last executing test programs: 9.11860235s ago: executing program 2 (id=3897): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x404, 0x9}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000003000000040000000108000001000000", @ANYRES32=r0], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) socket$kcm(0xa, 0x3, 0x87) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), 0x0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r6, r3, 0x25, 0x2, @val=@tcx={@void, @value=r1}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0) 8.254392616s ago: executing program 0 (id=3900): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[], 0x1c}], 0x1, 0x0, 0x0, 0x4004040}, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB=' '], 0x0) 8.145742179s ago: executing program 0 (id=3901): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r6, 0x1000000, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{&(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f00000009c0)=""/255, 0xff}, {&(0x7f0000000300)=""/60, 0x3c}, {&(0x7f0000000ac0)=""/145, 0x91}], 0x4, &(0x7f0000000cc0)=""/63, 0x3f}}], 0x1, 0x10000, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd60e400ff00403a00fe800000000000000000004000000027fe059078020000006f000000000000000000000000000001fe8000000000000000000000000000372900040001300200f1a96e3d0e3a60"], 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @local}, 0xf8) sendmmsg(r3, &(0x7f0000007fc0), 0x0, 0x4000050) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00', 0x20, 0x3, 0x4ea, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000004c0], 0x0, &(0x7f0000000040), &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x562) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001100010125bd70000000000000000000", @ANYRES8=r7], 0x20}}, 0x8000) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000980100002800c000180080001400033be00140000001100010000000000000000aa65000100129f692950be22857ccc681a70cd"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() 8.118773245s ago: executing program 2 (id=3902): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x2e, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x4, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xb, 0xf, 0x3, 0x2, 0x7ae, 0x9, 0xb11, 0x65, [{0x7fff, 0x401, 0x5, 0x6}, {0x0, 0xe1, 0x7, 0xfffffffd}, {0x3ff, 0xa, 0x76800, 0xd}]}}, @TCA_U32_CLASSID={0x6, 0x1, {0x1, 0x3}}, @TCA_U32_HASH={0x8, 0x2, 0x9}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x2006c805}, 0x20040054) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) 7.971612497s ago: executing program 4 (id=3904): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0xb, 0xfffff038}, {0x20, 0x81, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r7, &(0x7f0000000200)=[{0x0, 0x2, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x1, 0x0, @time={0xffffffff}, {0x4, 0x3}, {0x0, 0x4}, @time=@tick=0x5}], 0x38) read$char_usb(r7, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) dup(r1) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r8, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000102, 0x0, 0x8}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) setpriority(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) 7.801995125s ago: executing program 3 (id=3905): r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) close_range(r0, r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000006b80)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x78, 0x16, 0xa01}, 0x78}}, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) r8 = syz_open_procfs(r3, &(0x7f00000003c0)='net/ip_tables_targets\x00') socket$nl_route(0x10, 0x3, 0x0) pread64(r8, &(0x7f0000000140)=""/170, 0xaa, 0x20000000000004) 7.565440948s ago: executing program 1 (id=3906): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b4050000000000000000950000000000000005eed401f9d3cef548128ed16572c16d76b50f7ef4e1f98a78f567076d67529b91c13af02344a05f253b1acc3bbf80270cf3dab0f21f8adce41fc90d55caf04c938633c06735e716bb9e8df309320ec698a443165f686064a7582f9cd7b150c35d29abe4ff41ed4983b9b9a9fb"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xf8, 0x48, 0xf3, 0x8, 0xc72, 0xc, 0xdf29, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4b, 0x0, 0x2, 0x67, 0x72, 0xe, 0x0, [], [{{0x9, 0x5, 0x1, 0x0, 0x40, 0x6, 0x3, 0x23}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x3, 0x7, 0x8a}}]}}]}}]}}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000) fsmount(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000080)={0x53, 0xfffffffffffffffe, 0x6, 0xf, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000400)="000039302ce8", 0xfffffffffffffffd, 0x12f67568, 0x16, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x18) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e21, 0x2, @mcast2, 0xc}], 0x1c) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000002740)={'pcl816\x00', [0x4f27, 0x6, 0x3, 0x5, 0x5, 0x1100cc5, 0xc, 0x8a, 0xb, 0xe8aa, 0x2, 0x1, 0xffffbffd, 0x80000001, 0x5, 0x4, 0xe, 0x1a448, 0x3ff, 0x40000003, 0x200099, 0xcaa7, 0x0, 0x20001e57, 0x7, 0xe6b, 0x3c, 0x80d0, 0x2, 0x8, 0xfce]}) 6.937881896s ago: executing program 2 (id=3907): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r6, 0x1000000, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{&(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f00000009c0)=""/255, 0xff}, {&(0x7f0000000300)=""/60, 0x3c}, {&(0x7f0000000ac0)=""/145, 0x91}], 0x4, &(0x7f0000000cc0)=""/63, 0x3f}}], 0x1, 0x10000, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd60e400ff00403a00fe800000000000000000004000000027fe059078020000006f000000000000000000000000000001fe8000000000000000000000000000372900040001300200f1a96e3d0e3a60"], 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @local}, 0xf8) sendmmsg(r3, &(0x7f0000007fc0), 0x0, 0x4000050) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00', 0x20, 0x3, 0x4ea, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000004c0], 0x0, &(0x7f0000000040), &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x562) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001100010125bd70000000000000000000", @ANYRES8=r7], 0x20}}, 0x8000) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000980100002800c000180080001400033be00140000001100010000000000000000aa65000100129f692950be22857ccc681a70cd"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() 6.554270927s ago: executing program 3 (id=3908): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 6.300968963s ago: executing program 0 (id=3909): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xff1e, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x2, 0x0}}]}, &(0x7f0000000180)=0x10) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) timer_create(0x3, &(0x7f0000000240)={0x0, 0x1d, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private2, 0x120, 0x0, 0x1, 0x2, 0x2, 0x847}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r4, 0x8b32, &(0x7f0000000040)) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) fsopen(&(0x7f0000000100)='binder\x00', 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="000824bd7000fedbdf250c00000008000300", @ANYRES32=r8, @ANYBLOB="cb473cb715d9018dc6bd6dc53995f835f6cb995d056f1424dfab53410d54217bc7fa9c48ad8e19b163bedf5c1ac29d7b3e37f3ba8fe5efdff10a8f92b56cba2eec44a08b2be750bb6f46739421b3281ce2c6584ab3fd4fe82c487238668389317af5"], 0x1c}, 0x1, 0x0, 0x0, 0x818}, 0x4000) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) write$UHID_CREATE2(r2, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES64, @ANYRESOCT=r1, @ANYRES16=r2, @ANYRESHEX=r1, @ANYRES8=r2, @ANYRES32=r2, @ANYRESHEX=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x7b52e4aff0f1e2e2, 0x4}) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r9, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r10) 5.18192502s ago: executing program 3 (id=3910): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x442, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = signalfd4(r2, 0x0, 0x0, 0xc0000) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, 0x0, &(0x7f0000000400)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_CAP_SYNC_REGS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYRES32=r1], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.132006408s ago: executing program 4 (id=3911): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[], 0x1c}], 0x1, 0x0, 0x0, 0x4004040}, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB=' '], 0x0) 5.131217186s ago: executing program 0 (id=3912): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x800, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="020500020e0000000000000e000a004e24fffffffdfc010000000000000000000000000000988500000000000002000100000004d4008100000000000005000500000000000a004e22fffff800fc010000000f00000000000027af57a80a815e42497e0000"], 0x70}, 0x1, 0x400000000000000}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x242e80, 0x0) pwrite64(r5, 0x0, 0x0, 0x7ffffffffffffffb) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) syz_io_uring_setup(0x1e1e, &(0x7f0000000280)={0x0, 0x86f7, 0x200, 0x3, 0xfffffffd, 0x0, r4}, &(0x7f0000002000)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x2000003, 0xffffffffffffffff, 0x0, 0x0, 0x22, 0x1}) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0) connect$inet6(r4, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) r7 = dup2(r4, r4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) futex(&(0x7f00000000c0)=0x1, 0xb, 0x2, 0x0, &(0x7f0000000140)=0x2, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000002ff7120c40911001cb00102030109022c00010004100409047e100226d5180809050602ff0300000009058202"], 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f006, 0x19}) 5.042213388s ago: executing program 4 (id=3913): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x404, 0x9}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000003000000040000000108000001000000", @ANYRES32=r0], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) socket$kcm(0xa, 0x3, 0x87) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000006c0)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0) 4.878674935s ago: executing program 2 (id=3914): ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f00000001c0)=0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x68, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x7f, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x4}]}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r4, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0xb0, r5, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x40}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x60, 0x33, @data_frame={@a_msdu=@type01={{0x0, 0x2, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0xa}, @broadcast, @initial, @from_mac, {0x6, 0xc4}}, @a_msdu=[{@device_b, @device_a, 0x35, "65f1595cc0e4ee3056aee5717d1dc952f4454a99daf2b6e539450cbd8a4db720933be6b1699dcbdfc91b51a79e4c79cb5494183cc2"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x4e040) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r6, 0x89e4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) 4.089712008s ago: executing program 4 (id=3915): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x3541, 0x104) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r2) r3 = getpgrp(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f000000b240)={{{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@local}}, &(0x7f000000b340)=0xe8) read$FUSE(r0, &(0x7f000000b380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(r0, &(0x7f000000d400)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)="92d7f470fcb04811a2478a57e3a289edeb1f0ed421e04cc315146bfdd04737b03bf7664b75dd7ae958fd1dadfae8d0a28165b0f3446a28681c93c7b064a42c866c730e702e4000db5c05a67b88c1d062e54870ef814334e06cc37336c708954ff91e37a481201018f28183829b77c5b354b2ec5e41cffda83fe6de7bdf5f991b2dd1b1b12c98315d19fccd44effd9c49aecd1c5f4292fbfacaf0d1b000460f5c91fc8ebc7990", 0xa6}, {&(0x7f0000000380)="1ba8070e5ce32fbf566d6f04f9adcceff47dfac058c4c638dd6855ebd76ecb006e5864d9eaa0231cf695d96b1b16bd1e7b7a8f4c69af849f46416a658da44f8582baba726d5463fb58b6847dddc511acfdc99f342bddfd9ba5a32d527873590ae4bc8bee5d25900e67c8811aa62a76ff09cc2c828745addcb04efe", 0x7b}, {&(0x7f0000000400)="30a09f85cac4c1bf8d32aeace2428d8fc324a34f63f910b910f4992bb03c6a25e2b083d334765311cae88ebfb59c0a637018b03b1389c5d4ec6c2d2cf55933fa9b89ac5f8fe0a3dbdb5bd30acd21a68758efb7666a82921033462fb860d2eefce4a9061bf721be905a0976feb8a47a19d677a11a0a0d0be6dcc6ec59544d15b697b0782fbf2f8117f3e2280c23d25ec3c27af6345f6ba1fc5107ec6d4fd15da40e3b1959eb237a508428b89c00b99cd080d6acda63e60bcd45df8ca39a94a06eb6587ca0f08c80ac7dbd7695bfb9", 0xce}, {&(0x7f0000000500)="7cb7a5c774d405b68f23fc2499849d2be65e18ffce090de0cdebd42194dcd1f6e566355409cd7a8f072e307e86ac2ffca1acfb46260c43f077a6efa8a7588504f86a426f76f80d4df8137515817d7305dd376bdb83684688eda001dd6cac5005a5c85d151be4f9a3a2ddffbb65e51c06b7a3071eb512b2c00c7b014dd6a5f70faff5a92fd7185417d2c21f7fab9b8fe0560d65605352359298f722fccafa57197771b67f9b4d44fdce17e62cf9a55675", 0xb0}], 0x4, &(0x7f00000027c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}}], 0x90, 0x4008800}}, {{&(0x7f0000002880)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000029c0)=[{&(0x7f0000002900)="c201432af9d92a6b4f6b8dfaecc4a2b8c64d5ac3364b7171c2a565931a9d6e94474ab7d7bb0f76043634432fd72b85db333332dc416cffe6845c820d706595cacb34d662f72047c1bbe730b2a947350324c6644fe8b88f88cc88b12c456a295fba7383b570b83696591bb384e3fdd59ee6fc79be0a764e2e2b94592fcf43243fc5899dc224d99610e184a49e20f2bf3c4f43ddb6096b26a2f2bbf09dd35b3046caec97102d54168b26dbaff07c27", 0xae}], 0x1, &(0x7f00000031c0)=[@rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff]}}], 0x100, 0x48040}}, {{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000003300)="fc6292faaa1c605881ff5a879c808d9faef8bac31aa7ff6a72d37f96dce7c4313d7a87be25001e874a2baa40e00608cbda1671ce47a9e541f325e6874034cdfcabca2ae1143e07ff88", 0x49}, {&(0x7f0000003380)="37d895b62e6132d718b4988f279719e498fb5f043396aaa981f55a0bd122ada0ce51d6664b11d7d0075d3a172007cdfffe12706aea3be5a7d0c54657617af915b3fc4f", 0x43}], 0x2, 0x0, 0x0, 0x4004090}}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000003440)="801af4dc35943db19536181243443f7f96cd3bb439c892fa02bb98cddf9220d8c84bbac64385f4979a62af84e903801932754c1da268d19163507b07287bbbf188e503d06a0ec62cf84aafcebe9581acb18007e1b0469f65a7eae81f1eaa8d14ddade5e7eae4ebf5e4dc8656d649bb12b884c176036b87859591ef0650476d8ec4bf563a29d0f7", 0x87}, {&(0x7f0000003500)="79f039d28a4c757564629c629c43ded92475beb8ec8f8fe4964481c12354d108567a759c3cd3e429bc876a64504829b734b9799d5a358207c68a18ca442c7ba40c6545674c0fe2858008f2c821eb140bb839bdb47b2f1bcb9111b008dabdec0e178dfeaa2bcca2159eb81f045c0d", 0x6e}, {&(0x7f0000003580)}, {&(0x7f00000035c0)="e2cf1a4e2ce489c53691f30348ab590da7d3c5a6d31940a837e7623aa225fda45ccf58d91777cdec4c8c4f7ffe98", 0x2e}, {&(0x7f0000003600)="61ef6388fb998cc7746e4dc5f519cb7d9b2d73108d408dd8749796b9206fcfad687c4ea44d73970627f284f1cfc1956eab300cf304f3120b76a41c51583ec381cef3672997017381d44b3b3ec2cb79801d8f3ac6f2ac8a3f923c30fffb133f8f7c48e89713d181798a328b3ecb72f898fdc3cfa4a08fd81f33cbd9735710f956f65628a1fe39e608c3601b05b80d6f4659333daabbe2f100d0d6c8652c733cb80134ed7a9909aea72cf0ace186ed038d4d2d6acfabb333a828f3e0e6cfaa8bfb25155dbeb7f7", 0xc6}, {&(0x7f0000003700)="8be8b9e1b8dfbe6ad4a19e6417633b", 0xf}, {&(0x7f0000003740)="a31a", 0x2}, {&(0x7f0000003780)="9667aa76c3fd6d5e32f0f837de56038f9d2ed078f6c7e17788bdc986b4fdceacba0970fa1f45ccea5ffdb9693a7e13268ca747c402f5ae40c3c345055bdb9c360f0e7bc51663", 0x46}, {&(0x7f0000003800)="2e53caaa5328562e82702bd9e2b1499c5e0a963414001404796bc02dcd860d0e323ce931eb5f9c4a19ae2d6c1df60b1c36fbc028c64c92b392dc57685a7d1ca3e3b8382877cf3117624cb8022297ad71d5e25afd61f4a54a7ecbb055e72f3ec71db4f992019e0d34a33b108be324dceca0e672db02c881ffdef5b3ae2769779662c5ceb673e0cb7c", 0x88}, {&(0x7f00000038c0)="a46a00efd09a6a9c1b59775002c391cd6c0e4f7686011855a488971b8a09aca240781b8b1917e1", 0x27}], 0xa, &(0x7f0000003b00)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x10}}], 0x30}}, {{&(0x7f0000003b40)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000005000)=[{&(0x7f0000003bc0)="1f8ad66d144767e4aae0c8a246ffe40751bb8cb693e6b289be6c505e3a5f4fdc9af7308b76ff24", 0x27}, {&(0x7f0000003c00)="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", 0xfc}, {&(0x7f0000003d00)="55d3fad4fe5cbd3bcde829c255552747982aec4d4b514cfaa256765db52e62852bd9ddd8b0285a03791015f76b5469ac3e68d372a49f7639a92ebe6e56cc762a53f63bedb9cdfe33bb1f0704482bd04e52ba1e91e07cdce4c51eab8cfac51da7d41840179f9c2a7501d81fcda0f797f2cd85b0c939f1080b812f22e8076f89e73678ed910d42dc550ae06cff8a38b2271abf5f1c5bc18fd3566004b6d69703b93cf3de82bd188b83f5a0f559087104ab1331aec3368e00036d7fd3a6f89b3a1fc32ddc93ec7376715f9b47fb09760fa0", 0xd0}, {&(0x7f0000003e00)="ddbd313f2d0609f422d3ddc1cfd6b3d0aa5f69dc14ed13d8c11fce44ebeea7bec784cb936d8846f7225574f5fb45a7459248747ef3a87335497093e8f399f4012f638d9f5714a3e5863e9bf83ab9bbdac6b80a3a198637cd78a11da75f4db1755e82d747e5dae6255d5f4ffe4974e0afd257acf132c55fc1a521e0", 0x7b}, {&(0x7f0000003e80)="b1319a3c9668f56346960728ff26cc6b2710a8fd629575919c1fdb21d437ed15b2a923a5b8b63dd18f09f52226a9587e7b275a9132d77385ea2b13c2fbb271a65d1b57290475ce09447e44a7825cead581c6f948f5e94f734c26b6d26967a28e9365ae26250b3166d80f02915df470adaffe82d536f3f92a955e7c", 0x7b}, {&(0x7f0000003f00)="2031fdd2c3f224db722526fd09deff796db4674a1ad5e316ca5062e22b32e7cf36e3a81b0206a4975f564e894828bdadd25ea25269a3ab4b7259bd639193f33844e225e5919f433eb776d5c63978461a18e34f0ec96ea1c30de29a5b69d1be6fe87995ae355257714cd9f2b113257181467273f5c8d7634676fb990d1b5ca6f212fede215be99eef78915436855f59b1e0b6768630f7f9d135dd8c09eb5c5047bef757745cfa4a5c38cb07fad40a835962c7f38a594b00bc304de786754a8cd3e8c151edccfa086b80a1445882e039250668e14ad524273730ed1149c67077d1afa4f312a67525d9ae6d1fd9217cef113cbbcfab044b519a0d0a85a6affa2950c2f55d793773de4174294d7e65eb6e3454991f8fdf06cf7ae653912587429026932c1384a5db65b66c2a5418b9c335a00c29c22bd81b92278cff4ca891b92c68c1040c6689f7a3aeb8f22d645c2ccd13fc72beb8d10515b49d52bdd0cfaf88e71d0a5f2dcbfbadceca17d7bd2f46938d469b4a400d9e2e6b5f5fb2b4d1e16a5d6fed313b79936bd1cfbcf2bb628f52a237ba44716acf689297ecc79ea719484d4ad5b8a5eabe9651e5d9c2134787558b007ad11e2d663563e26f997f9bf2b1e3a7133c510c3193e596167244e6c448d648c970244478eb3a31df62e97a636b1ba0b7997c876b8d1d9b76831872c696433cd6b49b10090b9b6a4b8cfafaf5b3dc26ee64f250bd028e6b9c137bc9d6a381ce3d1db70b694a51c65e546140609ee0dbb2b476b8e47b9d832bd1d6cc099f7afc15f30dcc9ac5b42ab8510bea232ad82f9f8f7051fd26c48d650f4f3aefae9c1571028e3bbfea9dd94e50a949aa4bee44fa4482aaf6e188dac450c7afce29f59c84547902af11781e2cfa02ef1616ca71eeb64c46b1368dc2aee8fadc8f8f3dbb11409ade25dede2b8d20834f56c897845c9fd610ad0e20086cb20017ee3361309ae381148b81a43380342ce405f63e059628067084d8813dd521aca50d73f7551a090529707809e030248ea18db75bd526eacc0ee36764cc8516e849d3144cd2163eca73813cc2fa277f6f75c30d553a944b10965a654367714561057d4f16a31979be3e507a32dc532389c555aa8c421f2ae9b113d5cbf20bb7d7417a85a448bdfd8a9be01bab8b9574974643db4e1fef289982f274742149917287d9346693fe4b93bba29734ce130bbe49633f709273eb3a0219005fc627ccb595b8dea087638924887a70c7db6be9d7093ff5bd22b008f95567657da37344b4c525b722f433198f67d9d9c38d0f5779b408f85141c777c99282d397d058f27cb01d69c509421471dc2561ab72c63d81b09fd6506b90c8af7cc15a4cbb0a3e637377933dd94fd635a59ef037e0ef8af28e106ae2e586568398954248c6d2eb861ef32fee161998549b7676ff509324be0191205f218bbc288809d2229bbd3bc7f6ca4e0dd00cb27877cbbe48b200f1e153b660f62ae06b86efd23511494f970a4e0e2bf255b2436f619d4d06aa54f4313aac95265ce23984f528fdb6220fade65ddd871724d38b38a28d8ddfbfae448c683ab65b55f8f19b51bd3103d1e28fd595ede40daeaf2af6a44d6bc7be1a880d163498ba523cda42080418f4f2ac41b6e1a8baf1d215bdd5941a1c9036f47e2fd7f0fde6c283a36b8d8e9d67289c5e916863a50ec24456b3887d1fade521013c26fb0badbf4dc5bf68bdad3c6fc38dec4fd99572d5c00acb5e8e3a7878b50d2d7a8941052b909c1ce7dc2cb3e6c8ea66811e4e25f4262035a877736dd5e6563bdce68ab34bb6f0a801aa977e6c02933bac34f351fa040cd0b40aad05a2d0e91fcded0853a3f81222fd4f4cfb1dd3ac97eec6aeb61133e595f767dc16416dde3897056a0019407e5152c9011a8cc13d3d054ff9683c9badac0531eaf7dea27e22aa6a32c2ab70e4219308d1f451040f490ab7515a75cfb630eccbf00e56f56b542a3f79272dd899dc0979185dd275f1c9879cd9e1774fc6752223afa38a664488fabcf6d9e1faaf40c7098f3dd9c86705090c5791e40d165f0e25c36b7a345aa7f5a7d43781ad7e59cd89dce5d4b2d697f4059b931148714d3ad88588a7599a972c4596b822ddb95f32c40bddecbd69d25231ac3538452003f5c09fb9c23d429e6f796f8fed6cefb3b77c0f44c5c863065846ac93f66027cccd63550a45aa8343db83855fe1c2b489920e566910e0345c97612ae2a27a2eb8c1ee872deaa8c63aa758a8943c68b67e2a39afa2e92cf3fc2cc6f4801ab1941ac8c8c852adb07f3ecf25ae1af3f9c335b6d75386b4196975edf87802ce5de95cec515083f443e662006aae7b3be155a60222dc395deeffb9635631cfda7047fa7a5780c3b2c7a72c761dc235c4b1d3bb9e1fdad2b2374da26581d41bac6c3251cd55e84eec1d54cf40c068ad89d6a9671d4028944e0a09f095dab582e7aba422a738519a005dc0edcb8cbfeecfeb8a795252cd7735e90f7c3fe63668cde0b34e7a4f5441d26aed41c350176fb8dcb1ad929328c75620ceaa02158732d444207830d729f465c7048a0264f36be1bb208f8a7b9fc5cdd397d31d71f55a1feb8d1217cc87ce1e1d0eafe6d96656733e961594eda16df6d50f4858f57e9dba5d9d5ff59ea785893f68d0e3b77a3f360a5a96c55f47355441ec2c73c377a81f00c9783f64ddf6579e383762f64b1cfbe180e6ac394d6e57a1dad428ae20c0af20764c0ddf381da63b2796becd574b0f59c29ac47b710c85ef05ac7b7086ffd0715ed9ed8917b874315af70d98447f8b918ec65a9f493a53fb675e86911add7c400695330d4e7f8ab95e332f0e01e25b8088ad9cc0962310f2264789a46e373d9661ad9d01f557de7a720a3936bf17627c207b57098d2d093970f64d1ae1fc7dcf3cbfd255fea2fbb0c8c452d64d08e0529ded020cbdfea73c5ff88f9ef704b452095a680f04471f686ac318b3291838d94bc0d623aa738c87f061e0920f9f9c93428cd633a763ab38747ec1c8856c09aa1055db04e26d4eed46c0168f4a709f5ed727fa1a698cdfd784c7aff822586bd38a5b8696cdeed78bfad0988dd8ee96299941d4336638161ddb822dd1425d28659ea185bd82224a9a38535db34e71fda4748b638ccd1ebd052dd4d22a8a7af894a714b1410fccd1dea647f0859b12dd74ed7b18aa223e7d395d67c9350d55bfd1e609b70f47ac6d8973c18a61dddb53a37b02051c8448ebb71e9d654bda32e81152ffcd77d4a88f2c1cd78b0d516c8495ceeed03f57794b5e08b1b6b6c76ad326375900fbe94cac05a15d9e075934b48475452653a7be5b67292a854f8cc6f03fcc5bad36863a312fe4aaaa4f1cf6f8eb27c50f2b657dde79c9b3b1f801c77b4d41d420fefbfd847ae2769449fa59b02923402d05f94834527749240afa2c2cc0ed61a39ae0365f76aba238a5524244f8e6a2280e65eb0ce63ae0a9fee44c2d2d3f2e2f75a15c0d25653478ab6efdbac5c5943f2d430b61b26a1b0ad7f2847c573b39ebaac2225fa931a19849d2aa7bc10ce7798e38676a0a15093e3ba196f45d5b99b4651979df570e8615e9f5bc76351df4e8f02dede8951f318fe1aced34163d3f7e76290938f0639a0deb4baba346eb3f88e42f48d9e923296fd08dddfd125c288d1a79ab74b2bc8f43d19443abd9bc6a674e7a73060b39d06ca0e9b4b53c321205bc77b7b082afb2cff386ca5c52ec695da38e65b4a4391ee069667f7319677ece9c596fb64f6f16ce92f57f97b70d132a1ea1f7ae4d3e354de152dbac4e17254dea03a084944b07e71b0faf7e351a5670a7e2009eca3ac35561bd8b1b8fb9bdc5d382f173fc471b73b89d80df70ba1662d7d94c9581a427fdfd1878a7ca1ba099229a91f9a87381aa554792e3547f35545436a1fae470e099bba23d7e051d937d467d0ff265dbad96162a38c08d9f2fcd1b9e3097bbda3b5758471d2215d6a3b26b12778720e87de5dd53a991a8a1a0cc4c95e60e66c536c4986643404a5b9c8198b101277f3113af0ae26a52eb8d74d3b058f7e5d21a85c45026531591e3747aaefbe8fd79cdc3314a7b3c58303e372e8904626fcf2014fea9256fdcaf51b9e0314b1d91d17bc52c32d6ea14410737be2616a4cdbf0126cd96fdc8a5cf110e0f146b4efc4fabdd3ca616065f22933d78f5a85f08aebed15774e2ffee4b91c88cf7e2142f8374e4137158b6774254c8e82b50616b3cb0f914758019ce2044da155dd55ec678f83870f857c8a2ca0b48a5936acfe370f1988ba5827352d0b622d0348b9618a587a985ecfde63665a746a2e23289f52d4684ac7a62576500bccea56f78ab55fcef52e7c65501e3e7aa15d1f576742af23bf354d762d001cce18c4b8e6ef5903f075d7f9743e1054c31d42ab9ff1c0b3c896f4f51a1d6c8ad8541daec29384ff3592f6fba0d9d883386cc64a79ce37e1dab5da4de37b052966fbcad57933c52d3692d004a54c9b5c7eeda9e107a2507b5faeb95ba10d3fd716a945238d18b578a4f44f761daa8a26139795c8988725a3520177d265bcb43913498faf0ad59e1b7618dc4de3e3f51dab4ee6b1a5c96b868a2544e79f0cbcfdec02365419a07b0db537e8c09f418d1dc346ef9b75483ac05ad451ac3d30416baef5933a933ef632f78d9b49b5401a96d2727cab2342a605269dc0a43771875ef226d1924d4a5853d49b93d49fb42c71f171ea57fbb0d2dfa23ed50ff3ffdccfe8843386b86701c9e74e6499b6a4525800235e1813068da0020a01821d5c2e723e0af1aa8c8f282e6ea1f867a89626467dd525d781cc1f3292eb088b6d730b25fd73837771f2403679a903af888c959f4373c08433ea1a317092ec6678e9514106370734f11a2a539c9aaf6782562bf8ae53d44ab2fb65d710f13951eb4ef3a86d6b328577285eb27f95162f862b4fc82c96322fe521c2802cc6037ea4d1aeea3939520b737ee67332ecf872464050dd6157f497be667c7b20120148ad29ae7e2ea4382640551d357e2e9ec30ca3327aaf7684edb093b9e2100cf4d969a424c3a35b31facc764aed4377c4e62f9ee5bcab80a986a853fe236375d2fbd62c9630cf92c7b7ade8285253394e5a7c8e1c8d7472ed6a33a6ae10e36008bcc0fbc16dba2d36a6d18480e61a9a68d16070b278e6982924c31be20c86b969ae9d2ee62213583c1d52372bde37b1677deb8bb175c74a82eaeec49173f5aee689dc889963a8182ca7738cee1aa7588c5094893e246e48e29736c1ddf2ea918fb974fed1044ccbf2a6ee37eaab7a17fcda2bb3c22c1533b5ac43bf0a297849e3099a9b54a6b3e76bbb53ba5ef922fccaa8cb402e2dd7e32a69bdc3fa3621fc38997f86277776b67b71b073df216f6f981ee3275fc205c47cd0ad75f86f36f5f1048fc0dc55c43f159fc35eaf3ffafc5ad8bd6ec1c0129a1cd7b427fcd512985f63f2ec8cc1ced1e4b3371361b36b4c36723d633a6977bf2e3d0fe8a87336b4d58b8acde9cb8317ad70a929d9959e7ea9be0cdb82a3d026c869f98789a783db4ea042f7dfb49fc82a766f2b7fc6a82a8e0952b9a0d793fdb037de3516ce1d0cb16b6dc84baa0a0ad13b41e09e78b26a48ad2e3ed0999706304fae012cf024a8eaa9acc2fb6c2f5ff36f266ee03c94e2f9384f9b454ed972938462fd6a7d9672936a5d26e9bfafa8ab27ae83f573d27bf96b86202aa81a847baf957debdf9c0f6333821c813464df182b73d82786c0d153caffab7ec5cb5b012e7d265af012a8b1836de6d", 0x1000}], 0x6, &(0x7f0000005080)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}], 0x58}}, {{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f00000051c0)="923e52b937cb18f37a6895dd66b12e93ddd32fa13cbaa2ecee3f1fadf13918407e44ff80d5146674", 0x28}, {&(0x7f0000005200)="26cf8aee0696e4721c8a6abdb6dd58a8ab8ba557b662404d4b92ad8e086e9f05973cd4c02c20ccab83c604f80b69cbdcd8e6fe51188ca63ff1f894e254264fcd0d56837ab79e01420efb29d9c0a93119897081cbb42dce03d3c80c16bf74730b0f01b013c043942d11cff00065f523b6bd791ae7fb5a4259a91868bb5d3925061e8e796a2e0f96eeaa8cb2f676e999f1d0270b2420a09c72bf3ff032762694e8b8f8905611d2661db3f0b266", 0xac}, {&(0x7f00000052c0)="0580ccb9270046", 0x7}], 0x3, &(0x7f0000007440)=[@rights={{0x34, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}, @cred={{0x1c}}], 0x78, 0x20004408}}, {{&(0x7f0000008980)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000009b80)=[{&(0x7f0000008a00)="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", 0x1000}, {&(0x7f0000009a00)="9b28eafc80a2b1f1263f76b089dd9d036251d39ea590db2af34f8b7f5597749ef461ae4f8c8c786c46000a164a827aafaeefe0c11787f53188ef572640a9652f54f0", 0x42}, {&(0x7f0000009a80)="5f13e97979306dbef4ffa6667af4971832d30e235fce079ce36e3c12e44565b9a32420a8985f696ee067bd5689bdf4b8659e246e7c091437366316f60a15ed2ccfb3f809b700e9457ed3d972b144dce4b1961b3311c582cdd7ec82190b0e4bd3e3bf515667e280713519ecffb8c9ae34b7c0e43b02d82ed757a5880490fa53d808af2dce6a3fc5dcdb30142a20234ef5452ef05a9ab59b5fb35efe5a38d49b3a96ba2548c6a8f6acb44ea28927987251282c7200eb062a70778e4f066b91d92bf0bfb714dd12dc94ee9d700155e23c4ab53022", 0xd3}], 0x3, 0x0, 0x0, 0x8040}}, {{&(0x7f0000009e00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f000000b1c0)=[{&(0x7f0000009e80)="12d65724201fba49fb7eabefdaf069e93113576c7731544df73cc533cf282c6ba1a9342ce5ad5d5d978efe80b12f1e258c9c7c41ca1c44adab7dda986f4e903218cb124259b36d0219c74155f71651db7e4c08889238b3ac26546ba8bf6cd9b4d68c0d09340be2c3b82c696f284351f5a36d7e72b21ddd27c179c5317b47283b00fe2cad2adf54a0685bb5ed4a683342992069d765dc9e93745a0e", 0x9b}, {&(0x7f0000009f40)="b4f9b3aefc80a6fc7ae8767fb44e4394509504457b3382c8f7a9716e3eb51120e2ef7058c8010ca8239e8edcd8f36bb64d56a9b183b5021d42e9740a36218676c7fce71c5cf3f426aaba0cbb7712fc5df7dd17b8c737a7af93525e75727c98022177a380bdb23c62499e5742de71d89748fa2f5ec386c60f877ff038d7a51042523ec52d581be8287273876c9ff3d5634bba57956c4b2b2f317d537a856e93e7b58fbaa0aa43ec07c13183584a45d26ff2f22d8c15b3e70f2815ecf8b4f73c95ce07d84f868cdc2ac53f98e25ed4a78c15c178a007e2c496180c5b3116c59a1af1b42cdc2be62edbeb5f83d1054236cca3f977d0fb362b339372ef774b43239a718c61f926802163e5499d15ac020cb50833d4b003e3317360aaf1d6df6685d2584a8eec20e23dcc9ed1fcf5e13e4c2e9adbab32698fcd2ae6aa79716e721031c8304d036f66b4223c2e034571a2ce39031e5f3fa42f6dd4e71e13ed73ff5e9e0a4ecb111e780ec71b3e2a996b5e5dd5165ff6547fa6fe3da14e1ba2ac570ed47a2430f5a252227642ca1eff387c9022b524e464952249be7640aee2c2dca1eff77e084920fa59cf45769c611f1a51510de14de338ba29bad2aafcd8afb01a0b0a05c884b136d2a258239497e78ee7a67fff1a30bcfebe3178bc7b5d152dfcd4f8b76badcdec8f22f4b09b59b1c7f5b9407d50a81ef503728896dd5e6a7490c7ffbbc5891254e99936ad3930cd42597475efd86a81b9b8d50f0b9d08be6c6ee569dfc0e2b937ef133719d65a4508a9d7c8fbb80d5ed2001bf4604bc1275c8675699bd9d7e0946f22cb4e052f5fb9db43736251b6dad44353b5b18912bc27a48233b6cc5bbf4b2ce8bc5e9dc83bb693ae340f934645a14006708cac684e7c7e40c586b7be568b4f21dc302bf495170d5c2b24d6b3aaa46f6460b7d45421bef2571f9d4140588948f47883fc26f5bf3998cd0e37d081c7a9ed22a4ec0fddb81c72c8b0610a95741c72582aedda4a874863053a648b0b77455a21495b6c3df8d139e5442c734ca42731a5ff281a51eb90478e4f4cd7f9f81bc19f482a20c845afaa48fa1dfbec0bfcc4a40cef28a33ce383b92c47da3cfa6312af22a5ed2709d8277b4d3f5ff75de47d14a7eefbdc65f983a6e280c7c47ece0820924aed20e0239b8cf4d8e3f48daeeb7b783150045d29296fe16cd40e0bc70394bac6507282534cd0d55b7737fc38289c53c73514c9dcadb60767d03ef1be8c93ad347d2ec188ebf9c2fbb429836edfd86c818da79aab191b70b9214e23b636cb56a19966a649d68d7827451a5fc7ac9364fd46f6eff8f6757edde570c65d30128c716f25535d44e798205648908ec52b4c3d586d3b8e32d2bf05e0b093b2bec174cc9932595bc287353007de2dee88253f4893e8cd1a875ec9a9c29595639e7153e2ebf6f2da87c697996cd152c761383ca94a3a1996bd8b95de56b515c6cf6fa0e59ed8bd47ee8882b0f8110f9cbc3543ba8d7c0fb05827957efc5db58f5c3a90050429d939f13b118f4db354a0c2b8bbecfcb515996318dd9cf6d8f700378258d69cc4942528e4346b7f29f8a5feb0cdeb9493cbf6c93ca83fdc31efd247343a5c85a182ae458c76e920082d05f5a669087a85d79950e7b1d05a862a9e623f232ea8ea2d0f15b5f54899b5bd458184d185005341eabc38de2f021a5db27d5d1d76ba6d9b722bac42d99c309caf1a8fb054ad26b80291537adf65f78996ff51d8b58cd4ec7c53b98a7e5b6c00b58eefec6862b13fb686e75de9dbac4e924e40fa946951db2539249f0a024bdd89db216e79d7aa308ba796fe671a347b3fe905244b8703578c5f6ded9f73cad2871ff95c7b302520204d28ed0ebc705769be0590aff7854d49959c5409caa185e6345c63ab57f0ba20c84187e98945ce15400ae3dcb44164bfe25e36d88802d5bba443728079d8a818df542c0fa7798d0a542156bb139d6cf372167c07363a156de7ef223638eb9a0655280c3dae9fd7362587f157285aa9722645bf95c4e8351519db7174320613567ef621c957a57dc0da3c4b22f883a78eba92935666ff52854fd024528b83494829321313188dee2942c8c42d826fafa4fb544f2e09e865686f6cd3665d27800697c472accc7f223681e59186cf08fa1643fe0fa3033a73fb26b33d408b5949d19ab801857ac9a90e9c6793dd9f2a08747240b654b0abc2406b36427cb9c391895e1f73ce50077d914994c5f6ad8981e3a88258f4ece95ee08efe4e2498c49fd4a75e46169e5f042358883e4ea24aca42e75fdaf4badb0d2f4d7db42d17cdd8214b783c8c8d9ec8a42b45291159372096a161052420b7164a3f98dbe338224ec41b08947865ecc971a877f5275f11258c4167b85af002409aeee173ee0c3df40c8b03e1b56ebce86c9872b10d39c72c3b3bb362a0f34f4a7c71a828dfb6c47a70cb62d16f8756d19ab98a2caaf40d328fd49f1c341b4692e4d0acd03eb35909008bad24aab53387c8a8939a7c508b3695bb8c0d0b618ac5a4bb526b91d910f2b74e222e11bd60edf059432af7ad26cc757edd919eb51778c49d4cbc4003572d99c7ed201b4c3942c29243ecce51a63fe542e89dce3a50bd0c8036fc27a7ec3f08ca056b33a03b7cad208892b87574e9d9f9476848627ce9e045c60116f8d2d572d8e5c7f528361bf73472c83c306e59378f3817b0575f26e89e87c059377a576dbf8e6fc1947720d450d048d269866be3616f115e1aead3fece0b224c171a32edcdc95041a0bf1780a5d1bd282f71fdd76bc1db6ab843788db00af22be6e1df0b8f67c20a1a80599f9dc7633b7d22b8ec87476908a99cc4b889dcc065958e1487b8e1ddcad4f37cb86cc103f9995ccc2f454a42e992eb49a0a31907cc8363e2b58cdd5664b1df4a9fe106746315819fac49e17894110fe63dc07e95b57af76ef5a792f0aa2ca440ba8c617a3eafb3fc28ee171c2a04b1a2b12e65a949f5d1acd7a9b494694d5d873ef111bccb30a1028306d9a86f6e1337a2605dc81e11bf468491fbcce2110b8a8648d8a4a041004748b38e3977a0eb76872d77ef82ffc2f7b857020768b7d4f16f7c647d6de3b85dffef17835caaf357afd29ef4e097085b1341a785b0be1f0e2b860d59c496e25c194da7bd0b1dadee65fd59ffd5f50793484fa84d690880e8a3d2d91b4c620678806c948ce2c131cb993778ab9c5ecbe7d3f51cc0cff5730e6c307e032077ba1a56ef703bcdcd148d6b99e0af0f368e6958322700b0a67a57e11355274194af9e1d69ee7d4ab3fc5bbb4809e62b288ff16a0e1b50ffeae2a99fc7ed288ac3ac874394c4c70cf0be8810665da02d98b9b387d612c1d25d8c7a4a44c9e1fad42c676864b7c0f6f3130242905ca396dc225851a635eb65cf5b0490e68a547644de34c462239a82f989d028d30419a8f86e9a0f35d3aa85b1e3ad08ca1a4540283fa73aa1f4d141b975e071a5788c255a23c028055b4b239727a0773765566a5580e2545aa9efe72ca8ff53f2872352976c5535fe159de64139a523d7c69530434f3f22806758a4c92f68872b923352c6b974370fdc55215ae1061b69804b1422caae4942067bdabac871dc7752cb1b3aaaa8e8203fb2dc8ce595323c5708df813365d4190e92b9f41e0707ec06800d2273bb2e852bf898ca0d9bf883ac45634de07b78b27824fa9cae9b337c8753be18d7343f24728f9bff6d77f4d26a56398965e8f8d218fc53bda62d1e644c96645db7e2f445bb1b72d63eb3e34905c0b8177ccea2321ec9fc75b698c40e7c3fce6eb3d3dc5753cdc6263a445c8a4d43c95bf497882652feaf375394dc6e74633b12d51651ef365e1f9f40b3d2826244bcc65da6c702adcab937ceca01d5008368299b057350268c01f3b72e482c96286553deb508c3388c3dd2b7c0d29ac64995f23b08962587cf1079ba9ee5eba9ff160b24b9644f92380014b290d9ba5d60e21d7dddf0f0c8b739f9c8f4f7e9d11762fe96c4f68fde4acf8a7b4a938c3c2cfee7147cb57c67779b39dcc2dae10852e2149bf428c2110db9c996a6d3712e48a32f35b371957247196eaa1bcbb180a7cb78332e23b0603f5cb08dd810d482798dc7f2bd1a20d3c9a2ce158840738c8d2a13fcd44be3c305ce6e32fafbed2f30e94709e6ddbd831eb4df1f565fb23706027bf5f668a11f5fbe85af4baaba2a7adb820e7c6d9be7245b3bb29ed9a54f6f38677a3e7a08b02c5232a182442f26f821de1fae4cfced139a153b5fb08c2977c8465e606796eaa8868bc3df014d463e21d3edeeebdc6ebe3e217fc08aeddf0772d49a76a98bf6c98985592b445d77ce5939cc4cbebf9ab6d027b529c83e10c7b563ffd23799e0afe3e1f91ce77f0d23afcf53cbc30b2cc48b082f9e225a216c704e2736fc1dd50c41caa264ed6d145b189c89d304041733689bcfb11053bc436a6ddd7ef678104d02e2df86921e7d9be275211c4e63633dcc4145bf1568dd61fbc12dc7d629b28cbdc1d61c7546f39ab09ece2a5976dc5bd0dc0a2a7ea732937ec9c3829956e17eba637b52d2e705f51fdab0351bda30ba5f2bfca31d14116304406a074e85983be20268d003263bb4cdef4a6e833623220391e585cc49f0de109dadc2e06bc6ea8950ad006e2cccf8e57c193bb7ba64b1cfc0cf20694f901099156a75143dda1df591b65c2eff501b1947ebeb65dfe91569c9382caea6a23495b6e0934f6c8a54ee9ff2b7ffc9c279f1516973235e26e2a39b1041497da872768e845c8ffb986a9643c90239e9a3b75fab56be5c84ede685fb69874f976c2a663d55ed22973d18481a2ca96b6eb49e60e84bce6fbe2f4947cad7d7706436df99783917ab2dad32c7478cd94b5194db480f3de3443da04dc69a83b0fe7d98d6ae4b92f7ed6b8496246682de9cadefd6c2b47d34170b9efbec647e4704528fd06e5309d4e57c1a8d6bec030d789f8e9f2bf7fd8527224e3b09f78aa8438fb366c8c9c49551463bf291358be172fb7ad92619848a7f648a7acaa8a70db3a533cf74db7382dcd61a22367e0b7adb94c96b92a892d711fc623659a7308f027e6e8982938566f4150c3c480b4c7c5bd59ec413b5642d903d7f246929fea24328418bbf50b1d00a0e07ac6d677b118e8fbcc945647c6f39feb9d68c160453ef19f0158bfa21ff49534d766bdf27ade5c765c664328a13adbc4d0d40fd44f5e77c366a0260bb83674f6e122b41e6be567d87e5aeed44fc22d8f1393bf6e6ae336dbe04296f463a001a4ae11869fe711d12d8b172381e97fb059eec31f417933258f05a44a03274ac2759a0ddcbeb116581ee71468f6f583748b9e6ceb1ab19755501896159bed4aedaaf0cfce01300ef3729630497f41e0c2da20bce9b600988a58ef9a3ea9b1de061e244dd46fb79f5b99b52a924108f5c0d91794d3222298fecf7ceacfdb0e15da9384438c27833b53d323b79cd02099c18380fcd2e9018c64bb3ae62c077459856270975172a6ccf0f212608d98b688b6ebfd76d3c88e5601fa056dfb0d991ad141caf674273335340340a5d77e587de3369b73fa40bd65388fbfb7d44c6d97f37113cac32b443bfaaf527bb6bd3dee28e3212ae3b83303bfef0fe74334ad4f8ba43887d04f91f97d6241eb07f2da2beed00cfdd81f14e088a3d3feec725412e381de7075e9d8301e6f751438f6ea232dc71a16ab4a35b759c6188e980a61b85e57b802e5b8af76b093149999e3c03124f2875a68090117d870ed8af978ee28a91", 0x1000}, {&(0x7f000000af40)="5179fcb7787b50ad201fb3297e5ccea85b8dffcb848909a6b3f8f60b769afd66513f9bc91d8b23c5aa83d803ace4423bc36abcc269a4fa053d", 0x39}, {&(0x7f000000afc0)="cab69de3ddda9deb6fb1c28c2166abf24c0eb1e2715616ff5c7a65aad4f86b0036b5776c3cdeece93a9f79294d12c0f7c83562f1a284d2b190cf9f8158e83887ecb018d27f77f50c636baf042ed6156e51a17279dbd2fe7c455de44b5485003751fab1fe12d6f2a1ef9de25172f9d9fd8210752e7cc9f3771eb7771509bd642a0e5bb9dfd93c1d5c3140dfa5f1ae2456398010ce2e89e7287ef5bb8ae4ab55a7d3bff1df95ccdb831f3a9a946cf381baf5d099150b303fc45d69ae116bb4f0caa7ec", 0xc2}, {&(0x7f000000b0c0)="32b2b2b8e1224fc35af3ebcda891fa5c6f82f2e3d964a66397a9a33ac7c464042c598c67ae38ad961a96ad5688ba120ab874d120de2777a2465070f83730ae", 0x3f}, {&(0x7f000000b140)="98ef60f81112b4ac296d914a27fe5a5eaa5ec4a30fbadb815f116acee538525b0a0fb8f290998e1330f65f0c6585ddf46424b39dd86581aef8c9fbf643c003748337009bbc70", 0x46}], 0x6, &(0x7f000000d3c0)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}], 0x20}}], 0x8, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r9, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, r10}) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r11, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @default}, 0x1c) 3.903062625s ago: executing program 1 (id=3916): r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1a, 0xc, &(0x7f0000000140)=ANY=[@ANYRES64=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1ad841, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) fstat(r2, &(0x7f0000003d40)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000003c0)={0x2b, 0x1, 0x0, "a6892d080000000e5dedae4d40137137c17a5ac1f393f65946a68dd1f8822c88", 0x34324142}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000010, &(0x7f0000001240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@directio}]}}) 3.888582296s ago: executing program 2 (id=3917): bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f00000000c0)={@any, 0x10}) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x7fffffffffffffff) io_setup(0x400, &(0x7f0000000100)=0x0) r2 = eventfd(0x8) r3 = eventfd2(0xfffffc00, 0x100801) r4 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0), 0x140, 0x0) io_submit(r1, 0x5, &(0x7f0000000600)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r0, &(0x7f0000000140)="a0a136618ed90d1d22191e25cc4696a8031c2ccb09e10462218f03fdd2450a2ec078c5fc4c57b1d3e70fdf972954446dc9fc625d8d28814803595f41163185ed8d", 0x41, 0x8, 0x0, 0x2, r2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x9, r0, &(0x7f0000000200)="ce6fc5faff6f1780a45a98ab509fe84a802ff671956901bc3b274ac4eb801f3e9774b20cd58d5b7ed012bf0ced785a3f4a1867fd125642dc15c932be26914191a36a81c6468a60921656f3db77ac0c45654f94a45c3d9d3e84cab6746db9b8279ccad4fb24c220cc2a4d0e08d062b601d785975a16d1202c0ff82a2ba3251ad59e4aed3d74b275b89893bdba05ea1b3d380be953d6e6ffe35354c6e92ee38a9f25fff2db37847feeac6e03a2a0da5469b9d55936af8f67c1937710", 0xbb, 0x9, 0x0, 0x3, r3}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x8, 0xffffffffffffffff, &(0x7f0000000300)="467c974f156ce507b2786244f48c0d73f42511b90f76f609a82043679d68afc6ca9ee0debf6b61f1df994cd22ac2609a3976503cd2f73dd398fd43a71fe05f743441a0a6f88ce18e5bbe28937fe59a5bda0cb3b372594ee334", 0x59, 0xffff, 0x0, 0x5}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x8, r0, &(0x7f00000003c0)="5ac2dfbbce402f8bc9274b2f4f9e1294438945782576d1284afea3b65bca6b88358bea52a60eee00b18d597f622211ddb7d51dcdb018ae7456de3e2f0fcdfe9208f6055e363140e55e415e00b0833e2299f940e3c68f27e64fd6cea01bf0d03551a59f97aea5f81093333072391f174bf2af3575c97373183d6bb6c255a9da247796b5e86011b978767a799a426cc2bd37285840dd73fb5defd9a7701c459ac9673fb3185178b11e8eadfa7e4dc69fa7f37bd9c5616a", 0xb6, 0x698aa6c5, 0x0, 0x2, r4}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x8, 0x27a8, r5, &(0x7f0000000500)="a8de9396b5e38aa28979110dd30c24485dc7fce42372d224340b03753391959f32b6f0802784fcf02d459604b6ca52259e67adf7acb77df41cf7d014435b57e8b96cf388f549dca843d9187cf814ce5aba3c07bb6cbdf7caeefaeb495d9b39bb6c92f880f823371b55111533616dc51be3ac6cd6258e431ca89bb16e87992b0f784dfb8216f70841846ec722ec4f2144e4467c82e23051621cb394d689c678d62caedff8d6c942f67c3b838bd86c7548b63b06dc5e55138ec7da2041", 0xbc, 0x8, 0x0, 0x2}]) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000640)=""/4096) getsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000001640), &(0x7f0000001680)=0x4) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000016c0)={{@any, 0xfffffffe}, @local, 0x2, 0x4, 0xbc89, 0x1, 0xe1, 0x7, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000001700)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r4, 0xc02864c3, &(0x7f0000001780)={&(0x7f0000001740)=[r6], 0x1, 0x1, 0x2}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000017c0)={0x0, 0x1000, "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"}, &(0x7f0000002800)=0x1008) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000002840)={r7, 0x4, 0x7, [0xa66f, 0x80, 0x1, 0xc8, 0x7f, 0xdc1, 0x9]}, 0x16) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000002880)={r7, @in6={{0xa, 0x4e22, 0x80000001, @private0, 0x8001}}, 0x4, 0xf956, 0x80000001, 0xe8000, 0x59, 0x6}, &(0x7f0000002940)=0x9c) r8 = fcntl$dupfd(r5, 0x0, r3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002980)={r4, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000002c00)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000002d00)={0x1a, 0x31, &(0x7f00000029c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x53e4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x4}, @generic={0x3, 0xb, 0x0, 0x6, 0x101}, @map_val={0x18, 0x1, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002b80)='syzkaller\x00', 0x148a, 0x3a, &(0x7f0000002bc0)=""/58, 0x40e00, 0x2, '\x00', r10, @fallback=0x7, r8, 0x8, &(0x7f0000002c40)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r8, 0x2, &(0x7f0000002c80)=[0xffffffffffffffff, r8, r3, r8, r4, r8, r4, r4, r4], &(0x7f0000002cc0)=[{0x0, 0x5, 0xb, 0x9}, {0x3, 0x5, 0xa, 0x3}], 0x10, 0x1}, 0x94) r11 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x5) r12 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000003040)={0x0, &(0x7f0000002dc0)=[@cpuid={0x14, 0x18, {0x1ff, 0x5}}, @uexit={0x0, 0x18, 0x2}, @wr_crn={0x46, 0x20, {0x2, 0x6}}, @rdmsr={0x32, 0x18, {0xa22}}, @cpuid={0x14, 0x18, {0x800, 0x5}}, @wr_crn={0x46, 0x20, {0x2, 0x2}}, @uexit={0x0, 0x18, 0x7}, @out_dx={0xaa, 0x28, {0x32a8, 0x4, 0xa}}, @code={0xa, 0x52, {"660f3adfa700000100003e4c0fc75c2c002e460f797a34360f01caddc4420f0966baa10066ed6564460f01f8b9340b0000b800800000ba000000000f3067450f07"}}, @uexit={0x0, 0x18, 0x8000000000000000}, @wrmsr={0x1e, 0x20, {0x377, 0x8000000000000000}}, @code={0xa, 0x6e, {"66430f51720066b821000f00d0b90f0800000f32c7442400887059ecc744240206000000c7442406000000000f011424b9800000c00f3235004000000f300f20d835200000000f22d8450fc7b41f01000000470fc71e0f0159cd0f01ee"}}, @code={0xa, 0x4e, {"0f0fe99e26450f0866ba4200b020ee65652e65263e0fc71dec97000066470f633cebf30fc775e626f242afc4810f10f42ef3406cc481e9f3b50e000000"}}, @wr_crn={0x46, 0x20, {0x1, 0xffff}}, @cpuid={0x14, 0x18, {0x20c, 0x4}}], 0x25e}) syz_kvm_setup_cpu$x86(r11, r12, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000003100)=[@text64={0x40, &(0x7f0000003080)="f466ba2000b806000000ef26f3400fc730b805000000b9040000000f01c1440f20c03503000000440f22c0f2f083ae9b685ed98d66baf80cb8389bc988ef66bafc0c66edc401fa5bf7c482fdb6a30070000065360f01cb", 0x57}], 0x1, 0xc, &(0x7f0000003140)=[@dstype3={0x7, 0xd}, @efer], 0x2) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000003180)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) getpeername$packet(r4, &(0x7f0000003300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003340)=0x14) r15 = openat$incfs(r4, &(0x7f0000003380)='.log\x00', 0x400, 0xa1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000003440)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000003540)={0xc, 0x13, &(0x7f00000031c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}]}, &(0x7f0000003280)='syzkaller\x00', 0x80000000, 0x0, &(0x7f00000032c0), 0x41100, 0x2, '\x00', r14, @fallback=0x2a, r15, 0x8, &(0x7f00000033c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000003400)={0x1, 0x2, 0x4, 0x8}, 0x10, r16, r8, 0x8, &(0x7f0000003480)=[r8, r9, r9], &(0x7f00000034c0)=[{0x3, 0x2, 0xc, 0xd}, {0x1, 0x5, 0xd, 0xa}, {0x3, 0x2, 0x4, 0x2}, {0x5, 0x5, 0xb, 0x5}, {0x0, 0x2, 0x0, 0xcdb5e7acb0b1d8a2}, {0x1, 0x3, 0xf, 0x8}, {0x0, 0x1, 0x8, 0x1}, {0x2, 0x3, 0x8, 0x9}], 0x10, 0x3}, 0x94) 3.276057246s ago: executing program 1 (id=3918): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000400), 0x0, 0x8000, 0x0, 0x0) write$binfmt_aout(r4, 0x0, 0xfdef) sendto$inet6(r4, 0x0, 0x0, 0x4845, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) lchown(&(0x7f00000001c0)='./file1\x00', 0x0, 0xee01) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x98, r8, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_FRAME={0x71, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xfffffffffffffffe, @default, 0x5100, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @val={0x6, 0x2, 0x1fc}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x7, 0x29}}, @val={0x76, 0x6, {0x2, 0x0, 0x2f, 0x6}}}}]}, 0x98}, 0x1, 0x0, 0x0, 0xc0}, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r5, 0xffffffff80000901, 0xee00, 0x0) 3.120360337s ago: executing program 4 (id=3919): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.081955439s ago: executing program 1 (id=3920): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r1, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f0000000140)='./file1\x00', r2, 0x0) 2.073300226s ago: executing program 4 (id=3921): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x480, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xccd4ddef28b9e90e}, 0x40094) r2 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000000)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x4c0b0) recvmmsg(r3, &(0x7f0000000700)=[{{0x0, 0x25, &(0x7f00000007c0), 0x3}, 0x7f}], 0x1, 0x40012140, &(0x7f0000000a00)={0x0, 0x989680}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) ioctl$sock_bt_hci(r7, 0x400448c9, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x41, 0x0, 0x7, 0x7ffc0001}]}) 1.946893691s ago: executing program 1 (id=3922): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa, 0x4, &(0x7f0000006680)) fchdir(0xffffffffffffffff) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000000)='erofs\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ptype\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004c00)=""/102359, 0x18fd7) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bd, 0x80, 0x1, 0x385, 0x0, r1}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x2007, @fd=r3, 0xc000000, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1e}) io_uring_enter(r4, 0x32dc, 0x0, 0xe, 0x0, 0x0) 1.6488274s ago: executing program 3 (id=3923): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[], 0x1c}], 0x1, 0x0, 0x0, 0x4004040}, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB=' '], 0x0) 661.88041ms ago: executing program 1 (id=3924): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0xb, 0xfffff038}, {0x20, 0x81, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000200)=[{0x0, 0x2, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x1, 0x0, @time={0xffffffff}, {0x4, 0x3}, {0x0, 0x4}, @time=@tick=0x5}], 0x38) read$char_usb(r6, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) dup(r1) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r7, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000102, 0x0, 0x8}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) setpriority(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) 618.535116ms ago: executing program 0 (id=3925): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x404, 0x9}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000003000000040000000108000001000000", @ANYRES32=r0], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) socket$kcm(0xa, 0x3, 0x87) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000006c0)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0) 583.010085ms ago: executing program 3 (id=3926): syz_io_uring_setup(0x18d6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rename(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d9740501000000000800024000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 524.488171ms ago: executing program 0 (id=3927): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r0}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESOCT], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = accept(r4, 0x0, &(0x7f00000004c0)) recvmmsg$unix(r6, &(0x7f0000004b80)=[{{&(0x7f0000000500), 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/122, 0x7a}, {&(0x7f0000000600)=""/173, 0xad}], 0x2}}, {{&(0x7f0000000700)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000780)=""/75, 0x4b}, {&(0x7f0000000800)=""/157, 0x9d}, {&(0x7f00000008c0)=""/112, 0x70}, {&(0x7f0000000940)=""/75, 0x4b}, {&(0x7f00000009c0)=""/65, 0x41}], 0x5, &(0x7f0000000ac0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000b00)=@abs, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1}}, {{&(0x7f0000001bc0), 0x6e, &(0x7f0000002c40)=[{&(0x7f0000001c40)=""/4096, 0x1000}], 0x1, &(0x7f0000002c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x70}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002d00)=""/38, 0x26}, {&(0x7f0000002d40)=""/167, 0xa7}, {&(0x7f0000002e00)=""/33, 0x21}, {&(0x7f0000002e40)=""/126, 0x7e}, {&(0x7f0000002ec0)=""/40, 0x28}], 0x5, &(0x7f0000002f80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f00000030c0)=@abs, 0x6e, &(0x7f0000004380)=[{&(0x7f0000003140)=""/221, 0xdd}, {&(0x7f0000003240)=""/32, 0x20}, {&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000004280)=""/235, 0xeb}], 0x4, &(0x7f00000043c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f00000044c0), 0x6e, &(0x7f0000004780)=[{&(0x7f0000004540)=""/131, 0x83}, {&(0x7f0000004600)=""/7, 0x7}, {&(0x7f0000004640)=""/196, 0xc4}, {&(0x7f0000004740)=""/59, 0x3b}], 0x4, &(0x7f00000047c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000004880), 0x6e, &(0x7f0000004a00)=[{&(0x7f0000004900)=""/72, 0x48}, {&(0x7f0000004980)=""/26, 0x1a}, {&(0x7f00000049c0)=""/12, 0xc}], 0x3, &(0x7f0000004a40)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000004a80)=@abs, 0x6e, &(0x7f0000004b00), 0x0, &(0x7f0000004b40)=[@cred={{0x1c}}], 0x20}}], 0x9, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) sched_setparam(r3, &(0x7f00000001c0)=0xd4e) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x404c000) 498.979227ms ago: executing program 2 (id=3928): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x2, &(0x7f0000000240)={0xe, 0x7}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="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"], 0x1508}, 0x1, 0x0, 0x0, 0x4}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0903faffffff000000001d000000"], 0x14}}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r7, &(0x7f0000000040)=[{&(0x7f0000000500)="0021472577c6623bf7efa26dd4a0b4dd7d259aaf1c589b3beaf3100b057dd0b88fecc00df0e9813325f2ad770914efbefa1fb7214f3627e2e16f1f98802dde882fb22ca09cc2549d5c849b00006a687cb5e87675eca938c46e2b8b3d0e54e288e7d4cbe3c9c85da33b01663366290c8b98260dbc7b27543090c51cd8519cbcc5c1da214a859332e32a10da54645d49bcc766409b9de4871332f0d74ca74b28e5375cf557052feba4c5f02f441391008ebc", 0xb1}], 0x1, 0x73a, 0x1) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) 0s ago: executing program 3 (id=3929): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b4050000000000000000950000000000000005eed401f9d3cef548128ed16572c16d76b50f7ef4e1f98a78f567076d67529b91c13af02344a05f253b1acc3bbf80270cf3dab0f21f8adce41fc90d55caf04c938633c06735e716bb9e8df309320ec698a443165f686064a7582f9cd7b150c35d29abe4ff41ed4983b9b9a9fb"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xf8, 0x48, 0xf3, 0x8, 0xc72, 0xc, 0xdf29, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4b, 0x0, 0x2, 0x67, 0x72, 0xe, 0x0, [], [{{0x9, 0x5, 0x1, 0x0, 0x40, 0x6, 0x3, 0x23}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x3, 0x7, 0x8a}}]}}]}}]}}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000) fsmount(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000080)={0x53, 0xfffffffffffffffe, 0x6, 0xf, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000400)="000039302ce8", 0xfffffffffffffffd, 0x12f67568, 0x16, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x18) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e21, 0x2, @mcast2, 0xc}], 0x1c) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000002740)={'pcl816\x00', [0x4f27, 0x6, 0x3, 0x5, 0x5, 0x1100cc5, 0xc, 0x8a, 0xb, 0xe8aa, 0x2, 0x1, 0xffffbffd, 0x80000001, 0x5, 0x4, 0xe, 0x1a448, 0x3ff, 0x40000003, 0x200099, 0xcaa7, 0x0, 0x20001e57, 0x7, 0xe6b, 0x3c, 0x80d0, 0x2, 0x8, 0xfce]}) kernel console output (not intermixed with test programs): text=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1064.764661][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.776664][ T5866] usb 5-1: config 0 descriptor?? [ 1064.820789][ T5866] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1065.911534][ T30] audit: type=1400 audit(2000000046.779:1839): avc: denied { write } for pid=18572 comm="syz.1.3462" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1065.944742][T18573] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18573 comm=syz.1.3462 [ 1065.957490][ T30] audit: type=1400 audit(2000000046.826:1840): avc: denied { audit_read } for pid=18572 comm="syz.1.3462" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1066.401778][T17549] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1066.503607][ T30] audit: type=1400 audit(2000000047.340:1841): avc: denied { ioctl } for pid=18580 comm="syz.3.3465" path="socket:[87363]" dev="sockfs" ino=87363 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1066.529047][ T30] audit: type=1400 audit(2000000047.340:1842): avc: denied { bind } for pid=18580 comm="syz.3.3465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1066.572858][T17549] usb 1-1: Using ep0 maxpacket: 32 [ 1066.582978][T17549] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1066.591699][T17549] usb 1-1: config 0 has no interface number 0 [ 1066.603421][T17549] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1066.612802][T17549] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.621223][T17549] usb 1-1: Product: syz [ 1066.625626][T17549] usb 1-1: Manufacturer: syz [ 1066.630812][T17549] usb 1-1: SerialNumber: syz [ 1066.639764][T17549] usb 1-1: config 0 descriptor?? [ 1066.653206][T17549] smsc95xx v2.0.0 [ 1066.869551][T17162] Bluetooth: hci1: unknown advertising packet type: 0x31 [ 1066.869647][T17162] Bluetooth: hci1: Dropping invalid advertising data [ 1066.886105][T17162] Bluetooth: hci1: Malformed LE Event: 0x02 [ 1066.892625][T17549] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1066.904445][T17549] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 1066.918610][T17549] usb 1-1: USB disconnect, device number 66 [ 1067.257102][ T5866] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1067.272039][T14481] usb 5-1: USB disconnect, device number 91 [ 1067.419404][ T5866] usb 2-1: Using ep0 maxpacket: 8 [ 1067.514966][ T5866] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1067.541354][ T5866] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 1067.581208][ T5866] usb 2-1: config 4 has no interface number 0 [ 1067.586941][T18591] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3468'. [ 1067.599286][ T5866] usb 2-1: config 4 interface 30 has no altsetting 0 [ 1067.623417][ T5866] usb 2-1: string descriptor 0 read error: -22 [ 1067.629821][ T5866] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 1067.646316][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.690135][ T5866] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 1067.703527][ T5866] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1067.716909][ T5866] dvb-usb: bulk message failed: -22 (2/0) [ 1067.735747][ T5866] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1067.768482][ T5866] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 1067.781868][ T5866] usb 2-1: media controller created [ 1067.794078][ T5866] dvb-usb: bulk message failed: -22 (6/0) [ 1067.804815][ T5866] dw2102: i2c transfer failed. [ 1067.809657][ T5866] dvb-usb: bulk message failed: -22 (6/0) [ 1067.815543][ T5866] dw2102: i2c transfer failed. [ 1067.820343][ T5866] dvb-usb: bulk message failed: -22 (6/0) [ 1067.941670][ T5866] dw2102: i2c transfer failed. [ 1067.948042][T18585] dvb-usb: bulk message failed: -22 (3/0) [ 1067.955699][T18585] dw2102: i2c transfer failed. [ 1067.964673][T18585] dvb-usb: bulk message failed: -22 (4/0) [ 1067.973335][T18302] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1067.983385][T18585] dw2102: i2c transfer failed. [ 1067.990389][ T5866] dvb-usb: bulk message failed: -22 (6/0) [ 1068.190369][T18302] usb 1-1: no configurations [ 1068.458773][ T5866] dw2102: i2c transfer failed. [ 1068.463647][ T5866] dvb-usb: bulk message failed: -22 (6/0) [ 1068.485497][T18302] usb 1-1: can't read configurations, error -22 [ 1068.577764][ T5866] dw2102: i2c transfer failed. [ 1068.597040][ T5866] dvb-usb: bulk message failed: -22 (6/0) [ 1068.636239][T18302] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1068.636674][ T5866] dw2102: i2c transfer failed. [ 1068.697162][ T5866] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1068.720371][ T5866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1068.826526][ T5866] dvb-usb: bulk message failed: -22 (3/0) [ 1068.846309][ T5866] dw2102: command 0x0e transfer failed. [ 1068.859473][ T5866] dvb-usb: bulk message failed: -22 (3/0) [ 1068.869231][ T5866] dw2102: command 0x0e transfer failed. [ 1068.890924][T18302] usb 1-1: no configurations [ 1068.939877][T18302] usb 1-1: can't read configurations, error -22 [ 1069.165701][T18302] usb usb1-port1: attempt power cycle [ 1069.513607][ T5866] dvb-usb: bulk message failed: -22 (3/0) [ 1069.520387][ T5866] dw2102: command 0x0e transfer failed. [ 1069.531818][ T5866] dvb-usb: bulk message failed: -22 (3/0) [ 1069.540840][ T5866] dw2102: command 0x0e transfer failed. [ 1069.549244][ T5866] dvb-usb: bulk message failed: -22 (1/0) [ 1069.555586][T18302] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1069.567204][ T5866] dw2102: command 0x51 transfer failed. [ 1069.576162][ T5866] dvb-usb: bulk message failed: -22 (5/0) [ 1069.585581][ T5866] dw2102: i2c probe for address 0x68 failed. [ 1069.592061][T18302] usb 1-1: no configurations [ 1069.597389][ T5866] dvb-usb: bulk message failed: -22 (5/0) [ 1069.597505][T18302] usb 1-1: can't read configurations, error -22 [ 1069.614686][ T5866] dw2102: i2c probe for address 0x69 failed. [ 1069.621351][ T5866] dvb-usb: bulk message failed: -22 (5/0) [ 1069.627349][ T5866] dw2102: i2c probe for address 0x6a failed. [ 1069.634527][ T5866] dw2102: probing for demodulator failed. Is the external power switched on? [ 1069.645041][ T5866] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 1069.769414][ T5866] rc_core: IR keymap rc-tt-1500 not found [ 1069.771436][T18302] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1069.784273][ T5866] Registered IR keymap rc-empty [ 1069.791441][ T5866] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1069.807880][T18302] usb 1-1: no configurations [ 1069.817838][T18302] usb 1-1: can't read configurations, error -22 [ 1069.840851][T18302] usb usb1-port1: unable to enumerate USB device [ 1069.841615][ T5866] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input64 [ 1069.965427][ T5866] dvb-usb: schedule remote query interval to 250 msecs. [ 1070.017481][ T5866] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1070.023735][ T30] audit: type=1400 audit(2000000050.633:1843): avc: denied { create } for pid=18621 comm="syz.4.3476" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1070.031744][ T5866] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 1070.138144][ T30] audit: type=1400 audit(2000000050.670:1844): avc: denied { mounton } for pid=18621 comm="syz.4.3476" path="/13/file0" dev="tmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1070.200075][ T5866] usb 2-1: USB disconnect, device number 73 [ 1070.286235][ T5866] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 1070.336369][T18623] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1070.708622][ T30] audit: type=1400 audit(2000000051.222:1845): avc: denied { setopt } for pid=18627 comm="syz.1.3478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1071.408355][ T30] audit: type=1400 audit(2000000051.933:1846): avc: denied { unlink } for pid=18106 comm="syz-executor" name="file0" dev="tmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1071.445791][T18640] binder: 18633:18640 ioctl c0306201 0 returned -14 [ 1071.695655][T18644] fuse: Unknown parameter '' [ 1071.728175][T18647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3484'. [ 1071.741091][T18647] netlink: 'syz.2.3484': attribute type 30 has an invalid length. [ 1071.749353][T18647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3484'. [ 1071.844320][T17549] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1072.025190][T18302] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1072.388549][T17162] Bluetooth: hci2: command tx timeout [ 1072.493411][T17549] usb 4-1: Using ep0 maxpacket: 32 [ 1072.505136][T17549] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.517386][T17549] usb 4-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1072.536582][T17549] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1072.543574][T17549] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1072.552727][T17549] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.567098][T17549] usb 4-1: config 0 descriptor?? [ 1072.578587][T17549] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1072.655811][T18302] usb 1-1: Using ep0 maxpacket: 8 [ 1072.664048][T18302] usb 1-1: config 0 has an invalid interface number: 75 but max is 0 [ 1072.673987][T18302] usb 1-1: config 0 has no interface number 0 [ 1072.680640][T18302] usb 1-1: config 0 interface 75 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1072.695516][T18302] usb 1-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=df.29 [ 1072.705272][T18302] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.713474][T18302] usb 1-1: Product: syz [ 1072.717790][T18302] usb 1-1: Manufacturer: syz [ 1072.722721][T18302] usb 1-1: SerialNumber: syz [ 1072.818881][T18302] usb 1-1: config 0 descriptor?? [ 1072.916927][T18662] comedi comedi4: bad chanlist[0]=0x0000096d chan=2413 range length=2 [ 1073.216287][T18668] comedi comedi3: pcl816: I/O port conflict (0x4f27,16) [ 1073.459491][T17549] usb 1-1: USB disconnect, device number 71 [ 1073.485092][ T30] audit: type=1400 audit(2000000053.869:1847): avc: denied { setopt } for pid=18669 comm="syz.2.3490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1073.504558][ C0] vkms_vblank_simulate: vblank timer overrun [ 1073.512914][ T30] audit: type=1400 audit(2000000053.869:1848): avc: denied { setattr } for pid=18669 comm="syz.2.3490" path="socket:[87542]" dev="sockfs" ino=87542 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1074.400742][T18680] netlink: 'syz.1.3493': attribute type 32 has an invalid length. [ 1074.456125][ T5890] usb 4-1: USB disconnect, device number 92 [ 1074.755547][T18686] hugetlbfs: Bad value 'V' for mount option 'nr_inodes' [ 1074.755547][T18686] [ 1074.837654][ T30] audit: type=1400 audit(2000000055.066:1849): avc: denied { mount } for pid=18685 comm="syz.4.3495" name="/" dev="hugetlbfs" ino=88300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1074.946791][T18691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3496'. [ 1075.009189][T18693] syzkaller1: entered promiscuous mode [ 1075.017698][ T30] audit: type=1400 audit(2000000055.066:1850): avc: denied { remount } for pid=18685 comm="syz.4.3495" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1075.044898][T18693] syzkaller1: entered allmulticast mode [ 1075.080400][ T30] audit: type=1400 audit(2000000055.132:1851): avc: denied { ioctl } for pid=18685 comm="syz.4.3495" path="socket:[87560]" dev="sockfs" ino=87560 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1075.108809][T18302] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1075.275017][T18302] usb 5-1: Using ep0 maxpacket: 32 [ 1075.282086][T18302] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1075.294963][T18302] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1075.308015][T18302] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1075.316453][T18302] usb 5-1: Product: syz [ 1075.327225][T18302] usb 5-1: Manufacturer: syz [ 1075.336282][T18302] usb 5-1: SerialNumber: syz [ 1075.362745][T18302] usb 5-1: config 0 descriptor?? [ 1075.373880][T18689] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1075.600719][T18302] usb 5-1: USB disconnect, device number 92 [ 1075.955165][ T30] audit: type=1400 audit(2000000056.180:1852): avc: denied { create } for pid=18703 comm="syz.1.3502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 1076.062870][T18716] binder: 18713:18716 ioctl c0306201 0 returned -14 [ 1076.130480][T18717] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3504'. [ 1076.340625][ T30] audit: type=1400 audit(2000000056.544:1853): avc: denied { unmount } for pid=18106 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1076.456133][T18719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3506'. [ 1076.614801][T17549] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1076.889392][T17549] usb 1-1: Using ep0 maxpacket: 32 [ 1076.913046][T17549] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.923262][T17549] usb 1-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1076.946299][T17549] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1076.974880][T17549] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1077.023957][T17549] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.039708][T17549] usb 1-1: config 0 descriptor?? [ 1077.051081][T17549] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1077.136069][ T30] audit: type=1400 audit(2000000057.283:1854): avc: denied { execute } for pid=18723 comm="syz.4.3507" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=88361 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1077.491949][T18731] netlink: 'syz.3.3509': attribute type 32 has an invalid length. [ 1078.971377][T18746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3513'. [ 1078.980304][T18746] netlink: 'syz.3.3513': attribute type 30 has an invalid length. [ 1078.988291][T18746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3513'. [ 1079.085770][T18747] openvswitch: netlink: Message has 383 unknown bytes. [ 1079.103983][T18747] FAULT_INJECTION: forcing a failure. [ 1079.103983][T18747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1079.117092][T18747] CPU: 0 UID: 0 PID: 18747 Comm: syz.4.3514 Not tainted syzkaller #0 PREEMPT(full) [ 1079.117116][T18747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1079.117128][T18747] Call Trace: [ 1079.117135][T18747] [ 1079.117143][T18747] dump_stack_lvl+0x16c/0x1f0 [ 1079.117175][T18747] should_fail_ex+0x512/0x640 [ 1079.117200][T18747] _copy_from_user+0x2e/0xd0 [ 1079.117229][T18747] copy_msghdr_from_user+0x98/0x160 [ 1079.117254][T18747] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1079.117293][T18747] ___sys_sendmsg+0xfe/0x1d0 [ 1079.117317][T18747] ? __pfx____sys_sendmsg+0x10/0x10 [ 1079.117337][T18747] ? __lock_acquire+0x622/0x1c90 [ 1079.117393][T18747] ? fget_raw+0x10/0x50 [ 1079.117420][T18747] __sys_sendmsg+0x16d/0x220 [ 1079.117444][T18747] ? __pfx___sys_sendmsg+0x10/0x10 [ 1079.117488][T18747] do_syscall_64+0xcd/0xfa0 [ 1079.117517][T18747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.117535][T18747] RIP: 0033:0x7f4ae598efc9 [ 1079.117550][T18747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1079.117567][T18747] RSP: 002b:00007f4ae3bd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1079.117584][T18747] RAX: ffffffffffffffda RBX: 00007f4ae5be6180 RCX: 00007f4ae598efc9 [ 1079.117596][T18747] RDX: 0000000000048002 RSI: 0000200000000080 RDI: 000000000000000e [ 1079.117606][T18747] RBP: 00007f4ae3bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1079.117616][T18747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1079.117627][T18747] R13: 00007f4ae5be6218 R14: 00007f4ae5be6180 R15: 00007ffc4cdd1798 [ 1079.117653][T18747] [ 1079.313828][ T1205] usb 1-1: USB disconnect, device number 72 [ 1079.432424][T18752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3516'. [ 1079.441662][T18752] netlink: 121 bytes leftover after parsing attributes in process `syz.2.3516'. [ 1080.065558][T18758] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1080.285828][T17162] Bluetooth: hci2: link tx timeout [ 1080.291740][T17162] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1080.302639][T17162] Bluetooth: hci2: link tx timeout [ 1080.307779][T17162] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1080.401646][ T30] audit: type=1400 audit(2000000060.333:1855): avc: denied { write } for pid=18751 comm="syz.0.3517" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1080.599066][ T30] audit: type=1400 audit(2000000060.333:1856): avc: denied { set_context_mgr } for pid=18751 comm="syz.0.3517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1081.077380][T18779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3521'. [ 1081.251250][T13198] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1081.422322][T13198] usb 5-1: Using ep0 maxpacket: 8 [ 1081.429317][T13198] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1081.439337][T13198] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 1081.539639][T13198] usb 5-1: config 4 has no interface number 0 [ 1081.555191][T13198] usb 5-1: config 4 interface 30 has no altsetting 0 [ 1081.629683][T13198] usb 5-1: string descriptor 0 read error: -22 [ 1081.636081][T13198] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 1081.659272][T13198] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.864460][T13198] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 1081.888132][T13198] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1081.909199][T13198] dvb-usb: bulk message failed: -22 (2/0) [ 1081.935441][T13198] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1081.969893][T13198] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 1082.081442][T13198] usb 5-1: media controller created [ 1082.094830][T13198] dvb-usb: bulk message failed: -22 (6/0) [ 1082.104632][T13198] dw2102: i2c transfer failed. [ 1082.114085][T13198] dvb-usb: bulk message failed: -22 (6/0) [ 1082.538045][T13198] dw2102: i2c transfer failed. [ 1082.555338][T16665] Bluetooth: hci2: command 0x0406 tx timeout [ 1082.640859][T13198] dvb-usb: bulk message failed: -22 (6/0) [ 1082.649600][T13198] dw2102: i2c transfer failed. [ 1082.654668][T13198] dvb-usb: bulk message failed: -22 (6/0) [ 1082.660722][T13198] dw2102: i2c transfer failed. [ 1082.665615][T13198] dvb-usb: bulk message failed: -22 (6/0) [ 1082.671338][T13198] dw2102: i2c transfer failed. [ 1082.676493][T13198] dvb-usb: bulk message failed: -22 (6/0) [ 1082.685246][T13198] dw2102: i2c transfer failed. [ 1082.696053][T13198] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1082.729819][T13198] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1082.731908][T18795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3527'. [ 1082.760248][T13198] dvb-usb: bulk message failed: -22 (3/0) [ 1082.766228][T13198] dw2102: command 0x0e transfer failed. [ 1082.772202][T13198] dvb-usb: bulk message failed: -22 (3/0) [ 1082.777931][T13198] dw2102: command 0x0e transfer failed. [ 1082.795773][T18795] netlink: 'syz.3.3527': attribute type 30 has an invalid length. [ 1082.817364][T18795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3527'. [ 1082.826375][ T1205] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1083.014974][ T1205] usb 1-1: Using ep0 maxpacket: 16 [ 1083.021583][ T1205] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.031845][ T1205] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1083.060420][ T1205] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1083.080375][ T30] audit: type=1400 audit(2000000062.840:1857): avc: denied { execute } for pid=18798 comm="syz.1.3529" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1083.111201][T13198] dvb-usb: bulk message failed: -22 (3/0) [ 1083.118913][ T1205] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.122317][T13198] dw2102: command 0x0e transfer failed. [ 1083.136091][T13198] dvb-usb: bulk message failed: -22 (3/0) [ 1083.148621][T13198] dw2102: command 0x0e transfer failed. [ 1083.156538][T13198] dvb-usb: bulk message failed: -22 (1/0) [ 1083.157127][ T1205] usb 1-1: config 0 descriptor?? [ 1083.167406][T13198] dw2102: command 0x51 transfer failed. [ 1083.172952][T13198] dvb-usb: bulk message failed: -22 (5/0) [ 1083.178742][T13198] dw2102: i2c probe for address 0x68 failed. [ 1083.193542][T13198] dvb-usb: bulk message failed: -22 (5/0) [ 1083.205386][T13198] dw2102: i2c probe for address 0x69 failed. [ 1083.211930][T13198] dvb-usb: bulk message failed: -22 (5/0) [ 1083.217681][T13198] dw2102: i2c probe for address 0x6a failed. [ 1083.222627][ T1205] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1083.231050][T13198] dw2102: probing for demodulator failed. Is the external power switched on? [ 1083.239886][T13198] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 1083.316052][T13198] rc_core: IR keymap rc-tt-1500 not found [ 1083.321887][T13198] Registered IR keymap rc-empty [ 1083.334729][T13198] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1083.355955][T13198] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input66 [ 1083.368207][T13198] dvb-usb: schedule remote query interval to 250 msecs. [ 1083.375245][T13198] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1083.382239][T13198] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 1083.645883][T13198] dvb-usb: bulk message failed: -22 (1/0) [ 1083.654928][T13198] dw2102: i2c transfer failed. [ 1083.955929][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 1083.976331][ T976] dw2102: i2c transfer failed. [ 1084.034583][ T976] usb 5-1: USB disconnect, device number 93 [ 1084.157739][T18815] netlink: 'syz.3.3532': attribute type 1 has an invalid length. [ 1084.182945][ T976] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 1084.204051][T18815] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1084.690158][T18824] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3534'. [ 1084.843351][T16665] Bluetooth: hci2: command 0x0406 tx timeout [ 1084.907361][ T1205] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 1084.971566][T18302] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1085.057427][ T1205] usb 4-1: device descriptor read/64, error -71 [ 1085.142619][T18302] usb 2-1: Using ep0 maxpacket: 8 [ 1085.151616][T18302] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.164137][T18302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1085.175950][T18302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1085.186043][T18302] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1085.195744][T18302] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1085.209065][T18302] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1085.218187][T18302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.228562][T18302] usb 2-1: config 0 descriptor?? [ 1085.313516][ T1205] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 1085.452317][T18302] usb 2-1: USB disconnect, device number 74 [ 1085.452687][ T1205] usb 4-1: device descriptor read/64, error -71 [ 1085.527552][ T5890] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1085.580978][ T1205] usb usb4-port1: attempt power cycle [ 1085.687671][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 1085.694203][ T5890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.705028][ T5890] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1085.715744][ T5890] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1085.725012][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.733098][ T5890] usb 5-1: Product: syz [ 1085.737270][ T5890] usb 5-1: Manufacturer: syz [ 1085.741923][ T5890] usb 5-1: SerialNumber: syz [ 1085.748400][ T5890] usb 5-1: config 0 descriptor?? [ 1085.822637][T18302] usb 1-1: USB disconnect, device number 73 [ 1085.841969][ T30] audit: type=1400 audit(2000000065.431:1858): avc: denied { read } for pid=18831 comm="syz.0.3538" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1085.866183][ T30] audit: type=1400 audit(2000000065.431:1859): avc: denied { open } for pid=18831 comm="syz.0.3538" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1085.955202][ T1205] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 1085.976695][ T1205] usb 4-1: device descriptor read/8, error -71 [ 1086.028007][ T30] audit: type=1400 audit(2000000065.599:1860): avc: denied { mount } for pid=18829 comm="syz.4.3537" name="/" dev="autofs" ino=87854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1086.052493][ T976] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1086.066619][ T976] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1086.123157][T17549] usb 5-1: USB disconnect, device number 94 [ 1086.233237][ T1205] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 1086.254456][T18302] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1086.318339][T18836] ucma_write: process 289 (syz.1.3539) changed security contexts after opening file descriptor, this is not allowed. [ 1086.349919][ T1205] usb 4-1: device descriptor read/8, error -71 [ 1086.436121][T18302] usb 1-1: Using ep0 maxpacket: 16 [ 1086.448529][T18302] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.459226][T18302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1086.476260][T18302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1086.486269][T18302] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1086.499978][T18302] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1086.500903][ T1205] usb usb4-port1: unable to enumerate USB device [ 1086.525282][T18302] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1086.535837][T18302] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1086.544250][T18302] usb 1-1: Manufacturer: syz [ 1086.568095][T18302] usb 1-1: config 0 descriptor?? [ 1086.766286][ T30] audit: type=1400 audit(2000000066.291:1861): avc: denied { unmount } for pid=18106 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1086.811438][T18832] veth0_to_bridge: entered promiscuous mode [ 1086.895991][T17162] Bluetooth: hci0: command 0x0406 tx timeout [ 1087.135433][T18302] rc_core: IR keymap rc-hauppauge not found [ 1087.142171][T18302] Registered IR keymap rc-empty [ 1087.147547][T18302] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1087.184394][T18302] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1087.206522][T18302] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1087.679506][T18302] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input67 [ 1087.700304][T18302] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1087.729656][T18302] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1087.781738][T18302] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1087.804524][T18302] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1087.825957][T18302] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1087.860850][T18302] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1087.940854][T18302] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1087.970706][T18302] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1088.011877][T18302] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1088.031740][T18831] veth0_to_bridge: left promiscuous mode [ 1088.043370][T18855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3545'. [ 1088.053756][T18302] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1088.084854][T18302] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1088.099541][T18302] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1088.114960][T18302] usb 1-1: USB disconnect, device number 74 [ 1088.146747][T18862] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3547'. [ 1088.177182][T18862] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3547'. [ 1089.600097][T18871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3548'. [ 1089.696604][ T1205] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1089.899721][ T1205] usb 2-1: Using ep0 maxpacket: 32 [ 1089.908215][ T1205] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1089.917333][ T1205] usb 2-1: config 0 has no interface number 0 [ 1089.976107][ T1205] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1090.247749][ T1205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.448837][ T1205] usb 2-1: Product: syz [ 1090.516226][ T1205] usb 2-1: Manufacturer: syz [ 1090.531241][ T1205] usb 2-1: SerialNumber: syz [ 1090.554115][ T1205] usb 2-1: config 0 descriptor?? [ 1090.571670][ T1205] smsc95xx v2.0.0 [ 1090.581156][ T1205] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1090.595258][T18881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3552'. [ 1090.602531][ T1205] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 1090.637028][T18881] netlink: 'syz.3.3552': attribute type 30 has an invalid length. [ 1090.661267][T18881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3552'. [ 1091.169414][ T52] Bluetooth: hci0: unknown advertising packet type: 0x31 [ 1091.169451][ T52] Bluetooth: hci0: Dropping invalid advertising data [ 1091.175963][ T1205] usb 2-1: USB disconnect, device number 75 [ 1091.178001][ T52] Bluetooth: hci0: Malformed LE Event: 0x02 [ 1091.589060][T13198] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1091.802048][T13198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1091.926190][ T976] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1091.985240][T13198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1092.016525][ T30] audit: type=1326 audit(2000000070.669:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18891 comm="syz.3.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6a18efc9 code=0x7ffc0000 [ 1092.040074][ C1] vkms_vblank_simulate: vblank timer overrun [ 1092.046296][T13198] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1092.061382][T13198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.079052][ T30] audit: type=1326 audit(2000000070.669:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18891 comm="syz.3.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f9e6a18efc9 code=0x7ffc0000 [ 1092.106974][T13198] usb 1-1: config 0 descriptor?? [ 1092.176920][ T976] usb 5-1: Using ep0 maxpacket: 16 [ 1092.185605][ T976] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1092.196231][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.217483][ T30] audit: type=1326 audit(2000000070.669:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18891 comm="syz.3.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6a18efc9 code=0x7ffc0000 [ 1092.219207][ T976] usb 5-1: Product: syz [ 1092.328736][T18890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.337540][T18890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.350621][ T976] usb 5-1: Manufacturer: syz [ 1092.355334][ T976] usb 5-1: SerialNumber: syz [ 1092.362030][ T30] audit: type=1326 audit(2000000070.669:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18891 comm="syz.3.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6a18efc9 code=0x7ffc0000 [ 1092.415145][ T976] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1092.428288][ T976] r8152-cfgselector 5-1: config 0 descriptor?? [ 1092.450812][ T30] audit: type=1326 audit(2000000070.669:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18891 comm="syz.3.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f9e6a18efc9 code=0x7ffc0000 [ 1092.569978][ T30] audit: type=1326 audit(2000000070.669:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18891 comm="syz.3.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6a18efc9 code=0x7ffc0000 [ 1092.593517][ C1] vkms_vblank_simulate: vblank timer overrun [ 1092.621308][ T30] audit: type=1326 audit(2000000070.678:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18891 comm="syz.3.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f9e6a18efc9 code=0x7ffc0000 [ 1092.644799][ C1] vkms_vblank_simulate: vblank timer overrun [ 1092.703368][ T976] r8152-cfgselector 5-1: Unknown version 0x0020 [ 1092.832968][T18302] IPVS: starting estimator thread 0... [ 1093.205358][ T30] audit: type=1326 audit(2000000070.678:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18891 comm="syz.3.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6a18efc9 code=0x7ffc0000 [ 1093.372344][ T976] r8152-cfgselector 5-1: bad CDC descriptors [ 1093.416428][ T30] audit: type=1326 audit(2000000070.678:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18891 comm="syz.3.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6a18efc9 code=0x7ffc0000 [ 1093.513337][T18914] IPVS: using max 47 ests per chain, 112800 per kthread [ 1093.531099][ T30] audit: type=1326 audit(2000000070.678:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18891 comm="syz.3.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f9e6a18efc9 code=0x7ffc0000 [ 1093.554618][ C1] vkms_vblank_simulate: vblank timer overrun [ 1093.723480][T18920] binder: 18918:18920 ioctl c0306201 0 returned -14 [ 1094.067951][T13198] usbhid 1-1:0.0: can't add hid device: -71 [ 1094.076674][T13198] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1094.098864][T13198] usb 1-1: USB disconnect, device number 75 [ 1094.730102][ T976] r8152-cfgselector 5-1: USB disconnect, device number 95 [ 1094.787829][T18935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3566'. [ 1094.799047][T18935] netlink: 'syz.0.3566': attribute type 30 has an invalid length. [ 1094.807727][T18935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3566'. [ 1095.307720][T18955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3571'. [ 1095.642990][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1097.443019][T18985] FAULT_INJECTION: forcing a failure. [ 1097.443019][T18985] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1097.456895][T18985] CPU: 1 UID: 0 PID: 18985 Comm: syz.1.3578 Not tainted syzkaller #0 PREEMPT(full) [ 1097.456922][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1097.456933][T18985] Call Trace: [ 1097.456941][T18985] [ 1097.456950][T18985] dump_stack_lvl+0x16c/0x1f0 [ 1097.456985][T18985] should_fail_ex+0x512/0x640 [ 1097.457013][T18985] should_fail_alloc_page+0xe7/0x130 [ 1097.457039][T18985] prepare_alloc_pages+0x3c2/0x610 [ 1097.457066][T18985] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1097.457100][T18985] ? rcu_is_watching+0x12/0xc0 [ 1097.457127][T18985] ? trace_mm_page_alloc+0x11f/0x1a0 [ 1097.457151][T18985] ? __alloc_frozen_pages_noprof+0x292/0x2470 [ 1097.457185][T18985] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1097.457221][T18985] ? is_bpf_text_address+0x8a/0x1a0 [ 1097.457245][T18985] ? bpf_ksym_find+0x127/0x1c0 [ 1097.457276][T18985] ? is_bpf_text_address+0x94/0x1a0 [ 1097.457300][T18985] ? kernel_text_address+0x8d/0x100 [ 1097.457323][T18985] ? __kernel_text_address+0xd/0x40 [ 1097.457344][T18985] ? unwind_get_return_address+0x59/0xa0 [ 1097.457378][T18985] alloc_pages_bulk_noprof+0x71c/0x1410 [ 1097.457406][T18985] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1097.457435][T18985] ? policy_nodemask+0xea/0x4e0 [ 1097.457462][T18985] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1097.457493][T18985] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1097.457531][T18985] kasan_populate_vmalloc+0x112/0x2d0 [ 1097.457561][T18985] ? alloc_vmap_area+0x8b5/0x29e0 [ 1097.457589][T18985] alloc_vmap_area+0x960/0x29e0 [ 1097.457624][T18985] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1097.457654][T18985] __get_vm_area_node+0x1ca/0x330 [ 1097.457683][T18985] __vmalloc_node_range_noprof+0x271/0x1480 [ 1097.457715][T18985] ? create_io_thread+0xbe/0x100 [ 1097.457748][T18985] ? find_held_lock+0x2b/0x80 [ 1097.457773][T18985] ? create_io_thread+0xbe/0x100 [ 1097.457806][T18985] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1097.457840][T18985] ? rcu_is_watching+0x12/0xc0 [ 1097.457866][T18985] ? create_io_thread+0xbe/0x100 [ 1097.457890][T18985] __vmalloc_node_noprof+0xad/0xf0 [ 1097.457912][T18985] ? create_io_thread+0xbe/0x100 [ 1097.457938][T18985] copy_process+0x2c77/0x76a0 [ 1097.457961][T18985] ? stack_depot_save_flags+0x29/0x9c0 [ 1097.457997][T18985] ? __pfx_copy_process+0x10/0x10 [ 1097.458020][T18985] ? do_syscall_64+0xcd/0xfa0 [ 1097.458061][T18985] ? __pfx_io_wq_worker+0x10/0x10 [ 1097.458089][T18985] create_io_thread+0xbe/0x100 [ 1097.458114][T18985] ? __pfx_create_io_thread+0x10/0x10 [ 1097.458149][T18985] ? __pfx_io_wq_worker+0x10/0x10 [ 1097.458176][T18985] ? lockdep_init_map_type+0x5c/0x280 [ 1097.458198][T18985] ? lockdep_init_map_type+0x5c/0x280 [ 1097.458217][T18985] ? __init_swait_queue_head+0xca/0x150 [ 1097.458241][T18985] ? create_io_worker+0x1f/0x5b0 [ 1097.458265][T18985] create_io_worker+0x1d0/0x5b0 [ 1097.458294][T18985] io_wq_enqueue+0x4cc/0x980 [ 1097.458322][T18985] ? __pfx_io_wq_enqueue+0x10/0x10 [ 1097.458347][T18985] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 1097.458372][T18985] ? io_prep_async_work+0x3c3/0x770 [ 1097.458403][T18985] io_queue_iowq+0x246/0x530 [ 1097.458426][T18985] ? io_req_sqe_copy+0xea/0x130 [ 1097.458455][T18985] io_queue_sqe_fallback+0xda/0x660 [ 1097.458480][T18985] ? io_req_sqe_copy+0xea/0x130 [ 1097.458509][T18985] io_submit_sqes+0x15b2/0x2710 [ 1097.458554][T18985] __do_sys_io_uring_enter+0xd69/0x1630 [ 1097.458588][T18985] ? __fget_files+0x20e/0x3c0 [ 1097.458609][T18985] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1097.458642][T18985] ? fput+0x9b/0xd0 [ 1097.458668][T18985] ? ksys_write+0x1ac/0x250 [ 1097.458697][T18985] ? __pfx_ksys_write+0x10/0x10 [ 1097.458726][T18985] do_syscall_64+0xcd/0xfa0 [ 1097.458758][T18985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.458779][T18985] RIP: 0033:0x7f3e9fd8efc9 [ 1097.458796][T18985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1097.458816][T18985] RSP: 002b:00007f3e9dfd5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1097.458837][T18985] RAX: ffffffffffffffda RBX: 00007f3e9ffe6090 RCX: 00007f3e9fd8efc9 [ 1097.458850][T18985] RDX: 0000000000000020 RSI: 00000000000022d0 RDI: 0000000000000005 [ 1097.458862][T18985] RBP: 00007f3e9dfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1097.458874][T18985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1097.458885][T18985] R13: 00007f3e9ffe6128 R14: 00007f3e9ffe6090 R15: 00007fff6082d2d8 [ 1097.458915][T18985] [ 1097.888903][ C1] vkms_vblank_simulate: vblank timer overrun [ 1097.901958][T18985] syz.1.3578: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1097.917570][T18985] CPU: 1 UID: 0 PID: 18985 Comm: syz.1.3578 Not tainted syzkaller #0 PREEMPT(full) [ 1097.917602][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1097.917615][T18985] Call Trace: [ 1097.917624][T18985] [ 1097.917633][T18985] dump_stack_lvl+0x16c/0x1f0 [ 1097.917667][T18985] warn_alloc+0x248/0x3a0 [ 1097.917701][T18985] ? __pfx_warn_alloc+0x10/0x10 [ 1097.917734][T18985] ? __get_vm_area_node+0x2cd/0x330 [ 1097.917767][T18985] ? __get_vm_area_node+0x2cd/0x330 [ 1097.917790][T18985] ? __get_vm_area_node+0x1dc/0x330 [ 1097.917814][T18985] ? __get_vm_area_node+0x208/0x330 [ 1097.917846][T18985] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 1097.917882][T18985] ? find_held_lock+0x2b/0x80 [ 1097.917910][T18985] ? create_io_thread+0xbe/0x100 [ 1097.917954][T18985] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1097.917989][T18985] ? rcu_is_watching+0x12/0xc0 [ 1097.918020][T18985] ? create_io_thread+0xbe/0x100 [ 1097.918047][T18985] __vmalloc_node_noprof+0xad/0xf0 [ 1097.918073][T18985] ? create_io_thread+0xbe/0x100 [ 1097.918104][T18985] copy_process+0x2c77/0x76a0 [ 1097.918130][T18985] ? stack_depot_save_flags+0x29/0x9c0 [ 1097.918171][T18985] ? __pfx_copy_process+0x10/0x10 [ 1097.918197][T18985] ? do_syscall_64+0xcd/0xfa0 [ 1097.918241][T18985] ? __pfx_io_wq_worker+0x10/0x10 [ 1097.918271][T18985] create_io_thread+0xbe/0x100 [ 1097.918299][T18985] ? __pfx_create_io_thread+0x10/0x10 [ 1097.918338][T18985] ? __pfx_io_wq_worker+0x10/0x10 [ 1097.918368][T18985] ? lockdep_init_map_type+0x5c/0x280 [ 1097.918391][T18985] ? lockdep_init_map_type+0x5c/0x280 [ 1097.918413][T18985] ? __init_swait_queue_head+0xca/0x150 [ 1097.918440][T18985] ? create_io_worker+0x1f/0x5b0 [ 1097.918466][T18985] create_io_worker+0x1d0/0x5b0 [ 1097.918497][T18985] io_wq_enqueue+0x4cc/0x980 [ 1097.918528][T18985] ? __pfx_io_wq_enqueue+0x10/0x10 [ 1097.918555][T18985] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 1097.918583][T18985] ? io_prep_async_work+0x3c3/0x770 [ 1097.918616][T18985] io_queue_iowq+0x246/0x530 [ 1097.918641][T18985] ? io_req_sqe_copy+0xea/0x130 [ 1097.918672][T18985] io_queue_sqe_fallback+0xda/0x660 [ 1097.918700][T18985] ? io_req_sqe_copy+0xea/0x130 [ 1097.918732][T18985] io_submit_sqes+0x15b2/0x2710 [ 1097.918784][T18985] __do_sys_io_uring_enter+0xd69/0x1630 [ 1097.918821][T18985] ? __fget_files+0x20e/0x3c0 [ 1097.918844][T18985] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1097.918880][T18985] ? fput+0x9b/0xd0 [ 1097.918906][T18985] ? ksys_write+0x1ac/0x250 [ 1097.918933][T18985] ? __pfx_ksys_write+0x10/0x10 [ 1097.918963][T18985] do_syscall_64+0xcd/0xfa0 [ 1097.918997][T18985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.919020][T18985] RIP: 0033:0x7f3e9fd8efc9 [ 1097.919038][T18985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1097.919058][T18985] RSP: 002b:00007f3e9dfd5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1097.919079][T18985] RAX: ffffffffffffffda RBX: 00007f3e9ffe6090 RCX: 00007f3e9fd8efc9 [ 1097.919093][T18985] RDX: 0000000000000020 RSI: 00000000000022d0 RDI: 0000000000000005 [ 1097.919106][T18985] RBP: 00007f3e9dfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1097.919118][T18985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1097.919130][T18985] R13: 00007f3e9ffe6128 R14: 00007f3e9ffe6090 R15: 00007fff6082d2d8 [ 1097.919168][T18985] [ 1098.246418][ C1] vkms_vblank_simulate: vblank timer overrun [ 1098.253703][T18985] Mem-Info: [ 1098.257614][T18985] active_anon:22265 inactive_anon:0 isolated_anon:0 [ 1098.257614][T18985] active_file:13650 inactive_file:51315 isolated_file:0 [ 1098.257614][T18985] unevictable:768 dirty:505 writeback:0 [ 1098.257614][T18985] slab_reclaimable:14033 slab_unreclaimable:118130 [ 1098.257614][T18985] mapped:36382 shmem:18201 pagetables:983 [ 1098.257614][T18985] sec_pagetables:0 bounce:0 [ 1098.257614][T18985] kernel_misc_reclaimable:0 [ 1098.257614][T18985] free:1256157 free_pcp:16202 free_cma:0 [ 1098.303147][ C1] vkms_vblank_simulate: vblank timer overrun [ 1098.357974][T18985] Node 0 active_anon:89016kB inactive_anon:0kB active_file:54600kB inactive_file:205008kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:145528kB dirty:2016kB writeback:0kB shmem:71268kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11320kB pagetables:3740kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1098.389924][ C1] vkms_vblank_simulate: vblank timer overrun [ 1098.400224][T18985] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:252kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1098.581308][T18985] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1098.611159][ C1] vkms_vblank_simulate: vblank timer overrun [ 1098.618882][T18985] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 1098.624714][T18985] Node 0 DMA32 free:1111760kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:87716kB inactive_anon:0kB active_file:54600kB inactive_file:205008kB unevictable:1536kB writepending:2016kB zspages:0kB present:3129332kB managed:2544884kB mlocked:0kB bounce:0kB free_pcp:55732kB local_pcp:28392kB free_cma:0kB [ 1098.658077][ C1] vkms_vblank_simulate: vblank timer overrun [ 1098.664877][T18985] lowmem_reserve[]: 0 0 1 1 1 [ 1098.669652][T18985] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1098.699408][T18985] lowmem_reserve[]: 0 0 0 0 0 [ 1098.719489][T18985] Node 1 Normal free:3904200kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:252kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4096kB local_pcp:4096kB free_cma:0kB [ 1098.719553][T13198] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1098.760493][T18985] lowmem_reserve[]: 0 0 0 0 0 [ 1098.777065][T18985] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1098.795296][T18988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3579'. [ 1098.804245][T18988] netlink: 'syz.2.3579': attribute type 30 has an invalid length. [ 1098.812268][T18988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3579'. [ 1098.839424][T18985] Node 0 DMA32: 808*4kB (UME) 1060*8kB (UME) 1484*16kB (UME) 1019*32kB (UME) 377*64kB (UME) 152*128kB (ME) 94*256kB (UME) 137*512kB (UME) 71*1024kB (UME) 23*2048kB (UM) 192*4096kB (UM) = 1112096kB [ 1098.904884][T18985] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1098.944037][T13198] usb 1-1: Using ep0 maxpacket: 8 [ 1098.950339][T18993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3581'. [ 1098.983853][T13198] usb 1-1: config 0 has an invalid interface number: 75 but max is 0 [ 1098.992193][T18985] Node 1 Normal: 200*4kB (UE) 39*8kB (UME) 47*16kB (UME) 232*32kB (UME) 100*64kB (UME) 31*128kB (UE) 14*256kB (UM) 4*512kB (UM) 2*1024kB (ME) 3*2048kB (UME) 945*4096kB (M) = 3904200kB [ 1099.011242][T18985] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1099.020010][T13198] usb 1-1: config 0 has no interface number 0 [ 1099.031729][T13198] usb 1-1: config 0 interface 75 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1099.104455][T18985] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1099.115144][T13198] usb 1-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=df.29 [ 1099.116556][T18995] comedi comedi4: bad chanlist[0]=0x0000096d chan=2413 range length=2 [ 1099.124219][T13198] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.124244][T13198] usb 1-1: Product: syz [ 1099.124261][T13198] usb 1-1: Manufacturer: syz [ 1099.124278][T13198] usb 1-1: SerialNumber: syz [ 1099.458126][T18985] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1099.478162][T18985] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1100.408688][T18985] 83165 total pagecache pages [ 1100.413457][T18985] 0 pages in swap cache [ 1100.424240][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1100.424249][T18985] Free swap = 124996kB [ 1100.429947][ T30] audit: type=1400 audit(2000000078.274:1882): avc: denied { override_creds } for pid=18999 comm="syz.2.3584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1100.430745][T18985] Total swap = 124996kB [ 1100.458651][T18985] 2097051 pages RAM [ 1100.466726][T18985] 0 pages HighMem/MovableOnly [ 1100.471471][T18985] 428740 pages reserved [ 1100.475715][T18985] 0 pages cma reserved [ 1100.541228][T13198] usb 1-1: config 0 descriptor?? [ 1100.582015][ T976] usb 1-1: USB disconnect, device number 76 [ 1102.449861][T19029] netlink: 'syz.1.3591': attribute type 32 has an invalid length. [ 1102.758695][T19040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3593'. [ 1103.406110][T19051] sctp: [Deprecated]: syz.3.3594 (pid 19051) Use of int in max_burst socket option. [ 1103.406110][T19051] Use struct sctp_assoc_value instead [ 1103.774940][ T30] audit: type=1400 audit(2000000082.202:1883): avc: denied { ioctl } for pid=19052 comm="syz.2.3595" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1105.412387][T19080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3601'. [ 1106.792271][T19087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3605'. [ 1106.982091][ T30] audit: type=1400 audit(2000000085.205:1884): avc: denied { listen } for pid=19097 comm="syz.1.3608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1107.058825][ T30] audit: type=1326 audit(2000000085.205:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19097 comm="syz.1.3608" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e9fd8efc9 code=0x0 [ 1107.164535][T19102] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=19102 comm=syz.3.3609 [ 1108.021668][ T30] audit: type=1400 audit(2000000086.178:1886): avc: denied { write } for pid=19119 comm="syz.0.3614" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1108.425677][T19132] netlink: 'syz.3.3616': attribute type 32 has an invalid length. [ 1109.929361][T19146] bridge_slave_0: left allmulticast mode [ 1109.950686][T19146] bridge_slave_0: left promiscuous mode [ 1109.985400][T19146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.063893][T19146] bridge_slave_1: left allmulticast mode [ 1110.069613][T19146] bridge_slave_1: left promiscuous mode [ 1110.078005][T19146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.105334][T19146] bond0: (slave bond_slave_0): Releasing backup interface [ 1110.163070][T19146] bond0: (slave bond_slave_1): Releasing backup interface [ 1110.181559][T19146] team0: Port device team_slave_0 removed [ 1110.196647][T19146] team0: Port device team_slave_1 removed [ 1110.209276][T19146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1110.262999][T19146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1110.277425][T19146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1110.285144][T19146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1110.305391][T19146] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1110.340147][T19154] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1110.367633][ T30] audit: type=1400 audit(2000000088.339:1887): avc: denied { write } for pid=19153 comm="syz.4.3621" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1110.835219][T19161] 9p: Unknown access argument clent: -22 [ 1111.017251][T19171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3629'. [ 1111.184821][ T976] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1111.270361][ T5866] usb 5-1: new low-speed USB device number 96 using dummy_hcd [ 1111.361246][ T976] usb 4-1: Using ep0 maxpacket: 32 [ 1111.430625][ T976] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1111.452396][ T976] usb 4-1: config 0 has no interface number 0 [ 1111.494155][ T976] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1111.503323][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.511379][ T976] usb 4-1: Product: syz [ 1111.515612][ T976] usb 4-1: Manufacturer: syz [ 1111.520243][ T976] usb 4-1: SerialNumber: syz [ 1111.544455][ T976] usb 4-1: config 0 descriptor?? [ 1111.560606][ T976] smsc95xx v2.0.0 [ 1111.564406][ T976] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1111.575341][ T976] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 1111.603386][ T5866] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1111.690706][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.714733][ T5866] usb 5-1: config 0 descriptor?? [ 1111.780428][ T976] usb 4-1: USB disconnect, device number 97 [ 1112.699638][T19187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3632'. [ 1113.327778][T19168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1113.367010][T19168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1113.521196][T19187] bond0 (unregistering): Released all slaves [ 1113.621368][ T30] audit: type=1400 audit(2000000091.416:1888): avc: denied { name_bind } for pid=19202 comm="syz.0.3637" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1113.658937][ T30] audit: type=1400 audit(2000000091.444:1889): avc: denied { bind } for pid=19202 comm="syz.0.3637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1113.865468][ T976] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1113.879994][ T30] audit: type=1400 audit(2000000091.528:1890): avc: denied { read } for pid=19210 comm="syz.1.3639" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1113.910541][ T30] audit: type=1400 audit(2000000091.528:1891): avc: denied { open } for pid=19210 comm="syz.1.3639" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1113.941502][ T5866] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1113.953485][ T5866] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 1114.140324][T19213] bridge0: entered promiscuous mode [ 1114.146276][T19213] macvlan2: entered promiscuous mode [ 1114.421887][ T5866] asix 5-1:0.0: probe with driver asix failed with error -71 [ 1114.580465][ T5866] usb 5-1: USB disconnect, device number 96 [ 1114.584358][ T976] usb 4-1: Using ep0 maxpacket: 8 [ 1115.094778][ T976] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 1115.548622][ T976] usb 4-1: config 0 has no interface number 0 [ 1115.554752][ T976] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1115.564048][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.643763][ T976] usb 4-1: config 0 descriptor?? [ 1115.689148][T19220] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3641'. [ 1115.789066][ T976] viperboard 4-1:0.143: version 0.00 found at bus 004 address 098 [ 1116.160629][T19226] comedi comedi3: pcl816: I/O port conflict (0x4f27,16) [ 1116.799057][ T976] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1116.914563][ T976] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1118.281005][ T5819] usb 4-1: USB disconnect, device number 98 [ 1118.447902][T19239] comedi comedi3: pcl816: I/O port conflict (0x4f27,16) [ 1118.742996][T17549] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1118.903355][T17549] usb 2-1: Using ep0 maxpacket: 8 [ 1118.913785][T17549] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1118.923752][T17549] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1118.934119][T17549] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1118.944693][T17549] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1118.959101][T17549] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1118.968723][T17549] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.201817][T19243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1119.210417][T19243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1119.231490][ T30] audit: type=1400 audit(2000000096.664:1892): avc: denied { create } for pid=19240 comm="syz.1.3649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 1119.589936][ T30] audit: type=1400 audit(2000000096.982:1893): avc: denied { read append } for pid=19259 comm="syz.3.3652" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1119.631626][ T30] audit: type=1400 audit(2000000096.982:1894): avc: denied { open } for pid=19259 comm="syz.3.3652" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1119.945957][ T30] audit: type=1400 audit(2000000097.328:1895): avc: denied { append } for pid=19265 comm="syz.0.3653" name="sg0" dev="devtmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1119.987869][T19266] pim6reg: entered allmulticast mode [ 1120.055241][ T30] audit: type=1400 audit(2000000097.431:1896): avc: denied { getopt } for pid=19267 comm="syz.4.3654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1120.486667][T19260] orangefs_mount: mount request failed with -4 [ 1120.743282][T19262] comedi comedi0: reset error (fatal) [ 1120.750572][T19272] comedi comedi3: pcl816: I/O port conflict (0x4f27,16) [ 1120.776618][T19279] netlink: 'syz.2.3657': attribute type 21 has an invalid length. [ 1120.855904][T19279] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3657'. [ 1121.331872][ T976] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1121.351574][T13198] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1121.523209][T13198] usb 5-1: Using ep0 maxpacket: 32 [ 1121.537343][T13198] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1121.546681][T13198] usb 5-1: config 0 has no interface number 0 [ 1121.598260][T13198] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1121.608280][T13198] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.619844][T13198] usb 5-1: Product: syz [ 1121.624062][T13198] usb 5-1: Manufacturer: syz [ 1121.628723][T13198] usb 5-1: SerialNumber: syz [ 1121.638707][T13198] usb 5-1: config 0 descriptor?? [ 1121.648391][T13198] smsc95xx v2.0.0 [ 1121.734591][ T976] usb 4-1: Using ep0 maxpacket: 8 [ 1121.740397][T13198] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1121.753138][ T976] usb 4-1: config 0 has an invalid interface number: 75 but max is 0 [ 1121.761329][ T976] usb 4-1: config 0 has no interface number 0 [ 1121.767608][ T976] usb 4-1: config 0 interface 75 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1121.782234][T13198] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 1121.807788][ T976] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=df.29 [ 1121.827058][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.840158][ T976] usb 4-1: Product: syz [ 1121.846907][ T976] usb 4-1: Manufacturer: syz [ 1121.861791][ T976] usb 4-1: SerialNumber: syz [ 1121.875046][T13198] usb 5-1: USB disconnect, device number 97 [ 1121.901865][T17549] usb 2-1: usb_control_msg returned -71 [ 1121.909470][ T976] usb 4-1: config 0 descriptor?? [ 1121.933821][T17549] usbtmc 2-1:16.0: can't read capabilities [ 1121.959703][T17549] usb 2-1: USB disconnect, device number 76 [ 1121.984182][T19299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1121.992646][T19299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1122.244583][T19305] comedi comedi3: pcl816: I/O port conflict (0x4f27,16) [ 1122.582460][T19311] netlink: 'syz.4.3667': attribute type 32 has an invalid length. [ 1122.603200][ T976] usb 4-1: USB disconnect, device number 99 [ 1122.883164][T19317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3666'. [ 1124.670396][T19330] comedi comedi4: bad chanlist[0]=0x0000096d chan=2413 range length=2 [ 1124.737451][ T30] audit: type=1400 audit(2000000101.771:1897): avc: denied { write } for pid=19331 comm="syz.1.3671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1124.757296][ T30] audit: type=1400 audit(2000000101.780:1898): avc: denied { read } for pid=19331 comm="syz.1.3671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1124.776930][ T30] audit: type=1400 audit(2000000101.808:1899): avc: denied { map } for pid=19331 comm="syz.1.3671" path="socket:[90903]" dev="sockfs" ino=90903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1124.801089][ T30] audit: type=1400 audit(2000000101.808:1900): avc: denied { read accept } for pid=19331 comm="syz.1.3671" path="socket:[90903]" dev="sockfs" ino=90903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1124.986005][T19340] kvm: pic: non byte write [ 1125.629455][T19352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3674'. [ 1125.645906][T19352] netlink: 'syz.0.3674': attribute type 30 has an invalid length. [ 1125.674421][T17128] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1125.683430][T17128] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1125.692244][T17128] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1125.702031][T17128] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1125.866890][T19357] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3677'. [ 1125.881049][T19357] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3677'. [ 1125.907196][T19357] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3677'. [ 1126.044768][T19357] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3677'. [ 1126.532229][T19363] block nbd3: NBD_DISCONNECT [ 1126.546934][T19363] block nbd3: Disconnected due to user request. [ 1126.553422][T19363] block nbd3: shutting down sockets [ 1126.821266][ T30] audit: type=1400 audit(2000000103.763:1901): avc: denied { create } for pid=19365 comm="syz.4.3679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1127.110106][T19371] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3679'. [ 1127.516632][T19370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3680'. [ 1127.771545][T19379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3681'. [ 1129.253907][T13198] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1129.269337][T19398] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1129.277512][T19398] cramfs: wrong magic [ 1129.531952][T13198] usb 1-1: device descriptor read/64, error -71 [ 1129.837582][ T30] audit: type=1400 audit(2000000106.579:1902): avc: denied { append } for pid=19404 comm="syz.3.3689" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1130.011204][T13198] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1130.089816][T19414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3691'. [ 1130.556113][ T976] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1130.641702][T13198] usb 1-1: device descriptor read/64, error -71 [ 1130.716474][ T976] usb 2-1: Using ep0 maxpacket: 8 [ 1130.789215][T13198] usb usb1-port1: attempt power cycle [ 1130.796892][ T976] usb 2-1: config 0 has an invalid interface number: 75 but max is 0 [ 1130.817567][ T976] usb 2-1: config 0 has no interface number 0 [ 1130.834066][ T976] usb 2-1: config 0 interface 75 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1130.858909][ T976] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=df.29 [ 1130.868010][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.875970][ T976] usb 2-1: Product: syz [ 1130.883593][ T976] usb 2-1: Manufacturer: syz [ 1130.934783][ T976] usb 2-1: SerialNumber: syz [ 1130.961793][ T976] usb 2-1: config 0 descriptor?? [ 1131.208374][T13198] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1131.296078][T13198] usb 1-1: device descriptor read/8, error -71 [ 1131.298531][T19429] comedi comedi3: pcl816: I/O port conflict (0x4f27,16) [ 1131.836004][ T976] usb 2-1: USB disconnect, device number 77 [ 1131.844354][T13198] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1131.862313][T19427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3695'. [ 1131.874147][T19428] 9pnet: Found fid 0 not clunked [ 1132.076829][T13198] usb 1-1: device not accepting address 80, error -71 [ 1132.095944][T13198] usb usb1-port1: unable to enumerate USB device [ 1132.960027][T19451] snd_dummy snd_dummy.0: control 0:0:128:syz0:0 is already present [ 1133.164646][ T5890] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1133.266421][T19464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3706'. [ 1133.752746][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 1133.783287][ T5890] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1133.912563][ T5890] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1134.014652][ T5890] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1134.124583][ T5890] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1135.075392][ T5890] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1135.084507][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.375355][ T5890] usb 5-1: usb_control_msg returned -32 [ 1135.399218][ T5890] usbtmc 5-1:16.0: can't read capabilities [ 1135.628553][ T30] audit: type=1400 audit(2000000111.995:1903): avc: denied { execute_no_trans } for pid=19487 comm="syz.1.3715" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=493 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1136.157993][T17162] Bluetooth: hci1: command 0x0406 tx timeout [ 1136.279652][T19495] FAULT_INJECTION: forcing a failure. [ 1136.279652][T19495] name failslab, interval 1, probability 0, space 0, times 0 [ 1136.311042][T19495] CPU: 1 UID: 0 PID: 19495 Comm: syz.3.3717 Not tainted syzkaller #0 PREEMPT(full) [ 1136.311065][T19495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1136.311074][T19495] Call Trace: [ 1136.311081][T19495] [ 1136.311088][T19495] dump_stack_lvl+0x16c/0x1f0 [ 1136.311116][T19495] should_fail_ex+0x512/0x640 [ 1136.311135][T19495] ? __kmalloc_noprof+0xca/0x880 [ 1136.311161][T19495] should_failslab+0xc2/0x120 [ 1136.311179][T19495] __kmalloc_noprof+0xdd/0x880 [ 1136.311199][T19495] ? __might_fault+0xe3/0x190 [ 1136.311221][T19495] ? __might_fault+0x13b/0x190 [ 1136.311244][T19495] ? ip_options_get+0xad/0x4d0 [ 1136.311272][T19495] ? ip_options_get+0xad/0x4d0 [ 1136.311293][T19495] ip_options_get+0xad/0x4d0 [ 1136.311315][T19495] ? _copy_from_iter+0x15d/0x1720 [ 1136.311338][T19495] ? __pfx_ip_options_get+0x10/0x10 [ 1136.311364][T19495] ? __pfx__copy_from_iter+0x10/0x10 [ 1136.311382][T19495] ? __lock_acquire+0x622/0x1c90 [ 1136.311413][T19495] ip_cmsg_send+0x94c/0xb90 [ 1136.311445][T19495] ping_v4_sendmsg+0x65a/0x1a40 [ 1136.311470][T19495] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 1136.311491][T19495] ? __lock_acquire+0xb8a/0x1c90 [ 1136.311527][T19495] ? reacquire_held_locks+0xcd/0x1f0 [ 1136.311542][T19495] ? release_sock+0x21/0x220 [ 1136.311566][T19495] ? find_held_lock+0x2b/0x80 [ 1136.311593][T19495] ? inet_autobind+0x145/0x1a0 [ 1136.311609][T19495] ? __local_bh_enable_ip+0xa4/0x120 [ 1136.311632][T19495] ? inet_autobind+0x14a/0x1a0 [ 1136.311648][T19495] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 1136.311668][T19495] inet_sendmsg+0x11c/0x140 [ 1136.311688][T19495] ____sys_sendmsg+0x973/0xc70 [ 1136.311717][T19495] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1136.311754][T19495] ___sys_sendmsg+0x134/0x1d0 [ 1136.311779][T19495] ? __pfx____sys_sendmsg+0x10/0x10 [ 1136.311799][T19495] ? __lock_acquire+0x622/0x1c90 [ 1136.311856][T19495] __sys_sendmsg+0x16d/0x220 [ 1136.311880][T19495] ? __pfx___sys_sendmsg+0x10/0x10 [ 1136.311912][T19495] ? __secure_computing+0x28e/0x3b0 [ 1136.311935][T19495] do_syscall_64+0xcd/0xfa0 [ 1136.311962][T19495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.311980][T19495] RIP: 0033:0x7f9e6a18efc9 [ 1136.311994][T19495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1136.312011][T19495] RSP: 002b:00007f9e683ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1136.312027][T19495] RAX: ffffffffffffffda RBX: 00007f9e6a3e5fa0 RCX: 00007f9e6a18efc9 [ 1136.312039][T19495] RDX: 0000000000008854 RSI: 0000200000000600 RDI: 0000000000000000 [ 1136.312049][T19495] RBP: 00007f9e683ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1136.312059][T19495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1136.312073][T19495] R13: 00007f9e6a3e6038 R14: 00007f9e6a3e5fa0 R15: 00007fff0fa7ec08 [ 1136.312099][T19495] [ 1136.639190][ T30] audit: type=1400 audit(2000000112.921:1904): avc: denied { getopt } for pid=19497 comm="syz.0.3719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1136.658749][ T30] audit: type=1400 audit(2000000112.921:1905): avc: denied { listen } for pid=19497 comm="syz.0.3719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1136.692673][ T30] audit: type=1400 audit(2000000112.921:1906): avc: denied { write } for pid=19497 comm="syz.0.3719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1136.941452][T19510] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3722'. [ 1137.131255][T19511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3721'. [ 1138.301853][ T976] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1138.396492][ T5890] usb 5-1: USB disconnect, device number 98 [ 1138.552743][ T976] usb 1-1: Using ep0 maxpacket: 16 [ 1138.571226][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1138.583723][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1138.594001][ T976] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1138.608133][ T976] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1138.617572][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.626755][ T976] usb 1-1: config 0 descriptor?? [ 1138.651488][T13198] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1138.830774][T13198] usb 4-1: Using ep0 maxpacket: 8 [ 1139.067693][T13198] usb 4-1: config 0 has an invalid interface number: 75 but max is 0 [ 1139.078406][T13198] usb 4-1: config 0 has no interface number 0 [ 1139.084698][T13198] usb 4-1: config 0 interface 75 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1139.098697][T13198] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=df.29 [ 1139.107834][T13198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.116015][T13198] usb 4-1: Product: syz [ 1139.120487][T13198] usb 4-1: Manufacturer: syz [ 1139.126344][T13198] usb 4-1: SerialNumber: syz [ 1139.144692][T13198] usb 4-1: config 0 descriptor?? [ 1139.313620][ T976] shield 0003:0955:7214.0027: unknown main item tag 0x0 [ 1139.320698][ T976] shield 0003:0955:7214.0027: unknown main item tag 0x0 [ 1139.361687][ T976] shield 0003:0955:7214.0027: unknown main item tag 0x0 [ 1139.406214][ T976] shield 0003:0955:7214.0027: reserved main item tag 0xd [ 1139.711119][ T976] shield 0003:0955:7214.0027: unknown main item tag 0x0 [ 1139.740100][ T976] input: HID 0955:7214 Haptics as /devices/virtual/input/input70 [ 1139.857827][ T976] shield 0003:0955:7214.0027: Registered Thunderstrike controller [ 1139.861494][T19541] comedi comedi3: pcl816: I/O port conflict (0x4f27,16) [ 1139.901691][ T976] shield 0003:0955:7214.0027: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 1140.256438][ T976] usb 1-1: USB disconnect, device number 81 [ 1140.262450][T13198] shield 0003:0955:7214.0027: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1140.275080][T13198] shield 0003:0955:7214.0027: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1140.291349][T13198] shield 0003:0955:7214.0027: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1140.302700][T13198] shield 0003:0955:7214.0027: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1140.375514][T19550] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3734'. [ 1140.751379][T13198] usb 4-1: USB disconnect, device number 100 [ 1140.843846][T19552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3735'. [ 1141.120820][ T30] audit: type=1400 audit(2000000117.140:1907): avc: denied { accept } for pid=19557 comm="syz.0.3736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1141.254204][ T30] audit: type=1400 audit(2000000117.252:1908): avc: denied { getopt } for pid=19563 comm="syz.1.3737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1141.383142][T19567] netlink: 'syz.3.3739': attribute type 32 has an invalid length. [ 1142.155324][ T9] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 1142.455361][ T9] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1142.466441][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.502696][ T9] usb 2-1: config 0 descriptor?? [ 1142.519648][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1142.738869][ T30] audit: type=1400 audit(2000000118.655:1909): avc: denied { watch } for pid=19563 comm="syz.1.3737" path="/127/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1142.749206][ T9] gp8psk: usb in 128 operation failed. [ 1142.784306][ T30] audit: type=1400 audit(2000000118.655:1910): avc: denied { watch_sb watch_reads } for pid=19563 comm="syz.1.3737" path="/127/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1142.893064][T18302] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1142.967941][T13198] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1143.051281][ T9] gp8psk: FW Version = 159.119.170 (0x9f77aa) Build 2207/68/144 [ 1143.053411][T18302] usb 5-1: Using ep0 maxpacket: 8 [ 1143.067142][T18302] usb 5-1: config 0 has an invalid interface number: 75 but max is 0 [ 1143.075244][T18302] usb 5-1: config 0 has no interface number 0 [ 1143.081439][T18302] usb 5-1: config 0 interface 75 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1143.094862][T18302] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=df.29 [ 1143.103936][T18302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.112047][T18302] usb 5-1: Product: syz [ 1143.116303][T18302] usb 5-1: Manufacturer: syz [ 1143.120912][T18302] usb 5-1: SerialNumber: syz [ 1143.127141][T18302] usb 5-1: config 0 descriptor?? [ 1143.132145][T13198] usb 4-1: Using ep0 maxpacket: 8 [ 1143.141425][T13198] usb 4-1: config 0 has an invalid interface number: 75 but max is 0 [ 1143.150575][T13198] usb 4-1: config 0 has no interface number 0 [ 1143.156671][T13198] usb 4-1: config 0 interface 75 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1143.169667][T13198] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=df.29 [ 1143.179737][T13198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.187923][T13198] usb 4-1: Product: syz [ 1143.192830][T13198] usb 4-1: Manufacturer: syz [ 1143.197580][T13198] usb 4-1: SerialNumber: syz [ 1143.204496][T13198] usb 4-1: config 0 descriptor?? [ 1143.267380][ T9] gp8psk: usb in 149 operation failed. [ 1143.272876][ T9] gp8psk: failed to get FPGA version [ 1143.273167][ T9] gp8psk: usb in 138 operation failed. [ 1143.285553][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1143.296442][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1143.308557][ T9] usb 2-1: USB disconnect, device number 78 [ 1143.942051][ T9] usb 5-1: USB disconnect, device number 99 [ 1143.960655][T13198] usb 4-1: USB disconnect, device number 101 [ 1144.317246][T19591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3746'. [ 1144.610685][T19600] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3747'. [ 1145.010190][T19602] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3751'. [ 1145.887413][ T5890] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 1145.911947][ T30] audit: type=1326 audit(2000000121.620:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19610 comm="syz.0.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa977d8efc9 code=0x7ffc0000 [ 1146.047572][ T30] audit: type=1326 audit(2000000121.620:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19610 comm="syz.0.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa977d8efc9 code=0x7ffc0000 [ 1146.071239][ T30] audit: type=1326 audit(2000000121.648:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19610 comm="syz.0.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa977d8efc9 code=0x7ffc0000 [ 1146.314108][ T30] audit: type=1326 audit(2000000121.648:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19610 comm="syz.0.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa977d8efc9 code=0x7ffc0000 [ 1146.314128][ T5890] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.379044][ T5890] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1146.388286][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.396324][ T5890] usb 4-1: Product: syz [ 1146.400773][ T5890] usb 4-1: Manufacturer: syz [ 1146.405358][ T5890] usb 4-1: SerialNumber: syz [ 1146.469142][ T30] audit: type=1326 audit(2000000121.648:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19610 comm="syz.0.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa977d8efc9 code=0x7ffc0000 [ 1146.497832][ T30] audit: type=1326 audit(2000000121.648:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19610 comm="syz.0.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fa977d8efc9 code=0x7ffc0000 [ 1146.611069][ T5890] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1146.941490][ T30] audit: type=1326 audit(2000000121.648:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19610 comm="syz.0.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa977d8efc9 code=0x7ffc0000 [ 1146.966928][ T30] audit: type=1326 audit(2000000121.648:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19610 comm="syz.0.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa977d8efc9 code=0x7ffc0000 [ 1146.990667][ T30] audit: type=1326 audit(2000000121.648:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19610 comm="syz.0.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fa977d8efc9 code=0x7ffc0000 [ 1147.001754][T19629] C: renamed from team_slave_0 [ 1147.078035][ T30] audit: type=1326 audit(2000000121.648:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19610 comm="syz.0.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa977d8efc9 code=0x7ffc0000 [ 1147.290243][ T30] audit: type=1326 audit(2000000121.648:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19610 comm="syz.0.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa977d8d810 code=0x7ffc0000 [ 1147.313829][ T30] audit: type=1326 audit(2000000121.648:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19610 comm="syz.0.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa977d8efc9 code=0x7ffc0000 [ 1147.330322][ T5890] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1147.337273][ C1] vkms_vblank_simulate: vblank timer overrun [ 1147.338688][ T30] audit: type=1326 audit(2000000121.648:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19610 comm="syz.0.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa977d8efc9 code=0x7ffc0000 [ 1147.379142][ T30] audit: type=1326 audit(2000000121.648:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19610 comm="syz.0.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa977d8efc9 code=0x7ffc0000 [ 1147.408780][ T30] audit: type=1326 audit(2000000121.648:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19610 comm="syz.0.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa977d8d810 code=0x7ffc0000 [ 1147.413969][T19629] netlink: 'syz.1.3758': attribute type 3 has an invalid length. [ 1147.445976][T19629] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3758'. [ 1147.455318][T19629] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1147.600992][ T5890] usb 4-1: USB disconnect, device number 102 [ 1148.973831][T19656] overlayfs: failed to resolve './file2': -2 [ 1149.514224][T19668] dvmrp1: entered allmulticast mode [ 1149.543032][T19662] geneve2: entered allmulticast mode [ 1149.693269][ T5890] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1149.953191][T19681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3773'. [ 1150.529212][T19683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3774'. [ 1151.007321][ T5890] usb 1-1: Using ep0 maxpacket: 32 [ 1151.021713][ T5890] usb 1-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 1151.046646][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.145269][ T5890] usb 1-1: config 0 descriptor?? [ 1151.404068][T19693] Invalid source name [ 1151.408343][T19693] UBIFS error (pid: 19693): cannot open "./file0", error -22 [ 1151.517273][T19665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1151.566050][T19665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1151.644384][ T5890] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 1151.685901][ T5890] usb 1-1: USB disconnect, device number 82 [ 1152.055066][ T976] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1152.226041][ T976] usb 5-1: Using ep0 maxpacket: 16 [ 1152.239109][ T976] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1152.247626][ T976] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.257701][ T976] usb 5-1: config 0 has no interface number 0 [ 1152.292076][ T976] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1152.302870][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.310892][ T976] usb 5-1: Product: syz [ 1152.332760][ T976] usb 5-1: Manufacturer: syz [ 1152.348784][ T976] usb 5-1: SerialNumber: syz [ 1152.385882][T19712] No control pipe specified [ 1152.479755][ T976] usb 5-1: config 0 descriptor?? [ 1152.511157][T19716] netlink: 'syz.1.3785': attribute type 4 has an invalid length. [ 1152.522001][T19716] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3785'. [ 1152.606863][T13198] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1152.742673][ T976] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 1152.750607][ T976] uvcvideo 5-1:0.105: No valid video chain found. [ 1152.803301][ T5890] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1152.835443][T13198] usb 1-1: Using ep0 maxpacket: 8 [ 1152.874594][T19720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3786'. [ 1153.085197][T13198] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1153.119608][T13198] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1153.161739][T13198] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1153.179769][T13198] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1153.195999][T13198] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1153.196441][ T5866] usb 5-1: USB disconnect, device number 100 [ 1153.205212][T13198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.311293][T19722] SELinux: policydb string does not match my string SE Linux [ 1153.319124][T19722] SELinux: failed to load policy [ 1153.352565][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1153.352578][ T30] audit: type=1400 audit(2000000128.580:1939): avc: denied { ioctl } for pid=19723 comm="syz.2.3788" path="socket:[92835]" dev="sockfs" ino=92835 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1153.386058][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 1153.393127][ T5890] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1153.403468][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1153.414324][ T30] audit: type=1400 audit(2000000128.636:1940): avc: denied { map } for pid=19723 comm="syz.2.3788" path="socket:[92835]" dev="sockfs" ino=92835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1153.414387][ T30] audit: type=1400 audit(2000000128.636:1941): avc: denied { read accept } for pid=19723 comm="syz.2.3788" path="socket:[92835]" dev="sockfs" ino=92835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1153.439625][T13198] usb 1-1: usb_control_msg returned -32 [ 1153.471967][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1153.472677][T13198] usbtmc 1-1:16.0: can't read capabilities [ 1153.481830][ T5890] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1153.481855][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1153.482776][ T5890] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1153.521347][ T5890] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1153.530112][ T5890] usb 2-1: Manufacturer: syz [ 1153.537523][ T5890] usb 2-1: config 0 descriptor?? [ 1153.609029][T13198] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 1153.629430][T13198] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1153.923719][ T30] audit: type=1400 audit(2000000129.113:1942): avc: denied { getopt } for pid=19737 comm="syz.4.3791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1153.944249][T19739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3791'. [ 1153.946333][T19738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3791'. [ 1153.968682][ T5890] rc_core: IR keymap rc-hauppauge not found [ 1153.995788][T19739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3791'. [ 1154.006709][ T30] audit: type=1400 audit(2000000129.169:1943): avc: denied { setopt } for pid=19730 comm="syz.3.3790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1154.033060][T19738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3791'. [ 1154.076587][T19741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1154.085175][T19741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1154.111938][ T5890] Registered IR keymap rc-empty [ 1154.130657][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1154.150333][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1154.164678][ T30] audit: type=1400 audit(2000000129.347:1944): avc: denied { write } for pid=19715 comm="syz.1.3785" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1154.189198][ T5890] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1154.207498][ T5890] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input73 [ 1154.222615][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1154.246735][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1154.278650][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1154.310697][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1154.344691][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1155.262154][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1155.294269][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1155.316603][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1155.359076][T19748] tipc: Started in network mode [ 1155.364020][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1155.379757][T19748] tipc: Node identity 1249abf3ee33, cluster identity 4711 [ 1155.392532][T19748] tipc: Enabled bearer , priority 0 [ 1155.406325][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1155.419446][T19748] syzkaller0: entered promiscuous mode [ 1155.427991][T19748] syzkaller0: entered allmulticast mode [ 1155.452329][ T5890] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1155.463993][ T5890] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1155.491544][ T5890] usb 2-1: USB disconnect, device number 79 [ 1155.506305][T19748] tipc: Resetting bearer [ 1155.574410][T13198] usb 1-1: USB disconnect, device number 83 [ 1155.785982][T18302] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1155.852565][T19759] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3796'. [ 1156.226439][T19747] tipc: Resetting bearer [ 1156.265132][T19747] tipc: Disabling bearer [ 1156.373953][T18302] usb 5-1: Using ep0 maxpacket: 32 [ 1156.386029][T18302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1156.408926][T18302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1156.432796][T18302] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1156.456245][T18302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.487360][T18302] usb 5-1: config 0 descriptor?? [ 1158.638087][T19769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3797'. [ 1158.760302][T18302] usbhid 5-1:0.0: can't add hid device: -71 [ 1158.787915][T18302] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1158.826532][T18302] usb 5-1: USB disconnect, device number 101 [ 1160.224090][ T30] audit: type=1326 audit(2000000134.940:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19801 comm="syz.1.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9fd8efc9 code=0x7ffc0000 [ 1160.421356][ T30] audit: type=1326 audit(2000000134.940:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19801 comm="syz.1.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9fd8efc9 code=0x7ffc0000 [ 1161.242530][T18302] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1161.393413][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1161.451975][ T5866] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1161.538594][T18302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1161.549319][T18302] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1161.898548][T18302] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1161.909355][T18302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.919681][T18302] usb 4-1: config 0 descriptor?? [ 1161.929672][ T30] audit: type=1400 audit(2000000136.605:1947): avc: denied { ioctl } for pid=19825 comm="syz.4.3813" path="socket:[93034]" dev="sockfs" ino=93034 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1161.933430][T18302] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1161.970147][ T5866] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1161.992078][ T5866] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1162.018995][ T5866] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1162.039023][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.072633][T19817] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1162.091207][ T5866] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1162.222337][ T976] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1162.563491][ T30] audit: type=1400 audit(2000000137.167:1948): avc: denied { write } for pid=19834 comm="syz.4.3816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1162.638644][ T30] audit: type=1400 audit(2000000137.260:1949): avc: denied { ioctl } for pid=19816 comm="syz.0.3811" path="socket:[93052]" dev="sockfs" ino=93052 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1162.639162][ T976] usb 2-1: Using ep0 maxpacket: 16 [ 1162.663673][ C1] vkms_vblank_simulate: vblank timer overrun [ 1162.807668][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1162.823360][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1162.833413][ T976] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1162.846390][ T976] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1162.857113][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.876886][ T976] usb 2-1: config 0 descriptor?? [ 1163.270033][ T5819] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1163.337268][ T976] shield 0003:0955:7214.0029: unknown main item tag 0x0 [ 1163.345464][ T976] shield 0003:0955:7214.0029: unknown main item tag 0x0 [ 1163.352456][ T976] shield 0003:0955:7214.0029: unknown main item tag 0x0 [ 1163.359632][ T976] shield 0003:0955:7214.0029: reserved main item tag 0xd [ 1163.366761][ T976] shield 0003:0955:7214.0029: unknown main item tag 0x0 [ 1163.380277][ T976] input: HID 0955:7214 Haptics as /devices/virtual/input/input74 [ 1163.407325][ T976] shield 0003:0955:7214.0029: Registered Thunderstrike controller [ 1163.418383][ T976] shield 0003:0955:7214.0029: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 1163.440485][ T5819] usb 5-1: Using ep0 maxpacket: 8 [ 1163.447105][ T5819] usb 5-1: config 0 has an invalid interface number: 75 but max is 0 [ 1163.455641][ T5819] usb 5-1: config 0 has no interface number 0 [ 1163.462185][ T5819] usb 5-1: config 0 interface 75 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1163.475314][ T5819] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=df.29 [ 1163.484440][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.492452][ T5819] usb 5-1: Product: syz [ 1163.500084][ T5819] usb 5-1: Manufacturer: syz [ 1163.504944][ T5819] usb 5-1: SerialNumber: syz [ 1163.523808][ T5819] usb 5-1: config 0 descriptor?? [ 1163.603652][T13198] shield 0003:0955:7214.0029: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1163.603957][ T5866] usb 2-1: USB disconnect, device number 80 [ 1163.614795][T13198] shield 0003:0955:7214.0029: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1163.642374][T13198] shield 0003:0955:7214.0029: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1163.666755][T13198] shield 0003:0955:7214.0029: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1163.818718][T19849] comedi comedi3: pcl816: I/O port conflict (0x4f27,16) [ 1164.079291][T13198] usb 5-1: USB disconnect, device number 102 [ 1164.384425][T13198] usb 1-1: USB disconnect, device number 84 [ 1164.429272][ T5866] usb 4-1: USB disconnect, device number 103 [ 1164.616391][ T30] audit: type=1326 audit(2000000138.991:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19850 comm="syz.1.3820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9fd8efc9 code=0x7ffc0000 [ 1165.020086][ T30] audit: type=1326 audit(2000000138.991:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19850 comm="syz.1.3820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9fd8efc9 code=0x7ffc0000 [ 1165.045614][ T30] audit: type=1326 audit(2000000138.991:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19850 comm="syz.1.3820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3e9fd8efc9 code=0x7ffc0000 [ 1165.069072][ C1] vkms_vblank_simulate: vblank timer overrun [ 1165.078166][T19853] svc: failed to register nfsdv3 RPC service (errno 111). [ 1165.096981][T19853] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1165.121021][ T30] audit: type=1326 audit(2000000138.991:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19850 comm="syz.1.3820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9fd8efc9 code=0x7ffc0000 [ 1165.396561][T19868] FAULT_INJECTION: forcing a failure. [ 1165.396561][T19868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1165.413205][ T30] audit: type=1326 audit(2000000138.991:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19850 comm="syz.1.3820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9fd8efc9 code=0x7ffc0000 [ 1165.450622][T19868] CPU: 0 UID: 0 PID: 19868 Comm: syz.3.3824 Not tainted syzkaller #0 PREEMPT(full) [ 1165.450649][T19868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1165.450660][T19868] Call Trace: [ 1165.450666][T19868] [ 1165.450674][T19868] dump_stack_lvl+0x16c/0x1f0 [ 1165.450704][T19868] should_fail_ex+0x512/0x640 [ 1165.450729][T19868] _copy_to_user+0x32/0xd0 [ 1165.450753][T19868] simple_read_from_buffer+0xcb/0x170 [ 1165.450783][T19868] proc_fail_nth_read+0x197/0x240 [ 1165.450804][T19868] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1165.450826][T19868] ? rw_verify_area+0xcf/0x6c0 [ 1165.450851][T19868] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1165.450871][T19868] vfs_read+0x1e4/0xcf0 [ 1165.450892][T19868] ? __pfx___mutex_lock+0x10/0x10 [ 1165.450908][T19868] ? __pfx_vfs_read+0x10/0x10 [ 1165.450932][T19868] ? __fget_files+0x20e/0x3c0 [ 1165.450958][T19868] ksys_read+0x12a/0x250 [ 1165.450974][T19868] ? __pfx_ksys_read+0x10/0x10 [ 1165.450990][T19868] ? fput+0x9b/0xd0 [ 1165.451015][T19868] do_syscall_64+0xcd/0xfa0 [ 1165.451043][T19868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.451067][T19868] RIP: 0033:0x7f9e6a18d9dc [ 1165.451082][T19868] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1165.451098][T19868] RSP: 002b:00007f9e683ee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1165.451115][T19868] RAX: ffffffffffffffda RBX: 00007f9e6a3e5fa0 RCX: 00007f9e6a18d9dc [ 1165.451127][T19868] RDX: 000000000000000f RSI: 00007f9e683ee0a0 RDI: 0000000000000006 [ 1165.451137][T19868] RBP: 00007f9e683ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1165.451147][T19868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1165.451157][T19868] R13: 00007f9e6a3e6038 R14: 00007f9e6a3e5fa0 R15: 00007fff0fa7ec08 [ 1165.451185][T19868] [ 1165.782932][ T5866] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1165.867746][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1165.867763][ T30] audit: type=1400 audit(2000000140.291:1968): avc: denied { watch } for pid=19882 comm="syz.0.3828" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1165.942026][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 1165.949639][ T5866] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 1165.958162][ T5866] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1165.967033][ T5866] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1165.969475][ T30] audit: type=1400 audit(2000000140.384:1969): avc: denied { mount } for pid=19884 comm="syz.0.3829" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1165.975655][ T5866] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1166.002237][T19885] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1166.005633][ T5866] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1166.028632][ T5866] usb 2-1: config 0 has no interface number 0 [ 1166.034772][ T5866] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1166.039670][ T30] audit: type=1400 audit(2000000140.440:1970): avc: denied { rename } for pid=19884 comm="syz.0.3829" name="bus" dev="tmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1166.045880][ T5866] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1166.079820][ T5866] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1166.090062][ T5866] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1166.103506][ T5866] usb 2-1: config 0 interface 125 has no altsetting 0 [ 1166.105726][ T30] audit: type=1400 audit(2000000140.515:1971): avc: denied { unmount } for pid=17361 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1166.110562][ T5866] usb 2-1: config 0 interface 125 has no altsetting 2 [ 1166.130441][ T5819] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1166.138869][ T5866] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1166.158263][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.168452][ T5866] usb 2-1: Product: syz [ 1166.172611][ T5866] usb 2-1: Manufacturer: syz [ 1166.181019][ T5866] usb 2-1: SerialNumber: syz [ 1166.188206][ T5866] usb 2-1: config 0 descriptor?? [ 1166.199110][ T5866] usb 2-1: selecting invalid altsetting 2 [ 1166.329241][ T5819] usb 4-1: config 0 has an invalid interface number: 75 but max is 0 [ 1166.337464][ T5819] usb 4-1: config 0 has no interface number 0 [ 1166.343635][ T5819] usb 4-1: config 0 interface 75 has no altsetting 0 [ 1166.352493][ T5819] usb 4-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=35.9a [ 1166.361638][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.369893][ T5819] usb 4-1: Product: syz [ 1166.375396][ T5819] usb 4-1: Manufacturer: syz [ 1166.770889][ T5819] usb 4-1: SerialNumber: syz [ 1166.793427][ T5819] usb 4-1: config 0 descriptor?? [ 1166.817796][ C0] usb 2-1: async_complete: urb error -71 [ 1166.823531][ C0] usb 2-1: async_complete: urb error -71 [ 1166.832211][ T5866] get_1284_register: usb error -71 [ 1166.837446][ T5866] uss720 2-1:0.125: probe with driver uss720 failed with error -71 [ 1166.851065][ T5866] usb 2-1: USB disconnect, device number 81 [ 1166.922848][T19900] netlink: 'syz.2.3834': attribute type 5 has an invalid length. [ 1167.108969][T13198] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1167.249458][ T5819] empeg 4-1:0.75: empeg converter detected [ 1167.289506][ T5819] usb 4-1: active config #0 != 1 ?? [ 1167.380302][ T5819] usb 4-1: USB disconnect, device number 104 [ 1167.393852][T13198] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1167.407585][T13198] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1167.422530][T13198] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1167.435832][T13198] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1167.445075][T13198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.470156][T13198] usb 5-1: config 0 descriptor?? [ 1167.590122][ T30] audit: type=1400 audit(2000000141.900:1972): avc: denied { execute } for pid=19904 comm="syz.2.3836" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1167.614139][ C1] vkms_vblank_simulate: vblank timer overrun [ 1167.706011][ T976] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1167.748524][T19916] xt_socket: unknown flags 0x50 [ 1167.877536][ T976] usb 1-1: Using ep0 maxpacket: 8 [ 1167.887235][ T976] usb 1-1: config 0 has an invalid interface number: 75 but max is 0 [ 1167.906293][ T976] usb 1-1: config 0 has no interface number 0 [ 1167.917892][ T976] usb 1-1: config 0 interface 75 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1167.930995][T13198] usbhid 5-1:0.0: can't add hid device: -71 [ 1167.937946][T13198] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1167.945927][ T976] usb 1-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=df.29 [ 1167.976985][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.987246][T13198] usb 5-1: USB disconnect, device number 103 [ 1167.993350][ T976] usb 1-1: Product: syz [ 1167.997591][ T976] usb 1-1: Manufacturer: syz [ 1168.002176][ T976] usb 1-1: SerialNumber: syz [ 1168.013181][ T976] usb 1-1: config 0 descriptor?? [ 1168.234264][T19927] netlink: 596 bytes leftover after parsing attributes in process `syz.3.3842'. [ 1169.074943][T19907] comedi comedi3: pcl816: I/O port conflict (0x4f27,16) [ 1169.082597][ T5866] usb 1-1: USB disconnect, device number 85 [ 1170.334617][ T1205] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1170.406756][T19956] ptrace attach of "./syz-executor exec"[16945] was attempted by " [ 1170.455283][T19959] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3849'. [ 1170.591975][ T30] audit: type=1400 audit(2000000144.509:1973): avc: denied { map } for pid=19955 comm="syz.2.3851" path="socket:[94415]" dev="sockfs" ino=94415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1170.645943][ T30] audit: type=1400 audit(2000000144.509:1974): avc: denied { accept } for pid=19955 comm="syz.2.3851" path="socket:[94415]" dev="sockfs" ino=94415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1170.671129][ T30] audit: type=1400 audit(2000000144.678:1975): avc: denied { connect } for pid=19955 comm="syz.2.3851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1170.691999][ T1205] usb 5-1: Using ep0 maxpacket: 16 [ 1170.706092][ T1205] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1170.717198][ T1205] usb 5-1: no configurations [ 1170.913860][ T1205] usb 5-1: can't read configurations, error -22 [ 1171.480609][T19970] comedi comedi4: bad chanlist[0]=0x0000096d chan=2413 range length=2 [ 1172.184939][T19982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3856'. [ 1172.843847][ T30] audit: type=1326 audit(2000000146.811:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19986 comm="syz.2.3860" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f993498efc9 code=0x0 [ 1173.927977][ T30] audit: type=1400 audit(2000000147.811:1977): avc: denied { create } for pid=19986 comm="syz.2.3860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1178.267681][T20025] netlink: 'syz.1.3869': attribute type 32 has an invalid length. [ 1178.651005][ T30] audit: type=1326 audit(2000000151.983:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20018 comm="syz.3.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6a18efc9 code=0x7ffc0000 [ 1178.705983][ T30] audit: type=1326 audit(2000000151.983:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20018 comm="syz.3.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6a18efc9 code=0x7ffc0000 [ 1179.660153][ T30] audit: type=1326 audit(2000000151.993:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20018 comm="syz.3.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f9e6a18efc9 code=0x7ffc0000 [ 1179.683794][ T30] audit: type=1326 audit(2000000151.993:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20018 comm="syz.3.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6a18efc9 code=0x7ffc0000 [ 1179.817272][ T30] audit: type=1326 audit(2000000152.002:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20018 comm="syz.3.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9e6a18d810 code=0x7ffc0000 [ 1179.840756][ C0] vkms_vblank_simulate: vblank timer overrun [ 1179.880267][ T30] audit: type=1326 audit(2000000152.002:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20018 comm="syz.3.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6a18efc9 code=0x7ffc0000 [ 1179.967697][ T30] audit: type=1326 audit(2000000152.011:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20018 comm="syz.3.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e6a18efc9 code=0x7ffc0000 [ 1180.000516][ T30] audit: type=1326 audit(2000000152.011:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20018 comm="syz.3.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6a18efc9 code=0x7ffc0000 [ 1180.034289][ T30] audit: type=1326 audit(2000000152.021:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20018 comm="syz.3.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9e6a18d810 code=0x7ffc0000 [ 1180.060386][ T30] audit: type=1326 audit(2000000152.021:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20018 comm="syz.3.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6a18efc9 code=0x7ffc0000 [ 1180.213991][ T5890] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1180.437967][ T5890] usb 1-1: Using ep0 maxpacket: 32 [ 1180.439481][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1180.439503][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1180.439521][ T5890] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1180.439533][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.440697][ T5890] usb 1-1: config 0 descriptor?? [ 1182.364501][ T5890] usbhid 1-1:0.0: can't add hid device: -71 [ 1182.409696][ T5890] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1182.583983][ T5890] usb 1-1: USB disconnect, device number 86 [ 1182.887215][T20065] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1184.514629][T20091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3886'. [ 1185.063317][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1185.063333][ T30] audit: type=1400 audit(2000000158.241:1995): avc: denied { accept } for pid=20073 comm="syz.2.3883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1185.428070][ T5819] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1185.677021][ T5819] usb 1-1: Using ep0 maxpacket: 8 [ 1185.713131][ T5819] usb 1-1: config 0 has an invalid interface number: 75 but max is 0 [ 1185.755100][ T5819] usb 1-1: config 0 has no interface number 0 [ 1185.775927][ T5819] usb 1-1: config 0 interface 75 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1185.834041][ T5819] usb 1-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=df.29 [ 1185.864151][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.889627][ T5819] usb 1-1: Product: syz [ 1185.904438][ T5819] usb 1-1: Manufacturer: syz [ 1185.995056][ T5819] usb 1-1: SerialNumber: syz [ 1186.010395][ T5819] usb 1-1: config 0 descriptor?? [ 1187.200147][T20112] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3893'. [ 1187.646015][T20116] comedi comedi3: pcl816: I/O port conflict (0x4f27,16) [ 1187.941330][T13198] usb 1-1: USB disconnect, device number 87 [ 1188.307667][T20132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3894'. [ 1189.590781][T20152] netlink: 'syz.2.3902': attribute type 1 has an invalid length. [ 1189.944358][T20162] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3905'. [ 1190.979729][ T976] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1191.203980][ T976] usb 2-1: Using ep0 maxpacket: 8 [ 1191.210841][ T976] usb 2-1: config 0 has an invalid interface number: 75 but max is 0 [ 1191.220368][ T976] usb 2-1: config 0 has no interface number 0 [ 1191.283778][ T976] usb 2-1: config 0 interface 75 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1191.327112][ T976] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=df.29 [ 1191.341773][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.363785][ T976] usb 2-1: Product: syz [ 1191.388863][ T976] usb 2-1: Manufacturer: syz [ 1191.403031][ T976] usb 2-1: SerialNumber: syz [ 1191.423335][ T976] usb 2-1: config 0 descriptor?? [ 1191.935581][T20190] comedi comedi3: pcl816: I/O port conflict (0x4f27,16) [ 1192.235481][T20184] syz.0.3909 (20184): drop_caches: 2 [ 1192.243879][ T976] usb 2-1: USB disconnect, device number 82 [ 1192.679648][ T5819] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1193.074794][ T5819] usb 4-1: Using ep0 maxpacket: 16 [ 1193.362735][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1193.378122][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1193.394911][ T5819] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1193.440785][ T5819] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1193.451379][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.463932][ T5819] usb 4-1: config 0 descriptor?? [ 1193.513185][T13198] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1194.112039][T13198] usb 1-1: Using ep0 maxpacket: 32 [ 1194.167546][T13198] usb 1-1: config index 0 descriptor too short (expected 44, got 36) [ 1194.199709][T13198] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 1194.236998][ T5819] shield 0003:0955:7214.002A: unknown main item tag 0x0 [ 1194.381912][ T5819] shield 0003:0955:7214.002A: unknown main item tag 0x0 [ 1194.389850][T13198] usb 1-1: config 0 has no interface number 0 [ 1194.396838][T13198] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1194.408896][ T5819] shield 0003:0955:7214.002A: unknown main item tag 0x0 [ 1194.935041][ T5819] shield 0003:0955:7214.002A: unknown main item tag 0x0 [ 1194.943943][T13198] usb 1-1: config 0 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1194.954752][ T5819] shield 0003:0955:7214.002A: unknown main item tag 0x0 [ 1194.962284][T13198] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 1194.974748][ T5819] input: HID 0955:7214 Haptics as /devices/virtual/input/input76 [ 1194.988274][T13198] usb 1-1: config 0 interface 126 has no altsetting 0 [ 1195.375992][T13198] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 1195.394694][T13198] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.415803][ T5819] shield 0003:0955:7214.002A: Registered Thunderstrike controller [ 1195.458870][T13198] usb 1-1: Product: syz [ 1195.465057][T13198] usb 1-1: Manufacturer: syz [ 1195.472236][ T5819] shield 0003:0955:7214.002A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 1195.488019][T13198] usb 1-1: SerialNumber: syz [ 1195.495133][T13198] usb 1-1: config 0 descriptor?? [ 1195.504701][T20202] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1195.727585][ T5819] usb 4-1: USB disconnect, device number 105 [ 1195.736529][ T976] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1196.593253][ T976] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1196.606486][ T976] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1196.617686][ T976] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1196.900042][T13198] ir_usb 1-1:0.126: IR Dongle converter detected [ 1196.907932][T13198] usb 1-1: IRDA class descriptor not found, device not bound [ 1196.921159][T13198] usb 1-1: USB disconnect, device number 88 [ 1196.930408][T20228] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1197.140783][T20245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3926'. [ 1197.151076][T20245] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3926'. [ 1197.229557][T20249] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3928'. [ 1197.576232][ T31] INFO: task kworker/u8:9:7588 blocked for more than 143 seconds. [ 1197.664658][ T31] Not tainted syzkaller #0 [ 1197.681738][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1197.721682][ T31] task:kworker/u8:9 state:D stack:24200 pid:7588 tgid:7588 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1197.748533][ T31] Workqueue: netns cleanup_net [ 1197.753431][ T31] Call Trace: [ 1197.756818][ T31] [ 1197.759931][ T31] __schedule+0x1190/0x5de0 [ 1197.764537][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 1197.769660][ T31] ? __lock_acquire+0x622/0x1c90 [ 1197.780025][ T31] ? __pfx___schedule+0x10/0x10 [ 1197.784997][ T31] ? find_held_lock+0x2b/0x80 [ 1197.789867][ T31] ? schedule+0x2d7/0x3a0 [ 1197.794254][ T31] schedule+0xe7/0x3a0 [ 1197.798405][ T31] afs_cell_purge+0x41f/0x4f0 [ 1197.807050][ T31] ? __try_to_del_timer_sync+0x115/0x170 [ 1197.812857][ T31] ? __pfx_afs_cell_purge+0x10/0x10 [ 1197.818166][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 1197.824616][ T31] ? __timer_delete_sync+0x108/0x1b0 [ 1197.830016][ T31] ? __pfx_afs_net_exit+0x10/0x10 [ 1197.835237][ T31] afs_net_exit+0x83/0x140 [ 1197.839705][ T31] ops_undo_list+0x2ee/0xab0 [ 1197.844500][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1197.849698][ T31] ? cleanup_net+0x347/0x8b0 [ 1197.854787][ T31] ? idr_destroy+0x62/0x2e0 [ 1197.859389][ T31] cleanup_net+0x41b/0x8b0 [ 1197.863884][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 1197.868993][ T31] ? rcu_is_watching+0x12/0xc0 [ 1197.873850][ T31] process_one_work+0x9cf/0x1b70 [ 1197.885721][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1197.891174][ T31] ? assign_work+0x1a0/0x250 [ 1197.895860][ T31] worker_thread+0x6c8/0xf10 [ 1197.900955][ T31] ? __kthread_parkme+0x19e/0x250 [ 1197.906042][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1197.911899][ T31] kthread+0x3c5/0x780 [ 1197.915972][ T31] ? __pfx_kthread+0x10/0x10 [ 1197.920573][ T31] ? rcu_is_watching+0x12/0xc0 [ 1197.925330][ T31] ? __pfx_kthread+0x10/0x10 [ 1197.929961][ T31] ret_from_fork+0x675/0x7d0 [ 1197.934675][ T31] ? __pfx_kthread+0x10/0x10 [ 1197.939281][ T31] ret_from_fork_asm+0x1a/0x30 [ 1197.944051][ T31] [ 1197.947153][ T31] [ 1197.947153][ T31] Showing all locks held in the system: [ 1197.955211][ T31] 2 locks held by ksoftirqd/1/23: [ 1197.960294][ T31] #0: ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1197.971074][T13198] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1197.972180][ T31] #1: ffff8880b8524088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 1197.988128][ T31] 1 lock held by khungtaskd/31: [ 1197.993274][ T31] #0: ffffffff8e3c4460 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1198.003257][ T31] 5 locks held by kworker/u8:7/3589: [ 1198.008530][ T31] 2 locks held by getty/5571: [ 1198.013194][ T31] #0: ffff88814d2b30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1198.023624][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1198.033759][ T31] 3 locks held by kworker/u8:9/7588: [ 1198.039058][ T31] #0: ffff88801ba94948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1198.049547][ T31] #1: ffffc900044dfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1198.059507][ T31] #2: ffffffff900d01f0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x8b0 [ 1198.068855][ T31] 3 locks held by kworker/u8:15/10727: [ 1198.074282][ T31] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1198.085582][ T31] #1: ffffc90012fa7d00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1198.096619][ T31] #2: ffffffff8e3cf8c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 1198.106971][ T31] 6 locks held by kworker/1:1/13198: [ 1198.112473][ T31] #0: ffff888022e8d548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1198.123707][ T31] #1: ffffc9000443fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1198.136255][ T31] #2: ffff888029a86198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 1198.145250][ T31] #3: ffff888145339518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2981/0x4fe0 [ 1198.155500][T13198] usb 4-1: Using ep0 maxpacket: 8 [ 1198.169176][ T31] #4: ffff888144f99f68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x29aa/0x4fe0 [ 1198.179347][ T31] #5: ffff888026ed5368 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xb7/0x1870 [ 1198.188971][ T31] 1 lock held by syz.2.3928/20240: [ 1198.194202][ T31] #0: ffffffff8e3cf8c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 1198.194374][T13198] usb 4-1: config 0 has an invalid interface number: 75 but max is 0 [ 1198.204231][ T31] [ 1198.214629][ T31] ============================================= [ 1198.214629][ T31] [ 1198.214772][T13198] usb 4-1: config 0 has no interface number 0 [ 1198.228888][ T31] NMI backtrace for cpu 0 [ 1198.228901][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1198.228918][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1198.228928][ T31] Call Trace: [ 1198.228933][ T31] [ 1198.228939][ T31] dump_stack_lvl+0x116/0x1f0 [ 1198.228964][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1198.228982][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1198.229004][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1198.229023][ T31] watchdog+0xf3f/0x1170 [ 1198.229045][ T31] ? rcu_is_watching+0x12/0xc0 [ 1198.229064][ T31] ? __pfx_watchdog+0x10/0x10 [ 1198.229081][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1198.229106][ T31] ? __kthread_parkme+0x19e/0x250 [ 1198.229131][ T31] ? __pfx_watchdog+0x10/0x10 [ 1198.229152][ T31] kthread+0x3c5/0x780 [ 1198.229170][ T31] ? __pfx_kthread+0x10/0x10 [ 1198.229188][ T31] ? rcu_is_watching+0x12/0xc0 [ 1198.229206][ T31] ? __pfx_kthread+0x10/0x10 [ 1198.229222][ T31] ret_from_fork+0x675/0x7d0 [ 1198.229235][ T31] ? __pfx_kthread+0x10/0x10 [ 1198.229250][ T31] ret_from_fork_asm+0x1a/0x30 [ 1198.229283][ T31] [ 1198.229289][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1198.234152][T13198] usb 4-1: config 0 interface 75 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1198.243105][ C1] NMI backtrace for cpu 1 [ 1198.243117][ C1] CPU: 1 UID: 0 PID: 13198 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 1198.243134][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1198.243143][ C1] Workqueue: usb_hub_wq hub_event [ 1198.243161][ C1] RIP: 0010:lock_acquire+0x1a0/0x350 [ 1198.243177][ C1] Code: d9 ff ff 48 c7 c7 c8 47 a0 8d 48 83 c4 28 e8 77 5f c7 09 b8 ff ff ff ff 65 0f c1 05 e2 a5 08 12 83 f8 01 0f 85 6a 01 00 00 9c <58> f6 c4 02 0f 85 7f 01 00 00 48 83 3c 24 00 0f 84 ad fe ff ff fb [ 1198.243190][ C1] RSP: 0018:ffffc90000a08930 EFLAGS: 00000046 [ 1198.243201][ C1] RAX: 0000000000000001 RBX: ffffffff8e3c4460 RCX: 000000007cc3d868 [ 1198.243211][ C1] RDX: 0000000000000000 RSI: ffffffff8da047c8 RDI: ffffffff8bf06cc0 [ 1198.243220][ C1] RBP: 0000000000000002 R08: 0fdcbec46597f1b3 R09: 0000000000000000 [ 1198.243229][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 1198.243237][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1198.243245][ C1] FS: 0000000000000000(0000) GS:ffff888124b0b000(0000) knlGS:0000000000000000 [ 1198.243260][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1198.243269][ C1] CR2: 000000110c26d023 CR3: 0000000079aab000 CR4: 00000000003526f0 [ 1198.243279][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1198.243288][ C1] DR3: 0000000000004501 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1198.243297][ C1] Call Trace: [ 1198.243302][ C1] [ 1198.243309][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 1198.243325][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1198.243345][ C1] unwind_next_frame+0xd1/0x20a0 [ 1198.243360][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 1198.243374][ C1] ? __kasan_slab_free+0x5f/0x80 [ 1198.243391][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1198.243410][ C1] arch_stack_walk+0x94/0x100 [ 1198.243428][ C1] ? __kasan_slab_free+0x5f/0x80 [ 1198.243444][ C1] stack_trace_save+0x8e/0xc0 [ 1198.243462][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1198.243481][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 1198.243503][ C1] kasan_save_stack+0x33/0x60 [ 1198.243516][ C1] ? kasan_save_stack+0x33/0x60 [ 1198.243529][ C1] ? kasan_save_track+0x14/0x30 [ 1198.243542][ C1] ? __kasan_save_free_info+0x3b/0x60 [ 1198.243560][ C1] ? __kasan_slab_free+0x5f/0x80 [ 1198.243591][ C1] kasan_save_track+0x14/0x30 [ 1198.243604][ C1] __kasan_save_free_info+0x3b/0x60 [ 1198.243622][ C1] __kasan_slab_free+0x5f/0x80 [ 1198.243636][ C1] kmem_cache_free+0x2d4/0x6c0 [ 1198.243649][ C1] ? rcu_core+0x79c/0x1530 [ 1198.243666][ C1] ? rcu_core+0x797/0x1530 [ 1198.243681][ C1] ? rcu_core+0x79c/0x1530 [ 1198.243695][ C1] rcu_core+0x79c/0x1530 [ 1198.243713][ C1] ? __pfx_rcu_core+0x10/0x10 [ 1198.243734][ C1] ? mark_held_locks+0x49/0x80 [ 1198.243755][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1198.243775][ C1] handle_softirqs+0x219/0x8e0 [ 1198.243795][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1198.243813][ C1] __irq_exit_rcu+0x109/0x170 [ 1198.243829][ C1] irq_exit_rcu+0x9/0x30 [ 1198.243844][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1198.243863][ C1] [ 1198.243867][ C1] [ 1198.243872][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1198.243887][ C1] RIP: 0010:vprintk_emit+0x526/0x680 [ 1198.243904][ C1] Code: 00 4d 85 ed 0f 85 19 01 00 00 e8 85 1b 21 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 e3 16 21 00 48 85 ed 0f 85 25 01 00 00 65 1b 21 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 1198.243917][ C1] RSP: 0018:ffffc9000443f348 EFLAGS: 00000246 [ 1198.243927][ C1] RAX: 0000000000100000 RBX: 0000000000000062 RCX: ffffc9001a12d000 [ 1198.243936][ C1] RDX: 0000000000100000 RSI: ffffffff819bf005 RDI: 0000000000000007 [ 1198.243945][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1198.243953][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000887e6b [ 1198.243962][ C1] R13: 0000000000000200 R14: ffff88801e6c8000 R15: ffffc9000443f410 [ 1198.243975][ C1] ? vprintk_emit+0x645/0x680 [ 1198.243994][ C1] ? vprintk_emit+0x645/0x680 [ 1198.244010][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1198.244030][ C1] dev_printk_emit+0xfa/0x140 [ 1198.244050][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 1198.244079][ C1] __dev_printk+0xf5/0x270 [ 1198.244099][ C1] _dev_notice+0xe4/0x120 [ 1198.244119][ C1] ? __pfx__dev_notice+0x10/0x10 [ 1198.244141][ C1] ? rcu_is_watching+0x12/0xc0 [ 1198.244158][ C1] ? trace_kmalloc+0x2b/0xd0 [ 1198.244172][ C1] ? __kmalloc_noprof+0x34f/0x880 [ 1198.244189][ C1] ? usb_get_configuration+0x2ed0/0x6330 [ 1198.244211][ C1] usb_get_configuration+0x40be/0x6330 [ 1198.244246][ C1] ? __pfx_usb_get_configuration+0x10/0x10 [ 1198.244267][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1198.244283][ C1] ? mark_held_locks+0x49/0x80 [ 1198.244305][ C1] usb_new_device+0x11d3/0x1a60 [ 1198.244322][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1198.244344][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 1198.244359][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 1198.244376][ C1] ? mark_held_locks+0x49/0x80 [ 1198.244397][ C1] hub_event+0x2f34/0x4fe0 [ 1198.244424][ C1] ? __pfx_hub_event+0x10/0x10 [ 1198.244439][ C1] ? assoc_array_insert+0x1550/0x3970 [ 1198.244464][ C1] ? rcu_is_watching+0x12/0xc0 [ 1198.244482][ C1] process_one_work+0x9cf/0x1b70 [ 1198.244500][ C1] ? __pfx_hcd_resume_work+0x10/0x10 [ 1198.244519][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1198.244537][ C1] ? assign_work+0x1a0/0x250 [ 1198.244551][ C1] worker_thread+0x6c8/0xf10 [ 1198.244570][ C1] ? __kthread_parkme+0x19e/0x250 [ 1198.244590][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1198.244604][ C1] kthread+0x3c5/0x780 [ 1198.244618][ C1] ? __pfx_kthread+0x10/0x10 [ 1198.244632][ C1] ? rcu_is_watching+0x12/0xc0 [ 1198.244649][ C1] ? __pfx_kthread+0x10/0x10 [ 1198.244662][ C1] ret_from_fork+0x675/0x7d0 [ 1198.244674][ C1] ? __pfx_kthread+0x10/0x10 [ 1198.244687][ C1] ret_from_fork_asm+0x1a/0x30 [ 1198.244713][ C1] [ 1198.952968][T13198] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=df.29 [ 1198.962001][T13198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.970016][T13198] usb 4-1: Product: syz [ 1198.974142][T13198] usb 4-1: Manufacturer: syz [ 1198.978732][T13198] usb 4-1: SerialNumber: syz [ 1198.984432][T13198] usb 4-1: config 0 descriptor?? [ 1199.350914][T20253] comedi comedi3: pcl816: I/O port conflict (0x4f27,16) [ 1199.592781][ T9] usb 4-1: USB disconnect, device number 106