last executing test programs: 15m7.427770463s ago: executing program 32 (id=107): bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0xa) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r6 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) read$char_usb(r6, &(0x7f0000000040)=""/4109, 0x100d) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0xfffffffe, 0x200, {0x0, 0x0, 0x0, 0x0, 0x14223, 0x15000}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r7}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) r8 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000080)) 7m33.160529182s ago: executing program 33 (id=1467): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x20, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000bd00000000001200330002030000ff3f0000000000000200000000000000000000570d45f3dd65602100000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) 7m25.871811618s ago: executing program 1 (id=1490): openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r8, r6, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 7m24.838452344s ago: executing program 1 (id=1494): epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x2, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r2 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0x8}, {}, {0x1, 0x1ffe3}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x409, 0x0, 0x1000, 0x8a2, 0xd5}}, @TCA_U32_ACT={0x58, 0x7, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xfe9, 0x800, 0x0, 0x5cf3215f, 0x3}, 0x9}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xe0}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000840}, 0x20000800) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 7m19.670583363s ago: executing program 1 (id=1508): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)=0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010c001ddf8208c007121522300000000109021b0001000000010904010001faf48d00090582"], 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r8, &(0x7f0000001300)="92", 0x2) r9 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r9, r7, &(0x7f0000000540)={0x0, 0x3e0e, 0x2, 0x1, 0x28e, 0x0, r1}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8c3, 0x1000, 0x2, 0x1af, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x330, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7670, 0x100, 0x0, 0x2db, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x400, 0x1fe}}], 0x4, &(0x7f0000000280)={0x2e, 0x0, 0x0, r9, 0xc0107525, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r6, '\x00', {0x3, 0xb55, 0x100104, 0x0}}, &(0x7f0000001fc0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x24048881}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r10, &(0x7f0000000000)='3', 0x4e) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) r11 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r11, 0x80104592, &(0x7f0000000200)={0x0, 0x16, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"}) 7m16.914161452s ago: executing program 1 (id=1515): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0) pwritev(r0, &(0x7f0000001300)=[{&(0x7f0000000140)='<', 0x1}], 0x1, 0x8, 0x3) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x713a, 0x8802) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000440)="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", 0x559, 0xffffffffffffffff) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000040)=""/107) r3 = socket$netlink(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x1000000}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000014003900000000000048932528"], 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0xc8c0) sendmsg$nl_netfilter(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d00058009000100"], 0xbc}}, 0x0) 7m16.057629931s ago: executing program 1 (id=1518): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_misc(r2, &(0x7f0000001300)="f8", 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000680)={0x1, [[0xffffffff, 0xffffffff, 0xffffffff, 0x4000001, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xfffffffb, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x2a5a, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r4, 0xc0844123, &(0x7f00000000c0)=0xf73f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') setsockopt(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) dup2(r5, 0xffffffffffffffff) timer_settime(0x0, 0x1, 0x0, 0x0) 7m15.444228246s ago: executing program 1 (id=1521): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_misc(r2, &(0x7f0000001300)="f8", 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000680)={0x1, [[0xffffffff, 0xffffffff, 0xffffffff, 0x4000001, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xfffffffb, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x2a5a, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r4, 0xc0844123, &(0x7f00000000c0)=0xf73f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') setsockopt(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) dup2(r5, 0xffffffffffffffff) timer_settime(0x0, 0x1, 0x0, 0x0) 7m14.827493446s ago: executing program 34 (id=1521): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_misc(r2, &(0x7f0000001300)="f8", 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000680)={0x1, [[0xffffffff, 0xffffffff, 0xffffffff, 0x4000001, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xfffffffb, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x2a5a, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r4, 0xc0844123, &(0x7f00000000c0)=0xf73f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') setsockopt(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) dup2(r5, 0xffffffffffffffff) timer_settime(0x0, 0x1, 0x0, 0x0) 6m57.563043763s ago: executing program 6 (id=1555): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000180)=0x5, 0x4) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bond_slave_1\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4c, 0x9, 0x60, 0x4, 0x3, 0x6, 0xb, 0x81, 0x2, 0x2, [0x4, 0x6, 0x1f37c000, 0x0, 0x28000000, 0xfbf, 0x800, 0x2]}}) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000140)=0x1ff, 0x4) sendto$inet(r1, 0x0, 0x0, 0x20000000, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0xfffffffc, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x4, 0x31237648, 0x0, 0x9}]}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r8 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x3ef, 0x0) 6m56.996934713s ago: executing program 6 (id=1560): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x188800, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x19ee, &(0x7f0000000180)={0x0, 0xc1ad, 0x2, 0x0, 0x3d9, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r1, 0x20, &(0x7f0000000440)={0xe0, 0x4, 0x3cba, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)="bb411d321459", 0x6, 0x41, 0x1, 0xd6}, &(0x7f0000000400)={&(0x7f0000000340)="f278118078609d317a0feb5907112ba2245a480e2987a92b032999f507d4ce7d832b9a938f714cddf2f6f68f3e3be110b5eb87dff14c468f79344efab61cbdeecad3bb0add8e5d62322c34f5665e2f71524f157b6bf2204c5ec2e42aa22558756a73cc3602096c443a4da575b75f8483c74fb75e4057f3a1a036eaaebd063a1c822bfa04247725", 0x87, 0x0, 0x9, 0x7}, {0x3527, 0x2, 0xa7}, 0x80000000, 0x6}, 0x1) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff"], &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000040)="e2", 0x1}], 0x1) 6m55.3513311s ago: executing program 6 (id=1562): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000180)=0x5, 0x4) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bond_slave_1\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4c, 0x9, 0x60, 0x4, 0x3, 0x6, 0xb, 0x81, 0x2, 0x2, [0x4, 0x6, 0x1f37c000, 0x0, 0x28000000, 0xfbf, 0x800, 0x2]}}) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000140)=0x1ff, 0x4) sendto$inet(r1, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0xfffffffc, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x4, 0x31237648, 0x0, 0x9}]}) socket(0x2, 0x80805, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x3ef, 0x0) 6m53.796540284s ago: executing program 6 (id=1567): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0) pwritev(r0, &(0x7f0000001300)=[{&(0x7f0000000140)='<', 0x1}], 0x1, 0x8, 0x3) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x713a, 0x8802) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000440)="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", 0x559, 0xffffffffffffffff) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000040)=""/107) r3 = socket$netlink(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x1000000}, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d00058009000100"], 0xbc}}, 0x0) 6m53.226183953s ago: executing program 6 (id=1571): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x188800, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x19ee, &(0x7f0000000180)={0x0, 0xc1ad, 0x2, 0x0, 0x3d9, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r1, 0x20, &(0x7f0000000440)={0xe0, 0x4, 0x3cba, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)="bb411d321459", 0x6, 0x41, 0x1, 0xd6}, &(0x7f0000000400)={&(0x7f0000000340)="f278118078609d317a0feb5907112ba2245a480e2987a92b032999f507d4ce7d832b9a938f714cddf2f6f68f3e3be110b5eb87dff14c468f79344efab61cbdeecad3bb0add8e5d62322c34f5665e2f71524f157b6bf2204c5ec2e42aa22558756a73cc3602096c443a4da575b75f8483c74fb75e4057f3a1a036eaaebd063a1c822bfa04247725", 0x87, 0x0, 0x9, 0x7}, {0x3527, 0x2, 0xa7}, 0x80000000, 0x6}, 0x1) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff"], &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000040)="e2", 0x1}], 0x1) 6m52.497144702s ago: executing program 6 (id=1574): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000020c0)={&(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000001340)=[@rdma_args={0x48, 0x114, 0x1, {{0x7, 0x4}, {0x0, 0xf7}, &(0x7f0000001300)=[{&(0x7f0000001200)=""/247, 0xf7}], 0x1, 0xc, 0x400}}], 0x48, 0x4008090}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x1, 0x2) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="000000000000000008001e0002000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000801000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00003d4000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r2, &(0x7f0000000880)="723a732f70202e2f66696c65303a300c257e858054d731b2b72d0849e986da55ec26f9a5ef422a361934e770f5ae8b6feec32162daa559a68255c18c0741145fcaf8e4d471040cadda4d1332ed0d25", 0x4f) io_uring_setup(0xd, &(0x7f0000000040)={0x0, 0x24c8a1, 0x1c891, 0x1b, 0x162}) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 6m51.764929253s ago: executing program 35 (id=1574): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000020c0)={&(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000001340)=[@rdma_args={0x48, 0x114, 0x1, {{0x7, 0x4}, {0x0, 0xf7}, &(0x7f0000001300)=[{&(0x7f0000001200)=""/247, 0xf7}], 0x1, 0xc, 0x400}}], 0x48, 0x4008090}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x1, 0x2) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="000000000000000008001e0002000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000801000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00003d4000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r2, &(0x7f0000000880)="723a732f70202e2f66696c65303a300c257e858054d731b2b72d0849e986da55ec26f9a5ef422a361934e770f5ae8b6feec32162daa559a68255c18c0741145fcaf8e4d471040cadda4d1332ed0d25", 0x4f) io_uring_setup(0xd, &(0x7f0000000040)={0x0, 0x24c8a1, 0x1c891, 0x1b, 0x162}) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 6m39.166308262s ago: executing program 2 (id=1609): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x78, 0x2c, 0xf3f, 0x30bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0x8}, {0x0, 0xfff3}, {0xc, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x4c, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x5, 0x0, 0x1, 0x7, {0x19, 0x2, 0x8004, 0x3, 0x7}, {0x5, 0x1, 0xedf3, 0xfffa, 0xa9, 0xffffff40}, 0x91, 0x10001, 0x2}}]}, @TCA_FW_MASK={0x8, 0x5, 0x80}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x24041091}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r4, 0x8010aebb, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_TIMEOUT={0xc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x70}}, 0x0) 6m38.371122492s ago: executing program 2 (id=1611): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x0, 0x3, 0x3f8, 0x0, 0x32, 0x0, 0x19}, 0x9c) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x1, &(0x7f0000000280)=[{0x5, 0x2, 0x4, 0x3}]}) sendto$inet6(r0, &(0x7f0000000500)="710eea55413a8d3c30c61e0969da13212fd58859ca2c09ce9bba30bc77fd71bd11d572ac550afd00cb3373d8bbfc866e92cbe4d88e05ceda9d0bc692ba288d46f8cf1e92b0df2c48d8f4dcf9", 0x4c, 0x54, &(0x7f0000000640)={0xa, 0x4e22, 0x75ac, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb3}, 0x1c) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) close(r2) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002800090026bd7000ffd3df2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f00000005c0)={'broute\x00', 0x6000000, 0x1, 0x7e, [0x0, 0x400004, 0x9, 0x0, 0x377, 0x6], 0x0, 0x0, &(0x7f00000006c0)=""/126}, &(0x7f0000000580)=0x78) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x9, @loopback}, 0x1c) 6m37.922146144s ago: executing program 2 (id=1614): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000001d40)) 6m37.719966555s ago: executing program 2 (id=1616): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0) pwritev(r0, &(0x7f0000001300)=[{&(0x7f0000000140)='<', 0x1}], 0x1, 0x8, 0x3) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x713a, 0x8802) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000440)="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", 0x559, 0xffffffffffffffff) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000040)=""/107) socket$netlink(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d00058009000100"], 0xbc}}, 0x0) 6m37.608236389s ago: executing program 2 (id=1618): socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) syz_usb_connect(0x3, 0x541, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000b40)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x110, 0x9, 0x6, 0xe, 0x8}, 0x47, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40002) fcntl$dupfd(r0, 0x0, r0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getpid() r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xfffffffe, 0x2, 0x0, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4000, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x8000, 0x1, 0x172, 0x0, r3}}], 0x1, 0x0, 0x0) 6m36.409459091s ago: executing program 2 (id=1621): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x0, 0x3, 0x3f8, 0x0, 0x32, 0x0, 0x19}, 0x9c) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x1, &(0x7f0000000280)=[{0x5, 0x2, 0x4, 0x3}]}) sendto$inet6(r0, &(0x7f0000000500)="710eea55413a8d3c30c61e0969da13212fd58859ca2c09ce9bba30bc77fd71bd11d572ac550afd00cb3373d8bbfc866e92cbe4d88e05ceda9d0bc692ba288d46f8cf1e92b0df2c48d8f4dcf9", 0x4c, 0x54, &(0x7f0000000640)={0xa, 0x4e22, 0x75ac, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb3}, 0x1c) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) close(r2) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002800090026bd7000ffd3df2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000200"], 0x44) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f00000005c0)={'broute\x00', 0x6000000, 0x1, 0x7e, [0x0, 0x400004, 0x9, 0x0, 0x377, 0x6], 0x0, 0x0, &(0x7f00000006c0)=""/126}, &(0x7f0000000580)=0x78) 6m36.014509472s ago: executing program 36 (id=1621): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x0, 0x3, 0x3f8, 0x0, 0x32, 0x0, 0x19}, 0x9c) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x1, &(0x7f0000000280)=[{0x5, 0x2, 0x4, 0x3}]}) sendto$inet6(r0, &(0x7f0000000500)="710eea55413a8d3c30c61e0969da13212fd58859ca2c09ce9bba30bc77fd71bd11d572ac550afd00cb3373d8bbfc866e92cbe4d88e05ceda9d0bc692ba288d46f8cf1e92b0df2c48d8f4dcf9", 0x4c, 0x54, &(0x7f0000000640)={0xa, 0x4e22, 0x75ac, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb3}, 0x1c) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) close(r2) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002800090026bd7000ffd3df2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000200"], 0x44) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f00000005c0)={'broute\x00', 0x6000000, 0x1, 0x7e, [0x0, 0x400004, 0x9, 0x0, 0x377, 0x6], 0x0, 0x0, &(0x7f00000006c0)=""/126}, &(0x7f0000000580)=0x78) 4m24.978074622s ago: executing program 5 (id=1999): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000500)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000280)="7fe33397cd5ce34f5ae66e7d8524dc5c5805d2196b88fad26edf3888848e0773ec19af0e9a6c3f1199f6374cc8dc1125200f5d06ac0e77e1d1da", 0x3a}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='(\x00\x00', @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32=r2], 0x98, 0x400c0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) semctl$GETZCNT(0x0, 0x80cd90a0fd982630, 0xf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000044000f800800034000000006080002400000000108000340000000ce08000240000000030800034058696a8c0800024000000001080001"], 0xd8}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc7, &(0x7f0000000800)=""/199, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) 4m23.253662487s ago: executing program 5 (id=2003): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x0, 0x3, 0x3f8, 0x0, 0x32, 0x0, 0x19}, 0x9c) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x0, &(0x7f0000000280)}) sendto$inet6(r0, &(0x7f0000000500), 0x0, 0x54, &(0x7f0000000640)={0xa, 0x4e22, 0x75ac, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb3}, 0x1c) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) close(r2) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002800090026bd7000ffd3df2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000200"], 0x44) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f00000005c0)={'broute\x00', 0x6000000, 0x1, 0x7e, [0x0, 0x400004, 0x9, 0x0, 0x377, 0x6], 0x0, 0x0, &(0x7f00000006c0)=""/126}, &(0x7f0000000580)=0x78) 4m22.05646196s ago: executing program 5 (id=2007): openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usb_storage/parameters/delay_use\x00', 0x1, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 4m21.153664275s ago: executing program 5 (id=2009): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9a101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) umount2(0x0, 0xb) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000100000000000000080000b7080000000000007b8af8ff00000000b708000035f500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r2, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[], 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r5 = syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_GUEST_MEMFD(r9, 0xc040aed4, &(0x7f0000000080)={0x100000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r9, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x100000, &(0x7f0000100000/0x100000)=nil, 0x0, r10}) ioctl$KVM_SET_USER_MEMORY_REGION2(r9, 0x40a0ae49, &(0x7f0000000180)={0x1ff, 0x4, 0x80a0000, 0x2000, &(0x7f0000116000/0x2000)=nil, 0x0, r10}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) chmod(&(0x7f0000000140)='./cgroup\x00', 0x42) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r11}, @IFLA_HSR_SLAVE2={0x8, 0x2, r12}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 4m19.898279341s ago: executing program 5 (id=2013): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) splice(r0, 0x0, r2, 0x0, 0x20f39, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c400000000328000480"], 0xa4}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000740)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/exits\x00', 0x1, 0x0) write(r8, &(0x7f0000000180)='0', 0x1) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000a40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="60120080769f5a9689020daf80e32e12e6df4ecee67479d3c31496061505a8db57c28f668fff8081a1a18bb47eab3e1b0b1197add4eba5844f1d33541c41dc7cff182b3bcc5123e648de384a1cb6b8c295cd422199f81ead666a7f3e88c4370f1df1355172bfa99b88e895484cb53007916ee7f6130521f8fd8dea9a19e8422648f7200d84c07e25a69bacca9f2777151f0d00ea44eb3abc7fbcf2e16b1f0ad94ff1b2476e2e845576319e335a82511d679a394f411ad9ff4d20cea7bf08abb634f99cc22630a0cdd2a7dee136ec24c90000000000", @ANYRES16=r9, @ANYBLOB="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"], 0x260}, 0x1, 0x0, 0x0, 0x1}, 0xc044000) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="000000000000000014001a80100004800c0006"], 0x34}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'vlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001000010400000000000000007fff0000", @ANYBLOB="196f36be17537ba224b8e8103f43c2195bdb97f5f4d12a182c64a3fc3ef0f0189b1ae05ac2b25030ab2d0e5ddae3722226f976560d77d8c36551ab61b93bcef9ab49b83a5c89cbc87c6b1ff04c54e9c1fe42cf1b97569a7800f83a3754cc075650efa14947fea77c717538e75cad696f6fb868cda5278bd3a75c65a962ad6d51f8df28d6fb4287936e5a2c310cd2d1dd51787a5f90ab64868d2830776a619efb802cb7f495e4dfd3", @ANYBLOB="400d0000001200002000128008000100687372001400028008000200", @ANYRES32=r12, @ANYBLOB="080001008d621facc52322698bb383e6bc074101679d166d32513487b491e2846cb652e9e8d5deca743f0fc3c3a3e8a0c8ee14f7cdef2a1e7a113a9d927d88f80ee3173a42e963a785b9293f5cc35c9ba433abaaec1cc72c47e1e24af796eba285dd173e0d56b6d6655deb329f6871a782a4f797fa5eb9d4fae732a6a220ddcf7d4d5ad7b4139cf0eb48424fcd60e588edf3893618def7b0df82376186b43fe05996f221d2b46601361cf5ac73f3b24971feb50e08105731448f57c23120bdc3e772fed4014f4b825c2117852cef25e28845b537bb7a612b71886f7df50a2694dfa97b24ea7f29b7def34da80ecd500b4b1105", @ANYRES8=r11], 0x40}, 0x1, 0x0, 0x0, 0x40050}, 0x4008044) 4m18.749178339s ago: executing program 5 (id=2016): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') pread64(r3, &(0x7f0000000100)=""/83, 0x53, 0x801f5) 4m18.429483987s ago: executing program 37 (id=2016): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') pread64(r3, &(0x7f0000000100)=""/83, 0x53, 0x801f5) 2m40.13364405s ago: executing program 3 (id=2303): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xf, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x29, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f0000000340)) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{}, "d51e0bb27e04ad2d", "f785db3efb083fe05c525501f60eb59c", "41be8913", "f03bbccd87da8c07"}, 0x28) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000400)="adcd1a9a3fc36e961ed00fe41b0cd695d7ee44cc811cea47ca56f91b48484656fb5e00f443859aae14da46bec493be253e725ae71a0d4a91f8bd154d2b920e4d149645908faa3f4f9ee11ffb8a433c09e114d884e9689b6a43dea8947b3ee36a2e2a680752b8dc35c63de0c246718608ec6c83757523c8ae557419e51618b33aaec2f9a057f0bac24b78c16b22ccdadcfb28cfc63eb4a582923de36127872648f4f433178893374d24cbfdcaabeff9100ebb9bb2fe250e876acf9c89083cbe6ada9a90543656b442ba963c1f5c0b2fee0f51ca101e", 0xd5) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2m38.845102664s ago: executing program 3 (id=2306): sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x7214, &(0x7f0000000600)="f3"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xfffffffd) r8 = accept4(r3, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x5af7, &(0x7f0000000580)={0x0, 0xfbb3, 0xa5c86, 0x2, 0x1fd}, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000001000), 0x41, 0x40010103, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x2, 0xc, 0xa4, 0x0, 0x4, 0x0, 0x9, 0x8, 0x0, 0x24, 0x2, 0x20}, 0xe) 2m36.845123208s ago: executing program 3 (id=2315): syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) lsm_list_modules(0x0, 0xfffffffffffffffe, 0x11) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000280)={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=0x64010101, 0x7, 0xf}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) inotify_init1(0x800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r4, 0x0, 0x8e14, 0x8ffff) getpgid(r2) sendto$inet(r1, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0xaadeddfe26ced60c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x72, &(0x7f0000000600)=ANY=[@ANYBLOB="9bfd323569f20932dbc7f2b9cae7c5a4afcded8484a3eeecbd02d20d8cd15cf80ffce5fec1c064f26d8daeac950a00000000000000000048b41438675aa18764b59813627e06f14fd752b4fb2ced54abbade1922e1e159e5ac860a58ca3e4c5017ea14477371a87ff87ea547c95dd0d4914b02ca80657a8a2defe1a39b5f472a1f383576560ecc7c87f248f1071ee01ddecf2c7ff500000000", @ANYRES64=r0], &(0x7f0000000480)='GPL\x00', 0x4008, 0x9c, &(0x7f00000003c0)=""/156, 0x100, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1, 0x8) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000100)='batadv_slave_1\x00', 0x10) sendmsg$inet(r5, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000380)="0800fbfaffb9", 0x6}], 0x1, 0x0, 0x0, 0xe0000000}, 0x28004010) 2m36.101587684s ago: executing program 3 (id=2316): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xf, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x29, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f0000000340)) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{}, "d51e0bb27e04ad2d", "f785db3efb083fe05c525501f60eb59c", "41be8913", "f03bbccd87da8c07"}, 0x28) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303}, "89bf98452ed67689", "f898dabe4bdb04ba89ebba126cc7485a96871d6a11723036dde0f08e75dd44a4", "ecd1b805", "b8d5327989d44b4d"}, 0x38) close_range(r3, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2m34.316972531s ago: executing program 3 (id=2319): timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505feffffffffffffff", 0x1f) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001180), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x17, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0xb7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x5) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xb7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000200)=0x3) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, &(0x7f0000000280), 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) 2m31.57889146s ago: executing program 3 (id=2326): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 2m16.007237345s ago: executing program 38 (id=2326): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 13.807726052s ago: executing program 7 (id=2703): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f0000000340)={{0x7, 0x2}, 'port1\x00', 0x12c, 0x31044, 0x7f, 0xb, 0x4, 0xfffffeff, 0x100005, 0x0, 0x5, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x11) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340)}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r5 = syz_clone(0x23100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0xe) 13.566107321s ago: executing program 8 (id=2707): socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x3000005, 0x4000010, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000180)) write$cgroup_pid(r3, &(0x7f0000000300)=r2, 0x12) write$cgroup_freezer_state(r1, &(0x7f00000001c0)='FREEZING\x00', 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) add_key(&(0x7f0000000380)='ceph\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x50c6cd60, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) syz_usb_control_io(r4, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1bb0}, 0x1, 0x0, 0x0, 0x44004}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001a000103"], 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x128}, 0x0) 10.851152582s ago: executing program 4 (id=2713): openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 10.582215584s ago: executing program 0 (id=2717): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f00000000c0)=0x6) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 10.520168444s ago: executing program 8 (id=2718): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000005780)={0x0, 0x0, &(0x7f0000005740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x2b0}}, 0x4000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000015c0)=ANY=[@ANYBLOB="1c0000001a0001000000000400"/28], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x29, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x1000}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001600)=ANY=[@ANYBLOB="280c00001a000100000000000000000002dc4a"], 0xc28}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x88) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0x40000a, 0x3, 0x40000000, 0x10}) 10.186051743s ago: executing program 7 (id=2720): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010c001ddf8208c007121522300000000109021b0001000000010904010001faf48d00090582"], 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000001300)="92", 0x2) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, 0x0, &(0x7f0000000540)={0x0, 0x3e0e, 0x2, 0x1, 0x28e, 0x0, r1}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8c3, 0x1000, 0x2, 0x1af, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x330, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7670, 0x100, 0x0, 0x2db, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x400, 0x1fe}}], 0x4, &(0x7f0000000280)={0x2e, 0x0, 0x0, r7, 0xc0107525, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r6, '\x00', {0x3, 0xb55, 0x100104, 0x0}}, &(0x7f0000001fc0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x24048881}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) 9.618937838s ago: executing program 0 (id=2721): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) 9.291603767s ago: executing program 8 (id=2722): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') exit(0x80000000) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket(0x10, 0x803, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x383b, 0x2, 0x0) r3 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xdd008d5803396e68}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x7, 0x17}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_emit_ethernet(0x4f, &(0x7f0000000600)=ANY=[], 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060f000004000000100000050000000000000010", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xe, &(0x7f00000006c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x63}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.034753259s ago: executing program 0 (id=2723): syz_usb_connect(0x3, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x37, 0xd7, 0x81, 0x10, 0x9022, 0xd632, 0xd781, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xce, 0x9, 0x10, 0x2, "", [{{0x9, 0x4, 0x42, 0x7, 0x0, 0xd6, 0x5f, 0x3, 0xff}}]}}]}}, 0x0) syz_usb_connect$lan78xx(0x2, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x72, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) r3 = syz_io_uring_setup(0xffd, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x80000080, 0x1}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000500)}], 0x7}}], 0x1, 0x4008c50) io_uring_enter(r3, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000380)=0xd, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r9, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) connect$can_j1939(r2, &(0x7f0000000440)={0x1d, r10, 0x0, {0x2, 0x0, 0x4}}, 0x18) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r11, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000300)='udf\x00', 0x200480, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x1c, 0x0, 0x0, 0x0}) 8.210131092s ago: executing program 4 (id=2724): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_create_resource$binfmt(&(0x7f0000000240)='./file2\x00') r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x0) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r3, 0x40104d01, &(0x7f0000000a00)) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r4, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x5008, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) 8.148550242s ago: executing program 8 (id=2725): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000500)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000280)="7fe33397cd5ce34f5ae66e7d8524dc5c5805d2196b88fad26edf3888848e0773ec19af0e9a6c3f1199f6374cc8dc1125200f5d06ac0e77e1d1da", 0x3a}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='(\x00\x00', @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32=r2], 0x98, 0x400c0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) semctl$GETZCNT(0x0, 0x80cd90a0fd982630, 0xf, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000044000f800800034000000006080002400000000108000340000000ce08000240000000030800034058696a8c0800024000000001080001"], 0xd8}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc7, &(0x7f0000000800)=""/199, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) 7.97239652s ago: executing program 9 (id=2726): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000000009040000010300000009210000000122f80409058103"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usb_storage/parameters/delay_use\x00', 0x1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) 7.182518658s ago: executing program 8 (id=2727): syz_usb_connect(0x3, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x37, 0xd7, 0x81, 0x10, 0x9022, 0xd632, 0xd781, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xce, 0x9, 0x10, 0x2, "", [{{0x9, 0x4, 0x42, 0x7, 0x0, 0xd6, 0x5f, 0x3, 0xff}}]}}]}}, 0x0) syz_usb_connect$lan78xx(0x2, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x72, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) r3 = syz_io_uring_setup(0xffd, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x80000080, 0x1}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000500)}], 0x7}}], 0x1, 0x4008c50) io_uring_enter(r3, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000380)=0xd, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) connect$can_j1939(r2, &(0x7f0000000440)={0x1d, r8, 0x0, {0x2, 0x0, 0x4}}, 0x18) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r9, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000300)='udf\x00', 0x200480, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x1c, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x3) 7.141058577s ago: executing program 7 (id=2728): r0 = socket(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x882, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e00", 0x22) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000003380)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) recvmmsg(r0, &(0x7f0000006bc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)=""/117, 0x75}, {&(0x7f0000000240)=""/118, 0x76}], 0x2, 0x0, 0xfffffe7d}}], 0x1, 0x20b0, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e21, 0x2, @private0, 0x3}}, 0x7, 0x15}, 0x90) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="93", 0x1}], 0x1}}], 0x1, 0x4044810) 6.631414458s ago: executing program 0 (id=2729): io_uring_setup(0x6aa4, &(0x7f0000000040)={0x0, 0x2151, 0x8000, 0x2, 0xfc}) r0 = syz_clone3(0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x2, 0x70bd2c, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0xa, 0x51a23}}, 0x20}, 0x1, 0x0, 0x0, 0x20000085}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0xf, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0000000}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x26}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="2015a2000000941339e399fb0d5322214275e2487f41868d71455aa0e63fe29305a5eb72b5e914051a41db7b9a1382cfab0100000011ad7b64a18f147e68dea2fbe048e73c578396e08f304687ce29f74da4509a83fc8f0cdca73eb9810591ba4f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af55301dc3bab5e1f29b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec5c914ce06caedd105670f1b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$uac2(r4, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) r8 = syz_open_dev$usbfs(0x0, 0x800000001fe, 0x2) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000040)={0x20, 0x3, 0x12, 0xec, 0x0, 0x53, 0x0}) syz_pidfd_open(r0, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="16f16cf5b3b419614fe3383514802db74a71c1117bd9085c6551aa7ceb520f117e0699eb6e3f39d193ada3813acc6f55e9af799149c17b50932dd78caf237360ad165ea3fc9056beaaa03e6dcf0c9fc95c", @ANYRES16=r7, @ANYBLOB="01002bbd7000ffdbdf25030000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) preadv2(r1, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/107, 0x6b}, {&(0x7f0000000380)=""/82, 0x52}, {&(0x7f0000000400)=""/130, 0x82}], 0x3, 0x9, 0x6, 0x16) setns(0xc9, 0x0) r9 = socket(0x2a, 0x2, 0x9) move_pages(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) bind$inet(r9, &(0x7f0000000180)={0x2a, 0x4e26, @empty=0x1000000}, 0x10) 6.443826878s ago: executing program 4 (id=2730): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) r0 = fanotify_init(0x10, 0x40000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./mnt_trace\x00', 0x101002, 0x0) fanotify_mark(r0, 0x40, 0x40002000, r1, &(0x7f0000000040)='./mnt_trace\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) readv(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/53, 0x35}], 0x1) 5.361724341s ago: executing program 7 (id=2731): r0 = syz_usb_connect$hid(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000040d80402c000000000000109022200010100803209040000010300000009211101000122350007058103", @ANYBLOB="ef6dbe670da0b233d47da1e4db76ca372ba4a2770b69f3"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x0, 0x3, 0x10000, 0x4, 0x1}, 0x30, 0x3) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, &(0x7f0000000040)={0x0, 0x5}, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x388, 0x41d9fda7) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) write(0xffffffffffffffff, &(0x7f0000000140)="1d9453a01360a9f556d4027174da95a4c2ba9fb45662890bcd05a9b88b3e3e361b6305953eba110c8254722b7f27e37cdf4a34572d60f8791c3bb8ed927c67bc8b09982d24186f4387bbdff04961ea30dd7e48cecbf74c001c3bcf5fa714509936c22f95447395f39869abadd215ddf1abe0bcf64e6880a22aa92776de05f84023270f5a12331d8658889aaa36a9c3782617a8", 0x93) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, 0x0) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) ioctl$COMEDI_INSNLIST(r10, 0x8010640b, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x8000001, 0x0, 0x0, 0x0, 0x5}]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r1], 0x0}, 0x0) 5.351678299s ago: executing program 9 (id=2732): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000040)={0x6, 0xabe2, @value=0x3aa}) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000001c0)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl(r0, 0x3b92, &(0x7f0000000000)) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$nl_generic(0x11, 0x3, 0x10) close(r4) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 5.01224065s ago: executing program 4 (id=2733): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) r2 = syz_usb_connect(0x7, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000280)={0x14, &(0x7f0000000100)={0x20, 0x23, 0x102, {0x102, 0x9, "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"}}, 0x0}, 0x0) syz_usb_connect$uac1(0x0, 0xad, 0x0, 0x0) r3 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect$printer(0x4, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io$printer(r4, &(0x7f0000001100)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0xfffffffffffffdcb, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x40, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_disconnect(r0) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000040050bbe1a00000000000109022400010000e80b0904000001030002000921fd7f000122e30109058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x400) syz_usb_connect(0x5, 0x51, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$HIDIOCGUSAGE(r6, 0xc0105b08, &(0x7f0000000040)={0x1, 0x2, 0x3cf3, 0x202000, 0x110001, 0x9}) 4.434965421s ago: executing program 8 (id=2734): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000b40)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24044814) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') fsopen(0x0, 0x0) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) fallocate(r1, 0x0, 0x0, 0x1001ed) 4.300434144s ago: executing program 9 (id=2735): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x0, 0x3, 0x3f8, 0x0, 0x32, 0x0, 0x19}, 0x9c) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x1, &(0x7f0000000280)=[{0x5, 0x2, 0x4, 0x3}]}) sendto$inet6(r0, &(0x7f0000000500)="710eea55413a8d3c30c61e0969da13212fd58859ca2c09ce9bba30bc77fd71bd11d572ac550afd00cb3373d8bbfc866e92cbe4d88e05ceda9d0bc692ba288d46f8cf1e92b0df2c48d8f4dcf9", 0x4c, 0x54, &(0x7f0000000640)={0xa, 0x4e22, 0x75ac, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb3}, 0x1c) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) close(r2) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002800090026bd7000ffd3df2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f00000005c0)={'broute\x00', 0x6000000, 0x1, 0x7e, [0x0, 0x400004, 0x9, 0x0, 0x377, 0x6], 0x0, 0x0, &(0x7f00000006c0)=""/126}, &(0x7f0000000580)=0x78) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x9, @loopback}, 0x1c) 3.039204183s ago: executing program 9 (id=2736): r0 = openat$ublk_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, 0x0, &(0x7f00000004c0)=0x0) r4 = syz_ublk_add_dev(r1, r2, 0x0, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)=0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010c001ddf8208c007121522300000000109021b0001000000010904010001faf48d00090582"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r7, &(0x7f0000001300)="92", 0x2) r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r4, 0x2) syz_ublk_setup_queues(r8, r6, &(0x7f0000000540)={0x0, 0x3e0e, 0x2, 0x1, 0x28e, 0x0, r1}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8c3, 0x1000, 0x2, 0x1af, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x330, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7670, 0x100, 0x0, 0x2db, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x400, 0x1fe}}], 0x4, &(0x7f0000000280)={0x2e, 0x0, 0x0, r8, 0xc0107525, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r5, '\x00', {0x3, 0xb55, 0x100104, 0x0}}, &(0x7f0000001fc0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x24048881}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r9, &(0x7f0000000000)='3', 0x4e) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) r11 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r11, 0x80104592, &(0x7f0000000200)={0x0, 0x16, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"}) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r10, 0x3ba0, &(0x7f0000000000)={0x48, 0x1, r12, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_IOAS_MAP$PAGES(r10, 0x3b85, &(0x7f00000079c0)={0x28, 0x6, r12, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x40}) 2.226084934s ago: executing program 7 (id=2737): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000040)={0x6, 0xabe2, @value=0x3aa}) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000001c0)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl(r0, 0x3b92, &(0x7f0000000000)) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = creat(0x0, 0xecf86c37d53049cc) socket$nl_generic(0x11, 0x3, 0x10) close(r4) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 2.008264966s ago: executing program 0 (id=2738): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x2) (fail_nth: 5) 1.587704817s ago: executing program 9 (id=2739): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4014800) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x5}, {0x4, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x4}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 1.534474763s ago: executing program 0 (id=2740): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x0, 0x3, 0x3f8, 0x0, 0x32, 0x0, 0x19}, 0x9c) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x1, &(0x7f0000000280)=[{0x5, 0x2, 0x4, 0x3}]}) sendto$inet6(r0, &(0x7f0000000500)="710eea55413a8d3c30c61e0969da13212fd58859ca2c09ce9bba30bc77fd71bd11d572ac550afd00cb3373d8bbfc866e92cbe4d88e05ceda9d0bc692ba288d46f8cf1e92b0df2c48d8f4dcf9", 0x4c, 0x54, &(0x7f0000000640)={0xa, 0x4e22, 0x75ac, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb3}, 0x1c) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) close(r2) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x480f0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f00000005c0)={'broute\x00', 0x6000000, 0x1, 0x7e, [0x0, 0x400004, 0x9, 0x0, 0x377, 0x6], 0x0, 0x0, &(0x7f00000006c0)=""/126}, &(0x7f0000000580)=0x78) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x9, @loopback}, 0x1c) 1.526977653s ago: executing program 4 (id=2741): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write(r0, &(0x7f0000000100)='measure func=FILE_CHECK', 0x17) close(r0) (fail_nth: 5) 275.804237ms ago: executing program 7 (id=2742): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setns(0xc9, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/hci\x00') preadv(r0, &(0x7f00000013c0), 0x0, 0x3b, 0x2) 261.836034ms ago: executing program 9 (id=2743): syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="0380c200000ebbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa0304907812000000008400007f0000017f00000100186371ae871c030000000000000000e83e7990f38c641dfa55e7a25259ddc67d868354ef759da046cdf9c2068e666b2994be851edddac874e2e2314bb73beb38ae8ac78955e98e1f"], 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) io_setup(0x3fd, &(0x7f0000000500)) 0s ago: executing program 4 (id=2744): syz_usb_connect(0x3, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x37, 0xd7, 0x81, 0x10, 0x9022, 0xd632, 0xd781, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xce, 0x9, 0x10, 0x2, "", [{{0x9, 0x4, 0x42, 0x7, 0x0, 0xd6, 0x5f, 0x3, 0xff}}]}}]}}, 0x0) syz_usb_connect$lan78xx(0x2, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x72, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) r3 = syz_io_uring_setup(0xffd, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x80000080, 0x1}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000500)}], 0x7}}], 0x1, 0x4008c50) io_uring_enter(r3, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000380)=0xd, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) connect$can_j1939(r2, &(0x7f0000000440)={0x1d, r8, 0x0, {0x2, 0x0, 0x4}}, 0x18) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r9, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000300)='udf\x00', 0x200480, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x1c, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x3) kernel console output (not intermixed with test programs): d: -22 (6/0) [ 927.219410][T12533] dw2102: i2c transfer failed. [ 927.219420][T12533] dvb-usb: bulk message failed: -22 (6/0) [ 927.219430][T12533] dw2102: i2c transfer failed. [ 927.219440][T12533] dvb-usb: bulk message failed: -22 (6/0) [ 927.219451][T12533] dw2102: i2c transfer failed. [ 927.219460][T12533] dvb-usb: bulk message failed: -22 (6/0) [ 927.219469][T12533] dw2102: i2c transfer failed. [ 927.219477][T12533] dvb-usb: bulk message failed: -22 (6/0) [ 927.219487][T12533] dw2102: i2c transfer failed. [ 927.219493][T12533] dvb-usb: MAC address: 02:02:02:02:02:02 [ 927.272274][T12533] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 927.317865][T12534] rc_core: IR keymap rc-su3000 not found [ 927.317883][T12534] Registered IR keymap rc-empty [ 927.320018][T12534] rc rc0: TeVii S632 USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 927.326333][T12533] dvb-usb: bulk message failed: -22 (1/0) [ 927.326349][T12533] dw2102: command 0x51 transfer failed. [ 927.328505][T12534] input: TeVii S632 USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input166 [ 927.335880][T12534] dvb-usb: schedule remote query interval to 150 msecs. [ 927.335901][T12534] dw2102: su3000_power_ctrl: 0, initialized 1 [ 927.335912][T12534] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 927.347910][T12534] usb 1-1: USB disconnect, device number 68 [ 927.617245][T12533] DVB: Unable to find symbol m88rs2000_attach() [ 927.617340][T12533] dvb-usb: no frontend was attached by 'TeVii S632 USB' [ 927.617934][T12535] usb 5-1: string descriptor 0 read error: -71 [ 927.641013][T12535] usb 5-1: Max retries (5) exceeded reading string descriptor 200 [ 927.641078][T12535] letsketch 0003:6161:4D15.0011: probe with driver letsketch failed with error -32 [ 927.648736][T12534] dvb-usb: TeVii S632 USB successfully deinitialized and disconnected. [ 927.650629][T12535] usb 5-1: USB disconnect, device number 97 [ 927.778423][ T10] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 928.035420][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 928.044797][ T10] usb 9-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 928.057384][T12533] rc_core: IR keymap rc-su3000 not found [ 928.057402][T12533] Registered IR keymap rc-empty [ 928.058288][T12533] rc rc0: TeVii S632 USB as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0 [ 928.060028][T12533] input: TeVii S632 USB as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0/input167 [ 928.063935][T12533] dvb-usb: schedule remote query interval to 150 msecs. [ 928.063953][T12533] dw2102: su3000_power_ctrl: 0, initialized 1 [ 928.063965][T12533] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 928.067540][T12533] usb 10-1: USB disconnect, device number 51 [ 928.136657][ T10] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 928.184085][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.184124][ T10] usb 9-1: Product: syz [ 928.184161][ T10] usb 9-1: Manufacturer: syz [ 928.184177][ T10] usb 9-1: SerialNumber: syz [ 928.290581][T12533] dvb-usb: TeVii S632 USB successfully deinitialized and disconnected. [ 928.583626][T12534] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 928.764275][T12534] usb 5-1: Using ep0 maxpacket: 8 [ 928.775843][T12534] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 928.805857][T12534] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 928.815585][T12534] usb 5-1: config 0 has no interface number 0 [ 928.823306][T12534] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 928.835692][T12534] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.899675][T12534] usb 5-1: config 0 descriptor?? [ 928.994480][T12534] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 929.008312][ T10] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 929.142615][ T10] usb 9-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 929.171845][T12533] usb 5-1: USB disconnect, device number 98 [ 929.217173][T16517] FAULT_INJECTION: forcing a failure. [ 929.217173][T16517] name failslab, interval 1, probability 0, space 0, times 0 [ 929.261138][T16517] CPU: 1 UID: 0 PID: 16517 Comm: syz.7.2576 Tainted: G L syzkaller #0 PREEMPT(full) [ 929.261168][T16517] Tainted: [L]=SOFTLOCKUP [ 929.261177][T16517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 929.261188][T16517] Call Trace: [ 929.261194][T16517] [ 929.261201][T16517] dump_stack_lvl+0x100/0x190 [ 929.261228][T16517] should_fail_ex.cold+0x5/0xa [ 929.261244][T16517] should_failslab+0xc2/0x120 [ 929.261258][T16517] __kmalloc_noprof+0xfc/0x840 [ 929.261270][T16517] ? tomoyo_get_condition+0x103d/0x1d20 [ 929.261287][T16517] tomoyo_get_condition+0x103d/0x1d20 [ 929.261308][T16517] ? __pfx_tomoyo_get_condition+0x10/0x10 [ 929.261322][T16517] ? __pfx_tomoyo_get_group+0x10/0x10 [ 929.261342][T16517] tomoyo_update_domain+0x466/0x850 [ 929.261358][T16517] ? __pfx_tomoyo_same_path_acl+0x10/0x10 [ 929.261372][T16517] ? __pfx_tomoyo_merge_path_acl+0x10/0x10 [ 929.261389][T16517] tomoyo_write_file+0x4fa/0x8e0 [ 929.261406][T16517] ? __pfx_tomoyo_write_file+0x10/0x10 [ 929.261424][T16517] ? vsscanf+0x1ce/0x2890 [ 929.261443][T16517] ? __pfx_vsscanf+0x10/0x10 [ 929.261458][T16517] ? kasan_save_stack+0x3f/0x50 [ 929.261469][T16517] ? kasan_save_track+0x14/0x30 [ 929.261480][T16517] ? kasan_save_free_info+0x3b/0x70 [ 929.261495][T16517] ? __kasan_slab_free+0x5f/0x80 [ 929.261507][T16517] ? kfree+0x22b/0x6d0 [ 929.261520][T16517] ? tomoyo_write_control+0x888/0x13a0 [ 929.261533][T16517] ? vfs_write+0x2aa/0x1050 [ 929.261549][T16517] ? ksys_write+0x12a/0x250 [ 929.261558][T16517] ? do_syscall_64+0x123/0x790 [ 929.261569][T16517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.261586][T16517] tomoyo_write_domain2+0x13a/0x200 [ 929.261598][T16517] ? __pfx_tomoyo_write_domain2+0x10/0x10 [ 929.261615][T16517] tomoyo_write_domain+0x475/0x950 [ 929.261636][T16517] ? __pfx_tomoyo_write_domain+0x10/0x10 [ 929.261658][T16517] ? kasan_quarantine_put+0x104/0x240 [ 929.261674][T16517] ? lockdep_hardirqs_on+0x7d/0x110 [ 929.261691][T16517] ? tomoyo_write_control+0x790/0x13a0 [ 929.261707][T16517] tomoyo_parse_policy+0x127/0x340 [ 929.261720][T16517] tomoyo_write_control+0x899/0x13a0 [ 929.261740][T16517] ? lock_acquire+0x1d1/0x380 [ 929.261751][T16517] ? ksys_write+0x12a/0x250 [ 929.261761][T16517] ? __pfx_tomoyo_write_control+0x10/0x10 [ 929.261779][T16517] vfs_write+0x2aa/0x1050 [ 929.261797][T16517] ? __pfx_tomoyo_write+0x10/0x10 [ 929.261808][T16517] ? lock_acquire+0x1d1/0x380 [ 929.261818][T16517] ? __fget_files+0x34/0x3d0 [ 929.261831][T16517] ? __pfx_vfs_write+0x10/0x10 [ 929.261847][T16517] ? find_held_lock+0x2b/0x80 [ 929.261863][T16517] ? __fget_files+0x215/0x3d0 [ 929.261878][T16517] ? __fget_files+0x21f/0x3d0 [ 929.261894][T16517] ksys_write+0x12a/0x250 [ 929.261905][T16517] ? __pfx_ksys_write+0x10/0x10 [ 929.261919][T16517] do_syscall_64+0x123/0x790 [ 929.261933][T16517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.261945][T16517] RIP: 0033:0x7f8726f9e159 [ 929.261955][T16517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 929.261965][T16517] RSP: 002b:00007f8727f32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 929.261977][T16517] RAX: ffffffffffffffda RBX: 00007f8727225fa0 RCX: 00007f8726f9e159 [ 929.261986][T16517] RDX: 000000000000004c RSI: 0000200000000100 RDI: 0000000000000003 [ 929.261997][T16517] RBP: 00007f8727f32090 R08: 0000000000000000 R09: 0000000000000000 [ 929.262007][T16517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 929.262018][T16517] R13: 00007f8727226038 R14: 00007f8727225fa0 R15: 00007ffc07d367b8 [ 929.262041][T16517] [ 929.433746][T16522] FAULT_INJECTION: forcing a failure. [ 929.433746][T16522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 929.433777][T16522] CPU: 1 UID: 0 PID: 16522 Comm: syz.9.2579 Tainted: G L syzkaller #0 PREEMPT(full) [ 929.433802][T16522] Tainted: [L]=SOFTLOCKUP [ 929.433809][T16522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 929.433821][T16522] Call Trace: [ 929.433827][T16522] [ 929.433834][T16522] dump_stack_lvl+0x100/0x190 [ 929.433865][T16522] should_fail_ex.cold+0x5/0xa [ 929.433891][T16522] _copy_to_iter+0x5a4/0x1720 [ 929.433922][T16522] ? __pfx__copy_to_iter+0x10/0x10 [ 929.433947][T16522] ? m_stop+0x28b/0x530 [ 929.433967][T16522] ? m_stop+0x28b/0x530 [ 929.433993][T16522] ? m_stop+0x333/0x530 [ 929.434017][T16522] seq_read_iter+0xdab/0x1270 [ 929.434049][T16522] seq_read+0x344/0x4d0 [ 929.434070][T16522] ? __pfx_seq_read+0x10/0x10 [ 929.434095][T16522] ? avc_policy_seqno+0x9/0x20 [ 929.434116][T16522] ? selinux_file_permission+0x8f/0x6d0 [ 929.434153][T16522] ? rw_verify_area+0xce/0x6d0 [ 929.434180][T16522] ? __pfx_seq_read+0x10/0x10 [ 929.434201][T16522] vfs_read+0x1e4/0xb40 [ 929.434235][T16522] ? lock_acquire+0x1d1/0x380 [ 929.434254][T16522] ? __fget_files+0x34/0x3d0 [ 929.434275][T16522] ? __pfx_vfs_read+0x10/0x10 [ 929.434301][T16522] ? find_held_lock+0x2b/0x80 [ 929.434326][T16522] ? __fget_files+0x215/0x3d0 [ 929.434346][T16522] ? __fget_files+0x215/0x3d0 [ 929.434374][T16522] ? __fget_files+0x21f/0x3d0 [ 929.434403][T16522] __x64_sys_pread64+0x1eb/0x250 [ 929.434422][T16522] ? __pfx___x64_sys_pread64+0x10/0x10 [ 929.434449][T16522] do_syscall_64+0x123/0x790 [ 929.434474][T16522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.434493][T16522] RIP: 0033:0x7f2d6dd9e159 [ 929.434509][T16522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 929.434527][T16522] RSP: 002b:00007f2d6ec57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 929.434545][T16522] RAX: ffffffffffffffda RBX: 00007f2d6e026090 RCX: 00007f2d6dd9e159 [ 929.434558][T16522] RDX: 0000000000018fd4 RSI: 0000200000000080 RDI: 0000000000000005 [ 929.434570][T16522] RBP: 00007f2d6ec57090 R08: 0000000000000000 R09: 0000000000000000 [ 929.434581][T16522] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000001 [ 929.434593][T16522] R13: 00007f2d6e026128 R14: 00007f2d6e026090 R15: 00007ffcdca13d28 [ 929.434619][T16522] [ 930.283097][T12534] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 930.305757][ T10] usb 9-1: USB disconnect, device number 56 [ 930.467041][T12534] usb 1-1: Using ep0 maxpacket: 32 [ 930.479183][T12534] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 930.490168][T12534] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 930.490216][T12534] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 930.490244][T12534] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.576617][T16533] FAULT_INJECTION: forcing a failure. [ 930.576617][T16533] name failslab, interval 1, probability 0, space 0, times 0 [ 930.576663][T16533] CPU: 0 UID: 0 PID: 16533 Comm: syz.7.2581 Tainted: G L syzkaller #0 PREEMPT(full) [ 930.576690][T16533] Tainted: [L]=SOFTLOCKUP [ 930.576697][T16533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 930.576709][T16533] Call Trace: [ 930.576715][T16533] [ 930.576723][T16533] dump_stack_lvl+0x100/0x190 [ 930.576752][T16533] should_fail_ex.cold+0x5/0xa [ 930.576778][T16533] should_failslab+0xc2/0x120 [ 930.576801][T16533] __kmalloc_noprof+0xfc/0x840 [ 930.576826][T16533] ? tomoyo_encode2+0xfb/0x3c0 [ 930.576850][T16533] tomoyo_encode2+0xfb/0x3c0 [ 930.576873][T16533] tomoyo_encode+0x29/0x50 [ 930.576890][T16533] tomoyo_realpath_from_path+0x18c/0x690 [ 930.576916][T16533] tomoyo_path_number_perm+0x23c/0x580 [ 930.576942][T16533] ? tomoyo_path_number_perm+0x22e/0x580 [ 930.576970][T16533] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 930.576995][T16533] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 930.577027][T16533] ? __lock_acquire+0x4c5/0x1ec0 [ 930.577058][T16533] ? __fget_files+0x34/0x3d0 [ 930.577080][T16533] ? find_held_lock+0x2b/0x80 [ 930.577104][T16533] ? hook_file_ioctl_common+0x140/0x440 [ 930.577131][T16533] ? __fget_files+0x21f/0x3d0 [ 930.577157][T16533] security_file_ioctl+0xd3/0x230 [ 930.577187][T16533] __x64_sys_ioctl+0xb7/0x210 [ 930.577217][T16533] do_syscall_64+0x123/0x790 [ 930.577242][T16533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.577262][T16533] RIP: 0033:0x7f8726f9e159 [ 930.577278][T16533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 930.577296][T16533] RSP: 002b:00007f8727ef0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 930.577315][T16533] RAX: ffffffffffffffda RBX: 00007f8727226180 RCX: 00007f8726f9e159 [ 930.577327][T16533] RDX: 00002000000001c0 RSI: 0000000000004b72 RDI: 000000000000000b [ 930.577338][T16533] RBP: 00007f8727ef0090 R08: 0000000000000000 R09: 0000000000000000 [ 930.577349][T16533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.577360][T16533] R13: 00007f8727226218 R14: 00007f8727226180 R15: 00007ffc07d367b8 [ 930.577386][T16533] [ 930.577441][T16533] ERROR: Out of memory at tomoyo_realpath_from_path. [ 930.772549][T12534] usb 1-1: config 0 descriptor?? [ 930.775044][T12534] hub 1-1:0.0: bad descriptor, ignoring hub [ 930.775065][T12534] hub 1-1:0.0: probe with driver hub failed with error -5 [ 930.776287][T12534] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 931.397098][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 932.023532][T12533] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 932.194815][T12533] usb 8-1: Using ep0 maxpacket: 16 [ 932.201556][T12533] usb 8-1: New USB device found, idVendor=9022, idProduct=d632, bcdDevice=d7.81 [ 932.215342][T12533] usb 8-1: config 206 has an invalid interface number: 66 but max is 0 [ 932.215381][T12533] usb 8-1: config 206 has no interface number 0 [ 932.215419][T12533] usb 8-1: config 206 interface 66 has no altsetting 0 [ 932.244401][T12533] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.244439][T12533] usb 8-1: Product: syz [ 932.244464][T12533] usb 8-1: Manufacturer: syz [ 932.244480][T12533] usb 8-1: SerialNumber: syz [ 932.334535][ T25] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 932.513422][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 932.524019][ T25] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 932.524298][T12520] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 932.542351][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 932.542383][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 932.542415][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.574566][ T25] usb 5-1: config 0 descriptor?? [ 932.602292][T16558] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 932.606374][T16558] UDF-fs: Scanning with blocksize 512 failed [ 932.611473][T16558] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 932.611492][T16558] UDF-fs: Scanning with blocksize 1024 failed [ 932.611700][T16558] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 932.611712][T16558] UDF-fs: Scanning with blocksize 2048 failed [ 932.611861][T16558] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 932.611873][T16558] UDF-fs: Scanning with blocksize 4096 failed [ 932.641269][T12533] dvb-usb: found a 'TeVii S632 USB' in warm state. [ 932.641300][T12533] dw2102: su3000_power_ctrl: 1, initialized 0 [ 932.641314][T12533] dvb-usb: bulk message failed: -22 (2/0) [ 932.646607][T12533] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 932.647233][T12533] dvbdev: DVB: registering new adapter (TeVii S632 USB) [ 932.647265][T12533] usb 8-1: media controller created [ 932.647283][T12533] dvb-usb: bulk message failed: -22 (6/0) [ 932.647295][T12533] dw2102: i2c transfer failed. [ 932.647305][T12533] dvb-usb: bulk message failed: -22 (6/0) [ 932.647333][T12533] dw2102: i2c transfer failed. [ 932.647343][T12533] dvb-usb: bulk message failed: -22 (6/0) [ 932.647353][T12533] dw2102: i2c transfer failed. [ 932.647362][T12533] dvb-usb: bulk message failed: -22 (6/0) [ 932.647372][T12533] dw2102: i2c transfer failed. [ 932.647382][T12533] dvb-usb: bulk message failed: -22 (6/0) [ 932.647392][T12533] dw2102: i2c transfer failed. [ 932.647401][T12533] dvb-usb: bulk message failed: -22 (6/0) [ 932.647411][T12533] dw2102: i2c transfer failed. [ 932.647418][T12533] dvb-usb: MAC address: 02:02:02:02:02:02 [ 932.657449][T12533] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 932.667524][T12533] dvb-usb: bulk message failed: -22 (1/0) [ 932.667541][T12533] dw2102: command 0x51 transfer failed. [ 932.680714][T12520] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 932.709211][T12533] DVB: Unable to find symbol m88rs2000_attach() [ 932.709225][T12533] dvb-usb: no frontend was attached by 'TeVii S632 USB' [ 932.712061][T12520] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.765007][T12520] usb 10-1: config 0 descriptor?? [ 932.775005][T12533] rc_core: IR keymap rc-su3000 not found [ 932.775021][T12533] Registered IR keymap rc-empty [ 932.779640][T12533] rc rc0: TeVii S632 USB as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 932.781715][T12533] input: TeVii S632 USB as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input168 [ 932.785989][T12533] dvb-usb: schedule remote query interval to 150 msecs. [ 932.786022][T12533] dw2102: su3000_power_ctrl: 0, initialized 1 [ 932.786033][T12533] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 932.792788][T12533] usb 8-1: USB disconnect, device number 52 [ 932.835988][T12533] dvb-usb: TeVii S632 USB successfully deinitialized and disconnected. [ 932.842084][ T5613] udevd[5613]: setting mode of /dev/bus/usb/008/052 to 020664 failed: No such file or directory [ 932.842182][ T5613] udevd[5613]: setting owner of /dev/bus/usb/008/052 to uid=0, gid=0 failed: No such file or directory [ 932.968062][T12520] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 932.993938][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 933.000014][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 933.001865][ T25] usb 5-1: USB disconnect, device number 99 [ 933.171840][T12520] [drm:udl_init] *ERROR* Selecting channel failed [ 933.200689][T12520] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 1 [ 933.209831][T12520] [drm] Initialized udl on minor 1 [ 933.217043][T12520] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 933.226372][T12520] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 933.242428][ T10] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 933.254313][ T10] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 933.254527][ T10] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 933.274515][T12520] usb 10-1: USB disconnect, device number 52 [ 933.875005][T12520] usb 1-1: USB disconnect, device number 69 [ 934.392228][T16569] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2590'. [ 934.537738][T16572] FAULT_INJECTION: forcing a failure. [ 934.537738][T16572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 934.554223][T16572] CPU: 0 UID: 0 PID: 16572 Comm: syz.7.2589 Tainted: G L syzkaller #0 PREEMPT(full) [ 934.554255][T16572] Tainted: [L]=SOFTLOCKUP [ 934.554263][T16572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 934.554273][T16572] Call Trace: [ 934.554280][T16572] [ 934.554288][T16572] dump_stack_lvl+0x100/0x190 [ 934.554320][T16572] should_fail_ex.cold+0x5/0xa [ 934.554346][T16572] _copy_from_user+0x2e/0xd0 [ 934.554374][T16572] copy_msghdr_from_user+0x9f/0x4c0 [ 934.554399][T16572] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 934.554426][T16572] ? rcu_is_watching+0x13/0xc0 [ 934.554449][T16572] ? ___sys_sendmsg+0x19d/0x1e0 [ 934.554469][T16572] ? kfree+0x1e5/0x6d0 [ 934.554498][T16572] ___sys_sendmsg+0x106/0x1e0 [ 934.554523][T16572] ? __pfx____sys_sendmsg+0x10/0x10 [ 934.554557][T16572] ? __fget_files+0x34/0x3d0 [ 934.554589][T16572] ? __pfx___might_resched+0x10/0x10 [ 934.554612][T16572] __sys_sendmmsg+0x20c/0x440 [ 934.554634][T16572] ? __pfx___sys_sendmmsg+0x10/0x10 [ 934.554650][T16572] ? ksys_write+0x190/0x250 [ 934.554685][T16572] ? fput+0x7c/0x100 [ 934.554707][T16572] ? ksys_write+0x1ac/0x250 [ 934.554723][T16572] ? __pfx_ksys_write+0x10/0x10 [ 934.554744][T16572] __x64_sys_sendmmsg+0x9c/0x100 [ 934.554765][T16572] ? lockdep_hardirqs_on+0x7d/0x110 [ 934.554786][T16572] do_syscall_64+0x123/0x790 [ 934.554809][T16572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.554828][T16572] RIP: 0033:0x7f8726f9e159 [ 934.554844][T16572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 934.554862][T16572] RSP: 002b:00007f8727f32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 934.554880][T16572] RAX: ffffffffffffffda RBX: 00007f8727225fa0 RCX: 00007f8726f9e159 [ 934.554892][T16572] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 934.554903][T16572] RBP: 00007f8727f32090 R08: 0000000000000000 R09: 0000000000000000 [ 934.554914][T16572] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 934.554925][T16572] R13: 00007f8727226038 R14: 00007f8727225fa0 R15: 00007ffc07d367b8 [ 934.554950][T16572] [ 935.076168][T12533] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 935.331730][T12533] usb 10-1: unable to get BOS descriptor or descriptor too short [ 935.331787][T12533] usb 10-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 935.333828][T12533] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 935.338411][T12533] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.338435][T12533] usb 10-1: Product: syz [ 935.338448][T12533] usb 10-1: Manufacturer: syz [ 935.338461][T12533] usb 10-1: SerialNumber: syz [ 935.828478][ T9] usb 8-1: new full-speed USB device number 53 using dummy_hcd [ 935.985921][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 936.008099][T12533] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 936.026109][ T9] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 936.026158][ T9] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 936.035438][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 936.035541][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.281480][T16590] input: syz0 as /devices/virtual/input/input169 [ 936.288910][T12533] usb 10-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 936.317798][T16588] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2595'. [ 936.408642][ T9] usbtmc 8-1:16.0: bulk endpoints not found [ 936.520301][T16594] input: syz0 as /devices/virtual/input/input170 [ 936.600250][T12533] usb 10-1: USB disconnect, device number 53 [ 936.740504][T16597] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 936.815016][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 936.950928][T16597] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 936.962318][T16597] overlayfs: failed to look up (tracing) for ino (-66) [ 937.133120][T16608] FAULT_INJECTION: forcing a failure. [ 937.133120][T16608] name failslab, interval 1, probability 0, space 0, times 0 [ 937.148732][T16608] CPU: 0 UID: 0 PID: 16608 Comm: syz.0.2600 Tainted: G L syzkaller #0 PREEMPT(full) [ 937.148764][T16608] Tainted: [L]=SOFTLOCKUP [ 937.148772][T16608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 937.148783][T16608] Call Trace: [ 937.148789][T16608] [ 937.148797][T16608] dump_stack_lvl+0x100/0x190 [ 937.148828][T16608] should_fail_ex.cold+0x5/0xa [ 937.148852][T16608] should_failslab+0xc2/0x120 [ 937.148873][T16608] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 937.148893][T16608] ? proc_alloc_inode+0x25/0x200 [ 937.148918][T16608] ? __pfx_proc_alloc_inode+0x10/0x10 [ 937.148941][T16608] proc_alloc_inode+0x25/0x200 [ 937.148963][T16608] alloc_inode+0x68/0x250 [ 937.148991][T16608] new_inode+0x22/0x1c0 [ 937.149018][T16608] proc_pid_make_inode+0x22/0x160 [ 937.149052][T16608] proc_pident_instantiate+0x85/0x310 [ 937.149079][T16608] proc_pident_lookup+0x1e3/0x270 [ 937.149106][T16608] ? __pfx_proc_tid_base_lookup+0x10/0x10 [ 937.149132][T16608] lookup_open+0xa79/0x1990 [ 937.149169][T16608] path_openat+0xa2c/0x2440 [ 937.149194][T16608] ? __pfx_path_openat+0x10/0x10 [ 937.149222][T16608] do_file_open+0x20e/0x430 [ 937.149245][T16608] ? __pfx_do_file_open+0x10/0x10 [ 937.149275][T16608] ? __pfx_kfree_link+0x10/0x10 [ 937.149301][T16608] ? _raw_spin_unlock+0x28/0x50 [ 937.149328][T16608] ? alloc_fd+0x471/0x7a0 [ 937.149356][T16608] do_sys_openat2+0x10f/0x1e0 [ 937.149380][T16608] ? __pfx_do_sys_openat2+0x10/0x10 [ 937.149408][T16608] __x64_sys_openat+0x12d/0x210 [ 937.149431][T16608] ? __pfx___x64_sys_openat+0x10/0x10 [ 937.149462][T16608] do_syscall_64+0x123/0x790 [ 937.149484][T16608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.149505][T16608] RIP: 0033:0x7f742075e98e [ 937.149520][T16608] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 937.149536][T16608] RSP: 002b:00007f74216d5f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 937.149555][T16608] RAX: ffffffffffffffda RBX: 00007f74216d66c0 RCX: 00007f742075e98e [ 937.149567][T16608] RDX: 0000000000000002 RSI: 00007f742083492b RDI: ffffffffffffff9c [ 937.149578][T16608] RBP: 00007f7420835024 R08: 0000000000000000 R09: 0000000000000000 [ 937.149589][T16608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 937.149599][T16608] R13: 00007f7420a26038 R14: 00007f7420a25fa0 R15: 00007fffaac58738 [ 937.149622][T16608] [ 937.406723][T16603] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2593'. [ 937.432018][T16616] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2603'. [ 938.425111][T12524] usb 8-1: USB disconnect, device number 53 [ 939.654085][T16628] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2605'. [ 939.997723][T16641] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2608'. [ 940.743762][T12533] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 940.815343][T12534] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 940.973859][T12533] usb 8-1: unable to get BOS descriptor or descriptor too short [ 940.974105][T12533] usb 8-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 940.994619][T12533] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 940.998518][T12533] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.998538][T12533] usb 8-1: Product: syz [ 940.998555][T12533] usb 8-1: Manufacturer: syz [ 940.998568][T12533] usb 8-1: SerialNumber: syz [ 941.043557][T12534] usb 1-1: Using ep0 maxpacket: 8 [ 941.085485][T12534] usb 1-1: unable to get BOS descriptor or descriptor too short [ 941.085530][T12534] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 941.099112][T12534] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.099135][T12534] usb 1-1: Product: syz [ 941.099149][T12534] usb 1-1: Manufacturer: syz [ 941.099161][T12534] usb 1-1: SerialNumber: syz [ 941.281866][T12533] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 941.392345][T16652] netlink: 'syz.0.2612': attribute type 1 has an invalid length. [ 941.392395][T16652] netlink: 'syz.0.2612': attribute type 7 has an invalid length. [ 941.392408][T16652] netlink: 'syz.0.2612': attribute type 8 has an invalid length. [ 941.392418][T16652] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2612'. [ 941.392428][T16652] NCSI netlink: No device for ifindex 1073545264 [ 941.407955][T12534] usb 1-1: selecting invalid altsetting 1 [ 941.681877][T12533] usb 8-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 941.693428][ T25] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 941.728737][T12533] usb 8-1: USB disconnect, device number 54 [ 941.761900][T12534] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 941.767838][T12534] usb 1-1: USB disconnect, device number 70 [ 941.790859][T12285] udevd[12285]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 941.823203][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 941.863841][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 941.864419][ T25] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 941.865242][ T25] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 941.865268][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 941.865292][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.867375][ T25] usb 5-1: config 0 descriptor?? [ 942.282306][ T25] corsair-psu 0003:1B1C:1C09.0012: unknown main item tag 0x0 [ 942.282344][ T25] corsair-psu 0003:1B1C:1C09.0012: unknown main item tag 0x0 [ 942.286634][ T25] corsair-psu 0003:1B1C:1C09.0012: unknown main item tag 0x0 [ 942.286657][ T25] corsair-psu 0003:1B1C:1C09.0012: item fetching failed at offset 4/5 [ 942.290661][ T25] corsair-psu 0003:1B1C:1C09.0012: probe with driver corsair-psu failed with error -22 [ 942.305728][T12533] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 942.368914][T16676] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2617'. [ 942.532054][ T30] audit: type=1400 audit(2000000472.000:1115): avc: denied { listen } for pid=16666 comm="syz.4.2614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 942.553641][T12533] usb 1-1: Using ep0 maxpacket: 16 [ 942.557516][T12533] usb 1-1: New USB device found, idVendor=9022, idProduct=d632, bcdDevice=d7.81 [ 942.580931][T12520] usb 5-1: USB disconnect, device number 100 [ 942.624844][T12533] usb 1-1: config 206 has an invalid interface number: 66 but max is 0 [ 942.624883][T12533] usb 1-1: config 206 has no interface number 0 [ 942.624924][T12533] usb 1-1: config 206 interface 66 has no altsetting 0 [ 942.710861][T12533] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.710904][T12533] usb 1-1: Product: syz [ 942.710918][T12533] usb 1-1: Manufacturer: syz [ 942.710932][T12533] usb 1-1: SerialNumber: syz [ 943.754906][T16692] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 943.763864][T16692] UDF-fs: Scanning with blocksize 512 failed [ 943.808725][T16692] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 943.816981][T16692] UDF-fs: Scanning with blocksize 1024 failed [ 943.863095][T16692] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 943.872805][T16692] UDF-fs: Scanning with blocksize 2048 failed [ 943.912888][T16692] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 943.922131][T16692] UDF-fs: Scanning with blocksize 4096 failed [ 943.964119][ T25] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 944.188575][ T25] usb 8-1: Using ep0 maxpacket: 16 [ 944.214025][ T25] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 944.246609][ T25] usb 8-1: config 0 has an invalid interface number: 34 but max is 0 [ 944.255132][ T25] usb 8-1: config 0 has no interface number 0 [ 944.263176][ T25] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 944.263230][ T25] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 944.290960][T12533] dvb-usb: found a 'TeVii S632 USB' in warm state. [ 944.291153][T12533] dw2102: su3000_power_ctrl: 1, initialized 0 [ 944.291229][T12533] dvb-usb: bulk message failed: -22 (2/0) [ 944.341758][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.341811][ T25] usb 8-1: Product: syz [ 944.341884][ T25] usb 8-1: Manufacturer: syz [ 944.341950][ T25] usb 8-1: SerialNumber: syz [ 944.419969][T12533] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 944.430738][T12533] dvbdev: DVB: registering new adapter (TeVii S632 USB) [ 944.430909][T12533] usb 1-1: media controller created [ 944.431013][T12533] dvb-usb: bulk message failed: -22 (6/0) [ 944.431067][T12533] dw2102: i2c transfer failed. [ 944.431260][T12533] dvb-usb: bulk message failed: -22 (6/0) [ 944.431296][T12533] dw2102: i2c transfer failed. [ 944.431389][T12533] dvb-usb: bulk message failed: -22 (6/0) [ 944.431455][T12533] dw2102: i2c transfer failed. [ 944.431523][T12533] dvb-usb: bulk message failed: -22 (6/0) [ 944.431612][T12533] dw2102: i2c transfer failed. [ 944.431708][T12533] dvb-usb: bulk message failed: -22 (6/0) [ 944.431774][T12533] dw2102: i2c transfer failed. [ 944.431865][T12533] dvb-usb: bulk message failed: -22 (6/0) [ 944.530759][ T25] usb 8-1: config 0 descriptor?? [ 944.539127][T16688] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 944.539617][T16688] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 944.555026][T12533] dw2102: i2c transfer failed. [ 944.555121][T12533] dvb-usb: MAC address: 02:02:02:02:02:02 [ 945.065792][T12533] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 945.272135][T16697] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 945.284406][T16697] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 945.385810][T12533] dvb-usb: bulk message failed: -22 (1/0) [ 945.385872][T12533] dw2102: command 0x51 transfer failed. [ 945.565926][ T25] asix 8-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 945.628117][T12533] DVB: Unable to find symbol m88rs2000_attach() [ 945.628143][T12533] dvb-usb: no frontend was attached by 'TeVii S632 USB' [ 945.723940][T12533] rc_core: IR keymap rc-su3000 not found [ 945.729871][T12533] Registered IR keymap rc-empty [ 945.736176][T12533] rc rc0: TeVii S632 USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 945.751258][T12533] input: TeVii S632 USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input171 [ 945.767683][T12533] dvb-usb: schedule remote query interval to 150 msecs. [ 945.775729][ T25] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 945.775757][ T25] asix 8-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 945.775921][ T25] asix 8-1:0.34: probe with driver asix failed with error -71 [ 945.786164][T12533] dw2102: su3000_power_ctrl: 0, initialized 1 [ 945.786181][T12533] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 945.834859][T12533] usb 1-1: USB disconnect, device number 71 [ 945.845103][ T25] usb 8-1: USB disconnect, device number 55 [ 946.016063][T12533] dvb-usb: TeVii S632 USB successfully deinitialized and disconnected. [ 946.028298][T12286] udevd[12286]: setting mode of /dev/bus/usb/001/071 to 020664 failed: No such file or directory [ 946.028395][T12286] udevd[12286]: setting owner of /dev/bus/usb/001/071 to uid=0, gid=0 failed: No such file or directory [ 946.196603][T12520] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 946.364693][T12520] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 946.365639][T12520] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.375022][T12520] usb 9-1: config 0 descriptor?? [ 946.590378][T12520] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 946.803008][T12520] [drm:udl_init] *ERROR* Selecting channel failed [ 946.851913][T12520] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 1 [ 946.851948][T12520] [drm] Initialized udl on minor 1 [ 946.872005][T12520] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 946.872331][T12520] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 946.894044][T12520] usb 9-1: USB disconnect, device number 57 [ 946.896370][T12524] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 951.393154][T16665] syz.9.2613 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 951.393199][T16665] CPU: 0 UID: 0 PID: 16665 Comm: syz.9.2613 Tainted: G L syzkaller #0 PREEMPT(full) [ 951.393221][T16665] Tainted: [L]=SOFTLOCKUP [ 951.393227][T16665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 951.393238][T16665] Call Trace: [ 951.393244][T16665] [ 951.393251][T16665] dump_stack_lvl+0x100/0x190 [ 951.393277][T16665] dump_header+0xfb/0x606 [ 951.393296][T16665] oom_kill_process.cold+0xd/0x380 [ 951.393319][T16665] out_of_memory+0x340/0x14f0 [ 951.393344][T16665] ? __pfx_out_of_memory+0x10/0x10 [ 951.393370][T16665] mem_cgroup_out_of_memory+0xc6/0x130 [ 951.393388][T16665] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 951.393403][T16665] ? find_held_lock+0x2b/0x80 [ 951.393429][T16665] ? do_raw_spin_unlock+0x145/0x1e0 [ 951.393449][T16665] ? _raw_spin_unlock+0x28/0x50 [ 951.393477][T16665] try_charge_memcg+0x783/0xf60 [ 951.393504][T16665] ? __pfx_try_charge_memcg+0x10/0x10 [ 951.393524][T16665] ? find_held_lock+0x2b/0x80 [ 951.393544][T16665] ? rcu_read_unlock+0x17/0x60 [ 951.393565][T16665] ? rcu_read_unlock+0x17/0x60 [ 951.393587][T16665] ? find_held_lock+0x2b/0x80 [ 951.393608][T16665] ? rcu_read_unlock+0x17/0x60 [ 951.393634][T16665] charge_memcg+0x1ae/0x210 [ 951.393656][T16665] __mem_cgroup_charge+0x2b/0x1c0 [ 951.393681][T16665] shmem_alloc_and_add_folio+0x451/0xd40 [ 951.393709][T16665] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 951.393733][T16665] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 951.393760][T16665] shmem_get_folio_gfp+0x75b/0x1980 [ 951.393787][T16665] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 951.393811][T16665] ? vm_normal_page+0x1d1/0x380 [ 951.393828][T16665] ? __pfx_vm_normal_page+0x10/0x10 [ 951.393849][T16665] shmem_write_begin+0x1a4/0x420 [ 951.393873][T16665] ? __pfx_shmem_write_begin+0x10/0x10 [ 951.393896][T16665] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 951.393930][T16665] generic_perform_write+0x292/0xa40 [ 951.393949][T16665] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 951.393979][T16665] ? __pfx_generic_perform_write+0x10/0x10 [ 951.394001][T16665] ? file_update_time_flags+0x38c/0x520 [ 951.394026][T16665] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 951.394049][T16665] shmem_file_write_iter+0x10e/0x140 [ 951.394075][T16665] __kernel_write_iter+0x2ac/0x930 [ 951.394101][T16665] ? __pfx___kernel_write_iter+0x10/0x10 [ 951.394124][T16665] ? cgroup1_freezing+0x12c/0x3b0 [ 951.394152][T16665] ? cgroup1_freezing+0x136/0x3b0 [ 951.394176][T16665] ? freezing_slow_path+0xb5/0x1a0 [ 951.394201][T16665] dump_user_range+0x3f9/0xad0 [ 951.394230][T16665] ? __pfx_dump_user_range+0x10/0x10 [ 951.394261][T16665] ? __pfx_writenote+0x10/0x10 [ 951.394277][T16665] ? elf_core_dump+0x1f25/0x3d20 [ 951.394297][T16665] elf_core_dump+0x2d68/0x3d20 [ 951.394326][T16665] ? __pfx_elf_core_dump+0x10/0x10 [ 951.394341][T16665] ? kasan_save_stack+0x3f/0x50 [ 951.394358][T16665] ? kasan_save_stack+0x30/0x50 [ 951.394373][T16665] ? kasan_save_track+0x14/0x30 [ 951.394389][T16665] ? __kasan_kmalloc+0xaa/0xb0 [ 951.394404][T16665] ? vfs_coredump+0x21f6/0x54a0 [ 951.394426][T16665] ? get_signal+0x1f2a/0x21e0 [ 951.394442][T16665] ? arch_do_signal_or_restart+0x91/0x7e0 [ 951.394469][T16665] ? 0xffffffffff600000 [ 951.394511][T16665] ? lock_acquire+0x1d1/0x380 [ 951.394526][T16665] ? get_signal+0x1f2a/0x21e0 [ 951.394550][T16665] ? vfs_coredump+0x281a/0x54a0 [ 951.394572][T16665] vfs_coredump+0x281a/0x54a0 [ 951.394604][T16665] ? __pfx_vfs_coredump+0x10/0x10 [ 951.394628][T16665] ? __lock_acquire+0x4c5/0x1ec0 [ 951.394649][T16665] ? __lock_acquire+0x4c5/0x1ec0 [ 951.394667][T16665] ? lock_acquire+0x1d1/0x380 [ 951.394682][T16665] ? unwind_next_frame+0xbd/0x2090 [ 951.394709][T16665] ? lock_acquire+0x1d1/0x380 [ 951.394730][T16665] ? bpf_ksym_find+0x128/0x1c0 [ 951.394752][T16665] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 951.394783][T16665] ? arch_stack_walk+0xa6/0xf0 [ 951.394811][T16665] ? __sigqueue_free+0xbe/0x2a0 [ 951.394831][T16665] ? stack_trace_save+0x8e/0xc0 [ 951.394853][T16665] ? __pfx_stack_trace_save+0x10/0x10 [ 951.394877][T16665] ? stack_depot_save_flags+0x27/0x9f0 [ 951.394895][T16665] ? __lock_acquire+0x4c5/0x1ec0 [ 951.394970][T16665] ? proc_coredump_connector+0x2d3/0x4f0 [ 951.394992][T16665] ? __pfx_proc_coredump_connector+0x10/0x10 [ 951.395018][T16665] ? rcu_is_watching+0x13/0xc0 [ 951.395042][T16665] get_signal+0x1f2a/0x21e0 [ 951.395068][T16665] ? __pfx_get_signal+0x10/0x10 [ 951.395092][T16665] arch_do_signal_or_restart+0x91/0x7e0 [ 951.395116][T16665] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 951.395152][T16665] irqentry_exit+0x402/0xa10 [ 951.395174][T16665] asm_exc_page_fault+0x26/0x30 [ 951.395189][T16665] RIP: 0033:0x7f2d6dd9e161 [ 951.395204][T16665] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 951.395220][T16665] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 951.395234][T16665] RAX: 0000000000000000 RBX: 00007f2d6e026180 RCX: 00007f2d6dd9e159 [ 951.395245][T16665] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 951.395255][T16665] RBP: 00007f2d6de35024 R08: 0000000000000000 R09: 0000000000000000 [ 951.395265][T16665] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 951.395274][T16665] R13: 00007f2d6e026218 R14: 00007f2d6e026180 R15: 00007ffcdca13d28 [ 951.395297][T16665] [ 951.869200][T16665] memory: usage 307200kB, limit 307200kB, failcnt 28853 [ 951.869218][T16665] memory+swap: usage 432140kB, limit 9007199254740988kB, failcnt 0 [ 951.869229][T16665] kmem: usage 4296kB, limit 9007199254740988kB, failcnt 0 [ 951.869238][T16665] Memory cgroup stats for /syz9: [ 951.869362][T16665] cache 310005760 [ 951.869371][T16665] rss 167936 [ 951.869376][T16665] rss_huge 0 [ 951.869382][T16665] shmem 310005760 [ 951.869388][T16665] mapped_file 23511040 [ 951.869394][T16665] dirty 0 [ 951.869400][T16665] writeback 0 [ 951.869406][T16665] workingset_refault_anon 12 [ 951.869413][T16665] workingset_refault_file 0 [ 951.869419][T16665] swap 127938560 [ 951.869425][T16665] swapcached 128036864 [ 951.869431][T16665] pgpgin 481111 [ 951.869438][T16665] pgpgout 405385 [ 951.869444][T16665] pgfault 163549 [ 951.869449][T16665] pgmajfault 14 [ 951.869455][T16665] inactive_anon 176844800 [ 951.869461][T16665] active_anon 133328896 [ 951.869467][T16665] inactive_file 0 [ 951.869473][T16665] active_file 0 [ 951.869479][T16665] unevictable 0 [ 951.869485][T16665] hierarchical_memory_limit 314572800 [ 951.869492][T16665] hierarchical_memsw_limit 9223372036854771712 [ 951.869499][T16665] total_cache 310005760 [ 951.869506][T16665] total_rss 167936 [ 951.869512][T16665] total_rss_huge 0 [ 951.869518][T16665] total_shmem 310005760 [ 951.869523][T16665] total_mapped_file 23511040 [ 951.869530][T16665] total_dirty 0 [ 951.869535][T16665] total_writeback 0 [ 951.869541][T16665] total_workingset_refault_anon 12 [ 951.869548][T16665] total_workingset_refault_file 0 [ 951.869555][T16665] total_swap 127938560 [ 951.869561][T16665] total_swapcached 128036864 [ 951.869567][T16665] total_pgpgin 484182 [ 951.869573][T16665] total_pgpgout 408456 [ 951.869579][T16665] total_pgfault 166623 [ 951.869585][T16665] total_pgmajfault 14 [ 951.869591][T16665] total_inactive_anon 176844800 [ 951.869597][T16665] total_active_anon 133328896 [ 951.869603][T16665] total_inactive_file 0 [ 951.869609][T16665] total_active_file 0 [ 951.869615][T16665] total_unevictable 0 [ 951.869621][T16665] anon_cost 0 [ 951.869627][T16665] file_cost 0 [ 951.869633][T16665] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.2613,pid=16663,uid=0 [ 951.872503][T16665] Memory cgroup out of memory: Killed process 16663 (syz.9.2613) total-vm:98676kB, anon-rss:1264kB, file-rss:60036kB, shmem-rss:11480kB, UID:0 pgtables:224kB oom_score_adj:1000 [ 952.216588][T16669] syz.9.2613 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 952.216625][T16669] CPU: 0 UID: 0 PID: 16669 Comm: syz.9.2613 Tainted: G L syzkaller #0 PREEMPT(full) [ 952.216650][T16669] Tainted: [L]=SOFTLOCKUP [ 952.216656][T16669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 952.216666][T16669] Call Trace: [ 952.216671][T16669] [ 952.216678][T16669] dump_stack_lvl+0x100/0x190 [ 952.216705][T16669] dump_header+0xfb/0x606 [ 952.216724][T16669] oom_kill_process.cold+0xd/0x380 [ 952.216745][T16669] out_of_memory+0x340/0x14f0 [ 952.216771][T16669] ? __pfx_out_of_memory+0x10/0x10 [ 952.216797][T16669] mem_cgroup_out_of_memory+0xc6/0x130 [ 952.216817][T16669] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 952.216832][T16669] ? find_held_lock+0x2b/0x80 [ 952.216858][T16669] ? do_raw_spin_unlock+0x145/0x1e0 [ 952.216878][T16669] ? _raw_spin_unlock+0x28/0x50 [ 952.216905][T16669] try_charge_memcg+0x783/0xf60 [ 952.216932][T16669] ? __pfx_try_charge_memcg+0x10/0x10 [ 952.216952][T16669] ? find_held_lock+0x2b/0x80 [ 952.216972][T16669] ? rcu_read_unlock+0x17/0x60 [ 952.216993][T16669] ? rcu_read_unlock+0x17/0x60 [ 952.217015][T16669] ? find_held_lock+0x2b/0x80 [ 952.217036][T16669] ? rcu_read_unlock+0x17/0x60 [ 952.217062][T16669] charge_memcg+0x1ae/0x210 [ 952.217084][T16669] __mem_cgroup_charge+0x2b/0x1c0 [ 952.217109][T16669] shmem_alloc_and_add_folio+0x451/0xd40 [ 952.217137][T16669] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 952.217161][T16669] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 952.217183][T16669] ? __lock_acquire+0x4c5/0x1ec0 [ 952.217203][T16669] shmem_get_folio_gfp+0x75b/0x1980 [ 952.217230][T16669] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 952.217250][T16669] ? inode_set_ctime_current+0x9c/0x850 [ 952.217271][T16669] ? find_held_lock+0x2b/0x80 [ 952.217294][T16669] ? timestamp_truncate+0x22e/0x2f0 [ 952.217316][T16669] shmem_write_begin+0x1a4/0x420 [ 952.217341][T16669] ? __pfx_shmem_write_begin+0x10/0x10 [ 952.217362][T16669] ? inode_set_ctime_current+0x283/0x850 [ 952.217382][T16669] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 952.217405][T16669] ? inode_maybe_inc_iversion+0x169/0x220 [ 952.217431][T16669] generic_perform_write+0x292/0xa40 [ 952.217449][T16669] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 952.217479][T16669] ? __pfx_generic_perform_write+0x10/0x10 [ 952.217499][T16669] ? mnt_put_write_access_file+0x4e/0x100 [ 952.217518][T16669] ? file_update_time_flags+0x38c/0x520 [ 952.217543][T16669] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 952.217566][T16669] shmem_file_write_iter+0x10e/0x140 [ 952.217592][T16669] __kernel_write_iter+0x2ac/0x930 [ 952.217618][T16669] ? __pfx___kernel_write_iter+0x10/0x10 [ 952.217641][T16669] ? cgroup1_freezing+0x12c/0x3b0 [ 952.217669][T16669] ? cgroup1_freezing+0x136/0x3b0 [ 952.217693][T16669] ? freezing_slow_path+0xb5/0x1a0 [ 952.217718][T16669] dump_user_range+0x3f9/0xad0 [ 952.217748][T16669] ? __pfx_dump_user_range+0x10/0x10 [ 952.217779][T16669] ? __pfx_writenote+0x10/0x10 [ 952.217795][T16669] ? elf_core_dump+0x1f25/0x3d20 [ 952.217815][T16669] elf_core_dump+0x2d68/0x3d20 [ 952.217843][T16669] ? __pfx_elf_core_dump+0x10/0x10 [ 952.217859][T16669] ? kasan_save_stack+0x3f/0x50 [ 952.217875][T16669] ? kasan_save_stack+0x30/0x50 [ 952.217890][T16669] ? kasan_save_track+0x14/0x30 [ 952.217905][T16669] ? __kasan_kmalloc+0xaa/0xb0 [ 952.217921][T16669] ? vfs_coredump+0x21f6/0x54a0 [ 952.217943][T16669] ? get_signal+0x1f2a/0x21e0 [ 952.217959][T16669] ? arch_do_signal_or_restart+0x91/0x7e0 [ 952.217986][T16669] ? 0xffffffffff600000 [ 952.218028][T16669] ? lock_acquire+0x1d1/0x380 [ 952.218043][T16669] ? get_signal+0x1f2a/0x21e0 [ 952.218067][T16669] ? vfs_coredump+0x281a/0x54a0 [ 952.218089][T16669] vfs_coredump+0x281a/0x54a0 [ 952.218121][T16669] ? __pfx_vfs_coredump+0x10/0x10 [ 952.218145][T16669] ? __lock_acquire+0x4c5/0x1ec0 [ 952.218167][T16669] ? __lock_acquire+0x4c5/0x1ec0 [ 952.218186][T16669] ? lock_acquire+0x1d1/0x380 [ 952.218201][T16669] ? unwind_next_frame+0xbd/0x2090 [ 952.218227][T16669] ? lock_acquire+0x1d1/0x380 [ 952.218249][T16669] ? bpf_ksym_find+0x128/0x1c0 [ 952.218271][T16669] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 952.218302][T16669] ? arch_stack_walk+0xa6/0xf0 [ 952.218330][T16669] ? __sigqueue_free+0xbe/0x2a0 [ 952.218350][T16669] ? stack_trace_save+0x8e/0xc0 [ 952.218373][T16669] ? __pfx_stack_trace_save+0x10/0x10 [ 952.218397][T16669] ? stack_depot_save_flags+0x27/0x9f0 [ 952.218415][T16669] ? __lock_acquire+0x4c5/0x1ec0 [ 952.218475][T16669] ? proc_coredump_connector+0x2d3/0x4f0 [ 952.218496][T16669] ? __pfx_proc_coredump_connector+0x10/0x10 [ 952.218522][T16669] ? rcu_is_watching+0x13/0xc0 [ 952.218547][T16669] get_signal+0x1f2a/0x21e0 [ 952.218576][T16669] ? __pfx_get_signal+0x10/0x10 [ 952.218600][T16669] arch_do_signal_or_restart+0x91/0x7e0 [ 952.218624][T16669] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 952.218660][T16669] irqentry_exit+0x402/0xa10 [ 952.218681][T16669] asm_exc_page_fault+0x26/0x30 [ 952.218697][T16669] RIP: 0033:0x7f2d6dd9e161 [ 952.218711][T16669] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 952.218726][T16669] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 952.218741][T16669] RAX: 0000000000000000 RBX: 00007f2d6e026180 RCX: 00007f2d6dd9e159 [ 952.218752][T16669] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 952.218761][T16669] RBP: 00007f2d6de35024 R08: 0000000000000000 R09: 0000000000000000 [ 952.218771][T16669] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 952.218781][T16669] R13: 00007f2d6e026218 R14: 00007f2d6e026180 R15: 00007ffcdca13d28 [ 952.218804][T16669] [ 952.561293][T16669] memory: usage 307200kB, limit 307200kB, failcnt 28978 [ 952.561311][T16669] memory+swap: usage 432140kB, limit 9007199254740988kB, failcnt 0 [ 952.561322][T16669] kmem: usage 4296kB, limit 9007199254740988kB, failcnt 0 [ 952.561332][T16669] Memory cgroup stats for /syz9: [ 952.561410][T16669] cache 310005760 [ 952.561421][T16669] rss 167936 [ 952.561425][T16669] rss_huge 0 [ 952.561429][T16669] shmem 310005760 [ 952.561433][T16669] mapped_file 23511040 [ 952.561437][T16669] dirty 0 [ 952.561441][T16669] writeback 0 [ 952.561445][T16669] workingset_refault_anon 12 [ 952.561449][T16669] workingset_refault_file 0 [ 952.561453][T16669] swap 127938560 [ 952.561457][T16669] swapcached 128036864 [ 952.561461][T16669] pgpgin 481111 [ 952.561465][T16669] pgpgout 405385 [ 952.561469][T16669] pgfault 163549 [ 952.561473][T16669] pgmajfault 14 [ 952.561477][T16669] inactive_anon 176844800 [ 952.561481][T16669] active_anon 133328896 [ 952.561485][T16669] inactive_file 0 [ 952.561489][T16669] active_file 0 [ 952.561493][T16669] unevictable 0 [ 952.561497][T16669] hierarchical_memory_limit 314572800 [ 952.561502][T16669] hierarchical_memsw_limit 9223372036854771712 [ 952.561506][T16669] total_cache 310005760 [ 952.561511][T16669] total_rss 167936 [ 952.561515][T16669] total_rss_huge 0 [ 952.561519][T16669] total_shmem 310005760 [ 952.561523][T16669] total_mapped_file 23511040 [ 952.561527][T16669] total_dirty 0 [ 952.561531][T16669] total_writeback 0 [ 952.561535][T16669] total_workingset_refault_anon 12 [ 952.561539][T16669] total_workingset_refault_file 0 [ 952.561544][T16669] total_swap 127938560 [ 952.561548][T16669] total_swapcached 128036864 [ 952.561552][T16669] total_pgpgin 484182 [ 952.561556][T16669] total_pgpgout 408456 [ 952.561560][T16669] total_pgfault 166623 [ 952.561564][T16669] total_pgmajfault 14 [ 952.561568][T16669] total_inactive_anon 176844800 [ 952.561572][T16669] total_active_anon 133328896 [ 952.561576][T16669] total_inactive_file 0 [ 952.561581][T16669] total_active_file 0 [ 952.561585][T16669] total_unevictable 0 [ 952.561589][T16669] anon_cost 0 [ 952.561592][T16669] file_cost 0 [ 952.561597][T16669] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.2613,pid=16664,uid=0 [ 952.561658][T16669] Memory cgroup out of memory: Killed process 16664 (syz.9.2613) total-vm:98808kB, anon-rss:1264kB, file-rss:58820kB, shmem-rss:11480kB, UID:0 pgtables:224kB oom_score_adj:1000 [ 953.062100][T16661] syz.9.2613 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 953.062139][T16661] CPU: 0 UID: 0 PID: 16661 Comm: syz.9.2613 Tainted: G L syzkaller #0 PREEMPT(full) [ 953.062161][T16661] Tainted: [L]=SOFTLOCKUP [ 953.062168][T16661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 953.062177][T16661] Call Trace: [ 953.062184][T16661] [ 953.062190][T16661] dump_stack_lvl+0x100/0x190 [ 953.062216][T16661] dump_header+0xfb/0x606 [ 953.062235][T16661] oom_kill_process.cold+0xd/0x380 [ 953.062256][T16661] out_of_memory+0x340/0x14f0 [ 953.062280][T16661] ? __pfx_out_of_memory+0x10/0x10 [ 953.062306][T16661] mem_cgroup_out_of_memory+0xc6/0x130 [ 953.062323][T16661] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 953.062338][T16661] ? find_held_lock+0x2b/0x80 [ 953.062370][T16661] ? do_raw_spin_unlock+0x145/0x1e0 [ 953.062390][T16661] ? _raw_spin_unlock+0x28/0x50 [ 953.062416][T16661] try_charge_memcg+0x783/0xf60 [ 953.062442][T16661] ? __pfx_try_charge_memcg+0x10/0x10 [ 953.062462][T16661] ? find_held_lock+0x2b/0x80 [ 953.062482][T16661] ? rcu_read_unlock+0x17/0x60 [ 953.062503][T16661] ? rcu_read_unlock+0x17/0x60 [ 953.062524][T16661] ? find_held_lock+0x2b/0x80 [ 953.062545][T16661] ? rcu_read_unlock+0x17/0x60 [ 953.062571][T16661] charge_memcg+0x1ae/0x210 [ 953.062593][T16661] __mem_cgroup_charge+0x2b/0x1c0 [ 953.062618][T16661] shmem_alloc_and_add_folio+0x451/0xd40 [ 953.062646][T16661] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 953.062669][T16661] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 953.062696][T16661] shmem_get_folio_gfp+0x75b/0x1980 [ 953.062723][T16661] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 953.062746][T16661] ? vm_normal_page+0x1d1/0x380 [ 953.062763][T16661] ? __pfx_vm_normal_page+0x10/0x10 [ 953.062784][T16661] shmem_write_begin+0x1a4/0x420 [ 953.062807][T16661] ? __pfx_shmem_write_begin+0x10/0x10 [ 953.062830][T16661] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 953.062858][T16661] generic_perform_write+0x292/0xa40 [ 953.062876][T16661] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 953.062906][T16661] ? __pfx_generic_perform_write+0x10/0x10 [ 953.062927][T16661] ? file_update_time_flags+0x38c/0x520 [ 953.062952][T16661] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 953.062975][T16661] shmem_file_write_iter+0x10e/0x140 [ 953.063001][T16661] __kernel_write_iter+0x2ac/0x930 [ 953.063027][T16661] ? __pfx___kernel_write_iter+0x10/0x10 [ 953.063049][T16661] ? cgroup1_freezing+0x12c/0x3b0 [ 953.063079][T16661] ? cgroup1_freezing+0x136/0x3b0 [ 953.063103][T16661] ? freezing_slow_path+0xb5/0x1a0 [ 953.063129][T16661] dump_user_range+0x3f9/0xad0 [ 953.063157][T16661] ? __pfx_dump_user_range+0x10/0x10 [ 953.063188][T16661] ? __pfx_writenote+0x10/0x10 [ 953.063204][T16661] ? elf_core_dump+0x1f25/0x3d20 [ 953.063223][T16661] elf_core_dump+0x2d68/0x3d20 [ 953.063252][T16661] ? __pfx_elf_core_dump+0x10/0x10 [ 953.063268][T16661] ? kasan_save_stack+0x3f/0x50 [ 953.063284][T16661] ? kasan_save_stack+0x30/0x50 [ 953.063299][T16661] ? kasan_save_track+0x14/0x30 [ 953.063314][T16661] ? __kasan_kmalloc+0xaa/0xb0 [ 953.063329][T16661] ? vfs_coredump+0x21f6/0x54a0 [ 953.063351][T16661] ? get_signal+0x1f2a/0x21e0 [ 953.063373][T16661] ? arch_do_signal_or_restart+0x91/0x7e0 [ 953.063400][T16661] ? 0xffffffffff600000 [ 953.063441][T16661] ? lock_acquire+0x1d1/0x380 [ 953.063457][T16661] ? get_signal+0x1f2a/0x21e0 [ 953.063481][T16661] ? vfs_coredump+0x281a/0x54a0 [ 953.063503][T16661] vfs_coredump+0x281a/0x54a0 [ 953.063534][T16661] ? __pfx_vfs_coredump+0x10/0x10 [ 953.063558][T16661] ? __lock_acquire+0x4c5/0x1ec0 [ 953.063580][T16661] ? __lock_acquire+0x4c5/0x1ec0 [ 953.063598][T16661] ? lock_acquire+0x1d1/0x380 [ 953.063614][T16661] ? unwind_next_frame+0xbd/0x2090 [ 953.063646][T16661] ? bpf_ksym_find+0x128/0x1c0 [ 953.063677][T16661] ? __lock_acquire+0x4c5/0x1ec0 [ 953.063695][T16661] ? do_raw_spin_unlock+0x145/0x1e0 [ 953.063715][T16661] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 953.063742][T16661] ? rcu_is_watching+0x13/0xc0 [ 953.063762][T16661] ? trace_hrtimer_start+0x77/0x220 [ 953.063784][T16661] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 953.063817][T16661] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 953.063837][T16661] ? finish_task_switch.isra.0+0x3b3/0x10d0 [ 953.063857][T16661] ? rcu_is_watching+0x13/0xc0 [ 953.063877][T16661] ? trace_sched_exit_tp+0x120/0x160 [ 953.063899][T16661] ? __schedule+0x126b/0x6920 [ 953.063927][T16661] ? __pfx___schedule+0x10/0x10 [ 953.063945][T16661] ? proc_coredump_connector+0x2d3/0x4f0 [ 953.063966][T16661] ? __pfx_proc_coredump_connector+0x10/0x10 [ 953.063997][T16661] get_signal+0x1f2a/0x21e0 [ 953.064023][T16661] ? __pfx_get_signal+0x10/0x10 [ 953.064047][T16661] arch_do_signal_or_restart+0x91/0x7e0 [ 953.064071][T16661] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 953.064107][T16661] irqentry_exit+0x402/0xa10 [ 953.064127][T16661] asm_exc_page_fault+0x26/0x30 [ 953.064143][T16661] RIP: 0033:0x7f2d6dd9e161 [ 953.064158][T16661] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 953.064173][T16661] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 953.064187][T16661] RAX: 0000000000000000 RBX: 00007f2d6e026180 RCX: 00007f2d6dd9e159 [ 953.064197][T16661] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 953.064208][T16661] RBP: 00007f2d6de35024 R08: 0000000000000000 R09: 0000000000000000 [ 953.064218][T16661] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 953.064227][T16661] R13: 00007f2d6e026218 R14: 00007f2d6e026180 R15: 00007ffcdca13d28 [ 953.064250][T16661] [ 953.510747][T16661] memory: usage 307200kB, limit 307200kB, failcnt 29064 [ 953.510761][T16661] memory+swap: usage 432140kB, limit 9007199254740988kB, failcnt 0 [ 953.510768][T16661] kmem: usage 4296kB, limit 9007199254740988kB, failcnt 0 [ 953.510775][T16661] Memory cgroup stats for /syz9: [ 953.510838][T16661] cache 310005760 [ 953.510844][T16661] rss 167936 [ 953.510847][T16661] rss_huge 0 [ 953.510851][T16661] shmem 310005760 [ 953.510855][T16661] mapped_file 23511040 [ 953.510860][T16661] dirty 0 [ 953.510863][T16661] writeback 0 [ 953.510867][T16661] workingset_refault_anon 12 [ 953.510871][T16661] workingset_refault_file 0 [ 953.510875][T16661] swap 127938560 [ 953.510879][T16661] swapcached 128036864 [ 953.510884][T16661] pgpgin 481111 [ 953.510887][T16661] pgpgout 405385 [ 953.510891][T16661] pgfault 163549 [ 953.510895][T16661] pgmajfault 14 [ 953.510899][T16661] inactive_anon 176844800 [ 953.510903][T16661] active_anon 133328896 [ 953.510909][T16661] inactive_file 0 [ 953.510913][T16661] active_file 0 [ 953.510917][T16661] unevictable 0 [ 953.510921][T16661] hierarchical_memory_limit 314572800 [ 953.510926][T16661] hierarchical_memsw_limit 9223372036854771712 [ 953.510931][T16661] total_cache 310005760 [ 953.510935][T16661] total_rss 167936 [ 953.510939][T16661] total_rss_huge 0 [ 953.510943][T16661] total_shmem 310005760 [ 953.510947][T16661] total_mapped_file 23511040 [ 953.510951][T16661] total_dirty 0 [ 953.510955][T16661] total_writeback 0 [ 953.510959][T16661] total_workingset_refault_anon 12 [ 953.510963][T16661] total_workingset_refault_file 0 [ 953.510968][T16661] total_swap 127938560 [ 953.510972][T16661] total_swapcached 128036864 [ 953.510976][T16661] total_pgpgin 484182 [ 953.510980][T16661] total_pgpgout 408456 [ 953.510984][T16661] total_pgfault 166623 [ 953.510988][T16661] total_pgmajfault 14 [ 953.510992][T16661] total_inactive_anon 176844800 [ 953.510997][T16661] total_active_anon 133328896 [ 953.511001][T16661] total_inactive_file 0 [ 953.511005][T16661] total_active_file 0 [ 953.511009][T16661] total_unevictable 0 [ 953.511013][T16661] anon_cost 0 [ 953.511017][T16661] file_cost 0 [ 953.511022][T16661] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.2613,pid=16670,uid=0 [ 953.511082][T16661] Memory cgroup out of memory: Killed process 16670 (syz.9.2613) total-vm:98940kB, anon-rss:1280kB, file-rss:57668kB, shmem-rss:11480kB, UID:0 pgtables:224kB oom_score_adj:1000 [ 953.889071][T16661] syz.9.2613 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 953.889110][T16661] CPU: 0 UID: 0 PID: 16661 Comm: syz.9.2613 Tainted: G L syzkaller #0 PREEMPT(full) [ 953.889133][T16661] Tainted: [L]=SOFTLOCKUP [ 953.889137][T16661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 953.889144][T16661] Call Trace: [ 953.889148][T16661] [ 953.889154][T16661] dump_stack_lvl+0x100/0x190 [ 953.889174][T16661] dump_header+0xfb/0x606 [ 953.889188][T16661] oom_kill_process.cold+0xd/0x380 [ 953.889202][T16661] out_of_memory+0x340/0x14f0 [ 953.889220][T16661] ? __pfx_out_of_memory+0x10/0x10 [ 953.889237][T16661] mem_cgroup_out_of_memory+0xc6/0x130 [ 953.889250][T16661] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 953.889260][T16661] ? find_held_lock+0x2b/0x80 [ 953.889279][T16661] ? do_raw_spin_unlock+0x145/0x1e0 [ 953.889293][T16661] ? _raw_spin_unlock+0x28/0x50 [ 953.889317][T16661] try_charge_memcg+0x783/0xf60 [ 953.889336][T16661] ? __pfx_try_charge_memcg+0x10/0x10 [ 953.889350][T16661] ? find_held_lock+0x2b/0x80 [ 953.889365][T16661] ? rcu_read_unlock+0x17/0x60 [ 953.889380][T16661] ? rcu_read_unlock+0x17/0x60 [ 953.889395][T16661] ? find_held_lock+0x2b/0x80 [ 953.889410][T16661] ? rcu_read_unlock+0x17/0x60 [ 953.889428][T16661] charge_memcg+0x1ae/0x210 [ 953.889444][T16661] __mem_cgroup_charge+0x2b/0x1c0 [ 953.889463][T16661] shmem_alloc_and_add_folio+0x451/0xd40 [ 953.889482][T16661] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 953.889499][T16661] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 953.889518][T16661] shmem_get_folio_gfp+0x75b/0x1980 [ 953.889537][T16661] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 953.889554][T16661] ? vm_normal_page+0x1d1/0x380 [ 953.889565][T16661] ? __pfx_vm_normal_page+0x10/0x10 [ 953.889580][T16661] shmem_write_begin+0x1a4/0x420 [ 953.889597][T16661] ? __pfx_shmem_write_begin+0x10/0x10 [ 953.889613][T16661] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 953.889633][T16661] generic_perform_write+0x292/0xa40 [ 953.889646][T16661] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 953.889667][T16661] ? __pfx_generic_perform_write+0x10/0x10 [ 953.889682][T16661] ? file_update_time_flags+0x38c/0x520 [ 953.889700][T16661] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 953.889717][T16661] shmem_file_write_iter+0x10e/0x140 [ 953.889736][T16661] __kernel_write_iter+0x2ac/0x930 [ 953.889754][T16661] ? __pfx___kernel_write_iter+0x10/0x10 [ 953.889773][T16661] ? cgroup1_freezing+0x12c/0x3b0 [ 953.889793][T16661] ? cgroup1_freezing+0x136/0x3b0 [ 953.889810][T16661] ? freezing_slow_path+0xb5/0x1a0 [ 953.889828][T16661] dump_user_range+0x3f9/0xad0 [ 953.889849][T16661] ? __pfx_dump_user_range+0x10/0x10 [ 953.889871][T16661] ? __pfx_writenote+0x10/0x10 [ 953.889882][T16661] ? elf_core_dump+0x1f25/0x3d20 [ 953.889895][T16661] elf_core_dump+0x2d68/0x3d20 [ 953.889914][T16661] ? __pfx_elf_core_dump+0x10/0x10 [ 953.889925][T16661] ? kasan_save_stack+0x3f/0x50 [ 953.889936][T16661] ? kasan_save_stack+0x30/0x50 [ 953.889947][T16661] ? kasan_save_track+0x14/0x30 [ 953.889958][T16661] ? __kasan_kmalloc+0xaa/0xb0 [ 953.889969][T16661] ? vfs_coredump+0x21f6/0x54a0 [ 953.889984][T16661] ? get_signal+0x1f2a/0x21e0 [ 953.889995][T16661] ? arch_do_signal_or_restart+0x91/0x7e0 [ 953.890015][T16661] ? 0xffffffffff600000 [ 953.890041][T16661] ? lock_acquire+0x1d1/0x380 [ 953.890052][T16661] ? get_signal+0x1f2a/0x21e0 [ 953.890068][T16661] ? vfs_coredump+0x281a/0x54a0 [ 953.890084][T16661] vfs_coredump+0x281a/0x54a0 [ 953.890106][T16661] ? __pfx_vfs_coredump+0x10/0x10 [ 953.890123][T16661] ? __lock_acquire+0x4c5/0x1ec0 [ 953.890138][T16661] ? __lock_acquire+0x4c5/0x1ec0 [ 953.890150][T16661] ? lock_acquire+0x1d1/0x380 [ 953.890161][T16661] ? unwind_next_frame+0xbd/0x2090 [ 953.890184][T16661] ? bpf_ksym_find+0x128/0x1c0 [ 953.890205][T16661] ? __lock_acquire+0x4c5/0x1ec0 [ 953.890218][T16661] ? do_raw_spin_unlock+0x145/0x1e0 [ 953.890232][T16661] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 953.890251][T16661] ? rcu_is_watching+0x13/0xc0 [ 953.890265][T16661] ? trace_hrtimer_start+0x77/0x220 [ 953.890281][T16661] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 953.890308][T16661] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 953.890322][T16661] ? finish_task_switch.isra.0+0x3b3/0x10d0 [ 953.890337][T16661] ? rcu_is_watching+0x13/0xc0 [ 953.890351][T16661] ? trace_sched_exit_tp+0x120/0x160 [ 953.890365][T16661] ? __schedule+0x126b/0x6920 [ 953.890384][T16661] ? __pfx___schedule+0x10/0x10 [ 953.890396][T16661] ? proc_coredump_connector+0x2d3/0x4f0 [ 953.890411][T16661] ? __pfx_proc_coredump_connector+0x10/0x10 [ 953.890433][T16661] get_signal+0x1f2a/0x21e0 [ 953.890450][T16661] ? __pfx_get_signal+0x10/0x10 [ 953.890466][T16661] arch_do_signal_or_restart+0x91/0x7e0 [ 953.890483][T16661] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 953.890508][T16661] irqentry_exit+0x402/0xa10 [ 953.890523][T16661] asm_exc_page_fault+0x26/0x30 [ 953.890534][T16661] RIP: 0033:0x7f2d6dd9e161 [ 953.890544][T16661] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 953.890555][T16661] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 953.890564][T16661] RAX: 0000000000000000 RBX: 00007f2d6e026180 RCX: 00007f2d6dd9e159 [ 953.890571][T16661] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 953.890578][T16661] RBP: 00007f2d6de35024 R08: 0000000000000000 R09: 0000000000000000 [ 953.890585][T16661] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 953.890592][T16661] R13: 00007f2d6e026218 R14: 00007f2d6e026180 R15: 00007ffcdca13d28 [ 953.890606][T16661] [ 953.920280][T16661] memory: usage 307200kB, limit 307200kB, failcnt 29137 [ 953.920303][T16661] memory+swap: usage 432128kB, limit 9007199254740988kB, failcnt 0 [ 953.920314][T16661] kmem: usage 4280kB, limit 9007199254740988kB, failcnt 0 [ 953.920324][T16661] Memory cgroup stats for /syz9: [ 953.920420][T16661] cache 310005760 [ 953.920428][T16661] rss 167936 [ 953.920434][T16661] rss_huge 0 [ 953.920440][T16661] shmem 310005760 [ 953.920446][T16661] mapped_file 23511040 [ 953.920452][T16661] dirty 0 [ 953.920457][T16661] writeback 0 [ 953.920463][T16661] workingset_refault_anon 12 [ 953.920470][T16661] workingset_refault_file 0 [ 953.920476][T16661] swap 127938560 [ 953.920482][T16661] swapcached 128036864 [ 953.920488][T16661] pgpgin 481111 [ 953.920494][T16661] pgpgout 405385 [ 953.920500][T16661] pgfault 163549 [ 953.920505][T16661] pgmajfault 14 [ 953.920511][T16661] inactive_anon 176844800 [ 953.920517][T16661] active_anon 133328896 [ 953.920523][T16661] inactive_file 0 [ 953.920529][T16661] active_file 0 [ 953.920535][T16661] unevictable 0 [ 953.920540][T16661] hierarchical_memory_limit 314572800 [ 953.920547][T16661] hierarchical_memsw_limit 9223372036854771712 [ 953.920554][T16661] total_cache 310005760 [ 953.920561][T16661] total_rss 167936 [ 953.920566][T16661] total_rss_huge 0 [ 953.920572][T16661] total_shmem 310005760 [ 953.920578][T16661] total_mapped_file 23511040 [ 953.920585][T16661] total_dirty 0 [ 953.920591][T16661] total_writeback 0 [ 953.920597][T16661] total_workingset_refault_anon 12 [ 953.920603][T16661] total_workingset_refault_file 0 [ 953.920610][T16661] total_swap 127938560 [ 953.920616][T16661] total_swapcached 128036864 [ 953.920622][T16661] total_pgpgin 484182 [ 953.920628][T16661] total_pgpgout 408456 [ 953.920634][T16661] total_pgfault 166623 [ 953.920640][T16661] total_pgmajfault 14 [ 953.920646][T16661] total_inactive_anon 176844800 [ 953.920653][T16661] total_active_anon 133328896 [ 953.920659][T16661] total_inactive_file 0 [ 953.920665][T16661] total_active_file 0 [ 953.920671][T16661] total_unevictable 0 [ 953.920677][T16661] anon_cost 0 [ 953.920683][T16661] file_cost 0 [ 953.920689][T16661] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.2613,pid=16669,uid=0 [ 953.920764][T16661] Memory cgroup out of memory: Killed process 16669 (syz.9.2613) total-vm:98940kB, anon-rss:1280kB, file-rss:57668kB, shmem-rss:11480kB, UID:0 pgtables:224kB oom_score_adj:1000 [ 955.626746][T16663] syz.9.2613 (16663) used greatest stack depth: 18256 bytes left [ 964.874786][ T30] audit: type=1400 audit(2000000494.340:1116): avc: denied { link } for pid=16713 comm="syz.8.2625" name="#6a" dev="tmpfs" ino=1127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 964.878197][ T30] audit: type=1400 audit(2000000494.350:1117): avc: denied { rename } for pid=16713 comm="syz.8.2625" name="#6b" dev="tmpfs" ino=1127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 965.265337][T16731] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2630'. [ 965.266445][ T25] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 965.460651][ T25] usb 8-1: Using ep0 maxpacket: 16 [ 965.485370][ T25] usb 8-1: New USB device found, idVendor=9022, idProduct=d632, bcdDevice=d7.81 [ 965.515790][ T25] usb 8-1: config 206 has an invalid interface number: 66 but max is 0 [ 965.524710][ T25] usb 8-1: config 206 has no interface number 0 [ 965.524812][ T25] usb 8-1: config 206 interface 66 has no altsetting 0 [ 965.551804][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.551843][ T25] usb 8-1: Product: syz [ 965.551880][ T25] usb 8-1: Manufacturer: syz [ 965.551897][ T25] usb 8-1: SerialNumber: syz [ 965.643734][T12531] usb 9-1: new full-speed USB device number 58 using dummy_hcd [ 965.979671][T16731] fuse: Unknown parameter '000000000000000000070x0000000000000008' [ 965.992833][T16738] busy [ 966.435748][T16746] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 966.444715][T16746] UDF-fs: Scanning with blocksize 512 failed [ 966.457825][T16746] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 966.464703][T16746] UDF-fs: Scanning with blocksize 1024 failed [ 966.465733][T16746] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 966.465748][T16746] UDF-fs: Scanning with blocksize 2048 failed [ 966.465911][T16746] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 966.465923][T16746] UDF-fs: Scanning with blocksize 4096 failed [ 966.582247][ T25] dvb-usb: found a 'TeVii S632 USB' in warm state. [ 966.589422][T12531] usb 9-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 966.599353][T12531] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 966.607002][ T25] dw2102: su3000_power_ctrl: 1, initialized 0 [ 966.607020][ T25] dvb-usb: bulk message failed: -22 (2/0) [ 966.614517][T12531] usb 9-1: can't read configurations, error -71 [ 966.631099][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 966.641338][ T25] dvbdev: DVB: registering new adapter (TeVii S632 USB) [ 966.648522][ T25] usb 8-1: media controller created [ 966.648551][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 966.648570][ T25] dw2102: i2c transfer failed. [ 966.648582][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 966.648594][ T25] dw2102: i2c transfer failed. [ 966.648604][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 966.648616][ T25] dw2102: i2c transfer failed. [ 966.648626][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 966.648639][ T25] dw2102: i2c transfer failed. [ 966.648649][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 966.648661][ T25] dw2102: i2c transfer failed. [ 966.648672][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 966.648683][ T25] dw2102: i2c transfer failed. [ 966.648690][ T25] dvb-usb: MAC address: 02:02:02:02:02:02 [ 966.766679][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 966.784313][ T10] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 966.793293][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 966.799149][ T25] dw2102: command 0x51 transfer failed. [ 966.828142][ T25] DVB: Unable to find symbol m88rs2000_attach() [ 966.828164][ T25] dvb-usb: no frontend was attached by 'TeVii S632 USB' [ 966.903406][ T25] rc_core: IR keymap rc-su3000 not found [ 966.903438][ T25] Registered IR keymap rc-empty [ 966.904884][ T25] rc rc0: TeVii S632 USB as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 966.906904][ T25] input: TeVii S632 USB as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input172 [ 966.925624][ T25] dvb-usb: schedule remote query interval to 150 msecs. [ 966.925641][ T25] dw2102: su3000_power_ctrl: 0, initialized 1 [ 966.925651][ T25] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 966.933865][ T25] usb 8-1: USB disconnect, device number 56 [ 966.943956][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 966.958631][ T10] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 966.965603][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 966.965618][ T10] usb 5-1: config 0 has no interface number 0 [ 966.996553][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.996576][ T10] usb 5-1: Product: syz [ 966.996591][ T10] usb 5-1: Manufacturer: syz [ 966.996602][ T10] usb 5-1: SerialNumber: syz [ 967.024876][ T10] usb 5-1: config 0 descriptor?? [ 967.054447][ T10] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 967.054485][ T10] usb 5-1: selecting invalid altsetting 1 [ 967.054511][ T10] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 967.088540][ T10] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 967.088827][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 967.088877][ T10] usb 5-1: media controller created [ 967.142740][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 967.177598][ T25] dvb-usb: TeVii S632 USB successfully deinitialized and disconnected. [ 967.249986][T16760] FAULT_INJECTION: forcing a failure. [ 967.249986][T16760] name failslab, interval 1, probability 0, space 0, times 0 [ 967.263642][T16760] CPU: 0 UID: 0 PID: 16760 Comm: syz.8.2634 Tainted: G L syzkaller #0 PREEMPT(full) [ 967.263682][T16760] Tainted: [L]=SOFTLOCKUP [ 967.263689][T16760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 967.263699][T16760] Call Trace: [ 967.263706][T16760] [ 967.263713][T16760] dump_stack_lvl+0x100/0x190 [ 967.263744][T16760] should_fail_ex.cold+0x5/0xa [ 967.263766][T16760] ? __netlink_lookup+0x652/0x900 [ 967.263792][T16760] should_failslab+0xc2/0x120 [ 967.263813][T16760] kmem_cache_alloc_noprof+0x92/0x6a0 [ 967.263832][T16760] ? skb_clone+0x190/0x400 [ 967.263853][T16760] skb_clone+0x190/0x400 [ 967.263871][T16760] netlink_deliver_tap+0xaed/0xcc0 [ 967.263900][T16760] netlink_unicast+0x62b/0x850 [ 967.263929][T16760] ? __pfx_netlink_unicast+0x10/0x10 [ 967.263952][T16760] ? __pfx_sock_has_perm+0x10/0x10 [ 967.263980][T16760] netlink_sendmsg+0x8b0/0xda0 [ 967.264008][T16760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 967.264035][T16760] ? selinux_socket_sendmsg+0x198/0x2f0 [ 967.264065][T16760] ____sys_sendmsg+0xa4d/0xbe0 [ 967.264086][T16760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 967.264113][T16760] ? __pfx_____sys_sendmsg+0x10/0x10 [ 967.264140][T16760] ? lock_acquire+0x1d1/0x380 [ 967.264157][T16760] ? get_pid_task+0x2a/0x250 [ 967.264182][T16760] ___sys_sendmsg+0x190/0x1e0 [ 967.264206][T16760] ? __pfx____sys_sendmsg+0x10/0x10 [ 967.264229][T16760] ? get_pid_task+0x106/0x250 [ 967.264258][T16760] ? find_held_lock+0x2b/0x80 [ 967.264290][T16760] __sys_sendmsg+0x160/0x210 [ 967.264305][T16760] ? __pfx___sys_sendmsg+0x10/0x10 [ 967.264332][T16760] do_syscall_64+0x123/0x790 [ 967.264354][T16760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.264372][T16760] RIP: 0033:0x7fa9a239e159 [ 967.264387][T16760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.264401][T16760] RSP: 002b:00007fa9a32ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 967.264417][T16760] RAX: ffffffffffffffda RBX: 00007fa9a2625fa0 RCX: 00007fa9a239e159 [ 967.264426][T16760] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000004 [ 967.264435][T16760] RBP: 00007fa9a32ac090 R08: 0000000000000000 R09: 0000000000000000 [ 967.264444][T16760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.264453][T16760] R13: 00007fa9a2626038 R14: 00007fa9a2625fa0 R15: 00007ffc5a103d18 [ 967.264472][T16760] [ 967.589621][ T30] audit: type=1400 audit(2000000497.060:1118): avc: denied { bind } for pid=16764 comm="syz.8.2636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 967.643435][ T25] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 967.723870][ T30] audit: type=1400 audit(2000000497.200:1119): avc: denied { create } for pid=16766 comm="syz.8.2637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 967.797397][ T25] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 967.807896][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.809860][ T25] usb 8-1: config 0 descriptor?? [ 967.982454][ T30] audit: type=1400 audit(2000000497.450:1120): avc: denied { kexec_image_load } for pid=16769 comm="syz.9.2638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 968.027820][ T25] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 968.214080][ T10] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 968.214131][ T10] zl10353_read_register: readreg error (reg=127, ret==-110) [ 968.356895][ T5814] blk_print_req_error: 130 callbacks suppressed [ 968.356936][ T5814] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 968.356964][ T5814] buffer_io_error: 138 callbacks suppressed [ 968.356977][ T5814] Buffer I/O error on dev nbd0, logical block 0, async page read [ 968.386908][ T5814] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 968.386945][ T5814] Buffer I/O error on dev nbd0, logical block 1, async page read [ 968.390021][ T2397] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 968.390048][ T2397] Buffer I/O error on dev nbd0, logical block 2, async page read [ 968.390062][ T2397] Buffer I/O error on dev nbd0, logical block 3, async page read [ 968.390157][ T2397] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 968.398232][ T2397] Buffer I/O error on dev nbd0, logical block 0, async page read [ 968.402701][ T2397] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 968.402728][ T2397] Buffer I/O error on dev nbd0, logical block 1, async page read [ 968.402802][ T2397] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 968.402821][ T2397] Buffer I/O error on dev nbd0, logical block 2, async page read [ 968.402888][ T2397] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 968.402907][ T2397] Buffer I/O error on dev nbd0, logical block 3, async page read [ 968.402985][ T2397] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 968.403004][ T2397] Buffer I/O error on dev nbd0, logical block 0, async page read [ 968.403069][ T2397] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 968.403088][ T2397] Buffer I/O error on dev nbd0, logical block 1, async page read [ 968.403187][ T2397] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 968.414231][T16773] ldm_validate_partition_table(): Disk read failed. [ 968.415672][T16773] Dev nbd0: unable to read RDB block 0 [ 968.418573][T16773] nbd0: unable to read partition table [ 968.432142][T16773] syz.0.2639: attempt to access beyond end of device [ 968.432142][T16773] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=63 [ 968.432188][T16773] gfs2: error -5 reading superblock [ 968.862453][ T10] usb 5-1: USB disconnect, device number 101 [ 969.331480][T16785] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2644'. [ 970.119733][T16789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2643'. [ 970.470487][ T25] [drm:udl_init] *ERROR* Selecting channel failed [ 970.489158][ T25] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 1 [ 970.497592][ T25] [drm] Initialized udl on minor 1 [ 970.506656][ T25] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 970.514947][ T25] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 970.523367][T12533] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 970.531736][T12533] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 970.531904][T12533] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 970.558098][ T25] usb 8-1: USB disconnect, device number 57 [ 970.977037][T16811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=16811 comm=syz.0.2646 [ 971.296504][T16813] netlink: 'syz.4.2650': attribute type 4 has an invalid length. [ 971.503505][T12533] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 971.723440][T12533] usb 9-1: Using ep0 maxpacket: 32 [ 971.779042][T12533] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 971.798996][T12533] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 971.807228][T12533] usb 9-1: config 0 has no interface number 0 [ 971.813441][T12533] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 971.824645][T12533] usb 9-1: config 0 interface 85 has no altsetting 0 [ 971.835256][T12533] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.835292][T12533] usb 9-1: Product: syz [ 971.835309][T12533] usb 9-1: Manufacturer: syz [ 971.835326][T12533] usb 9-1: SerialNumber: syz [ 971.864918][T12533] usb 9-1: config 0 descriptor?? [ 972.103873][T16797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.124286][T16797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.135810][ T25] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 972.150255][T12533] appletouch 9-1:0.85: Failed to read mode from device. [ 972.158374][T12533] appletouch 9-1:0.85: probe with driver appletouch failed with error -5 [ 972.289097][T12533] usb 9-1: USB disconnect, device number 60 [ 972.348941][ T25] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 972.367467][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.443025][ T25] usb 8-1: config 0 descriptor?? [ 972.663098][ T25] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 972.893460][T12140] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 972.923931][ T25] [drm:udl_init] *ERROR* Selecting channel failed [ 972.951157][ T30] audit: type=1400 audit(2000000502.420:1121): avc: denied { read } for pid=16835 comm="syz.0.2657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 972.995851][ T25] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 1 [ 973.009613][ T25] [drm] Initialized udl on minor 1 [ 973.016481][ T25] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 973.024715][ T25] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 973.050480][ T25] usb 8-1: USB disconnect, device number 58 [ 973.051180][T12533] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 973.055247][T12140] usb 10-1: Using ep0 maxpacket: 16 [ 973.076919][T12533] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 973.080078][T12140] usb 10-1: New USB device found, idVendor=9022, idProduct=d632, bcdDevice=d7.81 [ 973.085618][T12140] usb 10-1: config 206 has an invalid interface number: 66 but max is 0 [ 973.085641][T12140] usb 10-1: config 206 has no interface number 0 [ 973.085674][T12140] usb 10-1: config 206 interface 66 has no altsetting 0 [ 973.098444][T12140] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.098467][T12140] usb 10-1: Product: syz [ 973.098480][T12140] usb 10-1: Manufacturer: syz [ 973.098492][T12140] usb 10-1: SerialNumber: syz [ 973.626047][T16829] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 973.635595][T16829] UDF-fs: Scanning with blocksize 512 failed [ 973.643892][T16829] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 973.653877][T16829] UDF-fs: Scanning with blocksize 1024 failed [ 973.681408][T16829] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 973.690128][T16829] UDF-fs: Scanning with blocksize 2048 failed [ 973.707245][T16829] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 973.715897][T16829] UDF-fs: Scanning with blocksize 4096 failed [ 974.541309][T12140] dvb-usb: found a 'TeVii S632 USB' in warm state. [ 974.541359][T12140] dw2102: su3000_power_ctrl: 1, initialized 0 [ 974.541388][T12140] dvb-usb: bulk message failed: -22 (2/0) [ 974.544002][T12140] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 974.544579][T12140] dvbdev: DVB: registering new adapter (TeVii S632 USB) [ 974.544613][T12140] usb 10-1: media controller created [ 974.544633][T12140] dvb-usb: bulk message failed: -22 (6/0) [ 974.544644][T12140] dw2102: i2c transfer failed. [ 974.544655][T12140] dvb-usb: bulk message failed: -22 (6/0) [ 974.544665][T12140] dw2102: i2c transfer failed. [ 974.544674][T12140] dvb-usb: bulk message failed: -22 (6/0) [ 974.544685][T12140] dw2102: i2c transfer failed. [ 974.544694][T12140] dvb-usb: bulk message failed: -22 (6/0) [ 974.544704][T12140] dw2102: i2c transfer failed. [ 974.544714][T12140] dvb-usb: bulk message failed: -22 (6/0) [ 974.544724][T12140] dw2102: i2c transfer failed. [ 974.544734][T12140] dvb-usb: bulk message failed: -22 (6/0) [ 974.544745][T12140] dw2102: i2c transfer failed. [ 974.544751][T12140] dvb-usb: MAC address: 02:02:02:02:02:02 [ 974.552134][T12140] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 974.561165][T12140] dvb-usb: bulk message failed: -22 (1/0) [ 974.561181][T12140] dw2102: command 0x51 transfer failed. [ 974.614099][T12140] DVB: Unable to find symbol m88rs2000_attach() [ 974.614113][T12140] dvb-usb: no frontend was attached by 'TeVii S632 USB' [ 974.720179][T12140] rc_core: IR keymap rc-su3000 not found [ 974.722644][T12140] Registered IR keymap rc-empty [ 974.723864][T12140] rc rc0: TeVii S632 USB as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0 [ 974.750430][T12140] input: TeVii S632 USB as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0/input174 [ 974.754439][T12140] dvb-usb: schedule remote query interval to 150 msecs. [ 974.754456][T12140] dw2102: su3000_power_ctrl: 0, initialized 1 [ 974.754467][T12140] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 974.764696][T12140] usb 10-1: USB disconnect, device number 54 [ 974.844691][T16850] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2662'. [ 975.000841][T16854] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2662'. [ 975.032540][T12534] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 975.204160][ T10] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 975.321099][T12140] dvb-usb: TeVii S632 USB successfully deinitialized and disconnected. [ 975.331094][ T9] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 975.371487][ T10] usb 8-1: New USB device found, idVendor=045e, idProduct=00db, bcdDevice= 0.00 [ 975.394177][ T10] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 975.407856][ T10] usb 8-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 975.407937][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 975.424277][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.454597][T12534] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 975.505565][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 975.520694][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 975.528669][T12534] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.566696][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 975.576723][ T9] usb 1-1: config 0 has no interface number 0 [ 975.576919][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 975.577045][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.661354][ T10] usb 8-1: config 0 descriptor?? [ 975.736105][T12534] usb 9-1: config 0 descriptor?? [ 975.906882][ T9] usb 1-1: config 0 descriptor?? [ 976.125171][T16853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.126966][T16853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.377440][T12534] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 976.578843][ T9] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 976.983510][T16858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2663'. [ 977.269536][ T9] usb 1-1: USB disconnect, device number 72 [ 977.292131][ T10] input: HID 045e:00db as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:00DB.0013/input/input175 [ 977.370591][ T10] microsoft 0003:045E:00DB.0013: input,hidraw0: USB HID v36.2c Joystick [HID 045e:00db] on usb-dummy_hcd.7-1/input0 [ 978.597712][T12534] [drm:udl_init] *ERROR* Selecting channel failed [ 978.681566][T12534] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 1 [ 978.681614][T12534] [drm] Initialized udl on minor 1 [ 978.685435][T12534] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 978.685763][T12534] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 978.701803][T12534] usb 9-1: USB disconnect, device number 61 [ 978.702507][ T25] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 978.702973][ T25] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 978.724907][T16733] udevd[16733]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0xc022d, key code 103): Invalid argument [ 978.724991][T16733] udevd[16733]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0xc022e, key code 108): Invalid argument [ 979.332117][ T10] usb 8-1: USB disconnect, device number 59 [ 979.649733][T16880] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2671'. [ 980.165352][T16893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2675'. [ 981.037358][T16900] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2674'. [ 981.413223][T16902] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2670'. [ 981.952347][ T30] audit: type=1804 audit(2000000511.420:1122): pid=16909 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.2680" name="bus" dev="ramfs" ino=62216 res=1 errno=0 [ 982.044074][T12140] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 982.069017][ T30] audit: type=1804 audit(2000000511.540:1123): pid=16911 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.2680" name="bus" dev="ramfs" ino=62216 res=1 errno=0 [ 982.196868][T12140] usb 5-1: Using ep0 maxpacket: 16 [ 982.197431][T12140] usb 5-1: New USB device found, idVendor=9022, idProduct=d632, bcdDevice=d7.81 [ 982.198239][T12140] usb 5-1: config 206 has an invalid interface number: 66 but max is 0 [ 982.198258][T12140] usb 5-1: config 206 has no interface number 0 [ 982.198280][T12140] usb 5-1: config 206 interface 66 has no altsetting 0 [ 982.199874][T12140] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.199893][T12140] usb 5-1: Product: syz [ 982.199905][T12140] usb 5-1: Manufacturer: syz [ 982.199919][T12140] usb 5-1: SerialNumber: syz [ 982.373865][T12534] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 982.398291][T16920] dvmrp6: entered allmulticast mode [ 982.477217][T16906] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 982.478122][T16906] UDF-fs: Scanning with blocksize 512 failed [ 982.478821][T16906] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 982.478841][T16906] UDF-fs: Scanning with blocksize 1024 failed [ 982.480649][T16906] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 982.480669][T16906] UDF-fs: Scanning with blocksize 2048 failed [ 982.480890][T16906] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 982.481669][T16906] UDF-fs: Scanning with blocksize 4096 failed [ 982.500342][T12140] dvb-usb: found a 'TeVii S632 USB' in warm state. [ 982.502676][T12140] dw2102: su3000_power_ctrl: 1, initialized 0 [ 982.502712][T12140] dvb-usb: bulk message failed: -22 (2/0) [ 982.510885][T12140] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 982.512285][T12140] dvbdev: DVB: registering new adapter (TeVii S632 USB) [ 982.512340][T12140] usb 5-1: media controller created [ 982.512366][T12140] dvb-usb: bulk message failed: -22 (6/0) [ 982.516348][T12140] dw2102: i2c transfer failed. [ 982.516372][T12140] dvb-usb: bulk message failed: -22 (6/0) [ 982.516403][T12140] dw2102: i2c transfer failed. [ 982.516418][T12140] dvb-usb: bulk message failed: -22 (6/0) [ 982.516433][T12140] dw2102: i2c transfer failed. [ 982.516447][T12140] dvb-usb: bulk message failed: -22 (6/0) [ 982.516462][T12140] dw2102: i2c transfer failed. [ 982.516476][T12140] dvb-usb: bulk message failed: -22 (6/0) [ 982.516491][T12140] dw2102: i2c transfer failed. [ 982.516505][T12140] dvb-usb: bulk message failed: -22 (6/0) [ 982.516520][T12140] dw2102: i2c transfer failed. [ 982.516531][T12140] dvb-usb: MAC address: 02:02:02:02:02:02 [ 982.553189][T12140] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 982.592743][T12140] dvb-usb: bulk message failed: -22 (1/0) [ 982.592759][T12140] dw2102: command 0x51 transfer failed. [ 982.668243][T12534] usb 10-1: unable to get BOS descriptor or descriptor too short [ 982.668282][T12534] usb 10-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 982.677557][T12140] DVB: Unable to find symbol m88rs2000_attach() [ 982.677570][T12140] dvb-usb: no frontend was attached by 'TeVii S632 USB' [ 982.685880][T12534] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 982.746444][T12534] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.746471][T12534] usb 10-1: Product: syz [ 982.746486][T12534] usb 10-1: Manufacturer: syz [ 982.746500][T12534] usb 10-1: SerialNumber: syz [ 982.806358][T12140] rc_core: IR keymap rc-su3000 not found [ 982.806376][T12140] Registered IR keymap rc-empty [ 982.808310][T12140] rc rc0: TeVii S632 USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 982.816109][T12140] input: TeVii S632 USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input176 [ 982.821247][T12140] dvb-usb: schedule remote query interval to 150 msecs. [ 982.821266][T12140] dw2102: su3000_power_ctrl: 0, initialized 1 [ 982.821278][T12140] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 982.831016][T12140] usb 5-1: USB disconnect, device number 102 [ 983.048409][T12140] dvb-usb: TeVii S632 USB successfully deinitialized and disconnected. [ 983.142634][T12534] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 983.449628][T16936] syzkaller0: entered promiscuous mode [ 983.459905][T16936] syzkaller0: entered allmulticast mode [ 983.578608][T12534] usb 10-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 983.685695][T12534] usb 10-1: USB disconnect, device number 55 [ 983.799373][T16753] udevd[16753]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 984.321763][T16950] dvmrp6: entered allmulticast mode [ 984.733507][T12534] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 984.923997][T12534] usb 1-1: Using ep0 maxpacket: 8 [ 984.930169][T12534] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 984.944216][T12534] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 984.944253][T12534] usb 1-1: config 0 has no interface number 0 [ 984.944289][T12534] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 984.944328][T12534] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.985037][T12534] usb 1-1: config 0 descriptor?? [ 985.003253][T12534] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 985.003974][ T10] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 985.155671][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 985.156181][ T10] usb 8-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 985.157042][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 985.157066][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 985.157093][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.161544][ T10] usb 8-1: config 0 descriptor?? [ 986.108382][ T10] usbhid 8-1:0.0: can't add hid device: -71 [ 986.108504][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 986.362133][T12534] usb 1-1: USB disconnect, device number 73 [ 986.441524][ T10] usb 8-1: USB disconnect, device number 60 [ 986.732339][ T30] audit: type=1400 audit(2000000516.200:1124): avc: denied { ioctl } for pid=16978 comm="syz.4.2704" path="socket:[62689]" dev="sockfs" ino=62689 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 986.826055][T12531] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 986.900563][T16984] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 986.900591][T16984] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 986.949914][T16984] vhci_hcd vhci_hcd.0: Device attached [ 986.993986][T12531] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 987.004234][T12531] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.007307][T16991] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 987.007321][T16991] UDF-fs: Scanning with blocksize 512 failed [ 987.014674][T16991] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 987.014691][T16991] UDF-fs: Scanning with blocksize 1024 failed [ 987.014881][T16991] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 987.014892][T16991] UDF-fs: Scanning with blocksize 2048 failed [ 987.015044][T16991] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 987.015055][T16991] UDF-fs: Scanning with blocksize 4096 failed [ 987.069052][T12531] usb 10-1: config 0 descriptor?? [ 987.155280][ T10] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 987.261404][T16996] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2710'. [ 987.270631][T12534] usb 48-1: SetAddress Request (2) to port 0 [ 987.270691][T12534] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 987.284539][T12531] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 987.314575][ T10] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 987.324178][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.326197][ T10] usb 9-1: config 0 descriptor?? [ 987.496919][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 987.497015][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 987.558583][ T10] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 988.481789][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 988.495054][ T10] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 988.495101][ T10] [drm] Initialized udl on minor 2 [ 988.496105][ T10] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 988.496536][ T10] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 988.498769][ T10] usb 9-1: USB disconnect, device number 62 [ 988.499725][T12524] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 988.698802][T16988] vhci_hcd: connection reset by peer [ 988.699127][ T1405] vhci_hcd vhci_hcd.7: stop threads [ 988.699147][ T1405] vhci_hcd vhci_hcd.7: release socket [ 988.700552][ T1405] vhci_hcd vhci_hcd.7: disconnect device [ 989.577826][T12531] [drm:udl_init] *ERROR* Selecting channel failed [ 989.591875][T12531] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 1 [ 989.591900][T12531] [drm] Initialized udl on minor 1 [ 989.599670][T12531] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 989.599942][T12531] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 989.610175][T12531] usb 10-1: USB disconnect, device number 56 [ 989.612814][ T25] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 989.669722][T17009] syzkaller0: entered promiscuous mode [ 989.676034][T17009] syzkaller0: entered allmulticast mode [ 989.912741][T17013] syzkaller0: entered promiscuous mode [ 989.912784][T17013] syzkaller0: entered allmulticast mode [ 989.962215][T17018] netlink: 148 bytes leftover after parsing attributes in process `syz.8.2718'. [ 989.968974][T17013] tipc: Started in network mode [ 989.969002][T17013] tipc: Node identity 46a5ac6ee20d, cluster identity 4711 [ 989.969159][T17013] tipc: Enabled bearer , priority 0 [ 989.997731][T17013] tipc: Resetting bearer [ 990.019937][T17012] tipc: Resetting bearer [ 990.050653][T17018] netlink: 148 bytes leftover after parsing attributes in process `syz.8.2718'. [ 990.104964][T17012] tipc: Disabling bearer [ 990.215534][T17022] blktrace: Concurrent blktraces are not allowed on loop16 [ 990.274639][ T25] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 990.444214][ T25] usb 10-1: Using ep0 maxpacket: 8 [ 990.453300][ T25] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 990.467814][ T25] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 990.476209][ T25] usb 10-1: config 0 has no interface number 0 [ 990.483179][ T25] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 990.495235][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.561691][ T25] usb 10-1: config 0 descriptor?? [ 990.790202][ T25] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 990.944623][T12531] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 991.080667][ T25] usb 10-1: USB disconnect, device number 57 [ 991.107955][T12531] usb 8-1: Using ep0 maxpacket: 8 [ 991.113972][T12531] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 991.127664][T12531] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 991.136127][T12531] usb 8-1: config 0 has no interface number 0 [ 991.142435][T12531] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 991.142492][T12531] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.165717][T12531] usb 8-1: config 0 descriptor?? [ 991.299513][T12531] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 992.216310][T12531] usb 8-1: USB disconnect, device number 61 [ 992.264150][T12524] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 992.331514][T12534] usb 48-1: device descriptor read/8, error -110 [ 992.332765][T17045] overlayfs: failed to resolve './file0': -2 [ 992.416303][T12524] usb 1-1: Using ep0 maxpacket: 16 [ 992.423014][T12524] usb 1-1: New USB device found, idVendor=9022, idProduct=d632, bcdDevice=d7.81 [ 992.441696][T12524] usb 1-1: config 206 has an invalid interface number: 66 but max is 0 [ 992.441734][T12524] usb 1-1: config 206 has no interface number 0 [ 992.441768][T12524] usb 1-1: config 206 interface 66 has no altsetting 0 [ 992.471263][T12524] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.471300][T12524] usb 1-1: Product: syz [ 992.471325][T12524] usb 1-1: Manufacturer: syz [ 992.471342][T12524] usb 1-1: SerialNumber: syz [ 992.773647][T17043] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2725'. [ 992.842657][T17035] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 992.850666][T17035] UDF-fs: Scanning with blocksize 512 failed [ 992.861787][T17035] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 992.870067][T17035] UDF-fs: Scanning with blocksize 1024 failed [ 992.880918][T17035] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 992.913414][ T25] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 992.953404][T17035] UDF-fs: Scanning with blocksize 2048 failed [ 992.953712][T17035] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 992.953731][T17035] UDF-fs: Scanning with blocksize 4096 failed [ 992.995413][T12534] usb usb48-port1: attempt power cycle [ 993.013171][T12524] dvb-usb: found a 'TeVii S632 USB' in warm state. [ 993.013214][T12524] dw2102: su3000_power_ctrl: 1, initialized 0 [ 993.013238][T12524] dvb-usb: bulk message failed: -22 (2/0) [ 993.017612][T12524] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 993.019392][T12524] dvbdev: DVB: registering new adapter (TeVii S632 USB) [ 993.019436][T12524] usb 1-1: media controller created [ 993.019459][T12524] dvb-usb: bulk message failed: -22 (6/0) [ 993.019473][T12524] dw2102: i2c transfer failed. [ 993.019488][T12524] dvb-usb: bulk message failed: -22 (6/0) [ 993.019502][T12524] dw2102: i2c transfer failed. [ 993.019515][T12524] dvb-usb: bulk message failed: -22 (6/0) [ 993.019529][T12524] dw2102: i2c transfer failed. [ 993.019541][T12524] dvb-usb: bulk message failed: -22 (6/0) [ 993.019555][T12524] dw2102: i2c transfer failed. [ 993.019568][T12524] dvb-usb: bulk message failed: -22 (6/0) [ 993.019581][T12524] dw2102: i2c transfer failed. [ 993.019593][T12524] dvb-usb: bulk message failed: -22 (6/0) [ 993.019606][T12524] dw2102: i2c transfer failed. [ 993.019615][T12524] dvb-usb: MAC address: 02:02:02:02:02:02 [ 993.029497][T12524] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 993.041132][T12524] dvb-usb: bulk message failed: -22 (1/0) [ 993.041148][T12524] dw2102: command 0x51 transfer failed. [ 993.265169][T12524] DVB: Unable to find symbol m88rs2000_attach() [ 993.265183][T12524] dvb-usb: no frontend was attached by 'TeVii S632 USB' [ 993.273558][ T25] usb 10-1: Using ep0 maxpacket: 16 [ 993.299442][ T25] usb 10-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 993.331503][ T25] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 993.331549][ T25] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 993.331601][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.364793][ T25] usb 10-1: config 0 descriptor?? [ 993.373949][T12524] rc_core: IR keymap rc-su3000 not found [ 993.373982][T12524] Registered IR keymap rc-empty [ 993.387350][T12524] rc rc0: TeVii S632 USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 993.391938][T12524] input: TeVii S632 USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input177 [ 993.401140][T12524] dvb-usb: schedule remote query interval to 150 msecs. [ 993.401157][T12524] dw2102: su3000_power_ctrl: 0, initialized 1 [ 993.401168][T12524] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 993.757211][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 993.757285][ T9] dw2102: i2c transfer failed. [ 993.776850][T12534] usb usb48-port1: unable to enumerate USB device [ 993.828828][ T25] usbhid 10-1:0.0: can't add hid device: -71 [ 993.835156][ T25] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 993.846845][ T25] usb 10-1: USB disconnect, device number 58 [ 993.914026][T12140] dvb-usb: bulk message failed: -22 (1/0) [ 993.914134][T12140] dw2102: i2c transfer failed. [ 994.017698][ T10] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 994.073438][T12140] dvb-usb: bulk message failed: -22 (1/0) [ 994.075395][T12140] dw2102: i2c transfer failed. [ 994.226618][T12524] usb 1-1: USB disconnect, device number 74 [ 994.279610][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 994.476734][ T10] usb 9-1: New USB device found, idVendor=9022, idProduct=d632, bcdDevice=d7.81 [ 994.506377][ T10] usb 9-1: config 206 has an invalid interface number: 66 but max is 0 [ 994.506421][ T10] usb 9-1: config 206 has no interface number 0 [ 994.506460][ T10] usb 9-1: config 206 interface 66 has no altsetting 0 [ 994.615440][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.615480][ T10] usb 9-1: Product: syz [ 994.615507][ T10] usb 9-1: Manufacturer: syz [ 994.615524][ T10] usb 9-1: SerialNumber: syz [ 995.063190][T17054] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 995.063221][T12524] dvb-usb: TeVii S632 USB successfully deinitialized and disconnected. [ 995.083100][T17054] UDF-fs: Scanning with blocksize 512 failed [ 995.095125][T17054] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 995.095157][T17054] UDF-fs: Scanning with blocksize 1024 failed [ 995.095402][T17054] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 995.095419][T17054] UDF-fs: Scanning with blocksize 2048 failed [ 995.095603][T17054] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 995.095619][T17054] UDF-fs: Scanning with blocksize 4096 failed [ 995.226595][ T10] dvb-usb: found a 'TeVii S632 USB' in warm state. [ 995.226639][ T10] dw2102: su3000_power_ctrl: 1, initialized 0 [ 995.226665][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 995.249795][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 995.261021][ T10] dvbdev: DVB: registering new adapter (TeVii S632 USB) [ 995.261087][ T10] usb 9-1: media controller created [ 995.261113][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 995.261128][ T10] dw2102: i2c transfer failed. [ 995.261142][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 995.261157][ T10] dw2102: i2c transfer failed. [ 995.261171][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 995.261186][ T10] dw2102: i2c transfer failed. [ 995.261200][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 995.261214][ T10] dw2102: i2c transfer failed. [ 995.261228][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 995.261251][ T10] dw2102: i2c transfer failed. [ 995.261264][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 995.261279][ T10] dw2102: i2c transfer failed. [ 995.261289][ T10] dvb-usb: MAC address: 02:02:02:02:02:02 [ 995.271091][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 995.280104][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 995.280120][ T10] dw2102: command 0x51 transfer failed. [ 995.604108][ T9] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 995.612455][T12524] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 995.679969][ T10] DVB: Unable to find symbol m88rs2000_attach() [ 995.680004][ T10] dvb-usb: no frontend was attached by 'TeVii S632 USB' [ 995.754030][ T10] rc_core: IR keymap rc-su3000 not found [ 995.754057][ T10] Registered IR keymap rc-empty [ 995.755162][ T10] rc rc0: TeVii S632 USB as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 995.756685][ T10] input: TeVii S632 USB as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input178 [ 995.758028][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 995.758045][ T10] dw2102: su3000_power_ctrl: 0, initialized 1 [ 995.758056][ T10] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 995.762643][ T10] usb 9-1: USB disconnect, device number 63 [ 995.775471][ T9] usb 8-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 995.776462][T12524] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 995.777278][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 190, changing to 11 [ 995.777302][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26095, setting to 1024 [ 995.777339][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.778857][T12524] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 995.778877][T12524] usb 1-1: config 0 has no interface number 0 [ 995.778906][T12524] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 995.784152][T12524] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 995.784177][T12524] usb 1-1: Manufacturer: syz [ 995.784191][T12524] usb 1-1: SerialNumber: syz [ 995.787871][T12524] usb 1-1: config 0 descriptor?? [ 995.801706][T17066] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 995.955491][ T10] dvb-usb: TeVii S632 USB successfully deinitialized and disconnected. [ 995.973496][T12533] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 996.123614][T12533] usb 5-1: Using ep0 maxpacket: 8 [ 996.140492][T12533] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 996.262925][T12533] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 996.262974][T12533] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 996.262996][T12533] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 996.263012][T12533] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 996.263030][T12533] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 996.263060][T12533] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.382250][ T30] audit: type=1400 audit(2000000525.840:1125): avc: denied { read } for pid=17065 comm="syz.7.2731" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 996.382320][ T30] audit: type=1400 audit(2000000525.840:1126): avc: denied { open } for pid=17065 comm="syz.7.2731" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 996.382362][ T30] audit: type=1400 audit(2000000525.850:1127): avc: denied { ioctl } for pid=17065 comm="syz.7.2731" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 996.409245][ T10] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 996.804479][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 996.821907][ T10] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 996.848243][ T10] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 996.860874][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 996.890930][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.900056][ T10] usb 9-1: Product: syz [ 996.900083][ T10] usb 9-1: Manufacturer: syz [ 996.900147][ T10] usb 9-1: SerialNumber: syz [ 996.964488][ T10] usb 9-1: config 0 descriptor?? [ 997.111557][ T10] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 997.111680][ T10] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 997.280594][T12533] usb 5-1: usb_control_msg returned -32 [ 997.280648][T12533] usbtmc 5-1:16.0: can't read capabilities [ 997.352343][T12533] usb 1-1: USB disconnect, device number 75 [ 997.624033][T12523] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 997.726921][ T10] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 997.745518][ T10] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 997.773833][T12523] usb 10-1: Using ep0 maxpacket: 8 [ 997.775435][T12523] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 997.776303][T12523] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 997.776323][T12523] usb 10-1: config 0 has no interface number 0 [ 997.776351][T12523] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 997.776380][T12523] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.779841][T12523] usb 10-1: config 0 descriptor?? [ 997.791604][T12523] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 997.989206][T12140] usb 10-1: USB disconnect, device number 59 [ 998.043297][T17086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.044569][T17086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.048394][T17086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.048725][T17086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.057224][T12523] usb 5-1: USB disconnect, device number 103 [ 998.061087][T17086] usbtmc 5-1:16.0: usbtmc_ioctl_request failed -71 [ 998.104079][ T9] usbhid 8-1:1.0: can't add hid device: -71 [ 998.104176][ T9] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 998.118608][ T9] usb 8-1: USB disconnect, device number 62 [ 998.304254][ T10] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 998.304298][ T10] em28xx 9-1:0.0: No AC97 audio processor [ 998.318739][ T10] usb 9-1: USB disconnect, device number 64 [ 998.329746][ T10] em28xx 9-1:0.0: Disconnecting em28xx [ 998.566975][T17092] FAULT_INJECTION: forcing a failure. [ 998.566975][T17092] name failslab, interval 1, probability 0, space 0, times 0 [ 998.594192][T17092] CPU: 1 UID: 0 PID: 17092 Comm: syz.0.2738 Tainted: G L syzkaller #0 PREEMPT(full) [ 998.594225][T17092] Tainted: [L]=SOFTLOCKUP [ 998.594233][T17092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 998.594245][T17092] Call Trace: [ 998.594254][T17092] [ 998.594263][T17092] dump_stack_lvl+0x100/0x190 [ 998.594295][T17092] should_fail_ex.cold+0x5/0xa [ 998.594321][T17092] should_failslab+0xc2/0x120 [ 998.594345][T17092] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 998.594365][T17092] ? register_lock_class+0x3f/0x7b0 [ 998.594386][T17092] ? __d_alloc+0x35/0xa50 [ 998.594414][T17092] __d_alloc+0x35/0xa50 [ 998.594436][T17092] ? __lock_acquire+0x4c5/0x1ec0 [ 998.594458][T17092] d_alloc_parallel+0x105/0x14c0 [ 998.594483][T17092] ? lock_acquire+0x1d1/0x380 [ 998.594500][T17092] ? lookup_slow+0x42/0x70 [ 998.594526][T17092] ? __pfx_d_alloc_parallel+0x10/0x10 [ 998.594547][T17092] ? __pfx___might_resched+0x10/0x10 [ 998.594564][T17092] ? __rcu_read_unlock+0x26a/0x5e0 [ 998.594588][T17092] ? down_read+0x13b/0x4c0 [ 998.594612][T17092] ? __pfx_down_read+0x10/0x10 [ 998.594638][T17092] __lookup_slow+0x98/0x320 [ 998.594667][T17092] lookup_slow+0x50/0x70 [ 998.594698][T17092] link_path_walk+0x1377/0x1cc0 [ 998.594727][T17092] path_openat+0x1ac/0x2440 [ 998.594749][T17092] ? trace_sched_exit_tp+0x120/0x160 [ 998.594774][T17092] ? __pfx_path_openat+0x10/0x10 [ 998.594803][T17092] do_file_open+0x20e/0x430 [ 998.594827][T17092] ? __pfx_do_file_open+0x10/0x10 [ 998.594849][T17092] ? __pfx___schedule+0x10/0x10 [ 998.594883][T17092] ? _raw_spin_unlock+0x3e/0x50 [ 998.594910][T17092] ? alloc_fd+0x471/0x7a0 [ 998.594939][T17092] do_sys_openat2+0x10f/0x1e0 [ 998.594964][T17092] ? __pfx_do_sys_openat2+0x10/0x10 [ 998.594988][T17092] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 998.595017][T17092] __x64_sys_openat+0x12d/0x210 [ 998.595042][T17092] ? __pfx___x64_sys_openat+0x10/0x10 [ 998.595077][T17092] do_syscall_64+0x123/0x790 [ 998.595100][T17092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.595119][T17092] RIP: 0033:0x7f742079e159 [ 998.595137][T17092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 998.595154][T17092] RSP: 002b:00007f74216d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 998.595174][T17092] RAX: ffffffffffffffda RBX: 00007f7420a25fa0 RCX: 00007f742079e159 [ 998.595186][T17092] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 998.595199][T17092] RBP: 00007f74216d6090 R08: 0000000000000000 R09: 0000000000000000 [ 998.595210][T17092] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 998.595221][T17092] R13: 00007f7420a26038 R14: 00007f7420a25fa0 R15: 00007fffaac58738 [ 998.595247][T17092] [ 999.904240][T17103] ima: policy update completed [ 999.948469][ T30] audit: type=1807 audit(2000000529.370:1128): action=measure func=FILE_CHECK res=1 [ 999.948594][ T30] audit: type=1802 audit(2000000529.380:1129): pid=17103 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=completed comm="syz.4.2741" res=1 errno=0 [ 1000.120734][T17103] FAULT_INJECTION: forcing a failure. [ 1000.120734][T17103] name failslab, interval 1, probability 0, space 0, times 0 [ 1000.120773][T17103] CPU: 0 UID: 0 PID: 17103 Comm: syz.4.2741 Tainted: G L syzkaller #0 PREEMPT(full) [ 1000.120797][T17103] Tainted: [L]=SOFTLOCKUP [ 1000.120804][T17103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1000.120813][T17103] Call Trace: [ 1000.120819][T17103] [ 1000.120826][T17103] dump_stack_lvl+0x100/0x190 [ 1000.120854][T17103] should_fail_ex.cold+0x5/0xa [ 1000.120878][T17103] should_failslab+0xc2/0x120 [ 1000.120897][T17103] __kmalloc_noprof+0xfc/0x840 [ 1000.120914][T17103] ? ima_measure_loaded_policy+0xe2/0x8e0 [ 1000.120939][T17103] ima_measure_loaded_policy+0xe2/0x8e0 [ 1000.120959][T17103] ? __pfx_ima_measure_loaded_policy+0x10/0x10 [ 1000.120995][T17103] ? ima_update_policy_flags+0x23f/0x420 [ 1000.121018][T17103] ima_release_policy.cold+0x29/0x96 [ 1000.121041][T17103] ? __pfx_ima_release_policy+0x10/0x10 [ 1000.121061][T17103] __fput+0 ** replaying previous printk message ** [ 1000.121061][T17103] __fput+0x3ff/0xb50 [ 1000.121087][T17103] fput_close_sync+0x118/0x250 [ 1000.121107][T17103] ? __pfx_fput_close_sync+0x10/0x10 [ 1000.121134][T17103] __x64_sys_close+0x8b/0x120 [ 1000.121155][T17103] do_syscall_64+0x123/0x790 [ 1000.121175][T17103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.121192][T17103] RIP: 0033:0x7fd0df19e159 [ 1000.121207][T17103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1000.121223][T17103] RSP: 002b:00007fd0e00e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1000.121239][T17103] RAX: ffffffffffffffda RBX: 00007fd0df426180 RCX: 00007fd0df19e159 [ 1000.121250][T17103] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1000.121259][T17103] RBP: 00007fd0e00e4090 R08: 0000000000000000 R09: 0000000000000000 [ 1000.121269][T17103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1000.121279][T17103] R13: 00007fd0df426218 R14: 00007fd0df426180 R15: 00007ffcc4b97008 [ 1000.121300][T17103] [ 1000.197535][ T30] audit: type=1804 audit(2000000529.590:1130): pid=17103 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=measure_loaded_ima_policy cause=ENOMEM comm="syz.4.2741" name="ima_policy_loaded" res=0 errno=0 [ 1000.223815][ T4966] [ 1000.355911][ T4966] ====================================================== [ 1000.362923][ T4966] WARNING: possible circular locking dependency detected [ 1000.369933][ T4966] syzkaller #0 Tainted: G L [ 1000.375882][ T4966] ------------------------------------------------------ [ 1000.382870][ T4966] udevd/4966 is trying to acquire lock: [ 1000.388384][ T4966] ffff88808fa26638 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 1000.396794][ T4966] [ 1000.396794][ T4966] but task is already holding lock: [ 1000.404143][ T4966] ffff88807777b9a8 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 1000.414760][ T4966] [ 1000.414760][ T4966] which lock already depends on the new lock. [ 1000.414760][ T4966] [ 1000.425141][ T4966] [ 1000.425141][ T4966] the existing dependency chain (in reverse order) is: [ 1000.434133][ T4966] [ 1000.434133][ T4966] -> #4 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 1000.442709][ T4966] lock_acquire+0x1d1/0x380 [ 1000.447717][ T4966] __mutex_lock+0x1a4/0x1bd0 [ 1000.452814][ T4966] process_measurement+0x5ab/0x2350 [ 1000.458517][ T4966] ima_file_check+0xc3/0x110 [ 1000.463611][ T4966] security_file_post_open+0xc4/0x210 [ 1000.469501][ T4966] path_openat+0x5cd/0x2440 [ 1000.474507][ T4966] do_file_open+0x20e/0x430 [ 1000.479513][ T4966] file_open_name+0x1c3/0x3e0 [ 1000.484708][ T4966] filp_open+0x2e/0x50 [ 1000.489280][ T4966] kernel_read_file_from_path_initns+0xec/0x240 [ 1000.496022][ T4966] _request_firmware+0x733/0x13c0 [ 1000.501559][ T4966] request_firmware+0x35/0x50 [ 1000.506742][ T4966] reg_reload_regdb+0x85/0x460 [ 1000.512021][ T4966] genl_family_rcv_msg_doit+0x214/0x300 [ 1000.518080][ T4966] genl_rcv_msg+0x560/0x800 [ 1000.523081][ T4966] netlink_rcv_skb+0x159/0x420 [ 1000.528348][ T4966] genl_rcv+0x28/0x40 [ 1000.532834][ T4966] netlink_unicast+0x585/0x850 [ 1000.538101][ T4966] netlink_sendmsg+0x8b0/0xda0 [ 1000.543369][ T4966] ____sys_sendmsg+0xa4d/0xbe0 [ 1000.548640][ T4966] ___sys_sendmsg+0x190/0x1e0 [ 1000.553821][ T4966] __sys_sendmsg+0x160/0x210 [ 1000.558908][ T4966] do_syscall_64+0x123/0x790 [ 1000.563999][ T4966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.570393][ T4966] [ 1000.570393][ T4966] -> #3 (cb_lock){++++}-{4:4}: [ 1000.577316][ T4966] lock_acquire+0x1d1/0x380 [ 1000.582320][ T4966] down_read+0x99/0x4c0 [ 1000.586976][ T4966] genl_release+0x7e/0x1d0 [ 1000.591889][ T4966] netlink_release+0x105e/0x2000 [ 1000.597330][ T4966] __sock_release+0xb3/0x260 [ 1000.602419][ T4966] sock_close+0x1c/0x30 [ 1000.607075][ T4966] __fput+0x3ff/0xb50 [ 1000.611561][ T4966] fput_close_sync+0x118/0x250 [ 1000.616828][ T4966] __x64_sys_close+0x8b/0x120 [ 1000.622010][ T4966] do_syscall_64+0x123/0x790 [ 1000.627098][ T4966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.633491][ T4966] [ 1000.633491][ T4966] -> #2 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}: [ 1000.642157][ T4966] lock_acquire+0x1d1/0x380 [ 1000.647163][ T4966] down_write+0x8b/0x1f0 [ 1000.651910][ T4966] __sock_release+0x86/0x260 [ 1000.657001][ T4966] sock_close+0x1c/0x30 [ 1000.661654][ T4966] __fput+0x3ff/0xb50 [ 1000.666139][ T4966] __fput_sync+0xd7/0x100 [ 1000.670971][ T4966] nvme_tcp_alloc_queue.isra.0+0xd6d/0x1770 [ 1000.677366][ T4966] nvme_tcp_configure_admin_queue+0x26/0x530 [ 1000.683848][ T4966] nvme_tcp_setup_ctrl+0xa4/0xa20 [ 1000.689374][ T4966] nvme_tcp_create_ctrl+0x970/0xd90 [ 1000.695092][ T4966] nvmf_dev_write+0x4ee/0xb60 [ 1000.700274][ T4966] vfs_write+0x2aa/0x1050 [ 1000.705108][ T4966] ksys_write+0x12a/0x250 [ 1000.709935][ T4966] do_syscall_64+0x123/0x790 [ 1000.715026][ T4966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.721420][ T4966] [ 1000.721420][ T4966] -> #1 (nvmf_dev_mutex){+.+.}-{4:4}: [ 1000.728951][ T4966] lock_acquire+0x1d1/0x380 [ 1000.733955][ T4966] __mutex_lock+0x1a4/0x1bd0 [ 1000.739048][ T4966] nvmf_dev_show+0x26/0x210 [ 1000.744051][ T4966] seq_read_iter+0x32f/0x1270 [ 1000.749228][ T4966] seq_read+0x344/0x4d0 [ 1000.753884][ T4966] vfs_read+0x1e4/0xb40 [ 1000.758544][ T4966] ksys_read+0x12a/0x250 [ 1000.763294][ T4966] do_syscall_64+0x123/0x790 [ 1000.768390][ T4966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.774782][ T4966] [ 1000.774782][ T4966] -> #0 (&p->lock){+.+.}-{4:4}: [ 1000.781804][ T4966] check_prev_add+0xeb/0xe60 [ 1000.786891][ T4966] __lock_acquire+0x1492/0x1ec0 [ 1000.792242][ T4966] lock_acquire+0x1d1/0x380 [ 1000.797243][ T4966] __mutex_lock+0x1a4/0x1bd0 [ 1000.802334][ T4966] seq_read_iter+0xe1/0x1270 [ 1000.807423][ T4966] kernfs_fop_read_iter+0x46c/0x610 [ 1000.813130][ T4966] __kernel_read+0x397/0xad0 [ 1000.818226][ T4966] integrity_kernel_read+0x7e/0xb0 [ 1000.823838][ T4966] ima_calc_file_hash_tfm+0x25e/0x350 [ 1000.829711][ T4966] ima_calc_file_hash+0x1e3/0x380 [ 1000.835234][ T4966] ima_collect_measurement+0x94f/0xb30 [ 1000.841193][ T4966] process_measurement+0xdfe/0x2350 [ 1000.846896][ T4966] ima_file_check+0xc3/0x110 [ 1000.851994][ T4966] security_file_post_open+0xc4/0x210 [ 1000.857871][ T4966] path_openat+0x5cd/0x2440 [ 1000.862875][ T4966] do_file_open+0x20e/0x430 [ 1000.867881][ T4966] do_sys_openat2+0x10f/0x1e0 [ 1000.873060][ T4966] __x64_sys_openat+0x12d/0x210 [ 1000.878426][ T4966] do_syscall_64+0x123/0x790 [ 1000.883520][ T4966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.889912][ T4966] [ 1000.889912][ T4966] other info that might help us debug this: [ 1000.889912][ T4966] [ 1000.900115][ T4966] Chain exists of: [ 1000.900115][ T4966] &p->lock --> cb_lock --> &ima_iint_mutex_key[depth] [ 1000.900115][ T4966] [ 1000.912790][ T4966] Possible unsafe locking scenario: [ 1000.912790][ T4966] [ 1000.920217][ T4966] CPU0 CPU1 [ 1000.925564][ T4966] ---- ---- [ 1000.930920][ T4966] lock(&ima_iint_mutex_key[depth]); [ 1000.936284][ T4966] lock(cb_lock); [ 1000.942511][ T4966] lock(&ima_iint_mutex_key[depth]); [ 1000.950381][ T4966] lock(&p->lock); [ 1000.954168][ T4966] [ 1000.954168][ T4966] *** DEADLOCK *** [ 1000.954168][ T4966] [ 1000.962290][ T4966] locks held by udevd/4966: 1, last CPU#0: [ 1000.968090][ T4966] #0: ffff88807777b9a8 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 1000.979148][ T4966] [ 1000.979148][ T4966] stack backtrace: [ 1000.985036][ T4966] CPU: 0 UID: 0 PID: 4966 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 1000.995432][ T4966] Tainted: [L]=SOFTLOCKUP [ 1000.999731][ T4966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1001.009765][ T4966] Call Trace: [ 1001.013028][ T4966] [ 1001.015940][ T4966] dump_stack_lvl+0x100/0x190 [ 1001.020604][ T4966] print_circular_bug.cold+0x178/0x1be [ 1001.026055][ T4966] check_noncircular+0x146/0x160 [ 1001.030983][ T4966] ? trace_sched_exit_tp+0x120/0x160 [ 1001.036256][ T4966] check_prev_add+0xeb/0xe60 [ 1001.040825][ T4966] __lock_acquire+0x1492/0x1ec0 [ 1001.045696][ T4966] ? unwind_next_frame+0xbd/0x2090 [ 1001.050824][ T4966] lock_acquire+0x1d1/0x380 [ 1001.055327][ T4966] ? seq_read_iter+0xe1/0x1270 [ 1001.060077][ T4966] ? __pfx___might_resched+0x10/0x10 [ 1001.065343][ T4966] ? is_bpf_text_address+0x8a/0x1a0 [ 1001.070524][ T4966] ? is_bpf_text_address+0x8a/0x1a0 [ 1001.075705][ T4966] __mutex_lock+0x1a4/0x1bd0 [ 1001.080280][ T4966] ? seq_read_iter+0xe1/0x1270 [ 1001.085024][ T4966] ? seq_read_iter+0xe1/0x1270 [ 1001.089782][ T4966] ? kernel_text_address+0x8d/0x100 [ 1001.094968][ T4966] ? __kernel_text_address+0xd/0x30 [ 1001.100156][ T4966] ? unwind_get_return_address+0x59/0xa0 [ 1001.105777][ T4966] ? __pfx___mutex_lock+0x10/0x10 [ 1001.110787][ T4966] ? stack_trace_save+0x8e/0xc0 [ 1001.115638][ T4966] ? __pfx_stack_trace_save+0x10/0x10 [ 1001.120996][ T4966] ? seq_read_iter+0xe1/0x1270 [ 1001.125738][ T4966] seq_read_iter+0xe1/0x1270 [ 1001.130308][ T4966] ? kasan_save_stack+0x30/0x50 [ 1001.135139][ T4966] ? kasan_save_track+0x14/0x30 [ 1001.139977][ T4966] ? __kasan_kmalloc+0xaa/0xb0 [ 1001.144730][ T4966] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1001.150278][ T4966] ? ima_calc_file_hash_tfm+0x236/0x350 [ 1001.155805][ T4966] ? ima_collect_measurement+0x94f/0xb30 [ 1001.161428][ T4966] ? ima_file_check+0xc3/0x110 [ 1001.166180][ T4966] ? security_file_post_open+0xc4/0x210 [ 1001.171730][ T4966] ? do_file_open+0x20e/0x430 [ 1001.176388][ T4966] ? do_sys_openat2+0x10f/0x1e0 [ 1001.181221][ T4966] kernfs_fop_read_iter+0x46c/0x610 [ 1001.186401][ T4966] __kernel_read+0x397/0xad0 [ 1001.190980][ T4966] ? __pfx___kernel_read+0x10/0x10 [ 1001.196081][ T4966] integrity_kernel_read+0x7e/0xb0 [ 1001.201191][ T4966] ? __pfx_integrity_kernel_read+0x10/0x10 [ 1001.206980][ T4966] ? ima_calc_file_hash_tfm+0x236/0x350 [ 1001.212510][ T4966] ima_calc_file_hash_tfm+0x25e/0x350 [ 1001.217863][ T4966] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 1001.223754][ T4966] ? ima_alloc_tfm+0x21a/0x2e0 [ 1001.228503][ T4966] ? kernfs_iop_getattr+0xc4/0xf0 [ 1001.233512][ T4966] ima_calc_file_hash+0x1e3/0x380 [ 1001.238516][ T4966] ima_collect_measurement+0x94f/0xb30 [ 1001.243971][ T4966] ? __pfx_ima_collect_measurement+0x10/0x10 [ 1001.249938][ T4966] ? vfs_getxattr_alloc+0xec/0x350 [ 1001.255035][ T4966] ? ima_get_hash_algo+0x241/0x400 [ 1001.260132][ T4966] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1001.265577][ T4966] ? process_measurement+0xdfe/0x2350 [ 1001.270936][ T4966] process_measurement+0xdfe/0x2350 [ 1001.276122][ T4966] ? __pfx_process_measurement+0x10/0x10 [ 1001.281746][ T4966] ? find_held_lock+0x2b/0x80 [ 1001.286408][ T4966] ? kernfs_fop_open+0x887/0xd50 [ 1001.291324][ T4966] ? kernfs_fop_open+0x887/0xd50 [ 1001.296246][ T4966] ? kernfs_put_active+0x93/0xe0 [ 1001.301175][ T4966] ? kernfs_fop_open+0x3da/0xd50 [ 1001.306096][ T4966] ima_file_check+0xc3/0x110 [ 1001.310686][ T4966] ? __pfx_ima_file_check+0x10/0x10 [ 1001.315876][ T4966] security_file_post_open+0xc4/0x210 [ 1001.321236][ T4966] path_openat+0x5cd/0x2440 [ 1001.325722][ T4966] ? __pfx_path_openat+0x10/0x10 [ 1001.330642][ T4966] do_file_open+0x20e/0x430 [ 1001.335126][ T4966] ? __pfx_do_file_open+0x10/0x10 [ 1001.340138][ T4966] ? _raw_spin_unlock+0x28/0x50 [ 1001.344981][ T4966] ? alloc_fd+0x471/0x7a0 [ 1001.349294][ T4966] do_sys_openat2+0x10f/0x1e0 [ 1001.353953][ T4966] ? __pfx_do_sys_openat2+0x10/0x10 [ 1001.359140][ T4966] __x64_sys_openat+0x12d/0x210 [ 1001.363978][ T4966] ? __pfx___x64_sys_openat+0x10/0x10 [ 1001.369350][ T4966] do_syscall_64+0x123/0x790 [ 1001.373923][ T4966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.379797][ T4966] RIP: 0033:0x7fa66eaa7407 [ 1001.384197][ T4966] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1001.403783][ T4966] RSP: 002b:00007fff39e45ea0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1001.412176][ T4966] RAX: ffffffffffffffda RBX: 00007fa66f296880 RCX: 00007fa66eaa7407 [ 1001.420134][ T4966] RDX: 0000000000080000 RSI: 00007fff39e46020 RDI: ffffffffffffff9c [ 1001.428085][ T4966] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 1001.436048][ T4966] R10: 0000000000000000 R11: 0000000000000202 R12: 00005570bb40e7f5 [ 1001.444001][ T4966] R13: 00005570bb40e7f5 R14: 0000000000000001 R15: 00007fff39e4a670 [ 1001.451956][ T4966] [ 1001.463710][ T10] em28xx: Freeing device [ 1001.482163][ T30] audit: type=1800 audit(2000000530.950:1131): pid=16753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=256262 res=0 errno=0 [ 1001.482245][ T30] audit: type=1800 audit(2000000530.950:1132): pid=16753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=256241 res=0 errno=0 [ 1001.482269][ T30] audit: type=1800 audit(2000000530.950:1133): pid=16753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=256263 res=0 errno=0 [ 1001.555239][ T30] audit: type=1400 audit(2000000531.020:1134): avc: denied { write } for pid=17110 comm="syz.0.2745" name="subsystems" dev="configfs" ino=1326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1001.555289][ T30] audit: type=1400 audit(2000000531.020:1135): avc: denied { read } for pid=17110 comm="syz.0.2745" name="attr_qid_max" dev="configfs" ino=64619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1001.555314][ T30] audit: type=1800 audit(2000000531.030:1136): pid=17111 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2745" name="attr_qid_max" dev="configfs" ino=64619 res=0 errno=0 [ 1001.561321][ T30] audit: type=1800 audit(2000000531.030:1137): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15745 res=0 errno=0 [ 1001.644343][ T30] audit: type=1800 audit(2000000531.120:1138): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15991 res=0 errno=0 [ 1001.650273][ T30] audit: type=1800 audit(2000000531.120:1139): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15991 res=0 errno=0 [ 1001.650863][ T30] audit: type=1800 audit(2000000531.120:1140): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1001.723398][T12533] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1001.903433][T12533] usb 5-1: Using ep0 maxpacket: 16 [ 1001.909077][T12533] usb 5-1: New USB device found, idVendor=9022, idProduct=d632, bcdDevice=d7.81 [ 1001.909965][T12533] usb 5-1: config 206 has an invalid interface number: 66 but max is 0 [ 1001.909984][T12533] usb 5-1: config 206 has no interface number 0 [ 1001.910002][T12533] usb 5-1: config 206 interface 66 has no altsetting 0 [ 1001.911423][T12533] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.911441][T12533] usb 5-1: Product: syz [ 1001.911454][T12533] usb 5-1: Manufacturer: syz [ 1001.911466][T12533] usb 5-1: SerialNumber: syz [ 1002.133568][T17109] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1002.133596][T17109] UDF-fs: Scanning with blocksize 512 failed [ 1002.133902][T17109] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1002.133917][T17109] UDF-fs: Scanning with blocksize 1024 failed [ 1002.134053][T17109] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1002.134066][T17109] UDF-fs: Scanning with blocksize 2048 failed [ 1002.134172][T17109] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1002.134184][T17109] UDF-fs: Scanning with blocksize 4096 failed [ 1002.190302][T12533] dvb-usb: found a 'TeVii S632 USB' in warm state. [ 1002.190333][T12533] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1002.190355][T12533] dvb-usb: bulk message failed: -22 (2/0) [ 1002.191400][T12533] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1002.192235][T12533] dvbdev: DVB: registering new adapter (TeVii S632 USB) [ 1002.192261][T12533] usb 5-1: media controller created [ 1002.192282][T12533] dvb-usb: bulk message failed: -22 (6/0) [ 1002.192293][T12533] dw2102: i2c transfer failed. [ 1002.192301][T12533] dvb-usb: bulk message failed: -22 (6/0) [ 1002.192311][T12533] dw2102: i2c transfer failed. [ 1002.192318][T12533] dvb-usb: bulk message failed: -22 (6/0) [ 1002.192328][T12533] dw2102: i2c transfer failed. [ 1002.192335][T12533] dvb-usb: bulk message failed: -22 (6/0) [ 1002.192345][T12533] dw2102: i2c transfer failed. [ 1002.192352][T12533] dvb-usb: bulk message failed: -22 (6/0) [ 1002.192362][T12533] dw2102: i2c transfer failed. [ 1002.192369][T12533] dvb-usb: bulk message failed: -22 (6/0) [ 1002.192380][T12533] dw2102: i2c transfer failed. [ 1002.192385][T12533] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1002.197757][T12533] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1002.202549][T12533] dvb-usb: bulk message failed: -22 (1/0) [ 1002.202562][T12533] dw2102: command 0x51 transfer failed. [ 1002.218162][T12533] DVB: Unable to find symbol m88rs2000_attach() [ 1002.218175][T12533] dvb-usb: no frontend was attached by 'TeVii S632 USB' [ 1002.264805][T12533] rc_core: IR keymap rc-su3000 not found [ 1002.264819][T12533] Registered IR keymap rc-empty [ 1002.265571][T12533] rc rc0: TeVii S632 USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1002.266935][T12533] input: TeVii S632 USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input179 [ 1002.268352][T12533] dvb-usb: schedule remote query interval to 150 msecs. [ 1002.268366][T12533] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1002.268376][T12533] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 1002.271616][T12533] usb 5-1: USB disconnect, device number 104 [ 1002.288266][T12533] dvb-usb: TeVii S632 USB successfully deinitialized and disconnected.