last executing test programs: 2m50.256133432s ago: executing program 0 (id=899): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d66642c726618b623bd", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000040)=@gcm_256={{0x304}, "8000", "3eb50f2c715c0450f89672fb37462ed33e41cc3f7c3c4dd9f2fa9ae5728180f8", "82d8f471", "e081c05a2681e401"}, 0x38) 2m50.192191041s ago: executing program 0 (id=901): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x25, 0xe, @void}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000400000004000000080000", @ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r6}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r6}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket(0x8000000010, 0x2, 0x0) write(r7, &(0x7f00000002c0)="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", 0xfc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) (async) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) ioctl$IOMMU_GET_HW_INFO(r8, 0x3b8a, &(0x7f0000000100)={0x28, 0x0, 0x0, 0x9f, &(0x7f0000000000)=""/159}) (async) ioctl$IOMMU_GET_HW_INFO(r8, 0x3b8a, &(0x7f0000000100)={0x28, 0x0, 0x0, 0x9f, &(0x7f0000000000)=""/159}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500020000000800124000000000050005000a000000050004000000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) 2m48.092003987s ago: executing program 0 (id=909): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x200e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x81, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x9, "1000"}, @global=@item_012={0x1, 0x1, 0x0, "02"}]}}, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r1, 0x0, 0xfffffffffffffefe, 0x0, &(0x7f0000000940)="18d26a3d9673399025aae4121e420e3eef774116", 0x0, 0x9, 0x0, 0x9, 0x0, &(0x7f0000000a40)="30dd0d6c12d6fae2fc", 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="020500000a0000000000000000000000030006000000000002000000ac1e0001000000000000043a550000020001000000000000001f0b000000a003000500000000000200fffd0a0101000000000000000000"], 0x50}}, 0x4000810) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0xd733043595a52279}, "a8e0930a1a884884", "74743275e5fc20c3ab14916504a8ca92", '\x00', "3e6a808941a488cc"}, 0x28) setsockopt$inet6_tcp_int(r4, 0x6, 0x9, &(0x7f0000000040)=0x7, 0x4) r5 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}], &(0x7f0000001540)=[0x2]}, 0x20) io_uring_enter(r5, 0x64f5, 0x90f4, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4, 0x0, @loopback, 0x5}, 0x1c) 2m42.431998032s ago: executing program 0 (id=919): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000240)=0x1, 0x4) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1138000, 0x800, 0x3, 0x1}, 0x20) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x400, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r6, 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r8, 0x4c00, r7) dup2(r7, r4) flock(r4, 0x6) 2m41.791990395s ago: executing program 0 (id=924): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@host}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffff"], 0x6c}}, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@any, 0x8}, @local, 0x2, 0x4, 0x0, 0x5, 0x7, 0x0, 0x8001}) 2m41.45404132s ago: executing program 0 (id=927): sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x50}}, 0x200c00ca) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003c80)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140), 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000019140)=@newchain={0x43c, 0x64, 0x300, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x1, 0x5}, {0xfff3, 0xa}}, [@f_tcindex={{0xc}, {0x40c, 0x2, [@TCA_TCINDEX_POLICE={0x408, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff8, 0x4551, 0x80000001, 0x1000, 0x7, 0x5, 0x3, 0x7, 0x8001, 0x2, 0x0, 0x0, 0x55, 0x0, 0x1, 0x5e9f, 0x0, 0x0, 0x7ff, 0x2264, 0x6, 0x577, 0x2, 0x818, 0x1, 0x10000, 0x0, 0xb9, 0xfffffffe, 0x77, 0xc1c, 0x3, 0x0, 0xff, 0x4, 0x2, 0x2, 0x0, 0x0, 0xa, 0x3ff, 0x1000, 0x7129, 0x2, 0x4, 0xc, 0x0, 0xfffffbff, 0x0, 0x7cca, 0x9, 0x7, 0x6, 0x9, 0x4, 0x6, 0xb978, 0x0, 0xf, 0xfffffffb, 0xcfce, 0x0, 0xfffffff7, 0x4f1, 0x55, 0x712ae542, 0x4, 0xfaab, 0x200, 0x85b, 0xff, 0x0, 0x6, 0x9, 0xffffffff, 0x8, 0x9, 0x4, 0x17f, 0x7, 0x0, 0x2e6, 0xac6, 0x1, 0x8, 0xec6f, 0x3, 0x80, 0xfffffc00, 0x94, 0xfff, 0xfaa2a50, 0x31d, 0x1, 0x2, 0x1, 0x90, 0x3, 0xed, 0x4249, 0x88, 0xfffffffc, 0x100, 0xf8d4, 0x52, 0x1, 0x8, 0x4, 0x1000, 0x7, 0x3, 0x7fffffff, 0x6, 0x4, 0x5, 0x8, 0xffffffff, 0xe, 0x8, 0x4000000, 0x37d, 0x3, 0xd, 0x0, 0x7, 0x5, 0x1745, 0x7, 0x2, 0x9, 0x263, 0x5fd, 0x7, 0x0, 0x7, 0x0, 0x5, 0x1, 0x2, 0xfffffff6, 0xed6, 0x1, 0x10, 0x0, 0x7, 0x10, 0xb04, 0x1, 0x7, 0x6, 0x3, 0x7, 0x4405, 0x100, 0x7, 0x48, 0x1, 0x9, 0x7, 0x5, 0x3, 0x5, 0x1, 0x5, 0x10000, 0x4e, 0x8, 0x5, 0x8, 0xf708, 0x9, 0x9, 0x5, 0x7ff3, 0x4, 0x8, 0x7, 0xfff, 0x4, 0x0, 0x3, 0x5, 0x7, 0xee2, 0x8001, 0x7fffffff, 0x2, 0xffffffff, 0x1, 0x5, 0x2e91, 0xc, 0x4, 0xfff, 0x0, 0xe, 0x98, 0x4, 0x400, 0x9, 0x6, 0x6, 0x4, 0x1f, 0x1, 0x1, 0xa893, 0x9, 0x9, 0x7, 0x2, 0xfffffff8, 0x8, 0xa, 0x9, 0x1, 0xb, 0x101, 0x9, 0x1, 0x3, 0x4, 0x8, 0x1, 0x101, 0x9, 0x7fffffff, 0x6, 0x0, 0x1, 0x7, 0x2, 0x8, 0xffffff45, 0x1, 0x7, 0x1ff, 0x9, 0x100, 0x8001, 0xfffffffd, 0x3, 0x73ac, 0x8, 0x71c, 0x5, 0xc, 0x1, 0x9, 0x8001, 0x4, 0x8001, 0xba, 0x5a88, 0x0, 0x10]}]}]}}]}, 0x43c}}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000400)=""/101, 0x65}], 0x2}}], 0x1, 0x60, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x2) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) lchown(&(0x7f0000000200)='./file1\x00', r8, 0xee01) 2m41.137368533s ago: executing program 32 (id=927): sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x50}}, 0x200c00ca) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003c80)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140), 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000019140)=@newchain={0x43c, 0x64, 0x300, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x1, 0x5}, {0xfff3, 0xa}}, [@f_tcindex={{0xc}, {0x40c, 0x2, [@TCA_TCINDEX_POLICE={0x408, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff8, 0x4551, 0x80000001, 0x1000, 0x7, 0x5, 0x3, 0x7, 0x8001, 0x2, 0x0, 0x0, 0x55, 0x0, 0x1, 0x5e9f, 0x0, 0x0, 0x7ff, 0x2264, 0x6, 0x577, 0x2, 0x818, 0x1, 0x10000, 0x0, 0xb9, 0xfffffffe, 0x77, 0xc1c, 0x3, 0x0, 0xff, 0x4, 0x2, 0x2, 0x0, 0x0, 0xa, 0x3ff, 0x1000, 0x7129, 0x2, 0x4, 0xc, 0x0, 0xfffffbff, 0x0, 0x7cca, 0x9, 0x7, 0x6, 0x9, 0x4, 0x6, 0xb978, 0x0, 0xf, 0xfffffffb, 0xcfce, 0x0, 0xfffffff7, 0x4f1, 0x55, 0x712ae542, 0x4, 0xfaab, 0x200, 0x85b, 0xff, 0x0, 0x6, 0x9, 0xffffffff, 0x8, 0x9, 0x4, 0x17f, 0x7, 0x0, 0x2e6, 0xac6, 0x1, 0x8, 0xec6f, 0x3, 0x80, 0xfffffc00, 0x94, 0xfff, 0xfaa2a50, 0x31d, 0x1, 0x2, 0x1, 0x90, 0x3, 0xed, 0x4249, 0x88, 0xfffffffc, 0x100, 0xf8d4, 0x52, 0x1, 0x8, 0x4, 0x1000, 0x7, 0x3, 0x7fffffff, 0x6, 0x4, 0x5, 0x8, 0xffffffff, 0xe, 0x8, 0x4000000, 0x37d, 0x3, 0xd, 0x0, 0x7, 0x5, 0x1745, 0x7, 0x2, 0x9, 0x263, 0x5fd, 0x7, 0x0, 0x7, 0x0, 0x5, 0x1, 0x2, 0xfffffff6, 0xed6, 0x1, 0x10, 0x0, 0x7, 0x10, 0xb04, 0x1, 0x7, 0x6, 0x3, 0x7, 0x4405, 0x100, 0x7, 0x48, 0x1, 0x9, 0x7, 0x5, 0x3, 0x5, 0x1, 0x5, 0x10000, 0x4e, 0x8, 0x5, 0x8, 0xf708, 0x9, 0x9, 0x5, 0x7ff3, 0x4, 0x8, 0x7, 0xfff, 0x4, 0x0, 0x3, 0x5, 0x7, 0xee2, 0x8001, 0x7fffffff, 0x2, 0xffffffff, 0x1, 0x5, 0x2e91, 0xc, 0x4, 0xfff, 0x0, 0xe, 0x98, 0x4, 0x400, 0x9, 0x6, 0x6, 0x4, 0x1f, 0x1, 0x1, 0xa893, 0x9, 0x9, 0x7, 0x2, 0xfffffff8, 0x8, 0xa, 0x9, 0x1, 0xb, 0x101, 0x9, 0x1, 0x3, 0x4, 0x8, 0x1, 0x101, 0x9, 0x7fffffff, 0x6, 0x0, 0x1, 0x7, 0x2, 0x8, 0xffffff45, 0x1, 0x7, 0x1ff, 0x9, 0x100, 0x8001, 0xfffffffd, 0x3, 0x73ac, 0x8, 0x71c, 0x5, 0xc, 0x1, 0x9, 0x8001, 0x4, 0x8001, 0xba, 0x5a88, 0x0, 0x10]}]}]}}]}, 0x43c}}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000400)=""/101, 0x65}], 0x2}}], 0x1, 0x60, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x2) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) lchown(&(0x7f0000000200)='./file1\x00', r8, 0xee01) 44.388067315s ago: executing program 1 (id=1288): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000002b000701feffffff000000e3027c00000c00018008000600ffffffff10000280", @ANYRES8], 0x30}, 0x1, 0x0, 0x0, 0x24048001}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$kcm(0x2, 0x3, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x141800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000000)={0x5, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x10000000000001, 0x0, 0x3, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x0, 0x4, @scatter={0x8, 0x0, &(0x7f0000000980)=[{&(0x7f00000000c0)=""/4, 0x4}, {&(0x7f0000000480)=""/224, 0xe0}, {&(0x7f0000000680)=""/96, 0x60}, {&(0x7f0000000700)=""/100, 0x64}, {&(0x7f0000000780)=""/215, 0xd7}, {&(0x7f0000000280)=""/33, 0x21}, {&(0x7f0000000880)=""/96, 0x60}, {&(0x7f0000000900)=""/85, 0x55}]}, &(0x7f00000001c0), 0x0, 0x9, 0x30038, 0x0, 0x0}) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x2, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd1ffffffff0000000000974a37000000000000005a00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"3c44c2890a6f0a71d1a400000000000000000000000000004000", r6}) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r8 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r8, 0xffff) fcntl$addseals(r8, 0x409, 0x7) ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000140)={r8, 0x0, 0x0, 0x4000}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x0) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58) 43.936320852s ago: executing program 1 (id=1290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000000000"], 0x14}}, 0x4000040) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x1, 0x100) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) unshare(0x80) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(r6, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) 42.930798934s ago: executing program 1 (id=1294): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0xc0ff}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}], {0x95, 0x0, 0x0, 0x20}}, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) 42.304094581s ago: executing program 1 (id=1295): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c582", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 41.62813866s ago: executing program 1 (id=1299): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x46, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4801000041000701fcfffffffddbdf25017c0000040036802e0101"], 0x148}, 0x1, 0x0, 0x0, 0x488c0}, 0xc080) 40.844094268s ago: executing program 1 (id=1301): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x20001, 0xffffffffffffffff, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000), 0x0, 0xfffffffffffffffc) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) socket$inet(0x10, 0x0, 0xfffffffc) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[], 0x20) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x62043, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRES8=r1], 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x40000, 0x122) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) 33.865551863s ago: executing program 4 (id=1320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x1e, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3400000}, {}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x1, 0x1, 0x3, 0xb, 0x20, 0xfffffffffffffffc}, @ldst={0x3, 0x1, 0x6, 0xa, 0x8, 0x2}, @generic={0x4, 0x8, 0x0, 0xe938, 0x7}, @alu={0x4, 0x1, 0x0, 0x1, 0x1, 0x80}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000300)={0x60, 0x3, &(0x7f00003dd000/0x3000)=nil, &(0x7f0000973000/0x2000)=nil, 0x8000, 0x0, 0x0, 0x4, 0x69, 0x20, 0x22, 0x2}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [{}, {0x2, 0x6}], {}, [], {0x10, 0x2}}, 0x34, 0x0) 33.756159922s ago: executing program 3 (id=1322): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xea, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd607f00ef00b42c0000000000000000000000ffffe0000002ff0200000000000000000000000000010014010300000000fe880000000000000000000000000101fc000000000000000000000000000000fe80000000000000000000000000002600000000000000000000ffffac1414362001000000000000000000000000000220010000000000000000000000002002fc010000000000000000000000000001fe8000000000000000000000000000aaff010000000000000000000000000001ff01000000000000000000000000000100000000000c907801000000"], 0x0) add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000540)="f2511debca7117e93c8f446d145c1831", 0x10, 0xfffffffffffffffe) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x5}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x10001, 0x0, 0x201, 0xfffe, 0x2, 0xa0000, 0x4, 0x1fe, 0x1, 0x40100000001, 0xffffffff, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$tty1(0xc, 0x4, 0x1) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xffffffff80002000, 0x2f, 0x0, 0x4, 0x5, 0x0, 0x0, 0x1}}, 0x50) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'bond0\x00'}}, 0x1e) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000040)=0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$PPPIOCBRIDGECHAN(r6, 0x40047435, &(0x7f0000000380)=0x1) 32.512192481s ago: executing program 4 (id=1323): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@remote, @dev, @broadcast}, &(0x7f0000000080)=0xc) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(0xffffffffffffffff, 0x6) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket(0x2a, 0x4, 0x3) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400100, 0x46) lseek(r4, 0x1, 0x1) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) clock_gettime(0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000040000fb0000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095", @ANYRES64=r5], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xe, 0x0, &(0x7f0000000300)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 32.271924564s ago: executing program 2 (id=1325): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = request_key(0x0, 0x0, 0x0, 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioperm(0x0, 0x6, 0x7) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r5 = io_uring_setup(0xfc6, &(0x7f0000000180)) socket$inet_smc(0x2b, 0x1, 0x0) keyctl$get_keyring_id(0x0, r3, 0x703) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r7, 0x917, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}]}, 0x3c}, 0x1, 0x620b}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r8, 0x0, 0xfffffffffffffffe}, 0x18) 31.379332272s ago: executing program 5 (id=1326): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c582", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, 0x0, 0x0, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 31.202613358s ago: executing program 5 (id=1327): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$unix(0x1, 0x5, 0x0) r0 = open$dir(&(0x7f0000000200)='./file2\x00', 0x200100, 0x80) getdents(r0, &(0x7f0000000340)=""/80, 0x50) syz_open_dev$ttys(0xc, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/oops_count', 0x101000, 0x16a) finit_module(r2, 0x0, 0x2) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x77c8, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xf, 0x9, 0x0, 0x2, 0x7}, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000002000000aff18b6443a1d668000000000900030073797a3200000000"], 0x2c}}, 0xc800) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r5, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @dev}) 31.177061805s ago: executing program 3 (id=1328): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi5\x00', 0x10840, 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f00000001c0)={0xc7, 0x6, 0xffffffff, 0x6}) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x3, 0x3, 0x1c10a1, 0x0, 0x98}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x139, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x48) 30.154925498s ago: executing program 3 (id=1329): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x2000, 0x0) sendfile(r2, r3, 0x0, 0x400) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x7}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x840d0}, 0x0) 30.154415657s ago: executing program 4 (id=1330): statx(0xffffffffffffffff, 0x0, 0x6000, 0x10, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240), 0x101080, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x25dfdbfb, {0x7, 0x0, 0x0, r4, 0x0, 0x40100}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0xa}}]}]}, 0x2c}}, 0x48010) setsockopt$inet6_int(r1, 0x29, 0x4c, 0x0, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000000)="5d32a724742e72ef9b04b8b9a9138c15226668d6b359e9c9c86388002bff89ed870c609e08084673723abe5241924a715273c7237cb8260b7f67d627627ce79f1179ecd5517d01e70d2f03fe5cf6ac95af2ee84a85d87fd79011cdd8750f7a146bf932507715d711d42f0527b174beba6bbe2f6ef467457f47ee81e01839389fe792e9541050015a2802f226a0c05191593bb973137dc50a5e51fc753daacd574b5a139437c44ffdd01e080482618e9393f2f484a18dad45a98244c72a1af6d254825b793658677188765a71ea2c13395184618abff261e9cea2ff0681a8ea4f5b3a1e0fd6", 0xe5}, {&(0x7f0000000280)="847ec4f63e373c6a82a72875162aeae65104cff912d5dc80dc787f9d850ba6e807d31ba8691ad08c5649245112ed621124c32da45d44b2b1037018c0d037ec7455d6eea1c810f4e6ec7515cdf03bc7ae811145b6bfc01827cc286047902afda25e7886d7621c5983c298aa6b6489f327a6809feed89a79ff02e399a445", 0x7d}, {&(0x7f0000000180)="d11f71750a84610d68a690cbfda8a63ba6739c32f3e7eceb06b62d14565b3517c3a51b06010908ac84fdeb7e14dee7acabf487ce5580043c2d1796f16599b1c3f136ffc6a29e3e3820dd7b39eea7d2037e7c0a102e0af354fa658ef27cecc5e4cbaa81b0c9a968452da876", 0x6b}], 0x3) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r2) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, r6, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0xd, 0x8, 0x6, 0xe60, 0x8]}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x1, 0x10000, 0x3]}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x8895) 30.088094693s ago: executing program 5 (id=1331): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x2, 0x100, @dev={0xfe, 0x80, '\x00', 0x19}, 0x8}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x6, 0x31, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 30.040786747s ago: executing program 3 (id=1332): syz_clone(0x2800, 0x0, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000000)={0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x1}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000380)={0x2, 0x2, 0x103fe, 0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) 29.761715649s ago: executing program 4 (id=1333): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x1e, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3400000}, {}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x1, 0x1, 0x3, 0xb, 0x20, 0xfffffffffffffffc}, @ldst={0x3, 0x1, 0x6, 0xa, 0x8, 0x2}, @generic={0x4, 0x8, 0x0, 0xe938, 0x7}, @alu={0x4, 0x1, 0x0, 0x1, 0x1, 0x80}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000300)={0x60, 0x3, &(0x7f00003dd000/0x3000)=nil, &(0x7f0000973000/0x2000)=nil, 0x8000, 0x0, 0x0, 0x4, 0x69, 0x20, 0x22, 0x2}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [{}, {0x2, 0x6}], {}, [], {0x10, 0x2}}, 0x34, 0x0) 29.696015848s ago: executing program 5 (id=1334): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000f1401df250c00450072646d615f636d00"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4040084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000380)={0x0, 0x761, 0x8, 0x8008000, 0x2d1}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x628, 0xc88d, 0x43, 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 28.955240123s ago: executing program 3 (id=1335): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) connect$x25(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = add_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000400)="f81da85b6eb73d7efae6dc5fedb3bdc4321d31f81d5fb67acf37aca1dae3ac9912892ee476427a4bbd411e4c0036bababb0e6be02c4eb7e0a3f8ab12fea481114fe0205162e00d1e3912292836c4ccdf73852960582592c8c027869bcd79550fa18ecd713844cebe898000"/120, 0x78, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0xc4) r8 = epoll_create1(0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="020200020d00000000000000000000000200080008000000fd00000000000000020001000000000000000500000000a0030006000000000002000000ac1414ff00000000000000000300050000000000020000000000000000000000000000000100140000000000f7799d882160f53ff47b5679c292cab89c0d521949c1924b2e3487edbdd9876408cbc4ad3ba96cae0386a6eec7290da9accd4e"], 0x68}, 0x1, 0x7}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r8, &(0x7f0000000040)={0x1}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000340)={0xa000001c}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) 28.893117058s ago: executing program 2 (id=1336): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = accept4(r0, &(0x7f0000000000)=@xdp, &(0x7f0000000080)=0x80, 0x80800) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x10) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x88000, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r1) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7ac}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x4000040) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$MSR(&(0x7f0000000380), 0xb, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000003c0)={'\x00', 0xab9, 0xffffffb0, 0x7, 0xd1e, 0xf, 0xffffffffffffffff}) sched_setaffinity(r4, 0x8, &(0x7f0000000440)=0x3) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f0000000480)={0x1}) r6 = syz_open_dev$sg(&(0x7f00000007c0), 0x432, 0x0) connect$bt_rfcomm(r2, &(0x7f0000000800)={0x1f, @none, 0xa7}, 0xa) r7 = syz_open_dev$vcsu(&(0x7f0000000880), 0x3b, 0x200042) syz_genetlink_get_family_id$devlink(&(0x7f0000000840), r7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000008c0), r8) inotify_add_watch(r2, &(0x7f0000000900)='./file0\x00', 0x181) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8982, &(0x7f0000000940)={0x8, 'nicvf0\x00', {'macvlan0\x00'}, 0x5}) syz_genetlink_get_family_id$nbd(&(0x7f0000000980), r8) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/power/pm_debug_messages', 0x8804, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$I2C_RDWR(r10, 0x707, &(0x7f0000000c00)={&(0x7f0000000bc0)=[{0xfffe, 0xc00, 0x47, &(0x7f0000000a40)="6054389a93d8650fdd40a7e3bd9c6067046132a0d9a2c26f8978014f11137e2e3008e2abebc65e6760e5a09fa9ebabc262dbf040a5fb847ec66c8b4cd8b06d6d4add83d42c5c38"}, {0x6, 0x410, 0x5a, &(0x7f0000000ac0)="72463549223d4b86995b5c312e93da5010cb86ba143ef7b61aaee4382f66334d13fe8d1d96b7b9447d0affd0601bcc99ee6810c10d0461b13aa2bcba02330666160bd376a89f890024341105c1f30353cd6d26f19ec2d9abe8c8"}, {0x8, 0x0, 0x23, &(0x7f0000000b40)="e4f464a5ecb3f1df364dbf738d38efa67c6041f8561aa672493c7e4fd35ddf2b6dabb5"}, {0x2, 0x1210, 0x0, &(0x7f0000000b80)}], 0x4}) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000001ec0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10008}, 0xc, &(0x7f0000001e80)={&(0x7f0000000c80)={0x11d0, 0xd, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x11a4, 0x3, 0x0, 0x1, [{0x1190, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1150, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x2a, 0x1, "e767e520c3bc2b9b7a86b9e412aa7648481d3adb36af1585f3267fa6beed0e2513657344459e"}, @NFTA_DATA_VALUE={0xfa, 0x1, "4cc497b215573622ab43be64d24ddc73e202cb9a6a0c3d8ac77137a90d6c0c10440faabb2c168e2873f1700fa7108eb9e550fadc3739fbada011bb4958a3f30a076440c80775c2986b6e98454c12990ea7811ea253bb3e2ac69ba88cc220e8be4239de2b029c8f43417b2e6ea7a89ec2823187e181a5542f43bbfd8177bdba11f458c779f4f626600089e76252db1cd973cfdb3293b6288a9b05f36e6007ecb4e4d0e1b4d0692d2b56372c2493a5de531d80d3d156981375e039ab0be5525078afbaf099ec9c2f08a6c478fc33dc3420ea27698946b66c29b51a974a1c512450ae26811abf786c9f75d2bd55ab8814f5334a10feae7f"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @numgen={{0xb}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8001}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x11d0}, 0x1, 0x0, 0x0, 0x20040881}, 0x4) openat$ptp0(0xffffffffffffff9c, &(0x7f0000001f00), 0x20001, 0x0) ioctl$sock_rose_SIOCDELRT(r7, 0x890c, &(0x7f0000001f40)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @null, @rose={'rose', 0x0}, 0xf8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}) syz_open_dev$char_usb(0xc, 0xb4, 0x8) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xa, &(0x7f0000002000)={0x4, 0x8}, 0x0) 28.782505152s ago: executing program 4 (id=1337): r0 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fanotify_init(0x202, 0x400) fanotify_mark(0xffffffffffffffff, 0x1, 0xe, 0xffffffffffffffff, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x7b) r4 = fcntl$getown(r2, 0x9) sched_setscheduler(r4, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f00000005c0)='0', 0x1}], 0x2}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip_vti0\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3088], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) dup(r6) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) 28.344085242s ago: executing program 2 (id=1338): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c582", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 27.500927515s ago: executing program 3 (id=1339): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) fsopen(&(0x7f0000001680)='nilfs2\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xdfff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe65f, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x0, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x61dc, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xffb]}, 0x45c) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x17, 0xc, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000000100085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x8, 0x0, {0x5, 0x4, 0x0, 0x0, 0x1, 0x65, 0x0, 0x1, 0x2f, 0x0, @dev, @remote}}}}}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x2, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x28, 0x1, 0x0) r5 = syz_io_uring_setup(0x112, &(0x7f0000000280)={0x0, 0x408c, 0x100, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x3}}) io_uring_enter(r5, 0x47f6, 0xb277, 0x0, 0x0, 0x0) 27.492101463s ago: executing program 5 (id=1340): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi5\x00', 0x10840, 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f00000001c0)={0xc7, 0x6, 0xffffffff, 0x6}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x3, 0x3, 0x1c10a1, 0x0, 0x98}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x139, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x48) 27.434581875s ago: executing program 2 (id=1341): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 27.276173039s ago: executing program 4 (id=1342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0xfffffffffffffff3) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'ccm-aes-ce\x00'}, 0x58) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000caa000/0x4000)=nil, 0x183b, &(0x7f0000000400)='\xb3x\xd7,n\x1e\v\xc4\xe84\x04\xcb\xcb#\x80\x83\xb2\'&\xe3\xf1\x97\a\xef\xff`\x1e\x11E\xff\xff\x9b\x9f\x1c\x13w\xd7\xda\x92~i\xf5\x06\x00\xe7;K\x97\xeb\xda\\\t)<\xf4{\x95+A\xf9*\xa0\xd8\x13\x88\xcd\xe2\x86\x8a\x00jrv\xe4\xafY(\xe1\xdb\bF\xbb\xde\x02\x00\x00\x00\x83E/\x00V\xf0\xa8\xf5!_\xe7\xa0\xd0,\x00\x00\xff\xf6\x00\x00\x00\xbd\x03\n\xecT\x03&i\xa6_\xc5>\xdc?\x191#\xf41\x00\x7f\xce\xea]\xc2\x7f!\xd1\xb8\x94\t3S\tm\xe9\xfa\x13\xa7\xe3HI\xed\xf6\xe4\xdc!Aw5\x9ay \xb0\nGoF\xef\xaa\xe8\xec\x1c\x8a\x88\x10U\xd4\x91\xf4\xa7/\x01\x83\xa6~\xcdl\x82\x8ck\x93\x7f\xdc\xdf\x0e\xdc4K8\xe2\x10\xa2N\x91\xe0\xf3\xfb\x1c\xcc`\x87\x11\xc5\xa2\x13>\x9a%\x1c(Q|s\xdd\xd1\x9b\xfb\xf0\xfet\x01\xb9\xb1\x04J\xaf~\xa6:^\x00\x19\xc4P\x80.\xa3\xebM\x13\x03\x13u\xd0\xac\x8c\r\x9f7\x9a\x16\xe6\xba\xec\xdb\x15\xa2-\x9b\xf8\xfc\xee\x10O\xed$t\xa99\'C\xa1') prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x10001, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create1(0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r7 = syz_open_dev$sndctrl(0x0, 0x4, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r7, 0x40045542, &(0x7f0000000180)=0xf) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x2) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) 27.135846007s ago: executing program 2 (id=1343): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000003, 0x40010, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) syz_clone(0x28998b80, 0x0, 0x99, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x8) syz_emit_ethernet(0x93, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaabb080500811f4a635114058e7c4105a73bfd54856663353ce2bbc041e39afdcebaaa841adf64550100cca95be3ccf63efd1ed928bd979c1dcd6abec253337e72eaa82a948714791cedf1f5ee264dd922c0546d3f730cc7e94604dca3bbd59db2230201e830c728abe282f20f6fb1a8512c9a3ec2cb89521a3192d6882a11b9b2ff1d05e542b83471ccfe894803"], 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xfffffff2, 0x80, 0xa, 0x10, 0x5, 0x3, 0xfffffffa, 0x3, 0x100, 0x7, 0x9, 0x1f, 0x1f, 0x5, 0x3ff, 0x3}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008881}, 0x24000000) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, 0x0, 0x0) 26.162772915s ago: executing program 5 (id=1344): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r3, 0xc048aeca, &(0x7f0000000200)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000080)={0x67, 0x10, '\x00', [@pad1, @padn={0x1, 0x1, [0x0]}, @generic={0xa0, 0x5f, "46191e0eaa1c0c750fa87d2206a9d9c0dbdba1286d83ac481282e107f5048e19a216a349475001b3c63dc0db905b2bef6e73448993729f5f338ff6e3bfe01de914e53ec5cb621fb3950cf9f80a54a21c57f42b9aa3b335e64f74426a80b5a0"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x90) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x2, @empty}, 0x1c) ioctl$KVM_GET_TSC_KHZ(r3, 0xaea3) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) sendmmsg$inet6(r4, &(0x7f0000000180)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="47c92a4527c73115576b3f19f0e1092e7725e0af71b0f4ba3bb8c1538d28766bd0f816461a3d2b6dd6dffcc95ebbaa1f8e9d8830ff15c841e3f61c1cb6f597ec84", 0x41}, {&(0x7f0000001300)="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", 0xff}, {&(0x7f0000001400)="5602a222ee1c6697a51902ecd9a54620e52ea740bcb181a7f21b1e792e116b61decf938bf61fb3e53dcc4e3d68e364db33231fe8e46e1f78dede8e04610e98a9a96ae9e24db309bc4585c8", 0x4b}, {&(0x7f0000001480)="9ecf193741f6344f8d708c82de88028c03d6ed53adf4ce039352f562c304b3f8317946237b64680184ae487431afda4d66aa2f3632ff01242553125b5cc67cf46b5b4f8f83bc9df8d5d4b1a92c14363d2f1fa55e12d74c56efff7650c98c232792813165d56e411cd5b425f047cc0a4265cbe50b0e4f6ec9686ed0b2db7e1bb92f33", 0x82}, {&(0x7f0000001540)="189fa42815d3de423756aa841f228c24720ba7f0f17ac3a66431b976f732f6c1ff3e0446f3e161b440307ce5e0c9da40379a576cede92a0da12ad452f7b2ef7b59209c34e5d9ede22d31006c77363d9ae75aad928bd56a41ff28a0c25f1b198854df84472a500ec4648483218f480a021cb24329ca986c7b1734602461eb8c6105ff04a8a1a8caee394ebcf47dbb5eaf0bcb6771ad497e8bdc4a241c737d09a02f8626456bfa4cd1fb1ca1d5", 0xac}, {&(0x7f0000001600)="96ac9f77c99f11a50a434e8496f5a996e532cb961c28a0c241e05b5fbe69916097ec254b1bb839c0afa37961ec7fb5e0ea2b284e8ba0de89adc08eae0f9e5117a899dce453673b39af6e66a3d32c097afdfc4732ab57f55ffc0926339598c0eb030f48f20e4f9e41ab30b54b59aeec55eceb17c7e07da326a2a457f2f99406e46ddb274f2293a73c3493116e148668f15c0b6f3d22392c426ffdc81a80c3ebc66e9d2d1c4b82ea8eaad0f17dea9d2d1d101c5b1edea12de10ab4cabca837210afb8a8a38d9cfb661de35c00ff950b2dc1212936dee509193eb262d40ac7a638daf4f21669c4dba", 0xe7}, {&(0x7f0000001700)="de94dddaac639f6bbc4d0f63c968f7baeeb686fa421094974e390b8237488a3ade807d090c96cf7b1abff0a87da0a96b51e72d3f60937932e6d55361ad68128362fa2fd7a1d356cb3cb3bba83b1749b12f7c37dad262d4b92ebba08002a18e61b8c02855c2cd7b119b61939bdb6de98abccd4d02623c79fe216d86bdb2522579fd928ee42843a7a0071ec7c0f8cb55e16ee56bff0dfe2d394106c657cd6db3c6cbe9742bf9db53aff7fc034883ef093ed67639fa927740cbd4d8acf2ec08c08bb6f84ecb5e97de", 0xc7}, {&(0x7f0000001800)="321f602dc6007b769d0d2952901bc44c105965d4453c6d40b4da2de309398fd02cbb306ba20fb1a6f0c22af214ac6a005ad87b9f3516fb7f385f6adfe7cfec564b753b9cd8e8c84b0c1317464afa184fd8e5cd0a68", 0x55}], 0x9, &(0x7f0000001940)=[@rthdrdstopts={{0x58, 0x29, 0x37, {0x3a, 0x7, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0xb740, [0x21a, 0xe12, 0x4, 0x8, 0xfffffffffffffffd, 0x7]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}], 0x70}}], 0x1, 0x4) 26.091048146s ago: executing program 2 (id=1345): syz_clone(0x2800, 0x0, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000000)={0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x1}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000380)={0x2, 0x2, 0x103fe, 0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) 0s ago: executing program 33 (id=1301): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x20001, 0xffffffffffffffff, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000), 0x0, 0xfffffffffffffffc) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) socket$inet(0x10, 0x0, 0xfffffffc) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[], 0x20) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x62043, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRES8=r1], 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x40000, 0x122) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) kernel console output (not intermixed with test programs): ated [ 363.229681][ T9470] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 363.475782][ T30] audit: type=1400 audit(1751690212.564:456): avc: denied { nlmsg_read } for pid=9479 comm="syz.4.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 363.627701][ T30] audit: type=1400 audit(1751690212.714:457): avc: denied { getopt } for pid=9466 comm="syz.3.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 363.677035][ T9489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50630 sclass=netlink_route_socket pid=9489 comm=syz.2.725 [ 364.217818][ T9489] netlink: 'syz.2.725': attribute type 10 has an invalid length. [ 364.225595][ T9489] netlink: 40 bytes leftover after parsing attributes in process `syz.2.725'. [ 364.234555][ T9489] dummy0: entered promiscuous mode [ 364.241236][ T9489] bridge0: port 3(dummy0) entered blocking state [ 364.247590][ T9489] bridge0: port 3(dummy0) entered disabled state [ 364.254019][ T9489] dummy0: entered allmulticast mode [ 364.260625][ T9489] bridge0: port 3(dummy0) entered blocking state [ 364.267195][ T9489] bridge0: port 3(dummy0) entered forwarding state [ 366.230578][ T5828] usb 1-1: USB disconnect, device number 27 [ 367.938455][ T9536] FAULT_INJECTION: forcing a failure. [ 367.938455][ T9536] name failslab, interval 1, probability 0, space 0, times 0 [ 367.990427][ T9536] CPU: 0 UID: 0 PID: 9536 Comm: syz.3.735 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 367.990453][ T9536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 367.990464][ T9536] Call Trace: [ 367.990470][ T9536] [ 367.990477][ T9536] dump_stack_lvl+0x16c/0x1f0 [ 367.990507][ T9536] should_fail_ex+0x512/0x640 [ 367.990530][ T9536] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 367.990558][ T9536] should_failslab+0xc2/0x120 [ 367.990585][ T9536] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 367.990608][ T9536] ? d_instantiate+0x77/0x90 [ 367.990624][ T9536] ? alloc_empty_file+0x55/0x1e0 [ 367.990645][ T9536] alloc_empty_file+0x55/0x1e0 [ 367.990663][ T9536] alloc_file_pseudo+0x13a/0x230 [ 367.990681][ T9536] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 367.990700][ T9536] ? do_raw_spin_unlock+0x172/0x230 [ 367.990724][ T9536] __anon_inode_getfile+0xf7/0x3a0 [ 367.990753][ T9536] anon_inode_getfd+0x52/0xb0 [ 367.990779][ T9536] __x64_sys_fsopen+0x18b/0x240 [ 367.990799][ T9536] do_syscall_64+0xcd/0x4c0 [ 367.990825][ T9536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.990842][ T9536] RIP: 0033:0x7f819bb8e929 [ 367.990857][ T9536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.990873][ T9536] RSP: 002b:00007f819c9c2038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 367.990890][ T9536] RAX: ffffffffffffffda RBX: 00007f819bdb5fa0 RCX: 00007f819bb8e929 [ 367.990902][ T9536] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000000 [ 367.990912][ T9536] RBP: 00007f819c9c2090 R08: 0000000000000000 R09: 0000000000000000 [ 367.990923][ T9536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.990932][ T9536] R13: 0000000000000001 R14: 00007f819bdb5fa0 R15: 00007ffe4de3d038 [ 367.990956][ T9536] [ 368.173737][ C0] vkms_vblank_simulate: vblank timer overrun [ 368.179953][ T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 368.311175][ T78] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 368.327713][ T9540] netlink: 1300 bytes leftover after parsing attributes in process `syz.2.738'. [ 368.340395][ T24] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 368.352245][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.510967][ T24] usb 2-1: Product: syz [ 368.546249][ T24] usb 2-1: Manufacturer: syz [ 368.550939][ T24] usb 2-1: SerialNumber: syz [ 368.558055][ T24] usb 2-1: config 0 descriptor?? [ 368.564227][ T30] audit: type=1400 audit(1751690217.654:458): avc: denied { map } for pid=9545 comm="syz.2.740" path="socket:[23536]" dev="sockfs" ino=23536 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 368.917499][ T78] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.445843][ T24] ch341 2-1:0.0: ch341-uart converter detected [ 369.455082][ T78] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 369.465320][ T78] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 369.474605][ T30] audit: type=1400 audit(1751690217.654:459): avc: denied { read accept } for pid=9545 comm="syz.2.740" path="socket:[23536]" dev="sockfs" ino=23536 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 369.503696][ T78] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.525787][ T30] audit: type=1400 audit(1751690217.994:460): avc: denied { write } for pid=9545 comm="syz.2.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 369.547569][ T78] usb 5-1: config 0 descriptor?? [ 369.712930][ T9554] netlink: 'syz.3.743': attribute type 8 has an invalid length. [ 369.796848][ T78] Bluetooth: Can't get state to change to load ram patch err [ 369.809373][ T9557] netlink: 68 bytes leftover after parsing attributes in process `syz.3.743'. [ 370.242128][ T78] Bluetooth: Loading patch file failed [ 370.248276][ T78] ath3k 5-1:0.0: probe with driver ath3k failed with error -71 [ 370.275056][ T78] usb 5-1: USB disconnect, device number 17 [ 371.216314][ T24] usb 2-1: ch341-uart converter now attached to ttyUSB0 [ 371.625773][ T30] audit: type=1400 audit(1751690220.704:461): avc: denied { watch } for pid=9563 comm="syz.2.745" path="/19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 372.810517][ T24] usb 2-1: USB disconnect, device number 15 [ 372.819302][ T24] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 372.828391][ T30] audit: type=1400 audit(1751690220.704:462): avc: denied { watch_sb watch_reads } for pid=9563 comm="syz.2.745" path="/19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 372.880265][ T24] ch341 2-1:0.0: device disconnected [ 375.681391][ T30] audit: type=1400 audit(1751690224.754:463): avc: denied { map } for pid=9597 comm="syz.2.750" path="/20/file0" dev="tmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 376.065668][ T30] audit: type=1400 audit(1751690225.154:464): avc: denied { write } for pid=9613 comm="syz.3.754" name="mouse0" dev="devtmpfs" ino=991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 376.124011][ T9616] netlink: 64 bytes leftover after parsing attributes in process `syz.2.755'. [ 376.186294][ T9617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.754'. [ 376.309075][ T9620] netlink: 'syz.4.756': attribute type 1 has an invalid length. [ 376.341276][ T5960] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 376.360057][ T30] audit: type=1400 audit(1751690225.444:465): avc: denied { getopt } for pid=9623 comm="syz.2.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 376.385289][ T9620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 376.401544][ T9621] 8021q: adding VLAN 0 to HW filter on device bond1 [ 376.408412][ T9621] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 376.419909][ T9621] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 376.523175][ T5960] usb 1-1: unable to get BOS descriptor or descriptor too short [ 376.554174][ T5960] usb 1-1: not running at top speed; connect to a high speed hub [ 376.617434][ T9630] netlink: 504 bytes leftover after parsing attributes in process `syz.2.758'. [ 376.814369][ T5960] usb 1-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 376.846118][ T5960] usb 1-1: New USB device found, idVendor=1608, idProduct=0205, bcdDevice=2e.ae [ 376.855601][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.865942][ T5960] usb 1-1: Product: syz [ 376.877814][ T5960] usb 1-1: Manufacturer: syz [ 376.901332][ T5960] usb 1-1: SerialNumber: syz [ 378.096116][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.103528][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.165560][ T5960] usb 1-1: USB disconnect, device number 28 [ 379.642654][ T9657] loop4: detected capacity change from 0 to 524255232 [ 379.908739][ T9666] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9666 comm=syz.4.770 [ 380.087959][ T9667] smb3: Unknown parameter 'cas' [ 380.180234][ T30] audit: type=1400 audit(1751690229.174:466): avc: denied { setattr } for pid=9660 comm="syz.2.766" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 380.201190][ T5960] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 380.220063][ T30] audit: type=1400 audit(1751690229.184:467): avc: denied { read } for pid=9660 comm="syz.2.766" name="usbmon1" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 380.246333][ T30] audit: type=1400 audit(1751690229.184:468): avc: denied { open } for pid=9660 comm="syz.2.766" path="/dev/usbmon1" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 380.385973][ T9671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.769'. [ 380.395229][ T9671] netlink: 'syz.3.769': attribute type 2 has an invalid length. [ 380.402955][ T9671] netlink: 16 bytes leftover after parsing attributes in process `syz.3.769'. [ 380.420512][ T5960] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 380.490552][ T5960] usb 5-1: config 0 has no interface number 0 [ 380.594952][ T5960] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 380.891345][ T5960] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 381.012462][ T5960] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 381.044769][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.530485][ T5960] usb 5-1: config 0 descriptor?? [ 381.619417][ T9666] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 381.645707][ T5960] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 381.884924][ T9666] 9pnet_fd: Insufficient options for proto=fd [ 382.117086][ T1613] usb 5-1: USB disconnect, device number 18 [ 382.117137][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 383.407210][ T9704] netlink: 24 bytes leftover after parsing attributes in process `syz.3.777'. [ 383.461383][ T1613] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 384.000872][ T30] audit: type=1400 audit(1751690233.084:469): avc: denied { accept } for pid=9702 comm="syz.2.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 384.122692][ T1613] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 384.283517][ T1613] usb 5-1: config 0 has no interface number 0 [ 384.292939][ T1613] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 384.306120][ T30] audit: type=1400 audit(1751690233.364:470): avc: denied { create } for pid=9700 comm="syz.3.777" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 384.351994][ T9704] 9pnet: Could not find request transport: 0xffffffffffffffff [ 384.366221][ T1613] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 64 [ 384.377356][ T9716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.777'. [ 384.396366][ T1613] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 384.433855][ T1613] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.519613][ T1613] usb 5-1: config 0 descriptor?? [ 384.535578][ T1613] usb 5-1: can't set config #0, error -71 [ 384.768278][ T1613] usb 5-1: USB disconnect, device number 19 [ 385.940223][ T30] audit: type=1400 audit(1751690235.014:471): avc: denied { map } for pid=9741 comm="syz.4.788" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 385.981451][ T9742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29200 sclass=netlink_route_socket pid=9742 comm=syz.4.788 [ 389.597140][ T5960] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 390.262630][ T5960] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 390.363469][ T5960] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 390.380075][ T9806] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 390.417465][ T5960] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 390.491409][ T5960] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 390.544085][ T5960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.575991][ T9790] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 390.609999][ T5960] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 390.894673][ T30] audit: type=1400 audit(1751690239.924:472): avc: denied { setopt } for pid=9814 comm="syz.2.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 392.731343][ T5905] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 392.881647][ T5905] usb 1-1: Using ep0 maxpacket: 16 [ 392.898464][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.922901][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.946208][ T5905] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 392.974751][ T5905] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 392.998650][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.551577][ T5905] usb 1-1: config 0 descriptor?? [ 393.611390][ T5905] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input26 [ 393.753556][ T5835] usb 4-1: USB disconnect, device number 18 [ 393.773342][ T5187] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 394.139900][ T5187] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 394.186248][ T5905] usb 1-1: USB disconnect, device number 29 [ 394.311199][ T7837] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 394.989440][ T5187] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 395.153814][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.817'. [ 395.328077][ T30] audit: type=1400 audit(1751690244.404:473): avc: denied { map } for pid=9868 comm="syz.3.817" path="socket:[24368]" dev="sockfs" ino=24368 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 395.351915][ C0] vkms_vblank_simulate: vblank timer overrun [ 395.432069][ T9872] netlink: 14 bytes leftover after parsing attributes in process `syz.3.817'. [ 395.440566][ T30] audit: type=1400 audit(1751690244.404:474): avc: denied { accept } for pid=9868 comm="syz.3.817" path="socket:[24368]" dev="sockfs" ino=24368 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 396.707986][ T9884] No control pipe specified [ 397.252233][ T5835] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 397.264169][ T9872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.277054][ T9872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.290013][ T9872] bond0 (unregistering): Released all slaves [ 397.309928][ T9893] netlink: 642 bytes leftover after parsing attributes in process `syz.0.824'. [ 397.396981][ T9896] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 397.431201][ T5835] usb 5-1: Using ep0 maxpacket: 8 [ 397.441557][ T5835] usb 5-1: config 0 has an invalid interface number: 220 but max is 0 [ 397.459043][ T5835] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 397.487093][ T5835] usb 5-1: config 0 has no interface number 0 [ 397.504855][ T5835] usb 5-1: too many endpoints for config 0 interface 220 altsetting 57: 218, using maximum allowed: 30 [ 397.528231][ T5835] usb 5-1: config 0 interface 220 altsetting 57 has 0 endpoint descriptors, different from the interface descriptor's value: 218 [ 397.542906][ T5835] usb 5-1: config 0 interface 220 has no altsetting 0 [ 397.554813][ T5835] usb 5-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 397.585437][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.606578][ T5835] usb 5-1: Product: syz [ 397.613786][ T5835] usb 5-1: Manufacturer: syz [ 397.618699][ T5835] usb 5-1: SerialNumber: syz [ 397.650345][ T5835] usb 5-1: config 0 descriptor?? [ 397.684578][ T30] audit: type=1400 audit(1751690246.774:475): avc: denied { map } for pid=9900 comm="syz.3.827" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 397.731821][ T5835] redrat3 5-1:0.220: Couldn't find all endpoints [ 400.271152][ T24] usb 5-1: USB disconnect, device number 20 [ 400.353495][ T9938] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 400.502407][ T9943] capability: warning: `syz.1.835' uses 32-bit capabilities (legacy support in use) [ 401.263076][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 401.270240][ T9938] PKCS7: Only support pkcs7_signedData type [ 402.818357][ T9967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.359403][ T9967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.392489][ T9967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.522534][ T9967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.634557][ T9967] batman_adv: batadv0: Removing interface: ip6gretap1 [ 403.825317][ T9982] block device autoloading is deprecated and will be removed. [ 403.912841][ T30] audit: type=1400 audit(1751690252.854:476): avc: denied { write } for pid=9972 comm="syz.4.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 404.252781][ T9986] netlink: 156 bytes leftover after parsing attributes in process `syz.0.850'. [ 404.611163][ T5960] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 404.721356][ T1613] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 404.886821][ T1613] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 404.896557][ T1613] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.927604][ T1613] usb 1-1: config 0 descriptor?? [ 405.161286][ T5960] usb 3-1: Using ep0 maxpacket: 32 [ 405.177312][ T5960] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.205547][ T5960] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 405.215274][ T5960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.223615][ T5960] usb 3-1: Product: syz [ 405.227830][ T5960] usb 3-1: Manufacturer: syz [ 405.261289][ T5960] usb 3-1: SerialNumber: syz [ 405.275805][ T5960] usb 3-1: config 0 descriptor?? [ 405.489510][ T30] audit: type=1400 audit(1751690254.574:477): avc: denied { bind } for pid=9987 comm="syz.2.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 406.078835][ T5960] usb 3-1: USB disconnect, device number 10 [ 406.400356][ T30] audit: type=1400 audit(1751690255.484:478): avc: denied { create } for pid=10006 comm="syz.1.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 406.450258][ T30] audit: type=1400 audit(1751690255.524:479): avc: denied { sys_admin } for pid=10006 comm="syz.1.857" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 407.544035][ T1613] pegasus 1-1:0.0: can't reset MAC [ 407.692956][ T1613] pegasus 1-1:0.0: probe with driver pegasus failed with error -5 [ 408.410691][ T30] audit: type=1400 audit(1751690257.484:480): avc: denied { mounton } for pid=10014 comm="syz.3.859" path="/66/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 408.437206][ T5960] usb 1-1: USB disconnect, device number 30 [ 409.340795][T10030] No control pipe specified [ 409.891544][ T5846] Bluetooth: hci1: adv larger than maximum supported [ 409.891601][ T5846] Bluetooth: hci1: Unknown advertising packet type: 0x40 [ 409.900037][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0d [ 410.193356][ T30] audit: type=1400 audit(1751690259.264:481): avc: denied { read } for pid=10037 comm="syz.2.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 411.051167][ T5960] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 412.082570][ T5960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.242853][ T5960] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 412.297324][ T5960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.444196][ T5960] usb 3-1: config 0 descriptor?? [ 412.541733][T10083] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.878'. [ 413.263497][ T30] audit: type=1400 audit(1751690262.344:482): avc: denied { setopt } for pid=10091 comm="syz.4.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 413.439892][ T5960] usbhid 3-1:0.0: can't add hid device: -71 [ 413.466222][ T5960] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 413.512964][ T5960] usb 3-1: USB disconnect, device number 11 [ 413.962091][T10125] netlink: 316 bytes leftover after parsing attributes in process `syz.0.890'. [ 413.971196][ T30] audit: type=1400 audit(1751690263.054:483): avc: denied { nlmsg_read } for pid=10123 comm="syz.0.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 414.381285][ T5960] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 414.588628][ T5960] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 414.691558][ T5960] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 415.004066][ T5960] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 415.089477][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.153245][ T5960] usb 1-1: Product: syz [ 415.157456][ T5960] usb 1-1: Manufacturer: syz [ 415.220799][ T5960] usb 1-1: SerialNumber: syz [ 415.231615][ T30] audit: type=1400 audit(1751690264.314:484): avc: denied { block_suspend } for pid=10135 comm="syz.2.893" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 415.281555][ T5960] usb 1-1: config 0 descriptor?? [ 415.293236][T10129] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 415.324617][T10129] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 415.496450][T10150] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 415.528702][ T30] audit: type=1400 audit(1751690264.614:485): avc: denied { write } for pid=10143 comm="syz.4.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 415.590510][ T5960] dm9601 1-1:0.0: probe with driver dm9601 failed with error -71 [ 415.610138][ T5960] usb 1-1: USB disconnect, device number 31 [ 415.783133][ T30] audit: type=1400 audit(1751690264.874:486): avc: denied { unmount } for pid=8889 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 415.845462][ T30] audit: type=1400 audit(1751690264.934:487): avc: denied { ioctl } for pid=10158 comm="syz.0.898" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 415.972719][T10161] 9pnet_fd: Insufficient options for proto=fd [ 416.753163][T10175] netlink: 24 bytes leftover after parsing attributes in process `syz.1.902'. [ 416.967791][T10171] netlink: 24 bytes leftover after parsing attributes in process `syz.1.902'. [ 417.033224][T10171] nbd: nbd64 already in use [ 417.870135][ T7704] udevd[7704]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 418.209069][T10197] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 419.221324][ T5894] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 419.462768][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.473632][ T5894] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 419.496548][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.526090][ T5894] usb 1-1: config 0 descriptor?? [ 419.710647][T10210] FAULT_INJECTION: forcing a failure. [ 419.710647][T10210] name failslab, interval 1, probability 0, space 0, times 0 [ 419.726297][T10210] CPU: 1 UID: 0 PID: 10210 Comm: syz.4.912 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 419.726322][T10210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 419.726332][T10210] Call Trace: [ 419.726338][T10210] [ 419.726345][T10210] dump_stack_lvl+0x16c/0x1f0 [ 419.726374][T10210] should_fail_ex+0x512/0x640 [ 419.726397][T10210] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 419.726422][T10210] should_failslab+0xc2/0x120 [ 419.726456][T10210] __kmalloc_cache_noprof+0x6a/0x3e0 [ 419.726477][T10210] ? __asan_memset+0x23/0x50 [ 419.726495][T10210] ? alloc_netdev_mqs+0xece/0x1570 [ 419.726520][T10210] ? __xdp_rxq_info_reg+0x14e/0x2d0 [ 419.726539][T10210] alloc_netdev_mqs+0xece/0x1570 [ 419.726570][T10210] rtnl_create_link+0xc08/0xf90 [ 419.726598][T10210] rtnl_newlink+0xb69/0x2000 [ 419.726631][T10210] ? __pfx_rtnl_newlink+0x10/0x10 [ 419.726655][T10210] ? find_held_lock+0x2b/0x80 [ 419.726677][T10210] ? avc_has_perm_noaudit+0x117/0x3b0 [ 419.726699][T10210] ? avc_has_perm_noaudit+0x149/0x3b0 [ 419.726720][T10210] ? cred_has_capability.isra.0+0x193/0x2f0 [ 419.726763][T10210] ? find_held_lock+0x2b/0x80 [ 419.726783][T10210] ? __pfx_rtnl_newlink+0x10/0x10 [ 419.726805][T10210] ? __pfx_rtnl_newlink+0x10/0x10 [ 419.726828][T10210] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 419.726854][T10210] ? __pfx_rtnl_newlink+0x10/0x10 [ 419.726879][T10210] rtnetlink_rcv_msg+0x95b/0xe90 [ 419.726907][T10210] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 419.726938][T10210] ? ref_tracker_free+0x37c/0x830 [ 419.726966][T10210] netlink_rcv_skb+0x158/0x420 [ 419.726985][T10210] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 419.727012][T10210] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 419.727040][T10210] ? netlink_deliver_tap+0x1ae/0xd30 [ 419.727072][T10210] netlink_unicast+0x53a/0x7f0 [ 419.727092][T10210] ? __pfx_netlink_unicast+0x10/0x10 [ 419.727118][T10210] netlink_sendmsg+0x8d1/0xdd0 [ 419.727140][T10210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.727168][T10210] ____sys_sendmsg+0xa95/0xc70 [ 419.727188][T10210] ? copy_msghdr_from_user+0x10a/0x160 [ 419.727210][T10210] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.727241][T10210] ___sys_sendmsg+0x134/0x1d0 [ 419.727267][T10210] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.727289][T10210] ? __lock_acquire+0x622/0x1c90 [ 419.727350][T10210] __sys_sendmsg+0x16d/0x220 [ 419.727374][T10210] ? __pfx___sys_sendmsg+0x10/0x10 [ 419.727416][T10210] do_syscall_64+0xcd/0x4c0 [ 419.727450][T10210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.727467][T10210] RIP: 0033:0x7f2f45d8e929 [ 419.727481][T10210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.727497][T10210] RSP: 002b:00007f2f46c70038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.727514][T10210] RAX: ffffffffffffffda RBX: 00007f2f45fb5fa0 RCX: 00007f2f45d8e929 [ 419.727525][T10210] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 419.727536][T10210] RBP: 00007f2f46c70090 R08: 0000000000000000 R09: 0000000000000000 [ 419.727546][T10210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 419.727556][T10210] R13: 0000000000000000 R14: 00007f2f45fb5fa0 R15: 00007ffd1914a078 [ 419.727581][T10210] [ 420.057902][ T5940] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 420.070307][ T5894] nintendo 0003:057E:200E.0004: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.0-1/input0 [ 420.162749][ T5894] nintendo 0003:057E:200E.0004: Failed charging grip handshake [ 420.170873][ T5894] nintendo 0003:057E:200E.0004: Failed to initialize controller; ret=-110 [ 420.219809][ T5894] nintendo 0003:057E:200E.0004: probe - fail = -110 [ 420.227099][ T5894] nintendo 0003:057E:200E.0004: probe with driver nintendo failed with error -110 [ 420.244857][ T5940] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 420.279956][ T5940] usb 2-1: config 1 interface 0 has no altsetting 0 [ 420.318226][ T5940] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 420.327587][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.336733][ T5940] usb 2-1: Product: syz [ 420.340966][ T5940] usb 2-1: Manufacturer: syz [ 420.346892][ T5940] usb 2-1: SerialNumber: syz [ 420.358214][T10204] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 420.541599][ T5894] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 421.623331][ T5894] usb 3-1: Invalid ep0 maxpacket: 16 [ 423.601258][ T5894] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 423.715759][ T9] usb 1-1: USB disconnect, device number 32 [ 423.823020][ T5940] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 5 proto 1 vid 0x0525 pid 0xA4A8 [ 424.068374][ T5940] usb 2-1: USB disconnect, device number 16 [ 424.106849][ T7837] udevd[7837]: setting mode of /dev/usb/lp0 to 020660 failed: No such file or directory [ 424.117747][ T5940] usblp0: removed [ 424.147410][ T7837] udevd[7837]: setting owner of /dev/usb/lp0 to uid=0, gid=7 failed: No such file or directory [ 424.177058][ T30] audit: type=1400 audit(1751690273.264:488): avc: denied { setopt } for pid=10246 comm="syz.0.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 425.351240][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 425.404534][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 425.416120][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 425.424813][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 425.436404][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 425.904611][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 425.911718][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 425.930726][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 425.951141][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.959165][ T24] usb 2-1: Product: syz [ 425.981356][ T24] usb 2-1: Manufacturer: syz [ 425.985983][ T24] usb 2-1: SerialNumber: syz [ 426.224830][ T30] audit: type=1400 audit(1751690275.294:489): avc: denied { ioctl } for pid=10281 comm="syz.4.931" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 426.265031][ T24] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 426.362424][T10275] chnl_net:caif_netlink_parms(): no params data found [ 426.367394][ T30] audit: type=1400 audit(1751690275.454:490): avc: denied { link } for pid=10285 comm="syz.2.932" name="file1" dev="tmpfs" ino=341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 426.679440][ T30] audit: type=1400 audit(1751690275.554:491): avc: denied { read write } for pid=10285 comm="syz.2.932" name="file0" dev="tmpfs" ino=341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 426.704738][T10292] syz.3.934 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 426.716266][T10289] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 426.730812][T10288] ALSA: mixer_oss: invalid OSS volume '' [ 426.761643][ T30] audit: type=1400 audit(1751690275.554:492): avc: denied { open } for pid=10285 comm="syz.2.932" path="/58/bus/file0" dev="overlay" ino=341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 426.786206][ T30] audit: type=1400 audit(1751690275.734:493): avc: denied { write } for pid=10288 comm="syz.3.934" name="file0" dev="tmpfs" ino=456 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 426.839188][ T30] audit: type=1400 audit(1751690275.734:494): avc: denied { open } for pid=10288 comm="syz.3.934" path="/80/file0" dev="tmpfs" ino=456 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 426.889580][ T30] audit: type=1400 audit(1751690275.734:495): avc: denied { ioctl } for pid=10288 comm="syz.3.934" path="/80/file0" dev="tmpfs" ino=456 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 427.152280][T10275] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.160340][T10275] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.167879][T10275] bridge_slave_0: entered allmulticast mode [ 427.176960][T10275] bridge_slave_0: entered promiscuous mode [ 427.185779][T10275] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.193094][T10275] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.200314][T10275] bridge_slave_1: entered allmulticast mode [ 427.207198][T10275] bridge_slave_1: entered promiscuous mode [ 427.233671][T10275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.244915][T10275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.372288][T10275] team0: Port device team_slave_0 added [ 427.373214][ T5960] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 427.382193][T10275] team0: Port device team_slave_1 added [ 427.533006][T10275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.536792][ T5960] usb 4-1: config 1 has too many interfaces: 176, using maximum allowed: 32 [ 427.540101][T10275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.549274][ T5960] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 427.576083][T10275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.609607][ T5960] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 176 [ 427.610476][T10275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.619637][ T5960] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 427.627715][T10275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.637274][ T5960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.725427][T10275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.828814][T10275] hsr_slave_0: entered promiscuous mode [ 427.836567][T10275] hsr_slave_1: entered promiscuous mode [ 427.842907][T10275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.851628][T10275] Cannot create hsr debugfs directory [ 427.860254][ T5960] usb 4-1: string descriptor 0 read error: -71 [ 427.892836][ T5960] usb 4-1: USB disconnect, device number 19 [ 427.931216][ T5829] Bluetooth: hci1: command tx timeout [ 428.552811][ T9] usb 2-1: USB disconnect, device number 17 [ 428.655447][ T9] usblp0: removed [ 428.738078][T10275] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 428.809070][T10275] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 429.927478][T10275] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 429.952271][T10329] netlink: 'syz.1.945': attribute type 8 has an invalid length. [ 429.967607][ T30] audit: type=1400 audit(1751690278.214:496): avc: denied { getopt } for pid=10331 comm="syz.3.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 429.988512][T10275] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 430.011252][ T5829] Bluetooth: hci1: command tx timeout [ 430.303311][T10354] netlink: 'syz.4.944': attribute type 2 has an invalid length. [ 430.343414][T10275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.369849][T10275] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.390839][ T8752] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.398050][ T8752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.436539][ T8752] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.443738][ T8752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.096125][ T5829] Bluetooth: hci1: command tx timeout [ 434.063425][T10275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 434.184304][ T5829] Bluetooth: hci1: command tx timeout [ 435.735518][T10382] fuse: Unknown parameter 'rode' [ 435.866549][T10275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.441563][T10400] netlink: 48 bytes leftover after parsing attributes in process `syz.4.960'. [ 439.599212][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.615982][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.122228][T10446] netlink: 332 bytes leftover after parsing attributes in process `syz.4.968'. [ 440.634220][T10275] veth0_vlan: entered promiscuous mode [ 440.710979][T10275] veth1_vlan: entered promiscuous mode [ 440.807312][T10457] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 440.835429][T10275] veth0_macvtap: entered promiscuous mode [ 440.841926][T10458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.973'. [ 440.857666][T10275] veth1_macvtap: entered promiscuous mode [ 440.928870][T10275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.971260][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 440.980543][T10275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.114695][T10275] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.138928][T10275] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.147993][T10275] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.156764][T10275] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.341800][ T9] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 441.423304][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.506534][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.544055][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.548855][ T9] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 441.562009][ T9] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 441.633812][ T9] usb 2-1: Manufacturer: syz [ 441.663468][ T9] usb 2-1: config 0 descriptor?? [ 441.720324][ T8752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.730189][ T8752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.792298][ T9] rc_core: IR keymap rc-hauppauge not found [ 441.820695][ T9] Registered IR keymap rc-empty [ 441.922040][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 442.341834][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input27 [ 442.364799][T10481] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.373491][T10481] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.415982][T10481] bridge0: entered allmulticast mode [ 442.839733][ T30] audit: type=1400 audit(1751690291.914:497): avc: denied { ioctl } for pid=10475 comm="syz.5.928" path="socket:[28365]" dev="sockfs" ino=28365 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 442.865820][T10489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.980'. [ 443.047731][T10489] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.056892][T10489] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.065629][T10489] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.074334][T10489] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.174096][T10497] netlink: 'syz.2.981': attribute type 9 has an invalid length. [ 443.291020][T10489] vxlan0: entered promiscuous mode [ 443.375152][ T5885] usb 2-1: USB disconnect, device number 18 [ 443.422296][T10499] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 443.954371][ T5829] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 443.973384][ T5829] CPU: 1 UID: 0 PID: 5829 Comm: kworker/u9:2 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 443.973412][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 443.973425][ T5829] Workqueue: hci1 hci_rx_work [ 443.973456][ T5829] Call Trace: [ 443.973463][ T5829] [ 443.973469][ T5829] dump_stack_lvl+0x16c/0x1f0 [ 443.973488][ T5829] sysfs_warn_dup+0x7f/0xa0 [ 443.973506][ T5829] sysfs_create_dir_ns+0x24b/0x2b0 [ 443.973521][ T5829] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 443.973536][ T5829] ? find_held_lock+0x2b/0x80 [ 443.973553][ T5829] ? do_raw_spin_unlock+0x172/0x230 [ 443.973567][ T5829] kobject_add_internal+0x2c4/0x9b0 [ 443.973588][ T5829] kobject_add+0x16e/0x240 [ 443.973597][ T5829] ? __pfx_kobject_add+0x10/0x10 [ 443.973608][ T5829] ? do_raw_spin_unlock+0x172/0x230 [ 443.973620][ T5829] ? kobject_put+0xab/0x5a0 [ 443.973639][ T5829] device_add+0x288/0x1a70 [ 443.973650][ T5829] ? __pfx_dev_set_name+0x10/0x10 [ 443.973662][ T5829] ? __pfx_device_add+0x10/0x10 [ 443.973672][ T5829] ? mgmt_send_event_skb+0x2fb/0x460 [ 443.973691][ T5829] hci_conn_add_sysfs+0x17e/0x230 [ 443.973708][ T5829] le_conn_complete_evt+0x1075/0x1d70 [ 443.973727][ T5829] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 443.973741][ T5829] ? hci_event_packet+0x459/0x11c0 [ 443.973759][ T5829] hci_le_conn_complete_evt+0x23c/0x370 [ 443.973777][ T5829] hci_le_meta_evt+0x357/0x5e0 [ 443.973792][ T5829] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 443.973809][ T5829] hci_event_packet+0x682/0x11c0 [ 443.973824][ T5829] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 443.973840][ T5829] ? __pfx_hci_event_packet+0x10/0x10 [ 443.973857][ T5829] ? kcov_remote_start+0x3d9/0x6d0 [ 443.973873][ T5829] hci_rx_work+0x2c5/0x16b0 [ 443.973893][ T5829] process_one_work+0x9cf/0x1b70 [ 443.973910][ T5829] ? __pfx_process_one_work+0x10/0x10 [ 443.973926][ T5829] ? assign_work+0x1a0/0x250 [ 443.973938][ T5829] worker_thread+0x6c8/0xf10 [ 443.973956][ T5829] ? __pfx_worker_thread+0x10/0x10 [ 443.973967][ T5829] kthread+0x3c2/0x780 [ 443.973977][ T5829] ? __pfx_kthread+0x10/0x10 [ 443.973988][ T5829] ? rcu_is_watching+0x12/0xc0 [ 443.974003][ T5829] ? __pfx_kthread+0x10/0x10 [ 443.974013][ T5829] ret_from_fork+0x5d4/0x6f0 [ 443.974028][ T5829] ? __pfx_kthread+0x10/0x10 [ 443.974039][ T5829] ret_from_fork_asm+0x1a/0x30 [ 443.974058][ T5829] [ 443.974213][ T5829] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 444.219803][ T5829] Bluetooth: hci1: failed to register connection device [ 444.716464][T10514] netlink: 'syz.2.985': attribute type 15 has an invalid length. [ 446.551429][T10536] random: crng reseeded on system resumption [ 447.369925][ T30] audit: type=1400 audit(1751690296.434:498): avc: denied { firmware_load } for pid=36 comm="kworker/u8:2" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 450.347143][ T30] audit: type=1400 audit(1751690299.434:499): avc: denied { listen } for pid=10563 comm="syz.5.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 450.731524][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 451.271236][ T1613] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 451.692822][ T1613] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.713553][ T1613] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 451.743609][ T1613] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 451.758523][ T1613] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 451.769968][ T1613] usb 5-1: SerialNumber: syz [ 451.851303][ T5885] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 451.902188][ T30] audit: type=1400 audit(1751690300.964:500): avc: denied { rename } for pid=10588 comm="syz.5.1005" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 452.952804][ T5885] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.967924][ T5885] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 452.980604][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.209224][T10567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.236243][ T5885] usb 4-1: config 0 descriptor?? [ 453.264892][ T5885] pwc: Askey VC010 type 2 USB webcam detected. [ 453.268884][T10567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.339159][T10567] netlink: 44 bytes leftover after parsing attributes in process `syz.4.998'. [ 453.541425][ T5894] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 453.677526][ T5885] pwc: recv_control_msg error -32 req 02 val 2b00 [ 453.793037][ T5885] pwc: recv_control_msg error -32 req 02 val 2700 [ 453.878513][ T5885] pwc: recv_control_msg error -32 req 02 val 2c00 [ 453.885870][ T5885] pwc: recv_control_msg error -32 req 04 val 1000 [ 453.894391][ T5885] pwc: recv_control_msg error -32 req 04 val 1300 [ 453.901827][T10615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1012'. [ 453.918220][T10615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1012'. [ 453.932478][ T5885] pwc: recv_control_msg error -32 req 04 val 1400 [ 453.964179][ T5894] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 453.989691][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.154107][ T5885] pwc: recv_control_msg error -32 req 02 val 2000 [ 454.162376][ T1613] usb 5-1: skipping empty audio interface (v1) [ 454.171603][ T5885] pwc: recv_control_msg error -32 req 02 val 2100 [ 454.179427][ T5894] usb 6-1: config 0 descriptor?? [ 454.640633][ T5885] pwc: recv_control_msg error -32 req 04 val 1500 [ 454.680402][ T1613] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 454.693603][ T5885] pwc: recv_control_msg error -32 req 02 val 2500 [ 454.728870][ T1613] usb 5-1: USB disconnect, device number 21 [ 454.749875][ T7704] udevd[7704]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 454.953349][ T30] audit: type=1400 audit(1751690303.964:501): avc: denied { setopt } for pid=10609 comm="syz.5.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 457.103190][ T5894] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 457.223897][ T5885] pwc: recv_control_msg error -71 req 02 val 2600 [ 457.499844][ T5960] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 457.536332][ T5885] pwc: recv_control_msg error -71 req 02 val 2900 [ 457.557240][ T5885] pwc: recv_control_msg error -71 req 02 val 2800 [ 457.667947][ T5885] pwc: recv_control_msg error -71 req 04 val 1100 [ 457.678594][ T5885] pwc: recv_control_msg error -71 req 04 val 1200 [ 457.692559][ T5885] pwc: Registered as video103. [ 457.699135][ T5885] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input28 [ 457.719196][ T5885] usb 4-1: USB disconnect, device number 20 [ 457.756156][ T5960] usb 2-1: Using ep0 maxpacket: 32 [ 458.235667][ T5960] usb 2-1: device descriptor read/all, error -71 [ 458.307894][T10635] delete_channel: no stack [ 458.316088][ T5894] [drm:udl_init] *ERROR* Selecting channel failed [ 458.860502][ T5894] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 458.996703][ T5894] [drm] Initialized udl on minor 2 [ 459.066130][ T5894] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 459.081675][ T5894] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 459.092122][T10631] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 459.136741][ T5894] usb 6-1: USB disconnect, device number 2 [ 459.158809][T10631] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 459.240695][T10631] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 459.653229][T10662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1022'. [ 460.209823][T10662] Process accounting resumed [ 460.493524][T10671] comedi comedi4: comedi_config --init_data is deprecated [ 461.891988][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 462.174858][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 462.184943][ T10] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 462.196755][ T10] usb 3-1: config 0 has no interface number 0 [ 462.205567][ T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 462.700110][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.708242][ T10] usb 3-1: Product: syz [ 462.712491][ T10] usb 3-1: Manufacturer: syz [ 462.717152][ T10] usb 3-1: SerialNumber: syz [ 462.724502][ T10] usb 3-1: config 0 descriptor?? [ 462.732868][ T30] audit: type=1400 audit(1751690311.824:502): avc: denied { create } for pid=10686 comm="syz.3.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 462.813924][ T10] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 462.831757][ T30] audit: type=1400 audit(1751690311.844:503): avc: denied { listen } for pid=10686 comm="syz.3.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 462.861576][ T30] audit: type=1400 audit(1751690311.844:504): avc: denied { accept } for pid=10686 comm="syz.3.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 463.149277][ T5940] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 463.165366][ T30] audit: type=1400 audit(1751690312.254:505): avc: denied { read } for pid=10696 comm="syz.5.1031" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 463.191475][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 463.218407][ T30] audit: type=1400 audit(1751690312.254:506): avc: denied { open } for pid=10696 comm="syz.5.1031" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 463.280613][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 463.291634][ T30] audit: type=1400 audit(1751690312.254:507): avc: denied { ioctl } for pid=10696 comm="syz.5.1031" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 463.532534][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 7 [ 463.787502][ T5940] usb 4-1: config 8 has an invalid interface number: 142 but max is 1 [ 465.342203][ T5940] usb 4-1: config 8 has an invalid interface number: 90 but max is 1 [ 466.055833][ T5940] usb 4-1: config 8 has no interface number 0 [ 466.064089][ T5940] usb 4-1: config 8 has no interface number 1 [ 466.070296][ T5940] usb 4-1: config 8 interface 142 has no altsetting 0 [ 466.077723][ T5940] usb 4-1: config 8 interface 90 has no altsetting 0 [ 466.111798][ T5940] usb 4-1: string descriptor 0 read error: -71 [ 466.158359][ T5940] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=37.8d [ 466.244189][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 466.253285][ T5905] usb 3-1: USB disconnect, device number 14 [ 466.313644][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.792796][ T5905] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 466.818979][ T5940] usb 4-1: can't set config #8, error -71 [ 466.827519][ T5905] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 466.840503][ T5905] quatech2 3-1:0.51: device disconnected [ 466.855330][ T5940] usb 4-1: USB disconnect, device number 21 [ 467.865555][T10728] overlay: ./file1 is not a directory [ 470.602312][ T30] audit: type=1400 audit(1751690319.694:508): avc: denied { connect } for pid=10761 comm="syz.2.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 470.866063][T10765] 9pnet_virtio: no channels available for device [ 471.357409][T10768] binder: 10764:10768 ioctl c0306201 2000000003c0 returned -22 [ 473.813388][ T30] audit: type=1400 audit(1751690322.834:509): avc: denied { name_bind } for pid=10786 comm="syz.3.1059" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 474.679037][T10803] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1062'. [ 476.119779][T10819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.581237][ T5835] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 478.147838][ T5835] usb 2-1: Using ep0 maxpacket: 8 [ 478.244345][ T5835] usb 2-1: config 0 has an invalid interface number: 220 but max is 0 [ 478.290278][ T5835] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 478.300478][ T5835] usb 2-1: config 0 has no interface number 0 [ 478.306648][ T5835] usb 2-1: too many endpoints for config 0 interface 220 altsetting 57: 218, using maximum allowed: 30 [ 478.320375][ T5835] usb 2-1: config 0 interface 220 altsetting 57 has 0 endpoint descriptors, different from the interface descriptor's value: 218 [ 478.777849][ T5835] usb 2-1: config 0 interface 220 has no altsetting 0 [ 478.787946][ T5835] usb 2-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 478.797505][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.906090][ T5835] usb 2-1: Product: syz [ 478.914235][ T5835] usb 2-1: Manufacturer: syz [ 478.935677][ T5835] usb 2-1: SerialNumber: syz [ 478.977392][ T5835] usb 2-1: config 0 descriptor?? [ 479.176812][ T5835] usb 2-1: can't set config #0, error -71 [ 479.209553][ T5835] usb 2-1: USB disconnect, device number 21 [ 480.354126][T10851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10851 comm=syz.1.1073 [ 480.372903][T10850] veth0_to_team: entered promiscuous mode [ 480.378688][T10850] veth0_to_team: entered allmulticast mode [ 480.686752][ T30] audit: type=1400 audit(1751690329.694:510): avc: denied { mounton } for pid=10843 comm="syz.3.1074" path="/108/file0" dev="rpc_pipefs" ino=30334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 481.066269][T10856] ceph: No mds server is up or the cluster is laggy [ 481.135256][T10864] /dev/nullb0: Can't open blockdev [ 481.348094][T10869] fuse: Unknown parameter '(h' [ 481.876731][ T30] audit: type=1326 audit(1751690330.504:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10868 comm="syz.2.1079" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d5c98e929 code=0x0 [ 482.091733][ T24] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 482.349618][ T24] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 482.533885][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 482.681003][ T24] usb 3-1: can't read configurations, error -61 [ 482.931355][ T24] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 483.372095][ T24] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 483.406207][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 483.447289][T10890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1085'. [ 483.460116][ T24] usb 3-1: can't read configurations, error -61 [ 483.483137][ T24] usb usb3-port1: attempt power cycle [ 483.841213][ T24] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 483.872448][ T24] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 483.888319][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 483.896811][ T24] usb 3-1: can't read configurations, error -61 [ 484.130709][ T24] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 484.164359][ T24] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 484.178415][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 484.186794][ T24] usb 3-1: can't read configurations, error -61 [ 484.197892][ T24] usb usb3-port1: unable to enumerate USB device [ 485.299505][T10922] fuse: Unknown parameter 'bd' [ 485.331654][ T10] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 485.647978][ T10] usb 5-1: New USB device found, idVendor=0856, idProduct=ac33, bcdDevice= 0.f8 [ 485.660415][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.670848][ T10] usb 5-1: Product: syz [ 485.788062][ T10] usb 5-1: Manufacturer: syz [ 485.794273][ T10] usb 5-1: SerialNumber: syz [ 485.805726][ T10] usb 5-1: config 0 descriptor?? [ 485.814848][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 485.821115][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 485.830403][ T10] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 485.929356][T10934] loop8: detected capacity change from 0 to 1 [ 486.376934][T10934] Dev loop8: unable to read RDB block 1 [ 486.382620][T10934] loop8: unable to read partition table [ 486.388316][T10934] loop8: partition table beyond EOD, truncated [ 486.394536][T10934] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 486.441813][ T5905] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 486.467084][ T10] usb 5-1: Detected SIO [ 486.482414][ T10] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 486.621747][ T5905] usb 4-1: Using ep0 maxpacket: 16 [ 486.654432][ T5905] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 486.674959][ T5905] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.688568][ T5905] usb 4-1: config 0 has no interface number 0 [ 486.839755][ T30] audit: type=1400 audit(2000000003.390:512): avc: denied { shutdown } for pid=10943 comm="syz.2.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 486.871142][ T5905] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 486.880814][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.889638][ T5905] usb 4-1: Product: syz [ 486.896446][ T5905] usb 4-1: Manufacturer: syz [ 486.901121][ T5905] usb 4-1: SerialNumber: syz [ 486.908659][ T5905] usb 4-1: config 0 descriptor?? [ 486.918801][ T5905] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 486.925174][ T5905] usb 4-1: No valid video chain found. [ 486.972154][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 486.993082][ T30] audit: type=1400 audit(2000000003.550:513): avc: denied { write } for pid=10943 comm="syz.2.1101" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 486.993150][T10948] random: crng reseeded on system resumption [ 487.041442][T10631] usb 5-1: USB disconnect, device number 22 [ 487.049548][T10631] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 487.080487][T10631] ftdi_sio 5-1:0.0: device disconnected [ 487.151115][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 487.162600][ T10] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 487.172897][ T10] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=60.93 [ 487.182075][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.102657][T10962] kvm: emulating exchange as write [ 488.474030][ T5905] usb 4-1: USB disconnect, device number 22 [ 488.531120][ T30] audit: type=1326 audit(2000000005.080:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10953 comm="syz.5.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213878e929 code=0x7fc00000 [ 488.683741][ T30] audit: type=1400 audit(2000000005.240:515): avc: denied { map } for pid=10971 comm="syz.3.1107" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 490.306507][T10983] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1110'. [ 490.404790][T10988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1110'. [ 490.492683][ T10] usb 2-1: string descriptor 0 read error: -71 [ 490.964076][ T10] peak_usb 2-1:2.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 491.089353][ T10] peak_usb 2-1:2.0: unable to read PCAN-USB serial number (err -22) [ 491.224972][T10995] Cannot find map_set index 0 as target [ 491.466956][T11010] 9pnet_fd: Insufficient options for proto=fd [ 491.486578][ T10] peak_usb 2-1:2.0: probe with driver peak_usb failed with error -22 [ 491.509111][T11011] random: crng reseeded on system resumption [ 491.574986][ T10] usb 2-1: USB disconnect, device number 22 [ 491.611520][ T5940] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 491.772309][ T78] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 491.871878][ T5940] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.665393][ T78] usb 6-1: Using ep0 maxpacket: 16 [ 492.682212][ T5940] usb 5-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 492.712237][ T78] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 492.732665][ T5940] usb 5-1: config 1 interface 0 has no altsetting 0 [ 492.743525][ T78] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 492.755089][ T5940] usb 5-1: New USB device found, idVendor=046d, idProduct=0057, bcdDevice= 0.40 [ 492.787604][ T78] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.804075][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.817615][ T78] usb 6-1: Product: syz [ 492.822184][ T5940] usb 5-1: Product:  [ 492.826492][ T78] usb 6-1: Manufacturer: syz [ 492.831813][ T5940] usb 5-1: Manufacturer: ꐖ쀫㪶뼶ꥪ备㢼¦갪簢뜹剂쿞䋹ϩᰢ喈ޖ篨슎웻꥕걘奖⠉펈窺퀺턚ﵒ᪩奁싺漮籁짶栢卬⋮鉖빛䁍摹쇎랱뒝똥衣셾ᶶ皍硓螴ᩅ⹑ﮉ㼓跱龴蛃瞫閗䪿ﲑ嵑멦ካ러╲뭹覚嚤覓疞鬏帞ꜫ扄䕾雈᜕鿰윾抟ﭽ유ࢦ܂잴蝻㼷瑲眉亙솗พ켲塠抲喞錸 [ 492.865849][ C1] vkms_vblank_simulate: vblank timer overrun [ 492.879786][ T78] usb 6-1: SerialNumber: syz [ 493.038610][ T78] usb 6-1: config 0 descriptor?? [ 493.043988][ T5940] usb 5-1: SerialNumber: ⠉ [ 493.059985][ T78] hub 6-1:0.0: bad descriptor, ignoring hub [ 493.066029][ T78] hub 6-1:0.0: probe with driver hub failed with error -5 [ 493.186817][T11043] netlink: 'syz.1.1126': attribute type 12 has an invalid length. [ 493.451260][ T5835] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 493.570982][ T78] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input29 [ 493.673335][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 493.691656][ T78] usb 6-1: USB disconnect, device number 3 [ 493.697668][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 493.708658][ T5835] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 493.718949][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.739497][ T5835] usb 2-1: config 0 descriptor?? [ 493.892391][T10631] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 494.191168][T10631] usb 4-1: Using ep0 maxpacket: 8 [ 494.199350][T10631] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.219595][T10631] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 494.249727][T10631] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 494.260297][T10631] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 494.275511][T10631] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 494.284823][T10631] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.300699][T10631] usb 4-1: config 0 descriptor?? [ 494.861224][ T5835] ath6kl: Failed to submit usb control message: -110 [ 494.868157][ T5835] ath6kl: unable to send the bmi data to the device: -110 [ 495.222503][ T5835] ath6kl: Unable to send get target info: -110 [ 495.237645][ T5835] ath6kl: Failed to init ath6kl core: -110 [ 495.249457][ T5835] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 495.309540][ T30] audit: type=1400 audit(2000000011.860:516): avc: denied { module_load } for pid=11044 comm="syz.3.1127" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 495.489195][ T5940] usbhid 5-1:1.0: can't add hid device: -71 [ 495.499838][ T5940] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 495.524167][ T5940] usb 5-1: USB disconnect, device number 23 [ 495.975080][ T5940] usb 2-1: USB disconnect, device number 23 [ 496.470514][T11069] /dev/nullb0: Can't open blockdev [ 496.577368][ T30] audit: type=1400 audit(2000000012.950:517): avc: denied { mount } for pid=11065 comm="syz.1.1131" name="/" dev="hugetlbfs" ino=31976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 496.985413][ T10] usb 4-1: USB disconnect, device number 23 [ 497.434115][ T30] audit: type=1400 audit(2000000013.990:518): avc: denied { create } for pid=11079 comm="syz.3.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 497.455064][ C1] vkms_vblank_simulate: vblank timer overrun [ 497.553927][T11082] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1136'. [ 497.566190][T11082] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 497.731100][ T5835] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 498.026779][T11095] netlink: 4288 bytes leftover after parsing attributes in process `syz.2.1141'. [ 498.042193][ T30] audit: type=1400 audit(2000000014.600:519): avc: denied { mount } for pid=11093 comm="syz.5.1140" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 498.131131][ T5835] usb 4-1: device descriptor read/64, error -71 [ 498.143569][ T30] audit: type=1400 audit(2000000014.640:520): avc: denied { write } for pid=11093 comm="syz.5.1140" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 498.373789][ T30] audit: type=1400 audit(2000000014.740:521): avc: denied { unmount } for pid=10275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 499.123048][ T5835] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 499.135595][T11104] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 499.412719][ T5835] usb 4-1: device descriptor read/64, error -71 [ 499.587556][ T5835] usb usb4-port1: attempt power cycle [ 499.597470][ T30] audit: type=1400 audit(2000000016.100:522): avc: denied { ioctl } for pid=11110 comm="syz.2.1146" path="socket:[31190]" dev="sockfs" ino=31190 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 499.622879][ C1] vkms_vblank_simulate: vblank timer overrun [ 499.971481][ T78] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 500.041251][ T5835] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 500.072032][ T5835] usb 4-1: device descriptor read/8, error -71 [ 500.081214][ T5828] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 500.165311][ T78] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 500.179985][ T78] usb 5-1: config 0 has no interface number 0 [ 500.196582][ T78] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 500.216955][ T78] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 500.241253][ T5828] usb 2-1: device descriptor read/64, error -71 [ 500.249648][ T78] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 500.274818][ T78] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.291102][ T78] usb 5-1: Product: syz [ 500.302157][ T78] usb 5-1: Manufacturer: syz [ 500.307269][ T78] usb 5-1: SerialNumber: syz [ 500.312289][ T5835] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 500.330646][ T78] usb 5-1: config 0 descriptor?? [ 500.340755][T11115] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 500.357614][ T5835] usb 4-1: device descriptor read/8, error -71 [ 500.374733][ T78] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 500.410089][ T78] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 500.481688][ T5835] usb usb4-port1: unable to enumerate USB device [ 500.521091][ T5828] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 500.631083][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 500.701492][ T5828] usb 2-1: device descriptor read/64, error -71 [ 500.875833][ T5828] usb usb2-port1: attempt power cycle [ 500.897012][ T5835] usb 5-1: USB disconnect, device number 24 [ 500.913515][ T5835] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 501.111814][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.123335][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.416965][ T5835] cyberjack 5-1:0.69: device disconnected [ 501.779813][ T5828] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 501.857812][ T5828] usb 2-1: device descriptor read/8, error -71 [ 502.142021][ T5828] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 502.182194][ T5828] usb 2-1: device descriptor read/8, error -71 [ 502.221112][ T78] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 502.302762][ T5828] usb usb2-port1: unable to enumerate USB device [ 502.381110][ T78] usb 4-1: Using ep0 maxpacket: 8 [ 502.387950][ T78] usb 4-1: config 0 has an invalid interface number: 220 but max is 0 [ 502.396504][ T78] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 502.407887][ T78] usb 4-1: config 0 has no interface number 0 [ 502.416424][ T78] usb 4-1: too many endpoints for config 0 interface 220 altsetting 57: 218, using maximum allowed: 30 [ 502.428051][ T78] usb 4-1: config 0 interface 220 altsetting 57 has 0 endpoint descriptors, different from the interface descriptor's value: 218 [ 502.441766][ T78] usb 4-1: config 0 interface 220 has no altsetting 0 [ 502.451112][ T78] usb 4-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 502.460251][ T78] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.468951][ T78] usb 4-1: Product: syz [ 502.473299][ T78] usb 4-1: Manufacturer: syz [ 502.477939][ T78] usb 4-1: SerialNumber: syz [ 502.555404][T11159] netlink: 'syz.2.1161': attribute type 4 has an invalid length. [ 502.592028][ T78] usb 4-1: config 0 descriptor?? [ 502.603599][ T78] redrat3 4-1:0.220: Couldn't find all endpoints [ 502.740651][T11162] 9pnet_fd: Insufficient options for proto=fd [ 504.073216][ T78] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 504.110998][T11174] netlink: 'syz.5.1166': attribute type 10 has an invalid length. [ 504.118979][T11174] bridge0: left allmulticast mode [ 504.128989][T11174] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.136093][T11174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.143436][T11174] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.150492][T11174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.186052][T11174] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 504.231511][ T5828] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 504.241159][ T78] usb 5-1: Using ep0 maxpacket: 8 [ 504.249967][T11174] /dev/nullb0: Can't open blockdev [ 504.272210][ T78] usb 5-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 504.281739][ T30] audit: type=1400 audit(2000000020.840:523): avc: denied { connect } for pid=11173 comm="syz.5.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 504.302217][ C1] vkms_vblank_simulate: vblank timer overrun [ 504.322212][ T78] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 504.330438][ T78] usb 5-1: Product: syz [ 504.334797][ T78] usb 5-1: Manufacturer: syz [ 504.339504][ T78] usb 5-1: SerialNumber: syz [ 504.364751][ T78] usb 5-1: config 0 descriptor?? [ 504.403436][ T5828] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 504.430105][ T5828] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 504.447958][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.470886][ T5828] usb 2-1: config 0 descriptor?? [ 504.479605][ T5828] pwc: Askey VC010 type 2 USB webcam detected. [ 504.513117][T11177] tmpfs: Unknown parameter 'id' [ 504.631375][T11181] FAULT_INJECTION: forcing a failure. [ 504.631375][T11181] name failslab, interval 1, probability 0, space 0, times 0 [ 504.645223][T11181] CPU: 0 UID: 0 PID: 11181 Comm: syz.2.1168 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 504.645252][T11181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 504.645262][T11181] Call Trace: [ 504.645268][T11181] [ 504.645274][T11181] dump_stack_lvl+0x16c/0x1f0 [ 504.645302][T11181] should_fail_ex+0x512/0x640 [ 504.645326][T11181] should_failslab+0xc2/0x120 [ 504.645343][T11181] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 504.645358][T11181] ? skb_clone+0x190/0x3f0 [ 504.645375][T11181] skb_clone+0x190/0x3f0 [ 504.645396][T11181] netlink_deliver_tap+0xabd/0xd30 [ 504.645433][T11181] netlink_unicast+0x5df/0x7f0 [ 504.645452][T11181] ? __pfx_netlink_unicast+0x10/0x10 [ 504.645473][T11181] netlink_sendmsg+0x8d1/0xdd0 [ 504.645487][T11181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.645502][T11181] ____sys_sendmsg+0xa95/0xc70 [ 504.645514][T11181] ? copy_msghdr_from_user+0x10a/0x160 [ 504.645528][T11181] ? __pfx_____sys_sendmsg+0x10/0x10 [ 504.645555][T11181] ___sys_sendmsg+0x134/0x1d0 [ 504.645579][T11181] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.645597][T11181] ? __lock_acquire+0x622/0x1c90 [ 504.645633][T11181] __sys_sendmsg+0x16d/0x220 [ 504.645647][T11181] ? __pfx___sys_sendmsg+0x10/0x10 [ 504.645673][T11181] do_syscall_64+0xcd/0x4c0 [ 504.645695][T11181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.645712][T11181] RIP: 0033:0x7f2d5c98e929 [ 504.645725][T11181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.645740][T11181] RSP: 002b:00007f2d5d8b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.645755][T11181] RAX: ffffffffffffffda RBX: 00007f2d5cbb5fa0 RCX: 00007f2d5c98e929 [ 504.645765][T11181] RDX: 0000000000040800 RSI: 0000200000000240 RDI: 0000000000000003 [ 504.645771][T11181] RBP: 00007f2d5d8b6090 R08: 0000000000000000 R09: 0000000000000000 [ 504.645777][T11181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.645783][T11181] R13: 0000000000000000 R14: 00007f2d5cbb5fa0 R15: 00007ffd529d4888 [ 504.645796][T11181] [ 504.645871][T11181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'. [ 504.910220][ T78] usb 4-1: USB disconnect, device number 28 [ 504.946580][ T5828] pwc: recv_control_msg error -32 req 02 val 2b00 [ 504.976548][ T5828] pwc: recv_control_msg error -32 req 02 val 2700 [ 505.017937][ T5828] pwc: recv_control_msg error -32 req 02 val 2c00 [ 505.097474][ T5828] pwc: recv_control_msg error -32 req 04 val 1000 [ 505.120787][ T5828] pwc: recv_control_msg error -32 req 04 val 1300 [ 505.208347][ T5828] pwc: recv_control_msg error -32 req 04 val 1400 [ 505.946054][T11172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1165'. [ 505.955161][T11172] erspan0: entered promiscuous mode [ 505.962573][ T5828] pwc: recv_control_msg error -71 req 04 val 1500 [ 505.979092][ T5828] pwc: recv_control_msg error -71 req 02 val 2500 [ 506.014966][ T5828] pwc: recv_control_msg error -71 req 02 val 2400 [ 506.029438][ T5828] pwc: recv_control_msg error -71 req 02 val 2600 [ 506.036808][ T5828] pwc: recv_control_msg error -71 req 02 val 2900 [ 506.043982][ T5828] pwc: recv_control_msg error -71 req 02 val 2800 [ 506.055382][ T5828] pwc: recv_control_msg error -71 req 04 val 1100 [ 506.065681][ T5828] pwc: recv_control_msg error -71 req 04 val 1200 [ 506.078759][ T5828] pwc: Registered as video103. [ 506.086763][ T5828] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input30 [ 506.135634][ T5828] usb 2-1: USB disconnect, device number 28 [ 506.524036][T11207] netlink: 848 bytes leftover after parsing attributes in process `syz.3.1175'. [ 506.862074][ T5828] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 506.871522][ T5885] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 507.021169][ T5894] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 507.021197][ T5828] usb 6-1: Using ep0 maxpacket: 16 [ 507.042706][ T5885] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.059172][ T5885] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 507.059570][ T5828] usb 6-1: config 0 has no interfaces? [ 507.069371][ T5885] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 507.082930][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 507.090063][ T5828] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 507.095323][ T5885] usb 2-1: SerialNumber: syz [ 507.107985][ T5828] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 507.133071][ T5828] usb 6-1: Manufacturer: syz [ 507.150634][ T5828] usb 6-1: config 0 descriptor?? [ 507.179348][ T78] usb 5-1: USB disconnect, device number 25 [ 507.268530][ T5894] usb 4-1: Using ep0 maxpacket: 16 [ 507.285530][ T5894] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 507.480871][ T5894] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 507.490738][ T5894] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 507.505095][ T5894] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 507.514260][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 507.525631][T11214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.818431][ T5894] usb 4-1: SerialNumber: syz [ 508.441538][T11214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.464076][T11207] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 508.994143][ T78] usb 6-1: USB disconnect, device number 4 [ 509.127804][ T5885] usb 2-1: 0:2 : does not exist [ 509.132807][ T5885] usb 2-1: unit 5 not found! [ 509.160979][ T5885] usb 2-1: USB disconnect, device number 29 [ 509.250172][ T7704] udevd[7704]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 509.323932][ T30] audit: type=1400 audit(2000000025.880:524): avc: denied { unmount } for pid=8764 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 509.380187][T11207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1175'. [ 509.456752][ T5894] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 509.497347][ T5894] usb 4-1: USB disconnect, device number 29 [ 509.811127][ T30] audit: type=1400 audit(2000000026.310:525): avc: denied { ioctl } for pid=11257 comm="syz.2.1182" path="socket:[32342]" dev="sockfs" ino=32342 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 510.147237][ T30] audit: type=1400 audit(2000000026.650:526): avc: denied { bind } for pid=11265 comm="syz.5.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 511.341164][ T5894] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 511.575515][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.639620][ T5894] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 511.669592][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.849254][ T5894] usb 6-1: config 0 descriptor?? [ 512.051308][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 512.107459][ T30] audit: type=1400 audit(2000000028.660:527): avc: denied { connect } for pid=11313 comm="syz.2.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 512.281168][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 512.296157][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 512.380212][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 512.429519][ T5894] logitech-djreceiver 0003:046D:C71F.0005: item fetching failed at offset 5/7 [ 512.528700][ T10] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 512.555089][ T5894] logitech-djreceiver 0003:046D:C71F.0005: logi_dj_probe: parse failed [ 512.685728][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.735333][ T5894] logitech-djreceiver 0003:046D:C71F.0005: probe with driver logitech-djreceiver failed with error -22 [ 512.747226][ T10] usb 4-1: Product: syz [ 512.751657][ T10] usb 4-1: Manufacturer: syz [ 512.762540][ T5894] usb 6-1: USB disconnect, device number 5 [ 512.770548][ T10] usb 4-1: SerialNumber: syz [ 512.798087][ T10] usb 4-1: config 0 descriptor?? [ 512.826878][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 512.839334][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 512.861360][ T30] audit: type=1400 audit(2000000029.410:528): avc: denied { mount } for pid=11308 comm="syz.4.1198" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 512.884026][ T10] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input32 [ 512.901565][ T10] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 513.024579][T11324] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 514.904083][ T10] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 514.969500][ T10] usb 4-1: USB disconnect, device number 30 [ 515.251104][ T78] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 515.541130][ T78] usb 2-1: Using ep0 maxpacket: 16 [ 515.547710][ T78] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 515.557848][ T78] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 32, changing to 9 [ 515.569182][ T78] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 1160, setting to 1024 [ 516.071015][T11346] syzkaller1: entered promiscuous mode [ 516.077728][T11346] syzkaller1: entered allmulticast mode [ 516.083850][ T78] usb 2-1: config 0 interface 0 has no altsetting 0 [ 516.107289][ T78] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 516.122076][ T78] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.218330][ T78] usb 2-1: Product: syz [ 516.237090][ T78] usb 2-1: Manufacturer: syz [ 516.243256][ T78] usb 2-1: SerialNumber: syz [ 516.257404][ T78] usb 2-1: config 0 descriptor?? [ 516.284557][T11327] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 516.335257][ T30] audit: type=1400 audit(2000000032.880:529): avc: denied { write } for pid=11344 comm="syz.4.1208" path="socket:[32551]" dev="sockfs" ino=32551 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 516.416349][ T30] audit: type=1400 audit(2000000032.910:530): avc: denied { ioctl } for pid=11340 comm="syz.5.1207" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 516.457775][ T30] audit: type=1400 audit(2000000032.920:531): avc: denied { allowed } for pid=11340 comm="syz.5.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 516.499838][ T30] audit: type=1400 audit(2000000032.930:532): avc: denied { create } for pid=11340 comm="syz.5.1207" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 516.522114][T11327] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 516.523435][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 516.567418][ T30] audit: type=1400 audit(2000000032.930:533): avc: denied { map } for pid=11340 comm="syz.5.1207" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=32559 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 516.584522][ T78] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input33 [ 516.621663][ T30] audit: type=1400 audit(2000000032.930:534): avc: denied { read write } for pid=11340 comm="syz.5.1207" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=32559 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 516.660694][ T30] audit: type=1400 audit(2000000032.950:535): avc: denied { ioctl } for pid=11348 comm="syz.3.1209" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 516.689861][ T30] audit: type=1400 audit(2000000032.950:536): avc: denied { create } for pid=11340 comm="syz.5.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 516.709770][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 516.719412][ T30] audit: type=1400 audit(2000000032.960:537): avc: denied { connect } for pid=11340 comm="syz.5.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 516.740183][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 251, changing to 11 [ 516.752336][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.778185][ T10] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 516.788856][ T30] audit: type=1400 audit(2000000032.970:538): avc: denied { sys_module } for pid=11344 comm="syz.4.1208" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 516.840407][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 516.860829][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.872885][ T10] usb 4-1: Product: syz [ 516.878127][ T10] usb 4-1: Manufacturer: syz [ 516.891322][ T5885] usb 2-1: USB disconnect, device number 30 [ 516.941295][ T10] usb 4-1: SerialNumber: syz [ 516.988465][ T10] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 517.001652][ T10] cdc_ncm 4-1:1.1: bind() failure [ 517.253618][T11364] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 517.267287][T11349] batadv_slave_1: entered promiscuous mode [ 517.273950][T11348] batadv_slave_1: left promiscuous mode [ 517.282911][ T5828] usb 4-1: USB disconnect, device number 31 [ 517.411776][ T5885] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 517.751406][ T5885] usb 5-1: Using ep0 maxpacket: 8 [ 517.813014][ T5885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.878650][ T5885] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 518.050747][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 518.061938][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 518.073318][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 518.085763][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 518.096097][ T5885] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 518.157354][T11374] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1214'. [ 518.185562][T11375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1215'. [ 518.277514][T11371] vlan2: entered promiscuous mode [ 518.341294][ T5829] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 518.521832][T11371] vlan2: entered allmulticast mode [ 518.547617][T11371] hsr_slave_1: entered allmulticast mode [ 518.558813][ T5885] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 518.591160][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.607500][ T5885] usb 5-1: Product: syz [ 518.612974][ T5885] usb 5-1: Manufacturer: syz [ 518.618083][ T5885] usb 5-1: SerialNumber: syz [ 518.640141][ T5885] usb 5-1: config 0 descriptor?? [ 518.660023][T11359] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 518.682572][ T5885] ati_remote 5-1:0.0: Initializing ati_remote hardware failed. [ 518.713187][ T5829] Bluetooth: hci3: unexpected event for opcode 0xffff [ 518.713968][ T5885] ati_remote 5-1:0.0: probe with driver ati_remote failed with error -5 [ 519.302028][T11400] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1220'. [ 519.363303][T11401] netlink: 'syz.5.1221': attribute type 10 has an invalid length. [ 519.615020][T11401] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 520.497100][T11418] lo speed is unknown, defaulting to 1000 [ 520.503297][T11418] lo speed is unknown, defaulting to 1000 [ 520.513113][T11418] lo speed is unknown, defaulting to 1000 [ 520.575416][T11418] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 520.747255][T11418] lo speed is unknown, defaulting to 1000 [ 520.762013][T11418] lo speed is unknown, defaulting to 1000 [ 520.775248][T11418] lo speed is unknown, defaulting to 1000 [ 520.788696][T11418] lo speed is unknown, defaulting to 1000 [ 520.802263][T11418] lo speed is unknown, defaulting to 1000 [ 520.816534][T11418] lo speed is unknown, defaulting to 1000 [ 520.831086][T11418] lo speed is unknown, defaulting to 1000 [ 521.696009][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 521.696019][ T30] audit: type=1400 audit(2000000038.250:616): avc: denied { search } for pid=11421 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 521.787546][ T30] audit: type=1400 audit(2000000038.290:617): avc: denied { search } for pid=11421 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 521.865245][ T30] audit: type=1400 audit(2000000038.290:618): avc: denied { search } for pid=11421 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1843 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 521.894681][ T30] audit: type=1400 audit(2000000038.290:619): avc: denied { search } for pid=11421 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 521.990860][ T30] audit: type=1400 audit(2000000038.300:620): avc: denied { read open } for pid=11428 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.153611][ T30] audit: type=1400 audit(2000000038.300:621): avc: denied { getattr } for pid=11428 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.262035][T11441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1229'. [ 522.271003][ T30] audit: type=1400 audit(2000000038.300:622): avc: denied { getattr } for pid=11428 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1881 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 522.373428][ T30] audit: type=1400 audit(2000000038.450:623): avc: denied { append } for pid=11429 comm="syz.5.1228" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 522.551249][ T5905] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 522.604780][ T30] audit: type=1400 audit(2000000038.520:624): avc: denied { read } for pid=11433 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1881 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 522.626832][ T30] audit: type=1400 audit(2000000038.520:625): avc: denied { open } for pid=11433 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1881 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 523.161123][ T5905] usb 3-1: Using ep0 maxpacket: 32 [ 523.170080][ T5905] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 523.182783][ T5905] usb 3-1: config 0 has no interface number 0 [ 523.194456][ T5905] usb 3-1: config 0 interface 184 has no altsetting 0 [ 523.229715][ T5905] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 523.354914][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 523.362870][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.411437][ T5905] usb 3-1: Product: syz [ 523.425998][ T5905] usb 3-1: Manufacturer: syz [ 523.448947][ T5905] usb 3-1: SerialNumber: syz [ 523.480742][ T5905] usb 3-1: config 0 descriptor?? [ 523.515334][ T5905] smsc75xx v1.0.0 [ 523.531318][ T10] usb 4-1: device descriptor read/64, error -71 [ 523.741125][ T5885] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 523.771338][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 523.911135][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 523.918211][ T10] usb 4-1: device descriptor read/64, error -71 [ 523.931394][ T5905] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 523.951462][ T5905] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 523.961610][ T5905] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 523.972988][ T5885] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 523.981207][ T5885] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.991569][ T5905] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 524.011118][ T5885] usb 2-1: config 0 has no interface number 0 [ 524.026042][ T5885] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 524.045295][ T5885] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 524.064357][ T10] usb usb4-port1: attempt power cycle [ 524.073002][ T5885] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 524.085161][ T5885] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 524.091354][ T5829] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 524.094669][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.131703][ T5885] usb 2-1: config 0 descriptor?? [ 524.137984][T11475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.140732][ T5885] ldusb 2-1:0.55: Interrupt in endpoint not found [ 524.147123][T11475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.299314][T11481] IPv6: Can't replace route, no match found [ 524.362700][ T5885] usb 2-1: USB disconnect, device number 31 [ 524.421479][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 524.441617][ T10] usb 4-1: device descriptor read/8, error -71 [ 524.481150][T11482] nfs: Unknown parameter '*' [ 524.496519][ T1613] usb 3-1: USB disconnect, device number 19 [ 524.542544][ T5835] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 524.691173][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 524.691623][ T5835] usb 6-1: Using ep0 maxpacket: 16 [ 524.714625][ T10] usb 4-1: device descriptor read/8, error -71 [ 524.723170][ T5835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 524.745444][ T5835] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 524.761233][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.779427][ T5835] usb 6-1: Product: syz [ 524.785175][ T5835] usb 6-1: Manufacturer: syz [ 524.799953][ T5835] usb 6-1: SerialNumber: syz [ 524.806815][ T5835] usb 6-1: config 0 descriptor?? [ 524.825657][ T5835] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 524.841808][ T10] usb usb4-port1: unable to enumerate USB device [ 524.845111][ T5835] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 524.981312][T11491] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.991871][T11491] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.440463][ T5835] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 526.419905][T11512] lo speed is unknown, defaulting to 1000 [ 526.897111][ T6125] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.937973][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 526.937989][ T30] audit: type=1400 audit(2000000043.490:660): avc: denied { getopt } for pid=11504 comm="syz.1.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 527.035121][ T6125] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.058365][ T30] audit: type=1400 audit(2000000043.610:661): avc: denied { create } for pid=11504 comm="syz.1.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 527.078721][ T5835] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 527.112355][ T30] audit: type=1400 audit(2000000043.640:662): avc: denied { connect } for pid=11504 comm="syz.1.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 527.133662][ T5835] em28xx 6-1:0.0: board has no eeprom [ 527.176482][ T6125] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.211483][ T5835] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 527.271103][ T5835] em28xx 6-1:0.0: dvb set to bulk mode. [ 527.276972][ T5960] em28xx 6-1:0.0: Binding DVB extension [ 527.323670][ T10] usb 6-1: USB disconnect, device number 6 [ 527.343999][ T5828] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 527.355583][ T10] em28xx 6-1:0.0: Disconnecting em28xx [ 527.454309][ T6125] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.479977][ T5960] em28xx 6-1:0.0: Registering input extension [ 527.508854][ T10] em28xx 6-1:0.0: Closing input extension [ 527.554447][ T5828] usb 2-1: Using ep0 maxpacket: 16 [ 527.812463][ T10] em28xx 6-1:0.0: Freeing device [ 527.861852][ T5828] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 527.870970][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.881887][ T5828] usb 2-1: Product: syz [ 527.966710][ T5828] usb 2-1: Manufacturer: syz [ 528.024634][ T5828] usb 2-1: SerialNumber: syz [ 528.080719][ T5828] r8152-cfgselector 2-1: Unknown version 0x0000 [ 528.123013][ T5828] r8152-cfgselector 2-1: config 0 descriptor?? [ 528.151079][ T30] audit: type=1400 audit(2000000044.690:663): avc: denied { read } for pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 528.337165][ T6125] bridge_slave_1: left allmulticast mode [ 528.364802][ T6125] bridge_slave_1: left promiscuous mode [ 528.388780][ T6125] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.620991][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 528.691866][ T6125] bridge_slave_0: left allmulticast mode [ 528.708863][ T6125] bridge_slave_0: left promiscuous mode [ 528.734203][ T6125] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.830554][ T30] audit: type=1400 audit(2000000045.380:664): avc: denied { create } for pid=11536 comm="syz.3.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 528.851119][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 528.863303][ T10] usb 6-1: config 178 has no interfaces? [ 528.876137][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=120a, bcdDevice=74.f8 [ 528.893149][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.918559][ T10] usb 6-1: Product: syz [ 528.927602][ T10] usb 6-1: Manufacturer: syz [ 528.940156][ T10] usb 6-1: SerialNumber: syz [ 529.188480][ T30] audit: type=1400 audit(2000000045.730:665): avc: denied { read write } for pid=11532 comm="syz.5.1254" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 529.255747][ T30] audit: type=1400 audit(2000000045.740:666): avc: denied { open } for pid=11532 comm="syz.5.1254" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 529.340853][T11562] 9pnet_fd: Insufficient options for proto=fd [ 529.373677][ T30] audit: type=1400 audit(2000000045.890:667): avc: denied { mounton } for pid=11532 comm="syz.5.1254" path="/57" dev="tmpfs" ino=328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 529.859005][ T30] audit: type=1400 audit(2000000045.910:668): avc: denied { write } for pid=11532 comm="syz.5.1254" name="ip6_tables_matches" dev="proc" ino=4026533134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 529.915289][ T10] apple-mfi-fastcharge 6-1: USB disconnect, device number 7 [ 530.003796][ T5960] r8152-cfgselector 2-1: USB disconnect, device number 32 [ 530.276631][T11573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.286692][T11573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.344725][ T6125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.355006][ T6125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.364703][ T6125] bond0 (unregistering): Released all slaves [ 530.463922][ T6125] tipc: Left network mode [ 530.471364][ T5960] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 530.573640][ T30] audit: type=1400 audit(2000000047.120:669): avc: denied { write } for pid=11576 comm="syz.2.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 530.705149][ T5960] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 530.981075][ T5960] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 531.059059][ T5960] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 531.089939][ T5960] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 531.784748][ T5960] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 532.102815][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 532.182979][ T5960] usb 2-1: Product: syz [ 532.237281][ T5960] usb 2-1: Manufacturer: syz [ 532.362052][ T5960] cdc_wdm 2-1:1.0: skipping garbage [ 532.494361][ T5960] cdc_wdm 2-1:1.0: skipping garbage [ 534.031233][T11643] syz.2.1266 (11643): drop_caches: 2 [ 534.049805][T11643] syz.2.1266 (11643): drop_caches: 2 [ 534.133255][ T5960] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 534.164352][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 534.164367][ T30] audit: type=1400 audit(2000000049.170:671): avc: denied { name_connect } for pid=11641 comm="syz.2.1266" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 534.248480][T11644] sctp: failed to load transform for md5: -2 [ 534.491182][ T5960] usb 2-1: USB disconnect, device number 33 [ 534.777260][ T30] audit: type=1400 audit(2000000049.190:672): avc: denied { listen } for pid=11641 comm="syz.2.1266" laddr=fe80::13 lport=35313 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 535.784795][ T30] audit: type=1400 audit(2000000049.260:673): avc: denied { accept } for pid=11641 comm="syz.2.1266" laddr=fe80::13 lport=35313 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 536.441179][ T6125] hsr_slave_0: left promiscuous mode [ 536.609782][ T6125] hsr_slave_1: left promiscuous mode [ 536.744720][ T6125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.752238][ T6125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.771635][ T30] audit: type=1400 audit(2000000053.240:674): avc: denied { create } for pid=11670 comm="syz.5.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 536.877285][ T30] audit: type=1400 audit(2000000053.240:675): avc: denied { connect } for pid=11670 comm="syz.5.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 536.902110][ T6125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.903008][ T30] audit: type=1400 audit(2000000053.240:676): avc: denied { read } for pid=11670 comm="syz.5.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 536.929579][ T30] audit: type=1400 audit(2000000053.320:677): avc: denied { setopt } for pid=11666 comm="syz.1.1271" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 536.950048][ T30] audit: type=1400 audit(2000000053.360:678): avc: denied { write } for pid=11670 comm="syz.5.1272" path="socket:[34335]" dev="sockfs" ino=34335 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 536.962296][ T6125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.991972][ T30] audit: type=1400 audit(2000000053.370:679): avc: denied { name_bind } for pid=11669 comm="syz.4.1273" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 537.038002][ T6125] veth1_macvtap: left promiscuous mode [ 537.046062][ T6125] veth0_macvtap: left promiscuous mode [ 537.051973][ T6125] veth1_vlan: left promiscuous mode [ 537.057398][ T6125] veth0_vlan: left promiscuous mode [ 537.274908][ T30] audit: type=1400 audit(2000000053.830:680): avc: denied { ioctl } for pid=11691 comm="syz.4.1276" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 538.768575][ T1613] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 539.215505][ T6125] team0 (unregistering): Port device team_slave_1 removed [ 539.248583][ T6125] team0 (unregistering): Port device team_slave_0 removed [ 539.261217][ T1613] usb 6-1: Using ep0 maxpacket: 8 [ 539.270245][ T1613] usb 6-1: config 0 has an invalid interface number: 220 but max is 0 [ 539.289728][ T1613] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 539.301495][ T1613] usb 6-1: config 0 has no interface number 0 [ 539.317964][ T1613] usb 6-1: too many endpoints for config 0 interface 220 altsetting 57: 218, using maximum allowed: 30 [ 539.329371][ T1613] usb 6-1: config 0 interface 220 altsetting 57 has 0 endpoint descriptors, different from the interface descriptor's value: 218 [ 539.360298][ T1613] usb 6-1: config 0 interface 220 has no altsetting 0 [ 539.391300][ T1613] usb 6-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 539.416547][ T1613] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.437928][ T1613] usb 6-1: Product: syz [ 539.443509][ T1613] usb 6-1: Manufacturer: syz [ 539.456439][ T1613] usb 6-1: SerialNumber: syz [ 539.495509][ T1613] usb 6-1: config 0 descriptor?? [ 539.509215][ T1613] redrat3 6-1:0.220: Couldn't find all endpoints [ 539.745186][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 539.745202][ T30] audit: type=1400 audit(2000000056.300:685): avc: denied { create } for pid=11711 comm="syz.3.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 540.262222][ T30] audit: type=1400 audit(2000000056.680:686): avc: denied { create } for pid=11714 comm="syz.4.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 540.296993][ T30] audit: type=1400 audit(2000000056.680:687): avc: denied { create } for pid=11714 comm="syz.4.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 540.350070][ T30] audit: type=1400 audit(2000000056.690:688): avc: denied { connect } for pid=11714 comm="syz.4.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 540.516048][T11682] dvmrp17: entered allmulticast mode [ 540.522577][T11667] dvmrp17: left allmulticast mode [ 540.585276][T11716] lo speed is unknown, defaulting to 1000 [ 540.944475][ T30] audit: type=1400 audit(2000000057.500:689): avc: denied { create } for pid=11726 comm="syz.4.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 541.201120][ T30] audit: type=1400 audit(2000000057.680:690): avc: denied { bind } for pid=11726 comm="syz.4.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 541.221324][ T30] audit: type=1400 audit(2000000057.680:691): avc: denied { write } for pid=11726 comm="syz.4.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 541.343629][ T1613] usb 6-1: USB disconnect, device number 8 [ 541.619199][ T30] audit: type=1400 audit(2000000058.170:692): avc: denied { read } for pid=11738 comm="syz.5.1286" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 541.660188][ T30] audit: type=1400 audit(2000000058.170:693): avc: denied { open } for pid=11738 comm="syz.5.1286" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 541.660243][ T30] audit: type=1400 audit(2000000058.200:694): avc: denied { ioctl } for pid=11738 comm="syz.5.1286" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 542.036825][T11754] netlink: 'syz.1.1288': attribute type 1 has an invalid length. [ 542.036999][T11750] ucma_write: process 487 (syz.2.1287) changed security contexts after opening file descriptor, this is not allowed. [ 542.084085][T11754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1288'. [ 542.351341][ T5885] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 542.378791][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804abff800: rx timeout, send abort [ 542.512809][ T5885] usb 4-1: config 127 has an invalid interface number: 218 but max is 0 [ 542.705089][T11765] /dev/nullb0: Can't open blockdev [ 542.888434][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804abff800: abort rx timeout. Force session deactivation [ 542.970123][ T5885] usb 4-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 542.990544][ T5885] usb 4-1: config 127 has no interface number 0 [ 542.997268][ T5885] usb 4-1: config 127 interface 218 altsetting 2 endpoint 0x3 has invalid wMaxPacketSize 0 [ 543.007295][ T5885] usb 4-1: config 127 interface 218 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 543.061588][ T5885] usb 4-1: config 127 interface 218 has no altsetting 0 [ 543.097010][ T5885] usb 4-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 3.5c [ 543.126520][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.296151][ T5885] usb 4-1: Product: syz [ 543.300352][ T5885] usb 4-1: Manufacturer: syz [ 543.307027][ T5885] usb 4-1: SerialNumber: syz [ 544.493780][T11790] binder: BINDER_SET_CONTEXT_MGR already set [ 544.526915][T11790] binder: 11789:11790 ioctl 4018620d 2000000000c0 returned -16 [ 545.439122][ T5885] etas_es58x 4-1:127.218: Starting syz syz (Serial Number syz) [ 545.533892][ T5885] etas_es58x 4-1:127.218: could not retrieve the product info string [ 545.841397][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 545.841431][ T30] audit: type=1400 audit(2000000062.310:714): avc: denied { ioctl } for pid=11818 comm="syz.3.1303" path="socket:[33590]" dev="sockfs" ino=33590 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 545.986594][ T5885] usb 4-1: USB disconnect, device number 36 [ 545.996024][ T5885] etas_es58x 4-1:127.218: Disconnecting syz syz [ 546.041258][ T5894] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 546.291133][ T5894] usb 6-1: Using ep0 maxpacket: 8 [ 546.307902][ T5894] usb 6-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 546.327738][ T5894] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 546.373219][ T5894] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 546.392928][ T5894] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 546.426101][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.492588][ T1613] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 546.641521][ T1613] usb 2-1: device descriptor read/64, error -71 [ 546.683260][T11816] netdevsim netdevsim5: Direct firmware load for  failed with error -2 [ 546.712818][T11816] netdevsim netdevsim5: Falling back to sysfs fallback for:  [ 546.726564][ T30] audit: type=1400 audit(2000000063.260:715): avc: denied { firmware_load } for pid=11814 comm="syz.5.1302" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 546.800854][T11831] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 547.001197][ T1613] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 547.772976][ T30] audit: type=1400 audit(2000000064.200:716): avc: denied { create } for pid=11832 comm="syz.2.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 547.983402][ T1613] usb 2-1: device descriptor read/64, error -71 [ 548.301392][ T1613] usb usb2-port1: attempt power cycle [ 548.764413][T11858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.784725][T11858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.846487][T11859] /dev/nullb0: Can't open blockdev [ 549.028620][ T1613] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 549.137838][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 549.315687][ T5894] usb 6-1: string descriptor 0 read error: -71 [ 549.339329][ T30] audit: type=1400 audit(2000000065.890:717): avc: denied { lock } for pid=11857 comm="syz.4.1311" path="socket:[34625]" dev="sockfs" ino=34625 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 549.374640][ T36] wlan1: Trigger new scan to find an IBSS to join [ 549.381238][ T5894] usb 6-1: USB disconnect, device number 9 [ 549.939928][T11865] kernel read not supported for file /eth0 (pid: 11865 comm: syz.4.1311) [ 550.504743][ T30] audit: type=1800 audit(2000000067.060:718): pid=11865 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1311" name="eth0" dev="mqueue" ino=34622 res=0 errno=0 [ 550.544866][T11865] netlink: 'syz.4.1311': attribute type 32 has an invalid length. [ 551.318607][T11865] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 551.637980][T11896] netlink: 'syz.5.1319': attribute type 21 has an invalid length. [ 551.646119][T11896] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1319'. [ 551.853881][T11900] netlink: 'syz.5.1319': attribute type 21 has an invalid length. [ 551.868829][T11900] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1319'. [ 554.385935][ T1613] usb 2-1: device descriptor read/8, error -110 [ 554.427195][T11938] /dev/nullb0: Can't open blockdev [ 554.833976][ T6125] wlan1: Trigger new scan to find an IBSS to join [ 554.850612][ T30] audit: type=1400 audit(2000000070.790:719): avc: denied { getopt } for pid=11928 comm="syz.4.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 554.904181][ T1613] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 554.920819][ T30] audit: type=1400 audit(2000000070.800:720): avc: denied { connect } for pid=11928 comm="syz.4.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 554.964039][ T1613] usb 2-1: device descriptor read/8, error -32 [ 555.000090][ T30] audit: type=1400 audit(2000000071.530:721): avc: denied { ioctl } for pid=11915 comm="syz.3.1322" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 555.082910][ T1613] usb usb2-port1: unable to enumerate USB device [ 555.123040][ T30] audit: type=1400 audit(2000000071.670:722): avc: denied { open } for pid=11944 comm="syz.5.1327" path="/dev/ptyqf" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 555.552938][T11952] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1327'. [ 555.613693][ T30] audit: type=1400 audit(2000000071.770:723): avc: denied { module_load } for pid=11944 comm="syz.5.1327" path="/sys/kernel/oops_count" dev="sysfs" ino=57568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 555.926114][ T30] audit: type=1400 audit(2000000071.890:724): avc: denied { unlink } for pid=11944 comm="syz.5.1327" name="#20" dev="tmpfs" ino=421 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 556.082745][ T30] audit: type=1400 audit(2000000071.910:725): avc: denied { mount } for pid=11944 comm="syz.5.1327" name="/" dev="overlay" ino=416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 556.105113][ T30] audit: type=1400 audit(2000000072.640:726): avc: denied { unmount } for pid=10275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 556.299455][ T30] audit: type=1400 audit(2000000072.850:727): avc: denied { setopt } for pid=11961 comm="syz.4.1330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 556.389503][ T30] audit: type=1400 audit(2000000072.850:728): avc: denied { read } for pid=11961 comm="syz.4.1330" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 556.401244][T11639] wlan1: Creating new IBSS network, BSSID fa:34:4f:3c:86:13 [ 562.415830][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.704227][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 575.431835][ T5894] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 575.541042][ C0] sched: DL replenish lagged too much [ 576.475853][ T5894] usb 6-1: Using ep0 maxpacket: 16 [ 582.366775][ T5894] usb 6-1: unable to read config index 0 descriptor/start: -110 [ 584.043158][ T5894] usb 6-1: can't read configurations, error -110 [ 586.114723][ T5894] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 601.553144][ T5894] usb 6-1: device descriptor read/64, error -32 [ 609.063116][ T5894] usb usb6-port1: attempt power cycle [ 612.632177][T11635] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 640.793249][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 647.513864][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 653.361201][ T5894] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 672.652291][ T5894] usb 6-1: device descriptor read/8, error -32 [ 683.940987][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 683.947944][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5960/1:b..l [ 683.956214][ C0] rcu: (detected by 0, t=10502 jiffies, g=41549, q=1090 ncpus=2) [ 683.963990][ C0] task:kworker/1:7 state:R running task stack:22184 pid:5960 tgid:5960 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 683.978272][ C0] Workqueue: events_power_efficient gc_worker [ 683.984326][ C0] Call Trace: [ 683.987582][ C0] [ 683.990489][ C0] __schedule+0x116a/0x5de0 [ 683.994989][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 683.999996][ C0] ? find_held_lock+0x2b/0x80 [ 684.004675][ C0] ? __pfx___schedule+0x10/0x10 [ 684.009500][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 684.015293][ C0] ? mark_held_locks+0x49/0x80 [ 684.020055][ C0] preempt_schedule_irq+0x51/0x90 [ 684.025057][ C0] irqentry_exit+0x36/0x90 [ 684.029458][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 684.035427][ C0] RIP: 0010:gc_worker+0x2d5/0x16e0 [ 684.040545][ C0] Code: 00 00 48 c7 c7 88 18 aa 90 e8 37 72 eb f7 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 15 18 0f f8 58 48 85 db 0f 85 d4 0f 00 00 96 1c 0f f8 8b 1d 70 14 fd 06 41 89 dc 31 ff 41 83 e4 01 44 89 [ 684.060133][ C0] RSP: 0018:ffffc9000238fb58 EFLAGS: 00000293 [ 684.066179][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff89ad0f49 [ 684.074121][ C0] RDX: ffff88801e754880 RSI: ffffffff89ad0f58 RDI: 0000000000000007 [ 684.082064][ C0] RBP: ffffffff9b278e8c R08: 0000000000000007 R09: 0000000000000000 [ 684.090185][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888031e00000 [ 684.098133][ C0] R13: 0000000000040000 R14: dffffc0000000000 R15: 0000000000001770 [ 684.106081][ C0] ? gc_worker+0xe19/0x16e0 [ 684.110558][ C0] ? gc_worker+0xe28/0x16e0 [ 684.115048][ C0] ? gc_worker+0xe28/0x16e0 [ 684.119528][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 684.125137][ C0] ? __pfx_gc_worker+0x10/0x10 [ 684.129875][ C0] ? rcu_is_watching+0x12/0xc0 [ 684.134622][ C0] process_one_work+0x9cf/0x1b70 [ 684.139536][ C0] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 684.145578][ C0] ? __pfx_process_one_work+0x10/0x10 [ 684.150945][ C0] ? assign_work+0x1a0/0x250 [ 684.155544][ C0] worker_thread+0x6c8/0xf10 [ 684.160148][ C0] ? __kthread_parkme+0x19e/0x250 [ 684.165161][ C0] ? __pfx_worker_thread+0x10/0x10 [ 684.170250][ C0] kthread+0x3c2/0x780 [ 684.174293][ C0] ? __pfx_kthread+0x10/0x10 [ 684.178855][ C0] ? rcu_is_watching+0x12/0xc0 [ 684.183595][ C0] ? __pfx_kthread+0x10/0x10 [ 684.188155][ C0] ret_from_fork+0x5d4/0x6f0 [ 684.192722][ C0] ? __pfx_kthread+0x10/0x10 [ 684.197283][ C0] ret_from_fork_asm+0x1a/0x30 [ 684.202031][ C0] [ 685.425636][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.432073][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.582380][ T5894] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 686.417863][ T5894] usb 6-1: device descriptor read/8, error -32 [ 686.569524][ T5894] usb usb6-port1: unable to enumerate USB device