last executing test programs: 2m13.124251104s ago: executing program 1 (id=925): socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0xb00, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 2m12.916664595s ago: executing program 1 (id=927): r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x109842, 0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=@ipv6_getroute={0xb4, 0x1a, 0x400, 0x70bd25, 0x25dfdbfe, {0xa, 0x20, 0x80, 0x1, 0xfd, 0x4, 0x0, 0x1, 0x1400}, [@RTA_ENCAP={0x60, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x5c, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x58, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x52, 0x3, "5090c9a889c97e62e88773b8a5c4c6c6b17b1489a12d8bb40436056ff78e348e349f761d537f13c98e9721bc255a4ba2f8257a5dab7c8ec7e324b9bb18ce81667878d3910cd98133fa36b351a074"}}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_PRIORITY={0x8, 0x6, 0x8}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5, 0x5, 0x6}}, @RTA_PREF={0x5, 0x14, 0x3f}, @RTA_MULTIPATH={0xc, 0x9, {0x7ff, 0x3, 0x5, r1}}, @RTA_UID={0x8, 0x19, 0xffffffffffffffff}]}, 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x4004890) 2m10.370885234s ago: executing program 1 (id=934): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e61, 0x2, @loopback, 0x7fffffff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a60c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc86", 0xc1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xc1}], 0x1) 2m10.248238364s ago: executing program 1 (id=936): mkdir(&(0x7f0000000380)='./file2/file0\x00', 0x897e8bdea0f5c7a9) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file2/file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_nofollow}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a09040000000000000000020000000900020073797a300000000009000100730d7830000000000900020073797a3100000000140000001100010000000000000000000000000a"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) ioctl$XFS_IOC_FSGROWFSDATA(r2, 0x4010586e, &(0x7f0000000240)={0x3, 0xffff0000}) r3 = accept(r1, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x28101) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, &(0x7f00000000c0)={0x1c, 0x1, 'client1\x00', 0x100000000, "c541e12dfbe471c9", "2df8e76a1ee147923397f2e86368ef29c0d68b94502a7a9fcc1405eea0b21367", 0xd3, 0x4}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) mknodat$loop(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r5 = open(&(0x7f0000000400)='./file0\x00', 0x20800, 0x718bb647156ec3a7) chdir(&(0x7f0000000000)='./bus\x00') linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000180)='./file2\x00', 0x1000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20000000) socket(0xb, 0x4, 0x2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) getdents64(r5, &(0x7f00000001c0)=""/4, 0x4) 2m9.347280468s ago: executing program 1 (id=940): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x674, 0x4080800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') socket$nl_generic(0x10, 0x3, 0x10) pread64(r3, 0x0, 0x0, 0x100008) 2m7.622572094s ago: executing program 1 (id=943): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1], 0x15) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79}) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x0, 0x8, 0xfffffff9, 0x7}}]}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000140)={0x0, 0x401}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) 1m52.30477174s ago: executing program 32 (id=943): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1], 0x15) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79}) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x0, 0x8, 0xfffffff9, 0x7}}]}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000140)={0x0, 0x401}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) 1m17.937398435s ago: executing program 4 (id=1112): prlimit64(0x0, 0xc, &(0x7f0000000200)={0x1, 0xe4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000010140)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6, 0x3}]}}}], 0x18}}], 0x2, 0x20000000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0xfffffffe}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) r5 = gettid() syz_open_procfs$namespace(r5, &(0x7f0000000000)='ns/user\x00') read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sysinfo(&(0x7f0000000800)=""/4096) 1m15.169810014s ago: executing program 4 (id=1124): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) close_range(r2, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r5) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000100)={0x0, 0xfffffffffffffd0a, &(0x7f00000006c0)={&(0x7f0000000240)={0x34, r6, 0x303, 0x0, 0x0, {0x13}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0xc, 0x2}]}, 0x34}}, 0x0) 1m14.927405819s ago: executing program 4 (id=1126): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = accept(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) socket$l2tp(0x2, 0x2, 0x73) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0x13, 0x0, &(0x7f0000000040)=0xff13) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000280)={0x80000000, 0x0, &(0x7f0000000200)}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) unshare(0x66000080) r5 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000500)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x3, 0x1, 0x6}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000540)={&(0x7f0000000300)=[0x0], 0x1, r8}) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x23, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x5, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x9, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0xbe1}}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000140007800800064000000200080008"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r10 = gettid() sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r6, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r10], 0x28}}, 0x0) 1m12.608251664s ago: executing program 4 (id=1136): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008880)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x80000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0xa53, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xfffffdfd, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0x0, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) (fail_nth: 3) 1m11.948470294s ago: executing program 4 (id=1140): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r3, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r4 = fanotify_init(0x20, 0x40000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fanotify_mark(r4, 0x101, 0x8000011, r5, 0x0) ftruncate(r1, 0x6000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x4000) r6 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0x1581e27a, @mcast2, 0x8000}, 0x1c) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x4, 0x6) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2e83}, 0x94) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0xc, 0xd, 0x7f, 0x44233, 0x7, 0x81, 0x941, 0x8001, 0x1005, 0xc, 0x5, 0x0, 0xfffffdfffffffffd], 0x2, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r9, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m9.467575147s ago: executing program 4 (id=1149): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') fsopen(&(0x7f0000000140)='cifs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b000000000000000000000000000000e38114d580a9faced17c880200bd52466948d07f187fa2adeb19d9673807406fae3753f76d71e2af03c99037e5b244a072035386abc1d745b53d6535d39727082718989ca47370bfb2ca72e99563621714f5282be2441b7a9b003c2629eaf2ac122e9d869030bd8acb844522d37aa8830918545db7f7e9c072cb257cfc726184e03713cecc7a435bf17168b751a541f08db9a8f3a44717d73ba032e4daf4906307c9d3c67b0476c8a10e34c5d59c6270572408a60a5ca107554327c31ee7243e8d5592594b32c03175a6", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setrlimit(0x0, &(0x7f0000000000)={0x7, 0x400}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 1m8.925863607s ago: executing program 33 (id=1149): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') fsopen(&(0x7f0000000140)='cifs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b000000000000000000000000000000e38114d580a9faced17c880200bd52466948d07f187fa2adeb19d9673807406fae3753f76d71e2af03c99037e5b244a072035386abc1d745b53d6535d39727082718989ca47370bfb2ca72e99563621714f5282be2441b7a9b003c2629eaf2ac122e9d869030bd8acb844522d37aa8830918545db7f7e9c072cb257cfc726184e03713cecc7a435bf17168b751a541f08db9a8f3a44717d73ba032e4daf4906307c9d3c67b0476c8a10e34c5d59c6270572408a60a5ca107554327c31ee7243e8d5592594b32c03175a6", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setrlimit(0x0, &(0x7f0000000000)={0x7, 0x400}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 14.917302432s ago: executing program 0 (id=1318): personality(0xfe47fef9f5ff7379) uname(&(0x7f0000000000)=""/123) syz_clone3(&(0x7f0000000640)={0x101a01000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x58) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 13.863609864s ago: executing program 0 (id=1321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdir(0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000006c055080a115014cb62010203010902120001fe0000000904"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) syz_usb_control_io$sierra_net(r0, &(0x7f00000000c0)={0x14, 0x0, 0x0}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x3fe, 0x2) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, 0x0, 0x8000) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000180)={0x81, 0x1, 0x200, "4d87914d4accaf5aac7b00", 0x32314742}) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x22) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 10.951722996s ago: executing program 6 (id=1330): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x410000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x40b, 0x70bd2b, 0x500, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5}]}}}]}, 0x3c}}, 0x0) 10.797373945s ago: executing program 0 (id=1331): personality(0xfe47fef9f5ff7379) uname(&(0x7f0000000000)=""/123) syz_clone3(&(0x7f0000000640)={0x101a01000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x58) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 10.796075352s ago: executing program 2 (id=1332): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002440), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002480)={0x1c, r4, 0x109, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x80) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000080)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$rtl8150(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$rtl8150(r7, 0x0, &(0x7f0000000200)={0x2c, &(0x7f0000000340)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c12106803200e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a60800000f00510066b87a000f02d86161300f300fc79d53bf0000c4b961edc30101220f27c3", 0xac}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r8, 0xaea2, 0x1) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x20, 0x1418, 0x1, 0x2, 0x3, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x0) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') 10.479463104s ago: executing program 0 (id=1333): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002440), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002480)={0x1c, r4, 0x109, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x80) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000080)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$rtl8150(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$rtl8150(r7, 0x0, &(0x7f0000000200)={0x2c, &(0x7f0000000340)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c12106803200e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a60800000f00510066b87a000f02d86161300f300fc79d53bf0000c4b961edc30101220f27c3", 0xac}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r8, 0xaea2, 0x1) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x20, 0x1418, 0x1, 0x2, 0x3, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x0) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x48300, 0x1cd) 10.168458498s ago: executing program 3 (id=1335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080), 0x1210002, &(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRES8=0x0, @ANYRES64=0x0, @ANYRES8=r0]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000100)={@multicast1, @multicast2, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0x81}, 0x3c) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r6, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000380)=ANY=[@ANYBLOB="e90c610fac0800000000c442ef00020800450000240000e00000119078000014000000000000000000001090780001009a47d39f753ccc63b1ea39feed490b835442f3fcc6efd253e99fb02b88ba3e5f524938dd80"], 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x14, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x35b}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x10, 0xffe3}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xffe, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000092461340000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) 9.162482987s ago: executing program 3 (id=1337): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm], 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x2, &(0x7f0000000200)=@raw=[@ldst={0x3, 0x2, 0x6, 0x6, 0xb, 0x2, 0x41}, @exit], &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 9.007169772s ago: executing program 6 (id=1338): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x3002a8d, 0x1) ioctl$BLKPG(r4, 0x40084d0c, &(0x7f0000000640)={0x1, 0x0, 0x0, 0x0}) 8.943628232s ago: executing program 3 (id=1340): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4000000040000000, 0x0, &(0x7f0000006680)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) times(0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0xf132, 0xffffffffffffffff, 0xa4fdf000) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x29498000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000f0000001500000100feda2500007400003bee5f9b10edc22fb845970f001a157293e0cb1f21762ac667dd5fa01964f8d4c3b087f4018eddb14d9d4d8b4ad0544b01afca7876ba6da5a7f39cdf7220ff", @ANYRES32=r2, @ANYBLOB="0008000007500500340012800b00010062726964676500002400028005001900020000000c00230001000000000000000c0022000600000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r4, 0x40087447, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x80002, 0x88) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000000)={0x9b0000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x6, 0xfffffffffffffffd, 0xfffffffffffff000, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x3ff, 0x2000000, 0x1, 0x9, 0xffffffffffffffff, 0x0, 0x7fffffff}, 0x0, 0x0) 8.660813081s ago: executing program 6 (id=1341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdir(0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000006c055080a115014cb62010203010902120001fe0000000904"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) syz_usb_control_io$sierra_net(r0, &(0x7f00000000c0)={0x14, 0x0, 0x0}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x3fe, 0x2) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, 0x0, 0x8000) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000180)={0x81, 0x1, 0x200, "4d87914d4accaf5aac7b00", 0x32314742}) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x22) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 6.910779593s ago: executing program 2 (id=1344): personality(0xfe47fef9f5ff7379) uname(&(0x7f0000000000)=""/123) syz_clone3(&(0x7f0000000640)={0x101a01000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x58) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) 6.889363578s ago: executing program 0 (id=1345): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/vlan/vlan1\x00') readlinkat(r1, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000840)=""/66, 0x42) (async) readlinkat(r1, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000840)=""/66, 0x42) timerfd_settime(r1, 0x1, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, &(0x7f00000002c0)) (async) timerfd_settime(r1, 0x1, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, &(0x7f00000002c0)={{0x0, 0x0}}) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="ba15764020a05d9bdb438dbaa9a79e167413f235efa008a2c0881c00df2cf9f0b84cb4a55e62bac3a475a1251246cabc94b33883f082fc1f5022d9544d4118d58444f2b735d423313db76a3485724cce46455c5741b5393e358a1e851f5a756b5729468182c3d2493942e1333367abddab1daffc1bb352358f44a642752aa06be795a75a8a55f09c37aaa7ccef3d5cca70bbc715369deb9953687cea8a82"], 0x27) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$VT_RELDISP(r1, 0x5605) ioctl$SNDCTL_DSP_SYNC(r5, 0x80044d76, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, 0x0) r6 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000440)='pkcs7_test\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f00000004c0)='$Q..}\x00', 0x0) (async) r7 = request_key(&(0x7f0000000440)='pkcs7_test\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f00000004c0)='$Q..}\x00', 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6) ioctl$XFS_IOC_SWAPEXT(r6, 0xc0c0586d, &(0x7f00000001c0)={0x0, r0, r6, 0x7, 0x945c, '\x00', {0xfffffffffffffff9, 0x7f, 0xc68, 0xa891, 0xa, 0x2, 0xffff, 0x80000000, {0x7fffffffffffffff, 0x7}, {0x3, 0xe52}, {0x100000001, 0x8000}, 0x3, 0x3, 0x6f3, 0xbbd, 0x4, 0x4, 0x8, 0x100, 0xc337, 0x401, '\x00', 0x7, 0xffff8a16, 0xfffc, 0x401}}) r8 = syz_usb_connect(0x2, 0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bd3619204433f0224def010203010902400001020000000904"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x7, 0x1, 0x1, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xd8, 0x70, 0x4, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x1, 0x40, 0xe8}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0xf9, 0x94}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x200, 0x8, 0x0, 0x9, 0x10, 0xf7}, 0x2a, &(0x7f0000000580)={0x5, 0xf, 0x2a, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0xf, 0x1b, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x3, 0x3, 0x200}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "6cf983f37d156f1b4ddf15f7b21ca9c9"}]}, 0x1, [{0xbf, &(0x7f00000005c0)=@string={0xbf, 0x3, "cf7482c19b0314faaf18df3edcc821ea43059c19cea760e1701bd38c23bc5ba5db741cd72c917b4a88367e9bd9ef3bc08899eebdc80d4cd43f790d7d19b4079aedec19c280e79ee42354d9f64a06532acee4f9fb5206e402258175deaf9c91a3f258db4783949e42129d3d611d95ee78ae074d537ae291abc7c76eb08ec3105d774bf65f1ed01011430c852d6dfe97686d1ac2b5b48e8ee618ed0a99faf983a23ed94f58eb82f82dabaf9430baf8c9a8b071a2d4a0abb7e7736af0aa7c"}}]}) (async) r9 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x7, 0x1, 0x1, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xd8, 0x70, 0x4, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x1, 0x40, 0xe8}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0xf9, 0x94}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x200, 0x8, 0x0, 0x9, 0x10, 0xf7}, 0x2a, &(0x7f0000000580)={0x5, 0xf, 0x2a, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0xf, 0x1b, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x3, 0x3, 0x200}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "6cf983f37d156f1b4ddf15f7b21ca9c9"}]}, 0x1, [{0xbf, &(0x7f00000005c0)=@string={0xbf, 0x3, "cf7482c19b0314faaf18df3edcc821ea43059c19cea760e1701bd38c23bc5ba5db741cd72c917b4a88367e9bd9ef3bc08899eebdc80d4cd43f790d7d19b4079aedec19c280e79ee42354d9f64a06532acee4f9fb5206e402258175deaf9c91a3f258db4783949e42129d3d611d95ee78ae074d537ae291abc7c76eb08ec3105d774bf65f1ed01011430c852d6dfe97686d1ac2b5b48e8ee618ed0a99faf983a23ed94f58eb82f82dabaf9430baf8c9a8b071a2d4a0abb7e7736af0aa7c"}}]}) syz_usb_control_io(r9, &(0x7f0000000500)={0x10, 0x0, &(0x7f0000000740)=ANY=[@ANYRES64=r8, @ANYRESOCT=r9, @ANYRES16=r9, @ANYBLOB="48051ca8062d75b79d6bcf42a45b6fb1b191658ea4d34d64c8cdbf70070f6dd9621edf2161cf1ddb00c4e6801f636624fac87c797e5b04afffa80d6cb6e11449cd0f1de8e24de0b8fee72238c4981a531c23f54b62e8", @ANYRES8=r3, @ANYRESDEC=r2, @ANYRES32, @ANYRESHEX=r7], 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000300)=ANY=[@ANYRES8=r2, @ANYRES32=0x0, @ANYRESOCT=r1, @ANYBLOB="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"], 0x1a0}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000300)=ANY=[@ANYRES8=r2, @ANYRES32=0x0, @ANYRESOCT=r1, @ANYBLOB="640101000000000000000000000000000000000032000000ac14143500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000800000000000000800000000000000000000000000200000000000000000000000a000400cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000002abd700028bd7000000000004c001400636d61632861657329"], 0x1a0}}, 0x0) 6.695101599s ago: executing program 3 (id=1348): setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x80400) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) r3 = fanotify_init(0x200, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x18) fanotify_mark(r3, 0x101, 0x1051, r4, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x7a) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) writev(r2, &(0x7f0000000380)=[{0x0}, {&(0x7f00000004c0)}], 0x2) read$FUSE(0xffffffffffffffff, &(0x7f00000051c0)={0x2020}, 0x2020) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r7) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)=ANY=[@ANYBLOB="380000000314010027bd7010fedbdf25090002006c797a32000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) 6.685632793s ago: executing program 2 (id=1349): socket(0x10, 0x3, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @multicast1}, 0x9) close(0xffffffffffffffff) r1 = socket(0x2b, 0x80000, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf250100000008000100ffffffff340004800500031d9e00000005000300f7ffffff0400030006000000050003000200000005000300050000000500030000000000080002000200"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, @dev={0x12, 0x80, '\x00', 0xfe}, @local, 0x2000, 0xba08}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x100000000001, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(r4, 0x0, 0x8410) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r7 = creat(&(0x7f0000000100)='./file0\x00', 0xc5) r8 = dup2(r7, r7) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000"], 0x0) listen(r1, 0x5) 5.504380067s ago: executing program 6 (id=1350): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0xc8, 0x0, 0xc00, 0x70bd2d, 0x25dfdbfc}, 0xc8}, 0x1, 0x0, 0x0, 0xc000}, 0x20000844) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') r6 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x90009427, &(0x7f0000000080)) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0x5, &(0x7f0000000100)=0x20d8, 0x4) preadv(r5, &(0x7f00000026c0)=[{&(0x7f0000002700)=""/4088, 0xff8}], 0x1, 0x15c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x85, 0x0, &(0x7f0000000500)=0x8f00) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000340004800500030005000000050003000700000005000300070000000500e003000500000005000300070000000500030002010000080001000000a3000400088004000c80"], 0x58}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='vfat\x00', 0x800041, &(0x7f00000001c0)='discard') 5.398192695s ago: executing program 5 (id=1352): setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x80400) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) r3 = fanotify_init(0x200, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x18) fanotify_mark(r3, 0x101, 0x1051, r4, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x7a) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) writev(r2, &(0x7f0000000380)=[{0x0}, {&(0x7f00000004c0)}], 0x2) read$FUSE(0xffffffffffffffff, &(0x7f00000051c0)={0x2020}, 0x2020) r5 = syz_open_dev$usbfs(0x0, 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r7) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)=ANY=[@ANYBLOB="380000000314010027bd7010fedbdf25090002006c797a32000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) 5.309966097s ago: executing program 3 (id=1353): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000080)={0x0, 0x4, 0x73d, 0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000018000100fc0f00000000000002100000000000050000000006001500060000000c0016"], 0x30}}, 0x44890) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[], 0xe) 4.543827241s ago: executing program 6 (id=1354): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002440), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002480)={0x1c, r4, 0x109, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x80) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000080)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$rtl8150(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$rtl8150(r7, 0x0, &(0x7f0000000200)={0x2c, &(0x7f0000000340)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c12106803200e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a60800000f00510066b87a000f02d86161300f300fc79d53bf0000c4b961edc30101220f27c3", 0xac}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r8, 0xaea2, 0x1) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x20, 0x1418, 0x1, 0x2, 0x3, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x0) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') 4.219384439s ago: executing program 5 (id=1355): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async, rerun: 32) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) (async, rerun: 32) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x200, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file2\x00', 0xc000, 0xff) (async) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async) landlock_restrict_self(r0, 0x0) (async, rerun: 32) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file5\x00', 0x0, 0x0, 0x400) (async, rerun: 32) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) (async, rerun: 32) unlinkat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x200) (async, rerun: 32) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x81c0, 0x20000105) (async) renameat2(r1, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) (async) linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) (async, rerun: 32) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) (async, rerun: 32) mknodat(0xffffffffffffff9c, &(0x7f0000000600)='./file7\x00', 0x8, 0x0) (async) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000740)='./file7\x00', 0xc1c0, 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file3\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0x20000a, 0x20002f6, 0x0, r2}) 4.077627154s ago: executing program 5 (id=1356): openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)={0x34, r1, 0x101, 0x60bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3}, @NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0xd0}, 0x24008000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000004d40)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004cc0)={0x2, 0x9, 0xf6, 0x8, 0x2, 0x0, 0x70bd2c, 0x25dfdbfc}, 0x10}}, 0x44004) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006}, &(0x7f0000ffe000), 0x0, &(0x7f0000000000)) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, 0x1000}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) r6 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r8, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) fcntl$lock(r8, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x8}) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15655595860608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) 3.503390439s ago: executing program 2 (id=1357): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571f540aa75255a73b8c9cdc2e75edf622add4302f913d9", 0xb2}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000004c00)}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f962347813", 0xd8}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33fe5", 0xef}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{0x0, 0x0, &(0x7f0000003a40)}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000200)={0xf000000, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8002, '\x00', @p_u32=0x0}}) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="36d6cb18adcb4b6d4dc9", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES64=r1, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.870445528s ago: executing program 2 (id=1358): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 2.800093424s ago: executing program 5 (id=1359): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000180)="c657", 0x2}], 0x2, 0x8000, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r1, 0x0, 0x0, 0x4}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r3 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/18, 0x12}], 0x3e8, 0xe, 0x6) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 2.787837881s ago: executing program 2 (id=1360): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) (fail_nth: 2) 2.747827728s ago: executing program 3 (id=1361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdir(0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000006c055080a115014cb62010203010902120001fe0000000904"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) syz_usb_control_io$sierra_net(r0, &(0x7f00000000c0)={0x14, 0x0, 0x0}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x3fe, 0x2) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, 0x0, 0x8000) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000180)={0x81, 0x1, 0x200, "4d87914d4accaf5aac7b00", 0x32314742}) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x22) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 2.283651238s ago: executing program 0 (id=1362): creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}}) read$FUSE(r3, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000002340)='./file0\x00', 0x0, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) write$sequencer(r5, &(0x7f0000000040)=[@t={0x81, 0x3, 0x8, 0x9, @generic=0x8}], 0x8) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r4, 0xc01864cd, &(0x7f00000002c0)={0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000000240)="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", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18, 0xfffffffffffffffe, 0x400000000000003, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f00000022c0)={0x29, 0x3, 0x0, {0x0, 0x8, 0x0, '!}\xf4{]@,\\'}}, 0x29) 1.465284565s ago: executing program 5 (id=1363): syz_io_uring_setup(0x88f, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1100, 0x0, 0x5d, 0x0, 0x0, 0x0) 98.873976ms ago: executing program 5 (id=1364): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) socket$netlink(0x10, 0x3, 0x14) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd1, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r6, 0x4b49, &(0x7f00000000c0)={0xcb, "ca77f2089159a3bf476a7d1d2417cb2c31db31fe005d49c005987a6f8620d9b3de2f96f4bd48d37568ff1e6c9dc521b351e1ca13c830ebdc50af9bf58ca4f11fec8aad5194c0ad1ecaff060ab2f75ff688b87d473c8c97f7151843e91777e0f2e0c8d275a5e0a10943182a240034b6722aaaf4831faf84f907e8e2caabf748298f2748ca044681b0d1e2a856512afddcb4e040bb0a589656e9349be52c18d8ebe37cc62385feec76532b069901887652f31b1d535369afb5a6b5b2cd91d91a15e1ae2463903563514147763e9ee7a048939f496fa1f10fdfb15fe59efcda704204534b56ce0c80b4e7eda976fa35bad67a6826915895b75a2422e84c9a8b6a6c181ea8755216e58ebc7f896f2312c56592454636a6958be786cce206d873384713eb2cc341906330941e1290a11289936152b916aac5fb1df33007935e640d01a5e5f686555ef638dc18757c696c4a1b4a28385b86e7b59611f822fe4112be40a72849b02cb4d5594b2272e7ad6556e2523bf594fb1682b08c92fc95240851c59b517302aa9db09db70ea0ed79ec4b84aeef957cf34f0eb3e32ce040eead24292fcb3b8e2c65e66577b0f8c0c05025849c05c867ec62debe288297de27bd36d071583d68ffe6e3c8a794e0432a4efebbfcf5aba09395deac0f850e10a8c30682531ac068bba863ef3f4e01191012cc5c0bec44df959b39d05771308ebbbc1ec8"}) ioctl$TIOCSPGRP(r6, 0x5410, &(0x7f0000000180)=r1) r7 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$xdp(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000d00)='~', 0x1}], 0x1, 0x0, 0x0, 0x44}, 0x2c090) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x43}}, 0x0) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000100)={0x1f, 0x4, 0x3f, 0x2003208, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010104}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 6 (id=1365): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$vbi(&(0x7f00000001c0), 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000440)=0x5) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x24, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) ptrace$setopts(0x4200, 0x0, 0x8, 0x100001) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="06c30000fffffffd96fb7d8c18ffb372c0734fb54f0f5643bd9ee53f6c1274a705c432d5ffe953158d4a3089f24bb081dbd7db37d5ee576d9a333dff7b9e9f844d8345bee8d6f5932c9f5e1773c41bee4c09245aab4294e62da381f8ceba77576e99239fc88904ca081fd5ad70ab8831cc7caca6063d686bbd076e293d59a2fd906c6b5ea76510b72e9899311c5c0cf500a87ad917781ca9ca44c612a8b7b5700abe6e9cd0c2f5b531804cc142f62586eea110deac27cd40370a7d700658dfc419f5003ef4bc90d0b76170ecf9eb94f4d00c9157bf39148ad57426e017615ebe284f7096bed19ac1"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0xa0}, 0x94) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000480)={0x0, 0xc89e, 0xc000, 0x8, 0xc1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000", @ANYRES32, @ANYBLOB], 0x48) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9ff22828d51b90a4fc000000df000000df000000080010000000080000000000001103000000010000000f0000000300008403000000100000000100000001000100020000000000040000000000040000000400000008000000071caa6e5600000a030000000800000003000085020000000a00000000000000cb000000100000000300000005000000030000000000000003000000030000000000000b000000000d0000000000000b04000000030000000400000f0300000004000000b70500000800000004000000060000000600000002000000c00100000600000005000000641f0000bebc0000a0d82200005fc25f61005f00"], &(0x7f0000000300)=""/155, 0x100, 0x9b, 0x0, 0xffff, 0x10000}, 0x28) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="15000000060000007978836a1946275b11a4bc8d40cd000001000000000011000000", @ANYRES32=r3, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="05000000000000000100"/28], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x801) socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x803, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="380000001000390400000000fbdbdf2500000000", @ANYRES32, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x0) kernel console output (not intermixed with test programs): yfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 341.885205][ T9495] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 342.126351][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 342.581572][ T30] audit: type=1400 audit(1775371815.705:728): avc: denied { add_name } for pid=9487 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.620691][ T30] audit: type=1400 audit(1775371815.705:729): avc: denied { create } for pid=9487 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 342.669249][ T30] audit: type=1400 audit(1775371815.705:730): avc: denied { write } for pid=9487 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=6217 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 342.740741][ T30] audit: type=1400 audit(1775371815.705:731): avc: denied { append } for pid=9487 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" dev="tmpfs" ino=6217 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 342.854098][ T30] audit: type=1400 audit(1775371815.905:732): avc: denied { remove_name } for pid=9510 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=6217 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.896447][ T30] audit: type=1400 audit(1775371815.905:733): avc: denied { unlink } for pid=9510 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=6217 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 343.363991][ T5916] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 343.525908][ T5916] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 343.550886][ T5916] usb 3-1: config 0 has an invalid descriptor of length 231, skipping remainder of the config [ 343.582090][ T5916] usb 3-1: config 0 has no interface number 0 [ 343.605574][ T5916] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 343.648691][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.673784][ T5916] usb 3-1: Product: syz [ 343.686737][ T5916] usb 3-1: Manufacturer: syz [ 343.698701][ T5916] usb 3-1: SerialNumber: syz [ 343.729428][ T5916] usb 3-1: config 0 descriptor?? [ 345.597175][ T9526] input: syz0 as /devices/virtual/input/input9 [ 345.608683][ T9569] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 345.630935][ T30] audit: type=1400 audit(1775371818.757:734): avc: denied { write } for pid=9525 comm="syz.2.977" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 345.651761][ T9569] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 345.724014][ T9551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.737054][ T9551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.892626][ T30] audit: type=1800 audit(1775371819.007:735): pid=9526 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.2.977" name="/" dev="sockfs" ino=24306 res=0 errno=0 [ 345.950637][ T5916] uvcvideo 3-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 345.978264][ T5916] uvcvideo 3-1:0.64: No valid video chain found. [ 346.004885][ T5916] usb 3-1: USB disconnect, device number 21 [ 346.824838][ T9583] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 346.834887][ T9583] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 346.845765][ T9583] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 346.856510][ T30] audit: type=1400 audit(1775371819.107:736): avc: denied { create } for pid=9578 comm="syz.3.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 347.152082][ T30] audit: type=1400 audit(1775371819.977:737): avc: denied { firmware_load } for pid=9578 comm="syz.3.984" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 347.712577][ T9611] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 347.729200][ T9611] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 347.905485][ T5917] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 347.939171][ T9620] rdma_rxe: rxe_newlink: failed to add lo [ 348.535166][ T5917] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.606504][ T5917] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 348.620811][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.640210][ T5917] usb 5-1: Product: syz [ 348.724746][ T5917] usb 5-1: Manufacturer: syz [ 348.742070][ T5822] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 348.758449][ T5822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 348.766529][ T5822] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 348.774187][ T5822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 348.783882][ T5917] usb 5-1: SerialNumber: syz [ 348.783904][ T5822] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 348.810693][ T5917] usb 5-1: config 0 descriptor?? [ 348.819300][ T30] audit: type=1400 audit(1775371821.958:738): avc: denied { mounton } for pid=9630 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 348.838365][ T9630] lo speed is unknown, defaulting to 1000 [ 348.873985][ T5917] CoreChips 5-1:0.0: probe with driver CoreChips failed with error -22 [ 349.140358][ T5917] usb 5-1: USB disconnect, device number 28 [ 349.345487][ T9630] wg1 speed is unknown, defaulting to 1000 [ 349.364870][ T9630] vxcan1 speed is unknown, defaulting to 1000 [ 349.654645][ T9655] FAULT_INJECTION: forcing a failure. [ 349.654645][ T9655] name failslab, interval 1, probability 0, space 0, times 0 [ 349.700928][ T9655] CPU: 0 UID: 0 PID: 9655 Comm: syz.3.999 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.700958][ T9655] Tainted: [L]=SOFTLOCKUP [ 349.700964][ T9655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 349.700974][ T9655] Call Trace: [ 349.700980][ T9655] [ 349.700987][ T9655] dump_stack_lvl+0x100/0x190 [ 349.701021][ T9655] should_fail_ex.cold+0x5/0xa [ 349.701051][ T9655] should_failslab+0xc2/0x120 [ 349.701070][ T9655] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 349.701096][ T9655] ? alloc_inode+0x68/0x250 [ 349.701122][ T9655] ? simple_start_creating+0xb0/0x110 [ 349.701142][ T9655] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 349.701165][ T9655] alloc_inode+0x68/0x250 [ 349.701191][ T9655] new_inode+0x22/0x1c0 [ 349.701218][ T9655] __debugfs_create_file+0x105/0x4f0 [ 349.701246][ T9655] debugfs_create_file_full+0x41/0x60 [ 349.701272][ T9655] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 349.701295][ T9655] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 349.701337][ T9655] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 349.701363][ T9655] ? alloc_netdev_mqs+0xd7/0x14f0 [ 349.701390][ T9655] ? lockdep_init_map_type+0x5c/0x250 [ 349.701413][ T9655] ? __pfx_ppp_setup+0x10/0x10 [ 349.701433][ T9655] alloc_netdev_mqs+0x314/0x14f0 [ 349.701464][ T9655] ppp_ioctl+0x906/0x2800 [ 349.701492][ T9655] ? __pfx_ppp_ioctl+0x10/0x10 [ 349.701523][ T9655] ? selinux_file_ioctl+0xb4/0x290 [ 349.701552][ T9655] ? __pfx_ppp_ioctl+0x10/0x10 [ 349.701577][ T9655] __x64_sys_ioctl+0x18e/0x210 [ 349.701606][ T9655] do_syscall_64+0x106/0xf80 [ 349.701633][ T9655] ? clear_bhb_loop+0x40/0x90 [ 349.701655][ T9655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.701673][ T9655] RIP: 0033:0x7f3ef059c819 [ 349.701688][ T9655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.701705][ T9655] RSP: 002b:00007f3ef13f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 349.701722][ T9655] RAX: ffffffffffffffda RBX: 00007f3ef0815fa0 RCX: 00007f3ef059c819 [ 349.701734][ T9655] RDX: 00002000000000c0 RSI: 00000000c004743e RDI: 0000000000000004 [ 349.701744][ T9655] RBP: 00007f3ef13f7090 R08: 0000000000000000 R09: 0000000000000000 [ 349.701754][ T9655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.701764][ T9655] R13: 00007f3ef0816038 R14: 00007f3ef0815fa0 R15: 00007ffea06670f8 [ 349.701788][ T9655] [ 349.701796][ T9655] debugfs: out of free dentries, can not create file 'netdev@ffff888057518620' [ 349.952645][ T9665] fuse: Bad value for 'fd' [ 350.117545][ T9670] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1003'. [ 350.128250][ T9670] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1003'. [ 350.160547][ T29] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 350.228846][ T9675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1005'. [ 350.296949][ T9630] chnl_net:caif_netlink_parms(): no params data found [ 350.340412][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 350.346972][ T29] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 350.357000][ T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 350.371009][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 350.381156][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 350.430721][ T9630] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.438014][ T9630] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.445493][ T9630] bridge_slave_0: entered allmulticast mode [ 350.453263][ T9630] bridge_slave_0: entered promiscuous mode [ 350.461576][ T9630] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.468749][ T9630] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.485875][ T9630] bridge_slave_1: entered allmulticast mode [ 350.511647][ T9630] bridge_slave_1: entered promiscuous mode [ 350.528206][ T29] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 350.541898][ T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 350.551132][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.570147][ T9630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.993849][ T5822] Bluetooth: hci5: command tx timeout [ 351.015327][ T29] usb 5-1: GET_CAPABILITIES returned 0 [ 351.073215][ T9630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.143217][ T29] usbtmc 5-1:16.0: can't read capabilities [ 351.195535][ T9630] team0: Port device team_slave_0 added [ 351.329583][ T9664] usbtmc 5-1:16.0: stb usb_control_msg returned -71 [ 351.332712][ T5917] usb 5-1: USB disconnect, device number 29 [ 351.427864][ T9630] team0: Port device team_slave_1 added [ 351.486708][ T9630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.535598][ T9630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.613138][ T9630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.643327][ T9630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.661011][ T9630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.735403][ T9630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.986777][ T9630] hsr_slave_0: entered promiscuous mode [ 352.000194][ T9630] hsr_slave_1: entered promiscuous mode [ 352.053917][ T9630] debugfs: 'hsr0' already exists in 'hsr' [ 352.069374][ T9630] Cannot create hsr debugfs directory [ 352.635957][ T9707] FAULT_INJECTION: forcing a failure. [ 352.635957][ T9707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.649164][ T9707] CPU: 0 UID: 0 PID: 9707 Comm: syz.3.1011 Tainted: G L syzkaller #0 PREEMPT(full) [ 352.649189][ T9707] Tainted: [L]=SOFTLOCKUP [ 352.649195][ T9707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 352.649204][ T9707] Call Trace: [ 352.649210][ T9707] [ 352.649217][ T9707] dump_stack_lvl+0x100/0x190 [ 352.649250][ T9707] should_fail_ex.cold+0x5/0xa [ 352.649275][ T9707] _copy_from_iter+0x1f4/0x1690 [ 352.649299][ T9707] ? __lock_acquire+0x4a5/0x2630 [ 352.649318][ T9707] ? __pfx__copy_from_iter+0x10/0x10 [ 352.649339][ T9707] ? irqentry_exit+0x180/0x670 [ 352.649366][ T9707] ? lockdep_hardirqs_on+0x78/0x100 [ 352.649395][ T9707] ? iov_iter_advance+0xac/0x6d0 [ 352.649417][ T9707] vhost_chr_write_iter+0x21a/0x1190 [ 352.649445][ T9707] ? get_pid_task+0xfc/0x250 [ 352.649466][ T9707] ? __pfx_vhost_chr_write_iter+0x10/0x10 [ 352.649492][ T9707] ? avc_policy_seqno+0x9/0x20 [ 352.649515][ T9707] ? bpf_lsm_file_permission+0x9/0x10 [ 352.649542][ T9707] ? security_file_permission+0x76/0x210 [ 352.649571][ T9707] ? rw_verify_area+0xce/0x6d0 [ 352.649599][ T9707] vfs_write+0x6ac/0x1070 [ 352.649616][ T9707] ? __pfx_vhost_net_chr_write_iter+0x10/0x10 [ 352.649644][ T9707] ? __pfx_vfs_write+0x10/0x10 [ 352.649659][ T9707] ? find_held_lock+0x2b/0x80 [ 352.649698][ T9707] ksys_write+0x12a/0x250 [ 352.649714][ T9707] ? __pfx_ksys_write+0x10/0x10 [ 352.649738][ T9707] do_syscall_64+0x106/0xf80 [ 352.649764][ T9707] ? clear_bhb_loop+0x40/0x90 [ 352.649786][ T9707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.649804][ T9707] RIP: 0033:0x7f3ef059c819 [ 352.649819][ T9707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.649835][ T9707] RSP: 002b:00007f3ef13b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 352.649853][ T9707] RAX: ffffffffffffffda RBX: 00007f3ef0816180 RCX: 00007f3ef059c819 [ 352.649864][ T9707] RDX: 0000000000000048 RSI: 0000200000000180 RDI: 0000000000000003 [ 352.649874][ T9707] RBP: 00007f3ef13b5090 R08: 0000000000000000 R09: 0000000000000000 [ 352.649884][ T9707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.649894][ T9707] R13: 00007f3ef0816218 R14: 00007f3ef0816180 R15: 00007ffea06670f8 [ 352.649917][ T9707] [ 352.908463][ T9630] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 352.927581][ T9709] overlayfs: missing 'lowerdir' [ 352.987301][ T9630] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 353.054236][ T9712] FAULT_INJECTION: forcing a failure. [ 353.054236][ T9712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.067581][ T9712] CPU: 0 UID: 0 PID: 9712 Comm: syz.0.1013 Tainted: G L syzkaller #0 PREEMPT(full) [ 353.067608][ T9712] Tainted: [L]=SOFTLOCKUP [ 353.067613][ T9712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 353.067623][ T9712] Call Trace: [ 353.067628][ T9712] [ 353.067634][ T9712] dump_stack_lvl+0x100/0x190 [ 353.067665][ T9712] should_fail_ex.cold+0x5/0xa [ 353.067687][ T9712] _copy_to_user+0x32/0xd0 [ 353.067706][ T9712] simple_read_from_buffer+0xcb/0x170 [ 353.067725][ T9712] proc_fail_nth_read+0x1af/0x230 [ 353.067750][ T9712] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 353.067770][ T9712] ? rw_verify_area+0xce/0x6d0 [ 353.067785][ T9712] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 353.067801][ T9712] vfs_read+0x1e4/0xb30 [ 353.067812][ T9712] ? __pfx_vfs_read+0x10/0x10 [ 353.067821][ T9712] ? __fget_files+0x215/0x3d0 [ 353.067836][ T9712] ? __fget_files+0x21f/0x3d0 [ 353.067851][ T9712] ksys_read+0x12a/0x250 [ 353.067861][ T9712] ? __pfx_ksys_read+0x10/0x10 [ 353.067874][ T9712] do_syscall_64+0x106/0xf80 [ 353.067891][ T9712] ? clear_bhb_loop+0x40/0x90 [ 353.067904][ T9712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.067915][ T9712] RIP: 0033:0x7f186835d04e [ 353.067924][ T9712] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 353.067934][ T9712] RSP: 002b:00007f18692a3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 353.067945][ T9712] RAX: ffffffffffffffda RBX: 00007f18692a46c0 RCX: 00007f186835d04e [ 353.067952][ T9712] RDX: 000000000000000f RSI: 00007f18692a40a0 RDI: 0000000000000004 [ 353.067958][ T9712] RBP: 00007f18692a4090 R08: 0000000000000000 R09: 0000000000000000 [ 353.067963][ T9712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.067969][ T9712] R13: 00007f1868616038 R14: 00007f1868615fa0 R15: 00007fff27410dc8 [ 353.067989][ T9712] [ 353.079033][ T5822] Bluetooth: hci5: command tx timeout [ 353.312005][ T9630] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 353.378107][ T9710] batadv_slave_1: entered promiscuous mode [ 353.531570][ T9714] batadv_slave_1: left promiscuous mode [ 353.537712][ T9630] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 354.129971][ T9630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.163031][ T9630] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.200502][ T513] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.207627][ T513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.253268][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.260382][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.518112][ T5822] Bluetooth: hci5: command tx timeout [ 355.812730][ T9750] overlayfs: missing 'lowerdir' [ 355.918696][ T5916] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 355.953675][ T9630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.091658][ T30] audit: type=1400 audit(1775371829.222:739): avc: denied { create } for pid=9747 comm="syz.0.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 356.093455][ T5916] usb 3-1: config 155 has an invalid interface number: 255 but max is 0 [ 356.233828][ T5916] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 356.257384][ T5916] usb 3-1: config 155 has no interface number 0 [ 356.287766][ T5916] usb 3-1: too many endpoints for config 155 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 356.312270][ T5916] usb 3-1: config 155 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 356.347368][ T5916] usb 3-1: config 155 interface 255 has no altsetting 0 [ 356.356808][ T5916] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 356.366220][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.387344][ T5916] usb 3-1: Product: syz [ 356.391571][ T5916] usb 3-1: Manufacturer: syz [ 356.402463][ T5916] usb 3-1: SerialNumber: syz [ 356.417833][ T5916] imon 3-1:155.255: unable to register, err -19 [ 356.632870][ T9630] veth0_vlan: entered promiscuous mode [ 356.651990][ T9630] veth1_vlan: entered promiscuous mode [ 356.702865][ T9630] veth0_macvtap: entered promiscuous mode [ 356.716134][ T9630] veth1_macvtap: entered promiscuous mode [ 356.730769][ T9630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.743031][ T9630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.757581][ T1117] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.766807][ T1117] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.777025][ T1117] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.786617][ T1117] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.864895][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.873692][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.894719][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.902713][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.914346][ T30] audit: type=1400 audit(1775371830.052:740): avc: denied { mounton } for pid=9630 comm="syz-executor" path="/root/syzkaller.nTIKtc/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 356.943163][ T30] audit: type=1400 audit(1775371830.052:741): avc: denied { mount } for pid=9630 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 356.965756][ T30] audit: type=1400 audit(1775371830.052:742): avc: denied { mounton } for pid=9630 comm="syz-executor" path="/root/syzkaller.nTIKtc/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 357.009199][ T30] audit: type=1400 audit(1775371830.052:743): avc: denied { mounton } for pid=9630 comm="syz-executor" path="/root/syzkaller.nTIKtc/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=26944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 357.037546][ T30] audit: type=1400 audit(1775371830.082:744): avc: denied { mounton } for pid=9630 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 357.063929][ T30] audit: type=1400 audit(1775371830.082:745): avc: denied { mount } for pid=9630 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 357.088854][ T30] audit: type=1400 audit(1775371830.082:746): avc: denied { mounton } for pid=9630 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 357.559368][ T5822] Bluetooth: hci5: command tx timeout [ 357.776701][ T5917] usb 3-1: USB disconnect, device number 22 [ 359.407034][ T9782] netlink: 'syz.5.1028': attribute type 7 has an invalid length. [ 359.422261][ T9782] trusted_key: encrypted_key: keyword '' not recognized [ 360.021671][ T9808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1033'. [ 360.415303][ T5917] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 360.555249][ T5917] usb 6-1: device descriptor read/64, error -71 [ 361.714887][ T5917] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 361.865466][ T5917] usb 6-1: device descriptor read/64, error -71 [ 361.985601][ T5917] usb usb6-port1: attempt power cycle [ 362.334453][ T5917] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 362.354976][ T5917] usb 6-1: device descriptor read/8, error -71 [ 362.596954][ T5917] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 362.624673][ T5917] usb 6-1: device descriptor read/8, error -71 [ 362.744966][ T5917] usb usb6-port1: unable to enumerate USB device [ 363.143959][ T29] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 363.413923][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 363.423064][ T29] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 363.908273][ T29] usb 6-1: config 0 has no interface number 0 [ 363.916061][ T29] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 363.927446][ T29] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 363.936755][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.947595][ T29] usb 6-1: config 0 descriptor?? [ 363.965826][ T29] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 364.553338][ T29] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 364.923156][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 365.123381][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.141596][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.156922][ T29] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 365.168968][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.182223][ T29] usb 5-1: config 0 descriptor?? [ 365.236934][ T5917] usb 6-1: USB disconnect, device number 6 [ 365.598964][ T29] konepure 0003:1E7D:2DB4.0010: item fetching failed at offset 0/4 [ 365.608564][ T29] konepure 0003:1E7D:2DB4.0010: parse failed [ 365.615930][ T29] konepure 0003:1E7D:2DB4.0010: probe with driver konepure failed with error -22 [ 365.717699][ T9852] lyz2: rxe_newlink: already configured on lo [ 365.840814][ T29] usb 5-1: USB disconnect, device number 30 [ 366.299458][ T9865] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1049'. [ 366.308525][ T9865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1049'. [ 367.439803][ T9886] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9886 comm=syz.0.1052 [ 367.453910][ T30] audit: type=1400 audit(1775371840.577:747): avc: denied { ioctl } for pid=9877 comm="syz.0.1052" path="socket:[26447]" dev="sockfs" ino=26447 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 367.488006][ T9886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1052'. [ 367.528067][ T30] audit: type=1400 audit(1775371840.667:748): avc: denied { connect } for pid=9877 comm="syz.0.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 368.308968][ T9900] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 368.316857][ T9900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.840604][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 369.076873][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 369.087395][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.101029][ T9] usb 5-1: Product: syz [ 369.105236][ T9] usb 5-1: Manufacturer: syz [ 369.109902][ T9] usb 5-1: SerialNumber: syz [ 369.390881][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 369.462550][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 369.491100][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 369.582704][ T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 369.591002][ T9922] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1064'. [ 369.627194][ T9] usb 5-1: USB disconnect, device number 31 [ 370.301502][ T9930] FAULT_INJECTION: forcing a failure. [ 370.301502][ T9930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.314970][ T9930] CPU: 0 UID: 0 PID: 9930 Comm: syz.4.1065 Tainted: G L syzkaller #0 PREEMPT(full) [ 370.315000][ T9930] Tainted: [L]=SOFTLOCKUP [ 370.315006][ T9930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 370.315016][ T9930] Call Trace: [ 370.315023][ T9930] [ 370.315030][ T9930] dump_stack_lvl+0x100/0x190 [ 370.315065][ T9930] should_fail_ex.cold+0x5/0xa [ 370.315091][ T9930] _copy_from_user+0x2e/0xd0 [ 370.315113][ T9930] csum_and_copy_from_iter_full+0x21a/0x1fd0 [ 370.315142][ T9930] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 370.315163][ T9930] ? rcu_is_watching+0x12/0xc0 [ 370.315186][ T9930] ? trace_kmalloc+0x101/0x130 [ 370.315203][ T9930] ? __kasan_kmalloc+0xaa/0xb0 [ 370.315230][ T9930] ? __kmalloc_node_track_caller_noprof+0x321/0x850 [ 370.315259][ T9930] ? __alloc_skb+0x185/0x710 [ 370.315280][ T9930] ? trace_kmem_cache_alloc+0x21/0x120 [ 370.315302][ T9930] ip_generic_getfrag+0x172/0x270 [ 370.315330][ T9930] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 370.315355][ T9930] ? __asan_memset+0x23/0x50 [ 370.315380][ T9930] ? __alloc_skb+0x4e9/0x710 [ 370.315400][ T9930] ? __alloc_skb+0x5b7/0x710 [ 370.315426][ T9930] raw6_getfrag+0x235/0x2a0 [ 370.315458][ T9930] __ip6_append_data+0x4220/0x4dc0 [ 370.315483][ T9930] ? __pfx_raw6_getfrag+0x10/0x10 [ 370.315520][ T9930] ? __pfx___ip6_append_data+0x10/0x10 [ 370.315539][ T9930] ? __pfx_ip6_mtu+0x10/0x10 [ 370.315564][ T9930] ? ip6_setup_cork+0x5be/0x14c0 [ 370.315585][ T9930] ip6_append_data+0x10b/0x410 [ 370.315604][ T9930] ? __pfx_raw6_getfrag+0x10/0x10 [ 370.315633][ T9930] rawv6_sendmsg+0x169c/0x4420 [ 370.315671][ T9930] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 370.315699][ T9930] ? avc_has_perm_noaudit+0x145/0x3b0 [ 370.315722][ T9930] ? avc_has_perm+0x135/0x1e0 [ 370.315742][ T9930] ? __pfx_avc_has_perm+0x10/0x10 [ 370.315787][ T9930] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 370.315816][ T9930] ? inet_sendmsg+0x11c/0x140 [ 370.315834][ T9930] inet_sendmsg+0x11c/0x140 [ 370.315856][ T9930] ____sys_sendmsg+0x98d/0xb70 [ 370.315874][ T9930] ? __pfx_inet_sendmsg+0x10/0x10 [ 370.315902][ T9930] ? __pfx_____sys_sendmsg+0x10/0x10 [ 370.315933][ T9930] ___sys_sendmsg+0x190/0x1e0 [ 370.315954][ T9930] ? __pfx____sys_sendmsg+0x10/0x10 [ 370.316006][ T9930] __sys_sendmsg+0x170/0x220 [ 370.316031][ T9930] ? __pfx___sys_sendmsg+0x10/0x10 [ 370.316065][ T9930] ? rcu_is_watching+0x12/0xc0 [ 370.316093][ T9930] do_syscall_64+0x106/0xf80 [ 370.316119][ T9930] ? clear_bhb_loop+0x40/0x90 [ 370.316140][ T9930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.316158][ T9930] RIP: 0033:0x7f78bf59c819 [ 370.316173][ T9930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.316190][ T9930] RSP: 002b:00007f78bd7b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.316208][ T9930] RAX: ffffffffffffffda RBX: 00007f78bf816180 RCX: 00007f78bf59c819 [ 370.316219][ T9930] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000006 [ 370.316229][ T9930] RBP: 00007f78bd7b4090 R08: 0000000000000000 R09: 0000000000000000 [ 370.316239][ T9930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.316249][ T9930] R13: 00007f78bf816218 R14: 00007f78bf816180 R15: 00007ffcae0310b8 [ 370.316274][ T9930] [ 370.584724][ T30] audit: type=1400 audit(1775372099.378:749): avc: denied { bind } for pid=9926 comm="syz.2.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 371.341638][ T30] audit: type=1400 audit(1775372099.378:750): avc: denied { listen } for pid=9926 comm="syz.2.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 371.361763][ T30] audit: type=1400 audit(1775372099.388:751): avc: denied { accept } for pid=9926 comm="syz.2.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 371.458636][ T30] audit: type=1400 audit(1775372099.388:752): avc: denied { write } for pid=9926 comm="syz.2.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 371.668273][ T30] audit: type=1400 audit(1775372099.398:753): avc: denied { read } for pid=9926 comm="syz.2.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 372.351485][ T9946] tmpfs: Bad value for 'mpol' [ 372.843188][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.854710][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.941050][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 374.094759][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 374.177683][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.216264][ T9] usb 4-1: Product: syz [ 374.227080][ T9] usb 4-1: Manufacturer: syz [ 374.247679][ T9] usb 4-1: SerialNumber: syz [ 374.516349][ T30] audit: type=1326 audit(1775372103.588:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9968 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78bf59c819 code=0x7ffc0000 [ 374.554799][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 374.578219][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 374.590270][ T30] audit: type=1326 audit(1775372103.588:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9968 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f78bf59c819 code=0x7ffc0000 [ 374.703352][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 374.712596][ T30] audit: type=1326 audit(1775372103.588:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9968 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78bf59c819 code=0x7ffc0000 [ 375.124603][ T9] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 375.285472][ T30] audit: type=1326 audit(1775372103.588:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9968 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f78bf59c819 code=0x7ffc0000 [ 375.316561][ T9] usb 4-1: USB disconnect, device number 28 [ 375.373163][ T30] audit: type=1326 audit(1775372103.588:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9968 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78bf59c819 code=0x7ffc0000 [ 375.488890][ T30] audit: type=1326 audit(1775372103.588:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9968 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f78bf59c819 code=0x7ffc0000 [ 375.950125][ T9986] netlink: 'syz.5.1081': attribute type 10 has an invalid length. [ 375.962241][ T9986] veth0_vlan: left promiscuous mode [ 375.968358][ T9986] veth0_vlan: entered promiscuous mode [ 375.975673][ T9986] team0: Device veth0_vlan failed to register rx_handler [ 376.028142][ T30] audit: type=1326 audit(1775372103.588:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9968 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78bf59c819 code=0x7ffc0000 [ 376.276429][ T30] audit: type=1326 audit(1775372103.588:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9968 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f78bf59c819 code=0x7ffc0000 [ 376.349666][ T30] audit: type=1326 audit(1775372103.598:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9968 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78bf59c819 code=0x7ffc0000 [ 376.380150][ T9999] tmpfs: Cannot change global quota limit on remount [ 376.423173][ T30] audit: type=1326 audit(1775372103.598:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9968 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78bf59c819 code=0x7ffc0000 [ 376.753261][ T9999] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 376.759755][ T9999] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 376.877484][ T9999] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 376.883974][ T9999] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 376.891563][ T9999] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 376.909033][T10009] tmpfs: Bad value for 'mpol' [ 376.911031][ T9999] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 377.029956][ T9999] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 378.250760][ T5876] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 378.283870][T10032] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1096'. [ 378.319201][T10033] netlink: 'syz.4.1095': attribute type 10 has an invalid length. [ 378.343906][T10033] team0: Device xfrm0 is of different type [ 378.390737][ T5876] usb 4-1: device descriptor read/64, error -71 [ 378.484468][T10038] 9pnet_fd: Insufficient options for proto=fd [ 378.710957][ T5916] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 378.873935][ T5822] Bluetooth: hci1: command 0x0406 tx timeout [ 378.890859][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 378.898053][ T5916] usb 3-1: unable to get BOS descriptor or descriptor too short [ 378.910618][ T5916] usb 3-1: config 7 has an invalid interface number: 58 but max is 0 [ 378.910791][ T5822] Bluetooth: hci5: command 0x0c1a tx timeout [ 378.919158][ T5811] Bluetooth: hci4: command 0x0406 tx timeout [ 378.924897][ T5822] Bluetooth: hci3: command 0x0406 tx timeout [ 378.938955][ T5916] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 378.950878][ T5916] usb 3-1: config 7 has no interface number 0 [ 378.957177][ T5916] usb 3-1: config 7 interface 58 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 378.980291][ T5916] usb 3-1: config 7 interface 58 has no altsetting 0 [ 378.989515][ T5916] usb 3-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 378.998861][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.000764][ T5876] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 379.007070][ T5916] usb 3-1: Product: syz [ 379.018936][ T5916] usb 3-1: Manufacturer: syz [ 379.023617][ T5916] usb 3-1: SerialNumber: syz [ 379.150803][ T5876] usb 4-1: device descriptor read/64, error -71 [ 379.228023][T10044] fuse: Bad value for 'fd' [ 379.259094][T10035] fuse: Bad value for 'fd' [ 379.272607][ T5876] usb usb4-port1: attempt power cycle [ 379.416826][T10048] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1097'. [ 379.425888][T10048] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1097'. [ 379.637985][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 379.638016][ T30] audit: type=1400 audit(1775372108.778:784): avc: denied { connect } for pid=10045 comm="syz.4.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 379.730864][ T5876] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 379.911313][ T5876] usb 4-1: device descriptor read/8, error -71 [ 380.141720][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 380.153753][ T5876] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 380.191318][ T5876] usb 4-1: device descriptor read/8, error -71 [ 380.294640][T10052] syzkaller0: entered promiscuous mode [ 380.300155][T10052] syzkaller0: entered allmulticast mode [ 380.307097][ T5876] usb usb4-port1: unable to enumerate USB device [ 380.332362][ T30] audit: type=1400 audit(1775372109.478:785): avc: denied { relabelfrom } for pid=10051 comm="syz.0.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 380.530468][ T9] usb 5-1: device descriptor read/64, error -71 [ 380.756924][ T30] audit: type=1400 audit(1775372109.478:786): avc: denied { relabelto } for pid=10051 comm="syz.0.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 380.777254][ T30] audit: type=1400 audit(1775372109.648:787): avc: denied { ioctl } for pid=10053 comm="syz.5.1101" path="socket:[27949]" dev="sockfs" ino=27949 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 380.911052][ T5811] Bluetooth: hci1: command 0x0406 tx timeout [ 380.991810][ T5811] Bluetooth: hci5: command 0x0c1a tx timeout [ 381.422794][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 381.808214][ T9] usb 5-1: device descriptor read/64, error -71 [ 381.811448][T10066] netlink: 'syz.3.1105': attribute type 39 has an invalid length. [ 381.850954][ T5916] usb 3-1: USB disconnect, device number 23 [ 381.919844][T10064] tmpfs: Bad value for 'mpol' [ 381.925002][ T9] usb usb5-port1: attempt power cycle [ 382.087128][ T30] audit: type=1400 audit(1775372111.228:788): avc: denied { create } for pid=10070 comm="syz.0.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 382.294815][ T30] audit: type=1400 audit(1775372111.438:789): avc: denied { connect } for pid=10079 comm="syz.0.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 382.334862][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 382.629683][ T9] usb 5-1: device descriptor read/8, error -71 [ 382.644785][T10082] rdma_rxe: rxe_newlink: failed to add lo [ 382.862353][T10089] fuse: Bad value for 'fd' [ 383.088732][ T5811] Bluetooth: hci5: command 0x0c1a tx timeout [ 383.260752][ T5818] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 383.422198][ T5818] usb 6-1: Using ep0 maxpacket: 16 [ 383.432776][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.451487][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.628108][ T5818] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 383.644748][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.661124][ T5818] usb 6-1: config 0 descriptor?? [ 383.780075][T10100] FAULT_INJECTION: forcing a failure. [ 383.780075][T10100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.799662][T10100] CPU: 0 UID: 0 PID: 10100 Comm: syz.0.1115 Tainted: G L syzkaller #0 PREEMPT(full) [ 383.799691][T10100] Tainted: [L]=SOFTLOCKUP [ 383.799696][T10100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 383.799703][T10100] Call Trace: [ 383.799707][T10100] [ 383.799712][T10100] dump_stack_lvl+0x100/0x190 [ 383.799748][T10100] should_fail_ex.cold+0x5/0xa [ 383.799779][T10100] _copy_to_user+0x32/0xd0 [ 383.799799][T10100] simple_read_from_buffer+0xcb/0x170 [ 383.799813][T10100] proc_fail_nth_read+0x1af/0x230 [ 383.799835][T10100] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 383.799852][T10100] ? rw_verify_area+0xce/0x6d0 [ 383.799872][T10100] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 383.799896][T10100] vfs_read+0x1e4/0xb30 [ 383.799914][T10100] ? __pfx_vfs_read+0x10/0x10 [ 383.799928][T10100] ? __fget_files+0x215/0x3d0 [ 383.799948][T10100] ? __fget_files+0x21f/0x3d0 [ 383.799963][T10100] ksys_read+0x12a/0x250 [ 383.799973][T10100] ? __pfx_ksys_read+0x10/0x10 [ 383.799986][T10100] do_syscall_64+0x106/0xf80 [ 383.800004][T10100] ? clear_bhb_loop+0x40/0x90 [ 383.800024][T10100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.800041][T10100] RIP: 0033:0x7f186835d04e [ 383.800055][T10100] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 383.800070][T10100] RSP: 002b:00007f18692a3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 383.800086][T10100] RAX: ffffffffffffffda RBX: 00007f18692a46c0 RCX: 00007f186835d04e [ 383.800093][T10100] RDX: 000000000000000f RSI: 00007f18692a40a0 RDI: 0000000000000005 [ 383.800099][T10100] RBP: 00007f18692a4090 R08: 0000000000000000 R09: 0000000000000000 [ 383.800104][T10100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.800110][T10100] R13: 00007f1868616038 R14: 00007f1868615fa0 R15: 00007fff27410dc8 [ 383.800123][T10100] [ 384.196385][ T5818] konepure 0003:1E7D:2DB4.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.5-1/input0 [ 384.378277][T10107] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1116'. [ 384.836733][ T5818] usb 6-1: USB disconnect, device number 7 [ 385.177325][T10106] fido_id[10106]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 385.293940][ T30] audit: type=1400 audit(1775372114.438:790): avc: denied { remount } for pid=10114 comm="syz.3.1119" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 385.317785][T10115] tipc: Started in network mode [ 385.322888][T10115] tipc: Node identity 850, cluster identity 4711 [ 385.329205][T10115] tipc: Node number set to 2128 [ 385.347229][ T30] audit: type=1400 audit(1775372114.488:791): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 385.633292][T10127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1121'. [ 385.804223][T10129] SELinux: failed to load policy [ 385.872688][ T30] audit: type=1400 audit(1775372114.948:792): avc: denied { load_policy } for pid=10128 comm="syz.2.1125" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 386.123474][T10132] lo speed is unknown, defaulting to 1000 [ 386.205400][T10132] wg1 speed is unknown, defaulting to 1000 [ 386.211961][T10132] vxcan1 speed is unknown, defaulting to 1000 [ 386.342307][T10134] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 386.580760][ T5917] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 386.747838][ T5917] usb 5-1: config 0 has no interfaces? [ 386.755367][ T5917] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 386.771111][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.060673][ T5917] usb 5-1: Product: syz [ 387.064971][ T5917] usb 5-1: Manufacturer: syz [ 387.069554][ T5917] usb 5-1: SerialNumber: syz [ 387.105798][ T5917] usb 5-1: config 0 descriptor?? [ 387.169535][T10148] mkiss: ax0: crc mode is auto. [ 387.342534][T10132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.351149][T10132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.376962][T10132] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.386096][T10132] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.428279][ T29] usb 5-1: USB disconnect, device number 36 [ 387.510861][T10153] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1133'. [ 388.259759][ T30] audit: type=1400 audit(1775372117.398:793): avc: denied { execute } for pid=10165 comm="syz.2.1138" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 388.301387][T10162] FAULT_INJECTION: forcing a failure. [ 388.301387][T10162] name failslab, interval 1, probability 0, space 0, times 0 [ 388.320711][ T30] audit: type=1400 audit(1775372117.438:794): avc: denied { read } for pid=10161 comm="syz.4.1136" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 388.350803][T10162] CPU: 1 UID: 0 PID: 10162 Comm: syz.4.1136 Tainted: G L syzkaller #0 PREEMPT(full) [ 388.350826][T10162] Tainted: [L]=SOFTLOCKUP [ 388.350829][T10162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 388.350836][T10162] Call Trace: [ 388.350840][T10162] [ 388.350844][T10162] dump_stack_lvl+0x100/0x190 [ 388.350866][T10162] should_fail_ex.cold+0x5/0xa [ 388.350880][T10162] should_failslab+0xc2/0x120 [ 388.350892][T10162] __kmalloc_cache_noprof+0x7a/0x6f0 [ 388.350906][T10162] ? binder_get_thread+0x201/0x850 [ 388.350925][T10162] binder_get_thread+0x201/0x850 [ 388.350943][T10162] binder_poll+0x3f/0x430 [ 388.350958][T10162] ? __pfx_binder_poll+0x10/0x10 [ 388.350974][T10162] do_select+0xd54/0x1850 [ 388.350995][T10162] ? __pfx_do_select+0x10/0x10 [ 388.351006][T10162] ? __pfx___pollwait+0x10/0x10 [ 388.351018][T10162] ? __pfx_pollwake+0x10/0x10 [ 388.351030][T10162] ? __pfx_pollwake+0x10/0x10 [ 388.351041][T10162] ? __pfx_pollwake+0x10/0x10 [ 388.351052][T10162] ? __pfx_pollwake+0x10/0x10 [ 388.351063][T10162] ? __pfx_pollwake+0x10/0x10 [ 388.351074][T10162] ? __pfx_pollwake+0x10/0x10 [ 388.351085][T10162] ? __pfx_pollwake+0x10/0x10 [ 388.351101][T10162] ? find_held_lock+0x2b/0x80 [ 388.351115][T10162] ? __might_fault+0xc5/0x140 [ 388.351129][T10162] ? __might_fault+0xc5/0x140 [ 388.351148][T10162] ? core_sys_select+0x55b/0xbb0 [ 388.351158][T10162] core_sys_select+0x55b/0xbb0 [ 388.351172][T10162] ? __pfx_core_sys_select+0x10/0x10 [ 388.351186][T10162] ? find_held_lock+0x2b/0x80 [ 388.351199][T10162] ? get_pid_task+0xfc/0x250 [ 388.351222][T10162] ? __pfx_set_user_sigmask+0x10/0x10 [ 388.351234][T10162] ? __mutex_unlock_slowpath+0x15c/0x790 [ 388.351245][T10162] ? __fget_files+0x215/0x3d0 [ 388.351259][T10162] do_pselect.constprop.0+0x238/0x270 [ 388.351272][T10162] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 388.351286][T10162] ? ksys_write+0x1ac/0x250 [ 388.351298][T10162] __x64_sys_pselect6+0x149/0x1c0 [ 388.351311][T10162] do_syscall_64+0x106/0xf80 [ 388.351327][T10162] ? clear_bhb_loop+0x40/0x90 [ 388.351340][T10162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.351351][T10162] RIP: 0033:0x7f78bf59c819 [ 388.351360][T10162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.351371][T10162] RSP: 002b:00007f78bd7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 388.351381][T10162] RAX: ffffffffffffffda RBX: 00007f78bf815fa0 RCX: 00007f78bf59c819 [ 388.351387][T10162] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 388.351393][T10162] RBP: 00007f78bd7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 388.351399][T10162] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.351405][T10162] R13: 00007f78bf816038 R14: 00007f78bf815fa0 R15: 00007ffcae0310b8 [ 388.351419][T10162] [ 388.666420][ T5816] overlayfs: failed lookup in lower (newroot/242, name='bus', err=-40): overlapping layers [ 388.677117][ T5816] overlayfs: failed lookup in lower (newroot/242, name='bus', err=-40): overlapping layers [ 388.925380][T10169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1139'. [ 388.976908][ T5816] bridge0: port 3(syz_tun) entered disabled state [ 388.996667][ T5816] syz_tun (unregistering): left allmulticast mode [ 389.010874][ T5816] syz_tun (unregistering): left promiscuous mode [ 389.022403][ T5816] bridge0: port 3(syz_tun) entered disabled state [ 390.248667][T10188] openvswitch: netlink: Missing key (keys=800040, expected=2000) [ 390.260925][T10191] fuse: Unknown parameter 'fd00000000000000000005' [ 390.559888][ T1117] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.602981][ T1117] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.816050][ T1117] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.866755][ T1117] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.915790][T10205] netlink: 'syz.5.1146': attribute type 12 has an invalid length. [ 390.925124][T10205] netlink: 'syz.5.1146': attribute type 29 has an invalid length. [ 390.933698][T10205] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1146'. [ 391.102865][ T1117] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.152778][ T1117] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.626698][ T1117] bridge_slave_1: left allmulticast mode [ 391.652189][ T1117] bridge_slave_1: left promiscuous mode [ 391.663798][ T1117] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.711270][ T5917] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 391.739407][ T1117] bridge_slave_0: left allmulticast mode [ 391.751803][ T1117] bridge_slave_0: left promiscuous mode [ 391.777645][ T1117] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.907202][ T5917] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 391.943174][ T5917] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 392.035034][ T5917] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 392.290711][ T5917] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 392.347641][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.422459][ T5920] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 392.449395][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1154'. [ 392.524622][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 392.536227][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 392.546153][T10217] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 392.555076][ T5820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 392.628838][ T5820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 392.636771][ T5820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 392.649516][ T5920] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 392.663544][ T5920] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 392.697484][T10239] 9p: Bad value for 'port' [ 392.739857][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.761871][ T5920] usb 3-1: Product: syz [ 392.826346][ T5920] usb 3-1: Manufacturer: syz [ 392.831531][ T5920] usb 3-1: SerialNumber: syz [ 392.971899][ T5920] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 392.995306][ T5920] imon 3-1:155.0: unable to initialize intf0, err -19 [ 393.018351][ T5920] imon:imon_probe: failed to initialize context! [ 393.038862][ T5920] imon 3-1:155.0: unable to register, err -19 [ 393.340238][ T1117] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 393.414166][ T5917] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 393.434246][ T5917] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input11 [ 393.490785][ T5917] usb 4-1: USB disconnect, device number 33 [ 393.496837][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 393.578094][ T1117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.588063][ T1117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.598982][ T1117] bond0 (unregistering): Released all slaves [ 393.636160][T10234] lo speed is unknown, defaulting to 1000 [ 393.981715][ T5917] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 393.992035][T10234] wg1 speed is unknown, defaulting to 1000 [ 394.019366][T10234] vxcan1 speed is unknown, defaulting to 1000 [ 394.143670][ T5917] usb 6-1: config 0 interface 0 has no altsetting 0 [ 394.159208][ T5917] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 394.189722][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.220149][ T5917] usb 6-1: config 0 descriptor?? [ 394.285242][ T29] usb 3-1: USB disconnect, device number 24 [ 394.740666][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 394.911021][ T5820] Bluetooth: hci4: command tx timeout [ 394.970963][ T5917] video4linux radio48: keene_cmd_main failed (-110) [ 394.977770][ T5917] radio-keene 6-1:0.0: V4L2 device registered as radio48 [ 395.491281][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 395.637121][ T1117] hsr_slave_0: left promiscuous mode [ 395.646134][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 395.652996][ T1117] hsr_slave_1: left promiscuous mode [ 395.663348][ T1117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.738363][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.811358][ T1117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.815746][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 395.830885][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.847810][ T10] usb 3-1: config 0 has no interface number 0 [ 395.866967][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 395.878689][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 395.888561][ T1117] veth1_macvtap: left promiscuous mode [ 395.899219][ T1117] veth0_macvtap: left promiscuous mode [ 395.908771][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.922628][ T1117] veth1_vlan: left promiscuous mode [ 395.935260][ T1117] veth0_vlan: left promiscuous mode [ 395.949508][ T10] usb 3-1: config 0 descriptor?? [ 395.968850][ T10] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 396.164069][ T1117] pimreg (unregistering): left allmulticast mode [ 396.502434][ T1117] team0 (unregistering): Port device team_slave_1 removed [ 396.541831][ T1117] team0 (unregistering): Port device team_slave_0 removed [ 396.859003][T10293] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.866808][T10293] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.920160][T10300] pimreg: entered allmulticast mode [ 396.990903][ T5820] Bluetooth: hci4: command tx timeout [ 397.059553][T10234] chnl_net:caif_netlink_parms(): no params data found [ 397.234661][ T10] usb 3-1: USB disconnect, device number 25 [ 397.345425][ T1117] IPVS: stop unused estimator thread 0... [ 397.445171][T10234] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.496282][T10234] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.532739][T10234] bridge_slave_0: entered allmulticast mode [ 397.567649][T10234] bridge_slave_0: entered promiscuous mode [ 397.705379][T10234] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.795146][T10234] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.855360][T10234] bridge_slave_1: entered allmulticast mode [ 397.942405][T10234] bridge_slave_1: entered promiscuous mode [ 398.070401][T10234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.099103][ T5818] usb 6-1: USB disconnect, device number 8 [ 398.135845][T10234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.226016][T10234] team0: Port device team_slave_0 added [ 398.254776][T10234] team0: Port device team_slave_1 added [ 398.354742][T10234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.370657][T10234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.438310][T10234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.489189][T10234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.595634][T10234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.622998][T10234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.679492][T10349] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 398.687854][T10349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.911264][T10344] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1170'. [ 398.933759][ T30] audit: type=1400 audit(1775372128.078:795): avc: denied { mount } for pid=10342 comm="syz.5.1170" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 399.031992][T10234] hsr_slave_0: entered promiscuous mode [ 399.049058][T10234] hsr_slave_1: entered promiscuous mode [ 399.074902][ T5820] Bluetooth: hci4: command tx timeout [ 399.229696][T10357] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 399.238161][T10357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.270296][ T30] audit: type=1400 audit(1775372129.408:796): avc: denied { mounton } for pid=10366 comm="syz.2.1174" path="/222/file0" dev="tmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 400.295026][T10367] fuse: Bad value for 'fd' [ 400.477400][T10234] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 400.542205][T10234] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 400.582662][T10234] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 400.633919][T10234] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 400.801480][ T29] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 400.818204][T10388] rdma_rxe: rxe_newlink: failed to add lo [ 400.894152][T10234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.989590][T10234] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.041374][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 401.049739][ T29] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 401.060079][ T7140] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.067200][ T7140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.078004][ T29] usb 3-1: config 0 has no interface number 0 [ 401.086851][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.093936][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.120611][ T29] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 401.151091][ T5820] Bluetooth: hci4: command tx timeout [ 401.162684][ T29] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 401.206605][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.248570][ T29] usb 3-1: config 0 descriptor?? [ 401.286519][ T29] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 401.635669][T10234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.075951][T10412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1180'. [ 402.551338][ T5917] usb 3-1: USB disconnect, device number 26 [ 402.558133][T10416] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 402.566496][T10416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.870542][T10420] FAULT_INJECTION: forcing a failure. [ 402.870542][T10420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.913609][T10420] CPU: 0 UID: 0 PID: 10420 Comm: syz.3.1182 Tainted: G L syzkaller #0 PREEMPT(full) [ 402.913640][T10420] Tainted: [L]=SOFTLOCKUP [ 402.913646][T10420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 402.913656][T10420] Call Trace: [ 402.913662][T10420] [ 402.913669][T10420] dump_stack_lvl+0x100/0x190 [ 402.913701][T10420] should_fail_ex.cold+0x5/0xa [ 402.913725][T10420] _copy_from_user+0x2e/0xd0 [ 402.913747][T10420] copy_msghdr_from_user+0x9f/0x4f0 [ 402.913769][T10420] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 402.913799][T10420] ___sys_sendmsg+0x106/0x1e0 [ 402.913820][T10420] ? __pfx____sys_sendmsg+0x10/0x10 [ 402.913870][T10420] __sys_sendmsg+0x170/0x220 [ 402.913896][T10420] ? __pfx___sys_sendmsg+0x10/0x10 [ 402.913937][T10420] do_syscall_64+0x106/0xf80 [ 402.913963][T10420] ? clear_bhb_loop+0x40/0x90 [ 402.913985][T10420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.914002][T10420] RIP: 0033:0x7f3ef059c819 [ 402.914017][T10420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.914039][T10420] RSP: 002b:00007f3ef13f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.914055][T10420] RAX: ffffffffffffffda RBX: 00007f3ef0815fa0 RCX: 00007f3ef059c819 [ 402.914066][T10420] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000004 [ 402.914076][T10420] RBP: 00007f3ef13f7090 R08: 0000000000000000 R09: 0000000000000000 [ 402.914086][T10420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.914095][T10420] R13: 00007f3ef0816038 R14: 00007f3ef0815fa0 R15: 00007ffea06670f8 [ 402.914120][T10420] [ 403.430983][T10412] team0: Port device team_slave_0 removed [ 403.990775][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 404.270677][T10234] veth0_vlan: entered promiscuous mode [ 404.325318][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 404.344125][ T10] usb 6-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 404.353397][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.354818][T10234] veth1_vlan: entered promiscuous mode [ 404.367506][ T10] usb 6-1: Product: syz [ 404.377498][ T10] usb 6-1: Manufacturer: syz [ 404.382229][ T10] usb 6-1: SerialNumber: syz [ 404.448102][T10234] veth0_macvtap: entered promiscuous mode [ 404.520664][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 404.544654][ T30] audit: type=1326 audit(1775372133.648:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10438 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef059c819 code=0x7ffc0000 [ 404.626815][T10234] veth1_macvtap: entered promiscuous mode [ 404.643725][ T30] audit: type=1326 audit(1775372133.648:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10438 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f3ef059c819 code=0x7ffc0000 [ 404.699476][T10234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.742501][T10234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.759269][ T30] audit: type=1326 audit(1775372133.648:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10438 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef059c819 code=0x7ffc0000 [ 404.814065][ T1318] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.834702][ T10] mxuport 6-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 404.845163][ T1318] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.854874][ T10] mxuport 6-1:254.0: probe with driver mxuport failed with error -5 [ 404.884332][ T1318] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.894662][ T1318] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.904601][ T10] usb 6-1: USB disconnect, device number 9 [ 404.941309][ T30] audit: type=1326 audit(1775372133.648:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10438 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef059c819 code=0x7ffc0000 [ 405.150818][ T30] audit: type=1326 audit(1775372133.648:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10438 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3ef059c819 code=0x7ffc0000 [ 405.206023][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.218515][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.305338][ T30] audit: type=1326 audit(1775372133.658:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10438 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef059c819 code=0x7ffc0000 [ 405.329267][ T7140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.337472][ T7140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.502093][ T30] audit: type=1326 audit(1775372133.658:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10438 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ef059c819 code=0x7ffc0000 [ 405.640202][ T30] audit: type=1326 audit(1775372133.658:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10438 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef059c819 code=0x7ffc0000 [ 405.825304][ T30] audit: type=1326 audit(1775372133.658:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10438 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3ef059c819 code=0x7ffc0000 [ 406.404546][ T30] audit: type=1326 audit(1775372133.658:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10438 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef059c819 code=0x7ffc0000 [ 406.621991][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 406.801004][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 406.809672][ T10] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 406.818556][ T10] usb 4-1: config 0 has no interface number 0 [ 406.831812][ T5820] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 406.832122][ T5811] Bluetooth: hci5: command 0x0c1a tx timeout [ 406.838088][ T10] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 407.397786][ T10] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 407.407661][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.426001][ T10] usb 4-1: Product: syz [ 407.430180][ T10] usb 4-1: Manufacturer: syz [ 407.449507][ T10] usb 4-1: SerialNumber: syz [ 407.497910][ T10] usb 4-1: config 0 descriptor?? [ 407.586718][ T5920] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 407.672153][ T10] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 407.698767][ T10] em28xx 4-1:0.132: Video interface 132 found: [ 407.821022][ T5920] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 407.832781][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.861756][ T5920] usb 3-1: Product: syz [ 407.871428][ T5920] usb 3-1: Manufacturer: syz [ 407.880904][ T5920] usb 3-1: SerialNumber: syz [ 408.030746][ T5818] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 408.093062][ T10] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 408.108657][ T5920] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 408.129498][ T5920] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 408.153613][ T5920] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 408.193138][ T5920] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 408.214650][ T5818] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 408.236081][ T5818] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 408.237513][ T5920] usb 3-1: USB disconnect, device number 27 [ 408.280582][ T5818] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 408.303129][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.341694][T10472] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 408.370236][ T5818] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 408.503614][ T10] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 408.528803][ T10] em28xx 4-1:0.132: board has no eeprom [ 408.790800][ T10] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 408.800709][ T10] em28xx 4-1:0.132: analog set to bulk mode. [ 408.806739][ T5920] em28xx 4-1:0.132: Registering V4L2 extension [ 409.047894][T10453] kvm: user requested TSC rate below hardware speed [ 409.080531][ T5920] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 409.080977][T10093] usb 4-1: USB disconnect, device number 34 [ 409.143144][ T5920] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 409.151563][T10093] em28xx 4-1:0.132: Disconnecting em28xx [ 409.370122][ T5920] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 409.402801][ T5920] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 409.423380][ T5920] em28xx 4-1:0.132: No AC97 audio processor [ 409.462658][ T5920] usb 4-1: Decoder not found [ 409.485219][ T5920] em28xx 4-1:0.132: failed to create media graph [ 409.504609][ T5920] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 409.528712][ T5920] em28xx 4-1:0.132: Remote control support is not available for this card. [ 409.559548][T10093] em28xx 4-1:0.132: Closing input extension [ 409.600519][T10093] em28xx 4-1:0.132: Freeing device [ 411.066664][T10490] sd 0:0:1:0: PR command failed: 1026 [ 411.072378][T10490] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 411.079256][T10490] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 411.120927][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 411.120987][ T30] audit: type=1400 audit(1775372140.188:832): avc: denied { read write } for pid=10487 comm="syz.6.1199" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 411.223023][ T30] audit: type=1400 audit(1775372140.198:833): avc: denied { open } for pid=10487 comm="syz.6.1199" path="/1/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 411.248024][ T30] audit: type=1400 audit(1775372140.208:834): avc: denied { ioctl } for pid=10487 comm="syz.6.1199" path="/1/file0/file0" dev="fuse" ino=3 ioctlcmd=0x70cf scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 411.275478][ T5876] usb 6-1: USB disconnect, device number 10 [ 411.810762][T10498] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 411.819069][T10498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.003790][T10518] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1206'. [ 413.013883][ T5811] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 413.234020][ T30] audit: type=1400 audit(1775372142.348:835): avc: denied { read write } for pid=10525 comm="syz.6.1207" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 413.370075][T10538] fuse: Bad value for 'fd' [ 413.473468][ T30] audit: type=1400 audit(1775372142.348:836): avc: denied { open } for pid=10525 comm="syz.6.1207" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 413.723643][ T30] audit: type=1400 audit(1775372142.348:837): avc: denied { ioctl } for pid=10525 comm="syz.6.1207" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 414.044270][T10540] PKCS8: Unsupported PKCS#8 version [ 414.055223][T10540] dvmrp1: entered allmulticast mode [ 414.066170][T10540] fuse: Bad value for 'fd' [ 414.220191][T10555] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 414.228145][T10555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.729583][T10564] bridge_slave_0: left allmulticast mode [ 414.735774][T10564] bridge_slave_0: left promiscuous mode [ 414.743004][T10564] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.779011][T10564] bridge_slave_1: left allmulticast mode [ 414.790139][T10564] bridge_slave_1: left promiscuous mode [ 414.796172][T10564] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.813845][T10564] bond0: (slave bond_slave_0): Releasing backup interface [ 414.823559][T10564] bond0: (slave bond_slave_1): Releasing backup interface [ 414.844371][T10564] team0: Port device team_slave_0 removed [ 414.865210][T10564] team0: Port device team_slave_1 removed [ 414.872174][T10564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.879619][T10564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.903672][T10564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.914984][T10564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.924815][T10564] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 415.957524][T10518] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 416.454233][T10621] rdma_rxe: rxe_newlink: failed to add lo [ 417.523668][T10638] netlink: 'syz.0.1220': attribute type 1 has an invalid length. [ 417.531508][T10638] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1220'. [ 417.549000][ T30] audit: type=1400 audit(1775372146.658:838): avc: denied { getopt } for pid=10633 comm="syz.0.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 417.942176][T10642] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1222'. [ 417.952917][T10642] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1222'. [ 417.966365][T10642] netlink: 'syz.2.1222': attribute type 6 has an invalid length. [ 417.977204][T10642] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1222'. [ 418.406582][T10649] Invalid option length (1048308) for dns_resolver key [ 418.462791][ T30] audit: type=1400 audit(1775372147.608:839): avc: denied { ioctl } for pid=10648 comm="syz.2.1225" path="socket:[31265]" dev="sockfs" ino=31265 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 418.599023][T10656] fuse: Bad value for 'fd' [ 418.810708][ T5818] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 418.984547][ T5818] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 419.004015][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.012297][ T5818] usb 3-1: Product: syz [ 419.016728][ T5818] usb 3-1: Manufacturer: syz [ 419.021575][ T5818] usb 3-1: SerialNumber: syz [ 419.261980][ T5818] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 419.300677][ T5818] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 419.336127][ T5818] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 419.362753][ T5818] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 419.393691][ T5818] usb 3-1: USB disconnect, device number 28 [ 419.843511][T10665] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 419.876161][T10665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.916162][T10664] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1229'. [ 420.879869][T10686] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1235'. [ 420.913329][T10686] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1235'. [ 420.940816][T10686] netlink: 'syz.3.1235': attribute type 6 has an invalid length. [ 420.968939][T10686] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1235'. [ 421.145307][T10692] loop8: detected capacity change from 0 to 4 [ 421.154758][T10692] Dev loop8: unable to read RDB block 4 [ 421.160348][T10692] loop8: unable to read partition table [ 421.172577][T10692] loop8: partition table beyond EOD, truncated [ 421.193993][ T30] audit: type=1400 audit(1775372150.328:840): avc: denied { getopt } for pid=10690 comm="syz.2.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 421.216010][T10692] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 421.471128][ T10] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 421.643639][ T10] usb 7-1: not running at top speed; connect to a high speed hub [ 421.658987][ T10] usb 7-1: config 1 has an invalid descriptor of length 108, skipping remainder of the config [ 421.690223][ T10] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 421.699615][ T10] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1056, setting to 1023 [ 421.717254][ T10] usb 7-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 421.726723][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.734914][ T10] usb 7-1: Product: syz [ 421.739163][ T10] usb 7-1: Manufacturer: syz [ 421.744030][ T10] usb 7-1: SerialNumber: syz [ 421.890641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 421.993335][ T10] usb 7-1: 1:1 : no or invalid class specific endpoint descriptor [ 422.002029][ T10] usb 7-1: 1:1 : unsupported format bits 0x200c [ 422.008335][ T10] usb 7-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 422.034574][ T10] usb 7-1: 0:2 : does not exist [ 422.048033][ T10] usb 7-1: unit 1 not found! [ 422.055852][ T10] usb 7-1: unit 130 not found! [ 422.183402][ T10] usb 7-1: USB disconnect, device number 2 [ 422.190739][ T5920] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 422.446527][T10444] udevd[10444]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 422.503827][ T5920] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 422.523373][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.542895][ T5920] usb 6-1: Product: syz [ 422.551660][ T5920] usb 6-1: Manufacturer: syz [ 422.565559][ T5920] usb 6-1: SerialNumber: syz [ 422.715625][ T30] audit: type=1400 audit(1775372151.858:841): avc: denied { read } for pid=10710 comm="syz.0.1244" lport=58135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 422.780289][T10716] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1245'. [ 422.789419][T10716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1245'. [ 422.831347][ T5920] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 422.844131][ T5920] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 422.887986][ T5920] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 423.035382][T10721] FAULT_INJECTION: forcing a failure. [ 423.035382][T10721] name failslab, interval 1, probability 0, space 0, times 0 [ 423.048162][T10721] CPU: 0 UID: 0 PID: 10721 Comm: syz.2.1247 Tainted: G L syzkaller #0 PREEMPT(full) [ 423.048190][T10721] Tainted: [L]=SOFTLOCKUP [ 423.048196][T10721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 423.048205][T10721] Call Trace: [ 423.048209][T10721] [ 423.048213][T10721] dump_stack_lvl+0x100/0x190 [ 423.048235][T10721] should_fail_ex.cold+0x5/0xa [ 423.048250][T10721] should_failslab+0xc2/0x120 [ 423.048262][T10721] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 423.048277][T10721] ? hashtab_duplicate+0x225/0x5c0 [ 423.048297][T10721] hashtab_duplicate+0x225/0x5c0 [ 423.048312][T10721] ? __pfx_cond_bools_copy+0x10/0x10 [ 423.048327][T10721] ? __pfx_cond_bools_destroy+0x10/0x10 [ 423.048344][T10721] cond_policydb_dup+0x155/0x750 [ 423.048359][T10721] ? __asan_memcpy+0x3c/0x60 [ 423.048376][T10721] security_set_bools+0x13f/0x6c0 [ 423.048390][T10721] ? sel_commit_bools_write+0x25b/0x420 [ 423.048405][T10721] sel_commit_bools_write+0x36d/0x420 [ 423.048418][T10721] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 423.048436][T10721] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 423.048449][T10721] vfs_writev+0x5ea/0xe10 [ 423.048465][T10721] ? rcu_is_watching+0x12/0xc0 [ 423.048481][T10721] ? __pfx_vfs_writev+0x10/0x10 [ 423.048497][T10721] ? fdget_pos+0x2aa/0x380 [ 423.048510][T10721] ? find_held_lock+0x2b/0x80 [ 423.048533][T10721] ? __fget_files+0x21f/0x3d0 [ 423.048548][T10721] ? do_writev+0x13e/0x340 [ 423.048563][T10721] do_writev+0x13e/0x340 [ 423.048579][T10721] ? __pfx_do_writev+0x10/0x10 [ 423.048599][T10721] do_syscall_64+0x106/0xf80 [ 423.048615][T10721] ? clear_bhb_loop+0x40/0x90 [ 423.048628][T10721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.048639][T10721] RIP: 0033:0x7f614879c819 [ 423.048649][T10721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.048659][T10721] RSP: 002b:00007f61496b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 423.048670][T10721] RAX: ffffffffffffffda RBX: 00007f6148a16090 RCX: 00007f614879c819 [ 423.048677][T10721] RDX: 0000000000000002 RSI: 00002000000025c0 RDI: 0000000000000009 [ 423.048683][T10721] RBP: 00007f61496b0090 R08: 0000000000000000 R09: 0000000000000000 [ 423.048688][T10721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.048694][T10721] R13: 00007f6148a16128 R14: 00007f6148a16090 R15: 00007fff82edfc78 [ 423.048708][T10721] [ 423.408610][ T5920] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 423.436565][ T5920] usb 6-1: USB disconnect, device number 11 [ 423.506182][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1248'. [ 423.535593][T10723] binder: 10722:10723 ioctl c0306201 2000000004c0 returned -22 [ 424.644339][T10745] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 424.652877][T10745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.991361][T10749] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 424.999519][T10749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.278419][T10753] fuse: Bad value for 'user_id' [ 425.281246][T10752] NILFS (loop3): device size too small [ 425.283706][T10753] fuse: Bad value for 'user_id' [ 426.207454][T10768] sd 0:0:1:0: PR command failed: 1026 [ 426.213077][T10768] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 426.219872][T10768] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 426.435978][T10765] netlink: 'syz.5.1261': attribute type 3 has an invalid length. [ 426.623435][ T5818] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 427.245926][T10780] fuseblk: Bad value for 'fd' [ 428.099298][ T5818] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 428.108435][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.116634][ T5818] usb 3-1: Product: syz [ 428.120960][ T5818] usb 3-1: Manufacturer: syz [ 428.125562][ T5818] usb 3-1: SerialNumber: syz [ 428.292477][ T30] audit: type=1326 audit(1775372157.438:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.3.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef059c819 code=0x7ffc0000 [ 428.375241][ T30] audit: type=1326 audit(1775372157.438:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.3.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef059c819 code=0x7ffc0000 [ 428.410361][ T29] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 428.426287][ T5818] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 428.448003][ T30] audit: type=1326 audit(1775372157.478:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.3.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3ef059c819 code=0x7ffc0000 [ 428.474642][ T5818] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 428.507129][ T5818] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 428.608284][ T30] audit: type=1326 audit(1775372157.478:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.3.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef059c819 code=0x7ffc0000 [ 428.640741][ T30] audit: type=1326 audit(1775372157.478:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.3.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef059c819 code=0x7ffc0000 [ 428.671905][ T30] audit: type=1326 audit(1775372157.478:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.3.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ef059c819 code=0x7ffc0000 [ 428.701301][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 428.708630][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.719943][ T29] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 428.734298][ T30] audit: type=1326 audit(1775372157.478:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.3.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef059c819 code=0x7ffc0000 [ 428.759556][ T30] audit: type=1326 audit(1775372157.478:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.3.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3ef059c819 code=0x7ffc0000 [ 428.795511][ T30] audit: type=1326 audit(1775372157.478:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.3.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef059c819 code=0x7ffc0000 [ 429.067498][ T5818] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 429.092658][ T5818] usb 3-1: USB disconnect, device number 29 [ 429.212595][ T30] audit: type=1326 audit(1775372157.478:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.3.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3ef055d04e code=0x7ffc0000 [ 429.284103][ T29] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 429.300721][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.333604][ T29] usb 6-1: Product: syz [ 429.345781][ T29] usb 6-1: config 0 descriptor?? [ 429.351663][ T29] usb 6-1: can't set config #0, error -71 [ 429.378770][ T29] usb 6-1: USB disconnect, device number 12 [ 432.830981][ T5920] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 433.115217][ T5920] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 433.125597][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.133704][ T5920] usb 3-1: Product: syz [ 433.137927][ T5920] usb 3-1: Manufacturer: syz [ 433.142605][ T5920] usb 3-1: SerialNumber: syz [ 433.604416][ T5920] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 433.621439][ T5920] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 433.634505][ T5920] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 433.664258][ T5920] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 433.678138][ T5920] usb 3-1: USB disconnect, device number 30 [ 433.990758][ T5876] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 434.343825][T10850] lo speed is unknown, defaulting to 1000 [ 434.812588][T10851] random: crng reseeded on system resumption [ 434.984128][T10851] Restarting kernel threads ... [ 434.990274][T10851] Done restarting kernel threads. [ 435.149259][ T5876] usb 4-1: Using ep0 maxpacket: 32 [ 435.159581][ T5876] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 435.159838][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 435.170675][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 435.170688][ T30] audit: type=1400 audit(1775372163.958:862): avc: denied { write } for pid=10843 comm="syz.6.1283" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 435.174382][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 435.180032][ T5876] usb 4-1: config 0 has no interface number 0 [ 435.297698][T10850] wg1 speed is unknown, defaulting to 1000 [ 435.313011][T10850] vxcan1 speed is unknown, defaulting to 1000 [ 436.044830][ T30] audit: type=1400 audit(1775372164.128:863): avc: denied { ioctl } for pid=10843 comm="syz.6.1283" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 436.079659][ T30] audit: type=1400 audit(1775372164.258:864): avc: denied { kexec_image_load } for pid=10843 comm="syz.6.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 436.321770][ T5876] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 436.330945][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.339012][ T5876] usb 4-1: Product: syz [ 436.343401][ T5876] usb 4-1: Manufacturer: syz [ 436.348439][ T5876] usb 4-1: SerialNumber: syz [ 436.355574][ T5876] usb 4-1: config 0 descriptor?? [ 436.370185][ T5876] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 436.391535][ T5876] usb 4-1: selecting invalid altsetting 1 [ 436.397287][ T5876] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 436.412659][ T5876] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 436.424107][ T5876] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 436.432581][ T5876] usb 4-1: media controller created [ 436.434791][T10853] xt_policy: output policy not valid in PREROUTING and INPUT [ 436.459753][ T5876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 436.692723][T10857] lo speed is unknown, defaulting to 1000 [ 436.800787][ T5917] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 437.084560][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.249472][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.294539][ T5917] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 437.307751][ T5876] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 437.333492][ T5917] usb 6-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 437.368345][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.376828][ T5876] usb 4-1: USB disconnect, device number 35 [ 437.407673][ T5917] usb 6-1: config 0 descriptor?? [ 437.517360][T10871] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 437.526273][T10857] wg1 speed is unknown, defaulting to 1000 [ 437.535691][T10857] vxcan1 speed is unknown, defaulting to 1000 [ 437.878978][T10860] netlink: 'syz.5.1287': attribute type 31 has an invalid length. [ 437.887082][ T29] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 437.919738][T10860] netlink: 54 bytes leftover after parsing attributes in process `syz.5.1287'. [ 438.028639][ T5917] lg-g15 0003:046D:C22E.0012: unknown main item tag 0x0 [ 438.050526][ T5917] lg-g15 0003:046D:C22E.0012: unknown main item tag 0x0 [ 438.060704][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 438.071517][ T5917] lg-g15 0003:046D:C22E.0012: unknown main item tag 0x0 [ 438.075503][ T29] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 438.080679][ T5917] lg-g15 0003:046D:C22E.0012: unknown main item tag 0x0 [ 438.095406][ T29] usb 7-1: config 0 has no interface number 0 [ 438.112436][ T5917] lg-g15 0003:046D:C22E.0012: unknown main item tag 0x0 [ 438.117618][ T29] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 438.128522][ T5917] lg-g15 0003:046D:C22E.0012: unknown main item tag 0x0 [ 438.128549][ T5917] lg-g15 0003:046D:C22E.0012: unknown main item tag 0x0 [ 438.128568][ T5917] lg-g15 0003:046D:C22E.0012: unknown main item tag 0x0 [ 438.128588][ T5917] lg-g15 0003:046D:C22E.0012: unknown main item tag 0x0 [ 438.128609][ T5917] lg-g15 0003:046D:C22E.0012: unknown main item tag 0x0 [ 438.144299][ T5917] lg-g15 0003:046D:C22E.0012: hidraw0: USB HID v7f.7d Device [HID 046d:c22e] on usb-dummy_hcd.5-1/input0 [ 438.181785][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.201237][ T29] usb 7-1: Product: syz [ 438.240750][ T29] usb 7-1: Manufacturer: syz [ 438.247307][ T29] usb 7-1: SerialNumber: syz [ 438.292656][ T29] usb 7-1: config 0 descriptor?? [ 438.298043][ T5917] usb 6-1: USB disconnect, device number 13 [ 438.348129][ T29] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 438.425691][T10885] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 438.442743][T10885] netlink: 'syz.3.1293': attribute type 1 has an invalid length. [ 438.478113][T10885] netlink: 2108 bytes leftover after parsing attributes in process `syz.3.1293'. [ 438.528911][ T29] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 438.561185][ T29] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 438.714001][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 75 [ 439.073575][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 439.083043][ T5818] usb 7-1: USB disconnect, device number 3 [ 439.112903][ T5818] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 439.415119][ T5818] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 439.491570][ T5818] quatech2 7-1:0.51: device disconnected [ 439.601889][T10899] tmpfs: Bad value for 'mpol' [ 439.621232][T10897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1296'. [ 440.815703][T10910] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1299'. [ 440.990818][ T10] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 441.082834][T10926] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 441.090869][T10926] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.318577][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 441.331513][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.369164][ T10] usb 6-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 441.383075][ T10] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 441.410914][ T10] usb 6-1: Manufacturer: syz [ 441.436833][ T10] usb 6-1: config 0 descriptor?? [ 441.650875][ T5917] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 441.794489][T10936] input: syz1 as /devices/virtual/input/input12 [ 441.860695][ T5917] usb 4-1: Using ep0 maxpacket: 8 [ 441.867101][T10907] capability: warning: `syz.5.1298' uses 32-bit capabilities (legacy support in use) [ 441.873286][ T5917] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 441.914855][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.950720][ T5917] usb 4-1: Product: syz [ 441.955156][ T5917] usb 4-1: Manufacturer: syz [ 441.970687][ T5917] usb 4-1: SerialNumber: syz [ 442.059559][ T10] cougar 0003:060B:700A.0013: item fetching failed at offset 3/5 [ 442.141129][ T10] cougar 0003:060B:700A.0013: parse failed [ 442.159002][ T10] cougar 0003:060B:700A.0013: probe with driver cougar failed with error -22 [ 442.164243][ T30] audit: type=1400 audit(1775372171.308:865): avc: denied { write } for pid=10933 comm="syz.2.1305" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 442.398871][ T1205] usb 6-1: USB disconnect, device number 14 [ 442.408770][ T5917] mxuport 4-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 442.417554][ T5917] mxuport 4-1:254.0: probe with driver mxuport failed with error -5 [ 442.472929][ T5917] usb 4-1: USB disconnect, device number 36 [ 443.137260][T10970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1311'. [ 443.155688][ T30] audit: type=1400 audit(1775372172.278:866): avc: denied { mounton } for pid=10968 comm="syz.5.1311" path="/proc/186/cgroup" dev="proc" ino=32099 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 443.372984][T10972] sd 0:0:1:0: PR command failed: 1026 [ 443.378538][T10972] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 443.385414][T10972] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 443.681838][ T30] audit: type=1400 audit(1775372172.278:867): avc: denied { ioctl } for pid=10968 comm="syz.5.1311" path="socket:[32097]" dev="sockfs" ino=32097 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 443.770713][ T5917] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 443.882747][T10983] xt_hashlimit: size too large, truncated to 1048576 [ 443.952852][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 443.991040][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1544, setting to 1024 [ 444.025189][T10987] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 444.040000][ T5917] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c0b, bcdDevice= 0.00 [ 444.059246][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.147775][ T5917] usb 3-1: config 0 descriptor?? [ 445.151745][T10965] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 446.514888][ T5917] hid_parser_main: 220 callbacks suppressed [ 446.514909][ T5917] corsair-psu 0003:1B1C:1C0B.0014: unknown main item tag 0x0 [ 446.528652][ T5917] corsair-psu 0003:1B1C:1C0B.0014: unknown main item tag 0x0 [ 446.543005][ T5917] corsair-psu 0003:1B1C:1C0B.0014: unknown main item tag 0x0 [ 446.550467][ T5917] corsair-psu 0003:1B1C:1C0B.0014: unknown main item tag 0x0 [ 446.558311][ T5917] corsair-psu 0003:1B1C:1C0B.0014: unknown main item tag 0x0 [ 446.580889][ T5917] corsair-psu 0003:1B1C:1C0B.0014: unknown main item tag 0x0 [ 446.591577][ T5917] corsair-psu 0003:1B1C:1C0B.0014: unknown main item tag 0x0 [ 446.622740][ T5917] corsair-psu 0003:1B1C:1C0B.0014: unknown main item tag 0x0 [ 446.642950][ T5917] corsair-psu 0003:1B1C:1C0B.0014: unknown main item tag 0x0 [ 446.650442][ T5917] corsair-psu 0003:1B1C:1C0B.0014: unknown main item tag 0x0 [ 446.682029][ T5917] corsair-psu 0003:1B1C:1C0B.0014: hidraw0: USB HID v7f.fd Device [HID 1b1c:1c0b] on usb-dummy_hcd.2-1/input0 [ 446.853604][ T5917] corsair-psu 0003:1B1C:1C0B.0014: unable to initialize device (-71) [ 446.971692][T11008] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 447.378614][ T5917] corsair-psu 0003:1B1C:1C0B.0014: probe with driver corsair-psu failed with error -71 [ 447.550800][ T5916] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 447.559346][ T5917] usb 3-1: USB disconnect, device number 31 [ 448.184291][ T5916] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.206686][ T5916] usb 6-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=e4.df [ 448.217357][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.233227][ T5916] usb 6-1: config 0 descriptor?? [ 448.241803][ T5916] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected. [ 448.463550][T11004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.531319][T11004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.541463][T11004] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1320'. [ 449.302547][T11035] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 449.311609][T11035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.717641][T11040] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 449.724184][T11040] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 449.766957][T11040] vhci_hcd vhci_hcd.0: Device attached [ 449.819577][T11041] vhci_hcd: connection closed [ 449.819844][ T13] vhci_hcd vhci_hcd.3: stop threads [ 449.840650][ T13] vhci_hcd vhci_hcd.3: release socket [ 449.846050][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 450.337950][ T5916] pwc: send_video_command error -71 [ 450.419652][ T5916] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 450.428496][ T5916] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 450.448232][ T5916] usb 6-1: USB disconnect, device number 15 [ 450.470714][ T1205] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 450.606219][T11060] cgroup2: Unknown parameter '­' [ 450.612120][ T30] audit: type=1400 audit(1775372179.748:868): avc: denied { mounton } for pid=11058 comm="syz.3.1335" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 450.740765][ T1205] usb 3-1: Using ep0 maxpacket: 32 [ 450.747396][ T1205] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 450.766223][ T1205] usb 3-1: config 0 has no interface number 0 [ 450.776776][ T1205] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 450.802516][ T1205] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 451.476698][T11066] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1336'. [ 451.551617][ T1205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.561910][ T1205] usb 3-1: Product: syz [ 451.566097][ T1205] usb 3-1: Manufacturer: syz [ 451.583055][ T1205] usb 3-1: SerialNumber: syz [ 451.590272][ T1205] usb 3-1: config 0 descriptor?? [ 451.610204][ T1205] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 451.620897][ T1205] em28xx 3-1:0.132: Video interface 132 found: [ 451.631988][T11066] hsr_slave_1 (unregistering): left promiscuous mode [ 451.885218][T11076] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 451.893329][T11076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.034052][ T1205] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 452.526587][ T1205] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 452.541184][ T1205] em28xx 3-1:0.132: board has no eeprom [ 453.534312][ T5916] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 453.541993][ T30] audit: type=1400 audit(1775372181.878:869): avc: denied { remount } for pid=11079 comm="syz.5.1342" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 453.764233][ T1205] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 453.784176][ T1205] em28xx 3-1:0.132: analog set to bulk mode. [ 453.794079][ T5818] em28xx 3-1:0.132: Registering V4L2 extension [ 453.811291][ T1205] usb 3-1: USB disconnect, device number 32 [ 453.839054][ T1205] em28xx 3-1:0.132: Disconnecting em28xx [ 453.850737][ T5916] usb 7-1: Using ep0 maxpacket: 8 [ 453.873574][ T5916] usb 7-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 453.902797][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.927485][ T5916] usb 7-1: Product: syz [ 453.944765][ T5916] usb 7-1: Manufacturer: syz [ 453.954859][ T5916] usb 7-1: SerialNumber: syz [ 454.031917][T11094] SELinux: policydb magic number 0x407615ba does not match expected magic number 0xf97cff8c [ 454.061896][T11094] SELinux: failed to load policy [ 454.105497][ T5818] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 454.117945][ T5818] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 454.126237][ T5818] em28xx 3-1:0.132: No AC97 audio processor [ 454.143087][ T5818] usb 3-1: Decoder not found [ 454.147766][ T5818] em28xx 3-1:0.132: failed to create media graph [ 454.150917][T11103] netlink: 'syz.2.1349': attribute type 3 has an invalid length. [ 454.235226][T11107] rdma_rxe: rxe_newlink: failed to add lo [ 454.262687][ T5818] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 454.645428][ T5916] mxuport 7-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 454.689414][ T5916] mxuport 7-1:254.0: probe with driver mxuport failed with error -5 [ 454.718221][ T5818] em28xx 3-1:0.132: Remote control support is not available for this card. [ 454.803124][ T5916] usb 7-1: USB disconnect, device number 4 [ 454.819417][ T1205] em28xx 3-1:0.132: Closing input extension [ 454.884532][ T1205] em28xx 3-1:0.132: Freeing device [ 455.247338][ T1205] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 455.429506][T11119] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1350'. [ 455.434191][ T1205] usb 3-1: Using ep0 maxpacket: 16 [ 455.445603][T11119] /dev/nullb0: Can't open blockdev [ 455.463444][T11123] rdma_rxe: rxe_newlink: failed to add lo [ 455.473463][ T1205] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.484227][ T1205] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 455.582818][ T1205] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 455.608486][ T1205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.616783][ T1205] usb 3-1: Product: syz [ 455.621219][ T1205] usb 3-1: Manufacturer: syz [ 455.625992][ T1205] usb 3-1: SerialNumber: syz [ 455.647023][ T1205] usb 3-1: config 0 descriptor?? [ 455.755743][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1353'. [ 455.778958][ T30] audit: type=1400 audit(1775372184.798:870): avc: denied { lock } for pid=11124 comm="syz.3.1353" path="socket:[33336]" dev="sockfs" ino=33336 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 456.351643][ T1205] usb 3-1: USB disconnect, device number 33 [ 456.590893][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 456.780810][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 456.791617][ T10] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 456.800026][ T10] usb 7-1: config 0 has no interface number 0 [ 456.810151][ T10] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 456.825534][ T10] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 456.836804][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.856471][ T10] usb 7-1: Product: syz [ 456.907632][T11139] netlink: 'syz.5.1356': attribute type 10 has an invalid length. [ 456.967390][ T10] usb 7-1: Manufacturer: syz [ 456.972208][ T10] usb 7-1: SerialNumber: syz [ 457.049868][ T10] usb 7-1: config 0 descriptor?? [ 457.059493][ T10] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 457.098026][ T10] em28xx 7-1:0.132: Video interface 132 found: [ 457.463736][ T10] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 457.804889][T11139] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 457.888806][ T10] em28xx 7-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 457.940690][ T10] em28xx 7-1:0.132: board has no eeprom [ 457.968016][T11149] FAULT_INJECTION: forcing a failure. [ 457.968016][T11149] name failslab, interval 1, probability 0, space 0, times 0 [ 457.983151][T11149] CPU: 0 UID: 0 PID: 11149 Comm: syz.2.1360 Tainted: G L syzkaller #0 PREEMPT(full) [ 457.983184][T11149] Tainted: [L]=SOFTLOCKUP [ 457.983190][T11149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 457.983200][T11149] Call Trace: [ 457.983206][T11149] [ 457.983212][T11149] dump_stack_lvl+0x100/0x190 [ 457.983245][T11149] should_fail_ex.cold+0x5/0xa [ 457.983270][T11149] should_failslab+0xc2/0x120 [ 457.983289][T11149] __kmalloc_cache_node_noprof+0x7d/0x770 [ 457.983317][T11149] ? __get_vm_area_node+0x101/0x330 [ 457.983341][T11149] __get_vm_area_node+0x101/0x330 [ 457.983365][T11149] __vmalloc_node_range_noprof+0x213/0x1530 [ 457.983388][T11149] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 457.983416][T11149] ? __lock_acquire+0x4a5/0x2630 [ 457.983435][T11149] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 457.983460][T11149] ? __lock_acquire+0x4a5/0x2630 [ 457.983481][T11149] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 457.983502][T11149] ? find_held_lock+0x2b/0x80 [ 457.983525][T11149] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 457.983545][T11149] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 457.983567][T11149] ? avc_has_perm_noaudit+0x145/0x3b0 [ 457.983588][T11149] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 457.983612][T11149] __vmalloc_node_noprof+0xad/0xf0 [ 457.983633][T11149] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 457.983660][T11149] __vmalloc_noprof+0xa3/0x120 [ 457.983687][T11149] ? __pfx___vmalloc_noprof+0x10/0x10 [ 457.983710][T11149] ? rcu_is_watching+0x12/0xc0 [ 457.983732][T11149] ? cap_capable+0x107/0x460 [ 457.983755][T11149] bpf_prog_alloc_no_stats+0x59/0x630 [ 457.983780][T11149] ? security_capable+0x80/0x260 [ 457.983804][T11149] bpf_prog_alloc+0x3b/0x200 [ 457.983828][T11149] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 457.983854][T11149] bpf_prog_load+0x494/0x2c20 [ 457.983878][T11149] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 457.983897][T11149] ? __pfx_bpf_prog_load+0x10/0x10 [ 457.983917][T11149] ? avc_has_perm_noaudit+0x145/0x3b0 [ 457.983939][T11149] ? avc_has_perm+0x135/0x1e0 [ 457.983969][T11149] ? selinux_bpf+0xfb/0x150 [ 457.983994][T11149] __sys_bpf+0x223a/0x4b90 [ 457.984017][T11149] ? __pfx___sys_bpf+0x10/0x10 [ 457.984034][T11149] ? proc_fail_nth_write+0x9f/0x220 [ 457.984059][T11149] ? find_held_lock+0x2b/0x80 [ 457.984086][T11149] ? find_held_lock+0x2b/0x80 [ 457.984108][T11149] ? ksys_write+0x190/0x250 [ 457.984130][T11149] ? __mutex_unlock_slowpath+0x15c/0x790 [ 457.984147][T11149] ? __fget_files+0x215/0x3d0 [ 457.984176][T11149] ? fput+0x79/0x100 [ 457.984197][T11149] ? ksys_write+0x1ac/0x250 [ 457.984212][T11149] ? __pfx_ksys_write+0x10/0x10 [ 457.984233][T11149] __x64_sys_bpf+0x7b/0xc0 [ 457.984252][T11149] ? lockdep_hardirqs_on+0x78/0x100 [ 457.984277][T11149] do_syscall_64+0x106/0xf80 [ 457.984302][T11149] ? clear_bhb_loop+0x40/0x90 [ 457.984323][T11149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.984340][T11149] RIP: 0033:0x7f614879c819 [ 457.984354][T11149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.984370][T11149] RSP: 002b:00007f61496d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 457.984386][T11149] RAX: ffffffffffffffda RBX: 00007f6148a15fa0 RCX: 00007f614879c819 [ 457.984397][T11149] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 457.984407][T11149] RBP: 00007f61496d1090 R08: 0000000000000000 R09: 0000000000000000 [ 457.984417][T11149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.984426][T11149] R13: 00007f6148a16038 R14: 00007f6148a15fa0 R15: 00007fff82edfc78 [ 457.984448][T11149] [ 457.984660][T11149] syz.2.1360: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 458.250738][ T1205] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 458.325798][T11149] ,cpuset= [ 458.362166][ T10] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 458.373202][ T10] em28xx 7-1:0.132: analog set to bulk mode. [ 458.379919][ T5876] em28xx 7-1:0.132: Registering V4L2 extension [ 458.380852][T11149] /,mems_allowed=0-1 [ 458.429862][T11149] CPU: 1 UID: 0 PID: 11149 Comm: syz.2.1360 Tainted: G L syzkaller #0 PREEMPT(full) [ 458.429891][T11149] Tainted: [L]=SOFTLOCKUP [ 458.429897][T11149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 458.429907][T11149] Call Trace: [ 458.429913][T11149] [ 458.429919][T11149] dump_stack_lvl+0x100/0x190 [ 458.429953][T11149] warn_alloc.cold+0x95/0x1c1 [ 458.429981][T11149] ? __pfx_warn_alloc+0x10/0x10 [ 458.430006][T11149] ? trace_kmalloc+0x101/0x130 [ 458.430026][T11149] ? __kmalloc_cache_node_noprof+0x2d9/0x770 [ 458.430057][T11149] ? __kasan_kmalloc+0x8a/0xb0 [ 458.430084][T11149] ? __get_vm_area_node+0x208/0x330 [ 458.430114][T11149] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 458.430137][T11149] ? __lock_acquire+0x4a5/0x2630 [ 458.430158][T11149] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 458.430183][T11149] ? __lock_acquire+0x4a5/0x2630 [ 458.430204][T11149] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 458.430225][T11149] ? find_held_lock+0x2b/0x80 [ 458.430246][T11149] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 458.430265][T11149] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 458.430290][T11149] ? avc_has_perm_noaudit+0x145/0x3b0 [ 458.430311][T11149] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 458.430334][T11149] __vmalloc_node_noprof+0xad/0xf0 [ 458.430356][T11149] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 458.430383][T11149] __vmalloc_noprof+0xa3/0x120 [ 458.430403][T11149] ? __pfx___vmalloc_noprof+0x10/0x10 [ 458.430425][T11149] ? rcu_is_watching+0x12/0xc0 [ 458.430447][T11149] ? cap_capable+0x107/0x460 [ 458.430471][T11149] bpf_prog_alloc_no_stats+0x59/0x630 [ 458.430494][T11149] ? security_capable+0x80/0x260 [ 458.430517][T11149] bpf_prog_alloc+0x3b/0x200 [ 458.430539][T11149] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 458.430566][T11149] bpf_prog_load+0x494/0x2c20 [ 458.430589][T11149] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 458.430608][T11149] ? __pfx_bpf_prog_load+0x10/0x10 [ 458.430626][T11149] ? avc_has_perm_noaudit+0x145/0x3b0 [ 458.430645][T11149] ? avc_has_perm+0x135/0x1e0 [ 458.430681][T11149] ? selinux_bpf+0xfb/0x150 [ 458.430706][T11149] __sys_bpf+0x223a/0x4b90 [ 458.430736][T11149] ? __pfx___sys_bpf+0x10/0x10 [ 458.430753][T11149] ? proc_fail_nth_write+0x9f/0x220 [ 458.430777][T11149] ? find_held_lock+0x2b/0x80 [ 458.430805][T11149] ? find_held_lock+0x2b/0x80 [ 458.430826][T11149] ? ksys_write+0x190/0x250 [ 458.430848][T11149] ? __mutex_unlock_slowpath+0x15c/0x790 [ 458.430865][T11149] ? __fget_files+0x215/0x3d0 [ 458.430894][T11149] ? fput+0x79/0x100 [ 458.430914][T11149] ? ksys_write+0x1ac/0x250 [ 458.430930][T11149] ? __pfx_ksys_write+0x10/0x10 [ 458.430949][T11149] __x64_sys_bpf+0x7b/0xc0 [ 458.430968][T11149] ? lockdep_hardirqs_on+0x78/0x100 [ 458.430994][T11149] do_syscall_64+0x106/0xf80 [ 458.431019][T11149] ? clear_bhb_loop+0x40/0x90 [ 458.431039][T11149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.431056][T11149] RIP: 0033:0x7f614879c819 [ 458.431071][T11149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.431087][T11149] RSP: 002b:00007f61496d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 458.431104][T11149] RAX: ffffffffffffffda RBX: 00007f6148a15fa0 RCX: 00007f614879c819 [ 458.431114][T11149] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 458.431124][T11149] RBP: 00007f61496d1090 R08: 0000000000000000 R09: 0000000000000000 [ 458.431134][T11149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.431145][T11149] R13: 00007f6148a16038 R14: 00007f6148a15fa0 R15: 00007fff82edfc78 [ 458.431168][T11149] [ 458.808437][T11149] Mem-Info: [ 458.811825][T11128] kvm: user requested TSC rate below hardware speed [ 458.813940][T11149] active_anon:49784 inactive_anon:0 isolated_anon:0 [ 458.813940][T11149] active_file:21700 inactive_file:41756 isolated_file:0 [ 458.813940][T11149] unevictable:768 dirty:362 writeback:0 [ 458.813940][T11149] slab_reclaimable:13040 slab_unreclaimable:125566 [ 458.813940][T11149] mapped:36639 shmem:39692 pagetables:1692 [ 458.813940][T11149] sec_pagetables:0 bounce:0 [ 458.813940][T11149] kernel_misc_reclaimable:0 [ 458.813940][T11149] free:1116132 free_pcp:17903 free_cma:0 [ 458.866343][ T1205] usb 4-1: Using ep0 maxpacket: 8 [ 458.874914][ T1205] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 458.876966][T11149] Node 0 active_anon:199136kB inactive_anon:0kB active_file:86800kB inactive_file:166824kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:146556kB dirty:1444kB writeback:0kB shmem:157232kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13084kB pagetables:6652kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 458.884465][ T1205] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.884488][ T1205] usb 4-1: Product: syz [ 458.884502][ T1205] usb 4-1: Manufacturer: syz [ 458.884516][ T1205] usb 4-1: SerialNumber: syz [ 458.966721][T11149] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 459.002190][T11149] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 459.033302][T11149] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 459.039118][T11149] Node 0 DMA32 free:508652kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:208636kB inactive_anon:0kB active_file:86800kB inactive_file:166824kB unevictable:1536kB writepending:1444kB zspages:0kB present:3129332kB managed:2537044kB mlocked:0kB bounce:0kB free_pcp:68876kB local_pcp:35792kB free_cma:0kB [ 459.088864][T11149] lowmem_reserve[]: 0 0 1 1 1 [ 459.096717][ T5876] em28xx 7-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 459.105528][ T10] usb 7-1: USB disconnect, device number 5 [ 459.112833][ T10] em28xx 7-1:0.132: Disconnecting em28xx [ 459.206194][T11149] Node 0 Normal free:8kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1044kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 459.320745][T11149] lowmem_reserve[]: 0 0 0 0 0 [ 459.325581][T11149] Node 1 Normal free:3932808kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 459.376450][T11149] lowmem_reserve[]: 0 0 0 0 0 [ 459.376550][ T5876] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 459.381326][T11149] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 459.381450][T11149] Node 0 [ 459.389183][ T5876] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 459.401354][T11149] DMA32: 57*4kB (UE) 3*8kB (UME) 67*16kB (UME) 624*32kB (UM) 456*64kB (UME) 260*128kB (UM) 65*256kB (UME) 38*512kB (UME) 14*1024kB (UME) 1*2048kB (E) 89*4096kB (M) = 500780kB [ 460.607810][ T5876] em28xx 7-1:0.132: No AC97 audio processor [ 460.640779][T11149] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 460.662329][ T1205] mxuport 4-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 460.671218][ T1205] mxuport 4-1:254.0: probe with driver mxuport failed with error -5 [ 460.673888][ T5876] usb 7-1: Decoder not found [ 460.686432][ T1205] usb 4-1: USB disconnect, device number 37 [ 460.728071][ T5876] em28xx 7-1:0.132: failed to create media graph [ 460.737092][T11149] Node 1 Normal: 0*4kB 5*8kB (UM) 8*16kB (UM) 11*32kB (UM) 10*64kB (UM) 4*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 958*4096kB (M) = 3932808kB [ 460.789685][ T5876] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 460.800957][T11149] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 460.805642][ T5876] em28xx 7-1:0.132: Remote control support is not available for this card. [ 460.814482][T11166] ================================================================== [ 460.827185][T11166] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 [ 460.834658][T11166] Read of size 8 at addr ffff888099044790 by task v4l_id/11166 [ 460.842194][T11166] [ 460.844514][T11166] CPU: 1 UID: 0 PID: 11166 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 460.844540][T11166] Tainted: [L]=SOFTLOCKUP [ 460.844547][T11166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 460.844557][T11166] Call Trace: [ 460.844564][T11166] [ 460.844570][T11166] dump_stack_lvl+0x100/0x190 [ 460.844604][T11166] print_report+0x156/0x4c9 [ 460.844630][T11166] ? __virt_addr_valid+0x81/0x620 [ 460.844657][T11166] ? __phys_addr+0xe8/0x180 [ 460.844681][T11166] ? v4l2_fh_init+0x27d/0x2c0 [ 460.844707][T11166] kasan_report+0xdf/0x1e0 [ 460.844730][T11166] ? v4l2_fh_init+0x27d/0x2c0 [ 460.844757][T11166] v4l2_fh_init+0x27d/0x2c0 [ 460.844782][T11166] v4l2_fh_open+0x64/0xa0 [ 460.844808][T11166] em28xx_v4l2_open+0x11e/0x570 [ 460.844834][T11166] v4l2_open+0x1d2/0x490 [ 460.844861][T11166] ? __pfx_v4l2_open+0x10/0x10 [ 460.844887][T11166] chrdev_open+0x234/0x6a0 [ 460.844907][T11166] ? __pfx_chrdev_open+0x10/0x10 [ 460.844927][T11166] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 460.844952][T11166] do_dentry_open+0x6d8/0x1660 [ 460.844970][T11166] ? __pfx_chrdev_open+0x10/0x10 [ 460.844991][T11166] vfs_open+0x82/0x3f0 [ 460.845014][T11166] path_openat+0x208c/0x31a0 [ 460.845037][T11166] ? __pfx_path_openat+0x10/0x10 [ 460.845061][T11166] do_file_open+0x20e/0x430 [ 460.845080][T11166] ? __pfx_do_file_open+0x10/0x10 [ 460.845107][T11166] ? alloc_fd+0x476/0x790 [ 460.845126][T11166] ? do_getname+0x191/0x390 [ 460.845150][T11166] do_sys_openat2+0x10d/0x1e0 [ 460.845171][T11166] ? __pfx_do_sys_openat2+0x10/0x10 [ 460.845196][T11166] __x64_sys_openat+0x12d/0x210 [ 460.845218][T11166] ? __pfx___x64_sys_openat+0x10/0x10 [ 460.845242][T11166] ? do_user_addr_fault+0x8d6/0x12f0 [ 460.845263][T11166] do_syscall_64+0x106/0xf80 [ 460.845290][T11166] ? clear_bhb_loop+0x40/0x90 [ 460.845310][T11166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.845328][T11166] RIP: 0033:0x7fd645ca7407 [ 460.845344][T11166] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 460.845361][T11166] RSP: 002b:00007fffeade0500 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 460.845379][T11166] RAX: ffffffffffffffda RBX: 00007fd646448880 RCX: 00007fd645ca7407 [ 460.845390][T11166] RDX: 0000000000000000 RSI: 00007fffeade1f1c RDI: ffffffffffffff9c [ 460.845401][T11166] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 460.845411][T11166] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 460.845421][T11166] R13: 00007fffeade0750 R14: 00007fd6465af000 R15: 00005574aa6954d8 [ 460.845438][T11166] [ 460.845444][T11166] [ 460.860122][ T10] em28xx 7-1:0.132: Closing input extension [ 460.860301][T11166] Allocated by task 5876: [ 461.001379][T11149] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 461.002989][T11166] kasan_save_stack+0x30/0x50 [ 461.012033][T11149] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 461.013609][T11166] kasan_save_track+0x14/0x30 [ 461.018366][T11149] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 461.022837][T11166] __kasan_kmalloc+0xaa/0xb0 [ 461.022860][T11166] em28xx_v4l2_init.cold+0x94/0x3503 [ 461.022874][T11166] em28xx_init_extension+0x13a/0x200 [ 461.022890][T11166] request_module_async+0x61/0x80 [ 461.022905][T11166] process_one_work+0xa23/0x19a0 [ 461.022920][T11166] worker_thread+0x5ef/0xe50 [ 461.022936][T11166] kthread+0x370/0x450 [ 461.022949][T11166] ret_from_fork+0x754/0xd80 [ 461.022965][T11166] ret_from_fork_asm+0x1a/0x30 [ 461.022984][T11166] [ 461.022988][T11166] Freed by task 5876: [ 461.022996][T11166] kasan_save_stack+0x30/0x50 [ 461.023019][T11166] kasan_save_track+0x14/0x30 [ 461.023041][T11166] kasan_save_free_info+0x3b/0x70 [ 461.023061][T11166] __kasan_slab_free+0x5f/0x80 [ 461.023075][T11166] kfree+0x1f6/0x6b0 [ 461.030012][T11149] 112896 total pagecache pages [ 461.033326][T11166] kref_put.isra.0+0x56/0x90 [ 461.033345][T11166] em28xx_v4l2_init.cold+0x280/0x3503 [ 461.033361][T11166] em28xx_init_extension+0x13a/0x200 [ 461.033375][T11166] request_module_async+0x61/0x80 [ 461.033389][T11166] process_one_work+0xa23/0x19a0 [ 461.033403][T11166] worker_thread+0x5ef/0xe50 [ 461.059757][T11149] 0 pages in swap cache [ 461.061369][T11166] kthread+0x370/0x450 [ 461.061390][T11166] ret_from_fork+0x754/0xd80 [ 461.061406][T11166] ret_from_fork_asm+0x1a/0x30 [ 461.061425][T11166] [ 461.061430][T11166] The buggy address belongs to the object at ffff888099044000 [ 461.061430][T11166] which belongs to the cache kmalloc-8k of size 8192 [ 461.061444][T11166] The buggy address is located 1936 bytes inside of [ 461.061444][T11166] freed 8192-byte region [ffff888099044000, ffff888099046000) [ 461.081357][T11149] Free swap = 124996kB [ 461.085290][T11166] [ 461.085297][T11166] The buggy address belongs to the physical page: [ 461.085304][T11166] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x99040 [ 461.329536][T11166] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 461.338015][T11166] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 461.345537][T11166] page_type: f5(slab) [ 461.349495][T11166] raw: 00fff00000000040 ffff88813fe41280 dead000000000122 0000000000000000 [ 461.358055][T11166] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 461.366619][T11166] head: 00fff00000000040 ffff88813fe41280 dead000000000122 0000000000000000 [ 461.375267][T11166] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 461.383915][T11166] head: 00fff00000000003 ffffea0002641001 00000000ffffffff 00000000ffffffff [ 461.392563][T11166] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 461.401220][T11166] page dumped because: kasan: bad access detected [ 461.407607][T11166] page_owner tracks the page as allocated [ 461.413297][T11166] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11125, tgid 11124 (syz.3.1353), ts 455659661764, free_ts 447435555575 [ 461.434197][T11166] post_alloc_hook+0x153/0x170 [ 461.438946][T11166] get_page_from_freelist+0x111d/0x3140 [ 461.444473][T11166] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 461.450348][T11166] new_slab+0xa6/0x6b0 [ 461.454401][T11166] refill_objects+0x26b/0x400 [ 461.459060][T11166] __pcs_replace_empty_main+0x1ab/0x660 [ 461.464590][T11166] __kmalloc_cache_noprof+0x493/0x6f0 [ 461.469944][T11166] audit_log_d_path+0xed/0x210 [ 461.474687][T11166] audit_log_lsm_data+0xff3/0x1fa0 [ 461.479786][T11166] common_lsm_audit+0x229/0x2b0 [ 461.484621][T11166] slow_avc_audit+0x186/0x210 [ 461.489281][T11166] avc_has_perm+0x1a6/0x1e0 [ 461.493764][T11166] inode_has_perm+0x166/0x1d0 [ 461.498419][T11166] file_has_perm+0x2e2/0x350 [ 461.502988][T11166] selinux_file_fcntl+0x10d/0x160 [ 461.507991][T11166] security_file_fcntl+0xd3/0x230 [ 461.512991][T11166] page last free pid 11009 tgid 11000 stack trace: [ 461.519462][T11166] __free_frozen_pages+0x7e1/0x10d0 [ 461.524640][T11166] vfree.part.0+0x12b/0x9d0 [ 461.529122][T11166] vfree+0x55/0x80 [ 461.532823][T11166] futex_hash_free+0x98/0xc0 [ 461.537394][T11166] __mmput+0x30c/0x410 [ 461.541460][T11166] mmput+0x67/0x80 [ 461.545161][T11166] do_exit+0x819/0x2b60 [ 461.549312][T11166] do_group_exit+0xd5/0x2a0 [ 461.553792][T11166] get_signal+0x1ec7/0x21e0 [ 461.558279][T11166] arch_do_signal_or_restart+0x91/0x7a0 [ 461.563806][T11166] exit_to_user_mode_loop+0x86/0x4a0 [ 461.569070][T11166] do_syscall_64+0x67c/0xf80 [ 461.573644][T11166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.579515][T11166] [ 461.581818][T11166] Memory state around the buggy address: [ 461.587424][T11166] ffff888099044680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 461.595462][T11166] ffff888099044700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 461.603516][T11166] >ffff888099044780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 461.611561][T11166] ^ [ 461.616125][T11166] ffff888099044800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 461.624163][T11166] ffff888099044880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 461.632199][T11166] ================================================================== [ 461.644370][T11149] Total swap = 124996kB [ 461.648606][T11149] 2097051 pages RAM [ 461.652906][T11149] 0 pages HighMem/MovableOnly [ 461.660880][T11166] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 461.668092][T11166] CPU: 1 UID: 0 PID: 11166 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 461.678666][T11166] Tainted: [L]=SOFTLOCKUP [ 461.682971][T11166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 461.693004][T11166] Call Trace: [ 461.696265][T11166] [ 461.699176][T11166] dump_stack_lvl+0x100/0x190 [ 461.703847][T11166] vpanic+0x552/0x970 [ 461.707808][T11166] ? __pfx_vpanic+0x10/0x10 [ 461.712291][T11166] ? v4l2_fh_init+0x27d/0x2c0 [ 461.716955][T11166] panic+0xd1/0xe0 [ 461.720656][T11166] ? __pfx_panic+0x10/0x10 [ 461.725061][T11166] ? v4l2_fh_init+0x27d/0x2c0 [ 461.729721][T11166] ? preempt_schedule_common+0x42/0xc0 [ 461.735167][T11166] ? check_panic_on_warn+0x1f/0x90 [ 461.740257][T11166] check_panic_on_warn.cold+0x19/0x34 [ 461.745607][T11166] end_report.part.0+0x3a/0x90 [ 461.750372][T11166] kasan_report.cold+0xe/0x18 [ 461.755034][T11166] ? v4l2_fh_init+0x27d/0x2c0 [ 461.759699][T11166] v4l2_fh_init+0x27d/0x2c0 [ 461.764193][T11166] v4l2_fh_open+0x64/0xa0 [ 461.768509][T11166] em28xx_v4l2_open+0x11e/0x570 [ 461.773348][T11166] v4l2_open+0x1d2/0x490 [ 461.777584][T11166] ? __pfx_v4l2_open+0x10/0x10 [ 461.782351][T11166] chrdev_open+0x234/0x6a0 [ 461.786753][T11166] ? __pfx_chrdev_open+0x10/0x10 [ 461.791671][T11166] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 461.797986][T11166] do_dentry_open+0x6d8/0x1660 [ 461.802759][T11166] ? __pfx_chrdev_open+0x10/0x10 [ 461.807679][T11166] vfs_open+0x82/0x3f0 [ 461.811734][T11166] path_openat+0x208c/0x31a0 [ 461.816312][T11166] ? __pfx_path_openat+0x10/0x10 [ 461.821235][T11166] do_file_open+0x20e/0x430 [ 461.825723][T11166] ? __pfx_do_file_open+0x10/0x10 [ 461.830735][T11166] ? alloc_fd+0x476/0x790 [ 461.835052][T11166] ? do_getname+0x191/0x390 [ 461.839538][T11166] do_sys_openat2+0x10d/0x1e0 [ 461.844198][T11166] ? __pfx_do_sys_openat2+0x10/0x10 [ 461.849396][T11166] __x64_sys_openat+0x12d/0x210 [ 461.854231][T11166] ? __pfx___x64_sys_openat+0x10/0x10 [ 461.859590][T11166] ? do_user_addr_fault+0x8d6/0x12f0 [ 461.864858][T11166] do_syscall_64+0x106/0xf80 [ 461.869436][T11166] ? clear_bhb_loop+0x40/0x90 [ 461.874097][T11166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.879970][T11166] RIP: 0033:0x7fd645ca7407 [ 461.884365][T11166] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 461.903952][T11166] RSP: 002b:00007fffeade0500 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 461.912347][T11166] RAX: ffffffffffffffda RBX: 00007fd646448880 RCX: 00007fd645ca7407 [ 461.920299][T11166] RDX: 0000000000000000 RSI: 00007fffeade1f1c RDI: ffffffffffffff9c [ 461.928251][T11166] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 461.936217][T11166] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 461.944166][T11166] R13: 00007fffeade0750 R14: 00007fd6465af000 R15: 00005574aa6954d8 [ 461.952122][T11166] [ 461.955398][T11166] Kernel Offset: disabled [ 461.959696][T11166] Rebooting in 86400 seconds..