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13044 comm="syz.5.1823" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fadb279ce59 code=0x7ffc0000 [ 731.478571][T13064] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 731.504091][ T29] audit: type=1326 audit(1779942736.176:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13044 comm="syz.5.1823" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb279ce59 code=0x7ffc0000 [ 731.555554][ T29] audit: type=1326 audit(1779942736.186:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13044 comm="syz.5.1823" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb279ce59 code=0x7ffc0000 [ 731.620625][T13070] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 731.706530][ T29] audit: type=1326 audit(1779942736.186:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13044 comm="syz.5.1823" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb279ce59 code=0x7ffc0000 [ 731.782367][ T29] audit: type=1326 audit(1779942736.436:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13044 comm="syz.5.1823" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb279ce59 code=0x7ffc0000 [ 732.338663][ T29] audit: type=1326 audit(1779942736.436:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13044 comm="syz.5.1823" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fadb279e6c7 code=0x7ffc0000 [ 732.795194][ T5719] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 732.960003][T13085] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1832'. [ 733.316604][ T5719] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 733.325801][ T5719] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 733.335670][ T5719] usb 6-1: config 0 interface 0 has no altsetting 0 [ 733.343973][ T5719] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 733.353153][ T5719] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 733.402784][ T5719] usb 6-1: Product: syz [ 733.416116][ T5719] usb 6-1: Manufacturer: syz [ 733.434835][ T5719] usb 6-1: SerialNumber: syz [ 733.465955][ T5719] usb 6-1: config 0 descriptor?? [ 733.489873][ T5719] hub 6-1:0.0: bad descriptor, ignoring hub [ 733.512169][ T5719] hub 6-1:0.0: probe with driver hub failed with error -5 [ 733.540008][ T5719] usb 6-1: selecting invalid altsetting 0 [ 735.026301][T13106] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 735.298531][T13113] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1839'. [ 735.374296][T13114] program syz.2.1839 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 735.424695][T13113] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1839'. [ 735.913923][ T5626] Bluetooth: hci3: unexpected event for opcode 0x080d [ 735.918143][T13120] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1842'. [ 735.971272][T13120] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1842'. [ 736.031972][T13120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1842'. [ 737.974904][T13137] smc: net device vcan0 applied user defined pnetid SYZ1 [ 738.417092][ T5615] usb 6-1: USB disconnect, device number 45 [ 738.587189][ T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 738.779443][ T9] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 738.790803][ T9] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 738.803827][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 738.815916][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 738.833646][ T9] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 738.853685][ T9] usb 2-1: Product: syz [ 738.872001][ T9] usb 2-1: Manufacturer: syz [ 738.882629][ T9] usb 2-1: SerialNumber: syz [ 738.891967][ T9] usb 2-1: config 0 descriptor?? [ 738.902819][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 738.919202][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 738.947377][ T9] usb 2-1: selecting invalid altsetting 0 [ 738.995731][ T24] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 739.125435][ T24] usb 6-1: device descriptor read/64, error -71 [ 739.678228][ T24] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 739.741400][ T8729] Bluetooth: Error in BCSP hdr checksum [ 739.852880][ T24] usb 6-1: device descriptor read/64, error -71 [ 739.965710][ T24] usb usb6-port1: attempt power cycle [ 739.997214][ T9794] Bluetooth: Error in BCSP hdr checksum [ 740.255575][ T1100] Bluetooth: Error in BCSP hdr checksum [ 740.315147][ T24] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 740.345628][ T24] usb 6-1: device descriptor read/8, error -71 [ 740.518150][ T13] Bluetooth: Error in BCSP hdr checksum [ 740.585506][ T24] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 740.615577][ T24] usb 6-1: device descriptor read/8, error -71 [ 740.741246][ T24] usb usb6-port1: unable to enumerate USB device [ 740.778061][ T1100] Bluetooth: Error in BCSP hdr checksum [ 741.046141][ T13] Bluetooth: Error in BCSP hdr checksum [ 741.290751][T13195] binder_alloc: 13194: pid 13194 spamming oneway? 1 buffers allocated for a total size of 4096 [ 741.306385][ T9068] Bluetooth: Error in BCSP hdr checksum [ 741.316969][T13195] binder_alloc: 13194: pid 13194 spamming oneway? 2 buffers allocated for a total size of 5120 [ 741.347043][T13195] binder: 13194:13195 ioctl c0306201 0 returned -14 [ 741.447339][ T9] usb 2-1: USB disconnect, device number 63 [ 741.475415][ T5626] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 741.485373][T11951] Bluetooth: hci6: command 0x1003 tx timeout [ 742.091520][T13215] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1867'. [ 742.231368][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 742.907591][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 742.907604][ T29] audit: type=1400 audit(1779942747.716:1101): avc: denied { create } for pid=13217 comm="syz.2.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 744.735287][ T5719] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 745.145596][ T5719] usb 3-1: Using ep0 maxpacket: 16 [ 745.159890][T13254] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1878'. [ 745.174286][T13254] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1878'. [ 745.174779][ T5719] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.185265][T13254] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1878'. [ 745.333217][ T5719] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 745.347602][ T5719] usb 3-1: config 0 interface 0 has no altsetting 0 [ 745.355466][ T5719] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 745.364809][ T5719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.377587][ T5719] usb 3-1: config 0 descriptor?? [ 745.601080][ T29] audit: type=1400 audit(1779942750.416:1102): avc: denied { read append } for pid=13241 comm="syz.2.1874" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 745.636053][ T5718] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 745.659173][T13262] netlink: 'syz.1.1881': attribute type 1 has an invalid length. [ 745.682959][ T29] audit: type=1400 audit(1779942750.416:1103): avc: denied { open } for pid=13241 comm="syz.2.1874" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 745.810310][ T29] audit: type=1400 audit(1779942750.476:1104): avc: denied { map } for pid=13241 comm="syz.2.1874" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 745.836275][ T5718] usb 6-1: Using ep0 maxpacket: 8 [ 745.841043][ T5719] usbhid 3-1:0.0: can't add hid device: -71 [ 745.890107][ T5719] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 745.958039][ T5718] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 745.994535][ T5718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.017417][ T29] audit: type=1400 audit(1779942750.476:1105): avc: denied { write execute } for pid=13241 comm="syz.2.1874" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 746.061112][ T5718] usb 6-1: Product: syz [ 746.080584][ T5718] usb 6-1: Manufacturer: syz [ 746.105275][ T5718] usb 6-1: SerialNumber: syz [ 746.153400][ T29] audit: type=1400 audit(1779942750.626:1106): avc: denied { view } for pid=13261 comm="syz.1.1881" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 746.182985][ T5719] usb 3-1: USB disconnect, device number 75 [ 746.236244][ T5718] usb 6-1: config 0 descriptor?? [ 746.250072][ T5718] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 746.264633][ T5718] pctv452e: pctv452e_power_ctrl: 1 [ 746.264633][ T5718] [ 746.284364][ T5718] usb 6-1: selecting invalid altsetting 3 [ 746.297600][ T5718] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 746.297600][ T5718] [ 746.327878][ T5718] dvb-usb: bulk message failed: -22 (5/0) [ 746.368300][ T5718] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 746.399945][ T5718] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 746.419395][ T5718] usb 6-1: media controller created [ 746.429994][ T5718] dvb-usb: bulk message failed: -22 (8/0) [ 746.445795][ T5718] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 746.456594][ T5718] dvb-usb: MAC address reading failed. [ 746.478930][ T5718] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 746.617692][ T5718] DVB: Unable to find symbol stb0899_attach() [ 746.631135][ T5718] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 746.638495][T13272] overlay: filesystem on ./file0 not supported as upperdir [ 746.665624][T13275] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 746.735476][ T5718] rc_core: IR keymap rc-tt-1500 not found [ 746.753798][ T5718] Registered IR keymap rc-empty [ 746.775536][ T5718] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 746.809357][ T5718] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input30 [ 746.850909][ T5718] dvb-usb: schedule remote query interval to 100 msecs. [ 746.870158][ T5718] pctv452e: pctv452e_power_ctrl: 0 [ 746.870158][ T5718] [ 746.890624][ T5718] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 746.928876][ T5718] usb 6-1: USB disconnect, device number 50 [ 747.035191][ T5719] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 747.060099][ T5718] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 747.197454][ T5719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 747.219239][ T5719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 747.234411][ T5719] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 747.244029][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.257899][ T5719] usb 2-1: Product: syz [ 747.262868][ T5719] usb 2-1: Manufacturer: syz [ 747.272561][ T5719] usb 2-1: SerialNumber: syz [ 747.287033][ T5719] usb 2-1: config 0 descriptor?? [ 747.299097][ T5719] hub 2-1:0.0: bad descriptor, ignoring hub [ 747.310700][ T5719] hub 2-1:0.0: probe with driver hub failed with error -5 [ 747.321946][ T5719] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input31 [ 748.231575][T13295] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[12182] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[13295] [ 748.442515][T13301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1890'. [ 748.451794][T13301] openvswitch: netlink: Missing key (keys=40, expected=80) [ 749.677991][ T11] block nbd3: Possible stuck request ffff8880280d5080: control (read@0,1024B). Runtime 120 seconds [ 749.678072][T13306] kAFS: unable to lookup cell '(,c¾ûL' [ 749.688862][ T11] block nbd3: Possible stuck request ffff8880280d5240: control (read@1024,1024B). Runtime 120 seconds [ 749.688889][ T11] block nbd3: Possible stuck request ffff8880280d5400: control (read@2048,1024B). Runtime 120 seconds [ 749.688912][ T11] block nbd3: Possible stuck request ffff8880280d55c0: control (read@3072,1024B). Runtime 120 seconds [ 750.042983][ T29] audit: type=1400 audit(1779942754.856:1107): avc: denied { ioctl } for pid=13311 comm="syz.2.1893" path="socket:[47114]" dev="sockfs" ino=47114 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 750.071821][T13312] syzkaller1: entered promiscuous mode [ 750.087870][T13312] syzkaller1: entered allmulticast mode [ 750.160561][ T29] audit: type=1400 audit(1779942754.976:1108): avc: denied { accept } for pid=13311 comm="syz.2.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 750.287037][ T4970] usb 2-1: reset full-speed USB device number 64 using dummy_hcd [ 750.307744][ T4970] usb 2-1: device reset changed ep0 maxpacket size! [ 750.317154][ T5719] usb 2-1: USB disconnect, device number 64 [ 750.527630][ T5719] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 750.584757][T13324] netlink: 'syz.5.1892': attribute type 12 has an invalid length. [ 751.107177][ T5719] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 751.117268][ T5719] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 751.136711][ T5719] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 751.147861][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.223587][ T29] audit: type=1326 audit(1779942756.036:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13329 comm="syz.6.1898" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d7d39ce59 code=0x0 [ 751.324753][ T29] audit: type=1400 audit(1779942756.136:1110): avc: denied { create } for pid=13329 comm="syz.6.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 751.372173][ T5719] usb 2-1: usb_control_msg returned -32 [ 751.382259][ T5719] usbtmc 2-1:16.0: can't read capabilities [ 751.405190][ T5718] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 751.557196][ T5718] usb 6-1: too many configurations: 25, using maximum allowed: 8 [ 751.588023][ T5718] usb 6-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 751.597651][ T5718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.608126][ T5718] usb 6-1: config 0 descriptor?? [ 751.625994][ T5718] pwc: Creative Labs Webcam Pro Ex detected. [ 751.637460][ T5718] pwc: Warning: more than 1 configuration available. [ 751.707563][ T29] audit: type=1400 audit(1779942756.526:1111): avc: denied { read } for pid=13336 comm="syz.2.1900" dev="nsfs" ino=4026532811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 751.732239][ T29] audit: type=1400 audit(1779942756.526:1112): avc: denied { open } for pid=13336 comm="syz.2.1900" path="net:[4026532811]" dev="nsfs" ino=4026532811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 751.767751][T13337] netlink: 'syz.2.1900': attribute type 12 has an invalid length. [ 751.826936][T13324] IPVS: sh: FWM 3 0x00000003 - no destination available [ 751.836667][ T5718] pwc: Failed to set LED on/off time (-71) [ 751.842999][ T5718] pwc: send_video_command error -71 [ 751.848946][ T5718] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 751.856766][ T5718] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 751.868466][ T5718] usb 6-1: USB disconnect, device number 51 [ 752.035348][ T5719] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 752.141278][T13343] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 752.205950][ T5719] usb 3-1: too many configurations: 25, using maximum allowed: 8 [ 752.232131][ T5719] usb 3-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 752.245311][ T5719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.257472][ T5719] usb 3-1: config 0 descriptor?? [ 752.276544][ T5719] pwc: Creative Labs Webcam Pro Ex detected. [ 752.286093][ T5719] pwc: Warning: more than 1 configuration available. [ 752.408479][ T29] audit: type=1400 audit(1779942757.226:1113): avc: denied { setopt } for pid=13348 comm="syz.6.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 753.450918][T12801] usb 2-1: USB disconnect, device number 65 [ 753.454722][T13354] kAFS: unable to lookup cell '(,c¾ûL' [ 753.599177][ T5719] pwc: Failed to set LED on/off time (-71) [ 753.611789][ T5719] pwc: send_video_command error -71 [ 753.630451][ T5719] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 753.660718][ T5719] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 753.692088][ T5719] usb 3-1: USB disconnect, device number 76 [ 753.767082][ T29] audit: type=1400 audit(1779942758.586:1114): avc: denied { allowed } for pid=13366 comm="syz.1.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 753.909565][T13369] lo speed is unknown, defaulting to 1000 [ 753.971795][T13369] lo speed is unknown, defaulting to 1000 [ 754.029417][T13369] lo speed is unknown, defaulting to 1000 [ 754.041536][T13369] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 754.056587][T13369] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 754.073800][T13369] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 754.301756][T13369] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 754.398545][T13369] lo speed is unknown, defaulting to 1000 [ 754.413097][T13369] lo speed is unknown, defaulting to 1000 [ 754.455620][T13369] lo speed is unknown, defaulting to 1000 [ 754.467500][T13369] lo speed is unknown, defaulting to 1000 [ 754.491322][T13369] lo speed is unknown, defaulting to 1000 [ 754.525945][ T5719] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 754.595641][T13369] lo speed is unknown, defaulting to 1000 [ 754.655049][T13397] netlink: 'syz.2.1915': attribute type 12 has an invalid length. [ 754.738295][ T5719] usb 6-1: config 253 has an invalid interface number: 29 but max is 0 [ 754.747210][ T5719] usb 6-1: config 253 has no interface number 0 [ 754.753582][ T5719] usb 6-1: config 253 interface 29 has no altsetting 0 [ 754.762727][ T5719] usb 6-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=f6.1b [ 754.773049][ T5719] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.787602][ T5719] usb 6-1: Product: syz [ 754.792032][ T5719] usb 6-1: Manufacturer: syz [ 754.797245][ T5719] usb 6-1: SerialNumber: syz [ 754.833022][ T29] audit: type=1400 audit(1779942759.646:1115): avc: denied { mount } for pid=13400 comm="syz.1.1917" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 754.973224][ T29] audit: type=1400 audit(1779942759.756:1116): avc: denied { unmount } for pid=5624 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 755.014084][ T5719] kaweth 6-1:253.29: couldn't find required endpoints [ 755.025157][ T8866] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 755.029239][ T5719] usb 6-1: USB disconnect, device number 52 [ 755.121696][T13406] kAFS: unable to lookup cell '(,c¾ûL' [ 755.258714][ T8866] usb 3-1: too many configurations: 25, using maximum allowed: 8 [ 755.306543][ T8868] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 755.438074][ T8866] usb 3-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 755.521555][ T8866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.596385][ T8868] usb 2-1: Using ep0 maxpacket: 16 [ 755.683506][ T8868] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.704146][ T8868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 755.737013][ T8868] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 4 [ 755.756385][ T8868] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 755.770820][ T8868] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 755.780530][ T8868] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 755.789485][ T8868] usb 2-1: Manufacturer: syz [ 755.808478][T13410] syz_tun: entered allmulticast mode [ 756.021485][T13406] lo speed is unknown, defaulting to 1000 [ 756.119801][ T8866] usb 3-1: config 0 descriptor?? [ 756.130762][ T8868] usb 2-1: config 0 descriptor?? [ 756.172130][ T8866] pwc: Creative Labs Webcam Pro Ex detected. [ 756.210288][ T8866] pwc: Warning: more than 1 configuration available. [ 756.433128][ T8866] pwc: Failed to set LED on/off time (-71) [ 756.447065][ T8866] pwc: send_video_command error -71 [ 756.452286][ T8866] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 756.459900][ T8866] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 756.480856][ T8866] usb 3-1: USB disconnect, device number 77 [ 756.565316][ T8868] rc_core: IR keymap rc-hauppauge not found [ 756.582744][ T8868] Registered IR keymap rc-empty [ 756.602628][ T8868] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 756.646309][ T8868] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 756.678100][ T8868] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 756.697992][ T8868] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input32 [ 756.722624][ T8868] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 756.746313][ T8868] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 756.766845][ T8868] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 756.785390][ T8868] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 756.804153][T13426] lo speed is unknown, defaulting to 1000 [ 756.815405][ T8868] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 756.855870][ T8868] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 756.874737][ T29] audit: type=1326 audit(1779942761.686:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13422 comm="syz.0.1923" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f8e5139ce59 code=0x0 [ 756.916618][ T8868] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 756.926605][T13429] netlink: 'syz.6.1922': attribute type 2 has an invalid length. [ 756.956609][ T8868] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 756.994960][ T8868] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 757.046493][ T8868] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 757.087590][ T8868] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 757.113333][ T8868] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 757.160513][ T8868] usb 2-1: USB disconnect, device number 66 [ 757.345606][T13437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 757.790642][T13443] No such timeout policy "syz1" [ 757.798898][T13443] hpfs: Bad magic ... probably not HPFS [ 757.851296][ T29] audit: type=1400 audit(1779942762.666:1118): avc: denied { sqpoll } for pid=13444 comm="syz.0.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 758.088731][ T29] audit: type=1804 audit(1779942762.906:1119): pid=13449 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1929" name="/newroot/377/bus/file1" dev="tmpfs" ino=2106 res=1 errno=0 [ 758.573795][T13454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1930'. [ 758.622308][T13454] openvswitch: netlink: Missing key (keys=40, expected=80) [ 758.925151][ T8866] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 758.989459][T13471] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1936'. [ 759.125439][ T8866] usb 6-1: Using ep0 maxpacket: 16 [ 759.152025][ T8866] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.180089][T13475] netlink: 'syz.0.1937': attribute type 2 has an invalid length. [ 759.197370][ T8866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 759.242873][ T8866] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 4 [ 759.253437][ T8866] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 759.282585][ T8866] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 759.292003][ T9] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 759.307382][ T8866] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 759.330794][ T8866] usb 6-1: Manufacturer: syz [ 759.364459][ T8866] usb 6-1: config 0 descriptor?? [ 759.465455][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 759.478484][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 759.507410][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 759.544881][ T9] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 759.575332][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.590983][T13461] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1934'. [ 759.614642][ T9] usb 2-1: Product: syz [ 759.653921][ T9] usb 2-1: Manufacturer: syz [ 759.672388][ T9] usb 2-1: SerialNumber: syz [ 759.707150][ T29] audit: type=1400 audit(1779942764.526:1120): avc: denied { map } for pid=13479 comm="syz.2.1938" path="socket:[48422]" dev="sockfs" ino=48422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 759.817000][ T8866] rc_core: IR keymap rc-hauppauge not found [ 759.838084][ T8866] Registered IR keymap rc-empty [ 759.863197][ T8866] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 759.919478][ T8866] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 759.959059][ T8866] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 760.002843][ T9] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 760.032255][T13486] netlink: 684 bytes leftover after parsing attributes in process `syz.2.1940'. [ 760.036141][ T9] usb 2-1: unit 255 not found! [ 760.065649][ T8866] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input34 [ 760.085585][T13488] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 760.107782][ T8866] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 760.124624][T13488] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 760.137287][ T8866] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 760.157218][ T8866] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 760.171100][T13490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1941'. [ 760.188722][ T8866] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 760.199906][T13490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1941'. [ 760.237328][ T8866] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 760.275515][ T8866] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 760.285597][ T8868] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 760.330220][ T9] usb 2-1: disable ehci-hcd to run US-144 [ 760.347447][ T8866] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 761.237280][ T9] usb 2-1: disable ehci-hcd to run US-144 [ 761.252614][ T9] usb 2-1: USB disconnect, device number 67 [ 761.255388][ T8866] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 761.280226][T10518] udevd[10518]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 761.297481][ T8866] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 761.320255][ T8868] usb 3-1: unable to get BOS descriptor or descriptor too short [ 761.331704][ T8866] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 761.361153][ T8868] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 761.369806][ T8866] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 761.389114][ T8866] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 761.399241][ T8868] usb 3-1: can't read configurations, error -71 [ 761.423502][ T8866] usb 6-1: USB disconnect, device number 53 [ 762.383513][ T9] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 762.670000][T13504] netlink: 'syz.2.1947': attribute type 12 has an invalid length. [ 762.861631][ T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 762.894698][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.922959][ T9] usb 2-1: Product: syz [ 762.945448][ T9] usb 2-1: Manufacturer: syz [ 762.964697][ T9] usb 2-1: SerialNumber: syz [ 763.025166][ T8868] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 763.222929][ T8868] usb 3-1: too many configurations: 25, using maximum allowed: 8 [ 763.256977][ T8868] usb 3-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 763.285604][ T8868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.329644][ T8868] usb 3-1: config 0 descriptor?? [ 763.356621][T13507] SELinux: failed to load policy [ 763.365647][ T8868] pwc: Creative Labs Webcam Pro Ex detected. [ 763.388225][ T8868] pwc: Warning: more than 1 configuration available. [ 763.585380][ T8868] pwc: Failed to set LED on/off time (-71) [ 763.612472][ T8868] pwc: send_video_command error -71 [ 763.636567][ T8868] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 763.668994][ T8868] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 763.729946][ T8868] usb 3-1: USB disconnect, device number 80 [ 763.788036][ T9] rtl8150 2-1:1.0: couldn't reset the device [ 763.815215][ T9] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 763.852864][ T9] usb 2-1: USB disconnect, device number 68 [ 763.882655][T13518] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1951'. [ 763.940016][T13519] netlink: 'syz.5.1949': attribute type 2 has an invalid length. [ 764.267276][ T29] audit: type=1326 audit(1779942769.086:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13529 comm="syz.2.1955" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c7d9ce59 code=0x7ffc0000 [ 764.320909][ T29] audit: type=1326 audit(1779942769.086:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13529 comm="syz.2.1955" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c7d9ce59 code=0x7ffc0000 [ 764.356420][ T29] audit: type=1326 audit(1779942769.116:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13529 comm="syz.2.1955" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c7d9ce59 code=0x7ffc0000 [ 764.384104][T13527] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1954'. [ 764.401416][ T29] audit: type=1326 audit(1779942769.116:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13529 comm="syz.2.1955" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c7d9ce59 code=0x7ffc0000 [ 764.434026][ T29] audit: type=1326 audit(1779942769.116:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13529 comm="syz.2.1955" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fc6c7d9ce59 code=0x7ffc0000 [ 764.461508][ T29] audit: type=1326 audit(1779942769.176:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13529 comm="syz.2.1955" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c7d9ce59 code=0x7ffc0000 [ 764.533051][ T29] audit: type=1326 audit(1779942769.176:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13529 comm="syz.2.1955" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc6c7d9cbc2 code=0x7ffc0000 [ 764.571752][ T29] audit: type=1326 audit(1779942769.176:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13529 comm="syz.2.1955" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc6c7d9cc57 code=0x7ffc0000 [ 764.601240][ T29] audit: type=1326 audit(1779942769.176:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13529 comm="syz.2.1955" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc6c7d59b51 code=0x7ffc0000 [ 764.995870][ T29] audit: type=1326 audit(1779942769.176:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13529 comm="syz.2.1955" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fc6c7d9dc49 code=0x7ffc0000 [ 766.555814][T13555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1962'. [ 766.633413][T13559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5147 sclass=netlink_route_socket pid=13559 comm=syz.2.1962 [ 766.679976][T13561] netlink: 'syz.5.1965': attribute type 12 has an invalid length. [ 766.925525][ T5732] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 767.076023][ T5732] usb 6-1: too many configurations: 25, using maximum allowed: 8 [ 767.103032][ T5732] usb 6-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 767.113542][ T5732] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.135322][ T5732] usb 6-1: config 0 descriptor?? [ 767.146227][ T5732] pwc: Creative Labs Webcam Pro Ex detected. [ 767.158977][ T5732] pwc: Warning: more than 1 configuration available. [ 767.169377][T13577] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 767.184905][T13579] netlink: 'syz.0.1967': attribute type 2 has an invalid length. [ 767.196828][T13577] overlayfs: conflicting options: userxattr,redirect_dir=on [ 767.297167][T13581] x_tables: duplicate underflow at hook 2 [ 767.357345][ T5732] pwc: Failed to set LED on/off time (-71) [ 767.410870][ T5732] pwc: send_video_command error -71 [ 767.420687][ T5732] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 767.444357][ T5732] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 767.492016][ T5732] usb 6-1: USB disconnect, device number 54 [ 767.696735][T13589] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1971'. [ 767.706155][T13589] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 768.132380][T13596] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1974'. [ 768.173606][T13598] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1975'. [ 768.426201][T12801] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 768.433924][ T5732] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 768.595437][ T5732] usb 6-1: Using ep0 maxpacket: 32 [ 768.595759][T12801] usb 3-1: Using ep0 maxpacket: 32 [ 768.613570][ T5732] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 768.614240][T12801] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 768.664796][T12801] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 768.679111][ T5732] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 768.682088][T12801] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 768.730526][ T5732] usb 6-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 768.748883][T12801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.750637][ T5732] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.783303][ T5732] usb 6-1: Product: syz [ 768.790749][T12801] usb 3-1: Product: syz [ 768.796546][ T5732] usb 6-1: Manufacturer: syz [ 768.807277][ T5732] usb 6-1: SerialNumber: syz [ 768.822734][T12801] usb 3-1: Manufacturer: syz [ 768.845516][T12801] usb 3-1: SerialNumber: syz [ 769.209228][ T5732] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 769.216330][ T5732] usb 6-1: unit 255 not found! [ 769.251314][ T5732] usb 6-1: disable ehci-hcd to run US-144 [ 769.261396][ T5732] usb 6-1: disable ehci-hcd to run US-144 [ 769.293468][T12801] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 769.300719][T12801] usb 3-1: unit 255 not found! [ 769.313693][ T5732] usb 6-1: USB disconnect, device number 55 [ 769.418241][T10424] udevd[10424]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 769.455961][T12801] usb 3-1: disable ehci-hcd to run US-144 [ 769.469060][T12801] usb 3-1: disable ehci-hcd to run US-144 [ 769.483195][T12801] usb 3-1: USB disconnect, device number 81 [ 769.522103][T10424] udevd[10424]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 769.571720][T13623] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 769.598910][T13625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1984'. [ 769.640489][ T5626] Bluetooth: hci1: unexpected event for opcode 0x080d [ 769.641053][T13625] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1984'. [ 769.658699][T13626] netlink: 'syz.1.1982': attribute type 2 has an invalid length. [ 769.677183][T13625] netlink: 'syz.0.1984': attribute type 3 has an invalid length. [ 769.690099][T13625] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1984'. [ 769.719191][T13625] netlink: 'syz.0.1984': attribute type 3 has an invalid length. [ 771.225374][ T9] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 771.305818][ T5718] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 771.385510][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 771.469878][ T9] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 771.521176][ T9] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 771.644052][ T9] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 771.714653][T13651] syz.2.1993 (13651): drop_caches: 2 [ 771.731277][ T9] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 771.850942][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 771.936284][ T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 772.025263][ T9] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 772.099403][ T9] usb 6-1: Product: syz [ 772.133359][ T9] usb 6-1: Manufacturer: syz [ 772.192950][ T9] usb 6-1: SerialNumber: syz [ 772.227912][ T9] usb 6-1: config 0 descriptor?? [ 772.256361][ T9] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 772.282080][ T9] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 772.367607][ T5718] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 772.378805][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.390424][ T5718] usb 2-1: config 0 descriptor?? [ 772.401414][ T5718] pwc: Samsung MPC-C10 USB webcam detected. [ 772.440976][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 772.440992][ T29] audit: type=1400 audit(1779942777.256:1150): avc: denied { setopt } for pid=13662 comm="syz.2.1998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 772.482395][T13663] FAULT_INJECTION: forcing a failure. [ 772.482395][T13663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 772.497224][T13663] CPU: 1 UID: 0 PID: 13663 Comm: syz.2.1998 Tainted: G L syzkaller #0 PREEMPT(full) [ 772.497252][T13663] Tainted: [L]=SOFTLOCKUP [ 772.497258][T13663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 772.497268][T13663] Call Trace: [ 772.497274][T13663] [ 772.497280][T13663] dump_stack_lvl+0x100/0x190 [ 772.497301][T13663] should_fail_ex.cold+0x5/0xa [ 772.497316][T13663] _copy_from_user+0x2e/0xd0 [ 772.497330][T13663] copy_msghdr_from_user+0x9f/0x4f0 [ 772.497345][T13663] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 772.497364][T13663] ___sys_sendmsg+0x106/0x1e0 [ 772.497378][T13663] ? __pfx____sys_sendmsg+0x10/0x10 [ 772.497408][T13663] __sys_sendmsg+0x170/0x220 [ 772.497424][T13663] ? __pfx___sys_sendmsg+0x10/0x10 [ 772.497447][T13663] ? rcu_is_watching+0x12/0xc0 [ 772.497465][T13663] do_syscall_64+0x115/0x870 [ 772.497479][T13663] ? clear_bhb_loop+0x40/0x90 [ 772.497492][T13663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.497504][T13663] RIP: 0033:0x7fc6c7d9ce59 [ 772.497513][T13663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.497524][T13663] RSP: 002b:00007fc6c8bac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 772.497535][T13663] RAX: ffffffffffffffda RBX: 00007fc6c8015fa0 RCX: 00007fc6c7d9ce59 [ 772.497541][T13663] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 772.497548][T13663] RBP: 00007fc6c8bac090 R08: 0000000000000000 R09: 0000000000000000 [ 772.497554][T13663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.497560][T13663] R13: 00007fc6c8016038 R14: 00007fc6c8015fa0 R15: 00007fff69a21e98 [ 772.497574][T13663] [ 772.502342][ T29] audit: type=1400 audit(1779942777.316:1151): avc: denied { map } for pid=13664 comm="syz.0.1999" path="socket:[49161]" dev="sockfs" ino=49161 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 772.539929][ T8868] usb 6-1: USB disconnect, device number 56 [ 772.544281][ C1] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 772.608300][T13644] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 772.731606][ T8868] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 772.746913][ T5626] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 772.753102][T11951] Bluetooth: hci2: command 0x0406 tx timeout [ 772.843400][T11951] Bluetooth: hci2: unexpected event for opcode 0x44f8 [ 773.559402][T13682] No such timeout policy "syz1" [ 773.570502][T13682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2003'. [ 774.637530][ T5718] pwc: send_video_command error -71 [ 774.670305][ T5718] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 774.745469][ T5718] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 774.800684][T13690] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 774.894675][ T5718] usb 2-1: USB disconnect, device number 69 [ 776.465573][ T8866] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 776.492161][T13715] fuse: fd is not a fuse device [ 776.506032][ T9] usb 6-1: new low-speed USB device number 57 using dummy_hcd [ 776.696536][ T8866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.719236][ T8866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.735238][ T9] usb 6-1: device descriptor read/64, error -71 [ 776.754931][ T8866] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 776.782218][ T8866] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 776.802254][ T8866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.839102][ T8866] usb 2-1: config 0 descriptor?? [ 777.007310][T13722] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 777.088849][ T9] usb 6-1: new low-speed USB device number 58 using dummy_hcd [ 777.237526][ T9] usb 6-1: device descriptor read/64, error -71 [ 777.296615][ T8866] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 777.389614][T13727] No such timeout policy "syz1" [ 777.435287][ T29] audit: type=1400 audit(1779942782.196:1152): avc: denied { execute } for pid=13723 comm="syz.6.2017" path="/dev/comedi4" dev="devtmpfs" ino=3802 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 777.687786][ T9] usb usb6-port1: attempt power cycle [ 777.866134][T13733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 777.932905][T13733] lo speed is unknown, defaulting to 1000 [ 778.045371][ T9] usb 6-1: new low-speed USB device number 59 using dummy_hcd [ 778.106357][ T9] usb 6-1: device descriptor read/8, error -71 [ 778.211667][T11951] Bluetooth: hci1: unexpected event for opcode 0x007f [ 778.325576][ T8866] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 778.355977][ T9] usb 6-1: new low-speed USB device number 60 using dummy_hcd [ 778.379685][ T9] usb 6-1: device descriptor read/8, error -71 [ 778.475772][ T8866] usb 3-1: too many configurations: 25, using maximum allowed: 8 [ 778.492110][ T8866] usb 3-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 778.501312][ T8866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.505424][ T9] usb usb6-port1: unable to enumerate USB device [ 778.511833][ T8866] usb 3-1: config 0 descriptor?? [ 778.528091][ T8866] pwc: Creative Labs Webcam Pro Ex detected. [ 778.535909][ T8866] pwc: Warning: more than 1 configuration available. [ 778.734191][ T8866] pwc: Failed to set LED on/off time (-71) [ 778.743992][ T8866] pwc: send_video_command error -71 [ 778.751195][ T8866] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 778.760537][ T8866] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 778.775035][ T8866] usb 3-1: USB disconnect, device number 82 [ 779.015363][ T8868] usb 2-1: reset high-speed USB device number 70 using dummy_hcd [ 779.449684][ T29] audit: type=1400 audit(1779942784.266:1153): avc: denied { read } for pid=13759 comm="syz.1.2029" name="video8" dev="devtmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 779.473419][ T29] audit: type=1400 audit(1779942784.266:1154): avc: denied { open } for pid=13759 comm="syz.1.2029" path="/dev/video8" dev="devtmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 779.498121][ T29] audit: type=1400 audit(1779942784.296:1155): avc: denied { ioctl } for pid=13759 comm="syz.1.2029" path="/dev/video8" dev="devtmpfs" ino=954 ioctlcmd=0x565f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 780.455534][T13725] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2017'. [ 780.474399][T13765] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 780.482084][T13767] kAFS: unable to lookup cell '(,c¾ûL' [ 780.485608][ T11] block nbd3: Possible stuck request ffff8880280d5080: control (read@0,1024B). Runtime 150 seconds [ 780.498614][ T11] block nbd3: Possible stuck request ffff8880280d5240: control (read@1024,1024B). Runtime 150 seconds [ 780.510390][ T11] block nbd3: Possible stuck request ffff8880280d5400: control (read@2048,1024B). Runtime 150 seconds [ 780.521417][ T11] block nbd3: Possible stuck request ffff8880280d55c0: control (read@3072,1024B). Runtime 150 seconds [ 780.599876][ T5615] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 780.675603][ T9] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 780.766942][ T5615] usb 3-1: unable to get BOS descriptor or descriptor too short [ 780.785879][ T5615] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 36, changing to 7 [ 780.810679][ T5615] usb 3-1: string descriptor 0 read error: -22 [ 780.824751][ T5615] usb 3-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40 [ 780.845860][ T9] usb 6-1: too many configurations: 25, using maximum allowed: 8 [ 780.853675][ T5615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.881836][ T5615] usb 3-1: 1:1 : sample bitwidth 62 in over sample bytes 0 [ 780.898739][ T8866] usb 2-1: USB disconnect, device number 70 [ 780.902476][ T5615] usb 3-1: 1:1 : unsupported sample bitwidth 62 in 0 bytes [ 780.926772][ T9] usb 6-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 781.159129][ T5615] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 781.217729][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.362988][ T9] usb 6-1: config 0 descriptor?? [ 781.392606][ T9] pwc: Creative Labs Webcam Pro Ex detected. [ 781.406879][ T9] pwc: Warning: more than 1 configuration available. [ 781.423740][T13762] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 781.454735][T13762] tipc: Enabled bearer , priority 10 [ 781.528269][T13762] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2030'. [ 781.555335][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 781.666337][T13757] IPVS: sh: FWM 3 0x00000003 - no destination available [ 781.687721][ T9] pwc: Failed to set LED on/off time (-71) [ 781.707131][ T9] pwc: send_video_command error -71 [ 781.825227][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 782.185861][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 782.193563][ T9] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 782.222473][T13762] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2030'. [ 782.232623][ T9] usb 6-1: USB disconnect, device number 61 [ 782.269487][ T5615] usb 3-1: failed to enable PITCH for EP 0x1 [ 782.286815][ T5615] usb 3-1: unit 2 not found! [ 782.295733][ T5615] usb 3-1: unit 0 not found! [ 782.355244][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 782.362251][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 782.374045][ T29] audit: type=1400 audit(1779942787.196:1156): avc: denied { accept } for pid=13788 comm="syz.0.2035" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 782.430522][ T5615] usb 3-1: USB disconnect, device number 83 [ 783.385213][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 783.392269][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 783.835172][ T8866] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 784.037885][ T8866] usb 3-1: too many configurations: 25, using maximum allowed: 8 [ 784.425481][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 784.432545][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 784.504794][ T8866] usb 3-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 784.528177][ T8866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.555707][ T8866] usb 3-1: config 0 descriptor?? [ 784.564347][ T8866] pwc: Creative Labs Webcam Pro Ex detected. [ 784.587476][ T8866] pwc: Warning: more than 1 configuration available. [ 784.619736][T13825] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2046'. [ 784.772424][ T8866] pwc: Failed to set LED on/off time (-71) [ 784.789522][ T8866] pwc: send_video_command error -71 [ 784.805717][ T8866] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 784.824353][T13834] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 784.914910][ T8866] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 784.938009][ T8866] usb 3-1: USB disconnect, device number 84 [ 785.040072][T13838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2051'. [ 785.165989][T13843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2053'. [ 785.176207][T13843] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2053'. [ 785.185398][T13843] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2053'. [ 785.465220][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 785.472247][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 786.505193][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 786.512211][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 787.409440][T13860] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2057'. [ 787.418600][T13860] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2057'. [ 787.465376][ T29] audit: type=1400 audit(1779942792.276:1157): avc: denied { write } for pid=13861 comm="syz.6.2056" name="video36" dev="devtmpfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 787.511917][T13865] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 787.518452][T13865] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 787.543796][T13865] vhci_hcd vhci_hcd.0: Device attached [ 787.545214][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 787.556287][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 787.565460][T13866] vhci_hcd: connection closed [ 787.572575][ T9068] vhci_hcd vhci_hcd.6: stop threads [ 787.595556][ T9068] vhci_hcd vhci_hcd.6: release socket [ 787.606848][ T9068] vhci_hcd vhci_hcd.6: disconnect device [ 788.265664][ T8866] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 788.585217][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 788.592201][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 788.998844][ T8866] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 789.044452][ T8866] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 789.100661][ T8866] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 789.146831][ T8866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 789.224968][ T8866] usb 3-1: SerialNumber: syz [ 789.318527][ T8866] hub 3-1:1.0: bad descriptor, ignoring hub [ 789.321056][T13890] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 789.408475][ T8866] hub 3-1:1.0: probe with driver hub failed with error -5 [ 789.439514][ T8866] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 789.565030][ T8866] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 789.625277][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 789.632346][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 789.644623][ T8866] usb 3-1: USB disconnect, device number 85 [ 789.841576][ T9] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 790.467357][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 790.479731][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 790.522882][ T9] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 790.532373][T13900] 9p: Bad value for 'wfdno' [ 790.562299][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.590009][ T9] usb 6-1: Product: syz [ 790.600576][ T9] usb 6-1: Manufacturer: syz [ 790.610364][ T9] usb 6-1: SerialNumber: syz [ 790.630280][ T9] usb 6-1: config 0 descriptor?? [ 790.647229][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 790.665317][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 790.665861][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 790.672328][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 790.779341][ T9] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input37 [ 790.891822][T13909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2064'. [ 791.004949][ T5732] usb 6-1: USB disconnect, device number 62 [ 791.660695][T13915] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2073'. [ 791.670208][T13915] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 791.705207][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 791.795763][ T30] INFO: task syz.3.1529:11986 blocked in I/O wait for more than 143 seconds. [ 791.811431][ T8866] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 791.845017][ T30] Tainted: G L syzkaller #0 [ 791.885299][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 791.912382][ T30] task:syz.3.1529 state:D stack:25744 pid:11986 tgid:11985 ppid:5630 task_flags:0x400140 flags:0x00080002 [ 791.937211][ T30] Call Trace: [ 791.945110][ T30] [ 791.950544][ T30] __schedule+0x1295/0x67a0 [ 791.959673][ T30] ? __pfx___schedule+0x10/0x10 [ 791.971937][ T30] ? find_held_lock+0x2b/0x80 [ 791.981480][ T30] ? schedule+0x2bf/0x390 [ 791.990011][ T8866] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 792.001949][ T30] schedule+0xdd/0x390 [ 792.002047][ T8866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.018322][ T8866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.022593][ T30] io_schedule+0x8a/0xf0 [ 792.028320][ T8866] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 792.029644][ T8866] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 792.057659][ T8866] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 792.065966][ T8866] usb 3-1: Manufacturer: syz [ 792.069210][ T30] folio_wait_bit_common+0x414/0xa70 [ 792.082154][ T8866] usb 3-1: config 0 descriptor?? [ 792.091855][ T30] ? folio_wait_bit_common+0x2a0/0xa70 [ 792.105996][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 792.116946][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 792.126930][ T30] ? __pfx___might_resched+0x10/0x10 [ 792.136514][ T30] ? compaction_free+0x182/0x430 [ 792.145096][ T30] migrate_pages_batch+0x7a1/0x45c0 [ 792.155233][ T30] ? __pfx_compaction_alloc+0x10/0x10 [ 792.165111][ T30] ? __pfx_compaction_free+0x10/0x10 [ 792.174775][ T30] ? __pfx_migrate_pages_batch+0x10/0x10 [ 792.186979][ T30] ? ktime_get+0x1a4/0x320 [ 792.195638][ T30] ? __pfx_remove_migration_pte+0x10/0x10 [ 792.207514][ T30] ? __lock_acquire+0x4a5/0x2630 [ 792.216374][ T30] migrate_pages_sync+0x4db/0x880 [ 792.228615][ T30] ? __pfx_compaction_alloc+0x10/0x10 [ 792.239414][ T30] ? __pfx_compaction_free+0x10/0x10 [ 792.249694][ T30] ? __pfx_migrate_pages_sync+0x10/0x10 [ 792.261443][ T30] migrate_pages+0x1aa5/0x2880 [ 792.270521][ T30] ? isolate_migratepages_block+0xd74/0x61e0 [ 792.283043][ T30] ? __pfx_compaction_alloc+0x10/0x10 [ 792.295083][ T30] ? __pfx_compaction_free+0x10/0x10 [ 792.305355][ T30] ? __pfx_migrate_pages+0x10/0x10 [ 792.315096][ T30] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 792.325493][ T30] ? __nr_to_section+0xaa/0x100 [ 792.334150][ T30] ? pfn_to_online_page+0x178/0x4c0 [ 792.343822][ T30] compact_zone+0x244f/0x4460 [ 792.359687][ T30] ? debug_object_free+0x295/0x550 [ 792.369714][ T30] ? __pfx_debug_object_free+0x10/0x10 [ 792.382936][ T30] ? __pfx_compact_zone+0x10/0x10 [ 792.391087][ T30] ? __flush_work+0x928/0xcb0 [ 792.400749][ T30] ? __flush_work+0x928/0xcb0 [ 792.413214][ T30] compact_node+0x17f/0x2c0 [ 792.420073][ T30] ? __pfx_compact_node+0x10/0x10 [ 792.433460][ T30] ? __lru_add_drain_all+0x441/0x650 [ 792.444746][ T30] sysctl_compaction_handler+0x141/0x210 [ 792.450490][ T30] proc_sys_call_handler+0x47f/0x5a0 [ 792.456470][ T30] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 792.463293][ T30] ? splice_from_pipe_next+0x1ec/0x5a0 [ 792.468838][ T30] iter_file_splice_write+0x830/0x10a0 [ 792.474320][ T30] ? __pfx_iter_file_splice_write+0x10/0x10 [ 792.480320][ T30] ? __pfx_copy_splice_read+0x10/0x10 [ 792.487280][ T30] ? __pfx_iter_file_splice_write+0x10/0x10 [ 792.494197][ T30] direct_splice_actor+0x192/0x6c0 [ 792.499351][ T30] splice_direct_to_actor+0x345/0xa30 [ 792.504910][ T30] ? __pfx_direct_splice_actor+0x10/0x10 [ 792.509369][ T8866] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 792.510637][ T30] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 792.525309][ T30] do_splice_direct+0x174/0x240 [ 792.530189][ T30] ? __pfx_do_splice_direct+0x10/0x10 [ 792.535600][ T30] ? avc_policy_seqno+0x9/0x20 [ 792.541355][ T30] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 792.547647][ T30] ? rw_verify_area+0xce/0x6d0 [ 792.552741][ T30] do_sendfile+0xadc/0xe20 [ 792.557270][ T30] ? __pfx_do_sendfile+0x10/0x10 [ 792.562617][ T30] __x64_sys_sendfile64+0x154/0x220 [ 792.568595][ T30] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 792.574331][ T30] ? rcu_is_watching+0x12/0xc0 [ 792.579657][ T30] do_syscall_64+0x115/0x870 [ 792.585523][ T30] ? clear_bhb_loop+0x40/0x90 [ 792.590203][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.596251][ T30] RIP: 0033:0x7ff3d179ce59 [ 792.600669][ T30] RSP: 002b:00007ff3cf9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 792.609564][ T30] RAX: ffffffffffffffda RBX: 00007ff3d1a15fa0 RCX: 00007ff3d179ce59 [ 792.617667][ T30] RDX: 00002000000000c0 RSI: 0000000000000006 RDI: 0000000000000007 [ 792.625728][ T30] RBP: 00007ff3d1832d6f R08: 0000000000000000 R09: 0000000000000000 [ 792.633701][ T30] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 792.642837][ T30] R13: 00007ff3d1a16038 R14: 00007ff3d1a15fa0 R15: 00007ffe14fc5938 [ 792.651138][ T30] [ 792.652697][ T8866] appleir 0003:05AC:8243.000E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 792.654204][ T30] [ 792.654204][ T30] Showing all locks held in the system: [ 792.694462][ T30] 1 lock held by khungtaskd/30: [ 792.728955][ T30] #0: ffffffff8e7e5620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 792.741024][ T30] 2 locks held by getty/5372: [ 792.745188][ C1] net_ratelimit: 1 callbacks suppressed [ 792.745200][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 792.747730][ T30] #0: [ 792.751357][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 792.758330][ T30] ffff88803a29e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 792.818612][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 792.842908][ T30] 1 lock held by udevd/10418: [ 792.854935][ T30] #0: ffff888027b7e350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 792.875110][ T30] 1 lock held by syz.3.1529/11986: [ 792.880266][ T30] #0: ffff88807a6f6410 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 792.888700][T13926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.907818][T13926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.916505][ T30] 5 locks held by syz.6.2033/13782: [ 792.929493][ T30] #0: ffff888074cecea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 792.954999][ T30] #1: ffff888074cec0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 792.971272][ T30] #2: ffffffff90889980 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 792.994095][ T30] #3: ffff88804af3baf8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x95/0x710 [ 793.013306][ T30] #4: ffffffff8e7f1168 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 793.030915][ T30] 1 lock held by syz.2.2072/13916: [ 793.039471][ T30] #0: ffff88804d7cd870 (&hiddev->existancelock){+.+.}-{4:4}, at: hiddev_ioctl+0x165/0x15b0 [ 793.058470][ T30] 1 lock held by syz.2.2072/13926: [ 793.071628][ T30] #0: ffff88804d7cd870 (&hiddev->existancelock){+.+.}-{4:4}, at: hiddev_ioctl+0x165/0x15b0 [ 793.085215][ T30] [ 793.087645][ T30] ============================================= [ 793.087645][ T30] [ 793.096496][ T30] NMI backtrace for cpu 0 [ 793.096513][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 793.096535][ T30] Tainted: [L]=SOFTLOCKUP [ 793.096541][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 793.096550][ T30] Call Trace: [ 793.096556][ T30] [ 793.096562][ T30] dump_stack_lvl+0x100/0x190 [ 793.096584][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 793.096604][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 793.096624][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 793.096651][ T30] sys_info+0x141/0x190 [ 793.096673][ T30] watchdog+0xcb1/0x1030 [ 793.096695][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 793.096715][ T30] ? __pfx_watchdog+0x10/0x10 [ 793.096732][ T30] ? __kthread_parkme+0x18c/0x230 [ 793.096759][ T30] ? kthread+0x13a/0x450 [ 793.096775][ T30] ? __pfx_watchdog+0x10/0x10 [ 793.096791][ T30] kthread+0x370/0x450 [ 793.096807][ T30] ? __pfx_kthread+0x10/0x10 [ 793.096826][ T30] ret_from_fork+0x72b/0xd50 [ 793.096846][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 793.096866][ T30] ? __switch_to+0x800/0x1100 [ 793.096889][ T30] ? __pfx_kthread+0x10/0x10 [ 793.096908][ T30] ret_from_fork_asm+0x1a/0x30 [ 793.096939][ T30] [ 793.096945][ T30] Sending NMI from CPU 0 to CPUs 1: [ 793.229259][ C1] NMI backtrace for cpu 1 [ 793.229275][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 793.229294][ C1] Tainted: [L]=SOFTLOCKUP [ 793.229300][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 793.229308][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 793.229331][ C1] Code: 35 93 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 a1 22 00 fb f4 fc 43 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 793.229344][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000242 [ 793.229357][ C1] RAX: 0000000002a681a1 RBX: ffff88801e2fa540 RCX: ffffffff8b88f285 [ 793.229367][ C1] RDX: 0000000000000000 RSI: ffffffff8df0e6a5 RDI: ffffffff8c1c4480 [ 793.229377][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a67b5 [ 793.229386][ C1] R10: ffff8880b8533dab R11: 0000000000000000 R12: 0000000000000001 [ 793.229395][ C1] R13: ffffed1003c5f4a8 R14: 0000000000000001 R15: ffffffff90d70150 [ 793.229405][ C1] FS: 0000000000000000(0000) GS:ffff888124486000(0000) knlGS:0000000000000000 [ 793.229420][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 793.229429][ C1] CR2: 00007fc6c8142000 CR3: 000000000e596000 CR4: 00000000003526f0 [ 793.229439][ C1] Call Trace: [ 793.229446][ C1] [ 793.229451][ C1] default_idle+0x9/0x10 [ 793.229470][ C1] default_idle_call+0x6c/0xb0 [ 793.229488][ C1] do_idle+0x464/0x590 [ 793.229509][ C1] ? finish_task_switch.isra.0+0x152/0x1010 [ 793.229530][ C1] ? __pfx_do_idle+0x10/0x10 [ 793.229550][ C1] ? do_idle+0x30d/0x590 [ 793.229571][ C1] cpu_startup_entry+0x4f/0x60 [ 793.229583][ C1] start_secondary+0x21d/0x2d0 [ 793.229600][ C1] ? __pfx_start_secondary+0x10/0x10 [ 793.229616][ C1] common_startup_64+0x13e/0x148 [ 793.229640][ C1] [ 793.412628][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 793.419472][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 793.430148][ T30] Tainted: [L]=SOFTLOCKUP [ 793.434457][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 793.444493][ T30] Call Trace: [ 793.447753][ T30] [ 793.450666][ T30] dump_stack_lvl+0x100/0x190 [ 793.455335][ T30] vpanic+0x552/0x970 [ 793.459302][ T30] ? __pfx_vpanic+0x10/0x10 [ 793.463783][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 793.469925][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 793.476070][ T30] panic+0xd1/0xe0 [ 793.479770][ T30] ? __pfx_panic+0x10/0x10 [ 793.484173][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 793.490331][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 793.496473][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 793.502610][ T30] ? watchdog.cold+0x1ec/0x234 [ 793.507353][ T30] ? watchdog+0xcc1/0x1030 [ 793.511751][ T30] watchdog.cold+0x1fd/0x234 [ 793.516326][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 793.522116][ T30] ? __pfx_watchdog+0x10/0x10 [ 793.526773][ T30] ? __kthread_parkme+0x18c/0x230 [ 793.531792][ T30] ? kthread+0x13a/0x450 [ 793.536014][ T30] ? __pfx_watchdog+0x10/0x10 [ 793.540668][ T30] kthread+0x370/0x450 [ 793.544719][ T30] ? __pfx_kthread+0x10/0x10 [ 793.549294][ T30] ret_from_fork+0x72b/0xd50 [ 793.553866][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 793.558960][ T30] ? __switch_to+0x800/0x1100 [ 793.563624][ T30] ? __pfx_kthread+0x10/0x10 [ 793.568198][ T30] ret_from_fork_asm+0x1a/0x30 [ 793.572954][ T30] [ 793.576313][ T30] Kernel Offset: disabled [ 793.580616][ T30] Rebooting in 86400 seconds..