last executing test programs: 19.422365691s ago: executing program 0 (id=1057): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000000000001000000070000001c000000000000000000000008000000", @ANYRES32=r2], 0x30}}], 0x1, 0xc0) 18.721183645s ago: executing program 0 (id=1058): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='2', 0x1}, {&(0x7f0000000240)="480a9ce567", 0x5}], 0x2) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000a00)={0x0, 0xa5, "b30e78a239f090b236e263b6588f99413123e23372d1db197585e78b149fd9a11d658cf12c5f98afd68bbcefc9ec1b885a7b7a1e269a137ddbd3f2169793e2a75f9757e3ac00822bd31a74a38ac809de71da85b8e129a08415028a8af9dab78586340f20dfdd4489c6e21671882ed15d293576a2b846337c07908df77e90e0df71b7b136c60e913ed17e3f49e4eb8ab73c91b251026d1feeec422dc9afd38f522229ba725a"}, &(0x7f0000000ac0)=0xad) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @mcast1, 0x7}}}, &(0x7f0000001480)=0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000014c0)={0x0, 0x5}, &(0x7f0000001500)=0x8) sendmmsg$inet_sctp(r1, &(0x7f00000016c0)=[{&(0x7f0000000100)=@in6={0xa, 0x5, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000340)="a6a1121a9387bbc5a383ada62a946ae42a528943399baa5ae2eb70e6a77821c38d2541daf8ba629f0e7af6343d4fdb22657bdaaa1c56765e8fb716ab287bb5cf9b360988faeb451de6c6b378c47635435fd8802e7d9ae741e1d01976dd55c5a2067cc40ee10015f51704a1894ff039590944e815c66baf629e2780943e047174b0da231b5776a2865ddde292123d7c362f4945639b6dce0866e324d320817d2bc7cbcc490269235925", 0xa9}, {&(0x7f0000000480)="3e55e437ab24273b0e8ad91de5a4c45d075e5523fa509ab29834532b9cb91a1b1320871d836329d4ab1d21a4d156df0cda50e32fe1b7514de96f27292707e2baf61c11e0ebab09c4e83bfac3e8bf867ba1c485f85373dba43b5645b7a5160f9e5215ce7891c052456a", 0x69}, {&(0x7f0000000500)="3fa0aa3533fdeb5d473ed700aa5c718ed761a3e4e06b0ff1ad93256cd67d5c35be3b1dde26f22e5f77fd281ea606231025fcf491ce0c5c11838d67befb20bd64ca871179355fdbcded908364725f12b3dbe46c5e62dcb41aab7b174ddb1c414c3df8e7d70471c9c8204c635d1a272198f1f374bddefada6674f0d210e244efb5cf900883620f1e0fbac77e5f5021678868282be9f0e5083a2a600d51ed0a4a1d31eed54c2f2c6c1f39bb92", 0xab}, {&(0x7f00000005c0)="4d576ad96e613ccfad956018d3436b70ed382b29c7b73d2416a98002cc247dd681bb43d794904b2cc211c1f073be09ec3e410d510ab342f05d5154f312edb8d93b5963dae10a591b0922b6fc3749ac575db1449cceaa06694ff7c65b76ebb59e5867019056fcece0f82ae4a72dda639b5b133bfabd5ca9f49d7f17a357fa3f83492649753e08083442243913f92df9e054fb506ae94e4939b602b2", 0x9b}, {&(0x7f0000000780)="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", 0xfb}, {&(0x7f0000000880)="b835833e97fa1260093c6417b147c204db13dd7b62", 0x15}, {&(0x7f00000008c0)="ac6039f9fe8c44f7777d1971ab91564230ac7fe5754ed465582b8d6473798be413531756400a2c6d1a9d86d7a1abad45996da994a44d04053c74edb98c2c5d8dfb3e2dd565400d6ba0675b0deb3e2dc6e001e6f2d03389ce3c4b0b934f3d5a09aa7c960631a6c2c77feb80df3defdff2a84ca74014b84d4294166fa8c3c6db1e901ee913c9160c7125b689f9d44810ca519c", 0x92}], 0x7, &(0x7f0000000b00)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x4}}, @init={0x18, 0x84, 0x0, {0xc9ef, 0x61, 0x767, 0x6}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0xffffffad}}, @authinfo={0x18, 0x84, 0x6, {0x2}}, @sndinfo={0x20, 0x84, 0x2, {0x2, 0x2, 0x5, 0x7ff, r6}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x7, 0x20b, 0x5, 0x7, 0x6, 0x4, 0x497}}], 0xb0, 0x40081}, {&(0x7f0000000bc0)=@in6={0xa, 0x4e21, 0x9d6c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000c00)="dd6410da5a3b50c3d69e2c866969d25bfa67f5609f445388dd69510b051829891b66dff9a00541c8189476a590ad596d95d3f608718cdfa9b9a9b6f0148fd75c1d5215d6e6521fd3f7f958a75a5bbebfdefd8df91b074fea0202dcfd1e7c305f43112fa659ccbaa55a9dfbd40974790b6aa9fc406dfb84db46289d3461e3bc55cd0b1eb23dd290ec397584bebbb6733afb4acafddbcc4522185f1c7d9e1df169", 0xa0}], 0x1, &(0x7f0000000d40)=[@sndinfo={0x20, 0x84, 0x2, {0xabd, 0xa, 0x9b6, 0xfaf6}}, @init={0x18, 0x84, 0x0, {0x7, 0xffd9, 0x9, 0x7}}, @authinfo={0x18, 0x84, 0x6, {0x8}}, @authinfo={0x18, 0x84, 0x6, {0x6}}, @authinfo={0x18, 0x84, 0x6, {0x2}}, @init={0x18, 0x84, 0x0, {0x3798, 0xff, 0x2, 0xfff9}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x7fff}}], 0xb0, 0x40000}, {&(0x7f0000000e00)=@in6={0xa, 0x4e23, 0x0, @local, 0x3}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000e40)="79860766a115396629a58f5a9983e4ee3be9fe42f16ec75d2f79ab08d14a944c4f7114e0f1af7496e92c3326bf31904e0c78b89617326d6b9446770287c635d312ba4134b92f37e8a064a0a31852887ed0d3a8df10c9d5667293990ddba268b7f565cf653fa166954e018a3aa2367f4791edde2f63b569ce613640b731769266f32eaba68f2eb8a3c5a37d9dfa4367b937fbe8fc95a20fead59530e7e7eb880449a5b2752b487756d7b432b02cca360811e006e1faea33cecf9bc4c7", 0xbc}], 0x1, 0x0, 0x0, 0x44004}, {&(0x7f0000000f40)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000f80)="995ef62ddfff00962124772cf9296a0ff83aec9b880a83db262a54d88fc15e5d34b25839cf2246cc2b432a979bf8735be9a923df697dcec485cba0fad89d2cbe8a33cea531713b1cef46b667757f3603fc73527d3f2cd75b1a6a7357b2371d74358429bc1c923520a268e5b149a6450fe0a14a1a91b7a72ae49b22e87ec662e9a85d6ceb406837602796f2f3c88046f1509751de88591e66de8aa31d8588306f0f28fe3215c0a6f09dd19d2beb138ab394eaee41b1ffdd00bd8643199b3a6832fb234b19efa39e5ec3009370af51f88d9a6e37d1b04f4abca0d13dba", 0xdc}], 0x1, &(0x7f00000010c0)=[@authinfo={0x18, 0x84, 0x6, {0xbff}}, @dstaddrv6={0x20, 0x84, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}}], 0x38, 0x4014}, {&(0x7f0000001100)=@in={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000001380)=[{&(0x7f0000001140)="9af2883ac3434c7d24a9589ad89fd30db4c107", 0x13}, {&(0x7f0000001280)="9acde82fd71603bd6872acbc9c4591c4092af5d015520461b960e6972067153bbad5297f0455eba3d98d02b99b43ccafe3d771ec3ee2619da11588e484a80da60a80fdf5ada273c95d3e60f19929704c525fdfac388630a4b4159c9665ce9a64daec8dc019220874bd8afc83b099abd2e478f4ddda7ccb779db9ea6d7257433a35b8f69b04559f01b9dbf67a025812d2e51b4b7354f98a915904875cd0912e232a650fcea58ebc59f5920b555328cff8b050b78ddc9cf97273e6cf914e8db06d1ee6bbbcf61cc809ef90", 0xca}], 0x10000263, &(0x7f0000001540)=[@sndinfo={0x20, 0x84, 0x2, {0x9, 0x6, 0xb2b1, 0xd, r7}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x20}}, @authinfo={0x18, 0x84, 0x6, {0x3}}, @dstaddrv6={0x20, 0x84, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}, @init={0x18, 0x84, 0x0, {0x9, 0x9, 0x7f, 0x5}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x8005, 0xb, 0x3, r8}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x959d}}], 0xc0, 0x11}, {&(0x7f0000001600)=@in={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000001680)=[{&(0x7f0000001640)="7b81cb924cae1bf1ab35f54e56cae4f54eddc99680ab2debdf00edeb6ae4e5b433653928c111c231cb51a59e54", 0x2d}], 0x1, 0x0, 0x0, 0x81}], 0x6, 0x4001) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000011c0)=@newqdisc={0x88, 0x24, 0xd0f, 0x70bd2d, 0x3, {0x60, 0x0, 0x0, r10, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0x2, 0x9, 0x6, 0x9, 0x8, 0x9, 0xa, 0x6, 0x5, 0x2, 0x2, 0x4, 0x8, 0x2, 0x2, 0xf], 0x0, [0x0, 0x3, 0xd, 0x6, 0x5, 0xf, 0x7, 0x8, 0x2, 0xfb42, 0xc4b, 0x7ff, 0x9, 0x0, 0xb, 0x54], [0xfff9, 0x9, 0xffff, 0xff, 0x2, 0x9f1, 0x1, 0x3b27, 0x1, 0xd, 0x337, 0x5, 0x91b, 0x3, 0x20, 0x7]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000440)="89e7ee0c7cda99b4b47380c988ca4fbe5ffc018647dce212831f4717b411e6", 0x1f}], 0x1) write$dsp(r1, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000140)=ANY=[], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) r11 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) fallocate(r12, 0x0, 0x100, 0x2000402) lseek(r12, 0x1, 0x3) r13 = fcntl$dupfd(r12, 0x406, r11) write$tun(r13, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000180)={0x0, @reserved}) 12.56426416s ago: executing program 0 (id=1071): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_open_dev$evdev(0x0, 0x2, 0x862b01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1011, 0x0, 0x300, 0x0, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x8000000) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r5, 0x0, 0x10) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r6) fcntl$getownex(r2, 0x10, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="915045817a5d47e866d03462c62ee27c8775feb7a23e21442e265d68f92059ef4a71bff759a7f1249bff065adf852adcf70c3e177666d09ea951f20be14ed19a402dc1312f3c3dceea072923f163bcd4505e70e3be5b6ab9df9ad930dac06a5ccf2fbe827f2385562ea73db29fa492892c30aa8d6e8fdd0a6913946c1b90da9e7073ac28c79ccde801f77d7452f32a604a4e65d47c48c37cfd14668889d1"], 0x10}}, 0x0) 10.421568443s ago: executing program 2 (id=1079): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x240800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bridge_slave_0\x00', 0x8000}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x47, 0x0, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x410, 0x4, 0x401, 0x7, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070601030000000000000000010000000500010007000000a54cebfa95a0e9c041"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) 9.970499583s ago: executing program 4 (id=1082): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x2}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) pread64(r1, &(0x7f0000000300)=""/4092, 0xffc, 0x4) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 9.594260029s ago: executing program 4 (id=1083): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000100)='GPL\x00', 0x5, 0xc5, &(0x7f00000006c0)=""/197, 0x0, 0x5}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fanotify_mark(0xffffffffffffffff, 0x101, 0x8000011, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r3 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x40, 0x2, 0x235}) r4 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7543, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 9.556954812s ago: executing program 2 (id=1085): r0 = socket(0x26, 0x80002, 0x800000) socket$rxrpc(0x21, 0x2, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='cgroup\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8922, &(0x7f0000000280)={'dummy0\x00'}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000003300)={0xa0, 0x19, 0x2, {0x0, {0x8, 0x2, 0x7}, 0x100, 0x0, 0x0, 0x1, 0x5, 0x0, 0x400000000000000, 0xd, 0x40, 0x7, 0x1400000000000, 0x88, 0x8000, 0x4, 0x8e46, 0x8, 0x929, 0x1}}, 0xa0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r6, 0x80044dff, 0x1000000000000) socketpair$unix(0x1, 0x3, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d001080"], 0x184}}, 0x40000) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 8.782227552s ago: executing program 0 (id=1086): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x500000000000000, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 8.750008236s ago: executing program 0 (id=1087): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$uac2(0x5, 0xde, &(0x7f0000000e40)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x0, 0x4b4, 0x931f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x3, 0x1, 0x3, 0x180, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0x1, 0x33, 0x6}, [@feature_unit={0x7, 0x24, 0x6, 0x6, 0x6, [0x4]}, @input_terminal={0x10, 0x24, 0x2, 0x6, 0x203, 0x5, 0x0, 0x0, 0x7, 0x0, 0xfd, 0xad}, @feature_unit={0xd, 0x24, 0x6, 0x5, 0x6, [0x1, 0x2, 0x9, 0x2]}, @mixer_unit={0x6, 0x24, 0x4, 0x6, 0xe3, "10"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x0, 0x400, 0x7f}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7ff, 0x2, 0x0, 0x5}, @as_header={0x10, 0x24, 0x1, 0x5, 0x8, 0x3, 0x1002, 0x0, 0xff, 0x3}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x5, 0x3, 0x7, {0x8, 0x25, 0x1, 0x1, 0x3c, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x6, 0xb, 0x1, 0x2, 0x6, 0x5, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x4, 0x6, 0x81, {0x8, 0x25, 0x1, 0x2, 0x3c, 0xed, 0x5}}}}}}}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x300, 0x3, 0x10, 0x8, 0x20}, 0xf7, &(0x7f0000000480)={0x5, 0xf, 0xf7, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0xf7, 0x4, 0x0, 0xf000, 0x59, [0x17f00, 0x0, 0xffc0, 0x0]}, @generic={0xd6, 0x10, 0x4, "fa580f279bc35639357c84dcea535a043fa9a15cd29b67ea98627aad99d03f664a922837e37d3531a84cb0c28ad8faa41fd0d55116d6bc411a2243c4c1d97f6e2b2bde244ac5a2d2e5cbee644c80e7cd97e91835dfdae918f6012a5fa02bdc4c311c78d59488ae877317643c92a12fcce7fe0825494543d898cbbd0fc384e787f9d98c53745a3ad5692df84d257b4c04912471df3d39cf903eb36ea462f8e0c7d69d0cbae1e077aabb5a62eb31d7bcd3dafddb9532c90274cd40320b050b676019cdcb20bbd8bd69ef645c5626c80d9ca25e08"}]}, 0x5, [{0x100, &(0x7f0000000580)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x1889}}, {0xfa, &(0x7f0000000800)=@string={0xfa, 0x3, "316de82670c18e7a3ae47fddef4efb3b2459bf6b3ab73530f60f9fe5360d38e43154da28fa35c698ec3374bd82fc0945f9e3c7e45ae3b67d45bad0d28a7b8393ed3cd377c6c6e9d7649f45eb933eecd894f179c6c7cd5fda791776565ea5be10d562f0ed5d443b6df6019ea49d069279bc2c4a933c120d1bd9320ccc77dcdb7755d4103f5d8e6843860318be23050cb3a68840686c7276bce461b1cf47711b5066da7df6fc95b2bbf0957fe593aa602138c2051093f234b5572fe75ef2387fb2b179d325cb0835be38058773528fd71926b3d99b555e19c4d3fb66bafe41aab6b0f33e4e546956f1042bde93d5e85e70db69ce1e3f3c5903"}}]}) syz_usb_ep_write(r0, 0x40, 0x35, &(0x7f0000000980)="0f2079b85a38842644b82b539479bcc7133b888d61fbf602af5eb7ec8a430f14f4f83d3ae2ce4f12b83f25e2467ace9a4490ad0d14") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffe, 0x0, 0x1, 0x0) r1 = getpid() syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) move_pages(r1, 0x7, &(0x7f0000000000)=[&(0x7f000015a000/0x1000)=nil, &(0x7f00000e3000/0x3000)=nil, &(0x7f0000990000/0x2000)=nil, &(0x7f0000729000/0x1000)=nil, &(0x7f0000a4c000/0x1000)=nil, &(0x7f00004f7000/0x2000)=nil, &(0x7f0000845000/0x2000)=nil], &(0x7f0000000080)=[0x3, 0x7, 0x5, 0xfff, 0x3, 0x8, 0x8, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000009c0)=@nat={'nat\x00', 0x1b, 0x5, 0x3f0, 0x190, 0xe8, 0xffffffff, 0x260, 0x260, 0x358, 0x358, 0xffffffff, 0x358, 0x358, 0x5, &(0x7f0000000200), {[{{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @gre_key=0x7a3a, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x4, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0xf0}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x2, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast2, @port=0x4e20, @gre_key=0x9}}}}, {{@ip={@empty, @broadcast, 0xff000000, 0x0, 'xfrm0\x00', 'ipvlan0\x00', {0xff}, {}, 0x6c, 0x3, 0x2e}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "0bfc"}}, @common=@inet=@set2={{0x28}, {{0x3, 0x6, 0x2}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x10, @rand_addr=0x64010100, @multicast2, @icmp_id=0x67, @icmp_id=0x65}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x4, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f00000005c0)='GPL\x00'}, 0x94) r4 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000000)={0xa0000001}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r3], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 8.536065484s ago: executing program 2 (id=1090): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000005c0)={0x0, 0x0, 0x800, 0x1}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f00000009c0)={0x2, 0x2, @start={r2, 0x1, "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", "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"}, [0x9, 0x5, 0x9, 0xa, 0x1, 0xffffffffffffffff, 0x5, 0x100000000, 0xb, 0x60, 0x6, 0x5, 0x7, 0x9, 0xdd, 0x7fffffffffffffff, 0xa02, 0x5, 0x100000001, 0x3ff, 0x9, 0x6, 0x7ff, 0x200, 0x1, 0x100, 0x2, 0x7, 0x3, 0xa7, 0x23a1, 0x6, 0x9, 0x8000000000000001, 0x2, 0x0, 0x0, 0x9, 0xffffffff, 0x80000001, 0xe, 0x8, 0x7, 0x5, 0x1ff, 0x6, 0x62, 0xfff, 0x100, 0x6d8, 0x6, 0xb83, 0x9, 0x2, 0x6, 0x3, 0xda6, 0x2, 0x10000, 0xf2, 0x5, 0x9, 0x8, 0x3]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000300)={0x14, &(0x7f0000000140)={0x20, 0x6, 0xb2, {0xb2, 0xc, "c42653da35075b33d4da59ff1a5898175037bc49921aedb97206699c9f04f5726fe93a943b015b5d2161c8307e56c6d018fdc2a696743214e439feaf140b04f1a0025062c7935c37fbfd1f1e52aebb281ec82e7f79cd45e53f56699b54813608fc2b941859d38667ec032f34bc7b5955ad092be3eeeaf33d6b25219b904731137f294ecf30a12fb462064ea471580b6548237b527f4bffcfab87c27d35e7b355c263991424bf262659a0ff9c80a6b6cf"}}, &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001400)={0xffffffffffffff21, &(0x7f0000000340)={0x40, 0x13, 0x15, "92ed7245550232d2696b855e52f1ed4ca3fda24b34"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0x800, 0x74, 0x9, 0x0, 0x5, 0xf, 0x8, 0x8b, 0x2, 0x4, 0x6, 0x7f}}, &(0x7f0000000480)={0x20, 0x85, 0x4, 0x6}, &(0x7f00000004c0)={0x20, 0x83, 0x2}, &(0x7f0000000500)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000540)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="000e2d0000007155d0"], 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$uac1(0x2, 0xbe, &(0x7f0000001540)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x4b4, 0x384, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xac, 0x3, 0x1, 0x1, 0x58, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x13}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x100, 0x1, 0x4, 0xde}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x101, 0x0, 0x5, "a5"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x17, 0x76, 0x23, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x4, 0x97, 0x6, {0x7, 0x25, 0x1, 0x4, 0x2, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x2, 0x0, 0x3, "c3ace2678dfd02"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xe, 0x4, 0xb, 0x7, "", '@:'}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x60, 0x4, 0x6, 0x2, "ab", "eb1190"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x80c, 0x4, 0x1, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xed, 0x1, 0x1, {0x7, 0x25, 0x1, 0x0, 0x2, 0x7}}}}}}}}]}}, &(0x7f0000001800)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x250, 0x81, 0x5, 0x65, 0x40, 0x9}, 0x124, &(0x7f0000001640)={0x5, 0xf, 0x124, 0x6, [@generic={0xba, 0x10, 0xa, "1ed06f554928047d7ac6fab29fb674868ebfbd67b850b7bb343f3a496f12f03b5e479f2918c4091f6641fa4a4b20e316318a0bd108333a53066368e77e565e2624d43a74a15769ed468cd24be3976e9dc8ced52e364982ce5b50b61c4c7b2faa05e0d22e6bd5734124e60a4ca3acc67cb2bb6add5b9ec914d40bd1fd340067c672b869cf3b885c45c5df176d43e599bf2e4aee3e5e6e1116506c9d2a75f84a1a78ae63b35d5a39ddeec918206759efcf8f83c878903e49"}, @generic={0x49, 0x10, 0x4, "a4cec36d964fe764bb5ec587f3deb6d8cac06701b786ccee37278619d73e8a81f1cdf6aa9c57cee6e1b914356b0b72c7ae100752c9d7f003e2e0811bdd0621e55055562e97a7"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x42, 0x6e, 0xdb, 0xe, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x3, 0x3, 0x8000}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x40b}}]}) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x8, 0x800, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) preadv(r3, &(0x7f0000004e00)=[{&(0x7f0000001480)=""/186, 0xba}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/123, 0x7b}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/171, 0xab}, {&(0x7f0000003bc0)=""/156, 0x9c}, {&(0x7f0000003c80)=""/23, 0x17}, {&(0x7f0000003cc0)=""/12, 0xc}, {&(0x7f0000003d00)=""/249, 0xf9}, {&(0x7f0000003e00)=""/4096, 0x1000}], 0xa, 0x10000, 0x81) 7.466304013s ago: executing program 3 (id=1094): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) listen(r2, 0xffff0001) sendmsg$NFULNL_MSG_CONFIG(r2, 0x0, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) fadvise64(r2, 0x13e8000000000000, 0x7, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a0901000000000000000000000000140000"], 0xd4}}, 0x8818) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) nanosleep(&(0x7f0000000080)={0x0, 0x3938700}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@gettaction={0x14, 0x32, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x10040000) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) writev(r3, 0x0, 0x0) 6.40818288s ago: executing program 4 (id=1097): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7']) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) setrlimit(0x5, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$inet(0x2, 0x4, 0x403) getsockopt$inet_opts(r1, 0x0, 0x33, 0x0, &(0x7f0000000180)) (async) socket$kcm(0x10, 0x2, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500002800000000000190780a010102ac1414aa04009078010000004500000000000000001100000800000000000000"], 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a0400", 0x14}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10) (async) openat$panthor(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000002080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002f80)={0x200000, 0x80, 0x1e}, 0x18) mkdirat(r2, &(0x7f0000002fc0)='./file0\x00', 0x35) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000400)=@nfc={0x27, 0x0, 0x0, 0x7}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000004040)=ANY=[@ANYBLOB="056ac5a63158fb516e8dd479d678d20273d817d7c231297455e660d6b9cc2b14266dd15a31c9f36f4fe6913293c011f0e25fb602f8303325c455251707a12c228cfb3484b05f5b3c3cccaeb0c08e44b8878085aba1c7cdd7bc5e0f52cbee837f185562783e8455d48e3edbfbb121e545749c9ac7cdba3c6970b24dec266b3204ba9705479e4adf4a08566d70b49c90daf1f3642c7d2edc32ba86a968f0882cb118136ad04b72cde5e552fceb7802c8d3525ef0a28cd949769fb8449f3363255d9e1623152e0298cddd2c2ae844e6e9dee51ad65bf2d9daf854827b888fbeec865a7db30deb50604c7b57a80865850b23d162084b9ebc060d43ab826e7f4dc303e141921125aff27c2ad5ce6891a56a7ada65cdc6f0f8f84b9b9c7b88c7317c0717cf84010ad7bf4c793b69f832fbaa96fe2ecb78fcd9fb7757c41298c39a4e0a21ab4bd7f30f2ed34b82855b4ca61feed5f0734055a31005e29fc4d8c902dd4eb219693b2ea7114ef619b83011b952a38673833fc60030aaae94bbcaca4bf36de91ba1455dc22c3ff4f79aca0d996ab9b7cea43c73dff5ebf037870a51b2408355f63417a8e0e5a89c4402cbb3f76690d00d531eac44a7d7b682bee7226f0ff93aebdf3a6bb4b58ae80cde0060fe1ee21d571355386b0689f503507301b09b877c19d8f656889aefbc071f10cacde3863a797f8f7b749a27f0d7e3037f43494aad63967b5571480c33b23245baf1c8359e96f84618881f199aeee35eee261a7133acc038556638c92bc13cfe4525bf02c159e68f9d470ec26fce1fed2f3ff6364526697e9cecf39ca663f9628b6738c0a8a994b0614f97ef6678a6d493d0f225599a97a49850f47f92b7199b519c045127caf12c6d581b663457f071fd3dce791158ceb409ba707f913fc74f8adc3cd6cca01e9a7591e7f0951a0ea26b3abbf7b5ec52549bce1b32b79ee84798966ac704daa1d5de76b8a106ac96cdba36767fe5338692a302183615917e6f0807b48395d4b2acf4a71d253d36f8056c9303d97a229eb29f17b50ee06273050f928b8d7be046552532bb557565700f99f77efb99a549cb02495a807aecc25b0648179ca89e0623549fe8e7c4775165a9e04e674cc1ac2749b155fc46c5d72744d804ff8c0a07b212305f8d4ca74acbbc32ac197f7566d2dffe938a1917d684723a62c8984e71073aa3fa374829d279af4f6a19023bbaba6053ccc2c535e03779fe4bcd8a2661879d909c901c0e3fe0cccda31b20accbfb032ca595a29e4f226da8d3cca8dcd0ca8e0431c743a4d88be9d8e65e81187712a9a36433721a755b498a2890e8292ca7f8acd4fed17b77b24a76e51ce06e15d07cefc4aebbbfdda8870ddafdf269724c92d3adc6cbd15b48bbfc759e9f3719106f20e7121dd800069ed74cbaa71e5e11919502a545676cc5b74f15e183aff7ee360bda57997731230700874f09edc4f60faa20100238d3e5cb1541528788d871d70a2ad1f4a378b264c8c26bbe5f16e4924f3a4b009638d8d8e05f801864005e3bac1f1b946bb81499a0b8e692ff05e24679258361fd1b56c8bc85102b2fcac77883b02de97a6e8c6b788408affa81d3427f6d67b0a993cf5d946f7e7a4b5fb6eed65ac851590d84058bd06574073b684312ef1463c28c7f6163de19f3115b6db681a1d72a3d0663f222988e0716c8d9614093caab18ef082c3caf822b7fcec5f8ed2c66b5ea17c84e4ec70ce6d29a82289856f905ac30dae55586eb56c11e7c0602533f059220e624f8d2423fbed18fa157107c2d2c7a6b4059cf02a6f973fae0adc7b9442eaf045b22171abb2585d665eeade1043045eb5a7e7f6d828f7f67f927e036a280a8dced8098d7263935cd18f52f6707eda8e54567a13d8e5d11b6fb475d1aad749b486a646edb605eba2691f6029480047b510b189c528cdcca072ca0f99f702459219edf582daf31531f66606b74a43be0186cb9dfd0ca5b21ca84987cb32c88d0d8a76293fb8982fe71e64e63a66f9c25c9b6b1a450dadbd91a66d69c092c3946febac42b776764189511b1b8e900fdb6b6b35d3c9bcac2d1282c2e0259ff8c50690777093aa98c076c55947d4875f4cbe396f169e8b8b2ce9dafcd2df99855ce9e82b9222ec8278bad8037c996e3de1e0abe0b57545ab7d07b33058a8396a387c4f669eab72bd3a16ba6b4ac9935bbe0f97b413ff888d1f602c52a9d68a0e1d9ccf8357b72d6f5dc113ba6eeab08fec964d8631e370e404aa4ed00084d3f08f346bc9221485bed6ea34bfdeca382193953988045f18b584df0316b4e9b0cb12882519267a54050d3dab14cb1fcd744092437df32dfb688a32a2990325f171ded44e02e259e30e040b31abee37d496560a9b907e2ac6089e0391d0669f81227b0be6a6f98374fe0be20948b5afd06478f0ebb3fd557a7312b9118c1dea2646f89212e3765eb954c9513a89995b302935baefd76f683850843f642b05ccea18279d06f6656def0f41b11af9fe290bb24d4300260d2153f2494422f210ef4d3ea41102c579a5e6b239032bcc7d0369b86acb400a5ec1637fa989959d21b62844c832e47434d26ca22541f9a1c23a214d1bbbf227f21d133f571e2148ee5f43e28e4ee5caba55ef5e0d0ebfcfe7c3579ba7434a08c94c842cfe74f5113b731d1321e9575af9a0117102eb3dfde4d52cb529d8300d1ffe935bfb7cc029183537d8020f7a4d0b65919eb55bb2058f7394cc00233ac816cb4fb42973bfb77d990f1e5adcb0d27e2430b1baf712f1f9aeafc8d79bcd606c224131ae7eac18e2bcb2160692dee136d8489fa5091f2843683dd4587f5db0e082f47b71719ac254dc23bd36c031090727f0583792a44a657cc6bc64c308114b631bac90e82e84ba80fc902228ef52ed73a7a58b9a6f3e80b0ff18aa0f46d68f264203c4cbd60bf20d0c2ebefb32b0adf95a33f66ee2ed61b90574f301a1fb12b06d898bf04edc815bcf8e3703d7844adeaf8bea3f219de25c9d25c32a2f9b3000015c65b03f0868113d8017e6a9e8a43c09ce33b8e03fdacedecb12b99d6b4a823d20d12f4dd7c47ee34a51e96b87c43d6df11d1f372f03d8c5147e4f95ac307c599639042bb28a636424006bfc5cdcac7a16ae5e238e81b5baa2b39464b53196e9c580ce1dd7dbba79b2510ca4e3dab0274e6f59937728a030f2b84a10d20f2230d2c25792124e34ea1cb89682401ac3810876a31d790a296279c7c250af33dd309e6bc9730ae9e69f41b85b69f194b061178eaa30e4249af565911ddcecb857e6ca5e9d268d28a707e7baccf2cd35488b1b650f457f57222631d99ec29228d659ee636a99f8aa5bd12d01f9f8076901cfaf4aa6fa3cf58d1e0cd14729e4b5aed0e8d01d21428d3f9b3146d5efa93126b23a6f817cac0bc1d9985b67e108ba17bba347d94601f5f313a70df73dc24db7245262dad10011f5cbfef644015da4e76cc50f3e68258e47bb4363541a4ff21fda5694e8c41385d20f0b675a64b5a960d9789b937f6f019ed8dc9c1aff5e654317fcb0bebbf2bd087f939a8109c4e27e1c22cb3f72bbbc608832f222971c4790c0e62e845d2195e2f0ea3fe36ea90b5a77ba7c366a9b021947cd4678a4ded3748eeb958ecb7cb989bf66dd75bbc623e5e21f962ab31390d6a0fc087fff13b500f79bd37dc569e5668b5067088dd35039b3fc8cffc1aa4b7aef6d020aa7d9ca193e817117a4ff65710845f00a1b337a84ae5097692bb4cde22d4025b09a17686d446c734f4ba1f38c5845409dac7ecf833a76f6358d6eb917f098938e188f02044ba2123ab6a7cafb6806a8aff25082bb30b052a1a7526bd173f2f2ddc85c2c446356f420dc4a721b6d7e7d92ff5a50037c4016d3f13c34b36216e2113318f1a32f1d217bd34a3dd059eb96297649d09263e92bfe9680619042c18cf618ddf2406f2931f25e76847185068287cec798a13709fa5a46d7950a06f1462c403b5585711618afc4ec50cccbfb51bb3de675bd3a1fb9a3569727334c0073826986864b2451693991ebb3c1c9594619520e45e5d3b9e36590039edf7343f6e9589896e1423a9faa78dbd3bdf4b73f62b9dba6faa7aa4ae4129ed5f4b2b0915a0bbfe3dbac2d0ac84d504fb357be5e02ad526f4f27a2f9a9cc7458fb640302435ae1b74a9e9f764bb4e490ef49ca37662041655be2bf0cac2361039c287a00a0b76b52426a7b574cee9cef89de454a2cc28dfb0d2d43641563698a1d5cb4446d3c2071123ddbc193800d0e1e5bbd8ed329ed20ad5676e6778dc94d417757e2d3fbc3f104f4d6b3fd0ea8762d9f49058e43bdb56f156e679a17ecbe3fb4e85a9cd7c0e77307dbf2be6dcca994057e4bbad1e9ac2efe0cb9880ec67b29a958064109a3298da9fade659603afa6c6e6818d474c04926def80dbe55e4c4c04cb8bdd3599af06dbf23e309725f69fb9a327559253f31e9bbe610a358ae51b7b4b2fe4318d5025e64d291660dc28856b80364d103f95d5fb4257bddbee26e0bf603e5d26525366dafb10cf13b1dae45bdb1b8016ab2b7b471b9f47e5f06f804c5bd4ef3fea5aa3ed63c6b19b88d20be218841be421f000a301e472f1ac8f0cca0405e4342aeb3f69a092bfc766e5d252ad41f0dc0bb3bb8934115f023914feb6ff3b97623bf16c5f68a1ad2f48c4b5482ff7e5248e7f21c547886b5f7a89fa209226ddda700228b6099f33e49a082bbe327b59f727c453b31eafe3eaa2801bbaf79f8ec3c38cdb3c2f789cd23ca6d5153f818c9aea459d66c5e964f607a3f26843dcaa5b399c63bbafe1ef4269cfc14287435aa4ce4ae600c64c75082c2ffd910fdf7790e7d96434a46e25e68647a106dcf66dcaa74a8a45afe07fad880f6495df12afd3967aca37547bf9999fbff04a0589806b6c482710be60b0d2b2814e2842c46428bd9c6db5e6c60813c9be64377bbe8ebae6e5024e3857e940718d84cc73729fdbc80d9c3dadca31c3316fe6cb2816a336a37a12e2634a5f24206259e554f0ace28356425b0f8fc64393186ec8ee555bd8d787e41b5c04d50e22e4fd3f48c0bf5086d0d9ad1c9467083ef4583f6abee96bd58d2f7c2a1ef2ad7ea764d0029fa78a784a022f74a22ff0e8b0ebc939dab97be470e342229706562f7e2e2d08137d408bff3a642ac2f81d6c35333b7dd220681098a1d22349f9dc00a984b9ad242b2b8c3142b1f384ba41b1c0357becbab1513d06d760ee2c6cfc51aff0f91d2e0000e434f475141586835d2ec64b276c59fbd838e8a9c8205147e5ebb4cbd5d2bf2a0a7324295efef7e6c9423af15f9856c81bdc281c16e0fb82f8d529af675ff01c0b1cdb4f674eb8b56906e914f2c082cf71adf8de856ba61ffa221f56f9753d058a0a550df3226e110f04be2500e507580e0e9d6dea5765c6b31364ba9ddd8546337b7557e21da06dd02ec715b364a4d1409773db819f9613874bce5c454ef3145714e6c00ed9e6698350fa1211f36bb33e23c34640d3a46915e777db04d13ce57d50c04bf3cfb64f2ae4c64e24ed480bcfbdb481fc861262975665c5524bbca06a395ebb61573e93d43c57b724f72b52ffdfe45151e77f6cc1cd7b3d0b7b7e84ee0842f6e97b0ea99326c5307a99b8ea46719bba6e790b8e274f971a27c1b793884bf4989bb772cb17a72e4c1f20877d64f073fa75c4072416c6e34ad0c7393ea17000dc7a4cc781daa9dc0695c51aa76695527b2fe6fc40b4dd9cc82792a4294a3be54d5a8f0545cffa7c24d079d0a95db12b0", @ANYRESHEX=r1, @ANYRESHEX=r1], 0xfe1b) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) (async) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, 0x0}, 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000171401"], 0x28}, 0x1, 0x0, 0x0, 0x240440c5}, 0x8054) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000240)) (async) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xee00, 0x1000) 5.766636633s ago: executing program 4 (id=1098): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x2000000000000210, &(0x7f0000000240)=[{0x1, 0x3, 0x0, 0x8804}, {0xfff, 0x9, 0xb, 0x80000001}, {0x7, 0x1, 0x56, 0x4}, {0x4, 0x8, 0x7, 0xa44}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='cgroup\x00') ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r0], 0x0, 0x37}, 0x28) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004040}, 0x801) socket$netlink(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) kexec_load(0xd0ffbf, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0xbfffd000, 0x10000}, {0x0, 0x0, 0x3e4000}], 0x0) 5.229493066s ago: executing program 3 (id=1099): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00'}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) recvmmsg(r1, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0x88b1}], 0x1, 0x40000120, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="180300000000000000000000000000008510000006000000180000000000000000000000000000006500fdff00000000180000000000000000000000000000009500000064030000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)={0x14, 0x0, 0x5, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000089c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000008c00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r6, &(0x7f0000018c80)={0x0, 0x0, &(0x7f0000018c40)={&(0x7f000000b640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002cbd700009dbdf256900000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x925}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f80)={&(0x7f0000001340)=ANY=[@ANYBLOB="03010000", @ANYRES16=r5, @ANYBLOB="6cf825758287015d586e33000000080003007e0e003c0d4823da79cb8d577af60a82e9b213f1", @ANYRES32=r8, @ANYBLOB="0c009900040000000c00000019005b004046800aeec0b5149a6c80af3353a11d71e8e261cc00000093005b007aba716bebf6049c59a3356bd7baf188171835be52191cf7db02128b04b1e33d85270a9ab0966ae2cf2fc804ddb655427fd6fccd896fc8cef19b224fcc29e9693343c649acbeb634f3413765d37a7b175196fd6204abe07a92accaf8d476d4f5f60b077c6ad3903b069eac79dfe54a9423dfde8a5f388375499aacd2a44b3d226aab3eebfe19d6690d61b5775e569c00aa005b00533c1fba84b34b934902b3f0a82e5bcbe31f578ea172b3da754cb3e45f97e3a106977fb1f3e18d90b39359b3d6f6cfaa59471a8594e4861abb8ecb3d2c306d976c398f4db2e7d1ca0f589d9b6139470d9e09a7ba2938b4c8566178b97f6b81e24e0fbc3b31de599d524df0945c1f777ad435d3699c847c94a5bc6dfa64c2de6883a88f6715359ec7a5a664cd7f283177f4dc2f8a5cf2fe8d6fcc24c57513410db0f4bc225242000006006500ff7f0000"], 0x18c}}, 0x44801) write$bt_hci(r1, &(0x7f0000000200)=ANY=[], 0x6) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES16=r1, @ANYRESHEX, @ANYBLOB="df9a1a6438ff6341bf6b05ddabc7a2e8c9977d8d63dcc101546fd841e3a3731fabb21fe0fc7a9cae74cf5267d515ad8c3288d1c9621d842429f0f2c8a084a83023d0e9fda9d9073d6bf4585f9644dc0962935c43a9a8e4f0a91a8d8e", @ANYRES8=r3], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x24004450) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r12, @ANYRES32=r2, @ANYRES8=r9], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r12}, &(0x7f00000006c0), &(0x7f0000000700)=r11}, 0x20) fadvise64(r10, 0xfffffffffffffffc, 0xd0, 0x6) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a31"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 5.019423584s ago: executing program 1 (id=1100): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) dup(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000702, 0x0, 0x0, 0x0) getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x3, &(0x7f0000000040)) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x1, 0x3, 0x0) bind$unix(r6, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000000c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x18, 0x64001}}], 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x20, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}]}, 0x20}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r7, 0x0, 0x88000cc, 0x0) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) capset(&(0x7f0000000080)={0x20071026}, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000140)={[{@grpquota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]}) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.986738136s ago: executing program 3 (id=1101): r0 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000040100000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, 0x0, &(0x7f0000001d40)=r3}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000efa4d5fe0fea874138c1961bf32a668cb2ffffff0000000000000000000000002000", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f00000001c0), &(0x7f0000000080)=r2}, 0x20) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x1, 0x0, 0x0, 0x2, 0x3}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0xcbb6, 0x218203) ioctl$USBDEVFS_CLAIM_PORT(r7, 0x80045518, &(0x7f0000000040)=0xee6e) r8 = fsmount(r6, 0x0, 0x1) fchdir(r8) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) syz_emit_ethernet(0x3e, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000070000000000020000000000000600000000060015000100000018001680140001"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 4.794783205s ago: executing program 4 (id=1102): bind$inet(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x720, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000108117980800000000000109024100010000000009040000020308000009210000010122290a09", @ANYRES64], 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x12) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x80010, r2, 0x99871000) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000340)={0xe939, r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r6}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000004, 0x4008011, r0, 0x100000000) r7 = creat(0x0, 0x12e) close(r7) r8 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_SET_FILTER(r8, 0x403c6f2b, &(0x7f0000000040)={0x5, {"4e068be8035430cf8aa115d0d8d0f21c", "af86a7d62fdce0b68c2a7502b5b00c9f", "faef725a066e767106fa1a96391039d1"}, 0xe, 0x5}) r9 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r9, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x1, 0x3, 0x13, 0x4}) 3.818650308s ago: executing program 1 (id=1103): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x240800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bridge_slave_0\x00', 0x8000}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x47, 0x0, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x410, 0x4, 0x401, 0x7, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070601030000000000000000010000000500010007000000a54cebfa95a0e9c041"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) 3.425816178s ago: executing program 3 (id=1104): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40100) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x0, 0x1, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffeff9, 0x0, 0x3, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a64000000060a0b04000000000000000002000000380004803400018009000100686173680000000024000280080002400000000f080001400000000c08080440ffff800208000340000000120900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca02}) r8 = socket$netlink(0x10, 0x3, 0x0) preadv(r6, &(0x7f0000000300), 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000640)=""/13, 0x2}, 0x20) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r4, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610418000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x5) 3.322320462s ago: executing program 0 (id=1105): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x40}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002173b57404505808001000102030109021200010900109f09f9bc000000000000"], 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) 3.03313837s ago: executing program 2 (id=1106): setresgid(0xee00, 0xee01, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) setgroups(0x0, 0x0) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa00000000200000000000000084000000080000002001000000000000000000000000000003000000000000008400000008000000000000000000008362ce02fe56ce0000"], 0x58, 0x4855}, 0x24000052) setuid(0xee00) shmget$private(0x0, 0x4000, 0x300, &(0x7f0000007000/0x4000)=nil) 2.919206312s ago: executing program 2 (id=1107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_pidfd_open(0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) ptrace$cont(0x11, 0x0, 0x0, 0xffffffff) sendmmsg$inet_sctp(r2, &(0x7f0000002240), 0x0, 0x240000c0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000fddbdf27170000002c0030801400018008000100010000000500020003000000140004004260c4005074316d3bb1f8cbd5f38f6c08000300", @ANYRES32=r3, @ANYBLOB="9a41fb7bdf290dd88b48996abdc459c4d258d76f5ab3"], 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0x200440c4) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000480)=""/115, &(0x7f0000000580)=0x73) 1.924834176s ago: executing program 1 (id=1108): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x300, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 804.407002ms ago: executing program 4 (id=1109): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xa, 0x0, &(0x7f00000001c0)) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) mknod(&(0x7f0000000080)='./file0\x00', 0x2, 0x4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r3 = fsopen(&(0x7f0000000200)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000480)='=0\xf9xe ^\xf6\x88dg\x9f\xe8\b\x00\xec\"\x15\xed*!\xbb\xbao\x97\xd6$-\f,&\xbd\x85\xadJ\xc7\x9b<\x84%\x9c+\xf2\xb2\xd0[\x05\x9b\xb5O?\xadH\xff\xd3\x8c\xffR55\xc8i@\xb0\x10\xd6\xc4\xf4\xadF\xc4\xae\x9bg\xb2\x04XV\xce\xa5\xe5\xfb\xed\xb3DD?E\x84k\xc4/\xb0j\xfa\xf0\x13\x8b\xfa\x8b\xad\x8d\x89/dS\x11\xacF\x19\xac\xc35\x92&\xc9\xc6U\xe2\x9b\x83\xd4\x15V7\x99!qn\xb0\xb8\xd1\x1f\x0e\xc2g\x1e_)#N.f\xa9H?\xe4\x80C\x00\x9c\xba\vb\x95\xf8\xae\xf6z\xfe\xd3\x9d\x83\xc8\xc3\x01', &(0x7f0000000800)='//\xf2/\x06\b/?\\o\xdc\xea\x95\x9a\\\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cq\xe04\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}, &(0x7f0000000580)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=@getchain={0x4c, 0x66, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x6, 0xffe6}, {0x7, 0xf}, {0x3, 0x3}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xf2}, {0x8, 0xb, 0x400}, {0x8, 0xb, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x15}, 0x4094) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x1000000, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 710.673813ms ago: executing program 1 (id=1110): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x81}, 0x80) r2 = dup3(r0, r1, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 637.750644ms ago: executing program 1 (id=1111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00'}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) recvmmsg(r1, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0x88b1}], 0x1, 0x40000120, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="180300000000000000000000000000008510000006000000180000000000000000000000000000006500fdff00000000180000000000000000000000000000009500000064030000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)={0x14, 0x0, 0x5, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000089c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000008c00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r6, &(0x7f0000018c80)={0x0, 0x0, &(0x7f0000018c40)={&(0x7f000000b640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002cbd700009dbdf256900000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x925}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f80)={&(0x7f0000001340)=ANY=[@ANYBLOB="03010000", @ANYRES16=r5, @ANYBLOB="6cf825758287015d586e33000000080003007e0e003c0d4823da79cb8d577af60a82e9b213f1", @ANYRES32=r8, @ANYBLOB="0c009900040000000c00000019005b004046800aeec0b5149a6c80af3353a11d71e8e261cc00000093005b007aba716bebf6049c59a3356bd7baf188171835be52191cf7db02128b04b1e33d85270a9ab0966ae2cf2fc804ddb655427fd6fccd896fc8cef19b224fcc29e9693343c649acbeb634f3413765d37a7b175196fd6204abe07a92accaf8d476d4f5f60b077c6ad3903b069eac79dfe54a9423dfde8a5f388375499aacd2a44b3d226aab3eebfe19d6690d61b5775e569c00aa005b00533c1fba84b34b934902b3f0a82e5bcbe31f578ea172b3da754cb3e45f97e3a106977fb1f3e18d90b39359b3d6f6cfaa59471a8594e4861abb8ecb3d2c306d976c398f4db2e7d1ca0f589d9b6139470d9e09a7ba2938b4c8566178b97f6b81e24e0fbc3b31de599d524df0945c1f777ad435d3699c847c94a5bc6dfa64c2de6883a88f6715359ec7a5a664cd7f283177f4dc2f8a5cf2fe8d6fcc24c57513410db0f4bc225242000006006500ff7f0000"], 0x18c}}, 0x44801) write$bt_hci(r1, &(0x7f0000000200)=ANY=[], 0x6) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES16=r1, @ANYRESHEX, @ANYBLOB="df9a1a6438ff6341bf6b05ddabc7a2e8c9977d8d63dcc101546fd841e3a3731fabb21fe0fc7a9cae74cf5267d515ad8c3288d1c9621d842429f0f2c8a084a83023d0e9fda9d9073d6bf4585f9644dc0962935c43a9a8e4f0a91a8d8e", @ANYRES8=r3], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x24004450) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r12, @ANYRES32=r2, @ANYRES8=r9], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r12}, &(0x7f00000006c0), &(0x7f0000000700)=r11}, 0x20) fadvise64(r10, 0xfffffffffffffffc, 0xd0, 0x6) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a31"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 454.630296ms ago: executing program 1 (id=1112): r0 = syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]}, &(0x7f0000000680)={0x44, &(0x7f0000000480)={0x40, 0x9}, 0x0, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xfc}, 0x0, &(0x7f0000000700)={0x20, 0x82, 0x1, "88"}, &(0x7f00000005c0)={0x20, 0x83, 0x2, "eac9"}, &(0x7f0000000600)={0x20, 0x84, 0x3, "a3bdac"}, &(0x7f0000000640)={0x20, 0x85, 0x3, "ef7b19"}}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x24000000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x10117, 0xfbfffffe, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3ee0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="40010000010101030000000000000000000000042c0019"], 0x140}, 0x1, 0x0, 0x0, 0x2004d0c2}, 0x4040000) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_getnexthop={0x34, 0x6a, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) syz_open_procfs(0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000000140)=""/210) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={&(0x7f00000007c0)="6de89221c92a2e7fb880984e93258e9973a15d63310e4a9ff0676787d8b132f15052cd0da0eae448c789b69af45f9beeeec0940126c52bbdbe439b8cf1621eeb5d4284408262a6d45a916fc00f34da22c241b0336bc5e0001bc7862a8d3a510b03bdfbe3", &(0x7f0000000840)="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"}}, &(0x7f0000000300)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020400) 394.145638ms ago: executing program 3 (id=1113): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) fremovexattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00basic\x00']) pipe2(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x80000000000) socket(0x10, 0xa, 0xd0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x7, 0x1, 0x503, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000041}, 0x44000) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x68, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xb, 0x7}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffe}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0}}}, @TCA_EM_META_RVALUE={0x9, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="b1"]}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 48.324561ms ago: executing program 2 (id=1114): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x4049}, {r1, 0x12}, {r1, 0x1401}], 0x3, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={[0x5]}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000702, 0x0, 0x0, 0x0) getpid() r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x38, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x38}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r1, 0x0, r7, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r2, 0x407, 0x100004) write$eventfd(r2, &(0x7f0000000240), 0xffffff14) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000d40)={0x48, 0x4, 0x0, 0x0, 0x1, &(0x7f0000000000)='k', 0x1}) 0s ago: executing program 3 (id=1115): r0 = socket(0x2b, 0x2, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="8c508026bc6ce4971c2ca61f9bcd3a22fac5e6cb94aad48dae76a51cc9dbf68b17eb0cc7f88b0e670b41ee4f5d8f5841f932105f859fd4e30312b69b23f2e8525f83a55311dc22c086283515343674a38e7acb9f65b9f6ec95a7efafe5ea018212b4bfb8602dd42fc98a7175040e860033bffe34875b2a5dee225601c1128efba1b1cfac", 0x84) (async) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a80)={&(0x7f0000000100)={0x964, 0x1, 0x5, 0x500, 0x0, 0x0, {0x7, 0x0, 0x6}, [{{0x254, 0x1, {{0x1, 0x7ff}, 0x4, 0x8, 0x0, 0x800, 0x23, 'syz1\x00', "01a963310c74c5f7a361a182b20d4a899b13fbb1836f9487729dc0a0682eb82d", "11b606d50e18d5b57c43faead82c79b84143687f7e7d955c8b9d90e2a413e9ba", [{0x0, 0x1, {0x0, 0x7}}, {0x9, 0xc, {0x0, 0x77}}, {0xb3, 0x4, {0x0, 0x10001}}, {0x6, 0x1000, {0x1, 0x100}}, {0x4, 0xa69, {0x3, 0x7}}, {0x3, 0x4, {0x2, 0x3}}, {0x3, 0xfffc}, {0xc704, 0x8, {0x2, 0x8001}}, {0x4, 0xf, {0x2, 0xe62}}, {0x1, 0x3, {0x1, 0x884}}, {0xf, 0xe, {0x3, 0x6}}, {0x3, 0x9, {0x3, 0x80000000}}, {0x9, 0x2, {0x0, 0x8000}}, {0x6, 0x1, {0x0, 0x5}}, {0x800, 0xd, {0x3, 0x3}}, {0x7, 0x6, {0x3, 0xffff}}, {0x8000, 0xeb85, {0x2, 0x6}}, {0x4, 0x0, {0x2, 0x7}}, {0x9, 0x5, {0x1, 0xfffff245}}, {0x7, 0xd8, {0x1, 0x2}}, {0x6, 0x9, {0x2, 0xad0}}, {0x5, 0xffff, {0x0, 0xfffffff9}}, {0x7, 0x7, {0x2, 0xd2a6}}, {0x7, 0xff, {0x3}}, {0x1, 0x80, {0x0, 0x5}}, {0x8, 0x1, {0x1, 0x1}}, {0x1, 0x8, {0x1, 0x5}}, {0x100, 0x8, {0x2, 0x9}}, {0xe4, 0xd, {0x3, 0xd0}}, {0x9, 0x1ff, {0x3, 0x4}}, {0x4, 0x0, {0x0, 0x51e}}, {0xb, 0x3, {0x3, 0x2}}, {0x6, 0xde, {0x0, 0xfffffff8}}, {0x0, 0x2, {0x2, 0xd}}, {0x0, 0x2, {0x0, 0x3}}, {0x1, 0x6, {0x3, 0x1}}, {0x0, 0xff, {0x1, 0x5}}, {0xaf, 0x6, {0x3, 0x6}}, {0x4, 0x1, {0x3, 0x4}}, {0x3, 0x6, {0x1, 0x81}}]}}}, {{0x254, 0x1, {{0x3, 0x800}, 0x1, 0x4, 0xfff7, 0x8a03, 0x17, 'syz1\x00', "88f778aad29686bd162eda72518cb8abe5dca22eac2dc1abe9b5f79e1792fcf2", "9b73dd63bd4187a4131350fdd301e42540408f015fe54219f07af21f2512c0ac", [{0x2, 0x5, {0x1, 0x7c5e}}, {0x1, 0x3, {0x2, 0x8}}, {0x3, 0x80, {0x1, 0xfffffffd}}, {0x6, 0x2, {0x3}}, {0xfffa, 0x40, {0x1}}, {0xfffe, 0x0, {0x1, 0x90}}, {0x9, 0x4, {0x0, 0x65}}, {0x5, 0x6, {0x1, 0x4}}, {0x1, 0xd, {0x0, 0xffffffff}}, {0x4, 0x10, {0x1}}, {0x9, 0x3628, {0x3, 0x7fffffff}}, {0x5, 0x8c0, {0x1, 0xfffffff8}}, {0xff87, 0x3, {0x1, 0x1}}, {0x8, 0x5, {0x0, 0xfffffffc}}, {0x9, 0x13, {0x0, 0x6}}, {0x7fff, 0x101, {0x3, 0x1}}, {0x5, 0x14, {0x1, 0x75928829}}, {0x2, 0x20, {0x3, 0x3}}, {0x23, 0x9, {0x3, 0x7}}, {0x6, 0x8, {0x2, 0x400}}, {0xc, 0xb31, {0x0, 0x2}}, {0x3, 0x6, {0x0, 0x5}}, {0x12df, 0x2, {0x0, 0x81}}, {0x1, 0x29, {0x2, 0x8}}, {0xd6c7, 0x1, {0x0, 0x7}}, {0x4, 0x3, {0x2, 0x5}}, {0x0, 0x4, {0x2, 0x6}}, {0x5, 0x7, {0x0, 0x57ba}}, {0x401, 0x7, {0x1, 0xfffffff7}}, {0x1, 0x1, {0x2, 0x10}}, {0x8, 0x800, {0x1, 0x1b840}}, {0x3, 0x8, {0x1, 0x401}}, {0x4, 0x5, {0x2, 0x8}}, {0x9, 0x212e, {0x0, 0x9}}, {0x40, 0x3, {0x1, 0xe}}, {0x1, 0x9, {0x3, 0x2}}, {0x3, 0x800, {0x0, 0x40}}, {0x8000, 0x8000, {0x2, 0xfffffff8}}, {0xfff, 0x8, {0x3, 0x7}}, {0x740b, 0x0, {0x0, 0xffffffff}}]}}}, {{0x254, 0x1, {{0x0, 0x10000}, 0x0, 0x0, 0xfa, 0x6, 0x13, 'syz1\x00', "442891af4f951e63df9c9964385c42d5f4cb319ebc15337fe926d8d5818fe50b", "9a2fcebeeb9b637daed4614a87e75923617f416f9691dbe662a99bde1806a0e9", [{0x1ff, 0x9, {0x1, 0x89dc}}, {0xffff, 0x3, {0x0, 0x4}}, {0xfff, 0x7, {0x3, 0x7a0b}}, {0x2, 0x6, {0x2, 0x4}}, {0x48fd, 0x8, {0x0, 0xfffff842}}, {0xfff7, 0x3, {0x0, 0xe78}}, {0x7ff, 0x1, {0x2, 0x800}}, {0x8, 0xef0}, {0x0, 0x9, {0x2, 0x8}}, {0x0, 0x1, {0x3}}, {0x5, 0xe3, {0x0, 0x8}}, {0x8, 0x4fd, {0x1, 0x80000000}}, {0xc, 0x4a, {0x0, 0xd43}}, {0xd7d, 0xffff, {0x2, 0x1}}, {0x10, 0x800, {0x1, 0x9}}, {0x6, 0x2e0d, {0x3, 0xfffffffb}}, {0x7, 0xffff, {0x1, 0x4}}, {0x0, 0xffff, {0x1, 0x5}}, {0x0, 0x9, {0x3, 0x3}}, {0xfffb, 0x2, {0x3, 0x6}}, {0xe, 0x1000, {0x1, 0x1}}, {0x6, 0x5, {0x2, 0x5}}, {0xef9a, 0x3, {0x1, 0x9}}, {0x3, 0x0, {0x1, 0x7f}}, {0xfff9, 0x6, {0x1, 0x7}}, {0x3, 0x5, {0x3, 0x7}}, {0x5, 0x4ff, {0x0, 0x4d9}}, {0x4, 0xd454, {0x0, 0x8}}, {0x49ef, 0x7, {0x3, 0x9}}, {0x7, 0x9, {0x2, 0x4}}, {0x0, 0xfff5, {0x0, 0x94}}, {0x5, 0xf8, {0x0, 0x7f}}, {0x6, 0x1, {0x2, 0x2}}, {0xe5, 0x9, {0x1, 0xfff}}, {0x0, 0x1, {0x3, 0x7fffffff}}, {0x8a8d, 0x0, {0x0, 0x5}}, {0x9, 0x4, {0x0, 0x2}}, {0x5, 0x6, {0x1, 0x1a6}}, {0xfffc, 0x5, {0x1, 0x5}}, {0x7ff, 0x101, {0x2, 0x5d8}}]}}}, {{0x254, 0x1, {{0x2, 0xcf}, 0xb, 0x4, 0xa, 0x8, 0x1f, 'syz1\x00', "a17da452ba809dd5cca42e7b544d3c6fe4dbdb9301b255106ca437b6f7c323df", "e5faec687a29445fa63c4741d554065b053dbdb836a80182f13f89ebb7e91bd5", [{0xd, 0x3ff, {0x1, 0x1f6c}}, {0xffff, 0x1, {0x3, 0x9}}, {0x6, 0xbb, {0x0, 0x6ed}}, {0xf800, 0x1, {0x3, 0x8000}}, {0x937, 0x6, {0x1, 0xb30}}, {0xffff, 0x3, {0x1, 0x1}}, {0xfffe, 0xd6, {0x2, 0x800}}, {0x4, 0x3ff, {0x3, 0xa}}, {0x6, 0xa, {0x1, 0x2}}, {0x10, 0xea43, {0x1, 0x8}}, {0x4, 0x924, {0x1, 0x1}}, {0x7, 0x1, {0x1, 0xd}}, {0x7fff, 0x5, {0x2, 0x7}}, {0xa8, 0xff, {0x3, 0x1}}, {0x6, 0xfff4, {0x0, 0x4}}, {0x1, 0x5504, {0x2, 0x80000000}}, {0x7f, 0x3, {0x1, 0x3}}, {0x4, 0x6, {0x2, 0x8}}, {0x9, 0xac2b, {0x0, 0x4}}, {0xc8, 0xf3d8, {0x2, 0xc}}, {0x7, 0x9, {0x1, 0x1ff}}, {0x5, 0x3, {0x0, 0xfffffffc}}, {0x2, 0x9, {0x3, 0xd7f}}, {0x7, 0x2, {0x2, 0x2}}, {0x9, 0x4, {0x1, 0x1}}, {0x9ac7, 0x0, {0x3, 0x7}}, {0x0, 0x7, {0x3, 0x4}}, {0x2, 0xc79, {0x1, 0x3}}, {0x5, 0x0, {0x2, 0x5}}, {0x6, 0x4, {0x1, 0x80}}, {0x5, 0x5, {0x0, 0x77}}, {0x7, 0x1, {0x2, 0x5}}, {0x8a7, 0x69, {0x3, 0x1}}, {0x8, 0x5, {0x2, 0x4}}, {0x0, 0x7fff, {0x3, 0x4}}, {0xa, 0x5, {0x0, 0x8000}}, {0xb6e0, 0x8000, {0x3, 0x50}}, {0x2000, 0x6, {0x1, 0x9}}, {0x9, 0x3, {0x2, 0xd7a}}, {0xd48, 0x8, {0x1, 0x80}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000b00), 0x20002, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000b40)={0xf0, 0x140, 0x60, 0x300, 0x9, 0x200, 0x13, 0x1, {0x401, 0xa19, 0x1}, {0xa, 0x4, 0x1}, {0x3, 0x8}, {0x4, 0x5, 0x1}, 0x2, 0x10, 0x0, 0x80000001, 0x0, 0x1, 0x400, 0xb, 0x1d, 0x3, 0x401, 0x8, 0x3, 0x200, 0x0, 0x7}) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000c00), 0x12880, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000c40)) (async) sendmsg$nl_netfilter(r0, &(0x7f0000001e40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x34002a74}, 0xc, &(0x7f0000001e00)={&(0x7f0000000cc0)={0x1124, 0x0, 0x3, 0x101, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0x1}, [@typed={0x4, 0x13e}, @typed={0xc, 0x7d, 0x0, 0x0, @u64=0x5}, @generic="1ccf31939421629176242fdf359e75f1587625e9569aa5a080d819f9778fe245d497dde7ed22e6c86b81881c1eac9e9cc4f47086d4aadf035c1af9d756ce3ca0210be6ef144f009812ca2cdd5abaa93a60b7a94257862ec5ac59832ed37be0cc445fc8dc4ddbe570a137aa3f870ad293b8e2", @typed={0x4, 0x62}, @typed={0x88, 0x35, 0x0, 0x0, @binary="017ffa1712918592280c1af8b98359c8da71da5c3b17ae3b0a8d17dc6718bb1576abe8f9da4d42e49ee2d467578a648238eaabf26f5bdc3f3a9a081bea25064c821ff2ea0121edcd4df9dfd25ee06f1f9db5be763752796f48216ad58bc80572f5de710404540b4df99e07b3f0bef1f2ae43fbc8897347386e865292b42a26b962d62c63"}, @generic="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"]}, 0x1124}, 0x1, 0x0, 0x0, 0x40000}, 0x20000810) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000001e80)={0xe, 0x1}) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002480)=0x0) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000024c0)=0x0) (async) getresgid(&(0x7f0000002500), &(0x7f0000002540), &(0x7f0000002580)=0x0) (async) r8 = getpid() r9 = getgid() (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000025c0)={{0x1, 0x1, 0x18, r0, {0x4850176d}}, './file0\x00'}) (async) r11 = ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000002600)={0x1, 0x1, [{0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0xfffff000}]}) (async) r12 = fcntl$getown(r0, 0x9) (async) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002640)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@empty}}, &(0x7f0000002740)=0xe8) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002780)=0x0) (async) stat(&(0x7f00000027c0)='./file0\x00', &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000002880)='./file0\x00', &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5000) (async) r17 = syz_open_dev$sndctrl(&(0x7f0000002940), 0x8, 0x41000) (async) r18 = syz_open_dev$radio(&(0x7f0000002980), 0x0, 0x2) (async) r19 = getpgrp(0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000029c0)={{0x1, 0x1, 0x18, r1, {0x0, 0xffffffffffffffff}}, './file0\x00'}) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000002e40)={'\x00', 0x0, 0x4, 0x6, 0xd4b, 0x100000000, 0xffffffffffffffff}) r22 = getuid() sendmmsg$unix(r0, &(0x7f0000005cc0)=[{{&(0x7f0000001ec0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002040)=[{&(0x7f0000001f40)="6d855f1672605487729f19d8b286f87e1598364b547e9f8a754a4d244056cefb0e13c54456309d8d061960b105f9f1f75da0842f143ef8e77b835c5f616345dd130c4c08c5e24fafdc5213d80e08d98ce8edaa8ba879b95b5ba1baf60c345e648e7704d03f7da98ac4c6ddc9eb8bf8cd2dae4e9459f6c291e04da3c73216ec3b8389634a1e924655c712f2bf4a3ba15ed5c6b248441d099443015afeae426daa606883c3321c3caadaf890b4fbd0c85b5c007c4b7f2e91741e683f2187eac11a9e45981a2f78e5861135840d54f0ee70", 0xd0}], 0x1, 0x0, 0x0, 0x2c000004}}, {{&(0x7f0000002080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000021c0)=[{&(0x7f0000002100)="2404427d7ab5746b5e12e37320d0ac153defc8ca", 0x14}, {&(0x7f0000002140)="cc85ae88d30860356959d8e04e0c70892193e09f996d2cb7c718525871d4938accc6f960cfb759fb77f03521a8676ad3c5478c4e28cc9fa92c15830235117fd62c990a038122cf52a1", 0x49}], 0x2, &(0x7f0000002200), 0x0, 0x800}}, {{&(0x7f0000002240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002380)=[{&(0x7f00000022c0)="87e2cb508fa1eedfea75ae7222c71e2c3830eb40cd78f9298e4107e70f9ba87171e928edceb7ff0975684b022f220e506f7a1d7c63616bd1131761429b4a95d8a4aaf44fed1bf36803b70a9a7a3861ef2d8b99182cbc68e0046618b1e3f47deec4fa3a1178c7d74ca103b822f84a7719d0f16c6870a1dc507bb44dbb38cd058204575de027385d28aabc28af5e10a26c5d34b7639158d3554cdd87f201e7c0bd45fa800a7c4cbf3cc2f62afbc329252e", 0xb0}], 0x1, &(0x7f00000023c0)=[@rights={{0x2c, 0x1, 0x1, [r3, r2, r0, r2, r1, r0, r4]}}], 0x30, 0x800}}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002400)="65742d987f8600385b847dfef3654167c6fc078f63979430a7287e33b5f50eaead8fa2c0b1d6ee849a1322808b8cfb3836ab96f69094e5d18b6cf18f0f", 0x3d}], 0x1, &(0x7f0000002a00)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xee00, r9}}}, @rights={{0x20, 0x1, 0x1, [r0, r1, r1, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r0, r10, r0, 0xffffffffffffffff, r0, r1, r11]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @rights={{0x38, 0x1, 0x1, [r0, r17, r0, r2, r18, r2, r1, r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r19, r20}}}], 0x128, 0x1}}, {{&(0x7f0000002b40)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002e00)=[{&(0x7f0000002bc0)="31e9060b1fe410afcc0882698c33dbdd4952aef363c991c7f6d2358b9d6325007e481ffac955dfe4d55afab45622fae8e9d796f9621d050f6ed86c75480bde2addd2ef55074618f8e5ec054f58fa5cc44169024ad5ab089942cff4ffac398c5d0bda485e7b4da6e3b9806559ff501cb65c613534f1459e4674924a7307a4184be4", 0x81}, {&(0x7f0000002c80)="b59dad74ef5d2416096526353ddd59d109b9f0529da7acdbf5626f35d8039ecc9918976b9a7874a2b15ec96f91b6935b170be81797c04a30dd1434560fd60149c72ae6efaa5820404b4782f7d86f4dfc5c2b285c40b241b76239f97243fde63f1ad4d99534b521d0c58295b51e076a304a7fe8a343636f7e9e943ec6fba1de02af524f39199bd0bf", 0x88}, {&(0x7f0000002d40)="7e9aa990be2bd099cf95b2c73712471aea5076b76ed40722e661c957eb4401bd066b4602542e786666499fc5407b6aabcd6ac0bbd61287c9cab531ac99245223f83e7d8863c4dac2a5c601be015d30c2aa1cd7eca5a340783012a4bdf9130a4b76484d400ce68c", 0x67}, {&(0x7f0000002dc0)="e5", 0x1}], 0x4, &(0x7f00000052c0)=[@cred={{0x1c, 0x1, 0x2, {r21, r22}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}], 0x80, 0x20000000}}, {{&(0x7f0000005340)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000005880)=[{&(0x7f00000053c0)="04bfc0ecb2f326c07b15e34007818975e389bf7abc7184117c678b512067627592b5065fb5e1b218ac611a98976d99892d81db2e1e0c166b8f90dda60e816378baa3b5f57e0815ae08bad0e9ee7dcc659277117b9b94b35418e69f8389207d5d8dea08ba3ae496dd4504c71220c2bd592fe0bb50764cc59b4498bb3d3bf4584828e0d38587eaa169c02a9bdd03092cd2e44b5b018178dad7", 0x98}, {&(0x7f0000005480)="40f466d39a60846dfab0ece50e7f92f2559fc3d4ba60931f77a7fdf7c442ea8203dd2b9c5e031ed17b259b6dfd7203b478e1a5204175807d924e245f82b4399f58911b6a385b34745c193f770fc1bd7682c82cb941d43c15a653347a2642bfe0a2bdbc071839c2597bc20075ae818c730183dd375256051df0ae5c0ffdad20b823b938942d33dc9dcac533bad252894d171ed468485a18212ddb643487d2824e5c104b295969c0aae78245456f8a09b05610", 0xb2}, {&(0x7f0000005540)="e0acf9e4d9d580e0bc9ebab830956c5778d3a725f5d2c8bc641c60232d7e4dd8639c833310f15bc40698fded3617a6ca2db9e77c82473ccec44cfac8b1568ae4f4b738a65d58998a30f128c60cc0efc8eefd76badcd3f2f4ddf09f6623d97f1bf1bdf5e2ffd89e8ebe85ca9d7b38a884989cd5152d6c3f47b8553f87b1cc323ce64022c344200f9b3b25de60640147b43a3c09822928c3cd1a1f5570f7765a1de0d24fab232054d9b7977496131f1dcec2b6a64ba3769862f8f34dd22580ee65c4dc80764e16e3b93729d4488b128b7fbda1", 0xd2}, {&(0x7f0000005640)="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", 0xff}, {&(0x7f0000005740)="55bdeca1b6edac5401003a33897b5e3d0d146756", 0x14}, {&(0x7f0000005780)="609611d2eb53164e9eb3e091deb43f4201b8a1f73c14bdb7672ddc359133fcb5101115e80d21b39262befa90b14dc6ffb3a88aaf914708e7fd431baec298facde73d2c7e031497504c36ce70088c55f2d84df7af97d69c484adb8b747d41e084290a95f6ef6a4bce073dd50ef803c2c9e7aff2818e878d2e53c341feb90aadaf309e55e7256ee4174b8c273ba1a1a6d3799aa9892d", 0x95}, {&(0x7f0000005840)="5abc7c9074ce020703bf914dcf70939ec1ccd1da3c44d007ee081255602203476fba", 0x22}], 0x7, &(0x7f0000005c80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x40000}}], 0x6, 0x20000) kernel console output (not intermixed with test programs): evsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.150311][ T5795] usb 1-1: Using ep0 maxpacket: 8 [ 282.157975][ T7226] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.191441][ T5795] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 282.203730][ T5795] usb 1-1: config 0 interface 0 has no altsetting 0 [ 282.230193][ T5795] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 282.240318][ T29] audit: type=1400 audit(1778407159.104:1289): avc: denied { read } for pid=8548 comm="syz.2.723" name="sg0" dev="devtmpfs" ino=807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 282.271538][ T5795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.281044][ T5795] usb 1-1: Product: syz [ 282.285607][ T5795] usb 1-1: Manufacturer: syz [ 282.290667][ T29] audit: type=1400 audit(1778407159.104:1290): avc: denied { open } for pid=8548 comm="syz.2.723" path="/dev/sg0" dev="devtmpfs" ino=807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 282.314875][ T5795] usb 1-1: SerialNumber: syz [ 282.329273][ T5795] usb 1-1: config 0 descriptor?? [ 282.334756][ T29] audit: type=1400 audit(1778407159.132:1291): avc: denied { ioctl } for pid=8548 comm="syz.2.723" path="/dev/sg0" dev="devtmpfs" ino=807 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 282.367678][ T5795] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 282.407469][ T8560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.417082][ T8560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.587761][ T29] audit: type=1400 audit(1778407159.422:1292): avc: denied { map } for pid=8556 comm="syz.0.724" path="socket:[20920]" dev="sockfs" ino=20920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 282.638071][ T5731] usb 4-1: USB disconnect, device number 19 [ 282.674476][ T29] audit: type=1400 audit(1778407159.422:1293): avc: denied { read } for pid=8556 comm="syz.0.724" path="socket:[20920]" dev="sockfs" ino=20920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 282.728519][ T5795] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 282.744312][ T5795] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 283.434454][ T9] ums_eneub6250 3-1:129.164: USB Mass Storage device detected [ 284.043804][ T9] usb 3-1: USB disconnect, device number 20 [ 284.329559][ T8585] Driver unsupported XDP return value 0 on prog (id 73) dev N/A, expect packet loss! [ 285.106986][ T29] audit: type=1400 audit(1778407161.734:1294): avc: denied { write } for pid=8594 comm="syz.3.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 285.443978][ T8537] usbtmc 5-1:16.0: usbtmc_ioctl_request failed -110 [ 285.586536][ T5703] usb 5-1: USB disconnect, device number 39 [ 285.680003][ T8605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.688693][ T8603] netlink: 'syz.0.735': attribute type 1 has an invalid length. [ 285.702121][ T8605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.728192][ T8603] netlink: 224 bytes leftover after parsing attributes in process `syz.0.735'. [ 285.780146][ T8607] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 285.871704][ T8603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.901508][ T8603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.096144][ T5703] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 286.218863][ T8614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.739'. [ 286.273911][ T5703] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.299984][ T5703] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.317908][ T5703] usb 4-1: config 0 interface 0 has no altsetting 0 [ 286.324714][ T5703] usb 4-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00 [ 286.337882][ T5703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.378742][ T5703] usb 4-1: config 0 descriptor?? [ 286.546567][ T8620] netlink: 24 bytes leftover after parsing attributes in process `syz.2.740'. [ 287.486323][ T5703] logitech-hidpp-device 0003:046D:C088.000A: unknown main item tag 0x1 [ 287.494818][ T5703] logitech-hidpp-device 0003:046D:C088.000A: unexpected long global item [ 287.509455][ T5703] logitech-hidpp-device 0003:046D:C088.000A: hidpp_probe:parse failed [ 287.520972][ T5703] logitech-hidpp-device 0003:046D:C088.000A: probe with driver logitech-hidpp-device failed with error -22 [ 287.679205][ T8630] qrtr: Invalid version 137 [ 288.403803][ T9] usb 1-1: USB disconnect, device number 17 [ 288.449578][ T8635] qrtr: Invalid version 137 [ 288.615363][ T8636] support for the xor transformation has been removed. [ 289.442142][ T8639] netlink: 52 bytes leftover after parsing attributes in process `syz.4.745'. [ 289.545201][ T8640] netlink: 76 bytes leftover after parsing attributes in process `syz.4.745'. [ 289.629133][ T8641] netlink: 60 bytes leftover after parsing attributes in process `syz.4.745'. [ 289.678401][ T5796] usb 4-1: USB disconnect, device number 20 [ 289.759766][ T8640] netlink: 52 bytes leftover after parsing attributes in process `syz.4.745'. [ 289.772605][ T29] audit: type=1400 audit(1778407166.151:1295): avc: denied { lock } for pid=8642 comm="syz.3.746" path="socket:[20174]" dev="sockfs" ino=20174 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 290.131749][ T29] audit: type=1400 audit(1778407166.487:1296): avc: denied { write } for pid=8655 comm="syz.3.749" name="sg0" dev="devtmpfs" ino=807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 291.179643][ T5795] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 291.206458][ T8668] IPVS: length: 115 != 24 [ 291.696586][ T8669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.752'. [ 291.756107][ T5795] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 291.853136][ T5795] usb 4-1: config 0 has no interface number 0 [ 291.859292][ T5795] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 291.880685][ T5795] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 292.004923][ T5795] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 292.099049][ T5795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.107406][ T8671] sctp: [Deprecated]: syz.0.753 (pid 8671) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.107406][ T8671] Use struct sctp_sack_info instead [ 292.126753][ T5795] usb 4-1: Product: syz [ 292.132031][ T5795] usb 4-1: Manufacturer: syz [ 292.136697][ T5795] usb 4-1: SerialNumber: syz [ 292.154563][ T5795] usb 4-1: config 0 descriptor?? [ 292.165155][ T5795] yurex 4-1:0.50: Could not submitting URB [ 292.171162][ T5795] yurex 4-1:0.50: probe with driver yurex failed with error -5 [ 292.407231][ T8659] binder: 8655:8659 ioctl 1267 200000000100 returned -22 [ 292.542603][ T29] audit: type=1400 audit(1778407168.621:1297): avc: denied { getopt } for pid=8655 comm="syz.3.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 292.590607][ T8674] qrtr: Invalid version 137 [ 293.050669][ T8676] support for the xor transformation has been removed. [ 293.249674][ T8686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.278596][ T8686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.862896][ T5703] usb 4-1: USB disconnect, device number 21 [ 293.915599][ T5796] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 293.939342][ T8691] raw_sendmsg: syz.0.759 forgot to set AF_INET. Fix it! [ 293.954888][ T8691] netdevsim netdevsim0 ªªªªª»: renamed from netdevsim0 (while UP) [ 294.200102][ T8694] FAULT_INJECTION: forcing a failure. [ 294.200102][ T8694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.222570][ T8694] CPU: 1 UID: 0 PID: 8694 Comm: syz.3.761 Not tainted syzkaller #0 PREEMPT(full) [ 294.222585][ T8694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 294.222591][ T8694] Call Trace: [ 294.222595][ T8694] [ 294.222599][ T8694] dump_stack_lvl+0x100/0x190 [ 294.222626][ T8694] should_fail_ex.cold+0x5/0xa [ 294.222646][ T8694] _copy_to_user+0x32/0xd0 [ 294.222663][ T8694] simple_read_from_buffer+0xcb/0x170 [ 294.222677][ T8694] proc_fail_nth_read+0x1af/0x230 [ 294.222689][ T8694] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 294.222701][ T8694] ? rw_verify_area+0xce/0x6d0 [ 294.222711][ T8694] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 294.222722][ T8694] vfs_read+0x1e4/0xb30 [ 294.222735][ T8694] ? __pfx_vfs_read+0x10/0x10 [ 294.222746][ T8694] ? __fget_files+0x215/0x3d0 [ 294.222762][ T8694] ? __fget_files+0x21f/0x3d0 [ 294.222779][ T8694] ksys_read+0x12a/0x250 [ 294.222789][ T8694] ? __pfx_ksys_read+0x10/0x10 [ 294.222802][ T8694] ? rcu_is_watching+0x12/0xc0 [ 294.222821][ T8694] do_syscall_64+0x10b/0xf80 [ 294.222837][ T8694] ? clear_bhb_loop+0x40/0x90 [ 294.222858][ T8694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.222873][ T8694] RIP: 0033:0x7fb82435d60e [ 294.222883][ T8694] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 294.222893][ T8694] RSP: 002b:00007fb825237fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 294.222903][ T8694] RAX: ffffffffffffffda RBX: 00007fb8252386c0 RCX: 00007fb82435d60e [ 294.222910][ T8694] RDX: 000000000000000f RSI: 00007fb8252380a0 RDI: 0000000000000004 [ 294.222916][ T8694] RBP: 00007fb825238090 R08: 0000000000000000 R09: 0000000000000000 [ 294.222922][ T8694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.222928][ T8694] R13: 00007fb824616038 R14: 00007fb824615fa0 R15: 00007ffe3cdcdfd8 [ 294.222942][ T8694] [ 294.429789][ T5796] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.440879][ T5796] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.450811][ T5796] usb 5-1: config 0 interface 0 has no altsetting 0 [ 294.457417][ T5796] usb 5-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00 [ 294.466478][ T5796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.483919][ T5796] usb 5-1: config 0 descriptor?? [ 294.596291][ T8696] netlink: 52 bytes leftover after parsing attributes in process `syz.2.760'. [ 294.691479][ T8703] netlink: 76 bytes leftover after parsing attributes in process `syz.2.760'. [ 294.713082][ T8698] erspan1: entered promiscuous mode [ 294.718404][ T8698] erspan1: entered allmulticast mode [ 294.728299][ T8703] bridge0: port 3(netdevsim0) entered blocking state [ 294.735160][ T8703] bridge0: port 3(netdevsim0) entered forwarding state [ 294.742251][ T8703] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.749307][ T8703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.756577][ T8703] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.763649][ T8703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.786426][ T8703] netlink: 52 bytes leftover after parsing attributes in process `syz.2.760'. [ 294.797235][ T8703] bridge0: port 3(netdevsim0) entered disabled state [ 294.804114][ T8703] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.811289][ T8703] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.102165][ T5796] logitech-hidpp-device 0003:046D:C088.000B: unknown main item tag 0x1 [ 295.110669][ T5796] logitech-hidpp-device 0003:046D:C088.000B: unexpected long global item [ 295.122049][ T8696] netlink: 60 bytes leftover after parsing attributes in process `syz.2.760'. [ 295.122092][ T5796] logitech-hidpp-device 0003:046D:C088.000B: hidpp_probe:parse failed [ 295.139602][ T5796] logitech-hidpp-device 0003:046D:C088.000B: probe with driver logitech-hidpp-device failed with error -22 [ 295.621005][ T8726] qrtr: Invalid version 137 [ 295.669497][ T29] audit: type=1400 audit(1778407171.672:1298): avc: denied { listen } for pid=8727 comm="syz.0.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 295.672167][ T8728] netlink: 'syz.0.769': attribute type 2 has an invalid length. [ 295.796658][ T8729] support for the xor transformation has been removed. [ 296.339422][ T29] audit: type=1400 audit(1778407172.289:1299): avc: denied { connect } for pid=8727 comm="syz.0.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 296.489221][ T29] audit: type=1400 audit(1778407172.411:1300): avc: denied { accept } for pid=8727 comm="syz.0.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 296.579927][ T8731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.769'. [ 297.811428][ T29] audit: type=1400 audit(1778407173.674:1301): avc: denied { call } for pid=8758 comm="syz.1.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 297.868691][ T8762] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 297.941190][ T8770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.981169][ T8770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.115316][ T5795] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 298.199823][ T8779] tipc: Started in network mode [ 298.224724][ T8779] tipc: Node identity 16269ecb767b, cluster identity 4711 [ 298.257981][ T8779] tipc: Enabled bearer , priority 0 [ 298.288534][ T5795] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 298.301645][ T5795] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 298.319427][ T5795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.327624][ T5795] usb 1-1: Product: syz [ 298.334296][ T5795] usb 1-1: Manufacturer: syz [ 298.339112][ T5795] usb 1-1: SerialNumber: syz [ 299.356544][ T5796] tipc: Node number set to 1616748235 [ 299.424781][ T5796] usb 5-1: USB disconnect, device number 40 [ 299.481833][ T29] audit: type=1400 audit(1778407175.237:1302): avc: denied { map } for pid=8789 comm="syz.2.787" path="socket:[21391]" dev="sockfs" ino=21391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 299.508836][ T29] audit: type=1400 audit(1778407175.265:1303): avc: denied { bind } for pid=8786 comm="syz.3.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 299.631117][ T8795] netlink: 52 bytes leftover after parsing attributes in process `syz.4.789'. [ 299.640691][ T8795] netlink: 76 bytes leftover after parsing attributes in process `syz.4.789'. [ 299.651331][ T8795] netlink: 52 bytes leftover after parsing attributes in process `syz.4.789'. [ 299.663629][ T8795] netlink: 60 bytes leftover after parsing attributes in process `syz.4.789'. [ 299.772187][ T8799] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 299.947451][ T5703] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 300.528037][ T29] audit: type=1400 audit(1778407176.210:1304): avc: denied { read } for pid=8812 comm="syz.2.796" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 300.634715][ T29] audit: type=1400 audit(1778407176.210:1305): avc: denied { open } for pid=8812 comm="syz.2.796" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 300.659856][ T29] audit: type=1400 audit(1778407176.210:1306): avc: denied { ioctl } for pid=8812 comm="syz.2.796" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 300.936053][ T8816] IPv6: addrconf: prefix option has invalid lifetime [ 301.136439][ T5703] usb 4-1: unable to get BOS descriptor or descriptor too short [ 301.148098][ T5703] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 301.155885][ T5703] usb 4-1: can't read configurations, error -71 [ 301.283918][ T8770] tipc: Disabling bearer [ 301.295878][ T5795] usb 1-1: USB disconnect, device number 18 [ 301.331935][ T46] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 301.489506][ T8825] netlink: 28 bytes leftover after parsing attributes in process `syz.4.797'. [ 301.498563][ T8825] netlink: 28 bytes leftover after parsing attributes in process `syz.4.797'. [ 301.750264][ T46] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 301.785297][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.813360][ T46] usb 3-1: Product: syz [ 301.821987][ T46] usb 3-1: Manufacturer: syz [ 301.830296][ T29] audit: type=1400 audit(1778407177.436:1307): avc: denied { setopt } for pid=8828 comm="syz.1.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 301.831082][ T46] usb 3-1: SerialNumber: syz [ 301.872695][ T29] audit: type=1400 audit(1778407177.464:1308): avc: denied { create } for pid=8828 comm="syz.1.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 302.047615][ T5795] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 302.199599][ T29] audit: type=1400 audit(1778407177.773:1309): avc: denied { ioctl } for pid=8828 comm="syz.1.799" path="socket:[20445]" dev="sockfs" ino=20445 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 302.383262][ T29] audit: type=1400 audit(1778407177.773:1310): avc: denied { write } for pid=8828 comm="syz.1.799" path="socket:[20445]" dev="sockfs" ino=20445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 302.409095][ T5795] usb 1-1: Using ep0 maxpacket: 16 [ 302.478845][ T5795] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 302.489230][ T5795] usb 1-1: config 0 has no interface number 0 [ 302.533174][ T5795] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 302.544017][ T5795] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 302.555401][ T29] audit: type=1400 audit(1778407177.783:1311): avc: denied { read } for pid=8828 comm="syz.1.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 302.567218][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'. [ 302.578911][ T29] audit: type=1400 audit(1778407177.857:1312): avc: denied { write } for pid=8828 comm="syz.1.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 302.604813][ T8838] netlink: 24 bytes leftover after parsing attributes in process `syz.4.801'. [ 302.624841][ T5795] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 302.639438][ T5795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.663649][ T5795] usb 1-1: Product: syz [ 302.676023][ T5795] usb 1-1: Manufacturer: syz [ 302.691419][ T5795] usb 1-1: SerialNumber: syz [ 302.831883][ T5795] usb 1-1: config 0 descriptor?? [ 302.869375][ T8822] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 302.903589][ T8822] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 302.988349][ T5731] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 303.123510][ T8858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.133961][ T8858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.253950][ T8821] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 303.261514][ T5731] usb 4-1: Using ep0 maxpacket: 32 [ 303.265957][ T8821] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 303.268350][ T5731] usb 4-1: unable to get BOS descriptor or descriptor too short [ 303.285640][ T5731] usb 4-1: config index 0 descriptor too short (expected 28341, got 105) [ 303.294494][ T5731] usb 4-1: config 155 has too many interfaces: 241, using maximum allowed: 32 [ 303.727504][ T5731] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 303.743717][ T5731] usb 4-1: config 155 has 1 interface, different from the descriptor's value: 241 [ 303.755121][ T5731] usb 4-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 303.771792][ T5731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.780122][ T5795] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 303.817820][ T5731] usb 4-1: Product: syz [ 303.824105][ T8860] fuse: Unknown parameter 'gr/up_id' [ 303.831458][ T46] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 303.838534][ T5731] usb 4-1: Manufacturer: syz [ 303.864412][ T5731] usb 4-1: SerialNumber: syz [ 303.885877][ T46] usb 3-1: USB disconnect, device number 21 [ 303.905868][ T46] usblp0: removed [ 304.004543][ T5795] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 304.072493][ T5795] asix 1-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 304.136509][ T8865] netlink: 28 bytes leftover after parsing attributes in process `syz.2.808'. [ 304.156108][ T5795] asix 1-1:0.34: probe with driver asix failed with error -61 [ 305.403142][ T5795] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 307.576308][ T5796] usb 1-1: USB disconnect, device number 19 [ 307.713611][ T8865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.727821][ T8865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.807237][ T8879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.811'. [ 307.840379][ T35] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.851603][ T803] syz2: Port: 1 Link DOWN [ 307.863231][ T5731] usb 4-1: Fast Track Pro config OK [ 307.873381][ T35] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.887765][ T5731] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 307.908569][ T35] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.937067][ T35] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.999133][ T5731] snd-usb-audio 4-1:155.0: probe with driver snd-usb-audio failed with error -22 [ 308.090540][ T5731] usb 4-1: USB disconnect, device number 24 [ 308.099284][ T5796] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 308.208441][ T8891] exFAT-fs (nbd4): unable to read boot sector [ 308.214600][ T8891] exFAT-fs (nbd4): failed to read boot sector [ 308.220681][ T8891] exFAT-fs (nbd4): failed to recognize exfat type [ 308.310249][ T5796] usb 1-1: Using ep0 maxpacket: 8 [ 308.393956][ T5796] usb 1-1: config 129 has an invalid interface number: 164 but max is 0 [ 308.519865][ T5796] usb 1-1: config 129 has no interface number 0 [ 308.608372][ T5796] usb 1-1: config 129 interface 164 has no altsetting 0 [ 308.762102][ T5796] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=8b.16 [ 309.114087][ T5796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.120025][ T6053] udevd[6053]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 309.141464][ T5796] usb 1-1: Product: syz [ 309.156523][ T5796] usb 1-1: Manufacturer: syz [ 309.161247][ T5796] usb 1-1: SerialNumber: syz [ 309.627415][ T8905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.637951][ T8905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.993623][ T5626] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 310.006979][ T29] audit: type=1800 audit(1778407185.082:1313): pid=8907 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.819" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 310.040733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 310.062752][ T8906] tipc: Started in network mode [ 310.079673][ T8906] tipc: Node identity e6e471841bf7, cluster identity 4711 [ 310.096610][ T8906] tipc: Enabled bearer , priority 0 [ 310.233336][ T5795] usb 3-1: device descriptor read/64, error -71 [ 310.500294][ T5795] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 310.672911][ T5795] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 310.698654][ T5795] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 310.731238][ T5795] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 310.769509][ T5795] usb 3-1: New USB device found, idVendor=1e7d, idProduct=0d50, bcdDevice= 0.00 [ 310.791963][ T5795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.818899][ T5795] usb 3-1: config 0 descriptor?? [ 310.841083][ T8903] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 311.389347][ T8906] tipc: Disabling bearer [ 311.423352][ T5723] tipc: Node number set to 4245909892 [ 312.466471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 312.690878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 312.773841][ T5795] usbhid 3-1:0.0: can't add hid device: -71 [ 312.786646][ T5796] ums_eneub6250 1-1:129.164: USB Mass Storage device detected [ 312.817852][ T8929] netlink: 'syz.4.824': attribute type 1 has an invalid length. [ 312.840726][ T5795] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 312.854907][ T8929] netlink: 224 bytes leftover after parsing attributes in process `syz.4.824'. [ 312.867415][ T5795] usb 3-1: USB disconnect, device number 23 [ 312.909250][ T5796] usb 1-1: USB disconnect, device number 20 [ 312.931688][ T8932] netlink: 28 bytes leftover after parsing attributes in process `syz.1.825'. [ 313.309061][ T8936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.826'. [ 313.318481][ T8936] netlink: 48 bytes leftover after parsing attributes in process `syz.3.826'. [ 313.428271][ T5723] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 313.622165][ T5723] usb 5-1: Using ep0 maxpacket: 16 [ 313.637480][ T5723] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.658520][ T5723] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 313.667807][ T29] audit: type=1400 audit(1778407188.516:1314): avc: denied { accept } for pid=8950 comm="syz.3.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 313.669771][ T5723] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 314.110358][ T5723] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 314.120070][ T5723] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 314.135894][ T5723] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 314.145084][ T5723] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 314.153710][ T5723] usb 5-1: Manufacturer: syz [ 314.321285][ T5723] usb 5-1: config 0 descriptor?? [ 315.705911][ T8962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.714654][ T8962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.244948][ T29] audit: type=1400 audit(1778407190.921:1315): avc: denied { read } for pid=8973 comm="syz.0.839" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 316.557765][ T29] audit: type=1400 audit(1778407190.921:1316): avc: denied { open } for pid=8973 comm="syz.0.839" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 316.618117][ T8980] netlink: 28 bytes leftover after parsing attributes in process `syz.2.838'. [ 317.232509][ T5723] rc_core: IR keymap rc-hauppauge not found [ 317.257158][ T5723] Registered IR keymap rc-empty [ 317.270963][ T5723] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 317.309193][ T5723] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 317.416292][ T5723] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 317.433166][ T5723] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input19 [ 317.661738][ T29] audit: type=1400 audit(1778407192.110:1317): avc: denied { map } for pid=8989 comm="syz.2.842" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 317.874364][ T5723] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 317.895133][ T5723] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 317.903434][ T29] audit: type=1400 audit(1778407192.110:1318): avc: denied { execute } for pid=8989 comm="syz.2.842" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 317.924135][ T5723] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 317.959166][ T5723] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 317.992497][ T5723] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 318.023296][ T5723] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 318.059619][ T5723] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 318.085461][ T9005] netlink: 'syz.3.845': attribute type 1 has an invalid length. [ 318.087470][ T5723] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 318.093288][ T9005] netlink: 224 bytes leftover after parsing attributes in process `syz.3.845'. [ 318.130345][ T5723] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 318.162206][ T5723] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 318.239347][ T5723] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 318.247495][ T5723] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 318.274704][ T5723] usb 5-1: USB disconnect, device number 41 [ 318.397711][ T5796] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 318.558927][ T29] audit: type=1400 audit(1778407193.083:1319): avc: denied { append } for pid=9011 comm="syz.1.848" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 318.589800][ T5796] usb 4-1: Using ep0 maxpacket: 16 [ 319.791442][ T5796] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.802976][ T5796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 319.820567][ T5796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 319.835936][ T5796] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 319.845817][ T5796] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 319.860273][ T5796] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 319.870050][ T5796] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 319.878223][ T5796] usb 4-1: Manufacturer: syz [ 319.888376][ T5796] usb 4-1: config 0 descriptor?? [ 319.905914][ T9015] netlink: 44 bytes leftover after parsing attributes in process `syz.4.849'. [ 320.245954][ T5796] rc_core: IR keymap rc-hauppauge not found [ 320.263509][ T5796] Registered IR keymap rc-empty [ 320.280516][ T5796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 320.320865][ T5796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 320.366506][ T5796] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 320.410123][ T5796] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input20 [ 320.429309][ T9026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.852'. [ 320.464551][ T5796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 320.513613][ T5796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 320.545340][ T5796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 320.567054][ T5796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 320.644503][ T5796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 320.695511][ T5796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 320.738306][ T5796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 320.759074][ T5796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 320.780522][ T5796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 320.812440][ T5796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 320.855843][ T5796] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 320.865254][ T5796] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 321.353312][ T9035] comedi comedi3: pcl726: I/O base address or length out of range [ 322.031519][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.856'. [ 322.220279][ T5723] usb 4-1: USB disconnect, device number 25 [ 322.459782][ T5796] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 322.460225][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.858857][ T9057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.859048][ T9057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.884935][ T5796] usb 5-1: Using ep0 maxpacket: 8 [ 322.889805][ T5796] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 322.889830][ T5796] usb 5-1: config 179 has no interface number 0 [ 322.889865][ T5796] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 322.889891][ T5796] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 322.889916][ T5796] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 322.889938][ T5796] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 322.889957][ T5796] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 322.889981][ T5796] usb 5-1: config 179 interface 65 has no altsetting 0 [ 322.890007][ T5796] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 322.890026][ T5796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.375762][ T5796] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input21 [ 323.467078][ T9064] netlink: 52 bytes leftover after parsing attributes in process `syz.0.864'. [ 323.472323][ T9064] netlink: 76 bytes leftover after parsing attributes in process `syz.0.864'. [ 323.472647][ T9064] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.472695][ T9064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.482499][ T9064] netlink: 52 bytes leftover after parsing attributes in process `syz.0.864'. [ 323.489901][ T9064] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.574839][ T46] usb 5-1: USB disconnect, device number 42 [ 323.837653][ T9067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.865'. [ 324.600905][ T29] audit: type=1400 audit(1778407198.744:1320): avc: denied { connect } for pid=9074 comm="syz.3.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 324.663130][ T29] audit: type=1400 audit(1778407198.744:1321): avc: denied { setopt } for pid=9074 comm="syz.3.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 324.753803][ T29] audit: type=1400 audit(1778407198.885:1322): avc: denied { ioctl } for pid=9074 comm="syz.3.867" path="socket:[21885]" dev="sockfs" ino=21885 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 324.766514][ T9081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.797203][ T9078] loop6: detected capacity change from 0 to 2640 [ 324.857702][ T9078] Buffer I/O error on dev loop6, logical block 0, async page read [ 324.865943][ T9081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.937788][ T9086] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 324.953185][ T9078] Buffer I/O error on dev loop6, logical block 0, async page read [ 324.961595][ T9086] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 325.005800][ T9078] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.013748][ T46] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 325.021921][ T9086] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 325.039133][ T9094] netlink: 'syz.3.871': attribute type 1 has an invalid length. [ 325.068682][ T9094] netlink: 224 bytes leftover after parsing attributes in process `syz.3.871'. [ 325.096157][ T9078] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.142811][ T9086] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 325.149314][ T9078] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.170305][ T9086] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 325.180760][ T9086] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 325.194222][ T9086] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 325.205047][ T9086] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 325.223946][ T9078] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.263594][ T9078] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.300777][ T9078] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.356265][ T9078] ldm_validate_partition_table(): Disk read failed. [ 325.410637][ T9078] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.444535][ T9078] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.479773][ T9078] Dev loop6: unable to read RDB block 0 [ 325.499339][ T9078] loop6: unable to read partition table [ 325.516622][ T9078] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 325.536544][ T5723] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 325.707509][ T5723] usb 4-1: Using ep0 maxpacket: 16 [ 325.720283][ T5723] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.742702][ T5723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 325.756193][ T9101] SELinux: syz.4.873 (9101) wrote to checkreqprot. This is no longer supported. [ 325.772819][ T9103] qrtr: Invalid version 137 [ 325.866805][ T9104] support for the xor transformation has been removed. [ 326.680005][ T5723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 326.690121][ T5723] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 326.699961][ T5723] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 326.715251][ T5723] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 326.724509][ T5723] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 326.734196][ T5723] usb 4-1: Manufacturer: syz [ 326.753373][ T5723] usb 4-1: config 0 descriptor?? [ 327.527773][ T9124] netlink: 28 bytes leftover after parsing attributes in process `syz.4.880'. [ 327.536782][ T9124] netlink: 28 bytes leftover after parsing attributes in process `syz.4.880'. [ 327.940684][ T5723] rc_core: IR keymap rc-hauppauge not found [ 327.956923][ T5723] Registered IR keymap rc-empty [ 327.971085][ T5723] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 328.005423][ T5723] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 328.034261][ T9127] netlink: 28 bytes leftover after parsing attributes in process `syz.1.879'. [ 328.073012][ T29] audit: type=1326 audit(1778407200.995:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9125 comm="syz.2.881" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2de099cdd9 code=0x0 [ 328.105642][ T5723] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 328.131471][ T5723] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input22 [ 328.166423][ T5723] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 328.285820][ T5723] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 328.313990][ T5723] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 328.335742][ T5723] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 328.367406][ T5723] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 328.863756][ T5723] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 328.891495][ T5723] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 328.912657][ T5723] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 328.960851][ T5723] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 329.118676][ T5723] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 329.151993][ T5723] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 329.168981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 329.179733][ T5723] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 329.404982][ T29] audit: type=1400 audit(1778407202.249:1324): avc: denied { ioctl } for pid=9147 comm="syz.2.884" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 329.735436][ T46] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 329.774936][ T5796] usb 4-1: USB disconnect, device number 26 [ 329.845458][ T29] audit: type=1400 audit(1778407202.642:1325): avc: denied { listen } for pid=9152 comm="syz.2.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 329.875892][ T29] audit: type=1400 audit(1778407202.680:1326): avc: denied { accept } for pid=9152 comm="syz.2.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 329.919802][ T29] audit: type=1400 audit(1778407202.708:1327): avc: denied { setopt } for pid=9152 comm="syz.2.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 329.955885][ T46] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.971815][ T46] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.988050][ T29] audit: type=1400 audit(1778407202.745:1328): avc: denied { listen } for pid=9156 comm="syz.0.887" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 330.015116][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 330.023589][ T46] usb 5-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00 [ 330.057967][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.102597][ T46] usb 5-1: config 0 descriptor?? [ 330.350822][ T9171] netlink: 80 bytes leftover after parsing attributes in process `syz.2.892'. [ 330.549128][ T46] logitech-hidpp-device 0003:046D:C088.000C: unknown main item tag 0x1 [ 330.577231][ T46] logitech-hidpp-device 0003:046D:C088.000C: unexpected long global item [ 330.607496][ T46] logitech-hidpp-device 0003:046D:C088.000C: hidpp_probe:parse failed [ 330.632246][ T46] logitech-hidpp-device 0003:046D:C088.000C: probe with driver logitech-hidpp-device failed with error -22 [ 330.871766][ T9178] qrtr: Invalid version 137 [ 331.033199][ T29] audit: type=1400 audit(1778407202.700:1329): avc: denied { ioctl } for pid=9173 comm="syz.2.893" path="socket:[23052]" dev="sockfs" ino=23052 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 331.359903][ T9178] support for the xor transformation has been removed. [ 331.907721][ T9192] lo speed is unknown, defaulting to 1000 [ 331.913717][ T9192] lo speed is unknown, defaulting to 1000 [ 331.927330][ T9192] lo speed is unknown, defaulting to 1000 [ 331.939305][ T9192] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 331.953989][ T9192] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 331.970948][ T9192] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 331.995234][ T9192] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 332.066969][ T9192] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 332.167642][ T9192] lo speed is unknown, defaulting to 1000 [ 332.174430][ T9192] lo speed is unknown, defaulting to 1000 [ 332.180780][ T9192] lo speed is unknown, defaulting to 1000 [ 332.187148][ T9192] lo speed is unknown, defaulting to 1000 [ 332.194161][ T9192] lo speed is unknown, defaulting to 1000 [ 332.200519][ T9192] lo speed is unknown, defaulting to 1000 [ 332.225867][ T29] audit: type=1400 audit(1778407203.833:1330): avc: denied { accept } for pid=9186 comm="syz.0.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 332.287181][ T9174] fuse: Bad value for 'group_id' [ 332.292990][ T9174] fuse: Bad value for 'group_id' [ 332.676823][ T29] audit: type=1400 audit(1778407204.310:1331): avc: denied { write } for pid=9183 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.776015][ T9209] netlink: 'syz.0.898': attribute type 1 has an invalid length. [ 332.829263][ T9209] netlink: 224 bytes leftover after parsing attributes in process `syz.0.898'. [ 332.886495][ T29] audit: type=1400 audit(1778407204.497:1332): avc: denied { write } for pid=9211 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 333.285185][ T9218] FAULT_INJECTION: forcing a failure. [ 333.285185][ T9218] name failslab, interval 1, probability 0, space 0, times 0 [ 333.315340][ T5796] usb 5-1: USB disconnect, device number 43 [ 333.328669][ T9218] CPU: 1 UID: 0 PID: 9218 Comm: syz.1.900 Not tainted syzkaller #0 PREEMPT(full) [ 333.328690][ T9218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 333.328700][ T9218] Call Trace: [ 333.328706][ T9218] [ 333.328712][ T9218] dump_stack_lvl+0x100/0x190 [ 333.328738][ T9218] should_fail_ex.cold+0x5/0xa [ 333.328761][ T9218] should_failslab+0xc2/0x120 [ 333.328784][ T9218] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 333.328812][ T9218] ? v9fs_init_fs_context+0x13d/0x590 [ 333.328843][ T9218] kstrdup+0x51/0xe0 [ 333.328867][ T9218] v9fs_init_fs_context+0x13d/0x590 [ 333.328885][ T9218] alloc_fs_context+0x60c/0xf40 [ 333.328904][ T9218] path_mount+0xdbd/0x23d0 [ 333.328923][ T9218] ? __pfx_path_mount+0x10/0x10 [ 333.328938][ T9218] ? lockdep_hardirqs_on+0x78/0x100 [ 333.328953][ T9218] ? putname+0xb1/0x110 [ 333.328966][ T9218] ? kmem_cache_free+0x127/0x6c0 [ 333.328996][ T9218] ? __x64_sys_mount+0x293/0x310 [ 333.329018][ T9218] __x64_sys_mount+0x293/0x310 [ 333.329034][ T9218] ? __pfx___x64_sys_mount+0x10/0x10 [ 333.329051][ T9218] ? rcu_is_watching+0x12/0xc0 [ 333.329069][ T9218] do_syscall_64+0x10b/0xf80 [ 333.329083][ T9218] ? clear_bhb_loop+0x40/0x90 [ 333.329095][ T9218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.329107][ T9218] RIP: 0033:0x7fbf03b9cdd9 [ 333.329116][ T9218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.329127][ T9218] RSP: 002b:00007fbf04ac0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 333.329138][ T9218] RAX: ffffffffffffffda RBX: 00007fbf03e15fa0 RCX: 00007fbf03b9cdd9 [ 333.329144][ T9218] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000 [ 333.329150][ T9218] RBP: 00007fbf04ac0090 R08: 0000200000000200 R09: 0000000000000000 [ 333.329157][ T9218] R10: 0000000000800401 R11: 0000000000000246 R12: 0000000000000002 [ 333.329162][ T9218] R13: 00007fbf03e16038 R14: 00007fbf03e15fa0 R15: 00007ffe1d575fd8 [ 333.329175][ T9218] [ 333.545390][ T46] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 333.881363][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 333.889030][ T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.909489][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 333.926617][ T9228] qrtr: Invalid version 137 [ 333.947489][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 333.969086][ T46] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 333.988247][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.004980][ T9232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=9232 comm=syz.2.904 [ 334.020332][ T46] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 334.032642][ T46] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 334.041826][ T9228] support for the xor transformation has been removed. [ 334.091023][ T46] usb 1-1: Manufacturer: syz [ 334.134759][ T46] usb 1-1: config 0 descriptor?? [ 334.167526][ T9232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.904'. [ 334.208355][ T9243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.287811][ T9243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.565343][ T5796] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 335.014191][ T5796] usb 3-1: Using ep0 maxpacket: 16 [ 335.179102][ T5796] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 335.247805][ T5796] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 335.323035][ T5796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 335.402114][ T5796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 335.457595][ T46] rc_core: IR keymap rc-hauppauge not found [ 335.501661][ T9254] 9p: Bad value for 'rfdno' [ 335.530259][ T46] Registered IR keymap rc-empty [ 335.592604][ T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 335.612793][ T5796] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 335.677167][ T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 335.686342][ T5796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.748593][ T5796] usb 3-1: Product: syz [ 335.755957][ T46] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 335.774740][ T5796] usb 3-1: Manufacturer: syz [ 335.791919][ T5796] usb 3-1: SerialNumber: syz [ 335.807333][ T46] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input23 [ 335.827698][ T5796] usb 3-1: config 0 descriptor?? [ 335.876505][ T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 335.943862][ T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 335.967872][ T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 335.997654][ T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 336.018745][ T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 336.041250][ T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 336.072052][ T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 336.127731][ T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 336.141831][ T5796] appledisplay 3-1:0.0: Error while getting initial brightness: -110 [ 336.297035][ T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 336.318149][ T29] audit: type=1400 audit(1778407206.575:1333): avc: denied { bind } for pid=9256 comm="syz.4.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 336.395550][ T5796] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -110 [ 336.405334][ T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 336.536934][ T46] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 336.572275][ T46] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 336.673357][ T46] kernel write not supported for file /amidi2 (pid: 46 comm: kworker/1:1) [ 336.808673][ T46] usb 1-1: USB disconnect, device number 21 [ 337.830926][ T9276] FAULT_INJECTION: forcing a failure. [ 337.830926][ T9276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.847762][ T9276] CPU: 0 UID: 0 PID: 9276 Comm: syz.1.915 Not tainted syzkaller #0 PREEMPT(full) [ 337.847785][ T9276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 337.847795][ T9276] Call Trace: [ 337.847800][ T9276] [ 337.847806][ T9276] dump_stack_lvl+0x100/0x190 [ 337.847831][ T9276] should_fail_ex.cold+0x5/0xa [ 337.847854][ T9276] _copy_from_iter+0x1f4/0x1690 [ 337.847884][ T9276] ? __pfx__copy_from_iter+0x10/0x10 [ 337.847904][ T9276] ? rcu_is_watching+0x12/0xc0 [ 337.847922][ T9276] ? trace_kmalloc+0xe3/0x110 [ 337.847933][ T9276] ? __kasan_kmalloc+0xaa/0xb0 [ 337.847950][ T9276] ? __kmalloc_noprof+0x320/0x850 [ 337.847969][ T9276] kernfs_fop_write_iter+0x186/0x5f0 [ 337.847991][ T9276] vfs_write+0x6ac/0x1070 [ 337.848003][ T9276] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 337.848021][ T9276] ? __pfx_vfs_write+0x10/0x10 [ 337.848041][ T9276] ksys_write+0x12a/0x250 [ 337.848052][ T9276] ? __pfx_ksys_write+0x10/0x10 [ 337.848065][ T9276] ? rcu_is_watching+0x12/0xc0 [ 337.848082][ T9276] do_syscall_64+0x10b/0xf80 [ 337.848096][ T9276] ? clear_bhb_loop+0x40/0x90 [ 337.848109][ T9276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.848120][ T9276] RIP: 0033:0x7fbf03b9cdd9 [ 337.848129][ T9276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.848139][ T9276] RSP: 002b:00007fbf04a9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 337.848150][ T9276] RAX: ffffffffffffffda RBX: 00007fbf03e16090 RCX: 00007fbf03b9cdd9 [ 337.848161][ T9276] RDX: 0000000000000007 RSI: 0000200000000440 RDI: 0000000000000005 [ 337.848167][ T9276] RBP: 00007fbf04a9f090 R08: 0000000000000000 R09: 0000000000000000 [ 337.848173][ T9276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.848178][ T9276] R13: 00007fbf03e16128 R14: 00007fbf03e16090 R15: 00007ffe1d575fd8 [ 337.848192][ T9276] [ 338.541219][ T9284] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 338.668689][ T5723] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 339.244038][ T46] usb 3-1: USB disconnect, device number 25 [ 339.790362][ T9294] veth3: entered promiscuous mode [ 339.795743][ T9294] veth3: entered allmulticast mode [ 339.806958][ T5723] usb 5-1: unable to get BOS descriptor or descriptor too short [ 339.846410][ T5723] usb 5-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 339.937877][ T5626] Bluetooth: hci3: unexpected event for opcode 0x0009 [ 339.981773][ T5723] usb 5-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 340.150396][ T9305] netlink: 28 bytes leftover after parsing attributes in process `syz.0.923'. [ 340.159355][ T9305] netlink: 28 bytes leftover after parsing attributes in process `syz.0.923'. [ 340.397836][ T5723] usb 5-1: config 1 interface 0 has no altsetting 0 [ 340.407049][ T5723] usb 5-1: string descriptor 0 read error: -22 [ 340.413430][ T5723] usb 5-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.40 [ 340.422520][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.436107][ T9302] qrtr: Invalid version 137 [ 340.528462][ T9292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.606030][ T9302] support for the xor transformation has been removed. [ 340.619552][ T9292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.221925][ T9281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.244464][ T9281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.246169][ T9292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.283603][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.917'. [ 341.284605][ T9292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.313812][ T9316] binder_alloc: 9315: binder_alloc_buf, no vma [ 341.316746][ T29] audit: type=1400 audit(1778407211.395:1334): avc: denied { transfer } for pid=9315 comm="syz.2.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 341.682239][ T5795] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 342.098970][ T46] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 342.269930][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 342.275272][ T5723] monterey 0003:0566:3004.000D: unknown main item tag 0x0 [ 342.288664][ T46] usb 1-1: unable to get BOS descriptor or descriptor too short [ 342.330005][ T46] usb 1-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config [ 342.358690][ T5723] monterey 0003:0566:3004.000D: unknown main item tag 0x0 [ 342.366433][ T5723] monterey 0003:0566:3004.000D: unknown main item tag 0x0 [ 342.373580][ T5723] monterey 0003:0566:3004.000D: unknown main item tag 0x0 [ 342.380761][ T5723] monterey 0003:0566:3004.000D: unknown main item tag 0x0 [ 342.388263][ T5723] monterey 0003:0566:3004.000D: unknown main item tag 0x0 [ 342.395314][ T46] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 342.395372][ T5723] monterey 0003:0566:3004.000D: unknown main item tag 0x0 [ 342.411455][ T5723] monterey 0003:0566:3004.000D: unknown main item tag 0x0 [ 342.422386][ T5723] monterey 0003:0566:3004.000D: unknown main item tag 0x0 [ 342.429530][ T5723] monterey 0003:0566:3004.000D: unknown main item tag 0x0 [ 342.445655][ T46] usb 1-1: New USB device found, idVendor=04cc, idProduct=8116, bcdDevice=e7.53 [ 342.463964][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.531147][ T5795] usb 3-1: Using ep0 maxpacket: 8 [ 342.740023][ T5723] monterey 0003:0566:3004.000D: hidraw0: USB HID vff.7f Device [HID 0566:3004] on usb-dummy_hcd.4-1/input0 [ 342.875136][ T5795] usb 3-1: config 129 has an invalid interface number: 164 but max is 0 [ 342.937310][ T5795] usb 3-1: config 129 has no interface number 0 [ 342.989274][ T5795] usb 3-1: config 129 interface 164 has no altsetting 0 [ 343.021847][ T5723] usb 5-1: USB disconnect, device number 44 [ 343.063403][ T5795] usb 3-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=8b.16 [ 343.135974][ T5795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.203249][ T5795] usb 3-1: Product: syz [ 343.245884][ T5795] usb 3-1: Manufacturer: syz [ 343.302228][ T5795] usb 3-1: SerialNumber: syz [ 343.369318][ T46] usb 1-1: Product: syz [ 343.373634][ T46] usb 1-1: Manufacturer: syz [ 343.378229][ T46] usb 1-1: SerialNumber: syz [ 343.385312][ T46] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 343.394052][ T46] usb 1-1: no configuration chosen from 1 choice [ 343.422550][ T9333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.432128][ T9333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.443745][ T9333] tmpfs: Bad value for 'mpol' [ 343.476195][ T9330] fido_id[9330]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 343.537965][ T9336] xt_hashlimit: size too large, truncated to 1048576 [ 343.588387][ T9340] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 343.594989][ T9340] [U] J"—e:ÀÆ" [ 344.194855][ T9346] tipc: Enabled bearer , priority 0 [ 344.587917][ T5796] usb 1-1: USB disconnect, device number 22 [ 345.434630][ T9361] netlink: 28 bytes leftover after parsing attributes in process `syz.1.939'. [ 345.443615][ T9361] netlink: 28 bytes leftover after parsing attributes in process `syz.1.939'. [ 345.815190][ T5795] ums_eneub6250 3-1:129.164: USB Mass Storage device detected [ 346.057259][ T9373] FAULT_INJECTION: forcing a failure. [ 346.057259][ T9373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.070422][ T9373] CPU: 0 UID: 0 PID: 9373 Comm: syz.1.941 Not tainted syzkaller #0 PREEMPT(full) [ 346.070445][ T9373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 346.070456][ T9373] Call Trace: [ 346.070462][ T9373] [ 346.070469][ T9373] dump_stack_lvl+0x100/0x190 [ 346.070495][ T9373] should_fail_ex.cold+0x5/0xa [ 346.070520][ T9373] _copy_to_user+0x32/0xd0 [ 346.070549][ T9373] simple_read_from_buffer+0xcb/0x170 [ 346.070574][ T9373] proc_fail_nth_read+0x1af/0x230 [ 346.070594][ T9373] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 346.070616][ T9373] ? rw_verify_area+0xce/0x6d0 [ 346.070633][ T9373] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 346.070653][ T9373] vfs_read+0x1e4/0xb30 [ 346.070676][ T9373] ? __pfx_vfs_read+0x10/0x10 [ 346.070695][ T9373] ? __fget_files+0x215/0x3d0 [ 346.070723][ T9373] ? __fget_files+0x21f/0x3d0 [ 346.070753][ T9373] ksys_read+0x12a/0x250 [ 346.070772][ T9373] ? __pfx_ksys_read+0x10/0x10 [ 346.070794][ T9373] ? rcu_is_watching+0x12/0xc0 [ 346.070825][ T9373] do_syscall_64+0x10b/0xf80 [ 346.070849][ T9373] ? clear_bhb_loop+0x40/0x90 [ 346.070871][ T9373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.070890][ T9373] RIP: 0033:0x7fbf03b5d60e [ 346.070905][ T9373] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 346.070922][ T9373] RSP: 002b:00007fbf04a7dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 346.070940][ T9373] RAX: ffffffffffffffda RBX: 00007fbf04a7e6c0 RCX: 00007fbf03b5d60e [ 346.070951][ T9373] RDX: 000000000000000f RSI: 00007fbf04a7e0a0 RDI: 0000000000000007 [ 346.070961][ T9373] RBP: 00007fbf04a7e090 R08: 0000000000000000 R09: 0000000000000000 [ 346.070972][ T9373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.070982][ T9373] R13: 00007fbf03e16218 R14: 00007fbf03e16180 R15: 00007ffe1d575fd8 [ 346.071007][ T9373] [ 346.317089][ T5795] usb 3-1: USB disconnect, device number 26 [ 346.385148][ T9376] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 347.007795][ T9390] netlink: 28 bytes leftover after parsing attributes in process `syz.1.945'. [ 347.025803][ T9390] netlink: 28 bytes leftover after parsing attributes in process `syz.1.945'. [ 347.566784][ T29] audit: type=1400 audit(1778407217.243:1335): avc: denied { read } for pid=9401 comm="syz.4.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 347.662558][ T9404] Bluetooth: MGMT ver 1.23 [ 347.705753][ T9404] netlink: 24 bytes leftover after parsing attributes in process `syz.4.950'. [ 347.806063][ T9412] netlink: 'syz.2.951': attribute type 1 has an invalid length. [ 347.828689][ T9412] netlink: 224 bytes leftover after parsing attributes in process `syz.2.951'. [ 348.339729][ T5723] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 348.521948][ T5723] usb 3-1: Using ep0 maxpacket: 16 [ 348.536128][ T5723] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.563161][ T5723] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 348.585531][ T5723] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 348.653323][ T5723] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 348.664404][ T5723] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 348.680421][ T5723] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 348.694500][ T5723] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 348.702568][ T5723] usb 3-1: Manufacturer: syz [ 348.712823][ T5723] usb 3-1: config 0 descriptor?? [ 348.770398][ T9430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.804656][ T9430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.835546][ T9430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.863640][ T9430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.991394][ T5723] rc_core: IR keymap rc-hauppauge not found [ 348.997681][ T5723] Registered IR keymap rc-empty [ 349.008119][ T5795] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 349.072967][ T5723] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 349.101375][ T5723] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 349.120243][ T9434] FAULT_INJECTION: forcing a failure. [ 349.120243][ T9434] name failslab, interval 1, probability 0, space 0, times 0 [ 349.135388][ T5723] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 349.141562][ T9434] CPU: 1 UID: 0 PID: 9434 Comm: syz.0.960 Not tainted syzkaller #0 PREEMPT(full) [ 349.141582][ T9434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 349.141592][ T9434] Call Trace: [ 349.141597][ T9434] [ 349.141603][ T9434] dump_stack_lvl+0x100/0x190 [ 349.141627][ T9434] should_fail_ex.cold+0x5/0xa [ 349.141649][ T9434] should_failslab+0xc2/0x120 [ 349.141666][ T9434] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 349.141687][ T9434] ? anon_vma_clone+0x2ba/0xcd0 [ 349.141711][ T9434] anon_vma_clone+0x2ba/0xcd0 [ 349.141736][ T9434] __split_vma+0x51f/0xd90 [ 349.141767][ T9434] ? __pfx___split_vma+0x10/0x10 [ 349.141799][ T9434] vms_gather_munmap_vmas+0x1d2/0x1720 [ 349.141821][ T9434] ? do_raw_spin_lock+0x128/0x260 [ 349.141844][ T9434] ? find_held_lock+0x2b/0x80 [ 349.141857][ T9434] ? find_held_lock+0x2b/0x80 [ 349.141873][ T9434] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 349.141897][ T9434] ? move_page_tables+0xe1d/0x4500 [ 349.141932][ T9434] do_vmi_align_munmap+0x287/0x5f0 [ 349.141956][ T9434] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 349.142008][ T9434] do_vmi_munmap+0x1f8/0x3e0 [ 349.142034][ T9434] move_vma+0xe5b/0x1920 [ 349.142059][ T9434] ? __pfx_move_vma+0x10/0x10 [ 349.142083][ T9434] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 349.142109][ T9434] ? vrm_set_new_addr+0x204/0x290 [ 349.142132][ T9434] mremap_to+0x234/0x4c0 [ 349.142155][ T9434] ? __pfx_mremap_to+0x10/0x10 [ 349.142175][ T9434] ? check_prep_vma+0x878/0xdf0 [ 349.142201][ T9434] __do_sys_mremap+0xc42/0x1850 [ 349.142227][ T9434] ? find_held_lock+0x2b/0x80 [ 349.142241][ T9434] ? ksys_write+0x190/0x250 [ 349.142260][ T9434] ? ksys_write+0x190/0x250 [ 349.142276][ T9434] ? __pfx___do_sys_mremap+0x10/0x10 [ 349.142304][ T9434] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 349.142328][ T9434] ? __fget_files+0x21f/0x3d0 [ 349.142358][ T9434] ? rcu_is_watching+0x12/0xc0 [ 349.142383][ T9434] do_syscall_64+0x10b/0xf80 [ 349.142403][ T9434] ? clear_bhb_loop+0x40/0x90 [ 349.142421][ T9434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.142436][ T9434] RIP: 0033:0x7f292339cdd9 [ 349.142449][ T9434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.142462][ T9434] RSP: 002b:00007f292420d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 349.142477][ T9434] RAX: ffffffffffffffda RBX: 00007f2923615fa0 RCX: 00007f292339cdd9 [ 349.142487][ T9434] RDX: 0000000000600000 RSI: 0000000000003000 RDI: 0000200000064000 [ 349.142497][ T9434] RBP: 00007f292420d090 R08: 0000200000a00000 R09: 0000000000000000 [ 349.142506][ T9434] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 349.142515][ T9434] R13: 00007f2923616038 R14: 00007f2923615fa0 R15: 00007ffd36575508 [ 349.142536][ T9434] [ 349.513132][ T5723] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input25 [ 349.538162][ T5795] usb 5-1: Using ep0 maxpacket: 8 [ 349.570630][ T5795] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 349.581458][ T5795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.611286][ T5795] usb 5-1: Product: syz [ 349.616715][ T5723] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 349.642505][ T5795] usb 5-1: Manufacturer: syz [ 349.651870][ T5795] usb 5-1: SerialNumber: syz [ 349.664871][ T5723] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 349.686027][ T5723] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 349.718116][ T5723] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 349.768040][ T5723] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 349.835747][ T5723] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 349.923531][ T29] audit: type=1400 audit(1778407219.433:1336): avc: denied { mount } for pid=9443 comm="syz.1.964" name="/" dev="configfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 350.359498][ T5723] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 350.380881][ T5723] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 350.426627][ T5723] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 350.435316][ T29] audit: type=1400 audit(1778407219.442:1337): avc: denied { search } for pid=9443 comm="syz.1.964" name="/" dev="configfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 350.519924][ T5723] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 350.605147][ T5795] usb 5-1: clock source 0 is not valid, cannot use [ 350.663063][ T29] audit: type=1400 audit(1778407219.442:1338): avc: denied { search } for pid=9443 comm="syz.1.964" name="/" dev="configfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 350.928226][ T5723] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 350.937394][ T5723] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 351.442554][ T5795] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 351.491144][ T5795] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 351.561053][ T5795] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 351.583167][ T5795] usb 5-1: clock source 0 is not valid, cannot use [ 351.592135][ T5723] usb 3-1: USB disconnect, device number 27 [ 351.607654][ T5795] usb 5-1: 2:1: cannot get freq (v2/v3): err -71 [ 351.655200][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.969'. [ 351.664067][ T5795] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 351.835523][ T9475] ip6erspan0: entered promiscuous mode [ 351.878454][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.969'. [ 351.893819][ T29] audit: type=1400 audit(1778407221.295:1339): avc: denied { recv } for pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=39814 daddr=10.128.1.88 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 351.924065][ T9482] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 351.996678][ T9481] QAT: Invalid ioctl -2147183769 [ 352.010432][ T9485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.973'. [ 352.020954][ T9485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.973'. [ 352.837434][ T5795] usb 5-1: USB disconnect, device number 45 [ 353.501358][ T5602] udevd[5602]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 353.789453][ T5731] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 354.146931][ T9504] nfs4: Unknown parameter '' [ 354.280312][ T9507] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 354.590910][ T5731] usb 1-1: device descriptor read/64, error -71 [ 354.628994][ T29] audit: type=1400 audit(1778407223.850:1340): avc: denied { setopt } for pid=9493 comm="syz.1.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 354.682668][ T9519] netlink: 'syz.3.982': attribute type 1 has an invalid length. [ 354.708986][ T9520] netlink: 48 bytes leftover after parsing attributes in process `syz.2.984'. [ 354.718068][ T9519] netlink: 224 bytes leftover after parsing attributes in process `syz.3.982'. [ 354.730381][ T5795] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 354.761486][ T9520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9520 comm=syz.2.984 [ 354.900826][ T5731] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 354.908598][ T5795] usb 5-1: device descriptor read/64, error -71 [ 354.993640][ T9525] FAULT_INJECTION: forcing a failure. [ 354.993640][ T9525] name failslab, interval 1, probability 0, space 0, times 0 [ 355.028003][ T9525] CPU: 0 UID: 0 PID: 9525 Comm: syz.2.986 Not tainted syzkaller #0 PREEMPT(full) [ 355.028029][ T9525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 355.028040][ T9525] Call Trace: [ 355.028046][ T9525] [ 355.028053][ T9525] dump_stack_lvl+0x100/0x190 [ 355.028081][ T9525] should_fail_ex.cold+0x5/0xa [ 355.028105][ T9525] ? tomoyo_realpath_from_path+0xb6/0x690 [ 355.028131][ T9525] should_failslab+0xc2/0x120 [ 355.028152][ T9525] __kmalloc_noprof+0xe0/0x850 [ 355.028178][ T9525] ? kfree+0x1dd/0x6c0 [ 355.028205][ T9525] tomoyo_realpath_from_path+0xb6/0x690 [ 355.028236][ T9525] tomoyo_path_number_perm+0x23c/0x580 [ 355.028257][ T9525] ? tomoyo_path_number_perm+0x22e/0x580 [ 355.028280][ T9525] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 355.028327][ T9525] ? find_held_lock+0x2b/0x80 [ 355.028345][ T9525] ? __fget_files+0x215/0x3d0 [ 355.028367][ T9525] ? hook_file_ioctl_common+0x149/0x410 [ 355.028393][ T9525] ? __fget_files+0x215/0x3d0 [ 355.028420][ T9525] ? __fget_files+0x21f/0x3d0 [ 355.028447][ T9525] security_file_ioctl+0xd3/0x230 [ 355.028471][ T9525] __x64_sys_ioctl+0xb7/0x210 [ 355.028492][ T9525] do_syscall_64+0x10b/0xf80 [ 355.028515][ T9525] ? clear_bhb_loop+0x40/0x90 [ 355.028537][ T9525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.028556][ T9525] RIP: 0033:0x7f2de099cdd9 [ 355.028571][ T9525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.028587][ T9525] RSP: 002b:00007f2de184f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 355.028604][ T9525] RAX: ffffffffffffffda RBX: 00007f2de0c15fa0 RCX: 00007f2de099cdd9 [ 355.028615][ T9525] RDX: 0000200000019280 RSI: 000000000000540f RDI: 0000000000000003 [ 355.028625][ T9525] RBP: 00007f2de184f090 R08: 0000000000000000 R09: 0000000000000000 [ 355.028636][ T9525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.028645][ T9525] R13: 00007f2de0c16038 R14: 00007f2de0c15fa0 R15: 00007ffc4a0a6268 [ 355.028668][ T9525] [ 355.028675][ T9525] ERROR: Out of memory at tomoyo_realpath_from_path. [ 355.040392][ T5796] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 355.082444][ T5731] usb 1-1: device descriptor read/64, error -71 [ 355.299736][ T5796] usb 4-1: Using ep0 maxpacket: 16 [ 355.327226][ T5796] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.347516][ T5795] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 355.362002][ T5796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 355.403370][ T5796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 355.428826][ T5796] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 355.435281][ T5731] usb usb1-port1: attempt power cycle [ 355.445232][ T5796] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.474974][ T5796] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 355.488525][ T5796] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 355.499354][ T5795] usb 5-1: device descriptor read/64, error -71 [ 355.502581][ T5796] usb 4-1: Manufacturer: syz [ 355.532794][ T5796] usb 4-1: config 0 descriptor?? [ 355.628598][ T5795] usb usb5-port1: attempt power cycle [ 355.702266][ T5723] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 355.819859][ T5731] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 355.841696][ T5796] rc_core: IR keymap rc-hauppauge not found [ 355.850855][ T5796] Registered IR keymap rc-empty [ 355.861602][ T5796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 355.869556][ T5731] usb 1-1: device descriptor read/8, error -71 [ 355.878340][ T5723] usb 3-1: Using ep0 maxpacket: 8 [ 355.884131][ T5796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 355.900526][ T5723] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 355.908873][ T5723] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.909780][ T5796] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 355.947998][ T5723] usb 3-1: config 0 has no interface number 0 [ 355.952131][ T5796] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input26 [ 355.957223][ T5723] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 355.993841][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.995078][ T5796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 356.002171][ T5795] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 356.014098][ T5723] usb 3-1: Product: syz [ 356.023373][ T5795] usb 5-1: device descriptor read/8, error -71 [ 356.038814][ T5723] usb 3-1: Manufacturer: syz [ 356.050591][ T5723] usb 3-1: SerialNumber: syz [ 356.054963][ T5796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 356.067620][ T5723] usb 3-1: config 0 descriptor?? [ 356.076299][ T5796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 356.098205][ T5796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 356.101222][ T5723] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 356.119113][ T5796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 356.120529][ T5723] uvcvideo 3-1:0.31: No valid video chain found. [ 356.142007][ T5796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 356.172439][ T5731] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 356.172472][ T5796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 356.194902][ T5731] usb 1-1: device descriptor read/8, error -71 [ 356.215786][ T5796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 356.258988][ T5796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 356.290068][ T5796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 356.300705][ T5795] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 356.313036][ T5731] usb usb1-port1: unable to enumerate USB device [ 356.326921][ T5796] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 356.344019][ T5795] usb 5-1: device descriptor read/8, error -71 [ 356.352030][ T5796] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 356.369067][ T46] usb 3-1: USB disconnect, device number 28 [ 356.472145][ T5795] usb usb5-port1: unable to enumerate USB device [ 356.755162][ T46] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 357.017045][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 357.032905][ T46] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 357.049617][ T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.081134][ T46] usb 3-1: config 0 has no interface number 0 [ 357.104467][ T46] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 357.131703][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.158931][ T46] usb 3-1: Product: syz [ 357.170330][ T46] usb 3-1: Manufacturer: syz [ 357.181370][ T46] usb 3-1: SerialNumber: syz [ 357.195709][ T46] usb 3-1: config 0 descriptor?? [ 357.215054][ T46] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 357.231924][ T46] uvcvideo 3-1:0.31: No valid video chain found. [ 357.272759][ T9543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.305632][ T9543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.417722][ T29] audit: type=1400 audit(1778407226.461:1341): avc: denied { map } for pid=9545 comm="syz.4.992" path="socket:[24001]" dev="sockfs" ino=24001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 357.695061][ T9529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.705929][ T9529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.719062][ T9529] netlink: 48 bytes leftover after parsing attributes in process `syz.2.988'. [ 357.756295][ T46] usb 3-1: USB disconnect, device number 29 [ 357.874747][ T5731] usb 4-1: USB disconnect, device number 27 [ 358.282360][ T9555] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 358.476994][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.996'. [ 358.491803][ T9560] trusted_key: encrypted_key: insufficient parameters specified [ 358.515608][ T9559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.996'. [ 358.854729][ T46] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 359.061015][ T9569] comedi comedi3: s526: I/O base address not correctly aligned [ 359.185211][ T46] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 359.227473][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.645455][ T5795] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 359.952377][ T29] audit: type=1400 audit(1778407228.762:1342): avc: denied { connect } for pid=9568 comm="syz.4.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 359.990663][ T46] usb 3-1: Product: syz [ 360.009071][ T46] usb 3-1: Manufacturer: syz [ 360.025061][ T46] usb 3-1: SerialNumber: syz [ 360.092206][ T29] audit: type=1400 audit(1778407228.855:1343): avc: denied { getopt } for pid=9568 comm="syz.4.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 360.252498][ T46] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 360.326931][ T5796] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 360.471817][ T5795] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 360.628064][ T5795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.636427][ T5795] usb 4-1: Product: syz [ 360.640845][ T5795] usb 4-1: Manufacturer: syz [ 360.645203][ T9586] SELinux: security_context_str_to_sid (0xffffffffffffffff) failed with errno=-22 [ 360.671355][ T5795] usb 4-1: SerialNumber: syz [ 361.089372][ T9592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1003'. [ 361.098593][ T9592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1003'. [ 361.294317][ T9563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.997'. [ 361.488727][ T5796] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 361.560805][ T5796] ath9k_htc: Failed to initialize the device [ 361.630333][ T9563] xt_CT: You must specify a L4 protocol and not use inversions on it [ 361.672935][ T35] Bluetooth: hci5: Frame reassembly failed (-84) [ 361.697736][ T5796] usb 3-1: ath9k_htc: USB layer deinitialized [ 361.748859][ T9602] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1007'. [ 361.785053][ T46] usb 3-1: USB disconnect, device number 30 [ 361.809312][ T9602] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1007'. [ 361.822754][ T9603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1008'. [ 362.564780][ T9625] kAFS: unparsable volume name [ 362.623454][ T5795] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 362.656997][ T5795] usb 4-1: USB disconnect, device number 28 [ 362.688536][ T5795] usblp0: removed [ 362.813306][ T9622] mmap: syz.2.1014 (9622): VmData 25837568 exceed data ulimit 2056. Update limits or use boot option ignore_rlimit_data. [ 363.053296][ T9635] ip6t_srh: unknown srh match flags 4000 [ 363.231610][ T9641] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1018'. [ 363.242751][ T9641] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1018'. [ 363.836616][ T5626] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 363.849225][ T5795] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 364.182493][ T5795] usb 1-1: Using ep0 maxpacket: 8 [ 364.268161][ T5795] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 364.268180][ T5795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.268192][ T5795] usb 1-1: Product: syz [ 364.268200][ T5795] usb 1-1: Manufacturer: syz [ 364.268208][ T5795] usb 1-1: SerialNumber: syz [ 364.275560][ T5795] usb 1-1: config 0 descriptor?? [ 364.285054][ T5795] gspca_main: se401-2.14.0 probing 047d:5003 [ 364.600258][ T29] audit: type=1400 audit(1778407233.179:1344): avc: denied { write } for pid=9662 comm="syz.2.1027" name="mouse0" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 364.626375][ T46] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 364.661774][ T5723] hid_parser_main: 4005 callbacks suppressed [ 364.661787][ T5723] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 364.707710][ T5723] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 364.718684][ T5795] gspca_se401: Wrong descriptor type [ 364.796093][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 364.846962][ T46] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.860362][ T5731] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 364.882349][ T46] usb 4-1: config 0 interface 0 has no altsetting 0 [ 364.912238][ T46] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 364.928628][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.944349][ T46] usb 4-1: config 0 descriptor?? [ 365.054455][ T5731] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.068169][ T5731] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 365.087096][ T5731] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 365.101249][ T5731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.113813][ T5731] usb 5-1: Product: syz [ 365.120634][ T5731] usb 5-1: Manufacturer: syz [ 365.128404][ T5731] usb 5-1: SerialNumber: syz [ 365.144331][ T5731] cdc_mbim 5-1:1.0: skipping garbage [ 365.149696][ T5723] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 365.319705][ T5723] usb 3-1: Using ep0 maxpacket: 16 [ 365.329067][ T5723] usb 3-1: unable to get BOS descriptor or descriptor too short [ 365.340434][ T5723] usb 3-1: config 0 has an invalid interface number: 228 but max is 2 [ 365.348768][ T5723] usb 3-1: config 0 has an invalid interface number: 172 but max is 2 [ 365.358087][ T9665] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 365.365397][ T5723] usb 3-1: config 0 has an invalid interface number: 181 but max is 2 [ 365.379552][ T5723] usb 3-1: config 0 has no interface number 0 [ 365.397062][ T46] nzxt-smart2 0003:1E71:2009.000F: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 365.414849][ T5723] usb 3-1: config 0 has no interface number 1 [ 365.453596][ T5723] usb 3-1: config 0 has no interface number 2 [ 365.482179][ T5723] usb 3-1: config 0 interface 228 has no altsetting 0 [ 365.505033][ T5723] usb 3-1: config 0 interface 172 has no altsetting 0 [ 365.520658][ T5723] usb 3-1: config 0 interface 181 has no altsetting 0 [ 365.539573][ T5723] usb 3-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=f1.7f [ 365.553469][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.562473][ T5723] usb 3-1: Product: syz [ 365.566696][ T5723] usb 3-1: Manufacturer: syz [ 365.571360][ T5723] usb 3-1: SerialNumber: syz [ 365.581148][ T5723] usb 3-1: config 0 descriptor?? [ 366.283068][ T9665] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 366.291846][ T5731] cdc_mbim 5-1:1.0: setting tx_max = 16384 [ 366.303247][ T5723] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 366.310924][ T5731] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 366.320309][ T5723] usb 3-1: selecting invalid altsetting 0 [ 366.326391][ T5731] wwan wwan0: port wwan0mbim0 attached [ 366.335366][ T2357] pvrusb2: Invalid write control endpoint [ 366.339953][ T5723] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 366.349583][ T5723] usb 3-1: selecting invalid altsetting 0 [ 366.363937][ T5731] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 4e:1a:e3:cc:31:9e [ 366.378588][ T5723] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 366.396227][ T5723] usb 3-1: selecting invalid altsetting 0 [ 366.417574][ T2357] pvrusb2: Invalid write control endpoint [ 366.429626][ T2357] pvrusb2: Invalid write control endpoint [ 366.433900][ T5723] usb 3-1: USB disconnect, device number 31 [ 366.435528][ T2357] pvrusb2: Invalid write control endpoint [ 366.486237][ T2357] pvrusb2: Invalid write control endpoint [ 366.492735][ T2357] pvrusb2: Invalid write control endpoint [ 366.513002][ T2357] pvrusb2: Invalid write control endpoint [ 366.517914][ C1] wdm_int_callback: 222 callbacks suppressed [ 366.517934][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 366.521202][ T2357] pvrusb2: Invalid write control endpoint [ 366.524690][ C1] wdm_int_callback: 222 callbacks suppressed [ 366.524708][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 366.531597][ T2357] pvrusb2: Invalid write control endpoint [ 366.537843][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 366.543233][ T2357] pvrusb2: Invalid write control endpoint [ 366.549172][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 366.549716][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 366.555133][ T2357] pvrusb2: Invalid write control endpoint [ 366.561574][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 366.562207][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 366.574887][ T2357] pvrusb2: Invalid write control endpoint [ 366.580179][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 366.580246][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 366.586307][ T2357] pvrusb2: Invalid write control endpoint [ 366.629854][ T5731] usb 5-1: USB disconnect, device number 50 [ 366.639370][ T5731] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 366.723715][ T2357] pvrusb2: Invalid write control endpoint [ 366.729525][ T2357] pvrusb2: Invalid write control endpoint [ 366.752107][ T2357] pvrusb2: Invalid write control endpoint [ 366.758626][ T2357] pvrusb2: Invalid write control endpoint [ 366.764688][ T2357] pvrusb2: Invalid write control endpoint [ 366.770467][ T2357] pvrusb2: Invalid write control endpoint [ 366.776529][ T2357] pvrusb2: Invalid write control endpoint [ 366.782305][ T2357] pvrusb2: Invalid write control endpoint [ 366.798134][ T5731] wwan wwan0: port wwan0mbim0 disconnected [ 366.825988][ T2357] pvrusb2: Invalid write control endpoint [ 366.836706][ T5795] usb 1-1: USB disconnect, device number 27 [ 366.874735][ T2357] pvrusb2: Invalid write control endpoint [ 366.889457][ T2357] pvrusb2: Invalid write control endpoint [ 366.903195][ T2357] pvrusb2: Invalid write control endpoint [ 366.919029][ T2357] pvrusb2: Invalid write control endpoint [ 366.931539][ T2357] pvrusb2: Invalid write control endpoint [ 366.950518][ T2357] pvrusb2: Invalid write control endpoint [ 366.967853][ T2357] pvrusb2: Invalid write control endpoint [ 366.982294][ T2357] pvrusb2: Invalid write control endpoint [ 367.008665][ T2357] pvrusb2: Invalid write control endpoint [ 367.014957][ T9692] 8021q: VLANs not supported on ip_vti0 [ 367.029876][ T2357] pvrusb2: Invalid write control endpoint [ 367.045883][ T2357] pvrusb2: Invalid write control endpoint [ 367.214173][ T29] audit: type=1400 audit(1778407235.527:1345): avc: denied { write } for pid=9682 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 367.254776][ T2357] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 367.272433][ T29] audit: type=1400 audit(1778407235.593:1346): avc: denied { write } for pid=9700 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 367.449868][ T9707] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1032'. [ 367.458925][ T9707] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1032'. [ 367.672996][ T5731] usb 4-1: USB disconnect, device number 29 [ 367.784386][ T9710] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1034'. [ 367.813936][ T2357] cs53l32a 2-0011: chip found @ 0x22 (pvrusb2_a) [ 367.821406][ T2357] pvrusb2: Invalid write control endpoint [ 367.827182][ T2357] pvrusb2: Invalid write control endpoint [ 367.835863][ T2357] pvrusb2: Invalid write control endpoint [ 367.841795][ T2357] pvrusb2: Invalid write control endpoint [ 367.847651][ T2357] pvrusb2: Invalid write control endpoint [ 367.853858][ T2357] pvrusb2: Invalid write control endpoint [ 367.859684][ T2357] pvrusb2: Invalid write control endpoint [ 367.867708][ T2357] pvrusb2: Invalid write control endpoint [ 367.873548][ T2357] pvrusb2: Invalid write control endpoint [ 367.879424][ T2357] pvrusb2: Invalid write control endpoint [ 367.888252][ T2357] pvrusb2: Invalid write control endpoint [ 367.894138][ T2357] pvrusb2: Invalid write control endpoint [ 367.900017][ T2357] pvrusb2: Invalid write control endpoint [ 367.905952][ T2357] pvrusb2: Invalid write control endpoint [ 367.911847][ T2357] pvrusb2: Invalid write control endpoint [ 367.917763][ T2357] pvrusb2: Invalid write control endpoint [ 367.923627][ T2357] pvrusb2: Invalid write control endpoint [ 368.286865][ T9711] xt_TPROXY: Can be used only with -p tcp or -p udp [ 368.312189][ T2357] pvrusb2: Invalid write control endpoint [ 368.322210][ T2357] pvrusb2: Invalid write control endpoint [ 368.343124][ T9719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1034'. [ 368.394004][ T2357] pvrusb2: Invalid write control endpoint [ 368.434136][ T2357] pvrusb2: Invalid write control endpoint [ 368.494756][ T2357] pvrusb2: Attached sub-driver cs53l32a [ 368.546923][ T5795] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 368.865550][ T9735] lo speed is unknown, defaulting to 1000 [ 369.576288][ T2357] pvrusb2: Invalid write control endpoint [ 369.590750][ T2357] pvrusb2: Invalid write control endpoint [ 369.633454][ T2357] pvrusb2: Invalid write control endpoint [ 369.881763][ T5795] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 369.953311][ T2357] pvrusb2: Invalid write control endpoint [ 369.965448][ T5795] usb 5-1: config 0 has no interface number 0 [ 369.971689][ T2357] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 370.003935][ T5795] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 370.029148][ T5795] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.039175][ T2357] pvrusb2: Device being rendered inoperable [ 370.047707][ T2357] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 370.063038][ T5795] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 370.084315][ T2357] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 370.104550][ T5795] usb 5-1: config 0 interface 1 has no altsetting 0 [ 370.118748][ T5795] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 370.135657][ T2357] pvrusb2: Invalid write control endpoint [ 370.152261][ T5795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.196151][ T5795] usb 5-1: config 0 descriptor?? [ 370.331493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 370.432211][ T2357] pvrusb2: Invalid write control endpoint [ 370.475001][ T2357] pvrusb2: Invalid write control endpoint [ 370.557903][ T2357] pvrusb2: Invalid write control endpoint [ 370.573004][ T2357] pvrusb2: Invalid write control endpoint [ 370.591119][ T2357] pvrusb2: Invalid write control endpoint [ 370.612990][ T2357] pvrusb2: Invalid write control endpoint [ 370.626383][ T2357] pvrusb2: Invalid write control endpoint [ 370.642804][ T2357] pvrusb2: Invalid write control endpoint [ 370.657822][ T2357] pvrusb2: Invalid write control endpoint [ 370.677854][ T2357] pvrusb2: Invalid write control endpoint [ 370.685888][ T29] audit: type=1400 audit(1778407238.887:1347): avc: denied { write } for pid=9718 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 370.688644][ T2357] pvrusb2: Invalid write control endpoint [ 370.815911][ T2357] pvrusb2: Invalid write control endpoint [ 370.849081][ T2357] pvrusb2: Invalid write control endpoint [ 370.878867][ T2357] pvrusb2: Invalid write control endpoint [ 370.908555][ T2357] pvrusb2: Invalid write control endpoint [ 370.926227][ T2357] pvrusb2: Invalid write control endpoint [ 370.939902][ T2357] pvrusb2: Invalid write control endpoint [ 370.974235][ T2357] pvrusb2: Invalid write control endpoint [ 371.001293][ T2357] pvrusb2: Invalid write control endpoint [ 371.028943][ T2357] pvrusb2: Invalid write control endpoint [ 371.115029][ T9752] dns_resolver: Unsupported content type (152) [ 371.837209][ T5795] usbhid 5-1:0.1: can't add hid device: -71 [ 371.840399][ T9751] can: request_module (can-proto-0) failed. [ 371.892093][ T2357] pvrusb2: Invalid write control endpoint [ 371.902397][ T5795] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 371.903901][ T29] audit: type=1400 audit(1778407240.010:1348): avc: denied { write } for pid=9747 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 371.911609][ T2357] pvrusb2: Invalid write control endpoint [ 371.937881][ T2357] pvrusb2: Invalid write control endpoint [ 371.946060][ T5795] usb 5-1: USB disconnect, device number 51 [ 371.958697][ T2357] pvrusb2: Invalid write control endpoint [ 371.964451][ T2357] pvrusb2: Invalid write control endpoint [ 371.976436][ T2357] pvrusb2: Invalid write control endpoint [ 371.982227][ T2357] pvrusb2: Invalid write control endpoint [ 371.987980][ T2357] pvrusb2: Invalid write control endpoint [ 371.993706][ T2357] pvrusb2: Invalid write control endpoint [ 372.001907][ T2357] pvrusb2: Invalid write control endpoint [ 372.007699][ T2357] pvrusb2: Invalid write control endpoint [ 372.014039][ T2357] pvrusb2: Invalid write control endpoint [ 372.020835][ T2357] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 372.413808][ T9762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.506774][ T9762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.925586][ T2357] cs53l32a 3-0011: chip found @ 0x22 (pvrusb2_b) [ 372.935785][ T2357] pvrusb2: Invalid write control endpoint [ 372.941565][ T2357] pvrusb2: Invalid write control endpoint [ 372.947376][ T2357] pvrusb2: Invalid write control endpoint [ 372.955679][ T2357] pvrusb2: Invalid write control endpoint [ 372.962518][ T2357] pvrusb2: Invalid write control endpoint [ 372.968257][ T2357] pvrusb2: Invalid write control endpoint [ 372.974020][ T2357] pvrusb2: Invalid write control endpoint [ 372.979864][ T2357] pvrusb2: Invalid write control endpoint [ 372.985639][ T2357] pvrusb2: Invalid write control endpoint [ 372.991874][ T2357] pvrusb2: Invalid write control endpoint [ 372.997638][ T2357] pvrusb2: Invalid write control endpoint [ 373.005917][ T2357] pvrusb2: Invalid write control endpoint [ 373.011698][ T2357] pvrusb2: Invalid write control endpoint [ 373.017559][ T2357] pvrusb2: Invalid write control endpoint [ 373.023281][ T2357] pvrusb2: Invalid write control endpoint [ 373.029034][ T2357] pvrusb2: Invalid write control endpoint [ 373.036002][ T2357] pvrusb2: Invalid write control endpoint [ 373.041721][ T2357] pvrusb2: Invalid write control endpoint [ 373.047498][ T2357] pvrusb2: Invalid write control endpoint [ 373.056480][ T2357] pvrusb2: Invalid write control endpoint [ 373.062807][ T2357] pvrusb2: Invalid write control endpoint [ 373.076629][ T2357] pvrusb2: Attached sub-driver cs53l32a [ 373.103982][ T2357] pvrusb2: Invalid write control endpoint [ 373.109906][ T2357] pvrusb2: Invalid write control endpoint [ 373.115666][ T2357] pvrusb2: Invalid write control endpoint [ 373.122323][ T2357] pvrusb2: Invalid write control endpoint [ 373.132498][ T2357] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 373.156832][ T2357] pvrusb2: Device being rendered inoperable [ 373.162825][ T2357] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 373.178210][ T2357] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 373.469041][ T2357] pvrusb2: Invalid write control endpoint [ 374.148176][ T9782] netlink: 480 bytes leftover after parsing attributes in process `syz.1.1045'. [ 374.609451][ T9785] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1046'. [ 374.618755][ T9785] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1046'. [ 374.753552][ T2357] pvrusb2: Invalid write control endpoint [ 374.759431][ T2357] pvrusb2: Invalid write control endpoint [ 374.765214][ T2357] pvrusb2: Invalid write control endpoint [ 374.770977][ T2357] pvrusb2: Invalid write control endpoint [ 374.776740][ T2357] pvrusb2: Invalid write control endpoint [ 374.782547][ T2357] pvrusb2: Invalid write control endpoint [ 374.834386][ T2357] pvrusb2: Invalid write control endpoint [ 374.867012][ T2357] pvrusb2: Invalid write control endpoint [ 374.886665][ T2357] pvrusb2: Invalid write control endpoint [ 374.905152][ T2357] pvrusb2: Invalid write control endpoint [ 374.936877][ T2357] pvrusb2: Invalid write control endpoint [ 375.083682][ T2357] pvrusb2: Invalid write control endpoint [ 375.098914][ T9793] support for the xor transformation has been removed. [ 375.174344][ T2357] pvrusb2: Invalid write control endpoint [ 375.563242][ T9794] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1049'. [ 375.593697][ T2357] pvrusb2: Invalid write control endpoint [ 375.680767][ T2357] pvrusb2: Invalid write control endpoint [ 375.711349][ T2357] pvrusb2: Invalid write control endpoint [ 375.747506][ T2357] pvrusb2: Invalid write control endpoint [ 375.921218][ T2357] pvrusb2: Invalid write control endpoint [ 375.965338][ T2357] pvrusb2: Invalid write control endpoint [ 376.010024][ T2357] pvrusb2: Invalid write control endpoint [ 376.013785][ T9799] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1052'. [ 376.037411][ T9799] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1052'. [ 376.039487][ T2357] pvrusb2: Invalid write control endpoint [ 376.262629][ T803] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 376.271266][ T2357] pvrusb2: Invalid write control endpoint [ 376.321334][ T2357] pvrusb2: Invalid write control endpoint [ 376.339859][ T2357] pvrusb2: Invalid write control endpoint [ 376.357164][ T2357] pvrusb2: Invalid write control endpoint [ 376.376086][ T2357] pvrusb2: Invalid write control endpoint [ 376.396689][ T2357] pvrusb2: Invalid write control endpoint [ 376.414246][ T2357] pvrusb2: Invalid write control endpoint [ 376.430793][ T2357] pvrusb2: Invalid write control endpoint [ 376.446946][ T2357] pvrusb2: Invalid write control endpoint [ 376.469763][ T2357] pvrusb2: Invalid write control endpoint [ 376.476100][ T803] usb 5-1: Using ep0 maxpacket: 8 [ 376.510122][ T2357] pvrusb2: Invalid write control endpoint [ 376.511560][ T803] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 376.555717][ T2357] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 376.584638][ T803] usb 5-1: config 0 has no interface number 0 [ 376.597926][ T803] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 376.618848][ T803] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 376.670047][ T803] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 376.712419][ T803] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 376.770191][ T803] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 376.794226][ T2357] cs53l32a 2-0011: chip found @ 0x22 (pvrusb2_c) [ 376.800669][ T2357] pvrusb2: Invalid write control endpoint [ 376.806408][ T2357] pvrusb2: Invalid write control endpoint [ 376.820884][ T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.824159][ T9817] ip6gre1: entered promiscuous mode [ 376.834916][ T9815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.844117][ T803] usb 5-1: config 0 descriptor?? [ 376.858508][ T803] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 376.861581][ T9815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.872732][ T2357] pvrusb2: Invalid write control endpoint [ 376.876469][ T9817] ip6gre1: entered allmulticast mode [ 376.881219][ T2357] pvrusb2: Invalid write control endpoint [ 377.224229][ T5795] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 377.367100][ T2357] pvrusb2: Invalid write control endpoint [ 377.372866][ T2357] pvrusb2: Invalid write control endpoint [ 377.378657][ T2357] pvrusb2: Invalid write control endpoint [ 377.384533][ T2357] pvrusb2: Invalid write control endpoint [ 377.391520][ T2357] pvrusb2: Invalid write control endpoint [ 377.394373][ T9823] netlink: 'syz.4.1053': attribute type 3 has an invalid length. [ 377.408417][ T2357] pvrusb2: Invalid write control endpoint [ 377.416480][ T2357] pvrusb2: Invalid write control endpoint [ 377.421432][ T9823] netlink: 'syz.4.1053': attribute type 3 has an invalid length. [ 377.425012][ T2357] pvrusb2: Invalid write control endpoint [ 377.443025][ T2357] pvrusb2: Invalid write control endpoint [ 377.449630][ T2357] pvrusb2: Invalid write control endpoint [ 377.456101][ T2357] pvrusb2: Invalid write control endpoint [ 377.471041][ T5795] usb 4-1: Using ep0 maxpacket: 32 [ 377.475762][ T2357] pvrusb2: Invalid write control endpoint [ 377.478827][ T5795] usb 4-1: config 12 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 377.482719][ T9825] tipc: Enabled bearer , priority 0 [ 377.499890][ T2357] pvrusb2: Invalid write control endpoint [ 377.505612][ T9823] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 377.514717][ T2357] pvrusb2: Invalid write control endpoint [ 377.525411][ T2357] pvrusb2: Invalid write control endpoint [ 377.528271][ T5795] usb 4-1: config 12 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 377.537055][ T2357] pvrusb2: Invalid write control endpoint [ 377.567449][ T2357] pvrusb2: Invalid write control endpoint [ 377.593523][ T5795] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 377.606848][ T5795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.639648][ T5795] usb 4-1: Product: syz [ 377.652841][ T2357] pvrusb2: Attached sub-driver cs53l32a [ 377.675787][ T5795] usb 4-1: Manufacturer: syz [ 377.684887][ T2357] pvrusb2: Invalid write control endpoint [ 377.690734][ T2357] pvrusb2: Invalid write control endpoint [ 377.696804][ T2357] pvrusb2: Invalid write control endpoint [ 377.702546][ T2357] pvrusb2: Invalid write control endpoint [ 377.709590][ T5795] usb 4-1: SerialNumber: syz [ 377.736557][ T2357] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 377.798253][ T2357] pvrusb2: Device being rendered inoperable [ 377.814064][ T9825] syzkaller0: entered promiscuous mode [ 377.818396][ T2357] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 377.819651][ T9825] syzkaller0: entered allmulticast mode [ 377.862482][ T2357] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 377.873055][ T9825] tipc: Resetting bearer [ 377.896304][ T5601] udevd[5601]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 377.925084][ T9830] netem: change failed [ 378.036425][ T5731] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 378.175630][ T5731] usb 1-1: device descriptor read/64, error -71 [ 378.570597][ T5731] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 378.591747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 378.725938][ T9837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.766206][ T5731] usb 1-1: device descriptor read/64, error -71 [ 378.782772][ T9837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.846374][ T9840] siw: device registration error -23 [ 378.890051][ T9840] smc: removing ib device syz2 [ 378.926244][ T5731] usb usb1-port1: attempt power cycle [ 379.317600][ T9843] qrtr: Invalid version 137 [ 379.411484][ T5723] usb 5-1: USB disconnect, device number 52 [ 379.457470][ T5731] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 379.985924][ T5731] usb 1-1: device descriptor read/8, error -71 [ 380.313084][ T5723] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 380.474769][ T5731] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 380.659852][ T5731] usb 1-1: device descriptor read/8, error -71 [ 380.821814][ T9828] tipc: Resetting bearer [ 380.828149][ T5731] usb usb1-port1: unable to enumerate USB device [ 380.901317][ T9853] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1065'. [ 380.936120][ T9840] smbdirect: ib_dev[syz2] removed [ 380.979980][ T9851] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1065'. [ 382.252649][ T9865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.264336][ T9865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.520234][ T9869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.562838][ T9869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.592473][ T9869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.634228][ T9869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.487294][ T9828] tipc: Disabling bearer [ 383.511484][ T9853] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1065'. [ 383.521577][ T9867] syz_tun: entered allmulticast mode [ 383.532872][ T9864] syz_tun: left allmulticast mode [ 383.912763][ T9882] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1072'. [ 383.921844][ T9882] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1072'. [ 384.234308][ T5723] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 384.313577][ T5731] usb 4-1: USB disconnect, device number 30 [ 384.410246][ T5723] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.420799][ T5723] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 384.430131][ T5723] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 384.440122][ T5723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.451124][ T5723] usb 1-1: config 0 descriptor?? [ 384.781020][ T9893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.429626][ T9893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.724124][ T9922] qrtr: Invalid version 137 [ 386.830778][ T803] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 387.218774][ T5723] Bluetooth: Can't get state to change to load ram patch err [ 387.236559][ T5723] Bluetooth: Loading patch file failed [ 387.254063][ T5723] ath3k 1-1:0.0: probe with driver ath3k failed with error -71 [ 387.264160][ T5723] usb 1-1: USB disconnect, device number 32 [ 387.398979][ T9922] support for the xor transformation has been removed. [ 387.441453][ T803] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.453637][ T803] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 387.474190][ T803] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 387.511488][ T803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.519980][ T803] usb 5-1: Product: syz [ 387.524158][ T803] usb 5-1: Manufacturer: syz [ 387.529035][ T803] usb 5-1: SerialNumber: syz [ 387.588229][ T803] cdc_mbim 5-1:1.0: skipping garbage [ 387.750707][ T5723] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 387.801455][ T9918] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 388.156448][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.220101][ T5731] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 388.227810][ T5723] usb 1-1: device descriptor read/64, error -71 [ 388.768470][ T5731] usb 3-1: Using ep0 maxpacket: 16 [ 388.789681][ T9918] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 388.828631][ T803] cdc_mbim 5-1:1.0: setting tx_max = 16384 [ 388.907218][ T803] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 388.990784][ T803] wwan wwan0: port wwan0mbim0 attached [ 389.084871][ T29] audit: type=1326 audit(1778407256.096:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.3.1094" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82439cdd9 code=0x7ffc0000 [ 389.280702][ T29] audit: type=1326 audit(1778407256.096:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.3.1094" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82439cdd9 code=0x7ffc0000 [ 389.349844][ T803] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, b2:82:d6:67:24:0d [ 389.373845][ T5731] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 389.395362][ T5731] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 389.417784][ T5731] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 389.420682][ T29] audit: type=1326 audit(1778407256.096:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.3.1094" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82439cdd9 code=0x7ffc0000 [ 389.426926][ T5731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.463512][ T5731] usb 3-1: Product: syz [ 389.467847][ T803] usb 5-1: USB disconnect, device number 53 [ 389.471556][ T5731] usb 3-1: Manufacturer: syz [ 389.482990][ T5731] usb 3-1: SerialNumber: syz [ 389.486145][ T803] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 389.489474][ T5731] usb 3-1: config 0 descriptor?? [ 389.519969][ T5731] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 389.529666][ T5723] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 389.537387][ T5731] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 389.564820][ T29] audit: type=1326 audit(1778407256.096:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.3.1094" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82439cdd9 code=0x7ffc0000 [ 389.594079][ T29] audit: type=1326 audit(1778407256.096:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.3.1094" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fb82439cdd9 code=0x7ffc0000 [ 389.633089][ T803] wwan wwan0: port wwan0mbim0 disconnected [ 389.675703][ T29] audit: type=1326 audit(1778407256.152:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.3.1094" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82439cdd9 code=0x7ffc0000 [ 389.705321][ T5723] usb 1-1: device descriptor read/64, error -71 [ 389.706762][ T29] audit: type=1326 audit(1778407256.152:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.3.1094" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82439cdd9 code=0x7ffc0000 [ 389.745384][ T9942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.759523][ T9942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.866245][ T5723] usb usb1-port1: attempt power cycle [ 390.096072][ T29] audit: type=1326 audit(1778407256.152:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.3.1094" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82439cdd9 code=0x7ffc0000 [ 390.259602][ T29] audit: type=1326 audit(1778407256.162:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.3.1094" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fb82439cdd9 code=0x7ffc0000 [ 390.340109][ T29] audit: type=1326 audit(1778407256.162:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.3.1094" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82439cdd9 code=0x7ffc0000 [ 390.366697][ T5723] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 390.405775][ T5723] usb 1-1: device descriptor read/8, error -71 [ 390.870200][ T5723] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 390.893327][ T5723] usb 1-1: device descriptor read/8, error -71 [ 391.024264][ T5723] usb usb1-port1: unable to enumerate USB device [ 391.055248][ T9988] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1099'. [ 391.347067][ T9970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.450433][ T5731] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 391.554951][ T5731] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 391.564836][ T9970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.580787][ T5731] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 391.599049][ T5731] em28xx 3-1:0.0: No AC97 audio processor [ 392.772331][ T5731] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 392.917200][T10027] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1104'. [ 392.944463][ T5731] usb 5-1: Using ep0 maxpacket: 16 [ 392.957279][ T5731] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 392.979921][ T5731] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 393.018885][ T5723] usb 3-1: USB disconnect, device number 32 [ 393.025507][ T5723] em28xx 3-1:0.0: Disconnecting em28xx [ 393.062280][ T5731] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 393.087244][ T5723] em28xx 3-1:0.0: Freeing device [ 393.096581][ T5731] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.130916][ T5731] usb 5-1: config 0 descriptor?? [ 393.145671][T10027] netlink: 'syz.3.1104': attribute type 4 has an invalid length. [ 393.164521][ T5731] pxrc 5-1:0.0: Could not find endpoint [ 393.184547][ T5731] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 393.484563][ T803] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 393.522836][T10041] IPVS: length: 115 != 24 [ 393.938832][ T803] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 393.974888][ T803] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 394.008674][ T803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.035336][ T803] usb 1-1: Product: syz [ 394.052073][ T803] usb 1-1: Manufacturer: syz [ 394.068949][ T803] usb 1-1: SerialNumber: syz [ 395.291505][ T46] usb 5-1: USB disconnect, device number 54 [ 395.429280][T10051] tipc: Failed to remove unknown binding: 66,0,0/1616748235:660465046/660465048 [ 395.526251][T10049] netlink: 'syz.4.1109': attribute type 3 has an invalid length. [ 395.535460][T10049] netlink: 'syz.4.1109': attribute type 3 has an invalid length. [ 395.593599][T10054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1111'. [ 395.787949][T10058] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1112'. [ 396.131896][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 396.131912][ T29] audit: type=1400 audit(1778407262.694:1426): avc: denied { write } for pid=10063 comm="syz.3.1115" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 396.738140][ T30] INFO: task kworker/1:8:5872 blocked for more than 144 seconds. [ 396.761355][ T30] Not tainted syzkaller #0 [ 396.776206][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 396.786262][ T30] task:kworker/1:8 state:D stack:22504 pid:5872 tgid:5872 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 396.799659][ T30] Workqueue: usb_hub_wq hub_event [ 396.805916][ T30] Call Trace: [ 396.810365][ T30] [ 396.814255][ T30] __schedule+0x1295/0x67a0 [ 396.820005][ T30] ? __pfx___schedule+0x10/0x10 [ 396.826739][ T30] ? find_held_lock+0x2b/0x80 [ 396.832984][ T30] ? schedule+0x2bf/0x390 [ 396.838481][ T30] schedule+0xdd/0x390 [ 396.857084][ T30] schedule_timeout+0x1b2/0x280 [ 396.866517][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 396.875743][ T30] __wait_for_common+0x2e7/0x4c0 [ 396.885128][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 396.896091][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 396.907161][ T30] ? __pfx_device_del+0x10/0x10 [ 396.913204][ T30] ? kobject_put+0xb9/0x640 [ 396.918460][ T30] i2c_del_adapter+0x62d/0x820 [ 396.927701][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 396.937831][ T30] ? __pfx_i2c_del_adapter+0x10/0x10 [ 396.948730][ T30] ? dvb_usbv2_exit.isra.0+0x310/0xb70 [ 396.957583][ T30] ? dvb_usbv2_exit.isra.0+0x40c/0xb70 [ 396.969088][ T30] ? kfree+0x223/0x6c0 [ 396.979850][ T30] dvb_usbv2_exit.isra.0+0x4aa/0xb70 [ 396.991087][ T30] dvb_usbv2_probe+0x669/0x970 [ 396.996411][ T30] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 397.002394][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 397.008561][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 397.013869][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 397.019998][ T30] ? __pm_runtime_set_status+0x13c/0x970 [ 397.025905][ T30] usb_probe_interface+0x303/0x8f0 [ 397.031087][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 397.037112][ T30] really_probe+0x241/0xa60 [ 397.041685][ T30] __driver_probe_device+0x22e/0x480 [ 397.047282][ T30] driver_probe_device+0x4c/0x1b0 [ 397.091904][ T30] __device_attach_driver+0x1df/0x340 [ 397.101237][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 397.101563][ T5723] usb 1-1: USB disconnect, device number 37 [ 397.107212][ T30] bus_for_each_drv+0x159/0x1e0 [ 397.127284][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 397.134803][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 397.140328][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 397.146483][ T30] __device_attach+0x1e4/0x4d0 [ 397.151244][ T30] ? __pfx___device_attach+0x10/0x10 [ 397.156595][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 397.161809][ T30] device_initial_probe+0xaf/0xd0 [ 397.166909][ T30] bus_probe_device+0x64/0x160 [ 397.171696][ T30] device_add+0x1210/0x1950 [ 397.176265][ T30] ? __pfx_device_add+0x10/0x10 [ 397.181120][ T30] ? usb_cache_string+0x20/0x100 [ 397.186085][ T30] ? kfree+0x223/0x6c0 [ 397.190150][ T30] usb_set_configuration+0xd97/0x1c60 [ 397.195517][ T30] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 397.201782][ T30] usb_generic_driver_probe+0xa1/0xe0 [ 397.207560][ T30] usb_probe_device+0xef/0x400 [ 397.212350][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 397.217776][ T30] really_probe+0x241/0xa60 [ 397.222280][ T30] __driver_probe_device+0x22e/0x480 [ 397.227544][ T30] ? usb_driver_applicable+0x1c7/0x220 [ 397.233045][ T30] driver_probe_device+0x4c/0x1b0 [ 397.238075][ T30] __device_attach_driver+0x1df/0x340 [ 397.243547][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 397.249447][ T30] bus_for_each_drv+0x159/0x1e0 [ 397.254340][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 397.259710][ T30] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 397.265539][ T30] __device_attach+0x1e4/0x4d0 [ 397.270296][ T30] ? __pfx___device_attach+0x10/0x10 [ 397.275675][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 397.280887][ T30] device_initial_probe+0xaf/0xd0 [ 397.285991][ T30] bus_probe_device+0x64/0x160 [ 397.290765][ T30] device_add+0x1210/0x1950 [ 397.295276][ T30] ? __pfx_device_add+0x10/0x10 [ 397.300130][ T30] ? usb_detect_static_quirks+0x335/0x3e0 [ 397.305897][ T30] ? kfree+0x223/0x6c0 [ 397.309967][ T30] usb_new_device.cold+0x685/0x115c [ 397.315317][ T30] ? __pfx_usb_new_device+0x10/0x10 [ 397.320525][ T30] hub_event+0x314d/0x4af0 [ 397.325054][ T30] ? __pfx_hub_event+0x10/0x10 [ 397.329848][ T30] ? assoc_array_insert+0x3010/0x32c0 [ 397.335264][ T30] ? rcu_is_watching+0x12/0xc0 [ 397.340122][ T30] process_one_work+0xa0e/0x1980 [ 397.345084][ T30] ? __pfx_process_one_work+0x10/0x10 [ 397.350530][ T30] ? __pfx_hub_event+0x10/0x10 [ 397.355296][ T30] worker_thread+0x5ef/0xe50 [ 397.359943][ T30] ? __pfx_worker_thread+0x10/0x10 [ 397.365054][ T30] ? kthread+0x13a/0x450 [ 397.369341][ T30] ? __pfx_worker_thread+0x10/0x10 [ 397.374459][ T30] kthread+0x370/0x450 [ 397.378547][ T30] ? __pfx_kthread+0x10/0x10 [ 397.383135][ T30] ret_from_fork+0x72b/0xd50 [ 397.387713][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 397.392846][ T30] ? __switch_to+0x800/0x1100 [ 397.397526][ T30] ? __pfx_kthread+0x10/0x10 [ 397.402160][ T30] ret_from_fork_asm+0x1a/0x30 [ 397.406929][ T30] [ 397.419099][ T30] [ 397.419099][ T30] Showing all locks held in the system: [ 397.436076][ T30] 2 locks held by ksoftirqd/0/15: [ 397.442127][ T30] #0: ffff8880b843b2a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 397.452381][ T30] #1: ffff8880b8424648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2f15/0x67a0 [ 397.461309][ T30] 1 lock held by khungtaskd/30: [ 397.468687][ T30] #0: ffffffff8e7e54e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 397.480090][ T30] 2 locks held by getty/5368: [ 397.485022][ T30] #0: ffff88803990e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 397.494860][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 397.505619][ T30] 5 locks held by kworker/1:8/5872: [ 397.510865][ T30] #0: ffff88801f6afd40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 397.521706][ T30] #1: ffffc9000514fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 397.532979][ T30] #2: ffff88802b92c1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 397.541907][ T30] #3: ffff88823be121d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 397.551291][ T30] #4: ffff88802c8981a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 397.560542][ T30] [ 397.562853][ T30] ============================================= [ 397.562853][ T30] [ 397.571713][ T30] NMI backtrace for cpu 0 [ 397.571725][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 397.571744][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 397.571753][ T30] Call Trace: [ 397.571759][ T30] [ 397.571766][ T30] dump_stack_lvl+0x100/0x190 [ 397.571789][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 397.571813][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 397.571835][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 397.571857][ T30] sys_info+0x141/0x190 [ 397.571882][ T30] watchdog+0xcb1/0x1030 [ 397.571907][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 397.571929][ T30] ? __pfx_watchdog+0x10/0x10 [ 397.571950][ T30] ? __kthread_parkme+0x18c/0x230 [ 397.571970][ T30] ? kthread+0x13a/0x450 [ 397.571989][ T30] ? __pfx_watchdog+0x10/0x10 [ 397.572007][ T30] kthread+0x370/0x450 [ 397.572026][ T30] ? __pfx_kthread+0x10/0x10 [ 397.572045][ T30] ret_from_fork+0x72b/0xd50 [ 397.572064][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 397.572082][ T30] ? __switch_to+0x800/0x1100 [ 397.572103][ T30] ? __pfx_kthread+0x10/0x10 [ 397.572119][ T30] ret_from_fork_asm+0x1a/0x30 [ 397.572147][ T30] [ 397.572155][ T30] Sending NMI from CPU 0 to CPUs 1: [ 397.698363][ C1] NMI backtrace for cpu 1 [ 397.698378][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 397.698394][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 397.698401][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 397.698423][ C1] Code: e6 92 02 e9 c3 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 10 21 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 397.698436][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000242 [ 397.698448][ C1] RAX: 0000000001f48def RBX: ffff88801e2ba500 RCX: ffffffff8b8a8095 [ 397.698457][ C1] RDX: 0000000000000000 RSI: ffffffff8df20f5d RDI: ffffffff8c1c3800 [ 397.698466][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a67b5 [ 397.698474][ C1] R10: ffff8880b8533dab R11: 0000000000000000 R12: 0000000000000001 [ 397.698482][ C1] R13: ffffed1003c574a0 R14: 0000000000000001 R15: ffffffff90d7ad50 [ 397.698491][ C1] FS: 0000000000000000(0000) GS:ffff888124472000(0000) knlGS:0000000000000000 [ 397.698505][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 397.698514][ C1] CR2: 000000110c42e41e CR3: 000000007609a000 CR4: 00000000003526f0 [ 397.698522][ C1] Call Trace: [ 397.698527][ C1] [ 397.698531][ C1] default_idle+0x9/0x10 [ 397.698550][ C1] default_idle_call+0x6c/0xb0 [ 397.698569][ C1] do_idle+0x464/0x590 [ 397.698584][ C1] ? __pfx_do_idle+0x10/0x10 [ 397.698596][ C1] ? do_idle+0x30c/0x590 [ 397.698609][ C1] cpu_startup_entry+0x4f/0x60 [ 397.698622][ C1] start_secondary+0x21d/0x2d0 [ 397.698637][ C1] ? __pfx_start_secondary+0x10/0x10 [ 397.698654][ C1] common_startup_64+0x13e/0x148 [ 397.698677][ C1] [ 397.700460][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 397.700473][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 397.700490][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 397.700498][ T30] Call Trace: [ 397.700504][ T30] [ 397.700510][ T30] dump_stack_lvl+0x100/0x190 [ 397.700533][ T30] vpanic+0x552/0x970 [ 397.700548][ T30] ? __pfx_vpanic+0x10/0x10 [ 397.700563][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 397.700581][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 397.700600][ T30] panic+0xd1/0xe0 [ 397.700614][ T30] ? __pfx_panic+0x10/0x10 [ 397.700631][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 397.700647][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 397.700663][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 397.700678][ T30] ? watchdog.cold+0x1ec/0x234 [ 397.700694][ T30] ? watchdog+0xcc1/0x1030 [ 397.700713][ T30] watchdog.cold+0x1fd/0x234 [ 397.700734][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 397.700754][ T30] ? __pfx_watchdog+0x10/0x10 [ 397.700772][ T30] ? __kthread_parkme+0x18c/0x230 [ 397.700791][ T30] ? kthread+0x13a/0x450 [ 397.700812][ T30] ? __pfx_watchdog+0x10/0x10 [ 397.700828][ T30] kthread+0x370/0x450 [ 397.700845][ T30] ? __pfx_kthread+0x10/0x10 [ 397.700865][ T30] ret_from_fork+0x72b/0xd50 [ 397.700885][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 397.700905][ T30] ? __switch_to+0x800/0x1100 [ 397.700929][ T30] ? __pfx_kthread+0x10/0x10 [ 397.700948][ T30] ret_from_fork_asm+0x1a/0x30 [ 397.700979][ T30] [ 398.023719][ T30] Kernel Offset: disabled [ 398.028025][ T30] Rebooting in 86400 seconds..