last executing test programs: 18.284810339s ago: executing program 3 (id=652): r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)=',/\x00', &(0x7f0000000080)='+\x00', 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = eventfd2(0x7, 0x800) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000100)={0x1, r2}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x82, 0x0) write$P9_RVERSION(r3, &(0x7f0000000180)={0x15, 0x65, 0xffff, 0x3, 0x8, '9P2000.L'}, 0x15) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000240)="082d4215411ed5633d30be7b1b8405a165115a4fb276d8b8e63c3ab250b55c500295ed3520c1947c66beaeb4076710977ecc6874208ce4aa58321d7762e11f8a6e4157ddb5f625bcbc9ecc2f655230834d94d77426c95e59ac6340ddfff4a51ba49147f0b97bb1f19588e452c550", 0x6e}], 0x1) read$FUSE(r3, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r3, &(0x7f0000002340)={0x18, 0x0, r4, {0x9}}, 0x18) bind$unix(r3, &(0x7f0000002380)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000002400)=0x6, 0x4) fcntl$setpipe(r1, 0x407, 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000034c0)={'pimreg1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003840)={r3, 0xe0, &(0x7f0000003740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000003580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000035c0)=[0x0, 0x0], &(0x7f0000003600)=[0x0], 0x0, 0x95, &(0x7f0000003640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000003680), &(0x7f00000036c0), 0x8, 0xc, 0x8, 0x8, &(0x7f0000003700)}}, 0x10) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003880)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000003980)={0x0, 0x8, &(0x7f0000002440)=@raw=[@jmp={0x5, 0x1, 0x3, 0x1, 0x5, 0xffffffffffffffc0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ldst={0x1, 0x1, 0x0, 0x0, 0x3, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x2}], &(0x7f0000002480)='GPL\x00', 0x5, 0x1000, &(0x7f00000024c0)=""/4096, 0x40f00, 0x0, '\x00', r6, @fallback=0x17, r3, 0x8, &(0x7f0000003500)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000003540)={0x1, 0x4, 0x0, 0x2}, 0x10, r8, r3, 0x4, &(0x7f0000003900)=[r3, r9], &(0x7f0000003940)=[{0x5, 0x1, 0x10}, {0x5, 0x1, 0xa}, {0x5, 0x1, 0x7, 0xc}, {0x1, 0x3, 0x4, 0xc}], 0x10, 0x9}, 0x94) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf4a17de8af1f2758, 0x30, r10, 0xe29bc000) syz_open_dev$dri(&(0x7f0000003a40), 0x1, 0x20000) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003d80)={0x11, 0x17, &(0x7f0000003a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1000}, [@jmp={0x5, 0x1, 0x8, 0xb, 0x3, 0xfffffffffffffff0, 0xfffffffffffffff0}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x4}, @generic={0x1, 0x6, 0x7, 0x8, 0x3f6d}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x0, 0x0, 0x2, 0x7, 0xb, 0x0, 0xffffffffffffffff}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfb97}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xf}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000003b40)='GPL\x00', 0x2, 0xa6, &(0x7f0000003b80)=""/166, 0x41100, 0x68, '\x00', r6, 0x0, r3, 0x8, &(0x7f0000003c40)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000003c80)={0x1, 0x5, 0x5, 0x7fff}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000003cc0)=[r9], &(0x7f0000003d00)=[{0x5, 0x4, 0xb, 0x5}, {0x0, 0x4, 0x9, 0x43f7fa4cf471400f}, {0x2, 0x3, 0x0, 0xa}, {0x3, 0x1, 0x8, 0x8}, {0x0, 0x5, 0x0, 0x2}], 0x10, 0xfffffff8}, 0x94) r12 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000003e40), 0x4008c0, 0x0) quotactl_fd$Q_QUOTAON(r12, 0xffffffff80000201, r5, &(0x7f0000003e80)='./file0\x00') r13 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0xa6ff09e1fe8e7210, 0xd, &(0x7f0000004100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x3}, [@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0x1, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x13}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}]}, &(0x7f0000004180)='GPL\x00', 0xf9, 0x6e, &(0x7f00000041c0)=""/110, 0x41000, 0x8, '\x00', r6, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000004240)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000004280)={0x3, 0x4, 0x7, 0x40}, 0x10, r8, r11, 0x3, &(0x7f00000042c0)=[r9, r3], &(0x7f0000004300)=[{0x2, 0x2, 0x9, 0x8}, {0x4, 0x2, 0x0, 0x1}, {0x3, 0x1, 0x1, 0xa}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000004480)={0x14, 0x11, &(0x7f0000003ec0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_val={0x18, 0x1, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xee}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003f80)='GPL\x00', 0x9, 0xce, &(0x7f0000003fc0)=""/206, 0x41100, 0x51, '\x00', r7, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f00000040c0)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, r8, r13, 0x3, &(0x7f0000004400)=[r3, r9, r9, r9, r11], &(0x7f0000004440)=[{0x2, 0x5, 0x0, 0x3}, {0x3, 0x3, 0x1, 0xc}, {0x0, 0x1, 0x8, 0x5}], 0x10, 0x3322}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000004540)) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000004580)=@req3={0x6, 0x7, 0x5, 0x4, 0xfff, 0x6, 0x3a}, 0x1c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r9, 0xc03064b7, &(0x7f0000004780)={0x0, 0x0, 0x0, 0xfffffff2, 0x800000, 0x0, 0x101, 0xe99, 0x2, 0x0, 0x2, 0x8}) 17.429471678s ago: executing program 3 (id=655): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x6, {0x4, 0x5, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0xf00) mlockall(0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, 0xd0}) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) clock_gettime(0x0, &(0x7f0000000f00)) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000040)=@framed={{}, [@alu={0x4, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10}, @jmp={0x5, 0x0, 0x3}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x90000004}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000080)={0x0, 0x0, 0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) epoll_create(0x2) 16.204911358s ago: executing program 2 (id=658): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000000)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@loopback, @in6=@loopback}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0xa05448, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f756d6f64653d30303030303030313030303030a23130303030302c757365725f69643d0000004c18f33300a17152f3bd88468e09932ede1b7d8642d411bd61fca4a9dfee3dbe758acfd504eddabc10c9594601e168d41dd888d4107bb4c854e00000000000000000000000cdd124ac9852acf6dbbabbf1b882793d4d9b7d5e3f5242804dd81d62187c77d7d54981dbde21d409c2964e38b7d0cc689327ed43e4cd584ced68c66c35a54ee598decebf733579f74fec9946ae178adadce0fc4747cda76af2f5a8015caf1afecf16477d2eca8d70af6f5a7a490fdfa0ebdd82f734", @ANYRESDEC=0x0, @ANYRES64=r3, @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, 0x50) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103", @ANYRESHEX], 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSABS2F(r5, 0x401845ef, &(0x7f0000000300)={0x8, 0x7, 0x4d8d, 0x3, 0x2, 0x5c4}) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = syz_open_dev$video(&(0x7f0000000300), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x870}}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000300)={r6, 0x1, 0x6, 0xd, 0x0, [], [0xd, 0x4, 0x13a7a85d, 0x9], [0x40000000, 0x8, 0xe, 0x7], [0x0, 0xe, 0x9, 0x1ff]}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) close(r8) write$FUSE_LK(r8, &(0x7f00000001c0)={0x28, 0x0, r4, {{0x3a, 0x6, 0x1, r0}}}, 0x28) 15.649224609s ago: executing program 3 (id=659): r0 = syz_usb_connect(0x0, 0x7c, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x4, 0xb6, 0x65, 0x20, 0x413, 0x6023, 0x31ae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x1, 0x0, 0x0, 0x10, 0x40, [{{0x9, 0x4, 0xa1, 0x7, 0x2, 0xb8, 0x3b, 0xfc, 0x0, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x40, 0x1, 0x0, 0x6, "d3dd"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x4, 0x1, 0x8, "3fa1"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x2, 0x4, 0x0, 0x0, ','}]}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x0, 0x1, 0xa4}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x2f}, @ncm={0x6, 0x24, 0x1a, 0x401}]}], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x6}]}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r2, r1, &(0x7f00000001c0)=0x1, 0x8) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f00000007c0)={{0x8, 0x6}, 0x100, './file0\x00'}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000080)=0x4000) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="601004000000cf", @ANYRES32=r4, @ANYRESDEC=r0, @ANYRES16=r1, @ANYRES64=r0, @ANYRESHEX=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f00000001c0)={0x40, 0x17, 0x4, "000c16bc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14.427242583s ago: executing program 0 (id=664): r0 = getpgrp(0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c41f4040110f00107f00000000010902120001000000000904"], 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) recvmsg$unix(r5, &(0x7f00000003c0)={0x0, 0xffffffffffffff04, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) shutdown(r4, 0x2) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) 9.895643318s ago: executing program 0 (id=667): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000023c0), 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000140)}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000400)={0x1c, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x141}, 0x80c0) syz_genetlink_get_family_id$nl80211(0x0, r3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, 0x0, 0x1) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(0x0, &(0x7f0000000ac0), &(0x7f0000000b80)={[0x0, 0x0]}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r3, 0xc0106441, &(0x7f0000000040)={0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r3, 0xc0386447, &(0x7f0000000180)={{0x8, 0x2, &(0x7f0000000000)=[{0x3, 0x0, 0x40}, {0x6, 0x0, 0x9}]}, 0x6, 0x7f, 0xe, 0x0, 0x0, 0x1, 0xebc0, 0x6, r6}) 9.703717915s ago: executing program 1 (id=668): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) write(r0, 0x0, 0x0) 9.64246729s ago: executing program 2 (id=670): socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x101102) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)={0x0, 0x0, 0xffb8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(r0, 0xd, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) mkdir(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000200), &(0x7f0000000280)=r6}, 0x20) 9.641370524s ago: executing program 3 (id=671): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a0101000000000000e54b0a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000000000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) ptrace(0x4207, r0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0xc, &(0x7f0000000100)=0x0) r5 = timerfd_create(0x0, 0x0) io_submit(r4, 0x1, &(0x7f00000009c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) timerfd_settime(r5, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x7, 0x1, 0x735, 0xfffffffffffffffc, 0x2ed, 0x2000000000, 0x2, 0x8000000000000000, 0x70ea, 0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r6, &(0x7f0000002140)=""/17, 0x11, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000000209040000000000030000000300000a05000100070000000500040001000026a907be56999e9ed521000000d89e80bf00"/63], 0x30}, 0x1, 0x0, 0x0, 0x4048800}, 0x800) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) 8.921802955s ago: executing program 1 (id=672): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0xc0000101, 0x0, 0x8001}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0xfe10) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x5100, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newchain={0x24, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xc}, {0xffe0, 0xc}, {0xfff2, 0xffff}}}, 0x24}}, 0x20040000) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) 8.690894605s ago: executing program 2 (id=673): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = gettid() rt_sigqueueinfo(r2, 0x21, &(0x7f0000000040)={0x0, 0x0, 0xfffffffb}) r3 = socket$inet6(0xa, 0x4, 0x8000100) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x5, 0x0, 0x2, 0xe, 0x0, 0x0, 0x7, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e24, 0xfffffffd, @private1, 0x8598}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x81}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0xfffff800, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}]}, 0x70}, 0x1, 0x400000000000000}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$ppp(0xffffffffffffff9c, 0x0, 0x242e80, 0x0) pwrite64(r5, 0x0, 0x0, 0x7ffffffffffffffb) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, &(0x7f0000002000)=0x0, 0x0) dup(r1) syz_io_uring_submit(r6, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x6000, @fd_index=0x4, 0x7, 0x0, 0x0, 0x8, 0x0, {0x1}}) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) connect$inet6(r3, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) dup2(r3, r3) socket$inet6_udp(0xa, 0x2, 0x0) futex(&(0x7f00000000c0)=0x1, 0xb, 0x2, 0x0, &(0x7f0000000140)=0x2, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0x3, 0x0, 0x4, 0xc}, 0x20) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 7.479639572s ago: executing program 1 (id=676): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x6c081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, 0x0) 7.30805672s ago: executing program 1 (id=677): r0 = getpgrp(0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c41f4040110f00107f00000000010902120001000000000904"], 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) recvmsg$unix(r5, &(0x7f00000003c0)={0x0, 0xffffffffffffff04, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) shutdown(r4, 0x2) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) 7.236928475s ago: executing program 4 (id=678): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000480)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$caif_seqpacket(0x25, 0x5, 0x3) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r4, 0x0, 0xee01) write$vhost_msg(r4, &(0x7f0000000340)={0x1, {&(0x7f0000000240)=""/117, 0x75, &(0x7f00000001c0)=""/35, 0x3, 0x2}}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x6c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x30, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x8}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x8}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x7}]}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 7.033472284s ago: executing program 4 (id=679): socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x101102) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)={0x0, 0x0, 0xffb8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(r0, 0xd, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) mkdir(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000200), &(0x7f0000000280)=r6}, 0x20) 6.155174319s ago: executing program 4 (id=680): syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000300000020b804020240000102030109021b00010100807f0904000402070102c10905010220a449d59f10c5a576454bf5395b0004040f"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3f}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000006a]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) renameat(r3, &(0x7f0000000180)='./file0\x00', r3, &(0x7f00000001c0)='\x00') close(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r5, &(0x7f0000000340)={0x1a, 0x0, 0xff, 0x0, 0x0, 0x8, @random="48bd00"}, 0x10) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_VENDOR(r8, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f00000007c0)={0x1220, r9, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x400}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x4}, @NFC_ATTR_VENDOR_DATA={0xe4, 0x1f, "143acd4845512ab316e3272d0cd5e4a911ac251c359ecb3f3eca57e580e615f3f81f92726675dd556bd539875d3df7183dd6e488a9f346c85f4c5178cb1df94cad431f7e6e04b9bdcf2a376cbe7c099f343d694b24ff505adf81c94ece009afa08a8e2e6a179350c2434fdf9f5002570fbfd259ddf8b4fb4171aef59d111130304410657779c77934222d48465bd926fdc9016d594ff5529e2de7f8597f004a27a4656d03d94d3602032ad8b0db205e19600b4a851ec97ca82917dfb0e11db2fdaf2e49b09c1fadb995212263795757c9afa432411a837230dcfa8b01eedb3dc"}, @NFC_ATTR_VENDOR_DATA={0xed, 0x1f, "a55183009923c6a0b8fc7095e77520cd2b1a3dd73b5afaaa5ccfd65e5fa13addf14afc42225c14184ff14e9313d4bf4cc8574005b41d6568ff624ce50c14f9908bf0a93ed4ee5926968c11c2584e9a0eb13b77fdcddb112f73914e3bbd2b74c100e26dcb74d6b17f47114d65daae3ab9627c194c1ab0451bab920199d25a7a8caca1d148888285b026332ffcd7db6d26e60807cd095eddb3038e2cc44613d3585d28846c2ab3261a1b2d4cb1a3594e3c4db78d99c4e9a62fb2a7618a9bf05fde137014517764ee3e636bd8cc11337dfe1ce41a7da2abe6d82bd2662233b81764eb88a4a2cba97bc5e4"}, @NFC_ATTR_VENDOR_DATA={0x1b, 0x1f, "7e8a34605c78877051ffbbed3b5018a65353c26dce5bef"}, @NFC_ATTR_VENDOR_DATA={0x1004, 0x1f, "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"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x9}]}, 0x1220}, 0x1, 0x0, 0x0, 0x40001}, 0x90) accept4(r4, 0x0, 0x0, 0x0) 5.231654448s ago: executing program 3 (id=681): r0 = syz_usb_connect(0x0, 0x7c, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x4, 0xb6, 0x65, 0x20, 0x413, 0x6023, 0x31ae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x1, 0x0, 0x0, 0x10, 0x40, [{{0x9, 0x4, 0xa1, 0x7, 0x2, 0xb8, 0x3b, 0xfc, 0x0, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x40, 0x1, 0x0, 0x6, "d3dd"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x4, 0x1, 0x8, "3fa1"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x2, 0x4, 0x0, 0x0, ','}]}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x0, 0x1, 0xa4}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x2f}, @ncm={0x6, 0x24, 0x1a, 0x401}]}], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x6}]}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r2, r1, &(0x7f00000001c0)=0x1, 0x8) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f00000007c0)={{0x8, 0x6}, 0x100, './file0\x00'}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000080)=0x4000) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="601004000000cf", @ANYRES32=r4, @ANYRESDEC=r0, @ANYRES16=r1, @ANYRES64=r0, @ANYRESHEX=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f00000001c0)={0x40, 0x17, 0x4, "000c16bc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.121952914s ago: executing program 2 (id=682): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) write(r0, &(0x7f0000000000), 0x0) 4.860322009s ago: executing program 1 (id=683): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000070a01080000004700000000020000000900010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffffffff, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0xa84, 0x0, 0x3}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = fsopen(&(0x7f0000000280)='afs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x18, 0x0, 0x1) clock_adjtime(0x0, &(0x7f0000000880)={0x66b7, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x6, 0x5, 0x2, 0xf439}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0xf, r8, 0x200000100007b, &(0x7f0000000680)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675c1b0cc90b641e4b19ee787238bcb3976ee8100e2878c9cfa178cac130eb046eda93d039fd4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf733b21f7a174b1a84aeb46c16582029f31c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb1bd3a5c58a767ccf5c3bc9ac92eef5c21c1f9b67836849383136a10bae75b778e89957083d5b3e1c98ba07b589dc4bcc462864012e695c825539b059923a2f7201b84b047d21f1b71239e29b96955b4fb817a95910eb1c9efc733803f716daf758ba7f943aa776693b607346379d7b5f43e92c006fde9be11d9cc3d740db70f6a5dd77cc84d8c9ff0e4190950b94c76d818ef750012943be4dfe7be172e7bdc5ea7cd603e5bd344ed8f665095965c6a1a37f02ebaf725d20be563d2cf1194abb4951cd1fee915e5127c80fa79a369230e76f97938c9fa8aa7ddc3816d3a11d779b01421de768088f6e4eea5dd78d4f61e95783f664d32921e0e09ac778104e9cc128b027787b30b69a2bc19fb76eb0c0c1d7b7cedc5759efa567719cff792a9848cea5637980afb4f9838d7cfc7a82659e5d8a2000"/495) ptrace$getregset(0x4205, r8, 0x2, &(0x7f0000000380)={&(0x7f0000000000)=""/120, 0x78}) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x1000800, 0x0) 4.849382732s ago: executing program 2 (id=684): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0xc0000101, 0x0, 0x8001}]}) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0xfe10) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x2020) 3.362839565s ago: executing program 2 (id=685): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_io_uring_setup(0x30e, &(0x7f00000000c0)={0x0, 0x0, 0x20, 0x3, 0x200000}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xffffff7c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd_index=0x3, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fd"], 0xfc}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x224e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000001200000026bd7000fcdbdf2508060a014e244e23f8ffffff03000000060000000000000000040000090000000800000009000000", @ANYRES32=0x0, @ANYBLOB="010000000000004c600000000b0000000d000100f102dcf29effaefacc"], 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000840)) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_READ_SNR(r5, 0x80026f48, &(0x7f00000004c0)) getsockopt(0xffffffffffffffff, 0x114, 0x271f, 0x0, 0x0) r6 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf", @ANYRESOCT=0x0], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000880)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) keyctl$unlink(0x9, r7, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1fffffffd, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) dup(0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000380)={'fscrypt:', @desc1}, &(0x7f00000003c0)={0x0, "a236016a8f0dd5bd5ffabb83dd12409a5b84c63224c1162555b2b7a09fe5471140fcb744c43b79f741c900ea4f960d6d55ca18b31737126e96b4c4da561cec8d", 0x1a}, 0x48, 0xfffffffffffffffd) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) syz_io_uring_setup(0xbc7, &(0x7f0000000740)={0x0, 0x1f82, 0x20, 0x2, 0x24c, 0x0, r0}, &(0x7f0000000680)=0x0, &(0x7f00000007c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r8, 0x114, &(0x7f0000000800), 0x0, 0x4) 3.280813566s ago: executing program 0 (id=686): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x30a0, 0x4) r0 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xbb08, 0x38c1, 0x0, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, 0x0, 0x0) 3.11976264s ago: executing program 0 (id=687): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) syz_emit_ethernet(0x56, &(0x7f0000000640)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r1, &(0x7f0000000480)="10", 0xfffffffffffffdcd, 0x8000, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', r2, &(0x7f0000000180)='./file0\x00', 0x100) 3.093466736s ago: executing program 0 (id=688): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) fcntl$addseals(r0, 0x409, 0x4) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}], 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstatfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e21, 0x4e20, 0x8}}}}}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = dup(r1) write$UHID_INPUT(r6, &(0x7f0000001040)={0xe, {"a2e3ad21ed6b0af9fcfbf4c087f74f9b3e096eff7fc6e5539b9b18098b9b4a1b2352091b080d29428f0e1ac6e7049b3468959b189a242a9b60f3988f7ef319520100ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441984cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f236c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 2.845558439s ago: executing program 0 (id=689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000440)=""/128, 0x80}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}, {&(0x7f0000000680)=""/127, 0x7f}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000380), 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000029000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000500000056000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000540)="c145098a49de90cb684f701701afa087aab0b90c9e0d19eec0da6a9270abd0512241a2e1a7aefb3d72517d35039a0db14b28f934f10ba53d85e591db18684e050068d37a0e5f4fc6b21f743cff56e141d22ebbf8082f1a", 0x57) quotactl_fd$Q_SETINFO(r7, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x6, 0x1, 0x0, 0x2}) 2.124794503s ago: executing program 32 (id=689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000440)=""/128, 0x80}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}, {&(0x7f0000000680)=""/127, 0x7f}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000380), 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000029000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000500000056000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000540)="c145098a49de90cb684f701701afa087aab0b90c9e0d19eec0da6a9270abd0512241a2e1a7aefb3d72517d35039a0db14b28f934f10ba53d85e591db18684e050068d37a0e5f4fc6b21f743cff56e141d22ebbf8082f1a", 0x57) quotactl_fd$Q_SETINFO(r7, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x6, 0x1, 0x0, 0x2}) 2.098707266s ago: executing program 1 (id=691): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a0101000000000000e54b0a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000000000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) ptrace(0x4207, r0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0xc, &(0x7f0000000100)=0x0) r5 = timerfd_create(0x0, 0x0) io_submit(r4, 0x1, &(0x7f00000009c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) timerfd_settime(r5, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x7, 0x1, 0x735, 0xfffffffffffffffc, 0x2ed, 0x2000000000, 0x2, 0x8000000000000000, 0x70ea, 0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r6, &(0x7f0000002140)=""/17, 0x11, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000000209040000000000030000000300000a05000100070000000500040001000026a907be56999e9ed521000000d89e80bf00"/63], 0x30}, 0x1, 0x0, 0x0, 0x4048800}, 0x800) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) 2.093025935s ago: executing program 4 (id=692): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x6, {0x4, 0x5, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0xf00) mlockall(0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, 0xd0}) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) clock_gettime(0x0, &(0x7f0000000f00)) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000040)=@framed={{}, [@alu={0x4, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10}, @jmp={0x5, 0x0, 0x3}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)={&(0x7f00000010c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000080)={0x0, 0x0, 0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) epoll_create(0x2) 1.085648747s ago: executing program 4 (id=693): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) fcntl$addseals(r0, 0x409, 0x4) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}], 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstatfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e21, 0x4e20, 0x8}}}}}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = dup(r1) write$UHID_INPUT(r6, &(0x7f0000001040)={0xe, {"a2e3ad21ed6b0af9fcfbf4c087f74f9b3e096eff7fc6e5539b9b18098b9b4a1b2352091b080d29428f0e1ac6e7049b3468959b189a242a9b60f3988f7ef319520100ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441984cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f236c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 1.068515538s ago: executing program 3 (id=694): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000080)) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x989}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xe, 0x9, 0x5, 0x10, 0x7de, 0x74, 0xe, 0xdc, [{0x2, 0x1b74, 0x5, 0x6}, {0x2, 0x7, 0xaad, 0x4}, {0x8, 0xa8f1, 0x8, 0x4}, {0x1, 0x9, 0x3, 0x1}, {0x3, 0xfff, 0x6, 0xfffffffc}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) 0s ago: executing program 4 (id=695): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_io_uring_setup(0x208f, &(0x7f0000000200)={0x0, 0xbc79, 0x2000, 0x3, 0x84001ff}, &(0x7f00000001c0), &(0x7f0000000000)) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000001f40)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "51f435b675ba491895df818c52f9e875d9b1bd2c20f5c6b1e36d59e2036887f264d726807797b2e0d0768e1391a519f4aac513fc3713901f18f58a56f75b0121", 0x2d}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, r0, 0xfffffffffffffffd, 0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000180)=0x8000) recvfrom$inet_nvme(r2, &(0x7f0000000600)=""/226, 0xf1, 0x40000000, 0x0, 0xfffffffffffffcfc) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff0000000060000000000000002900000004000000040800000000000007100000000102099f000800000000000000fe00801309e12e5f0b6bdcf72f2ec7008a15fa88b025e000010005020bf4c110fc02000000000000000000000000000000000000feff1300000000000000290000003400000000000000000000004e0000000000000029000000360000005e0500000000ff1950d650"], 0x108}}], 0x1, 0x810) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0}}], 0x1, 0x24088804) sendto$inet6(0xffffffffffffffff, &(0x7f0000000ec0)='\n', 0x1, 0x44000, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x5, 0x1, 0xa000, 0x2000, &(0x7f0000003000/0x2000)=nil}) kernel console output (not intermixed with test programs): ace number: 161 but max is 0 [ 122.370224][ T5859] usb 1-1: config 0 has no interface number 0 [ 122.386812][ T5859] usb 1-1: config 0 interface 161 has no altsetting 0 [ 122.436349][ T5859] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=31.ae [ 122.515094][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.600549][ T5859] usb 1-1: Product: syz [ 122.612955][ T5859] usb 1-1: Manufacturer: syz [ 122.637929][ T5859] usb 1-1: SerialNumber: syz [ 122.662144][ T5859] usb 1-1: config 0 descriptor?? [ 122.673078][ T29] audit: type=1400 audit(1770720865.229:247): avc: denied { read open } for pid=6439 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.766553][ T5859] em28xx 1-1:0.161: New device syz syz @ 480 Mbps (0413:6023, interface 161, class 161) [ 122.800685][ T5859] em28xx 1-1:0.161: Video interface 161 found: bulk [ 122.858233][ T29] audit: type=1400 audit(1770720865.229:248): avc: denied { getattr } for pid=6439 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.961243][ T29] audit: type=1400 audit(1770720865.489:249): avc: denied { mounton } for pid=6443 comm="syz.4.112" path="/24/file0" dev="tmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 123.028651][ T29] audit: type=1400 audit(1770720865.499:250): avc: denied { mount } for pid=6443 comm="syz.4.112" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 123.078727][ T29] audit: type=1400 audit(1770720865.619:251): avc: denied { create } for pid=6443 comm="syz.4.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.126325][ T29] audit: type=1400 audit(1770720865.639:252): avc: denied { create } for pid=6446 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 123.204899][ T5859] em28xx 1-1:0.161: unknown em28xx chip ID (0) [ 123.615918][ T5859] em28xx 1-1:0.161: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 123.635728][ T5859] em28xx 1-1:0.161: board has no eeprom [ 123.880812][ T5859] em28xx 1-1:0.161: Identified as Leadtek Winfast USB II (card=7) [ 123.892529][ T5859] em28xx 1-1:0.161: analog set to bulk mode. [ 123.898547][ T24] em28xx 1-1:0.161: Registering V4L2 extension [ 124.163440][ T5859] usb 1-1: USB disconnect, device number 3 [ 124.269259][ T5859] em28xx 1-1:0.161: Disconnecting em28xx [ 124.545505][ T5804] usb 3-1: USB disconnect, device number 5 [ 124.651912][ T24] em28xx 1-1:0.161: Config register raw data: 0xffffffed [ 124.676081][ T24] em28xx 1-1:0.161: AC97 chip type couldn't be determined [ 124.702932][ T24] em28xx 1-1:0.161: No AC97 audio processor [ 125.238482][ T24] usb 1-1: Decoder not found [ 125.248593][ T24] em28xx 1-1:0.161: failed to create media graph [ 125.263002][ T24] em28xx 1-1:0.161: V4L2 device video103 deregistered [ 126.099393][ T6484] FAULT_INJECTION: forcing a failure. [ 126.099393][ T6484] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 126.112682][ T6484] CPU: 0 UID: 0 PID: 6484 Comm: syz.0.116 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.112710][ T6484] Tainted: [L]=SOFTLOCKUP [ 126.112714][ T6484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 126.112723][ T6484] Call Trace: [ 126.112728][ T6484] [ 126.112733][ T6484] dump_stack_lvl+0x100/0x190 [ 126.112763][ T6484] should_fail_ex.cold+0x5/0xa [ 126.112777][ T6484] _copy_from_user+0x2e/0xd0 [ 126.112796][ T6484] blk_trace_setup+0xd5/0x330 [ 126.112811][ T6484] ? __pfx_blk_trace_setup+0x10/0x10 [ 126.112844][ T6484] blk_trace_ioctl+0x245/0x320 [ 126.112863][ T6484] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 126.112879][ T6484] ? blkdev_ioctl+0xc7/0x6f0 [ 126.112895][ T6484] blkdev_ioctl+0x17c/0x6f0 [ 126.112909][ T6484] ? __pfx_blkdev_ioctl+0x10/0x10 [ 126.112921][ T6484] ? selinux_file_ioctl+0x139/0x290 [ 126.112936][ T6484] ? selinux_file_ioctl+0xb4/0x290 [ 126.112951][ T6484] ? __pfx_blkdev_ioctl+0x10/0x10 [ 126.112965][ T6484] __x64_sys_ioctl+0x18e/0x210 [ 126.112978][ T6484] do_syscall_64+0xc9/0xf80 [ 126.112995][ T6484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.113006][ T6484] RIP: 0033:0x7f0eeed9af79 [ 126.113019][ T6484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.113031][ T6484] RSP: 002b:00007f0eefcd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.113045][ T6484] RAX: ffffffffffffffda RBX: 00007f0eef016090 RCX: 00007f0eeed9af79 [ 126.113052][ T6484] RDX: 0000200000000200 RSI: 00000000c0481273 RDI: 0000000000000004 [ 126.113058][ T6484] RBP: 00007f0eefcd8090 R08: 0000000000000000 R09: 0000000000000000 [ 126.113065][ T6484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.113071][ T6484] R13: 00007f0eef016128 R14: 00007f0eef016090 R15: 00007fffd67308e8 [ 126.113086][ T6484] [ 126.706531][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 126.706548][ T29] audit: type=1400 audit(1770720868.199:295): avc: denied { execmem } for pid=6480 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 126.740805][ T29] audit: type=1400 audit(1770720868.639:296): avc: denied { prog_load } for pid=6480 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 126.996159][ T29] audit: type=1400 audit(1770720868.639:297): avc: denied { bpf } for pid=6480 comm="syz.0.116" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 127.016580][ T29] audit: type=1400 audit(1770720868.649:298): avc: denied { read } for pid=6480 comm="syz.0.116" dev="nsfs" ino=4026532884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 127.037614][ T29] audit: type=1400 audit(1770720868.649:299): avc: denied { open } for pid=6480 comm="syz.0.116" path="net:[4026532884]" dev="nsfs" ino=4026532884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 127.037976][ T24] em28xx 1-1:0.161: Remote control support is not available for this card. [ 127.150176][ T5859] em28xx 1-1:0.161: Closing input extension [ 127.179577][ T5859] em28xx 1-1:0.161: Freeing device [ 127.213217][ T29] audit: type=1400 audit(1770720868.649:300): avc: denied { create } for pid=6480 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 127.842156][ T29] audit: type=1400 audit(1770720869.689:301): avc: denied { create } for pid=6488 comm="syz.0.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 128.076676][ T29] audit: type=1400 audit(1770720869.699:302): avc: denied { ioctl } for pid=6488 comm="syz.0.117" path="socket:[10724]" dev="sockfs" ino=10724 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 128.111296][ T29] audit: type=1400 audit(1770720869.699:303): avc: denied { create } for pid=6488 comm="syz.0.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 128.141081][ T29] audit: type=1400 audit(1770720869.699:304): avc: denied { read write } for pid=6488 comm="syz.0.117" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 129.553347][ T6517] Illegal XDP return value 4294965632 on prog (id 37) dev syz_tun, expect packet loss! [ 130.015028][ T6517] comedi comedi1: aio_iiro_16: I/O port conflict (0xffffffff80000003,8) [ 130.875891][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.121'. [ 131.347969][ T6547] program syz.4.128 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.716565][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 131.716609][ T29] audit: type=1400 audit(1770721641.991:335): avc: denied { read write } for pid=6542 comm="syz.4.128" name="sg0" dev="devtmpfs" ino=785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 131.853948][ T29] audit: type=1400 audit(1770721641.991:336): avc: denied { open } for pid=6542 comm="syz.4.128" path="/dev/sg0" dev="devtmpfs" ino=785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 131.989285][ T29] audit: type=1400 audit(1770721642.663:337): avc: denied { create } for pid=6546 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 132.008668][ T29] audit: type=1400 audit(1770721642.663:338): avc: denied { write } for pid=6546 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 132.061399][ T29] audit: type=1400 audit(1770721642.674:339): avc: denied { create } for pid=6546 comm="syz.3.129" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 132.117489][ T29] audit: type=1400 audit(1770721642.674:340): avc: denied { map } for pid=6546 comm="syz.3.129" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 132.530352][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.538985][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.884089][ T29] audit: type=1400 audit(1770721642.674:341): avc: denied { read write } for pid=6546 comm="syz.3.129" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 132.965563][ T29] audit: type=1400 audit(1770721642.779:342): avc: denied { ioctl } for pid=6528 comm="syz.0.126" path="socket:[10854]" dev="sockfs" ino=10854 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 133.018675][ T29] audit: type=1400 audit(1770721642.810:343): avc: denied { listen } for pid=6557 comm="syz.4.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 133.038694][ T29] audit: type=1400 audit(1770721642.947:344): avc: denied { getopt } for pid=6557 comm="syz.4.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 135.643186][ T6612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.729433][ T6598] warning: `syz.3.138' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 135.859568][ T6612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.494556][ T6625] netlink: 176 bytes leftover after parsing attributes in process `syz.3.142'. [ 137.085962][ T6635] netlink: 164 bytes leftover after parsing attributes in process `syz.3.145'. [ 137.238632][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 137.238643][ T29] audit: type=1400 audit(1770721648.186:368): avc: denied { create } for pid=6628 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 137.299554][ T29] audit: type=1400 audit(1770721648.186:369): avc: denied { connect } for pid=6628 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 137.340133][ T6626] mmap: syz.2.143 (6626) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 137.366996][ T29] audit: type=1400 audit(1770721648.196:370): avc: denied { ioctl } for pid=6628 comm="syz.1.144" path="socket:[10976]" dev="sockfs" ino=10976 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 138.087021][ T29] audit: type=1400 audit(1770721648.196:371): avc: denied { read } for pid=6628 comm="syz.1.144" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 138.119252][ T29] audit: type=1400 audit(1770721648.196:372): avc: denied { open } for pid=6628 comm="syz.1.144" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 138.405631][ T29] audit: type=1400 audit(1770721648.228:373): avc: denied { ioctl } for pid=6628 comm="syz.1.144" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 138.491058][ T29] audit: type=1400 audit(1770721648.238:374): avc: denied { write } for pid=6628 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 138.567283][ T29] audit: type=1400 audit(1770721648.312:375): avc: denied { read write } for pid=6637 comm="syz.4.146" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 138.637042][ T6655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.148'. [ 138.838462][ T29] audit: type=1400 audit(1770721648.312:376): avc: denied { open } for pid=6637 comm="syz.4.146" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 138.951928][ T29] audit: type=1400 audit(1770721648.637:377): avc: denied { name_bind } for pid=6643 comm="syz.3.147" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 142.462929][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 142.462945][ T29] audit: type=1400 audit(1770721654.679:386): avc: denied { ioctl } for pid=6688 comm="syz.4.154" path="socket:[11076]" dev="sockfs" ino=11076 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 142.522070][ T6693] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 142.633693][ T6693] team0: Port device batadv1 added [ 142.766771][ T29] audit: type=1400 audit(1770721654.973:387): avc: denied { mount } for pid=6713 comm="syz.2.158" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 143.058503][ T5925] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 143.263659][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 143.297180][ T5925] usb 3-1: config index 0 descriptor too short (expected 65315, got 36) [ 143.343855][ T5925] usb 3-1: config 0 has too many interfaces: 239, using maximum allowed: 32 [ 143.372701][ T5925] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 239 [ 143.400956][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.452727][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.511697][ T5925] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 143.553048][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.589213][ T6726] netlink: 'syz.4.159': attribute type 12 has an invalid length. [ 143.633375][ T29] audit: type=1400 audit(1770721655.876:388): avc: denied { write } for pid=6721 comm="syz.4.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.865608][ T5925] usb 3-1: config 0 descriptor?? [ 144.786883][ T29] audit: type=1400 audit(1770721657.072:389): avc: denied { read write } for pid=6713 comm="syz.2.158" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 144.951586][ T1205] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 144.972247][ T29] audit: type=1400 audit(1770721657.072:390): avc: denied { open } for pid=6713 comm="syz.2.158" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 145.058501][ T1205] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 145.170687][ T1205] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 145.335467][ T1205] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 145.390770][ T5925] usbhid 3-1:0.0: can't add hid device: -71 [ 145.396915][ T5925] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 145.418360][ T5925] usb 3-1: USB disconnect, device number 6 [ 145.481463][ T6744] Zero length message leads to an empty skb [ 145.593815][ T6743] fido_id[6743]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 145.919063][ T29] audit: type=1400 audit(1770721658.185:391): avc: denied { create } for pid=6733 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 145.953190][ T29] audit: type=1400 audit(1770721658.185:392): avc: denied { ioctl } for pid=6733 comm="syz.1.161" path="socket:[11796]" dev="sockfs" ino=11796 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 145.995992][ T29] audit: type=1400 audit(1770721658.332:393): avc: denied { create } for pid=6748 comm="syz.4.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 146.126571][ T29] audit: type=1400 audit(1770721658.332:394): avc: denied { setopt } for pid=6748 comm="syz.4.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 146.260890][ T29] audit: type=1400 audit(1770721658.658:395): avc: denied { setopt } for pid=6758 comm="syz.0.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 147.308583][ T6769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.168'. [ 147.567596][ T1205] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 148.222276][ T6783] netlink: 'syz.3.171': attribute type 2 has an invalid length. [ 148.230142][ T6783] netlink: 'syz.3.171': attribute type 8 has an invalid length. [ 148.238034][ T6783] netlink: 132 bytes leftover after parsing attributes in process `syz.3.171'. [ 148.284812][ T6780] overlay: Unknown parameter '¨' [ 148.316837][ T1205] usb 3-1: Using ep0 maxpacket: 16 [ 148.669294][ T1205] usb 3-1: config 0 has an invalid interface number: 98 but max is 0 [ 148.688051][ T1205] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.806240][ T6787] netlink: 164 bytes leftover after parsing attributes in process `syz.4.173'. [ 148.969760][ T1205] usb 3-1: config 0 has no interface number 0 [ 148.994629][ T1205] usb 3-1: config 0 interface 98 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 149.018300][ T1205] usb 3-1: config 0 interface 98 altsetting 10 endpoint 0x2 has an invalid bInterval 245, changing to 11 [ 149.060437][ T1205] usb 3-1: config 0 interface 98 altsetting 10 bulk endpoint 0x9 has invalid maxpacket 1024 [ 149.087370][ T1205] usb 3-1: config 0 interface 98 altsetting 10 has a duplicate endpoint with address 0x8, skipping [ 149.115261][ T1205] usb 3-1: config 0 interface 98 altsetting 10 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 149.135487][ T1205] usb 3-1: config 0 interface 98 altsetting 10 has a duplicate endpoint with address 0x1, skipping [ 149.154799][ T1205] usb 3-1: config 0 interface 98 altsetting 10 has a duplicate endpoint with address 0x9, skipping [ 149.173774][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 149.192605][ T1205] usb 3-1: config 0 interface 98 altsetting 10 has a duplicate endpoint with address 0x8, skipping [ 149.412420][ T1205] usb 3-1: config 0 interface 98 has no altsetting 0 [ 149.429176][ T1205] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0203, bcdDevice=3a.f5 [ 149.469105][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 149.472576][ T1205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.484088][ T24] usb 4-1: config 0 has an invalid interface number: 161 but max is 0 [ 149.492257][ T1205] usb 3-1: Product: syz [ 149.492278][ T1205] usb 3-1: Manufacturer: syz [ 149.492293][ T1205] usb 3-1: SerialNumber: syz [ 149.502880][ T1205] usb 3-1: config 0 descriptor?? [ 149.533229][ T24] usb 4-1: config 0 has no interface number 0 [ 149.540138][ T6766] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 149.553362][ T24] usb 4-1: config 0 interface 161 has no altsetting 0 [ 149.568564][ T24] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=31.ae [ 149.595839][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.673803][ T24] usb 4-1: Product: syz [ 149.677998][ T24] usb 4-1: Manufacturer: syz [ 149.692687][ T24] usb 4-1: SerialNumber: syz [ 149.712505][ T24] usb 4-1: config 0 descriptor?? [ 149.727609][ T24] em28xx 4-1:0.161: New device syz syz @ 480 Mbps (0413:6023, interface 161, class 161) [ 149.756549][ T6766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.758634][ T24] em28xx 4-1:0.161: Video interface 161 found: bulk [ 149.818493][ T6766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.861362][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 149.861377][ T29] audit: type=1400 audit(1770721663.450:399): avc: denied { ioctl } for pid=6809 comm="syz.0.181" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=12505 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 150.180382][ T24] em28xx 4-1:0.161: unknown em28xx chip ID (0) [ 150.187609][ T29] audit: type=1400 audit(1770721663.639:400): avc: denied { name_bind } for pid=6812 comm="syz.0.182" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 150.979658][ T1205] option 3-1:0.98: GSM modem (1-port) converter detected [ 151.078690][ T1205] usb 3-1: USB disconnect, device number 7 [ 151.140214][ T1205] option 3-1:0.98: device disconnected [ 151.204264][ T24] em28xx 4-1:0.161: failed to read eeprom (err=-110) [ 151.215030][ T24] em28xx 4-1:0.161: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 151.461454][ T24] em28xx 4-1:0.161: Identified as Leadtek Winfast USB II (card=7) [ 151.479391][ T24] em28xx 4-1:0.161: analog set to bulk mode. [ 151.526459][ T793] em28xx 4-1:0.161: Registering V4L2 extension [ 152.049986][ T6836] trusted_key: encrypted_key: insufficient parameters specified [ 152.191269][ T29] audit: type=1400 audit(1770721665.886:401): avc: denied { create } for pid=6833 comm="syz.0.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 152.252092][ T793] em28xx 4-1:0.161: failed to trigger read from i2c address 0x4a (error=-5) [ 152.253319][ T5925] usb 4-1: USB disconnect, device number 3 [ 152.280408][ T793] em28xx 4-1:0.161: failed to trigger read from i2c address 0x48 (error=-19) [ 152.303349][ T5925] em28xx 4-1:0.161: Disconnecting em28xx [ 152.307551][ T793] em28xx 4-1:0.161: failed to trigger read from i2c address 0x42 (error=-19) [ 152.624594][ T793] em28xx 4-1:0.161: Config register raw data: 0xffffffed [ 152.631777][ T793] em28xx 4-1:0.161: AC97 chip type couldn't be determined [ 152.639796][ T793] em28xx 4-1:0.161: No AC97 audio processor [ 152.732742][ T793] usb 4-1: Decoder not found [ 152.771622][ T793] em28xx 4-1:0.161: failed to create media graph [ 152.792257][ T793] em28xx 4-1:0.161: V4L2 device video103 deregistered [ 152.991649][ T6853] netlink: 164 bytes leftover after parsing attributes in process `syz.1.192'. [ 153.353132][ T793] em28xx 4-1:0.161: Remote control support is not available for this card. [ 153.421838][ T5925] em28xx 4-1:0.161: Closing input extension [ 153.588203][ T29] audit: type=1400 audit(1770721667.313:402): avc: denied { read } for pid=6855 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.354498][ T5925] em28xx 4-1:0.161: Freeing device [ 155.854825][ T29] audit: type=1400 audit(1770721669.738:403): avc: denied { ioctl } for pid=6885 comm="syz.3.200" path="socket:[12068]" dev="sockfs" ino=12068 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 155.967387][ T29] audit: type=1400 audit(1770721669.854:404): avc: denied { create } for pid=6888 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 156.145381][ T29] audit: type=1400 audit(1770721669.875:405): avc: denied { bind } for pid=6888 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 156.203696][ T29] audit: type=1400 audit(1770721669.875:406): avc: denied { listen } for pid=6888 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 156.246531][ T29] audit: type=1400 audit(1770721669.875:407): avc: denied { connect } for pid=6888 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 156.394548][ T29] audit: type=1400 audit(1770721669.938:408): avc: denied { create } for pid=6884 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 156.453526][ T29] audit: type=1400 audit(1770721669.938:409): avc: denied { ioctl } for pid=6884 comm="syz.1.201" path="socket:[12082]" dev="sockfs" ino=12082 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 156.563996][ T29] audit: type=1400 audit(1770721670.022:410): avc: denied { ioctl } for pid=6884 comm="syz.1.201" path="socket:[12067]" dev="sockfs" ino=12067 ioctlcmd=0xae83 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 156.823429][ T6897] trusted_key: encrypted_key: insufficient parameters specified [ 157.053688][ T29] audit: type=1400 audit(1770721670.074:411): avc: denied { read } for pid=6884 comm="syz.1.201" dev="sockfs" ino=12067 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 157.143048][ T29] audit: type=1400 audit(1770721670.190:412): avc: denied { setopt } for pid=6884 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 159.152615][ T6931] FAULT_INJECTION: forcing a failure. [ 159.152615][ T6931] name failslab, interval 1, probability 0, space 0, times 1 [ 159.165708][ T6931] CPU: 0 UID: 0 PID: 6931 Comm: syz.4.212 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.165737][ T6931] Tainted: [L]=SOFTLOCKUP [ 159.165744][ T6931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 159.165754][ T6931] Call Trace: [ 159.165759][ T6931] [ 159.165769][ T6931] dump_stack_lvl+0x100/0x190 [ 159.165802][ T6931] should_fail_ex.cold+0x5/0xa [ 159.165824][ T6931] should_failslab+0xc2/0x120 [ 159.165850][ T6931] ? bpf_test_init.isra.0+0x88/0x100 [ 159.165876][ T6931] __kmalloc_noprof+0xf6/0x9c0 [ 159.165913][ T6931] ? bpf_test_init.isra.0+0x88/0x100 [ 159.165938][ T6931] bpf_test_init.isra.0+0x88/0x100 [ 159.165967][ T6931] bpf_prog_test_run_skb+0x489/0x3140 [ 159.165992][ T6931] ? find_held_lock+0x2b/0x80 [ 159.166016][ T6931] ? __fget_files+0x215/0x3d0 [ 159.166048][ T6931] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 159.166072][ T6931] ? fput+0x79/0x100 [ 159.166098][ T6931] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 159.166118][ T6931] __sys_bpf+0x1e56/0x5050 [ 159.166142][ T6931] ? __pfx___sys_bpf+0x10/0x10 [ 159.166160][ T6931] ? proc_fail_nth_write+0x9f/0x220 [ 159.166187][ T6931] ? find_held_lock+0x2b/0x80 [ 159.166219][ T6931] ? find_held_lock+0x2b/0x80 [ 159.166245][ T6931] ? ksys_write+0x190/0x250 [ 159.166273][ T6931] ? __mutex_unlock_slowpath+0x15c/0x790 [ 159.166313][ T6931] ? fput+0x79/0x100 [ 159.166344][ T6931] ? ksys_write+0x1ac/0x250 [ 159.166365][ T6931] ? __pfx_ksys_write+0x10/0x10 [ 159.166390][ T6931] __x64_sys_bpf+0x7b/0xc0 [ 159.166411][ T6931] ? lockdep_hardirqs_on+0x78/0x100 [ 159.166435][ T6931] do_syscall_64+0xc9/0xf80 [ 159.166463][ T6931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.166483][ T6931] RIP: 0033:0x7fad4079af79 [ 159.166498][ T6931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.166518][ T6931] RSP: 002b:00007fad41731028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 159.166537][ T6931] RAX: ffffffffffffffda RBX: 00007fad40a15fa0 RCX: 00007fad4079af79 [ 159.166551][ T6931] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 159.166563][ T6931] RBP: 00007fad41731090 R08: 0000000000000000 R09: 0000000000000000 [ 159.166575][ T6931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.166586][ T6931] R13: 00007fad40a16038 R14: 00007fad40a15fa0 R15: 00007ffcbe267618 [ 159.166616][ T6931] [ 160.385454][ T5873] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 160.747023][ T5873] usb 4-1: device descriptor read/64, error -71 [ 161.013417][ T5873] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 161.090781][ T6961] SELinux: policydb string length 262152 does not match expected length 8 [ 161.099726][ T6961] SELinux: failed to load policy [ 161.147097][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 161.147131][ T29] audit: type=1400 audit(1770721675.229:417): avc: denied { load_policy } for pid=6956 comm="syz.1.219" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 161.452319][ T5873] usb 4-1: device descriptor read/64, error -71 [ 161.557241][ T5873] usb usb4-port1: attempt power cycle [ 161.656682][ T6968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.222'. [ 161.890298][ T5873] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 161.921801][ T5873] usb 4-1: device descriptor read/8, error -71 [ 162.109342][ T1205] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 162.185382][ T5873] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 162.205786][ T5873] usb 4-1: device descriptor read/8, error -71 [ 162.288038][ T1205] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.312800][ T1205] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 162.332983][ T5873] usb usb4-port1: unable to enumerate USB device [ 162.341168][ T1205] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.351358][ T1205] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.363409][ T1205] usb 5-1: config 0 descriptor?? [ 162.391522][ T1205] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 162.624399][ T6973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.781330][ T6973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.951605][ T29] audit: type=1400 audit(1770721677.192:418): avc: denied { mount } for pid=6970 comm="syz.4.223" name="/" dev="ramfs" ino=13439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 163.830079][ T5804] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 164.037295][ T5804] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.057974][ T5804] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 164.079610][ T5804] usb 3-1: config 0 interface 0 has no altsetting 0 [ 164.086996][ T5804] usb 3-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 164.087024][ T29] audit: type=1400 audit(1770721678.368:419): avc: denied { write } for pid=7007 comm="syz.1.231" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 164.121740][ T5804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.191586][ T5804] usb 3-1: config 0 descriptor?? [ 164.504475][ T7015] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.233'. [ 164.526388][ T7015] netlink: 'syz.3.233': attribute type 4 has an invalid length. [ 164.703529][ T1205] usb 5-1: USB disconnect, device number 3 [ 164.882162][ T5873] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 164.895165][ T5804] usbhid 3-1:0.0: can't add hid device: -71 [ 164.901184][ T5804] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 164.936203][ T5804] usb 3-1: USB disconnect, device number 8 [ 165.529733][ T5873] usb 1-1: Using ep0 maxpacket: 8 [ 165.616555][ T5873] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 165.628515][ T5873] usb 1-1: config 179 has no interface number 0 [ 165.649972][ T5873] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 165.677897][ T5873] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 165.690476][ T5873] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 165.705347][ T5873] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 165.746729][ T5873] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 165.840063][ T5873] usb 1-1: New USB device found, idVendor=12ab, idProduct=909d, bcdDevice=1e.eb [ 165.853280][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.039145][ T7017] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 166.299305][ T5873] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input7 [ 166.408995][ T29] audit: type=1400 audit(1770721681.815:420): avc: denied { read } for pid=5159 comm="acpid" name="js0" dev="devtmpfs" ino=2855 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 166.507197][ T5873] usb 1-1: USB disconnect, device number 4 [ 166.507237][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 166.521377][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 166.549994][ T29] audit: type=1400 audit(1770721681.815:421): avc: denied { open } for pid=5159 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2855 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 166.617137][ T29] audit: type=1400 audit(1770721681.815:422): avc: denied { ioctl } for pid=5159 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2855 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 166.735797][ T29] audit: type=1400 audit(1770721681.899:423): avc: denied { write } for pid=7016 comm="syz.0.234" name="cgroup.subtree_control" dev="cgroup2" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 166.776962][ T29] audit: type=1400 audit(1770721681.899:424): avc: denied { open } for pid=7016 comm="syz.0.234" path="" dev="cgroup2" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 167.248942][ T29] audit: type=1400 audit(1770721681.920:425): avc: denied { ioctl } for pid=7016 comm="syz.0.234" path="" dev="cgroup2" ino=213 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 167.582793][ T29] audit: type=1400 audit(1770721683.043:426): avc: denied { mounton } for pid=7039 comm="syz.3.240" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 168.188914][ T29] audit: type=1400 audit(1770721683.295:427): avc: denied { read } for pid=7039 comm="syz.3.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.314490][ T29] audit: type=1400 audit(1770721683.820:428): avc: denied { unmount } for pid=5801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 168.407670][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.242'. [ 168.513273][ T29] audit: type=1400 audit(1770721684.030:429): avc: denied { accept } for pid=7053 comm="syz.2.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 169.529650][ T5804] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 169.809758][ T5804] usb 2-1: Using ep0 maxpacket: 32 [ 170.818453][ T5804] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 170.826919][ T5804] usb 2-1: config 4 has no interface number 0 [ 170.833021][ T5804] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.844768][ T5804] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.814621][ T5804] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 171.824161][ T5804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.491847][ T5804] usb 2-1: can't set config #4, error -71 [ 172.532073][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 172.532089][ T29] audit: type=1400 audit(1770721688.250:432): avc: denied { ioctl } for pid=7094 comm="syz.3.254" path="socket:[13754]" dev="sockfs" ino=13754 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 172.567999][ T29] audit: type=1400 audit(1770721688.281:433): avc: denied { bind } for pid=7094 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 172.700282][ T5804] usb 2-1: USB disconnect, device number 3 [ 172.727080][ T7099] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 174.110491][ T29] audit: type=1400 audit(1770721689.814:434): avc: denied { create } for pid=7094 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 174.140517][ T29] audit: type=1400 audit(1770721689.825:435): avc: denied { setopt } for pid=7094 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 174.162365][ T29] audit: type=1400 audit(1770721689.888:436): avc: denied { ioctl } for pid=7094 comm="syz.3.254" path="socket:[13111]" dev="sockfs" ino=13111 ioctlcmd=0x48e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 175.070557][ T7115] capability: warning: `syz.4.256' uses deprecated v2 capabilities in a way that may be insecure [ 175.874111][ T29] audit: type=1400 audit(1770721691.714:437): avc: denied { sqpoll } for pid=7104 comm="syz.4.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 176.519455][ T7118] netlink: 164 bytes leftover after parsing attributes in process `syz.3.259'. [ 179.427201][ T7146] netlink: 164 bytes leftover after parsing attributes in process `syz.0.266'. [ 179.918608][ T7153] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 179.927793][ T29] audit: type=1400 audit(1770721695.997:438): avc: denied { write } for pid=7152 comm="syz.0.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 180.092683][ T7151] netlink: 20 bytes leftover after parsing attributes in process `syz.3.268'. [ 180.200269][ T29] audit: type=1400 audit(1770721696.302:439): avc: denied { mount } for pid=7150 comm="syz.3.268" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 180.228314][ T29] audit: type=1400 audit(1770721696.323:440): avc: denied { mounton } for pid=7150 comm="syz.3.268" path="/57/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 180.294559][ T29] audit: type=1400 audit(1770721696.386:441): avc: denied { unmount } for pid=5801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 182.365678][ T7175] netlink: 164 bytes leftover after parsing attributes in process `syz.0.275'. [ 182.884922][ T5923] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 183.018194][ T29] audit: type=1400 audit(1770721699.252:442): avc: denied { read append } for pid=7187 comm="syz.2.281" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 183.227281][ T29] audit: type=1400 audit(1770721699.283:443): avc: denied { open } for pid=7187 comm="syz.2.281" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 183.280687][ T5923] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 183.583150][ T29] audit: type=1400 audit(1770721699.798:444): avc: denied { write } for pid=7187 comm="syz.2.281" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 183.766394][ T5923] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 183.801514][ T5923] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 183.837184][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.978054][ T7179] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 184.026794][ T5923] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 184.481816][ T29] audit: type=1400 audit(1770721700.774:445): avc: denied { append } for pid=7178 comm="syz.3.278" name="midi3" dev="devtmpfs" ino=2862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 184.769974][ T7208] netlink: 'syz.2.285': attribute type 12 has an invalid length. [ 185.123435][ T29] audit: type=1400 audit(1770721701.225:446): avc: denied { mount } for pid=7178 comm="syz.3.278" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 186.102436][ T29] audit: type=1400 audit(1770721701.551:447): avc: denied { mounton } for pid=7206 comm="syz.0.283" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 186.222108][ T5873] usb 4-1: USB disconnect, device number 8 [ 186.237602][ T29] audit: type=1400 audit(1770721702.632:448): avc: denied { unmount } for pid=5801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 186.441308][ T29] audit: type=1400 audit(1770721702.842:449): avc: denied { write } for pid=7220 comm="syz.4.289" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 186.514811][ T7225] netlink: 'syz.0.287': attribute type 5 has an invalid length. [ 186.528630][ T7226] netlink: 20 bytes leftover after parsing attributes in process `syz.4.289'. [ 186.557773][ T29] audit: type=1400 audit(1770721702.916:450): avc: denied { mount } for pid=7223 comm="syz.0.287" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 186.616808][ T7228] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7228 comm=syz.0.287 [ 186.689119][ T29] audit: type=1400 audit(1770721702.916:451): avc: denied { remount } for pid=7223 comm="syz.0.287" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 186.769144][ T29] audit: type=1400 audit(1770721703.063:452): avc: denied { block_suspend } for pid=7221 comm="syz.3.288" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 187.384063][ T29] audit: type=1400 audit(1770721703.115:453): avc: denied { unmount } for pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 187.756369][ T29] audit: type=1400 audit(1770721704.228:454): avc: denied { accept } for pid=7231 comm="syz.4.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 187.830261][ T29] audit: type=1400 audit(1770721704.249:455): avc: denied { map } for pid=7231 comm="syz.4.292" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 188.164562][ T7240] netlink: 36 bytes leftover after parsing attributes in process `syz.3.294'. [ 190.669436][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 190.669452][ T29] audit: type=1400 audit(1770721707.283:459): avc: denied { append } for pid=7259 comm="syz.0.298" name="demux0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 190.999692][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 191.006039][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 191.399309][ T29] audit: type=1400 audit(1770721708.049:460): avc: denied { mount } for pid=7278 comm="syz.2.302" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 191.432923][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.302'. [ 191.523923][ T29] audit: type=1400 audit(1770721708.175:461): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 191.624146][ T7283] netlink: 24 bytes leftover after parsing attributes in process `syz.2.303'. [ 192.156724][ T29] audit: type=1400 audit(1770721708.847:462): avc: denied { read write } for pid=7290 comm="syz.2.305" dev="sockfs" ino=14654 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 192.258128][ T7293] program syz.0.304 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.394595][ T7293] netlink: 'syz.0.304': attribute type 1 has an invalid length. [ 192.458459][ T7250] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 192.912337][ T7306] trusted_key: encrypted_key: key user:syz not found [ 192.929176][ T7306] overlayfs: overlapping lowerdir path [ 193.060955][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 193.067115][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 193.082297][ T5815] Bluetooth: hci4: command 0x0406 tx timeout [ 193.090172][ T5812] Bluetooth: hci2: command 0x0406 tx timeout [ 196.511831][ T7332] FAULT_INJECTION: forcing a failure. [ 196.511831][ T7332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.567220][ T7332] CPU: 0 UID: 0 PID: 7332 Comm: syz.3.315 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.567257][ T7332] Tainted: [L]=SOFTLOCKUP [ 196.567263][ T7332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 196.567277][ T7332] Call Trace: [ 196.567283][ T7332] [ 196.567289][ T7332] dump_stack_lvl+0x100/0x190 [ 196.567322][ T7332] should_fail_ex.cold+0x5/0xa [ 196.567346][ T7332] _copy_to_user+0x32/0xd0 [ 196.567378][ T7332] simple_read_from_buffer+0xcb/0x170 [ 196.567402][ T7332] proc_fail_nth_read+0x1af/0x230 [ 196.567428][ T7332] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.567455][ T7332] ? rw_verify_area+0xce/0x6d0 [ 196.567482][ T7332] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.567506][ T7332] vfs_read+0x1e4/0xb30 [ 196.567529][ T7332] ? __pfx_vfs_read+0x10/0x10 [ 196.567548][ T7332] ? find_held_lock+0x2b/0x80 [ 196.567577][ T7332] ? __fget_files+0x215/0x3d0 [ 196.567607][ T7332] ? __fget_files+0x21f/0x3d0 [ 196.567640][ T7332] ksys_read+0x12a/0x250 [ 196.567659][ T7332] ? __pfx_ksys_read+0x10/0x10 [ 196.567686][ T7332] do_syscall_64+0xc9/0xf80 [ 196.567714][ T7332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.567731][ T7332] RIP: 0033:0x7fc73235b84e [ 196.567747][ T7332] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 196.567764][ T7332] RSP: 002b:00007fc7331effe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 196.567782][ T7332] RAX: ffffffffffffffda RBX: 00007fc7331f06c0 RCX: 00007fc73235b84e [ 196.567793][ T7332] RDX: 000000000000000f RSI: 00007fc7331f00a0 RDI: 0000000000000003 [ 196.567805][ T7332] RBP: 00007fc7331f0090 R08: 0000000000000000 R09: 0000000000000000 [ 196.567815][ T7332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.567826][ T7332] R13: 00007fc732616038 R14: 00007fc732615fa0 R15: 00007ffd2264f7e8 [ 196.567854][ T7332] [ 198.507333][ T29] audit: type=1326 audit(1770721716.521:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2799af79 code=0x7fc00000 [ 198.583159][ T5859] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 198.745325][ T5859] usb 4-1: Using ep0 maxpacket: 32 [ 198.797369][ T5859] usb 4-1: config 0 has an invalid interface number: 161 but max is 0 [ 198.902665][ T5859] usb 4-1: config 0 has no interface number 0 [ 199.009368][ T5859] usb 4-1: config 0 interface 161 has no altsetting 0 [ 199.109283][ T5859] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=31.ae [ 199.221562][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.299956][ T5859] usb 4-1: Product: syz [ 199.357251][ T5859] usb 4-1: Manufacturer: syz [ 199.384498][ T5859] usb 4-1: SerialNumber: syz [ 199.440992][ T5859] usb 4-1: config 0 descriptor?? [ 199.455224][ T5859] em28xx 4-1:0.161: New device syz syz @ 480 Mbps (0413:6023, interface 161, class 161) [ 199.517749][ T5859] em28xx 4-1:0.161: Video interface 161 found: bulk [ 199.723877][ T7371] xt_TCPMSS: Only works on TCP SYN packets [ 199.841603][ T5859] em28xx 4-1:0.161: unknown em28xx chip ID (0) [ 200.055551][ T7375] xt_hashlimit: size too large, truncated to 1048576 [ 200.754587][ T5859] em28xx 4-1:0.161: failed to read eeprom (err=-110) [ 200.840772][ T5859] em28xx 4-1:0.161: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 201.040330][ T5859] em28xx 4-1:0.161: Identified as Leadtek Winfast USB II (card=7) [ 201.065850][ T5859] em28xx 4-1:0.161: analog set to bulk mode. [ 201.124036][ T24] em28xx 4-1:0.161: Registering V4L2 extension [ 201.292315][ T5923] usb 4-1: USB disconnect, device number 9 [ 201.300130][ T5923] em28xx 4-1:0.161: Disconnecting em28xx [ 202.054201][ T24] em28xx 4-1:0.161: Config register raw data: 0xffffffed [ 202.064698][ T29] audit: type=1400 audit(1770721720.248:464): avc: denied { create } for pid=7396 comm="syz.4.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 202.134855][ T29] audit: type=1400 audit(1770721720.248:465): avc: denied { setopt } for pid=7396 comm="syz.4.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 202.292504][ T29] audit: type=1400 audit(1770721720.322:466): avc: denied { create } for pid=7396 comm="syz.4.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 202.294958][ T24] em28xx 4-1:0.161: AC97 chip type couldn't be determined [ 202.489548][ T29] audit: type=1400 audit(1770721720.322:467): avc: denied { getopt } for pid=7396 comm="syz.4.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 203.006238][ T24] em28xx 4-1:0.161: No AC97 audio processor [ 203.041468][ T24] usb 4-1: Decoder not found [ 203.050441][ T24] em28xx 4-1:0.161: failed to create media graph [ 203.094353][ T24] em28xx 4-1:0.161: V4L2 device video103 deregistered [ 203.155997][ T24] em28xx 4-1:0.161: Remote control support is not available for this card. [ 203.935893][ T5923] em28xx 4-1:0.161: Closing input extension [ 204.020248][ T5923] em28xx 4-1:0.161: Freeing device [ 205.051588][ T29] audit: type=1400 audit(1770721723.376:468): avc: denied { setopt } for pid=7423 comm="syz.4.336" lport=45344 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 205.184656][ T29] audit: type=1400 audit(1770721723.408:469): avc: denied { name_bind } for pid=7425 comm="syz.3.337" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 205.229658][ T29] audit: type=1400 audit(1770721723.408:470): avc: denied { node_bind } for pid=7425 comm="syz.3.337" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 205.255857][ T29] audit: type=1400 audit(1770721723.408:471): avc: denied { write } for pid=7423 comm="syz.4.336" path="socket:[14950]" dev="sockfs" ino=14950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 205.368291][ T29] audit: type=1400 audit(1770721723.418:472): avc: denied { read } for pid=7425 comm="syz.3.337" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 205.398033][ T29] audit: type=1400 audit(1770721723.418:473): avc: denied { open } for pid=7425 comm="syz.3.337" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 205.432276][ T29] audit: type=1400 audit(1770721723.418:474): avc: denied { ioctl } for pid=7425 comm="syz.3.337" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 205.531291][ T29] audit: type=1400 audit(1770721723.418:475): avc: denied { set_context_mgr } for pid=7425 comm="syz.3.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 206.138179][ T7445] netlink: 20 bytes leftover after parsing attributes in process `syz.2.342'. [ 206.922956][ T29] audit: type=1400 audit(1770721725.340:476): avc: denied { write } for pid=7459 comm="syz.3.345" path="socket:[14248]" dev="sockfs" ino=14248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 207.530594][ T29] audit: type=1400 audit(1770721725.445:477): avc: denied { mount } for pid=7449 comm="syz.2.343" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 209.299294][ T5873] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 209.471938][ T5873] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 209.480140][ T5873] usb 3-1: config 8 has no interface number 0 [ 209.528157][ T5873] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 209.568404][ T5873] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 209.613613][ T5873] usb 3-1: config 8 interface 177 has no altsetting 0 [ 209.637109][ T5873] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 209.666667][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.701548][ T7483] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 211.083076][ T5873] usb 3-1: string descriptor 0 read error: -71 [ 211.097816][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 211.132709][ T5873] ir_toy 3-1:8.177: required endpoints not found [ 211.318346][ T5873] usb 3-1: USB disconnect, device number 9 [ 211.728390][ T5873] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 211.972048][ T5873] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.987941][ T5873] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 212.020120][ T5873] usb 3-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 212.029702][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.040602][ T5873] usb 3-1: config 0 descriptor?? [ 213.257489][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 213.257505][ T29] audit: type=1400 audit(1770721731.533:481): avc: denied { append } for pid=7525 comm="syz.2.360" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 213.259006][ T5925] usb 3-1: USB disconnect, device number 10 [ 214.052384][ T5925] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 214.223854][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 214.231000][ T5925] usb 5-1: config 0 has an invalid interface number: 161 but max is 0 [ 214.242984][ T5925] usb 5-1: config 0 has no interface number 0 [ 214.249372][ T5925] usb 5-1: config 0 interface 161 has no altsetting 0 [ 214.262153][ T5925] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=31.ae [ 214.304222][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.376678][ T5925] usb 5-1: Product: syz [ 214.386269][ T5925] usb 5-1: Manufacturer: syz [ 214.405231][ T5925] usb 5-1: SerialNumber: syz [ 214.446812][ T5925] usb 5-1: config 0 descriptor?? [ 214.463997][ T5925] em28xx 5-1:0.161: New device syz syz @ 480 Mbps (0413:6023, interface 161, class 161) [ 214.493578][ T5925] em28xx 5-1:0.161: Video interface 161 found: bulk [ 214.618536][ T7555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.799314][ T7555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.919620][ T5925] em28xx 5-1:0.161: unknown em28xx chip ID (0) [ 214.927028][ T7563] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=52 sclass=netlink_tcpdiag_socket pid=7563 comm=syz.1.372 [ 214.990944][ T7565] ieee802154 phy0 wpan0: encryption failed: -22 [ 214.997336][ T29] audit: type=1400 audit(1770721734.826:482): avc: denied { write } for pid=7562 comm="syz.1.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 215.657331][ T5925] em28xx 5-1:0.161: failed to read eeprom (err=-110) [ 215.669393][ T5925] em28xx 5-1:0.161: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 215.805025][ T5925] em28xx 5-1:0.161: Identified as Leadtek Winfast USB II (card=7) [ 216.178469][ T5925] em28xx 5-1:0.161: analog set to bulk mode. [ 216.184534][ T1205] em28xx 5-1:0.161: Registering V4L2 extension [ 216.262693][ T5925] usb 5-1: USB disconnect, device number 4 [ 216.269650][ T5925] em28xx 5-1:0.161: Disconnecting em28xx [ 216.428335][ T1205] em28xx 5-1:0.161: Config register raw data: 0xffffffed [ 216.449090][ T1205] em28xx 5-1:0.161: AC97 chip type couldn't be determined [ 216.469363][ T1205] em28xx 5-1:0.161: No AC97 audio processor [ 216.479467][ T1205] usb 5-1: Decoder not found [ 216.644885][ T1205] em28xx 5-1:0.161: failed to create media graph [ 216.651257][ T1205] em28xx 5-1:0.161: V4L2 device video103 deregistered [ 216.678172][ T1205] em28xx 5-1:0.161: Remote control support is not available for this card. [ 216.692405][ T5925] em28xx 5-1:0.161: Closing input extension [ 216.755321][ T5925] em28xx 5-1:0.161: Freeing device [ 217.553045][ T7590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.378'. [ 217.984512][ T7598] overlayfs: overlapping lowerdir path [ 218.076479][ T7602] netlink: 14 bytes leftover after parsing attributes in process `syz.3.381'. [ 219.008365][ T24] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 219.118506][ T7615] Bluetooth: MGMT ver 1.23 [ 219.189529][ T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 219.211753][ T24] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 219.250558][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.311362][ T24] usb 2-1: config 0 descriptor?? [ 220.424789][ T5925] usb 2-1: USB disconnect, device number 4 [ 221.654097][ T5804] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 221.939647][ T5804] usb 3-1: Using ep0 maxpacket: 32 [ 222.126571][ T5804] usb 3-1: config 0 has an invalid interface number: 161 but max is 0 [ 222.147335][ T5804] usb 3-1: config 0 has no interface number 0 [ 222.158751][ T5804] usb 3-1: config 0 interface 161 has no altsetting 0 [ 222.180510][ T5804] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=31.ae [ 222.193768][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.218387][ T5804] usb 3-1: Product: syz [ 222.230851][ T5804] usb 3-1: Manufacturer: syz [ 222.243950][ T5804] usb 3-1: SerialNumber: syz [ 222.264477][ T5804] usb 3-1: config 0 descriptor?? [ 222.282328][ T5804] em28xx 3-1:0.161: New device syz syz @ 480 Mbps (0413:6023, interface 161, class 161) [ 222.304713][ T5804] em28xx 3-1:0.161: Video interface 161 found: bulk [ 222.673181][ T5804] em28xx 3-1:0.161: unknown em28xx chip ID (0) [ 222.712593][ T24] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 222.729866][ T29] audit: type=1400 audit(1770721743.940:483): avc: denied { create } for pid=7649 comm="syz.4.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 223.152148][ T29] audit: type=1400 audit(1770721743.972:484): avc: denied { connect } for pid=7649 comm="syz.4.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 223.207886][ T29] audit: type=1400 audit(1770721743.972:485): avc: denied { write } for pid=7649 comm="syz.4.393" path="socket:[16442]" dev="sockfs" ino=16442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 223.242103][ T7658] netlink: 'syz.4.393': attribute type 3 has an invalid length. [ 223.254131][ T7658] netlink: 'syz.4.393': attribute type 3 has an invalid length. [ 223.595621][ T24] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 223.605380][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.764633][ T7666] netlink: 36 bytes leftover after parsing attributes in process `syz.1.396'. [ 223.793776][ T24] usb 4-1: config 0 descriptor?? [ 223.803135][ T7666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.396'. [ 223.812564][ T7666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.396'. [ 223.863975][ T5804] em28xx 3-1:0.161: failed to read eeprom (err=-110) [ 223.920264][ T5804] em28xx 3-1:0.161: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 224.206867][ T5804] em28xx 3-1:0.161: Identified as Leadtek Winfast USB II (card=7) [ 224.214801][ T5804] em28xx 3-1:0.161: analog set to bulk mode. [ 225.193389][ T24] usb 4-1: string descriptor 0 read error: -71 [ 225.208266][ T5914] em28xx 3-1:0.161: Registering V4L2 extension [ 225.229637][ T24] ldusb 4-1:0.0: Interrupt in endpoint not found [ 225.301226][ T5804] usb 3-1: USB disconnect, device number 11 [ 225.315358][ T5804] em28xx 3-1:0.161: Disconnecting em28xx [ 225.323646][ T24] usb 4-1: USB disconnect, device number 10 [ 226.186476][ T7677] SELinux: policydb string length 262152 does not match expected length 8 [ 226.195425][ T7677] SELinux: failed to load policy [ 226.362760][ T5914] em28xx 3-1:0.161: Config register raw data: 0xffffffed [ 226.388116][ T5914] em28xx 3-1:0.161: AC97 chip type couldn't be determined [ 226.475462][ T5914] em28xx 3-1:0.161: No AC97 audio processor [ 226.501907][ T5914] usb 3-1: Decoder not found [ 226.511285][ T5914] em28xx 3-1:0.161: failed to create media graph [ 226.530537][ T5914] em28xx 3-1:0.161: V4L2 device video103 deregistered [ 226.558302][ T5914] em28xx 3-1:0.161: Remote control support is not available for this card. [ 226.592437][ T5804] em28xx 3-1:0.161: Closing input extension [ 226.629242][ T5804] em28xx 3-1:0.161: Freeing device [ 226.789756][ T5923] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 227.516822][ T5923] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 227.530368][ T5923] usb 5-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 227.555808][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.586622][ T5923] usb 5-1: config 0 descriptor?? [ 229.471970][ T5923] usb 5-1: USB disconnect, device number 5 [ 229.734372][ T7705] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 229.742376][ T7705] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 229.751929][ T7705] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 229.759710][ T7705] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 229.785134][ T7705] binder: 7701:7705 ioctl c0306201 200000000540 returned -22 [ 230.074182][ T29] audit: type=1400 audit(1770721752.291:486): avc: denied { create } for pid=7701 comm="syz.0.404" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 230.352197][ T29] audit: type=1400 audit(1770721752.952:487): avc: denied { unlink } for pid=5799 comm="syz-executor" name="file0" dev="tmpfs" ino=498 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 230.405736][ T29] audit: type=1400 audit(1770721752.984:488): avc: denied { ioctl } for pid=7708 comm="syz.3.398" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 230.490714][ T7711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.592431][ T7711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.058878][ T5804] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 232.068517][ T29] audit: type=1400 audit(1770721754.706:489): avc: denied { write } for pid=7717 comm="syz.4.405" name="file0" dev="tmpfs" ino=450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 232.126835][ T29] audit: type=1400 audit(1770721754.706:490): avc: denied { open } for pid=7717 comm="syz.4.405" path="/81/file0" dev="tmpfs" ino=450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 232.323152][ T29] audit: type=1400 audit(1770721754.727:491): avc: denied { ioctl } for pid=7717 comm="syz.4.405" path="/81/file0" dev="tmpfs" ino=450 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 232.923459][ T29] audit: type=1400 audit(1770721754.748:492): avc: denied { read } for pid=7717 comm="syz.4.405" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 233.053828][ T5804] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 233.221014][ T5923] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 233.234361][ T7730] SELinux: policydb string length 262152 does not match expected length 8 [ 233.243295][ T7730] SELinux: failed to load policy [ 233.399134][ T5923] usb 4-1: Using ep0 maxpacket: 32 [ 233.528467][ T5804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.559352][ T5923] usb 4-1: config 0 has an invalid interface number: 161 but max is 0 [ 233.562999][ T5804] usb 2-1: config 0 descriptor?? [ 233.588760][ T5923] usb 4-1: config 0 has no interface number 0 [ 233.604525][ T5923] usb 4-1: config 0 interface 161 has no altsetting 0 [ 233.623378][ T5923] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=31.ae [ 233.634843][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.650645][ T5923] usb 4-1: Product: syz [ 233.657690][ T5923] usb 4-1: Manufacturer: syz [ 233.665517][ T5923] usb 4-1: SerialNumber: syz [ 233.683224][ T5923] usb 4-1: config 0 descriptor?? [ 233.700007][ T5923] em28xx 4-1:0.161: New device syz syz @ 480 Mbps (0413:6023, interface 161, class 161) [ 233.719884][ T5923] em28xx 4-1:0.161: Video interface 161 found: bulk [ 235.085321][ T5804] usb 2-1: string descriptor 0 read error: -71 [ 235.091563][ T5804] ldusb 2-1:0.0: Interrupt in endpoint not found [ 235.143376][ T5923] em28xx 4-1:0.161: unknown em28xx chip ID (0) [ 235.180547][ T5804] usb 2-1: USB disconnect, device number 5 [ 235.232047][ T5923] em28xx 4-1:0.161: failed to trigger read from i2c address 0xa0 (error=-5) [ 235.241029][ T5923] em28xx 4-1:0.161: board has no eeprom [ 235.299747][ T29] audit: type=1400 audit(1770721758.149:493): avc: denied { read } for pid=7736 comm="syz.3.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 235.319704][ T5923] em28xx 4-1:0.161: Identified as Leadtek Winfast USB II (card=7) [ 235.339303][ T5923] em28xx 4-1:0.161: analog set to bulk mode. [ 235.488981][ T1205] em28xx 4-1:0.161: Registering V4L2 extension [ 235.660258][ T5923] usb 4-1: USB disconnect, device number 11 [ 235.790535][ T1205] em28xx 4-1:0.161: failed to trigger read from i2c address 0x4a (error=-19) [ 235.801152][ T5923] em28xx 4-1:0.161: Disconnecting em28xx [ 236.116084][ T7750] program syz.3.415 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.668388][ T7745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.417'. [ 236.827088][ T1205] em28xx 4-1:0.161: Config register raw data: 0xffffffed [ 236.851918][ T1205] em28xx 4-1:0.161: AC97 chip type couldn't be determined [ 236.866360][ T7756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.886073][ T1205] em28xx 4-1:0.161: No AC97 audio processor [ 236.905506][ T1205] usb 4-1: Decoder not found [ 236.910128][ T1205] em28xx 4-1:0.161: failed to create media graph [ 236.923755][ T1205] em28xx 4-1:0.161: V4L2 device video103 deregistered [ 236.950043][ T1205] em28xx 4-1:0.161: Remote control support is not available for this card. [ 236.958990][ T7756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.981444][ T5923] em28xx 4-1:0.161: Closing input extension [ 237.010295][ T5923] em28xx 4-1:0.161: Freeing device [ 237.040365][ T7760] xt_hashlimit: max too large, truncated to 1048576 [ 237.904761][ T24] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 238.410313][ T5914] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 238.496947][ T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 238.509201][ T24] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 238.518699][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.536893][ T24] usb 2-1: config 0 descriptor?? [ 238.562022][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 238.573028][ T5914] usb 4-1: config index 0 descriptor too short (expected 274, got 18) [ 238.583356][ T5914] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 238.593004][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.602140][ T5914] usb 4-1: Product: syz [ 238.606477][ T5914] usb 4-1: Manufacturer: syz [ 238.611417][ T5914] usb 4-1: SerialNumber: syz [ 238.626412][ T5914] usbtest 4-1:65.0: couldn't get endpoints, -22 [ 238.633097][ T5914] usbtest 4-1:65.0: probe with driver usbtest failed with error -22 [ 238.642629][ T1205] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 240.522765][ T5923] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 240.553062][ T1205] usb 5-1: Invalid ep0 maxpacket: 32 [ 240.565899][ T5873] usb 2-1: USB disconnect, device number 6 [ 240.589921][ T5925] usb 4-1: USB disconnect, device number 12 [ 240.696461][ T5923] usb 3-1: device descriptor read/64, error -71 [ 240.702821][ T1205] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 241.562881][ T7791] SELinux: policydb string length 262152 does not match expected length 8 [ 241.571511][ T7791] SELinux: failed to load policy [ 241.745177][ T5923] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 241.810421][ T5925] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 241.972021][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 242.033105][ T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 242.044185][ T5925] usb 4-1: config 0 has an invalid interface number: 161 but max is 0 [ 242.055485][ T5925] usb 4-1: config 0 has no interface number 0 [ 242.062716][ T5925] usb 4-1: config 0 interface 161 has no altsetting 0 [ 242.071906][ T5925] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=31.ae [ 242.089596][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.102384][ T5925] usb 4-1: Product: syz [ 242.107545][ T5925] usb 4-1: Manufacturer: syz [ 242.114475][ T5925] usb 4-1: SerialNumber: syz [ 242.132401][ T5925] usb 4-1: config 0 descriptor?? [ 242.145750][ T5925] em28xx 4-1:0.161: New device syz syz @ 480 Mbps (0413:6023, interface 161, class 161) [ 242.163666][ T5925] em28xx 4-1:0.161: Video interface 161 found: bulk [ 242.192757][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 242.303521][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.341131][ T9] usb 1-1: config 0 descriptor?? [ 242.549556][ T5925] em28xx 4-1:0.161: unknown em28xx chip ID (0) [ 242.738293][ T7804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.430'. [ 242.876190][ T7809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.976502][ T7809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.343648][ T5925] em28xx 4-1:0.161: failed to read eeprom (err=-110) [ 243.350360][ T5925] em28xx 4-1:0.161: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 243.443574][ T7816] netlink: 40 bytes leftover after parsing attributes in process `syz.1.432'. [ 244.544557][ T5925] em28xx 4-1:0.161: Identified as Leadtek Winfast USB II (card=7) [ 244.552448][ T5925] em28xx 4-1:0.161: analog set to bulk mode. [ 244.558729][ T1205] em28xx 4-1:0.161: Registering V4L2 extension [ 244.612210][ T9] usb 1-1: string descriptor 0 read error: -71 [ 244.625195][ T9] ldusb 1-1:0.0: Interrupt in endpoint not found [ 244.632694][ T1205] em28xx 4-1:0.161: failed to trigger read from i2c address 0x4a (error=-5) [ 244.636792][ T5914] usb 4-1: USB disconnect, device number 13 [ 244.642838][ T1205] em28xx 4-1:0.161: failed to trigger read from i2c address 0x48 (error=-19) [ 244.656261][ T5914] em28xx 4-1:0.161: Disconnecting em28xx [ 244.673191][ T9] usb 1-1: USB disconnect, device number 5 [ 244.688345][ T5888] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 244.777395][ T1205] em28xx 4-1:0.161: Config register raw data: 0xffffffed [ 244.785041][ T1205] em28xx 4-1:0.161: AC97 chip type couldn't be determined [ 244.793514][ T1205] em28xx 4-1:0.161: No AC97 audio processor [ 244.800756][ T1205] usb 4-1: Decoder not found [ 244.807848][ T1205] em28xx 4-1:0.161: failed to create media graph [ 244.814675][ T1205] em28xx 4-1:0.161: V4L2 device video103 deregistered [ 244.823780][ T1205] em28xx 4-1:0.161: Remote control support is not available for this card. [ 244.839434][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 244.853206][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 244.858749][ T5914] em28xx 4-1:0.161: Closing input extension [ 244.876973][ T5888] usb 2-1: config 155 has an invalid interface number: 128 but max is 0 [ 244.888600][ T5914] em28xx 4-1:0.161: Freeing device [ 244.897488][ T5888] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 244.916567][ T5888] usb 2-1: config 155 has no interface number 0 [ 244.923019][ T5888] usb 2-1: config 155 interface 128 has no altsetting 0 [ 244.932768][ T5888] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 244.947631][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.956122][ T5888] usb 2-1: Product: syz [ 244.960332][ T5888] usb 2-1: Manufacturer: syz [ 244.966852][ T5888] usb 2-1: SerialNumber: syz [ 244.988754][ T5888] imon 2-1:155.128: unable to register, err -19 [ 245.021966][ T24] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 245.030460][ T24] usb 3-1: config 1 has no interface number 0 [ 245.036564][ T24] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 245.048909][ T24] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 245.059064][ T24] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.112530][ T24] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 245.122153][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.131037][ T24] usb 3-1: Product: syz [ 245.135591][ T24] usb 3-1: Manufacturer: syz [ 245.140187][ T24] usb 3-1: SerialNumber: syz [ 245.679635][ T7821] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 245.982916][ T9] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 246.125246][ T9] usb 4-1: device descriptor read/64, error -71 [ 246.225115][ T7844] gre0: entered promiscuous mode [ 246.237041][ T7844] gre0: entered allmulticast mode [ 246.258266][ T7844] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 246.304547][ T5914] usb 2-1: USB disconnect, device number 7 [ 246.420633][ T9] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 246.576402][ T9] usb 4-1: device descriptor read/64, error -71 [ 246.635356][ T7850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.441'. [ 246.746544][ T9] usb usb4-port1: attempt power cycle [ 246.752597][ T24] sierra_net 3-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 247.097327][ T9] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 247.227771][ T9] usb 4-1: device descriptor read/8, error -71 [ 247.649879][ T9] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 247.754665][ T9] usb 4-1: device descriptor read/8, error -71 [ 247.816651][ T24] sierra_net 3-1:1.7 wwan0: Submit SYNC failed -71 [ 247.879975][ T9] usb usb4-port1: unable to enumerate USB device [ 247.965561][ T24] sierra_net 3-1:1.7 wwan0: Send SYNC failed, status -71 [ 248.001921][ T24] sierra_net 3-1:1.7 wwan0: Submit SYNC failed -71 [ 248.022765][ T24] sierra_net 3-1:1.7 wwan0: Send SYNC failed, status -71 [ 248.115220][ T24] usb 3-1: USB disconnect, device number 14 [ 248.127530][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.443'. [ 248.136346][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.443'. [ 248.191171][ T24] sierra_net 3-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem [ 248.260403][ T24] sierra_net 3-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 248.277372][ T29] audit: type=1400 audit(1770721771.765:494): avc: denied { read } for pid=5469 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 249.252861][ T7883] SELinux: policydb string length 262152 does not match expected length 8 [ 249.261799][ T7883] SELinux: failed to load policy [ 249.277835][ T24] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 249.467135][ T24] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 249.520001][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.522188][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.526856][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.641121][ T24] usb 4-1: config 0 descriptor?? [ 251.482185][ T7902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.453'. [ 251.727341][ T29] audit: type=1400 audit(1770721775.135:495): avc: denied { read } for pid=7899 comm="syz.1.455" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 252.122227][ T29] audit: type=1400 audit(1770721775.135:496): avc: denied { ioctl } for pid=7899 comm="syz.1.455" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 252.159052][ T24] usb 4-1: string descriptor 0 read error: -71 [ 252.202549][ T24] ldusb 4-1:0.0: Interrupt in endpoint not found [ 252.235072][ T29] audit: type=1400 audit(1770721775.649:497): avc: denied { map } for pid=7898 comm="syz.0.454" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 252.312028][ T24] usb 4-1: USB disconnect, device number 18 [ 252.415369][ T29] audit: type=1400 audit(1770721776.111:498): avc: denied { getopt } for pid=7916 comm="syz.3.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 252.719531][ T7929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.461'. [ 253.734540][ T7936] process 'syz.2.463' launched './file2' with NULL argv: empty string added [ 253.955980][ T29] audit: type=1400 audit(1770721778.499:499): avc: denied { execute } for pid=7935 comm="syz.2.463" name="file2" dev="tmpfs" ino=435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 254.056717][ T29] audit: type=1400 audit(1770721778.520:500): avc: denied { execute_no_trans } for pid=7935 comm="syz.2.463" path="/78/file2" dev="tmpfs" ino=435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 254.993538][ T7949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.467'. [ 255.834360][ T29] audit: type=1400 audit(1770721780.693:501): avc: denied { ioctl } for pid=7951 comm="syz.0.468" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 256.352360][ T5914] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 256.582869][ T5914] usb 3-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 256.663052][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.793856][ T5925] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 257.088538][ T5914] usb 3-1: config 0 descriptor?? [ 257.129022][ T5925] usb 1-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 257.160543][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.185153][ T5925] usb 1-1: config 0 descriptor?? [ 258.803985][ T5914] usb 3-1: string descriptor 0 read error: -71 [ 258.810230][ T5914] ldusb 3-1:0.0: Interrupt in endpoint not found [ 258.820129][ T5914] usb 3-1: USB disconnect, device number 15 [ 259.975778][ T5925] usb 1-1: string descriptor 0 read error: -71 [ 260.001727][ T5925] ldusb 1-1:0.0: Interrupt in endpoint not found [ 260.031547][ T5925] usb 1-1: USB disconnect, device number 6 [ 260.113796][ T7985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.178208][ T7987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.790195][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.481'. [ 262.926428][ T8013] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 262.934226][ T8013] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 262.942678][ T8013] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 262.950428][ T8013] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 263.423830][ T5804] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 263.720722][ T5804] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 263.751321][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.812659][ T5804] usb 4-1: config 0 descriptor?? [ 264.713854][ T8035] : Can't lookup blockdev [ 264.805377][ T8037] ======================================================= [ 264.805377][ T8037] WARNING: The mand mount option has been deprecated and [ 264.805377][ T8037] and is ignored by this kernel. Remove the mand [ 264.805377][ T8037] option from the mount to silence this warning. [ 264.805377][ T8037] ======================================================= [ 265.169886][ T8040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.496'. [ 267.001694][ T29] audit: type=1400 audit(1770721793.432:502): avc: denied { getopt } for pid=8054 comm="syz.0.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 267.157152][ T5804] usb 4-1: string descriptor 0 read error: -71 [ 267.164213][ T5804] ldusb 4-1:0.0: Interrupt in endpoint not found [ 267.198598][ T5804] usb 4-1: USB disconnect, device number 19 [ 268.539193][ T5914] libceph: connect (1)[c::]:6789 error -101 [ 268.619752][ T5914] libceph: mon0 (1)[c::]:6789 connect error [ 268.785081][ T5923] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 268.792748][ T29] audit: type=1400 audit(1770721794.901:503): avc: denied { shutdown } for pid=8073 comm="syz.1.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 268.837224][ T29] audit: type=1400 audit(1770721794.922:504): avc: denied { write } for pid=8073 comm="syz.1.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 268.985225][ T8076] ceph: No mds server is up or the cluster is laggy [ 268.992768][ T5914] libceph: connect (1)[c::]:6789 error -101 [ 269.012525][ T5914] libceph: mon0 (1)[c::]:6789 connect error [ 269.191629][ T5914] libceph: connect (1)[c::]:6789 error -101 [ 269.218468][ T5914] libceph: mon0 (1)[c::]:6789 connect error [ 269.524958][ T5804] libceph: connect (1)[c::]:6789 error -101 [ 269.544276][ T5804] libceph: mon0 (1)[c::]:6789 connect error [ 269.569806][ T5923] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 269.635923][ T8082] ceph: No mds server is up or the cluster is laggy [ 269.672528][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.694217][ T5923] usb 4-1: config 0 descriptor?? [ 271.762151][ T5923] usb 4-1: string descriptor 0 read error: -71 [ 271.787597][ T5923] ldusb 4-1:0.0: Interrupt in endpoint not found [ 272.092472][ T5923] usb 4-1: USB disconnect, device number 20 [ 272.178331][ T8102] tmpfs: Unknown parameter 'hu' [ 272.387583][ T29] audit: type=1400 audit(1770721799.048:505): avc: denied { setopt } for pid=8085 comm="syz.0.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 272.499657][ T29] audit: type=1400 audit(1770721799.048:506): avc: denied { write } for pid=8085 comm="syz.0.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 274.926501][ T29] audit: type=1400 audit(1770721801.746:507): avc: denied { write } for pid=8118 comm="syz.3.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 275.600577][ T8127] fuse: Unknown parameter '000000000000000000030x0000000000000003' [ 275.609946][ T8124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.503'. [ 278.800653][ T29] audit: type=1400 audit(1770721805.798:508): avc: denied { write } for pid=8144 comm="syz.1.519" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 280.333776][ T8155] ceph: No mds server is up or the cluster is laggy [ 281.663471][ T8176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.527'. [ 281.827392][ T5804] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 282.008993][ T5804] usb 2-1: Using ep0 maxpacket: 32 [ 282.064524][ T5804] usb 2-1: config 0 has an invalid interface number: 161 but max is 0 [ 282.082822][ T5804] usb 2-1: config 0 has no interface number 0 [ 282.161672][ T5923] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 282.161783][ T5804] usb 2-1: config 0 interface 161 has no altsetting 0 [ 282.662973][ T5804] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=31.ae [ 282.826805][ T5804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.845372][ T5804] usb 2-1: Product: syz [ 282.855058][ T5804] usb 2-1: Manufacturer: syz [ 282.864912][ T5804] usb 2-1: SerialNumber: syz [ 282.867939][ T5923] usb 5-1: config 2 has an invalid interface number: 220 but max is 0 [ 282.896234][ T5804] usb 2-1: config 0 descriptor?? [ 282.916637][ T5804] em28xx 2-1:0.161: New device syz syz @ 480 Mbps (0413:6023, interface 161, class 161) [ 282.927119][ T5923] usb 5-1: config 2 has no interface number 0 [ 282.949773][ T5923] usb 5-1: config 2 interface 220 has no altsetting 0 [ 282.957300][ T5804] em28xx 2-1:0.161: Video interface 161 found: bulk [ 282.984221][ T5923] usb 5-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=94.f4 [ 283.028938][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.064245][ T5923] usb 5-1: Product: syz [ 283.095397][ T5923] usb 5-1: Manufacturer: syz [ 283.343957][ T5923] usb 5-1: SerialNumber: syz [ 283.349417][ T5804] em28xx 2-1:0.161: unknown em28xx chip ID (0) [ 284.455961][ T8203] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 284.463813][ T8203] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 284.472135][ T8203] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 284.480148][ T8203] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 284.764320][ T5804] em28xx 2-1:0.161: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 284.881431][ T5804] em28xx 2-1:0.161: board has no eeprom [ 285.466313][ T5804] em28xx 2-1:0.161: Identified as Leadtek Winfast USB II (card=7) [ 285.688750][ T5804] em28xx 2-1:0.161: analog set to bulk mode. [ 285.718110][ T5923] usb 5-1: USB disconnect, device number 8 [ 285.770862][ T5859] em28xx 2-1:0.161: Registering V4L2 extension [ 285.808953][ T5804] usb 2-1: USB disconnect, device number 8 [ 285.878847][ T5804] em28xx 2-1:0.161: Disconnecting em28xx [ 286.833554][ T5859] em28xx 2-1:0.161: Config register raw data: 0xffffffed [ 286.856888][ T5859] em28xx 2-1:0.161: AC97 chip type couldn't be determined [ 286.885358][ T5859] em28xx 2-1:0.161: No AC97 audio processor [ 286.913545][ T5859] usb 2-1: Decoder not found [ 286.918240][ T5859] em28xx 2-1:0.161: failed to create media graph [ 286.943292][ T5859] em28xx 2-1:0.161: V4L2 device video103 deregistered [ 287.325649][ T5859] em28xx 2-1:0.161: Remote control support is not available for this card. [ 287.386116][ T5804] em28xx 2-1:0.161: Closing input extension [ 287.504139][ T29] audit: type=1400 audit(1770721814.932:509): avc: denied { read } for pid=8233 comm="syz.1.542" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 288.680945][ T29] audit: type=1400 audit(1770721814.932:510): avc: denied { open } for pid=8233 comm="syz.1.542" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 288.792462][ T5804] em28xx 2-1:0.161: Freeing device [ 288.803339][ T29] audit: type=1400 audit(1770721816.317:511): avc: denied { create } for pid=8223 comm="syz.4.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 290.055634][ T8259] Malformed UNC in devname [ 290.055634][ T8259] [ 290.074974][ T8259] CIFS: VFS: Malformed UNC in devname [ 290.076678][ T5804] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 290.238364][ T5888] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 290.257236][ T5804] usb 3-1: Using ep0 maxpacket: 32 [ 290.423243][ T29] audit: type=1400 audit(1770721817.934:512): avc: denied { mount } for pid=8257 comm="syz.4.548" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 290.457509][ T5804] usb 3-1: config 0 has an invalid interface number: 161 but max is 0 [ 290.474429][ T5804] usb 3-1: config 0 has no interface number 0 [ 290.487892][ T5804] usb 3-1: config 0 interface 161 has no altsetting 0 [ 290.501624][ T5804] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=31.ae [ 290.511916][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.090021][ T5804] usb 3-1: Product: syz [ 291.094289][ T5804] usb 3-1: Manufacturer: syz [ 291.100601][ T5804] usb 3-1: SerialNumber: syz [ 291.107754][ T5804] usb 3-1: config 0 descriptor?? [ 291.773017][ T5888] usb 4-1: config 0 has no interfaces? [ 291.780395][ T5888] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 291.826914][ T5804] em28xx 3-1:0.161: New device syz syz @ 480 Mbps (0413:6023, interface 161, class 161) [ 291.836829][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.934835][ T5804] em28xx 3-1:0.161: Video interface 161 found: bulk [ 292.154561][ T5888] usb 4-1: config 0 descriptor?? [ 292.221449][ T5888] usb 4-1: can't set config #0, error -71 [ 292.231040][ T5888] usb 4-1: USB disconnect, device number 21 [ 292.245470][ T8276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.277522][ T5804] em28xx 3-1:0.161: unknown em28xx chip ID (0) [ 292.362896][ T5804] em28xx 3-1:0.161: failed to trigger read from i2c address 0xa0 (error=-5) [ 292.371652][ T5804] em28xx 3-1:0.161: board has no eeprom [ 292.537729][ T5804] em28xx 3-1:0.161: Identified as Leadtek Winfast USB II (card=7) [ 292.537760][ T5804] em28xx 3-1:0.161: analog set to bulk mode. [ 292.538540][ T5888] em28xx 3-1:0.161: Registering V4L2 extension [ 292.622823][ T5804] usb 3-1: USB disconnect, device number 16 [ 292.688473][ T5804] em28xx 3-1:0.161: Disconnecting em28xx [ 293.208806][ T29] audit: type=1400 audit(1770721820.936:513): avc: denied { unmount } for pid=5800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 293.275127][ T5888] em28xx 3-1:0.161: Config register raw data: 0xffffffed [ 293.298701][ T5888] em28xx 3-1:0.161: AC97 chip type couldn't be determined [ 293.347021][ T5888] em28xx 3-1:0.161: No AC97 audio processor [ 293.392980][ T5888] usb 3-1: Decoder not found [ 293.397624][ T5888] em28xx 3-1:0.161: failed to create media graph [ 293.448850][ T5888] em28xx 3-1:0.161: V4L2 device video103 deregistered [ 293.487644][ T5888] em28xx 3-1:0.161: Remote control support is not available for this card. [ 293.524509][ T5804] em28xx 3-1:0.161: Closing input extension [ 293.554532][ T5804] em28xx 3-1:0.161: Freeing device [ 294.239368][ T8308] netlink: 40 bytes leftover after parsing attributes in process `syz.2.561'. [ 294.315950][ T5925] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 294.867996][ T5914] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 294.907859][ T5925] usb 1-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 294.954073][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.986964][ T5925] usb 1-1: config 0 descriptor?? [ 295.115935][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 295.122842][ T5914] usb 3-1: config 155 has an invalid interface number: 128 but max is 0 [ 295.133097][ T5914] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 295.680327][ T5914] usb 3-1: config 155 has no interface number 0 [ 295.731633][ T5914] usb 3-1: config 155 interface 128 has no altsetting 0 [ 295.778814][ T5914] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 295.792628][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.804433][ T5914] usb 3-1: Product: syz [ 295.810533][ T5914] usb 3-1: Manufacturer: syz [ 295.816053][ T5914] usb 3-1: SerialNumber: syz [ 295.946379][ T5914] imon 3-1:155.128: unable to register, err -19 [ 296.245291][ T8319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.206288][ T5923] usb 3-1: USB disconnect, device number 17 [ 297.283802][ T8319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.471553][ T5925] usb 1-1: string descriptor 0 read error: -71 [ 297.504949][ T5925] ldusb 1-1:0.0: Interrupt in endpoint not found [ 297.984234][ T5925] usb 1-1: USB disconnect, device number 7 [ 298.476353][ T8331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.525712][ T8328] SELinux: policydb string length 262152 does not match expected length 8 [ 298.534369][ T8328] SELinux: failed to load policy [ 298.613948][ T8331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.673382][ T8352] netlink: 20 bytes leftover after parsing attributes in process `syz.4.573'. [ 299.684351][ T8352] Unknown options in mask b7f2 [ 299.733030][ T8353] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 301.121163][ T8357] netlink: 100 bytes leftover after parsing attributes in process `syz.1.575'. [ 303.336566][ T5914] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 303.345816][ T5859] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 303.576707][ T5859] usb 5-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 303.602713][ T5859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.767978][ T5859] usb 5-1: config 0 descriptor?? [ 303.945973][ T29] audit: type=1400 audit(1770721832.127:514): avc: denied { create } for pid=8378 comm="syz.1.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 304.397802][ T29] audit: type=1400 audit(1770721832.138:515): avc: denied { bind } for pid=8378 comm="syz.1.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 304.472582][ T29] audit: type=1400 audit(1770721832.138:516): avc: denied { connect } for pid=8378 comm="syz.1.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 305.675754][ T5914] usb 2-1: unable to get BOS descriptor or descriptor too short [ 305.729007][ T5914] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 305.749417][ T5914] usb 2-1: can't read configurations, error -71 [ 305.923372][ T5859] usb 5-1: string descriptor 0 read error: -71 [ 305.941367][ T5859] ldusb 5-1:0.0: Interrupt in endpoint not found [ 305.979362][ T5859] usb 5-1: USB disconnect, device number 9 [ 306.399053][ T8407] SELinux: policydb string length 262152 does not match expected length 8 [ 306.408033][ T8407] SELinux: failed to load policy [ 308.319602][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 308.326025][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.419757][ T8442] SELinux: policydb string length 262152 does not match expected length 8 [ 310.428642][ T8442] SELinux: failed to load policy [ 310.604462][ T1205] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 310.921392][ T1205] usb 2-1: device descriptor read/64, error -71 [ 311.219016][ T1205] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 311.656540][ T5810] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 311.671311][ T1205] usb 2-1: device descriptor read/64, error -71 [ 311.709324][ T5859] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 311.786597][ T1205] usb usb2-port1: attempt power cycle [ 311.852514][ T5923] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 311.872190][ T5859] usb 1-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 311.921585][ T5859] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 311.938406][ T5859] usb 1-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 311.947468][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.958901][ T5859] usb 1-1: config 0 descriptor?? [ 312.071334][ T5923] usb 3-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 312.080453][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.111654][ T5923] usb 3-1: config 0 descriptor?? [ 312.162303][ T1205] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 312.195592][ T1205] usb 2-1: device descriptor read/8, error -71 [ 312.287260][ T29] audit: type=1400 audit(1770721840.967:517): avc: denied { override_creds } for pid=8450 comm="syz.4.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 312.495145][ T29] audit: type=1400 audit(1770721841.187:518): avc: denied { mount } for pid=8450 comm="syz.4.601" name="/" dev="autofs" ino=18212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 312.604485][ T1205] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 312.652870][ T1205] usb 2-1: device descriptor read/8, error -71 [ 312.797014][ T1205] usb usb2-port1: unable to enumerate USB device [ 313.756358][ T5859] usb 1-1: string descriptor 0 read error: -71 [ 313.776948][ T5859] usb 1-1: USB disconnect, device number 8 [ 314.927485][ T8480] netlink: 40 bytes leftover after parsing attributes in process `syz.3.604'. [ 315.310092][ T5914] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 315.634053][ T5914] usb 4-1: Using ep0 maxpacket: 32 [ 315.637380][ T5923] usb 3-1: string descriptor 0 read error: -71 [ 315.656196][ T5914] usb 4-1: config 155 has an invalid interface number: 128 but max is 0 [ 315.664931][ T5923] ldusb 3-1:0.0: Interrupt in endpoint not found [ 315.710719][ T5923] usb 3-1: USB disconnect, device number 18 [ 315.777100][ T5914] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 315.842449][ T5914] usb 4-1: config 155 has no interface number 0 [ 315.853786][ T5914] usb 4-1: config 155 interface 128 has no altsetting 0 [ 315.893173][ T5914] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 315.936019][ T29] audit: type=1400 audit(1770721844.725:519): avc: denied { write } for pid=8482 comm="syz.4.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 315.965012][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.000309][ T5914] usb 4-1: Product: syz [ 316.004492][ T5914] usb 4-1: Manufacturer: syz [ 316.029701][ T29] audit: type=1400 audit(1770721844.756:520): avc: denied { setopt } for pid=8482 comm="syz.4.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 316.053218][ T5914] usb 4-1: SerialNumber: syz [ 316.093189][ T5914] imon 4-1:155.128: unable to register, err -19 [ 316.193279][ T29] audit: type=1400 audit(1770721845.071:521): avc: denied { bind } for pid=8481 comm="syz.0.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 316.255309][ T29] audit: type=1400 audit(1770721845.092:522): avc: denied { connect } for pid=8481 comm="syz.0.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 316.349470][ T5923] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 316.538559][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 316.598163][ T5923] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 316.622070][ T5923] usb 3-1: config 0 has no interface number 0 [ 316.670727][ T5923] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 316.716827][ T5923] usb 3-1: config 0 interface 85 has no altsetting 0 [ 316.762318][ T5923] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 316.789504][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.805228][ T5923] usb 3-1: Product: syz [ 316.813759][ T5923] usb 3-1: Manufacturer: syz [ 316.839915][ T5923] usb 3-1: SerialNumber: syz [ 316.859686][ T5923] usb 3-1: config 0 descriptor?? [ 317.563760][ T5914] usb 4-1: USB disconnect, device number 22 [ 317.710453][ T29] audit: type=1400 audit(1770721846.646:523): avc: denied { read } for pid=8515 comm="syz.3.613" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 318.157674][ T29] audit: type=1400 audit(1770721846.646:524): avc: denied { open } for pid=8515 comm="syz.3.613" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 318.275929][ T29] audit: type=1400 audit(1770721846.646:525): avc: denied { ioctl } for pid=8515 comm="syz.3.613" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 319.220396][ T5923] appletouch 3-1:0.85: Failed to request geyser raw mode [ 319.257209][ T5923] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 319.301609][ T5923] usb 3-1: USB disconnect, device number 19 [ 319.387212][ T793] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 319.570158][ T793] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 319.634573][ T793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.656250][ T793] usb 4-1: config 0 descriptor?? [ 321.190456][ T793] usb 4-1: string descriptor 0 read error: -71 [ 321.196697][ T793] ldusb 4-1:0.0: Interrupt in endpoint not found [ 321.368811][ T793] usb 4-1: USB disconnect, device number 23 [ 321.942243][ T29] audit: type=1400 audit(1770721850.530:526): avc: denied { write } for pid=8540 comm="syz.0.620" path="socket:[19457]" dev="sockfs" ino=19457 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 322.364717][ T8560] faux_driver vkms: [drm] Unknown color mode 256; guessing buffer size. [ 323.212848][ T8566] SELinux: policydb string length 262152 does not match expected length 8 [ 323.221774][ T8566] SELinux: failed to load policy [ 323.660831][ T8568] FAULT_INJECTION: forcing a failure. [ 323.660831][ T8568] name failslab, interval 1, probability 0, space 0, times 0 [ 323.673605][ T8568] CPU: 0 UID: 0 PID: 8568 Comm: syz.2.627 Tainted: G L syzkaller #0 PREEMPT(full) [ 323.673626][ T8568] Tainted: [L]=SOFTLOCKUP [ 323.673629][ T8568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 323.673639][ T8568] Call Trace: [ 323.673643][ T8568] [ 323.673648][ T8568] dump_stack_lvl+0x100/0x190 [ 323.673670][ T8568] should_fail_ex.cold+0x5/0xa [ 323.673684][ T8568] should_failslab+0xc2/0x120 [ 323.673699][ T8568] kmem_cache_alloc_noprof+0x83/0x780 [ 323.673714][ T8568] ? skb_clone+0x190/0x400 [ 323.673727][ T8568] ? skb_clone+0x190/0x400 [ 323.673735][ T8568] skb_clone+0x190/0x400 [ 323.673746][ T8568] nfnetlink_rcv_batch+0x1cc/0x2880 [ 323.673762][ T8568] ? kmem_cache_free+0x143/0x720 [ 323.673772][ T8568] ? netdev_pick_tx+0x4ab/0xe50 [ 323.673785][ T8568] ? __lock_acquire+0x4a5/0x2630 [ 323.673798][ T8568] ? kfree_skbmem+0x19f/0x210 [ 323.673811][ T8568] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 323.673826][ T8568] ? find_held_lock+0x2b/0x80 [ 323.673850][ T8568] ? avc_has_perm_noaudit+0x145/0x3b0 [ 323.673872][ T8568] ? __asan_memset+0x23/0x50 [ 323.673883][ T8568] ? __nla_validate_parse+0x1e7/0x28b0 [ 323.673901][ T8568] ? __pfx___nla_validate_parse+0x10/0x10 [ 323.673914][ T8568] ? rcu_is_watching+0x12/0xc0 [ 323.673929][ T8568] ? cap_capable+0x107/0x3f0 [ 323.673945][ T8568] ? __nla_parse+0x40/0x60 [ 323.673959][ T8568] nfnetlink_rcv+0x3bd/0x440 [ 323.673974][ T8568] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 323.673992][ T8568] netlink_unicast+0x5aa/0x870 [ 323.674006][ T8568] ? __pfx_netlink_unicast+0x10/0x10 [ 323.674024][ T8568] netlink_sendmsg+0x8b0/0xda0 [ 323.674038][ T8568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.674048][ T8568] ? PageHuge+0x180/0x180 [ 323.674065][ T8568] ____sys_sendmsg+0xa54/0xc30 [ 323.674079][ T8568] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.674100][ T8568] ___sys_sendmsg+0x190/0x1e0 [ 323.674114][ T8568] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.674135][ T8568] ? find_held_lock+0x2b/0x80 [ 323.674160][ T8568] __sys_sendmsg+0x170/0x220 [ 323.674177][ T8568] ? __pfx___sys_sendmsg+0x10/0x10 [ 323.674204][ T8568] do_syscall_64+0xc9/0xf80 [ 323.674220][ T8568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.674232][ T8568] RIP: 0033:0x7fdf2799af79 [ 323.674242][ T8568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.674253][ T8568] RSP: 002b:00007fdf25bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.674267][ T8568] RAX: ffffffffffffffda RBX: 00007fdf27c15fa0 RCX: 00007fdf2799af79 [ 323.674274][ T8568] RDX: 0000000000000040 RSI: 0000200000000200 RDI: 0000000000000006 [ 323.674281][ T8568] RBP: 00007fdf25bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 323.674288][ T8568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.674294][ T8568] R13: 00007fdf27c16038 R14: 00007fdf27c15fa0 R15: 00007ffcd4a70c28 [ 323.674309][ T8568] [ 326.064644][ T5859] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 326.950367][ T8594] : Can't lookup blockdev [ 327.025857][ T5859] usb 4-1: Using ep0 maxpacket: 32 [ 327.040766][ T5859] usb 4-1: config 0 has an invalid interface number: 161 but max is 0 [ 327.387492][ T5859] usb 4-1: config 0 has no interface number 0 [ 327.422655][ T5859] usb 4-1: config 0 interface 161 has no altsetting 0 [ 327.434528][ T5859] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=31.ae [ 327.452004][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.468507][ T5859] usb 4-1: Product: syz [ 327.472684][ T5859] usb 4-1: Manufacturer: syz [ 327.498668][ T5859] usb 4-1: SerialNumber: syz [ 327.532384][ T5859] usb 4-1: config 0 descriptor?? [ 327.572675][ T5859] em28xx 4-1:0.161: New device syz syz @ 480 Mbps (0413:6023, interface 161, class 161) [ 327.594586][ T5859] em28xx 4-1:0.161: Video interface 161 found: bulk [ 327.624352][ T8601] Process accounting resumed [ 327.825396][ T793] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 327.887619][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.638'. [ 328.103092][ T29] audit: type=1400 audit(1770721857.375:527): avc: denied { mounton } for pid=8603 comm="syz.2.638" path="/114/file0" dev="tmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 328.251829][ T5859] em28xx 4-1:0.161: unknown em28xx chip ID (0) [ 328.561439][ T793] usb 1-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 328.575221][ T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.656873][ T793] usb 1-1: config 0 descriptor?? [ 329.562876][ T5859] em28xx 4-1:0.161: failed to read eeprom (err=-110) [ 329.569749][ T5859] em28xx 4-1:0.161: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 329.707673][ T5859] em28xx 4-1:0.161: Identified as Leadtek Winfast USB II (card=7) [ 329.722092][ T5859] em28xx 4-1:0.161: analog set to bulk mode. [ 329.728172][ T5914] em28xx 4-1:0.161: Registering V4L2 extension [ 330.280040][ T5925] usb 4-1: USB disconnect, device number 24 [ 330.281980][ T5914] em28xx 4-1:0.161: failed to trigger read from i2c address 0x4a (error=-5) [ 330.288211][ T5925] em28xx 4-1:0.161: Disconnecting em28xx [ 330.478066][ T29] audit: type=1400 audit(1770721859.895:528): avc: denied { bind } for pid=8635 comm="syz.4.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 330.686504][ T8648] SELinux: policydb string length 262152 does not match expected length 8 [ 330.695525][ T8648] SELinux: failed to load policy [ 331.085124][ T8642] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.093062][ T8642] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.225977][ T5914] em28xx 4-1:0.161: Config register raw data: 0xffffffed [ 331.233579][ T5914] em28xx 4-1:0.161: AC97 chip type couldn't be determined [ 331.241446][ T5914] em28xx 4-1:0.161: No AC97 audio processor [ 331.254091][ T5914] usb 4-1: Decoder not found [ 331.258771][ T5914] em28xx 4-1:0.161: failed to create media graph [ 331.267067][ T5914] em28xx 4-1:0.161: V4L2 device video103 deregistered [ 331.318800][ T5914] em28xx 4-1:0.161: Remote control support is not available for this card. [ 331.450667][ T5804] libceph: connect (1)[c::]:6789 error -101 [ 331.452209][ T5804] libceph: mon0 (1)[c::]:6789 connect error [ 331.812427][ T5925] em28xx 4-1:0.161: Closing input extension [ 331.863263][ T5925] em28xx 4-1:0.161: Freeing device [ 331.981701][ T8655] ceph: No mds server is up or the cluster is laggy [ 331.989514][ T5914] libceph: connect (1)[c::]:6789 error -101 [ 331.995623][ T5914] libceph: mon0 (1)[c::]:6789 connect error [ 332.276812][ T5804] libceph: connect (1)[c::]:6789 error -101 [ 332.278292][ T5804] libceph: mon0 (1)[c::]:6789 connect error [ 332.523036][ T5804] libceph: connect (1)[c::]:6789 error -101 [ 332.539282][ T5804] libceph: mon0 (1)[c::]:6789 connect error [ 332.676688][ T8665] ceph: No mds server is up or the cluster is laggy [ 332.935471][ T793] usb 1-1: string descriptor 0 read error: -71 [ 332.965084][ T793] ldusb 1-1:0.0: Interrupt in endpoint not found [ 333.158744][ T793] usb 1-1: USB disconnect, device number 9 [ 333.220617][ T8679] program syz.2.653 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 333.635175][ T8642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.762285][ T8642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.453166][ T29] audit: type=1400 audit(1770721865.235:529): avc: denied { connect } for pid=8680 comm="syz.0.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 335.415339][ T35] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.476419][ T35] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.489440][ T35] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.504534][ T35] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.542587][ T5923] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 336.447200][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 336.485238][ T5925] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 336.595030][ T5923] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 336.622904][ T5923] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 336.639117][ T5923] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 336.669120][ T5923] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 336.678866][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 336.687875][ T5923] usb 3-1: Product: syz [ 336.692244][ T5923] usb 3-1: Manufacturer: syz [ 336.698538][ T5923] usb 3-1: SerialNumber: syz [ 336.814021][ T8712] netlink: 14 bytes leftover after parsing attributes in process `syz.4.662'. [ 337.028736][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 337.036799][ T8712] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.063950][ T5923] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input9 [ 337.067081][ T8712] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.163501][ T5925] usb 4-1: config 0 has an invalid interface number: 161 but max is 0 [ 337.176203][ T5925] usb 4-1: config 0 has no interface number 0 [ 337.185778][ T5925] usb 4-1: config 0 interface 161 has no altsetting 0 [ 337.204176][ T8712] bond0 (unregistering): Released all slaves [ 337.218897][ T5925] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=31.ae [ 337.230497][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.264560][ T793] usb 3-1: USB disconnect, device number 20 [ 337.266513][ T5925] usb 4-1: Product: syz [ 337.277100][ T5925] usb 4-1: Manufacturer: syz [ 337.281785][ T5925] usb 4-1: SerialNumber: syz [ 337.307598][ T9] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 337.330572][ T793] appletouch 3-1:1.0: input: appletouch disconnected [ 337.333348][ T5925] usb 4-1: config 0 descriptor?? [ 337.360550][ T5925] em28xx 4-1:0.161: New device syz syz @ 480 Mbps (0413:6023, interface 161, class 161) [ 337.370737][ T5925] em28xx 4-1:0.161: Video interface 161 found: bulk [ 337.459059][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 337.478186][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.504224][ T9] usb 1-1: config 0 descriptor?? [ 338.803307][ T5925] em28xx 4-1:0.161: unknown em28xx chip ID (0) [ 338.811953][ T9] usb 1-1: string descriptor 0 read error: -71 [ 338.820364][ T9] ldusb 1-1:0.0: Interrupt in endpoint not found [ 338.835241][ T9] usb 1-1: USB disconnect, device number 10 [ 338.857614][ T8723] program syz.4.666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 339.105389][ T8724] program syz.1.665 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 340.888950][ T5925] em28xx 4-1:0.161: failed to trigger read from i2c address 0xa0 (error=-5) [ 340.897973][ T5925] em28xx 4-1:0.161: board has no eeprom [ 341.123278][ T5925] em28xx 4-1:0.161: Identified as Leadtek Winfast USB II (card=7) [ 341.133026][ T5925] em28xx 4-1:0.161: analog set to bulk mode. [ 341.139269][ T10] em28xx 4-1:0.161: Registering V4L2 extension [ 341.459420][ T793] usb 4-1: USB disconnect, device number 25 [ 341.491738][ T793] em28xx 4-1:0.161: Disconnecting em28xx [ 341.750641][ T8740] program syz.2.670 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 342.518161][ T24] libceph: connect (1)[c::]:6789 error -101 [ 342.524414][ T10] em28xx 4-1:0.161: Config register raw data: 0xffffffed [ 342.534382][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 342.544010][ T10] em28xx 4-1:0.161: AC97 chip type couldn't be determined [ 342.544028][ T10] em28xx 4-1:0.161: No AC97 audio processor [ 342.556970][ T10] usb 4-1: Decoder not found [ 342.556989][ T10] em28xx 4-1:0.161: failed to create media graph [ 342.557012][ T10] em28xx 4-1:0.161: V4L2 device video103 deregistered [ 342.558138][ T10] em28xx 4-1:0.161: Remote control support is not available for this card. [ 342.614539][ T793] em28xx 4-1:0.161: Closing input extension [ 342.660691][ T793] em28xx 4-1:0.161: Freeing device [ 342.725042][ T8733] ceph: No mds server is up or the cluster is laggy [ 344.049007][ T9] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 344.288455][ T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 344.305233][ T8768] program syz.4.679 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.692010][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.728057][ T9] usb 2-1: config 0 descriptor?? [ 345.727608][ T9] usb 2-1: string descriptor 0 read error: -71 [ 345.754236][ T9] ldusb 2-1:0.0: Interrupt in endpoint not found [ 345.794836][ T9] usb 2-1: USB disconnect, device number 15 [ 345.982903][ T24] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 346.216936][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 346.458672][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 347.021753][ T9] usb 4-1: config 0 has an invalid interface number: 161 but max is 0 [ 347.032192][ T9] usb 4-1: config 0 has no interface number 0 [ 347.052305][ T9] usb 4-1: config 0 interface 161 has no altsetting 0 [ 347.206870][ T9] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=31.ae [ 347.216679][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.225007][ T9] usb 4-1: Product: syz [ 347.229319][ T9] usb 4-1: Manufacturer: syz [ 347.234768][ T9] usb 4-1: SerialNumber: syz [ 347.243162][ T9] usb 4-1: config 0 descriptor?? [ 347.292702][ T9] em28xx 4-1:0.161: New device syz syz @ 480 Mbps (0413:6023, interface 161, class 161) [ 347.321203][ T9] em28xx 4-1:0.161: Video interface 161 found: bulk [ 347.829698][ T29] audit: type=1400 audit(1770721880.282:530): avc: denied { read write } for pid=8789 comm="syz.2.685" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 347.859531][ T9] em28xx 4-1:0.161: unknown em28xx chip ID (0) [ 347.873412][ T29] audit: type=1400 audit(1770721880.282:531): avc: denied { open } for pid=8789 comm="syz.2.685" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 347.952673][ T8795] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 348.173268][ T10] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 348.231402][ T8798] kAFS: No cell specified [ 348.341278][ T10] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 348.362805][ T10] usb 3-1: config 0 has no interface number 0 [ 348.370168][ T10] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 12336, setting to 64 [ 348.384564][ T10] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 348.461288][ T10] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 348.488909][ T10] usb 3-1: Product: syz [ 348.494361][ T10] usb 3-1: SerialNumber: syz [ 348.552556][ T9] em28xx 4-1:0.161: failed to read eeprom (err=-110) [ 348.623431][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 348.624930][ T10] usb 3-1: config 0 descriptor?? [ 348.637713][ T9] em28xx 4-1:0.161: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 348.732332][ T24] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 348.736813][ T10] cm109 3-1:0.8: invalid payload size 64, expected 4 [ 348.802137][ T24] usb 5-1: can't read configurations, error -71 [ 348.812202][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input10 [ 348.851594][ T9] em28xx 4-1:0.161: Identified as Leadtek Winfast USB II (card=7) [ 348.859499][ T9] em28xx 4-1:0.161: analog set to bulk mode. [ 348.895978][ T10] em28xx 4-1:0.161: Registering V4L2 extension [ 349.058426][ T793] usb 4-1: USB disconnect, device number 26 [ 349.060729][ T10] em28xx 4-1:0.161: failed to trigger read from i2c address 0x4a (error=-5) [ 349.066543][ T793] em28xx 4-1:0.161: Disconnecting em28xx [ 349.818036][ T10] em28xx 4-1:0.161: Config register raw data: 0xffffffed [ 349.837358][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 349.847292][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 349.854672][ T10] em28xx 4-1:0.161: AC97 chip type couldn't be determined [ 349.862650][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 349.871393][ T10] em28xx 4-1:0.161: No AC97 audio processor [ 349.879120][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 349.886753][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 349.893203][ T10] usb 4-1: Decoder not found [ 349.907589][ T29] audit: type=1400 audit(1770721883.284:532): avc: denied { mounton } for pid=8814 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 350.059550][ T10] em28xx 4-1:0.161: failed to create media graph [ 350.065908][ T10] em28xx 4-1:0.161: V4L2 device video103 deregistered [ 350.094052][ T10] em28xx 4-1:0.161: Remote control support is not available for this card. [ 350.262856][ T793] em28xx 4-1:0.161: Closing input extension [ 350.937687][ T793] em28xx 4-1:0.161: Freeing device [ 351.026147][ T8821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.103688][ T8821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.133395][ C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 351.133740][ T24] usb 3-1: USB disconnect, device number 21 [ 351.140398][ C0] ------------[ cut here ]------------ [ 351.151983][ C0] URB ffff88814532e100 submitted while active [ 351.158023][ C0] WARNING: drivers/usb/core/urb.c:380 at usb_submit_urb+0x15fa/0x1910, CPU#0: swapper/0/0 [ 351.167902][ C0] Modules linked in: [ 351.171918][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 351.182389][ C0] Tainted: [L]=SOFTLOCKUP [ 351.186681][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 351.196714][ C0] RIP: 0010:usb_submit_urb+0x15fd/0x1910 [ 351.202361][ C0] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 3d 6c c5 fa 48 8d 3d 46 15 83 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00 [ 351.221978][ C0] RSP: 0018:ffffc90000007ab8 EFLAGS: 00010087 [ 351.228025][ C0] RAX: 00000000000045d2 RBX: ffff88814532e100 RCX: ffffc90002141000 [ 351.235979][ C0] RDX: 0000000000040000 RSI: ffff88814532e100 RDI: ffffffff90c4aab0 [ 351.243939][ C0] RBP: ffff888079045858 R08: 0000000000000001 R09: 0000000000000000 [ 351.251899][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 351.259865][ C0] R13: ffff888079045857 R14: ffff888076fdbce0 R15: 000000000000000f [ 351.267827][ C0] FS: 0000000000000000(0000) GS:ffff8881245bd000(0000) knlGS:0000000000000000 [ 351.276835][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 351.283475][ C0] CR2: 00007fad407abc00 CR3: 000000005694c000 CR4: 00000000003526f0 [ 351.291436][ C0] Call Trace: [ 351.294698][ C0] [ 351.297525][ C0] cm109_urb_irq_callback+0x479/0xa90 [ 351.302894][ C0] __usb_hcd_giveback_urb+0x38d/0x610 [ 351.308265][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 351.313473][ C0] dummy_timer+0xd85/0x3670 [ 351.317965][ C0] ? do_raw_spin_lock+0x128/0x260 [ 351.322981][ C0] ? find_held_lock+0x2b/0x80 [ 351.327649][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 351.333263][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 351.338908][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 351.344724][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 351.350354][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 351.355275][ C0] ? __hrtimer_run_queues+0x433/0x990 [ 351.360658][ C0] ? rcu_is_watching+0x12/0xc0 [ 351.365404][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 351.371190][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 351.376100][ C0] __hrtimer_run_queues+0x516/0x990 [ 351.381277][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 351.386969][ C0] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 351.393014][ C0] hrtimer_run_softirq+0x17d/0x350 [ 351.398104][ C0] handle_softirqs+0x1ea/0x910 [ 351.402850][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 351.408134][ C0] __irq_exit_rcu+0xef/0x150 [ 351.412708][ C0] irq_exit_rcu+0x9/0x30 [ 351.416928][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 351.422540][ C0] [ 351.425442][ C0] [ 351.428346][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 351.434300][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 351.439992][ C0] Code: a6 75 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 3a 11 00 fb f4 7c 33 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 351.459570][ C0] RSP: 0018:ffffffff8e207e00 EFLAGS: 00000242 [ 351.465612][ C0] RAX: 00000000014218c1 RBX: ffffffff8e2975c0 RCX: ffffffff8b7a44b5 [ 351.473555][ C0] RDX: 0000000000000000 RSI: ffffffff8dc4fd13 RDI: ffffffff8bfa9ca0 [ 351.481496][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017086745 [ 351.489443][ C0] R10: ffff8880b8433a2b R11: 0000000000000000 R12: fffffbfff1c52eb8 [ 351.497385][ C0] R13: 0000000000000000 R14: ffffffff90b812d0 R15: 0000000000000000 [ 351.505363][ C0] ? ct_kernel_exit+0x125/0x180 [ 351.510206][ C0] default_idle+0x9/0x10 [ 351.514427][ C0] default_idle_call+0x6c/0xb0 [ 351.519170][ C0] do_idle+0x35b/0x4b0 [ 351.523230][ C0] ? __pfx_do_idle+0x10/0x10 [ 351.527800][ C0] cpu_startup_entry+0x4f/0x60 [ 351.532564][ C0] rest_init+0x251/0x260 [ 351.536797][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 351.542345][ C0] start_kernel+0x47a/0x480 [ 351.546837][ C0] x86_64_start_reservations+0x24/0x30 [ 351.552278][ C0] x86_64_start_kernel+0x122/0x130 [ 351.557371][ C0] common_startup_64+0x13e/0x148 [ 351.562298][ C0] [ 351.565293][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 351.572547][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 351.583022][ C0] Tainted: [L]=SOFTLOCKUP [ 351.587315][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 351.597349][ C0] Call Trace: [ 351.600614][ C0] [ 351.603440][ C0] dump_stack_lvl+0x100/0x190 [ 351.608108][ C0] vpanic+0x20d/0x630 [ 351.612066][ C0] panic+0xd1/0xd1 [ 351.615764][ C0] ? __pfx_panic+0x10/0x10 [ 351.620164][ C0] check_panic_on_warn.cold+0x19/0x34 [ 351.625526][ C0] ? usb_submit_urb+0x15fa/0x1910 [ 351.630537][ C0] __warn.cold+0x191/0x2f8 [ 351.634937][ C0] __report_bug+0x296/0x3d0 [ 351.639426][ C0] ? usb_submit_urb+0x15fa/0x1910 [ 351.644430][ C0] ? __pfx___report_bug+0x10/0x10 [ 351.649430][ C0] ? register_lock_class+0x187/0x560 [ 351.654698][ C0] ? dev_printk_emit+0xd2/0x10d [ 351.659526][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 351.664816][ C0] report_bug_entry+0xe1/0x290 [ 351.669573][ C0] ? usb_submit_urb+0x15fd/0x1910 [ 351.674575][ C0] handle_bug+0x1c9/0x2a0 [ 351.679508][ C0] exc_invalid_op+0x17/0x50 [ 351.684042][ C0] asm_exc_invalid_op+0x1a/0x20 [ 351.688911][ C0] RIP: 0010:usb_submit_urb+0x15fd/0x1910 [ 351.694529][ C0] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 3d 6c c5 fa 48 8d 3d 46 15 83 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00 [ 351.714143][ C0] RSP: 0018:ffffc90000007ab8 EFLAGS: 00010087 [ 351.720216][ C0] RAX: 00000000000045d2 RBX: ffff88814532e100 RCX: ffffc90002141000 [ 351.728182][ C0] RDX: 0000000000040000 RSI: ffff88814532e100 RDI: ffffffff90c4aab0 [ 351.736180][ C0] RBP: ffff888079045858 R08: 0000000000000001 R09: 0000000000000000 [ 351.744242][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 351.752211][ C0] R13: ffff888079045857 R14: ffff888076fdbce0 R15: 000000000000000f [ 351.760195][ C0] ? usb_submit_urb+0x15f3/0x1910 [ 351.765258][ C0] cm109_urb_irq_callback+0x479/0xa90 [ 351.770629][ C0] __usb_hcd_giveback_urb+0x38d/0x610 [ 351.775999][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 351.781186][ C0] dummy_timer+0xd85/0x3670 [ 351.785676][ C0] ? do_raw_spin_lock+0x128/0x260 [ 351.790686][ C0] ? find_held_lock+0x2b/0x80 [ 351.795347][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 351.800961][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 351.806582][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 351.812366][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 351.818002][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 351.822917][ C0] ? __hrtimer_run_queues+0x433/0x990 [ 351.828266][ C0] ? rcu_is_watching+0x12/0xc0 [ 351.833023][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 351.838809][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 351.843723][ C0] __hrtimer_run_queues+0x516/0x990 [ 351.848907][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 351.854604][ C0] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 351.860657][ C0] hrtimer_run_softirq+0x17d/0x350 [ 351.865748][ C0] handle_softirqs+0x1ea/0x910 [ 351.870511][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 351.875790][ C0] __irq_exit_rcu+0xef/0x150 [ 351.880360][ C0] irq_exit_rcu+0x9/0x30 [ 351.884584][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 351.890202][ C0] [ 351.893106][ C0] [ 351.896012][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 351.901977][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 351.907586][ C0] Code: a6 75 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 3a 11 00 fb f4 7c 33 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 351.927601][ C0] RSP: 0018:ffffffff8e207e00 EFLAGS: 00000242 [ 351.933642][ C0] RAX: 00000000014218c1 RBX: ffffffff8e2975c0 RCX: ffffffff8b7a44b5 [ 351.941611][ C0] RDX: 0000000000000000 RSI: ffffffff8dc4fd13 RDI: ffffffff8bfa9ca0 [ 351.949563][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017086745 [ 351.957506][ C0] R10: ffff8880b8433a2b R11: 0000000000000000 R12: fffffbfff1c52eb8 [ 351.965453][ C0] R13: 0000000000000000 R14: ffffffff90b812d0 R15: 0000000000000000 [ 351.973422][ C0] ? ct_kernel_exit+0x125/0x180 [ 351.978263][ C0] default_idle+0x9/0x10 [ 351.982483][ C0] default_idle_call+0x6c/0xb0 [ 351.987225][ C0] do_idle+0x35b/0x4b0 [ 351.991299][ C0] ? __pfx_do_idle+0x10/0x10 [ 351.995872][ C0] cpu_startup_entry+0x4f/0x60 [ 352.000616][ C0] rest_init+0x251/0x260 [ 352.004830][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 352.010354][ C0] start_kernel+0x47a/0x480 [ 352.014855][ C0] x86_64_start_reservations+0x24/0x30 [ 352.020381][ C0] x86_64_start_kernel+0x122/0x130 [ 352.025473][ C0] common_startup_64+0x13e/0x148 [ 352.030414][ C0] [ 352.033722][ C0] Kernel Offset: disabled [ 352.038028][ C0] Rebooting in 86400 seconds..