last executing test programs: 13m51.891772695s ago: executing program 1 (id=2671): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280), r0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, 0x0, 0x0) 13m51.666233297s ago: executing program 1 (id=2674): r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x2b9, &(0x7f0000000740)={0x0, 0xb1e9, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r5, &(0x7f0000000000)=[{&(0x7f0000000100)=""/54, 0x36}], 0x1) (fail_nth: 1) 13m44.321778785s ago: executing program 1 (id=2677): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000200)={0x1, 0xb2, 0x2}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000001780), &(0x7f00000017c0)=0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000340)=0x1020008, 0x4) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000001c00)={0x1314, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0xe8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x24, 0x5, "69430f4e070ccfc24bbf3fb6d837b2dc85e74354206708043e2807abe2ba21cf"}, @ETHTOOL_A_BITSET_BITS={0xb4, 0x3, 0x0, 0x1, [{0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x53, 0x2, '\x00kK7\xdc d-\xb0\r\vh\xd7uh8w\xe6\x13\xea\x13\x06m/\xd9\x9bV\x93Ea\xc8\xf8\x9a\x05\x8d9\xd1\xba\\\x89=Y]\x9d\t6\x1bb\xbb\x9d\x92\xfd\xa4\xcaTB\xc6\x82u\xf0\xcf\x8e\x99\x00\x0f\a\xe119`\v\xdcH\xcc=E\xc0\x8d\x92'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '9p\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '\\.)}%%}\\/^%[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x6, 0x4, "85af"}]}, @ETHTOOL_A_FEATURES_WANTED={0x112c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xa3, 0x4, "7a44e0a957067a45e89774358492291ddb57a9ca4cd666223ed504c72fd8e3142147c7247e3c7a8f7b4dd2297eb8332d2c36a5c7a26a92171a9bafdcd0f141824e69e8636619d22f88e61147539280bad0f126423edf68ef37d315a721a74f12a14afff1b265adce926acd2d58aa67903b4e2505ee759bfec235103bc4b812720871d7928a1fd2a37282f6c16d72c050271033c92baed492867e9c686719c9"}, @ETHTOOL_A_BITSET_MASK={0xbc, 0x5, "6d94328626290d9f7e1f310a09e60ce5062860034261a380c8691dbe75312e268adce3498ae098738f1ef14d51056b8171822bf9d58aeb0c3be705d198ce6b8ccaf0a97af2d3ed279f171bd66b40cb7b2d7b5e13ab97bc9bae4055a7ba80327afb2812884275b373390ad9bf370269585334f86fb77c403fd06ff2afb137e4f2b5b9491555d31aac009d9c6ceb9d5eacda610aa939fc5f852068970c051f02ce9d344f36e96e80c382c41e813228f35b6008f62b2bdbada6"}, @ETHTOOL_A_BITSET_VALUE={0xfc4, 0x4, "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"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x7c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'team0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '-,[)(*\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8e}]}]}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x1314}, 0x1, 0x0, 0x0, 0xc004}, 0x11) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x48, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}, @IFLA_MTU={0x8, 0x4, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0xc014}, 0x8010) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x40814}, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000003c0), 0x200000, &(0x7f0000000180)=ANY=[@ANYBLOB=',loose,access=client,access=any,versi', @ANYRES16=r6]) 13m43.167812099s ago: executing program 1 (id=2682): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000a40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]}) 13m36.075000021s ago: executing program 1 (id=2683): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) write$FUSE_BMAP(r1, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x5}}, 0x18) openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) fstat(r0, &(0x7f0000000340)) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) (async) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) (async) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) write$FUSE_BMAP(r1, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x5}}, 0x18) (async) openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) (async) fstat(r0, &(0x7f0000000340)) (async) 13m35.865526428s ago: executing program 1 (id=2687): r0 = io_uring_setup(0x29d5, &(0x7f0000000100)={0x0, 0x9255}) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8080, 0x0) r2 = epoll_create(0x203) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x18}) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) close_range(r0, 0xffffffffffffffff, 0x0) 13m20.722379285s ago: executing program 32 (id=2687): r0 = io_uring_setup(0x29d5, &(0x7f0000000100)={0x0, 0x9255}) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8080, 0x0) r2 = epoll_create(0x203) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x18}) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) close_range(r0, 0xffffffffffffffff, 0x0) 9.853186814s ago: executing program 4 (id=5417): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) r4 = syz_io_uring_setup(0x1662, &(0x7f0000000140)={0x0, 0xfad7, 0x20, 0x3}, 0x0, &(0x7f0000000280)) io_uring_enter(r4, 0x1f85, 0x40110a, 0x4d, 0x0, 0xa6) recvmmsg$unix(r3, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}}], 0x2, 0x40000000, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0xa2b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xaa, 0x20, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0xf, 0x3, 0x1, {0x22, 0x4ba}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0x6, 0xf}}}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x250, 0x1, 0x1, 0x81, 0x10, 0xb}, 0xf, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d0f0f01020710020235060003100be31dcb4f582b6af0a5ddf06a09325f353514595045146f2411bb4500e3c9c5052a47c72d2aa8fd439a335317e1a9006a135ea58fce00dbe89f53bf9dbb79ada142a9408ee50bde3deb4be564c22237441ebe5e5dcc93448a2a6f63b96c5083a035aca1d8ad6ae058e3f16c5b094347c2a0d2e03085a880499324a143fc9801668dedd8a09bc426c67574aab21ef5ead75ad26fef696ccca56ca3343f5b375699f8dbcb2cf9b413c22d89d2a237d2cd464e42f075ae52ee6747d585a0d0ac9af0021ec7b576479be39ae62203119fdb17c9146ac641"], 0x6, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x412}}, {0x70, &(0x7f00000004c0)=@string={0x70, 0x3, "ca1fe2796cb10c4af6cf5a252dfcc5b91491b3f6b2c4fbe5fd467ca119fc9d7fdeef48b775a85d1d1eb933bd10c3a0ceec0e467ef74d4ef320e4b23b797bc6303928aff1345cdb294e626795b13cd003f72f6642c90bd691d87e976f37460776aac4494106ed99c009a88e1e42e7"}}, {0xbb, &(0x7f00000006c0)=@string={0xbb, 0x3, "82b2805c565a25cc9b44e1e6b858d95b26eafc7ba5d4696162c03dacf092d8129e1ace6c084fde0028da2cea64e5fe939fd30ae5a1a160ec949719a1c9091a3817095aa7d6f9fae0b2f8770a48d86e705525d583df557ad7873a0d8e769675cf6b9a350670cd0f949fc995715fd813b711e19e12c146d80b3fa6335cc38be28071bb259ab546afea9aebef0fe11754bd251e9fd4998ca7bbaa300ec4ee44bacba1b8d8495fe3d9cdfe15e249c7bd768b93ca7e6edccc92ec57"}}, {0x38, &(0x7f0000000780)=@string={0x38, 0x3, "94418163456513dbc5cd4e08540008c0c09b00c3e04ec4b0be40827124883f7ec785200d7e0a37f1bcc4a9ba043e983ccd337274197d"}}]}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000001c0)=0x9, 0x4) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r6, 0x89e0, &(0x7f0000000000)={0x1}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 7.364705084s ago: executing program 2 (id=5428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0x4}, 0x80, 0x0}, 0x0) sendmsg$kcm(r2, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1}, 0x80, 0x0}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811000030dde00a7cd8a90a421289b7a4b0f6bcbea27d38834000f1102d6f81847d43777b0b9262dae1dbbbfd5c0e17ce75fd742b94b809d35caa9323fd68b9cca2f3103df60599b113764b7b2ca15d0ea4730612faa24efaf0a9709eadc861aefa5d1765fbf242dbe1f13763cf6cc41a6e85", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x4, 0xc8, 0xffff}}}, 0x8) 7.298695292s ago: executing program 3 (id=5430): syz_usb_connect$printer(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202", @ANYRESDEC=0x0], 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0100000001000000ffffffff00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000020100c0fa01"], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) 6.418377581s ago: executing program 5 (id=5431): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2b, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1d}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid=r2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) (fail_nth: 3) 6.368635412s ago: executing program 4 (id=5432): ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) ioctl$SIOCSIFHWADDR(r0, 0x8b04, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xdadd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) r4 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x2, &(0x7f0000000180), 0xfe) 6.158847771s ago: executing program 5 (id=5433): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x28000000000000) read$char_usb(r0, &(0x7f00000002c0)=""/237, 0xed) 6.123491793s ago: executing program 5 (id=5434): syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x24048180) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000380)=ANY=[], 0x190) 4.673570783s ago: executing program 4 (id=5435): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[], 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x80100, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xfffffffd, 0x10400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x88, {0x0, 0xa}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r4, 0x5f11, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000040601010000000000000000000000000500010007000000c27be38a0cce5d596019bbff075cec876a46511765bf72b6d3085829dedd630172d3"], 0x1c}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x288881, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="1e0308004d6b71ef2885693d26f1ea0900000000007a6fb718141cf441f9190c7212313633a44b36532fa33a4efcb7c5ab080f94"], 0xffdd) 4.615138518s ago: executing program 3 (id=5436): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.614342064s ago: executing program 2 (id=5437): acct(&(0x7f0000000080)='./cgroup\x00') socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x1, @mcast2, 0x2}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000000)=0x9, 0x4) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000000c0)=0x5, 0x4) bind$unix(0xffffffffffffffff, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) getgroups(0x1, &(0x7f00000004c0)=[0xee00]) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{0x0, 0x0, 0x0, 0x0, r3, 0xc8}, 0x0, 0x0, 0x6, 0x1e7, 0x5, 0x7c9d9ce5, 0x3, 0x1, 0xf1, 0x800, 0xffffffffffffffff, r4}) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) setrlimit(0xf, &(0x7f0000000040)={0x522, 0xe0000}) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05a97af7450000000000000000000000000000006c1b9f4c7696c0e4b93ca1f7c3dc246a9ab93315169dec8402db99f3f144231cf8fc959aa2eecef7cfc2f09c5aec439040234a946eb0209550ac56d6e08a35a2dfff30bb78e12e97f30dd43129883fa71566f088b847efac5c8fe32338b10cb5d2bf9c04d78c82da2cffb55fc2d49f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRESDEC=r5], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000200)="f1b41b7e59ed84a5da01c48e3b9990a8c85c65deffd51ef43f05ea2902d7c993b16842205cff37b3585302811fb858e96c7b0bbd30aa24a243ed48cd531f68ce25b30678869deaabf85f60f04a095e1e0dfc92bae749ec7137ab838406c18778f7a87d0c8741b61dfdd46b719b9ded9ec288994f85e2e993b5aa41d3a81800000000000000006e06d6004c05518d59a1aab5807f52b7f983f3551faca48ea46f7b0c9b3069f03c291a96c4afe906a87464d7c799a2288136cc464dcbfcfc9eccd9ec6d3b73", &(0x7f0000000400)="bb5895762d42e9f8c9233726b9c1516b4a93d064400fa8dbf22dd44e1ac21cd384cc4d5113bb2942fcdf985a63a67f726b179445ac384082052ef85db8a8fdd4e03d10c6d4b43335fb715b5b8bc2f29a7eefb6ed9520836c1641748df0c7c555128a58b4d6cc2b058bbb8849ea7281d5202897cdf13a7071971af838a233d0ad2738154350548eac3d6ed50b109bf60815a9bd1b11b85f38505bd730354ee400000000", 0x6c, r6}, 0x38) 4.498859632s ago: executing program 3 (id=5438): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x35, 0x9, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x05G'}]}]}, 0x20}}, 0x0) 4.192703443s ago: executing program 2 (id=5439): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r2}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) 4.145165155s ago: executing program 0 (id=5440): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x4080, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYRES64, @ANYRESHEX=r1, @ANYRESHEX=r1]) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRES8=r1]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = getpid() unshare(0x8000000) semget$private(0x0, 0x4000, 0x400) fcntl$setstatus(r3, 0x4, 0x40000) syz_pidfd_open(r4, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00'}) write$dsp(r2, &(0x7f0000002600)="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", 0x19e) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) modify_ldt$read(0x0, &(0x7f00000027c0)=""/4132, 0x1024) socket$nl_route(0x10, 0x3, 0x0) 4.141872735s ago: executing program 5 (id=5441): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a656374"], 0xd0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r1}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000027c0000040000000c"], 0x528}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) syz_usb_connect(0x3, 0x1b, &(0x7f0000001940)={{0x12, 0x1, 0x310, 0xf0, 0xd4, 0x69, 0x8, 0x1b3d, 0x16e, 0x35b4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x2e, 0x8}}]}}, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0}) 3.716817399s ago: executing program 3 (id=5442): syz_open_dev$sndctrl(&(0x7f0000000100), 0x907, 0x200) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x3ff, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0x8008330e, 0x0) 3.597811113s ago: executing program 4 (id=5443): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000910000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), 0x0, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') r3 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r3, 0x40284504, &(0x7f0000000000)=""/56) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x20004000) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c40)=@newtfilter={0x1440, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff1, 0x2}, {0xb, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x1410, 0x2, [@TCA_ROUTE4_ACT={0x7cc, 0x6, [@m_ctinfo={0xcc, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5a48}, @TCA_CTINFO_ACT={0x18, 0x3, {0xc05, 0x8, 0x0, 0xfffeffff}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}]}, {0x78, 0x6, "0217035b248946de52e7f1b0bdb73f316d828bfbe6e48a5c789700155308306d962edd1a23cba1758fbb70d299282f44e1ba08d7efd2af9b0b952d79ff939d262890b51b07d14c90ce3022b89ee6e5980ab73661da70fd7597152b6e6ff142d6c00772310ab342bcff21c276dfbf5fcbe6d26a74"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x168, 0x13, 0x0, 0x0, {{0xb}, {0x98, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x10000, 0x2, 0xa, 0x9}}, @TCA_DEF_DATA={0x1a, 0x3, 'freezer.self_freezing\x00'}, @TCA_DEF_DATA={0xc, 0x3, 'gid_map\x00'}, @TCA_DEF_DATA={0x19, 0x3, '/.$&&!+]x-.}\x1f[{@%,{)\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'GPL\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x4, 0xffffffffffffffff, 0x3, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8001, 0x7, 0x4, 0x5, 0x401}}]}, {0xa5, 0x6, "c5a7bbf0c26ddfc0e4046129d264ff4e9794a78a57520848f23e6c7db37349d269fcc0b925b9cd5aae2f28ee8bc9bd2a7afe9098d37dda57d4afecb44115c70cb5ec08f98c29355c37b0c46b5e030f173ea4e1504bdfaac0ccc16b0f55cdc3c7369fd11cf4044f37814dd77e1580a3be3be8e43477cca18e70922b7365473676b25012c743fe5db16c0ce373a1036aa2aac69f5518fc14f43ec33bb8090f9ab697"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0xf8, 0x3, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x40}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0xc}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x2, 0x1}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xe}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x949, 0x2400000, 0x7, 0x0, 0x9}}]}, {0x89, 0x6, "c72f5c151f01c116ba0e9ee482d6806b8319e5ed0128eb47de3cf09d6b080fcad8ba048d5a686351449c19cf7405bbc1495541d5f830db0097a483cfa8d1dcd036c14f5944c3b73e754b8991a55cec2b865ec1027ac49fbcaf713333b9b89895a626412b1050490b4322337098ef84f7c9caa096c729c52689237ea323ea1daec5fe9960b3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_simple={0x80, 0x12, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x3, 0x0, 0x7, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x0, 0x30000005, 0x6, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x87b, 0x0, 0x7, 0x4}}]}, {0x9, 0x6, "c4501aecf4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_simple={0x38, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0xa, 0x6, "dd3270ef2f05"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x90, 0x5, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0xd}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0x6}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}]}, {0x2a, 0x6, "12a2c9349328f62deb0305502c8ad8a2fdf6bf91c28ccf3863cdb6433dd218dccb5b10fea4e8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0x150, 0xb, 0x0, 0x0, {{0xc}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x674f}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x80000001, 0x7, 0x67457525, 0x7}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3e4e}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0x1}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x1000, 0x72}}]}, {0xc3, 0x6, "5b5a75805ca875bd2f5af73c262d528535f0385511ee47bdc22a57c9607cb10696722979fd65f7594f78bec641958948951ad96685e84f4ce6cdfc7c1d87a0eec8b82dbcb369c57104c39f73efab0e9a0c65057e11b79d4f9bdbbf2b8683aa916caef2f534cf6846bafe0588f3aeed621bf672ea467f15dae3fec1ac1ba2ab8f4751c41f9160866e9c6aac0e9142f1b9b8085c21a98d147ae7ec831415938393bdb33ecc59dd3cc1a7106ed8fc0fa3dc978f63f30cb1eef2c826b71ad77e3b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_connmark={0x17c, 0x0, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x5, 0x1, 0x0, 0x2}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x5, 0xffffffffffffffff, 0xc3a7}, 0xfff8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x401, 0x7, 0xfffffffb, 0x2f00}, 0x681f}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10000, 0x7, 0x10000000, 0x3, 0x3}, 0x48da}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0x7, 0x20000000, 0x7}, 0x13}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x5, 0x1, 0x2, 0x101}, 0x101}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x1, 0x10}, 0xffaf}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x6, 0xf514}, 0x2}}]}, {0x6c, 0x6, "ae916306fd434953008e0b8909fa551e1c8bb2cbd08e22fa69c27cae3bcf4dd2457d19f22783529fe74908a9d78fd817aadc87d40d56ffc4b06d062aeb90adb446b57d80bef7e2fec54751251362d516ccb64acc5bbc121ab561e3b0466e250df62337c1d5f8421c"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_gact={0x88, 0xe, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1a1e, 0x10000000}}]}, {0x4e, 0x6, "76389554682b4b08b87406224003c1ad2cba532384c41ad383cec3873d1e9c3a24d3f0a9976e48fb8e43ad27e650ca2ef15d0b9b7df47ab1fe0b3729bfbedf64e1d9f242ca6236eedcb5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x1}}}}]}, @TCA_ROUTE4_ACT={0xc28, 0x6, [@m_sample={0xf8, 0x18, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x9, 0x5, 0x8, 0x6}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x6, 0x3, 0xffff9a38, 0x4}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x81}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7fff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0x1, 0x2, 0x2, 0xc}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfff}]}, {0x5a, 0x6, "1c461927b69c15ddedb38243003b2fc9f1932154c2e4a09cf3c1b8f86530cf949fa94b671ed83a0aae1b64242875abc46fb1b56f60a3aa4a434ce9be69d4f1f6f96dd42b1c2669dc1b3c30ac63590390122aa8e03481"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_ife={0x5c, 0x1b, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xe}]}, {0x2a, 0x6, "06ba73463179ccb3f47886b30e445578bf3f79b4c5bc14d75c79c57e0a91a77ad0a4b460a953"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0xdc, 0x5, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}]}, {0xa8, 0x6, "5181452dbe4d43b552faa72dafaf1e1c3ede6dc2b67eff278812374dcbff2b8c5cd69da8e7996db6ef6b34b1f9635bf05082da5264fcb64c7158ce65714676b29f83b939ab1ae2df98b51509728d66fc1cadd7ecca52242f3ec1f5c736dcd1549968c77d6ea6a1ff6fdad26420f392c22024d769fb972e1c4b5a80052121aab64473103a59797c630f85aaaa85cf23aa3d32cf5f4cf6855a19f09c3bd05dc6337b410be8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x174, 0x4, 0x0, 0x0, {{0x8}, {0x140, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0x105, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x7, 0x4, 0x3, 0xb7}, {0x3, 0x8, 0x9, 0x2}, {0x400, 0x9, 0x9, 0x4}, {0x0, 0x1, 0x5, 0x8c2}]}]}, {0xe, 0x6, "143e1b45beffd32c389b"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x4f0, 0x15, 0x0, 0x0, {{0x8}, {0x464, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0x105, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, @TCA_ACT_BPF_NAME={0x105, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x5, 0x7, 0x20000000, 0x9, 0x4eb6}}, @TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_FD={0x8, 0x5, r6}, @TCA_ACT_BPF_NAME={0x105, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x10001, 0x20000000, 0x20000000, 0x5}}, @TCA_ACT_BPF_NAME={0x105, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}, {0x67, 0x6, "d75bb354724df1901a583e612478f307d81dfe0429f56f4491208744b48d3888cc6eedf50231a8d2cc745806012967a802a2b5237194b3eac579e3a31ac5a09a594c06a56aea8ad330687936674f71970c958e7397dfe23ae699a60ce5118c01a46e2b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_bpf={0x68, 0x1d, 0x0, 0x0, {{0x8}, {0x4}, {0x3f, 0x6, "139712458bc289cdec193a668fa5e3bde8daa6ac5a52b8a250d4f53c279730df24ee7fcec784557f63d8620b0177e53e55551a49ee575082808d8a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0x1c8, 0x12, 0x0, 0x0, {{0x7}, {0x19c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TARG={0xd8, 0x6, {0x3, 'filter\x00', 0x9, 0x5, "6431fa24e2f4f9a9cfd5950b9abdd0821fc28ae37e552f6f83669c13bdb9366b8538b728f515ca5dcb0b5c2861be6cb18ef4cbb9173edac315e3beafaad5ec35231fde3810c696c4509215597a54d05d886c44746e84148399029841dbd6ea13469f4958958a972e424f90d48f04262bf06d22681d7dfe35f0f057b66e91d4e80ed4c8685f33c0d30363f13806037c4439ef2ab5ad8d2aa3c957c289c609d244b1848aa1742bf7834ff8f0ceb954"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x3b, 0x6, {0x4, 'filter\x00', 0xe, 0x6, "e6be7cf14b933a57ac592984a51c9b8a7c"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x8, 0x6, "a982c139"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0xa0, 0x18, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x7, 0x8, 0x8, 0xfffffff7}, 0x17}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x8, 0x7, 0x6}, 0x7d}}]}, {0x3b, 0x6, "d67fae69c2eb29104bd84af117836e14ff8c3fe619147e842f1d18f5402ad1b9bf24109c371131bebc599152b0f2a3d1e2a716cdaf3e8e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mirred={0xc0, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xb, 0x1, 0xfffffffc, 0x6}, 0x4, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x2c, 0x7, 0x2}, 0x1}}]}, {0x51, 0x6, "a78ef3379c067cdd65109a89976dc59db23dfd349394b0bbaa3456fe35683cc438421a3a3da165de81de266814b67db23146c37d8eb25be06c100df3008ab37bea3aee60ebc7741952563407d1"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xff}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0xa7}]}}]}, 0x1440}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x40, 0x0, 0x0, 0x80000001}, {0x6}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000027c0)=ANY=[], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_open_dev$usbfs(0x0, 0x76, 0x101301) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) 3.596953148s ago: executing program 0 (id=5444): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x28000000000000) read$char_usb(r0, &(0x7f00000002c0)=""/237, 0xed) 3.490582116s ago: executing program 0 (id=5445): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[], 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) openat$random(0xffffffffffffff9c, 0x0, 0x80100, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)=ANY=[]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xfffffffd, 0x10400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x88, {0x0, 0xa}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r4, 0x5f11, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000040601010000000000000000000000000500010007000000c27be38a0cce5d596019bbff075cec876a46511765bf72b6d3085829dedd630172d3"], 0x1c}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x288881, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="1e0308004d6b71ef2885693d26f1ea0900000000007a6fb718141cf441f9190c7212313633a44b36532fa33a4efcb7c5ab080f94"], 0xffdd) 2.623901033s ago: executing program 4 (id=5446): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@volatile}]}) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x104) fdatasync(r0) 2.422418005s ago: executing program 2 (id=5447): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x405c800}, 0x440) 2.338670269s ago: executing program 4 (id=5448): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0x4}, 0x80, 0x0}, 0x0) sendmsg$kcm(r2, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1}, 0x80, 0x0}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811000030dde00a7cd8a90a421289b7a4b0f6bcbea27d38834000f1102d6f81847d43777b0b9262dae1dbbbfd5c0e17ce75fd742b94b809d35caa9323fd68b9cca2f3103df60599b113764b7b2ca15d0ea4730612faa24efaf0a9709eadc861aefa5d1765fbf242dbe1f13763cf6cc41a6e85", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x4, 0xc8, 0xffff}}}, 0x8) 2.145181267s ago: executing program 2 (id=5449): ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x40000}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xdadd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) r5 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x2, 0x0, 0xfe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, &(0x7f0000000140), 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="0600000000b5e9ff7810b800050000000000000095c4aefbbf9c0559b5757aa3691fba34ba3ef402047a8af4ce72665480d8bc03543d8766a73395eacc0c290414c7ecc85d360b9fa6ea4c05ea68c0b2ff517357479eec692f9599e2c5369892bbe23b722fab7019c610284e79f234b4a500"/123], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x80}}], {0x14}}, 0x3c}, 0x1, 0x1200}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01020000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000001408000240000000170400048008000640000000000900010073797a30"], 0x10c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.027818105s ago: executing program 0 (id=5450): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600fc000000000000000000000000000000ff02000000000000000000000000000100004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="00020000a8000000"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(0x0, 0x9) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000100), 0x0, &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}, {[@generic={0x83, 0x4, "f75f"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 1.609314116s ago: executing program 3 (id=5451): syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x24048180) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000380)=ANY=[], 0x190) 592.955123ms ago: executing program 0 (id=5452): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000380)=0x8, 0x4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x86d, 0x1, 0x2, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x2802, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/238, 0xee}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mremap(&(0x7f00002ce000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000c67000/0x3000)=nil) mlock(&(0x7f0000bfc000/0x3000)=nil, 0x3000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001700000085000000860000008500000023000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r5}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x4000001, 0x89}, 0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="070000000000000000000200000008002500000000000c0099"], 0x28}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$unix(0x1, 0x2, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000fddbdf2507000000080001000c00000008000300", @ANYRES32=r11], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="5005f000", @ANYRES16=r7, @ANYBLOB="000329bd7000fbdbdf258700000008000300", @ANYRES32=r11, @ANYBLOB="31002a0068043e1a09002a01027506000006003a0006022c003c0400069d083c040108010200011e68041c00ef1f100192000000"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0xd1) socket$kcm(0x29, 0x5, 0x0) 591.595934ms ago: executing program 2 (id=5453): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[], 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x80100, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xfffffffd, 0x10400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x88, {0x0, 0xa}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r4, 0x5f11, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000040601010000000000000000000000000500010007000000c27be38a0cce5d596019bbff075cec876a46511765bf72b6d3085829dedd630172d3"], 0x1c}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x288881, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="1e0308004d6b71ef2885693d26f1ea0900000000007a6fb718141cf441f9190c7212313633a44b36532fa33a4efcb7c5ab080f94"], 0xffdd) 564.89554ms ago: executing program 5 (id=5454): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x4080, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYRES64, @ANYRESHEX=r1, @ANYRESHEX=r1]) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRES8=r1]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = getpid() unshare(0x8000000) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000080)=""/113) fcntl$setstatus(r3, 0x4, 0x40000) syz_pidfd_open(r4, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00'}) write$dsp(r2, &(0x7f0000002600)="e596d13a2f9a81edca2f11df94f87a9d87754b3a0fb2aba8c299e2c3f1794a674f058c8668bed31ed2d994d60ab3666a0868f4e53c6550baa6249fb3a35761ca3723230ab259431660489d4bc6395914a106cdf639e7af17fd0a6c0bb5d3f513aa6227e7c4af74074f48b773d1ec631429c31733f61bea2c73fe981e2d8dcc0beac50f3fbc2deae7c5eb3c06ea968727716bd4515c19d1a32e8916eb0616f2a443f89172dab045ccd0ded907dc247adfe29c984c0231300881bbeb846e5126c9f7a32e97e1b8c73c6bcfa70723a0e93464f13ef43809c73e2d8ac59415788f9a4ef1eafdfac3852dfe69d312783b90813e67262709c6e620ff89690f5ea64d9ba5ca4b7c64f6e6a46de85653777a5b9bea6e96a86e8f62817a6a77496cc7ddd0680eee628d58d1abc89ef6a449ce48d66ce67bc29df87a1c47c5d9812467834ff9472c2faaa7982b06ff56fe131843b67f58a420dab5d568fe63bdca2ba4863b46ae12a910f51e149532241ae0ce404c1d1dbe4ae806717bc9891455c08727236ebaf59ddb6525d09b395fe4f667004de6af01a8c7a2a88bd102d155097d", 0x19e) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) modify_ldt$read(0x0, &(0x7f00000027c0)=""/4132, 0x1024) socket$nl_route(0x10, 0x3, 0x0) 493.677153ms ago: executing program 3 (id=5455): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff30"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x58, r2, 0x103, 0x70bd2b, 0x0, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x28, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x13}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x4008040) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0xfffffffffffffcd2, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_emit_vhci(0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x28000000000000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) read$char_usb(r3, &(0x7f00000002c0)=""/237, 0xed) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x7d, &(0x7f0000000000)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x10) close_range(r4, 0xffffffffffffffff, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r6, 0x89e1, &(0x7f0000000000)={@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}) 6.79482ms ago: executing program 5 (id=5456): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000019100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x528}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000019140), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xb, 0x9, 0xfffffffc}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000019180)='net/sctp\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000019080)={0xc0000000}) request_key(&(0x7f0000000140)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000380)='/dev/ttyS3\x00', 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000191c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="000000000100"}) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_getattr(0x0, &(0x7f00000190c0)={0x38}, 0x38, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r7, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0xfffe, 0xffffffff, @loopback={0xff00000000000000}, 0x1000101}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="14000000000000002900000008"], 0x18}}], 0x1, 0x4000884) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)=""/208) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="d336a37e3c56000000009500"/24], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) 0s ago: executing program 0 (id=5457): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r4, 0x5423, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_getaddr={0x28, 0x16, 0x20, 0x70bd29, 0x25dfdbfd, {0x2, 0x3f, 0xc0}, [@IFA_ADDRESS={0x8, 0x1, @broadcast}, @IFA_LOCAL={0x8, 0x2, @private=0xa010100}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000841}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec28a144f13d7607"}) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffc, 0x0, 0x0, 0x10, "0062ba5d8200"}) r6 = syz_open_pts(r5, 0x20800) dup3(r6, r5, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0x44) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') kernel console output (not intermixed with test programs): 495.887995][ T5879] usb 3-1: config 0 descriptor?? [ 1496.224963][T24152] mkiss: ax0: crc mode is auto. [ 1498.795112][T24173] netlink: 'syz.2.4894': attribute type 4 has an invalid length. [ 1498.805436][T24173] netlink: 'syz.2.4894': attribute type 4 has an invalid length. [ 1499.052861][T24188] FAULT_INJECTION: forcing a failure. [ 1499.052861][T24188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1499.066137][T24188] CPU: 0 UID: 0 PID: 24188 Comm: syz.0.4905 Not tainted syzkaller #0 PREEMPT(full) [ 1499.066161][T24188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1499.066172][T24188] Call Trace: [ 1499.066178][T24188] [ 1499.066186][T24188] dump_stack_lvl+0x16c/0x1f0 [ 1499.066211][T24188] should_fail_ex+0x512/0x640 [ 1499.066236][T24188] _copy_from_user+0x2e/0xd0 [ 1499.066264][T24188] copy_msghdr_from_user+0x98/0x160 [ 1499.066286][T24188] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1499.066317][T24188] ___sys_sendmsg+0xfe/0x1d0 [ 1499.066336][T24188] ? __pfx____sys_sendmsg+0x10/0x10 [ 1499.066352][T24188] ? __lock_acquire+0x622/0x1c90 [ 1499.066403][T24188] __sys_sendmsg+0x16d/0x220 [ 1499.066422][T24188] ? __pfx___sys_sendmsg+0x10/0x10 [ 1499.066457][T24188] do_syscall_64+0xcd/0xfa0 [ 1499.066479][T24188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.066496][T24188] RIP: 0033:0x7fbe7418eec9 [ 1499.066509][T24188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1499.066525][T24188] RSP: 002b:00007fbe74fd8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1499.066542][T24188] RAX: ffffffffffffffda RBX: 00007fbe743e5fa0 RCX: 00007fbe7418eec9 [ 1499.066553][T24188] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1499.066563][T24188] RBP: 00007fbe74fd8090 R08: 0000000000000000 R09: 0000000000000000 [ 1499.066574][T24188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1499.066585][T24188] R13: 00007fbe743e6038 R14: 00007fbe743e5fa0 R15: 00007ffc362d4018 [ 1499.066611][T24188] [ 1499.557482][T24194] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4907'. [ 1500.174573][T23406] usb 3-1: USB disconnect, device number 93 [ 1500.215885][T24198] FAULT_INJECTION: forcing a failure. [ 1500.215885][T24198] name failslab, interval 1, probability 0, space 0, times 0 [ 1500.349670][T24198] CPU: 1 UID: 0 PID: 24198 Comm: syz.4.4908 Not tainted syzkaller #0 PREEMPT(full) [ 1500.349695][T24198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1500.349706][T24198] Call Trace: [ 1500.349712][T24198] [ 1500.349719][T24198] dump_stack_lvl+0x16c/0x1f0 [ 1500.349744][T24198] should_fail_ex+0x512/0x640 [ 1500.349764][T24198] ? fs_reclaim_acquire+0xae/0x150 [ 1500.349790][T24198] should_failslab+0xc2/0x120 [ 1500.349816][T24198] __kmalloc_noprof+0xdd/0x880 [ 1500.349834][T24198] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1500.349863][T24198] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1500.349884][T24198] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1500.349911][T24198] ? tomoyo_profile+0x47/0x60 [ 1500.349939][T24198] tomoyo_path_number_perm+0x245/0x580 [ 1500.349959][T24198] ? tomoyo_path_number_perm+0x237/0x580 [ 1500.349983][T24198] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1500.350004][T24198] ? find_held_lock+0x2b/0x80 [ 1500.350041][T24198] ? find_held_lock+0x2b/0x80 [ 1500.350055][T24198] ? hook_file_ioctl_common+0x145/0x410 [ 1500.350076][T24198] ? __fget_files+0x20e/0x3c0 [ 1500.350102][T24198] security_file_ioctl+0x9b/0x240 [ 1500.350127][T24198] __x64_sys_ioctl+0xb7/0x210 [ 1500.350148][T24198] do_syscall_64+0xcd/0xfa0 [ 1500.350169][T24198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1500.350186][T24198] RIP: 0033:0x7efdc698eec9 [ 1500.350200][T24198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1500.350217][T24198] RSP: 002b:00007efdc774a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1500.350235][T24198] RAX: ffffffffffffffda RBX: 00007efdc6be5fa0 RCX: 00007efdc698eec9 [ 1500.350247][T24198] RDX: 0000200000000000 RSI: 000000004020aea5 RDI: 0000000000000004 [ 1500.350257][T24198] RBP: 00007efdc774a090 R08: 0000000000000000 R09: 0000000000000000 [ 1500.350268][T24198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1500.350278][T24198] R13: 00007efdc6be6038 R14: 00007efdc6be5fa0 R15: 00007ffca3866fd8 [ 1500.350309][T24198] [ 1500.350317][T24198] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1500.650785][T24207] FAULT_INJECTION: forcing a failure. [ 1500.650785][T24207] name failslab, interval 1, probability 0, space 0, times 0 [ 1500.669396][T24207] CPU: 0 UID: 0 PID: 24207 Comm: syz.5.4910 Not tainted syzkaller #0 PREEMPT(full) [ 1500.669422][T24207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1500.669433][T24207] Call Trace: [ 1500.669439][T24207] [ 1500.669447][T24207] dump_stack_lvl+0x16c/0x1f0 [ 1500.669473][T24207] should_fail_ex+0x512/0x640 [ 1500.669494][T24207] ? fs_reclaim_acquire+0xae/0x150 [ 1500.669527][T24207] should_failslab+0xc2/0x120 [ 1500.669552][T24207] __kmalloc_noprof+0xdd/0x880 [ 1500.669571][T24207] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1500.669600][T24207] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1500.669624][T24207] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1500.669650][T24207] ? tomoyo_profile+0x47/0x60 [ 1500.669679][T24207] tomoyo_path_number_perm+0x245/0x580 [ 1500.669698][T24207] ? tomoyo_path_number_perm+0x237/0x580 [ 1500.669720][T24207] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1500.669742][T24207] ? find_held_lock+0x2b/0x80 [ 1500.669782][T24207] ? find_held_lock+0x2b/0x80 [ 1500.669799][T24207] ? hook_file_ioctl_common+0x145/0x410 [ 1500.669822][T24207] ? __fget_files+0x20e/0x3c0 [ 1500.669850][T24207] security_file_ioctl+0x9b/0x240 [ 1500.669876][T24207] __x64_sys_ioctl+0xb7/0x210 [ 1500.669897][T24207] do_syscall_64+0xcd/0xfa0 [ 1500.669920][T24207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1500.669937][T24207] RIP: 0033:0x7f644a18eec9 [ 1500.669952][T24207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1500.669969][T24207] RSP: 002b:00007f644b0d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1500.669987][T24207] RAX: ffffffffffffffda RBX: 00007f644a3e5fa0 RCX: 00007f644a18eec9 [ 1500.669999][T24207] RDX: 00000000f2ffffff RSI: 0000000000005001 RDI: 0000000000000003 [ 1500.670009][T24207] RBP: 00007f644b0d8090 R08: 0000000000000000 R09: 0000000000000000 [ 1500.670021][T24207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1500.670031][T24207] R13: 00007f644a3e6038 R14: 00007f644a3e5fa0 R15: 00007ffd126e3d58 [ 1500.670058][T24207] [ 1500.899760][T24207] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1500.930213][T23406] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1501.329630][T23406] usb 3-1: Using ep0 maxpacket: 8 [ 1501.336232][T23406] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1501.353602][T23406] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1501.390039][ T30] audit: type=1400 audit(1760331525.705:944): avc: denied { read } for pid=24212 comm="syz.0.4913" path="socket:[96514]" dev="sockfs" ino=96514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1501.661629][T23406] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1501.696804][T23406] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1501.715103][T23406] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1501.739146][T23406] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1501.779755][T23406] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.202031][T23406] usb 3-1: usb_control_msg returned -32 [ 1502.212187][T23406] usbtmc 3-1:16.0: can't read capabilities [ 1502.906636][T24236] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4918'. [ 1503.090920][T24240] FAULT_INJECTION: forcing a failure. [ 1503.090920][T24240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1503.104751][T24240] CPU: 1 UID: 0 PID: 24240 Comm: syz.3.4920 Not tainted syzkaller #0 PREEMPT(full) [ 1503.104777][T24240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1503.104788][T24240] Call Trace: [ 1503.104794][T24240] [ 1503.104801][T24240] dump_stack_lvl+0x16c/0x1f0 [ 1503.104826][T24240] should_fail_ex+0x512/0x640 [ 1503.104849][T24240] _copy_from_user+0x2e/0xd0 [ 1503.104869][T24240] copy_msghdr_from_user+0x98/0x160 [ 1503.104883][T24240] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1503.104899][T24240] ? __pfx__kstrtoull+0x10/0x10 [ 1503.104918][T24240] ___sys_sendmsg+0xfe/0x1d0 [ 1503.104936][T24240] ? __pfx____sys_sendmsg+0x10/0x10 [ 1503.104975][T24240] ? find_held_lock+0x2b/0x80 [ 1503.105006][T24240] __sys_sendmmsg+0x200/0x420 [ 1503.105022][T24240] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1503.105039][T24240] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1503.105059][T24240] ? fput+0x9b/0xd0 [ 1503.105069][T24240] ? ksys_write+0x1ac/0x250 [ 1503.105090][T24240] ? __pfx_ksys_write+0x10/0x10 [ 1503.105115][T24240] __x64_sys_sendmmsg+0x9c/0x100 [ 1503.105133][T24240] ? lockdep_hardirqs_on+0x7c/0x110 [ 1503.105152][T24240] do_syscall_64+0xcd/0xfa0 [ 1503.105167][T24240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1503.105178][T24240] RIP: 0033:0x7f22c278eec9 [ 1503.105188][T24240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1503.105200][T24240] RSP: 002b:00007f22c35a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1503.105211][T24240] RAX: ffffffffffffffda RBX: 00007f22c29e5fa0 RCX: 00007f22c278eec9 [ 1503.105220][T24240] RDX: 0000000000000001 RSI: 0000200000003c00 RDI: 0000000000000003 [ 1503.105230][T24240] RBP: 00007f22c35a8090 R08: 0000000000000000 R09: 0000000000000000 [ 1503.105241][T24240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1503.105251][T24240] R13: 00007f22c29e6038 R14: 00007f22c29e5fa0 R15: 00007ffd13afe1d8 [ 1503.105275][T24240] [ 1503.736791][T24249] ceph: No mds server is up or the cluster is laggy [ 1504.107913][T23406] libceph: connect (1)[c::]:6789 error -101 [ 1504.118758][T23406] libceph: mon0 (1)[c::]:6789 connect error [ 1504.873163][T24269] tipc: Enabling of bearer rejected, already enabled [ 1504.950129][ T5879] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1505.121303][ T5879] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1505.198641][ T5879] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1505.208447][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.220339][ T5879] usb 6-1: config 0 descriptor?? [ 1505.261960][ T5879] pwc: Askey VC010 type 2 USB webcam detected. [ 1505.668404][T24276] mkiss: ax0: crc mode is auto. [ 1506.845544][ T5879] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1506.862973][ T5879] pwc: recv_control_msg error -32 req 02 val 2700 [ 1506.870388][ T5879] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1506.877643][ T5879] pwc: recv_control_msg error -32 req 04 val 1000 [ 1506.892519][ T5879] pwc: recv_control_msg error -32 req 04 val 1300 [ 1506.915020][ T5879] pwc: recv_control_msg error -32 req 04 val 1400 [ 1507.242457][T24288] mkiss: ax0: crc mode is auto. [ 1507.407821][T24264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1507.617053][T24264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1507.688863][T24229] usbtmc 3-1:16.0: usb_control_msg returned -110 [ 1507.714109][T12859] usb 3-1: USB disconnect, device number 94 [ 1507.758742][T24295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4934'. [ 1507.834900][T24298] input: syz1 as /devices/virtual/input/input60 [ 1507.907060][T24293] mkiss: ax0: crc mode is auto. [ 1507.998801][ T5879] pwc: recv_control_msg error -71 req 04 val 1500 [ 1508.019449][ T5879] pwc: recv_control_msg error -71 req 02 val 2500 [ 1508.050027][ T5879] pwc: recv_control_msg error -71 req 02 val 2400 [ 1508.068257][ T5879] pwc: recv_control_msg error -71 req 02 val 2600 [ 1508.083577][ T5879] pwc: recv_control_msg error -71 req 02 val 2900 [ 1508.145830][ T5879] pwc: recv_control_msg error -71 req 02 val 2800 [ 1508.154986][ T5879] pwc: recv_control_msg error -71 req 04 val 1100 [ 1508.166979][ T5879] pwc: recv_control_msg error -71 req 04 val 1200 [ 1508.352275][ T5879] pwc: Registered as video103. [ 1508.359327][ T5879] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input61 [ 1508.383060][ T5879] usb 6-1: USB disconnect, device number 35 [ 1508.896601][T24311] overlayfs: overlapping lowerdir path [ 1509.465433][T24320] siw: device registration error -23 [ 1510.209812][ T5944] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1510.527822][ T5944] usb 1-1: Using ep0 maxpacket: 8 [ 1511.134735][ T5879] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1511.336864][ T5944] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 1511.354911][ T5944] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 1511.365822][ T5944] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1511.375098][ T5944] usb 1-1: config 250 has no interface number 0 [ 1511.383187][ T5944] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1511.399893][ T5944] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1511.410864][ T5944] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 12336, setting to 1024 [ 1511.425303][ T5944] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1511.484625][ T5879] usb 6-1: Using ep0 maxpacket: 8 [ 1511.699622][ T5944] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1511.706600][ T5879] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 1511.726557][ T5879] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 1511.736594][ T5879] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1511.745705][ T5944] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1511.747152][ T5944] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1511.752940][ T5879] usb 6-1: config 250 has no interface number 0 [ 1511.770659][ T5879] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1511.774341][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1511.782801][ T5879] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1511.809365][ T5944] usb 1-1: Product: syz [ 1511.809644][ T5879] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 12336, setting to 1024 [ 1511.825731][ T5879] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1511.837428][ T5879] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1511.851358][ T5879] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1511.863769][ T5879] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1511.873947][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1511.893150][ T5879] usb 6-1: Product: syz [ 1511.918699][ T5879] usb 6-1: SerialNumber: syz [ 1512.639121][ T5944] usb 1-1: SerialNumber: syz [ 1512.657769][ T5944] hub 1-1:250.228: bad descriptor, ignoring hub [ 1512.667665][ T5879] hub 6-1:250.228: bad descriptor, ignoring hub [ 1512.678060][ T5944] hub 1-1:250.228: probe with driver hub failed with error -5 [ 1512.685908][ T5879] hub 6-1:250.228: probe with driver hub failed with error -5 [ 1512.720074][T24345] FAULT_INJECTION: forcing a failure. [ 1512.720074][T24345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1512.737669][T24347] FAULT_INJECTION: forcing a failure. [ 1512.737669][T24347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1512.742790][T24345] CPU: 1 UID: 0 PID: 24345 Comm: syz.2.4948 Not tainted syzkaller #0 PREEMPT(full) [ 1512.742814][T24345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1512.742824][T24345] Call Trace: [ 1512.742830][T24345] [ 1512.742836][T24345] dump_stack_lvl+0x16c/0x1f0 [ 1512.742861][T24345] should_fail_ex+0x512/0x640 [ 1512.742890][T24345] _copy_from_user+0x2e/0xd0 [ 1512.742912][T24345] __sys_bpf+0x248/0x4980 [ 1512.742935][T24345] ? __pfx___sys_bpf+0x10/0x10 [ 1512.742952][T24345] ? find_held_lock+0x2b/0x80 [ 1512.742972][T24345] ? find_held_lock+0x2b/0x80 [ 1512.742992][T24345] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1512.743025][T24345] ? fput+0x9b/0xd0 [ 1512.743040][T24345] ? ksys_write+0x1ac/0x250 [ 1512.743058][T24345] ? __pfx_ksys_write+0x10/0x10 [ 1512.743081][T24345] __x64_sys_bpf+0x78/0xc0 [ 1512.743099][T24345] ? lockdep_hardirqs_on+0x7c/0x110 [ 1512.743117][T24345] do_syscall_64+0xcd/0xfa0 [ 1512.743137][T24345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1512.743153][T24345] RIP: 0033:0x7ff7a2b8eec9 [ 1512.743166][T24345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1512.743181][T24345] RSP: 002b:00007ff7a398d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1512.743198][T24345] RAX: ffffffffffffffda RBX: 00007ff7a2de5fa0 RCX: 00007ff7a2b8eec9 [ 1512.743209][T24345] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1512.743218][T24345] RBP: 00007ff7a398d090 R08: 0000000000000000 R09: 0000000000000000 [ 1512.743228][T24345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1512.743237][T24345] R13: 00007ff7a2de6038 R14: 00007ff7a2de5fa0 R15: 00007fffc53f5ab8 [ 1512.743260][T24345] [ 1512.788496][ T30] audit: type=1400 audit(1760331537.065:945): avc: denied { write } for pid=24346 comm="syz.4.4950" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1512.798857][T24347] CPU: 0 UID: 0 PID: 24347 Comm: syz.3.4949 Not tainted syzkaller #0 PREEMPT(full) [ 1512.798882][T24347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1512.798892][T24347] Call Trace: [ 1512.798898][T24347] [ 1512.798904][T24347] dump_stack_lvl+0x16c/0x1f0 [ 1512.798929][T24347] should_fail_ex+0x512/0x640 [ 1512.798951][T24347] _copy_from_user+0x2e/0xd0 [ 1512.798972][T24347] copy_msghdr_from_user+0x98/0x160 [ 1512.798993][T24347] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1512.799021][T24347] ___sys_sendmsg+0xfe/0x1d0 [ 1512.799040][T24347] ? __pfx____sys_sendmsg+0x10/0x10 [ 1512.799056][T24347] ? __lock_acquire+0x622/0x1c90 [ 1512.799104][T24347] __sys_sendmsg+0x16d/0x220 [ 1512.799128][T24347] ? __pfx___sys_sendmsg+0x10/0x10 [ 1512.799160][T24347] do_syscall_64+0xcd/0xfa0 [ 1512.799181][T24347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1512.799197][T24347] RIP: 0033:0x7f22c278eec9 [ 1512.799210][T24347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1512.799225][T24347] RSP: 002b:00007f22c35a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1512.799241][T24347] RAX: ffffffffffffffda RBX: 00007f22c29e5fa0 RCX: 00007f22c278eec9 [ 1512.799251][T24347] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 1512.799261][T24347] RBP: 00007f22c35a8090 R08: 0000000000000000 R09: 0000000000000000 [ 1512.799270][T24347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1512.799279][T24347] R13: 00007f22c29e6038 R14: 00007f22c29e5fa0 R15: 00007ffd13afe1d8 [ 1512.799302][T24347] [ 1513.751530][ T5879] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 36 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1513.774948][ T5944] usblp 1-1:250.228: usblp1: USB Bidirectional printer dev 102 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1513.823775][ T5944] usb 1-1: USB disconnect, device number 102 [ 1513.901302][ T5944] usblp1: removed [ 1514.131424][ T5879] usb 6-1: USB disconnect, device number 36 [ 1514.139306][ T5879] usblp0: removed [ 1514.401634][T24372] siw: device registration error -23 [ 1514.639723][ T5879] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1514.899634][ T5879] usb 6-1: Using ep0 maxpacket: 16 [ 1514.914887][ T5879] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1514.926402][T24380] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4953'. [ 1514.935684][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1514.946517][ T5879] usb 6-1: Product: syz [ 1514.952679][ T5879] usb 6-1: Manufacturer: syz [ 1514.957375][ T5879] usb 6-1: SerialNumber: syz [ 1514.967146][ T5879] usb 6-1: config 0 descriptor?? [ 1515.108451][ T30] audit: type=1400 audit(1760331539.425:946): avc: denied { setopt } for pid=24381 comm="syz.2.4958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1515.285413][ T30] audit: type=1400 audit(1760331539.605:947): avc: denied { ioctl } for pid=24384 comm="syz.0.4959" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1515.960216][T24401] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1515.983344][T24402] netlink: 'syz.5.4956': attribute type 4 has an invalid length. [ 1516.325507][ T5944] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1516.493799][ T5944] usb 5-1: Using ep0 maxpacket: 8 [ 1516.507418][ T5944] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 1516.535333][ T5944] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 1516.659576][ T5944] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1516.674874][ T5944] usb 5-1: config 250 has no interface number 0 [ 1516.698958][ T5944] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1516.967883][T24417] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4967'. [ 1517.303643][ T5944] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1517.316150][ T5944] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 12336, setting to 1024 [ 1517.328223][ T5944] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1517.373860][ T5944] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1517.450112][ T5944] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1517.459091][ T5944] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1517.476676][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1517.609572][ T5944] usb 5-1: Product: syz [ 1517.627047][ T5944] usb 5-1: SerialNumber: syz [ 1517.643981][ T5944] hub 5-1:250.228: bad descriptor, ignoring hub [ 1517.759585][ T5944] hub 5-1:250.228: probe with driver hub failed with error -5 [ 1518.379167][ T5879] usb 6-1: USB disconnect, device number 37 [ 1518.730632][T24436] FAULT_INJECTION: forcing a failure. [ 1518.730632][T24436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1518.743744][T24436] CPU: 0 UID: 0 PID: 24436 Comm: syz.0.4970 Not tainted syzkaller #0 PREEMPT(full) [ 1518.743761][T24436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1518.743771][T24436] Call Trace: [ 1518.743779][T24436] [ 1518.743787][T24436] dump_stack_lvl+0x16c/0x1f0 [ 1518.743812][T24436] should_fail_ex+0x512/0x640 [ 1518.743835][T24436] _copy_from_user+0x2e/0xd0 [ 1518.743853][T24436] copy_msghdr_from_user+0x98/0x160 [ 1518.743867][T24436] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1518.743886][T24436] ___sys_sendmsg+0xfe/0x1d0 [ 1518.743900][T24436] ? __pfx____sys_sendmsg+0x10/0x10 [ 1518.743914][T24436] ? __lock_acquire+0x622/0x1c90 [ 1518.743976][T24436] __sys_sendmsg+0x16d/0x220 [ 1518.743993][T24436] ? __pfx___sys_sendmsg+0x10/0x10 [ 1518.744015][T24436] do_syscall_64+0xcd/0xfa0 [ 1518.744029][T24436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1518.744041][T24436] RIP: 0033:0x7fbe7418eec9 [ 1518.744050][T24436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1518.744067][T24436] RSP: 002b:00007fbe74f96038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1518.744084][T24436] RAX: ffffffffffffffda RBX: 00007fbe743e6180 RCX: 00007fbe7418eec9 [ 1518.744095][T24436] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 1518.744106][T24436] RBP: 00007fbe74f96090 R08: 0000000000000000 R09: 0000000000000000 [ 1518.744115][T24436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1518.744124][T24436] R13: 00007fbe743e6218 R14: 00007fbe743e6180 R15: 00007ffc362d4018 [ 1518.744141][T24436] [ 1518.909810][ C0] vkms_vblank_simulate: vblank timer overrun [ 1519.960925][ T5944] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 110 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1520.169914][ T5944] usb 5-1: USB disconnect, device number 110 [ 1520.197957][ T5944] usblp0: removed [ 1520.239053][ T30] audit: type=1400 audit(1760331544.555:948): avc: denied { ioctl } for pid=24450 comm="syz.5.4975" path="socket:[96132]" dev="sockfs" ino=96132 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1520.788790][ T30] audit: type=1326 audit(1760331545.105:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24450 comm="syz.5.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644a18eec9 code=0x7ffc0000 [ 1520.932116][ T30] audit: type=1326 audit(1760331545.105:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24450 comm="syz.5.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644a18eec9 code=0x7ffc0000 [ 1521.001747][ T30] audit: type=1326 audit(1760331545.105:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24450 comm="syz.5.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f644a18eec9 code=0x7ffc0000 [ 1521.117761][ T30] audit: type=1326 audit(1760331545.105:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24450 comm="syz.5.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644a18eec9 code=0x7ffc0000 [ 1521.169964][ T30] audit: type=1326 audit(1760331545.105:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24450 comm="syz.5.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644a18eec9 code=0x7ffc0000 [ 1521.210402][ T5879] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1521.247446][ T30] audit: type=1326 audit(1760331545.105:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24450 comm="syz.5.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f644a18eec9 code=0x7ffc0000 [ 1521.280385][ T30] audit: type=1326 audit(1760331545.105:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24450 comm="syz.5.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644a18eec9 code=0x7ffc0000 [ 1521.308614][ T30] audit: type=1326 audit(1760331545.105:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24450 comm="syz.5.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644a18eec9 code=0x7ffc0000 [ 1521.332418][ T30] audit: type=1326 audit(1760331545.105:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24450 comm="syz.5.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f644a18eec9 code=0x7ffc0000 [ 1521.471479][ T5879] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1521.480596][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.495324][ T5879] usb 1-1: config 0 descriptor?? [ 1521.503466][ T5879] cp210x 1-1:0.0: cp210x converter detected [ 1521.580692][T24479] siw: device registration error -23 [ 1522.042268][ T5879] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1522.050319][ T5879] cp210x 1-1:0.0: querying part number failed [ 1522.069911][ T5879] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1522.169637][ T5944] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1522.248140][T23406] usb 1-1: USB disconnect, device number 103 [ 1522.265802][T23406] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1522.299991][T23406] cp210x 1-1:0.0: device disconnected [ 1522.313857][T24482] tipc: Enabling of bearer rejected, already enabled [ 1522.343125][T24486] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4985'. [ 1522.359630][ T5944] usb 3-1: Using ep0 maxpacket: 16 [ 1522.376614][ T5944] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1522.391765][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1522.404479][ T5944] usb 3-1: Product: syz [ 1522.408677][ T5944] usb 3-1: Manufacturer: syz [ 1522.413674][ T5944] usb 3-1: SerialNumber: syz [ 1522.430093][ T5944] usb 3-1: config 0 descriptor?? [ 1522.853512][T24496] netlink: 'syz.2.4983': attribute type 4 has an invalid length. [ 1523.249650][ T5879] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1523.399611][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 1523.414673][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1523.450313][ T5879] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1523.475573][ T5879] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1523.542084][T24506] FAULT_INJECTION: forcing a failure. [ 1523.542084][T24506] name failslab, interval 1, probability 0, space 0, times 0 [ 1523.603417][ T5879] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1523.617177][ T5879] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1523.624493][ T5879] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1523.624972][T24506] CPU: 1 UID: 0 PID: 24506 Comm: syz.0.4991 Not tainted syzkaller #0 PREEMPT(full) [ 1523.624992][T24506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1523.625002][T24506] Call Trace: [ 1523.625008][T24506] [ 1523.625014][T24506] dump_stack_lvl+0x16c/0x1f0 [ 1523.625038][T24506] should_fail_ex+0x512/0x640 [ 1523.625056][T24506] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1523.625078][T24506] should_failslab+0xc2/0x120 [ 1523.625102][T24506] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1523.625120][T24506] ? __alloc_skb+0x2b2/0x380 [ 1523.625142][T24506] ? __alloc_skb+0x2b2/0x380 [ 1523.625157][T24506] ? __pfx_avc_has_perm+0x10/0x10 [ 1523.625171][T24506] __alloc_skb+0x2b2/0x380 [ 1523.625187][T24506] ? __pfx___alloc_skb+0x10/0x10 [ 1523.625202][T24506] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 1523.625223][T24506] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 1523.625249][T24506] netlink_alloc_large_skb+0x69/0x140 [ 1523.625272][T24506] netlink_sendmsg+0x698/0xdd0 [ 1523.625296][T24506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1523.625329][T24506] ____sys_sendmsg+0xa98/0xc70 [ 1523.625352][T24506] ? copy_msghdr_from_user+0x10a/0x160 [ 1523.625370][T24506] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1523.625402][T24506] ___sys_sendmsg+0x134/0x1d0 [ 1523.625421][T24506] ? __pfx____sys_sendmsg+0x10/0x10 [ 1523.625437][T24506] ? __lock_acquire+0x622/0x1c90 [ 1523.625486][T24506] __sys_sendmsg+0x16d/0x220 [ 1523.625504][T24506] ? __pfx___sys_sendmsg+0x10/0x10 [ 1523.625522][T24506] ? __pfx_bpf_trace_run2+0x10/0x10 [ 1523.625552][T24506] ? syscall_trace_enter+0x1cb/0x240 [ 1523.625577][T24506] ? rcu_is_watching+0x12/0xc0 [ 1523.625594][T24506] do_syscall_64+0xcd/0xfa0 [ 1523.625614][T24506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.625630][T24506] RIP: 0033:0x7fbe7418eec9 [ 1523.625644][T24506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1523.625659][T24506] RSP: 002b:00007fbe74fd8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1523.625675][T24506] RAX: ffffffffffffffda RBX: 00007fbe743e5fa0 RCX: 00007fbe7418eec9 [ 1523.625686][T24506] RDX: 0000000000004000 RSI: 0000200000000800 RDI: 0000000000000003 [ 1523.625695][T24506] RBP: 00007fbe74fd8090 R08: 0000000000000000 R09: 0000000000000000 [ 1523.625704][T24506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1523.625713][T24506] R13: 00007fbe743e6038 R14: 00007fbe743e5fa0 R15: 00007ffc362d4018 [ 1523.625736][T24506] [ 1523.878798][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.897106][ T5879] usb 5-1: config 0 descriptor?? [ 1524.209805][T12859] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1524.469945][T12859] usb 1-1: Using ep0 maxpacket: 8 [ 1524.481974][ T5944] usb 3-1: USB disconnect, device number 95 [ 1524.511675][T12859] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1524.523376][T12859] usb 1-1: config 136 has too many interfaces: 115, using maximum allowed: 32 [ 1524.533071][T12859] usb 1-1: config 136 has an invalid descriptor of length 43, skipping remainder of the config [ 1524.546623][T12859] usb 1-1: config 136 has 0 interfaces, different from the descriptor's value: 115 [ 1524.556182][ T5879] usbhid 5-1:0.0: can't add hid device: -71 [ 1524.562276][ T5879] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1524.591489][ T5879] usb 5-1: USB disconnect, device number 111 [ 1524.664581][T12859] usb 1-1: string descriptor 0 read error: -22 [ 1524.671516][T12859] usb 1-1: New USB device found, idVendor=16c0, idProduct=05f3, bcdDevice=6b.16 [ 1524.687954][T12859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.519945][T12859] usb 1-1: USB disconnect, device number 104 [ 1525.619614][ T5944] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1525.704298][T24541] x_tables: duplicate underflow at hook 1 [ 1525.779370][ T30] kauditd_printk_skb: 149 callbacks suppressed [ 1525.779398][ T30] audit: type=1400 audit(1760331550.095:1107): avc: denied { mounton } for pid=24540 comm="syz.4.5001" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1525.779897][ T5944] usb 3-1: Using ep0 maxpacket: 32 [ 1525.951019][T24542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5001'. [ 1525.981947][ T5944] usb 3-1: config 4 has no interfaces? [ 1525.991551][ T5944] usb 3-1: New USB device found, idVendor=05ac, idProduct=1205, bcdDevice=26.19 [ 1526.000811][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.981721][ T5944] usb 3-1: Product: syz [ 1526.985961][ T5944] usb 3-1: Manufacturer: syz [ 1526.991369][ T5944] usb 3-1: SerialNumber: syz [ 1527.297332][T24553] xt_TCPMSS: Only works on TCP SYN packets [ 1527.586562][T24555] tipc: Enabling of bearer rejected, already enabled [ 1527.790369][T12859] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1527.929605][ T5879] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1527.949675][T12859] usb 1-1: Using ep0 maxpacket: 8 [ 1527.956330][T12859] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1527.964946][T12859] usb 1-1: config 2 has an invalid interface number: 153 but max is 0 [ 1527.973190][T12859] usb 1-1: config 2 has no interface number 0 [ 1527.979315][T12859] usb 1-1: config 2 interface 153 has no altsetting 0 [ 1527.987632][T12859] usb 1-1: New USB device found, idVendor=1199, idProduct=683b, bcdDevice=95.ac [ 1527.996769][T12859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.005082][T12859] usb 1-1: Product: syz [ 1528.009446][T12859] usb 1-1: Manufacturer: syz [ 1528.014142][T12859] usb 1-1: SerialNumber: syz [ 1528.083542][ T5879] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1528.093949][ T30] audit: type=1400 audit(1760331552.405:1108): avc: denied { name_connect } for pid=24568 comm="syz.5.5010" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1528.118761][ T5879] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1528.131367][ T5879] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1528.141026][T24571] FAULT_INJECTION: forcing a failure. [ 1528.141026][T24571] name failslab, interval 1, probability 0, space 0, times 0 [ 1528.143759][ T5879] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1528.163300][T24571] CPU: 1 UID: 0 PID: 24571 Comm: syz.5.5011 Not tainted syzkaller #0 PREEMPT(full) [ 1528.163322][T24571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1528.163332][T24571] Call Trace: [ 1528.163338][T24571] [ 1528.163344][T24571] dump_stack_lvl+0x16c/0x1f0 [ 1528.163368][T24571] should_fail_ex+0x512/0x640 [ 1528.163388][T24571] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1528.163411][T24571] should_failslab+0xc2/0x120 [ 1528.163438][T24571] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1528.163460][T24571] ? __alloc_skb+0x2b2/0x380 [ 1528.163484][T24571] ? __alloc_skb+0x2b2/0x380 [ 1528.163500][T24571] ? __pfx_avc_has_perm+0x10/0x10 [ 1528.163516][T24571] __alloc_skb+0x2b2/0x380 [ 1528.163533][T24571] ? __pfx___alloc_skb+0x10/0x10 [ 1528.163551][T24571] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 1528.163574][T24571] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 1528.163604][T24571] netlink_alloc_large_skb+0x69/0x140 [ 1528.163630][T24571] netlink_sendmsg+0x698/0xdd0 [ 1528.163657][T24571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1528.163689][T24571] ____sys_sendmsg+0xa98/0xc70 [ 1528.163715][T24571] ? copy_msghdr_from_user+0x10a/0x160 [ 1528.163736][T24571] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1528.163773][T24571] ___sys_sendmsg+0x134/0x1d0 [ 1528.163795][T24571] ? __pfx____sys_sendmsg+0x10/0x10 [ 1528.163814][T24571] ? __lock_acquire+0x622/0x1c90 [ 1528.163870][T24571] __sys_sendmsg+0x16d/0x220 [ 1528.163891][T24571] ? __pfx___sys_sendmsg+0x10/0x10 [ 1528.163928][T24571] do_syscall_64+0xcd/0xfa0 [ 1528.163951][T24571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.163969][T24571] RIP: 0033:0x7f644a18eec9 [ 1528.163984][T24571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1528.164000][T24571] RSP: 002b:00007f644b0d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1528.164017][T24571] RAX: ffffffffffffffda RBX: 00007f644a3e5fa0 RCX: 00007f644a18eec9 [ 1528.164027][T24571] RDX: 0000000000004000 RSI: 0000200000000800 RDI: 0000000000000003 [ 1528.164037][T24571] RBP: 00007f644b0d8090 R08: 0000000000000000 R09: 0000000000000000 [ 1528.164047][T24571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1528.164057][T24571] R13: 00007f644a3e6038 R14: 00007f644a3e5fa0 R15: 00007ffd126e3d58 [ 1528.164080][T24571] [ 1528.166486][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.405465][ T5879] usb 5-1: Product: syz [ 1528.410845][ T5879] usb 5-1: Manufacturer: syz [ 1528.411331][T12859] hub 1-1:2.153: bad descriptor, ignoring hub [ 1528.422394][T12859] hub 1-1:2.153: probe with driver hub failed with error -5 [ 1528.430799][T12859] sierra 1-1:2.153: Sierra USB modem converter detected [ 1528.434742][ T5944] apple-mfi-fastcharge 3-1: USB disconnect, device number 96 [ 1528.445620][ T5879] usb 5-1: SerialNumber: syz [ 1528.618438][T12859] usb 1-1: USB disconnect, device number 105 [ 1528.629347][T12859] sierra 1-1:2.153: device disconnected [ 1528.804788][ T5879] usb 5-1: config 0 descriptor?? [ 1528.812168][T24563] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1528.839379][T24563] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1528.865505][T24576] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1528.902230][ T5879] usb 5-1: ucan: probing device on interface #0 [ 1528.909733][ T30] audit: type=1400 audit(1760331553.215:1109): avc: denied { append } for pid=24585 comm="syz.5.5016" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1528.953921][ T30] audit: type=1400 audit(1760331553.275:1110): avc: denied { setopt } for pid=24575 comm="syz.3.5014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1529.400181][ T5879] usb 5-1: ucan: device protocol version 0 is not supported [ 1529.407655][ T5879] usb 5-1: ucan: probe failed; try to update the device firmware [ 1529.574320][T24602] xt_TCPMSS: Only works on TCP SYN packets [ 1529.648240][T24563] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5007'. [ 1529.663219][ T5879] usb 5-1: USB disconnect, device number 112 [ 1529.722356][T24609] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1529.733766][T24609] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1529.744834][T24609] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1529.754773][T24609] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1529.764992][T24609] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1529.774810][T24609] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1529.786343][T24609] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1529.797436][T24609] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1529.807688][T24609] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 1529.920120][ T5944] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1529.965425][T24615] FAULT_INJECTION: forcing a failure. [ 1529.965425][T24615] name failslab, interval 1, probability 0, space 0, times 0 [ 1529.978195][T24615] CPU: 1 UID: 0 PID: 24615 Comm: syz.0.5024 Not tainted syzkaller #0 PREEMPT(full) [ 1529.978214][T24615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1529.978221][T24615] Call Trace: [ 1529.978226][T24615] [ 1529.978230][T24615] dump_stack_lvl+0x16c/0x1f0 [ 1529.978247][T24615] should_fail_ex+0x512/0x640 [ 1529.978261][T24615] ? fs_reclaim_acquire+0xae/0x150 [ 1529.978280][T24615] should_failslab+0xc2/0x120 [ 1529.978296][T24615] __kmalloc_noprof+0xdd/0x880 [ 1529.978309][T24615] ? tomoyo_encode2+0x100/0x3e0 [ 1529.978326][T24615] ? tomoyo_encode2+0x100/0x3e0 [ 1529.978340][T24615] tomoyo_encode2+0x100/0x3e0 [ 1529.978357][T24615] tomoyo_encode+0x29/0x50 [ 1529.978372][T24615] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1529.978391][T24615] tomoyo_path_number_perm+0x245/0x580 [ 1529.978404][T24615] ? tomoyo_path_number_perm+0x237/0x580 [ 1529.978421][T24615] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1529.978443][T24615] ? find_held_lock+0x2b/0x80 [ 1529.978482][T24615] ? find_held_lock+0x2b/0x80 [ 1529.978494][T24615] ? hook_file_ioctl_common+0x145/0x410 [ 1529.978508][T24615] ? __fget_files+0x20e/0x3c0 [ 1529.978527][T24615] security_file_ioctl+0x9b/0x240 [ 1529.978546][T24615] __x64_sys_ioctl+0xb7/0x210 [ 1529.978562][T24615] do_syscall_64+0xcd/0xfa0 [ 1529.978578][T24615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.978590][T24615] RIP: 0033:0x7fbe7418eec9 [ 1529.978601][T24615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1529.978612][T24615] RSP: 002b:00007fbe74fb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1529.978625][T24615] RAX: ffffffffffffffda RBX: 00007fbe743e6090 RCX: 00007fbe7418eec9 [ 1529.978632][T24615] RDX: 00002000000001c0 RSI: 00000000c0205648 RDI: 0000000000000003 [ 1529.978639][T24615] RBP: 00007fbe74fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 1529.978646][T24615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1529.978652][T24615] R13: 00007fbe743e6128 R14: 00007fbe743e6090 R15: 00007ffc362d4018 [ 1529.978667][T24615] [ 1529.978681][T24615] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1530.134365][ C1] vkms_vblank_simulate: vblank timer overrun [ 1530.202983][T24615] vivid-000: disconnect [ 1530.208659][T24612] vivid-000: reconnect [ 1530.271575][ T5944] usb 4-1: Using ep0 maxpacket: 16 [ 1530.310944][ T5944] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1530.563777][ T5944] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1530.578992][ T5944] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1530.620340][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1530.674478][T24627] comedi comedi2: bad chanlist[0]=0x00000003 chan=3 range length=1 [ 1530.689858][ T5944] usb 4-1: config 0 descriptor?? [ 1530.728900][T24628] tipc: Enabling of bearer rejected, already enabled [ 1531.690443][ T5944] nzxt-smart2 0003:1E71:2009.0043: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 1532.429780][ T5879] usb 4-1: USB disconnect, device number 101 [ 1532.955890][T24650] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5032'. [ 1533.406718][T24661] xt_TCPMSS: Only works on TCP SYN packets [ 1533.569212][ T5944] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 1533.749471][ T5944] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 1533.772611][ T5944] usb 1-1: config 0 has no interface number 0 [ 1533.793239][ T5944] usb 1-1: config 0 interface 29 has no altsetting 0 [ 1533.869645][ T5944] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1533.889688][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.898407][ T5944] usb 1-1: Product: syz [ 1533.904605][ T5944] usb 1-1: Manufacturer: syz [ 1534.027924][ T5944] usb 1-1: SerialNumber: syz [ 1534.258280][ T5944] usb 1-1: config 0 descriptor?? [ 1534.345059][T24671] tipc: Enabling of bearer rejected, already enabled [ 1534.417956][T24675] SELinux: policydb string SE L does not match my string SE Linux [ 1534.426103][T24675] SELinux: failed to load policy [ 1535.319300][ T5944] peak_usb 1-1:0.29: PEAK-System PCAN-USB X6 v226 fw v33.42.157 (2 channels) [ 1535.330913][ T5944] peak_usb 1-1:0.29 can0: sending command failure: -22 [ 1535.337838][ T5944] peak_usb 1-1:0.29 can0: sending command failure: -22 [ 1535.377010][T24684] FAULT_INJECTION: forcing a failure. [ 1535.377010][T24684] name failslab, interval 1, probability 0, space 0, times 0 [ 1535.390049][T24684] CPU: 0 UID: 0 PID: 24684 Comm: syz.3.5044 Not tainted syzkaller #0 PREEMPT(full) [ 1535.390076][T24684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1535.390087][T24684] Call Trace: [ 1535.390100][T24684] [ 1535.390107][T24684] dump_stack_lvl+0x16c/0x1f0 [ 1535.390134][T24684] should_fail_ex+0x512/0x640 [ 1535.390155][T24684] ? fs_reclaim_acquire+0xae/0x150 [ 1535.390185][T24684] should_failslab+0xc2/0x120 [ 1535.390212][T24684] __kmalloc_noprof+0xdd/0x880 [ 1535.390232][T24684] ? tomoyo_encode2+0x100/0x3e0 [ 1535.390262][T24684] ? tomoyo_encode2+0x100/0x3e0 [ 1535.390285][T24684] tomoyo_encode2+0x100/0x3e0 [ 1535.390313][T24684] tomoyo_encode+0x29/0x50 [ 1535.390337][T24684] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1535.390370][T24684] tomoyo_path_number_perm+0x245/0x580 [ 1535.390390][T24684] ? tomoyo_path_number_perm+0x237/0x580 [ 1535.390414][T24684] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1535.390437][T24684] ? find_held_lock+0x2b/0x80 [ 1535.390479][T24684] ? find_held_lock+0x2b/0x80 [ 1535.390496][T24684] ? hook_file_ioctl_common+0x145/0x410 [ 1535.390520][T24684] ? __fget_files+0x20e/0x3c0 [ 1535.390548][T24684] security_file_ioctl+0x9b/0x240 [ 1535.390574][T24684] __x64_sys_ioctl+0xb7/0x210 [ 1535.390597][T24684] do_syscall_64+0xcd/0xfa0 [ 1535.390620][T24684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.390638][T24684] RIP: 0033:0x7f22c278eec9 [ 1535.390653][T24684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1535.390671][T24684] RSP: 002b:00007f22c35a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1535.390689][T24684] RAX: ffffffffffffffda RBX: 00007f22c29e5fa0 RCX: 00007f22c278eec9 [ 1535.390701][T24684] RDX: 0000200000000740 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1535.390712][T24684] RBP: 00007f22c35a8090 R08: 0000000000000000 R09: 0000000000000000 [ 1535.390723][T24684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1535.390734][T24684] R13: 00007f22c29e6038 R14: 00007f22c29e5fa0 R15: 00007ffd13afe1d8 [ 1535.390761][T24684] [ 1535.390781][T24684] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1535.491458][T15841] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1535.598680][T24684] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1535.622436][T24680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1535.631237][T24680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1535.646937][ T5944] peak_usb 1-1:0.29 can0: sending command failure: -22 [ 1535.996779][T24696] netlink: 244 bytes leftover after parsing attributes in process `syz.5.5045'. [ 1536.925125][ T5944] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -22 [ 1536.937245][ T5944] usb 1-1: USB disconnect, device number 106 [ 1537.208951][T24706] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1537.254478][T24707] xt_TCPMSS: Only works on TCP SYN packets [ 1537.489565][T15841] usb 5-1: Using ep0 maxpacket: 16 [ 1537.589380][T15841] usb 5-1: device descriptor read/all, error -71 [ 1537.638180][T24709] vlan2: entered allmulticast mode [ 1537.643840][T24709] bridge_slave_0: entered allmulticast mode [ 1538.379702][ T42] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1538.589730][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 1538.612317][ T42] usb 4-1: config 1 interface 0 altsetting 91 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1538.671937][T24717] mkiss: ax0: crc mode is auto. [ 1538.753113][ T42] usb 4-1: config 1 interface 0 altsetting 91 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1538.816103][ T42] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1538.869348][ T42] usb 4-1: New USB device found, idVendor=04e7, idProduct=0050, bcdDevice= 0.40 [ 1538.879146][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.027050][ T42] usb 4-1: Product: ᳘篧풜룢鶺눹珚䐛蟢啚㉻䖗ꄯ㤫䚡尼뇷꫇쀗︋풱咭絮뗀葘삋득⿳㰸闢괚⨼䝓헄຺⬈㘀ا耱ଢ଼儬媲 [ 1539.042699][ T42] usb 4-1: Manufacturer: 꼹⷇퍆痻꣒ꧪ犴륝䥸碴岖⸣䙋ƚ凉쵷럥뇓ዤꓷ겄粏㶮ắ㮪鷙ꛦꇍଐꡅ᭰龷몳೚÷畬瞐虛ꟼ㕪Դ奢愬ᣇ챓齦ꙟ⒚ࣻ吅쓝矇ᠧ㑄⿶ݥ賆釫줛햵崞옭ⱏߘ쭴䟕 [ 1539.068771][ T42] usb 4-1: SerialNumber: Ы [ 1539.224799][T24738] SELinux: policydb string SE L does not match my string SE Linux [ 1539.254316][T24736] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1539.299759][T24738] SELinux: failed to load policy [ 1539.330083][T24719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1539.338672][T24719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1539.357259][ T42] usbhid 4-1:1.0: can't add hid device: -71 [ 1539.371319][ T42] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1539.388208][ T42] usb 4-1: USB disconnect, device number 102 [ 1539.554519][T24743] tipc: Started in network mode [ 1539.559428][T24743] tipc: Node identity ac14140f, cluster identity 6 [ 1539.573528][T24743] tipc: New replicast peer: 255.255.255.255 [ 1539.582577][T24743] tipc: Enabled bearer , priority 10 [ 1540.360613][T24773] SELinux: policydb string SE L does not match my string SE Linux [ 1540.372062][T24773] SELinux: failed to load policy [ 1540.454822][T24774] tipc: Enabling of bearer rejected, already enabled [ 1540.574498][T24778] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5074'. [ 1540.710041][ T42] tipc: Node number set to 2886997007 [ 1541.136758][T24784] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5075'. [ 1541.648620][T24801] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5079'. [ 1542.296881][T24808] fuse: Unknown parameter 'use00000000000000000000' [ 1542.859689][T24827] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5084'. [ 1542.978832][T15841] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1543.249585][T15841] usb 6-1: Using ep0 maxpacket: 32 [ 1543.261813][T15841] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1543.305802][T15841] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1543.386323][T15841] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1543.399104][ T30] audit: type=1400 audit(1760331567.715:1111): avc: denied { create } for pid=24833 comm="syz.3.5087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1543.418907][T15841] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1543.434842][T15841] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1543.449650][T15841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.459026][T15841] usb 6-1: Product: syz [ 1543.463415][T15841] usb 6-1: Manufacturer: syz [ 1543.468181][T15841] usb 6-1: SerialNumber: syz [ 1543.744843][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1543.772955][T15841] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input62 [ 1543.787116][ T30] audit: type=1400 audit(1760331567.755:1112): avc: denied { ioctl } for pid=24814 comm="syz.5.5083" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1543.949249][T15841] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1544.052459][T15841] (id 0x00) [ 1544.148936][ T30] audit: type=1400 audit(1760331567.775:1113): avc: denied { read } for pid=24833 comm="syz.3.5087" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1544.219673][T15841] rc_core: IR keymap rc-imon-pad not found [ 1544.236359][ T30] audit: type=1400 audit(1760331567.775:1114): avc: denied { open } for pid=24833 comm="syz.3.5087" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1544.269651][T15841] Registered IR keymap rc-empty [ 1544.274687][T15841] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1544.325972][T15841] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1544.330326][ T30] audit: type=1400 audit(1760331567.885:1115): avc: denied { create } for pid=24833 comm="syz.3.5087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1544.420531][T15841] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 1544.478436][T24844] FAULT_INJECTION: forcing a failure. [ 1544.478436][T24844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1544.592518][T24844] CPU: 1 UID: 0 PID: 24844 Comm: syz.5.5083 Not tainted syzkaller #0 PREEMPT(full) [ 1544.592542][T24844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1544.592551][T24844] Call Trace: [ 1544.592556][T24844] [ 1544.592563][T24844] dump_stack_lvl+0x16c/0x1f0 [ 1544.592585][T24844] should_fail_ex+0x512/0x640 [ 1544.592607][T24844] strncpy_from_user+0x3b/0x2e0 [ 1544.592625][T24844] getname_flags.part.0+0x8f/0x550 [ 1544.592644][T24844] getname_flags+0x93/0xf0 [ 1544.592662][T24844] do_sys_openat2+0xb8/0x1d0 [ 1544.592675][T24844] ? __pfx_do_sys_openat2+0x10/0x10 [ 1544.592693][T24844] ? __pfx___schedule+0x10/0x10 [ 1544.592711][T24844] __x64_sys_openat+0x174/0x210 [ 1544.592725][T24844] ? __pfx___x64_sys_openat+0x10/0x10 [ 1544.592747][T24844] do_syscall_64+0xcd/0xfa0 [ 1544.592767][T24844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.592781][T24844] RIP: 0033:0x7f644a18d710 [ 1544.592793][T24844] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1544.592807][T24844] RSP: 002b:00007f644b0b6b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1544.592822][T24844] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f644a18d710 [ 1544.592831][T24844] RDX: 0000000000000002 RSI: 00007f644b0b6c10 RDI: 00000000ffffff9c [ 1544.592840][T24844] RBP: 00007f644b0b6c10 R08: 0000000000000000 R09: 00007f644b0b6987 [ 1544.592849][T24844] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1544.592858][T24844] R13: 00007f644a3e6128 R14: 00007f644a3e6090 R15: 00007ffd126e3d58 [ 1544.592878][T24844] [ 1544.618225][T24843] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5088'. [ 1544.639634][T15841] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input63 [ 1544.679766][ T30] audit: type=1400 audit(1760331567.895:1116): avc: denied { write } for pid=24833 comm="syz.3.5087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1544.688956][T15841] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:38> initialized [ 1544.719157][ T30] audit: type=1400 audit(1760331567.935:1117): avc: denied { setopt } for pid=24833 comm="syz.3.5087" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1544.856226][T15841] usb 6-1: USB disconnect, device number 38 [ 1544.877951][ T30] audit: type=1400 audit(1760331568.105:1118): avc: denied { read } for pid=5167 comm="acpid" name="mouse1" dev="devtmpfs" ino=5706 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1544.901079][ T30] audit: type=1400 audit(1760331568.105:1119): avc: denied { open } for pid=5167 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=5706 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1544.926319][ T30] audit: type=1400 audit(1760331568.105:1120): avc: denied { ioctl } for pid=5167 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=5706 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1545.016710][T24842] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5089'. [ 1545.041084][T24842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5089'. [ 1545.135277][T24848] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5091'. [ 1546.499355][T24869] siw: device registration error -23 [ 1547.636131][T24887] random: crng reseeded on system resumption [ 1550.711972][T24898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1550.755048][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 1550.755063][ T30] audit: type=1400 audit(1760331575.075:1189): avc: denied { read } for pid=24902 comm="syz.5.5104" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1550.806147][T24904] tipc: Enabling of bearer rejected, already enabled [ 1550.816694][ T30] audit: type=1400 audit(1760331575.105:1190): avc: denied { open } for pid=24902 comm="syz.5.5104" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1550.841792][ T30] audit: type=1400 audit(1760331575.125:1191): avc: denied { ioctl } for pid=24902 comm="syz.5.5104" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1551.401851][T24913] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5107'. [ 1551.478395][ T30] audit: type=1400 audit(1760331575.795:1192): avc: denied { create } for pid=24914 comm="syz.3.5109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1551.662361][T24924] siw: device registration error -23 [ 1552.071068][ T30] audit: type=1400 audit(1760331575.825:1193): avc: denied { write } for pid=24914 comm="syz.3.5109" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1552.373770][ T30] audit: type=1400 audit(1760331576.625:1194): avc: denied { ioctl } for pid=24914 comm="syz.3.5109" path="socket:[98907]" dev="sockfs" ino=98907 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1552.484424][ T30] audit: type=1400 audit(1760331576.745:1195): avc: denied { mounton } for pid=24928 comm="syz.2.5112" path="/427/file0" dev="tmpfs" ino=2280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1552.605811][ T30] audit: type=1400 audit(1760331576.765:1196): avc: denied { mount } for pid=24928 comm="syz.2.5112" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1552.719209][ T30] audit: type=1400 audit(1760331576.825:1197): avc: denied { read write } for pid=24928 comm="syz.2.5112" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1552.767492][ T30] audit: type=1400 audit(1760331576.825:1198): avc: denied { open } for pid=24928 comm="syz.2.5112" path="/427/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1552.790547][ C0] vkms_vblank_simulate: vblank timer overrun [ 1553.459155][T24953] mkiss: ax0: crc mode is auto. [ 1553.504990][T24955] xt_TCPMSS: Only works on TCP SYN packets [ 1554.044713][T24967] netlink: 'syz.4.5121': attribute type 13 has an invalid length. [ 1554.777891][T24978] mkiss: ax0: crc mode is auto. [ 1555.268822][T24983] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5124'. [ 1556.184986][T24982] xt_TCPMSS: Only works on TCP SYN packets [ 1556.324309][T24999] overlayfs: failed to resolve './file1': -2 [ 1556.332524][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1556.332541][ T30] audit: type=1400 audit(1760331580.655:1208): avc: denied { write } for pid=25001 comm="syz.0.5131" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1556.447052][ T30] audit: type=1400 audit(1760331580.765:1209): avc: denied { load_policy } for pid=25005 comm="syz.4.5133" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1556.467521][T25006] SELinux: policydb string SE L does not match my string SE Linux [ 1556.479987][T25006] SELinux: failed to load policy [ 1556.687980][ T5812] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1556.740300][ T30] audit: type=1400 audit(1760331581.055:1210): avc: denied { create } for pid=25007 comm="syz.3.5134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1557.754422][ T30] audit: type=1400 audit(1760331581.065:1211): avc: denied { write } for pid=25007 comm="syz.3.5134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1557.789909][ T5812] usb 1-1: Using ep0 maxpacket: 32 [ 1557.929678][T15841] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1558.035974][ T5812] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1558.047019][ T5812] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1558.091835][ T5812] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1558.107046][ T5812] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1558.109664][ T42] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1558.159387][T15841] usb 3-1: Using ep0 maxpacket: 32 [ 1558.296078][ T5812] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1558.296143][T15841] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x2A, changing to 0xA [ 1558.305372][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.337629][ T5812] usb 1-1: Product: syz [ 1558.361232][T15841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1558.365340][ T5812] usb 1-1: Manufacturer: syz [ 1558.372481][T15841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1558.404234][T15841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1558.407751][ T5812] usb 1-1: SerialNumber: syz [ 1558.568469][ T30] audit: type=1400 audit(1760331582.835:1212): avc: denied { create } for pid=25018 comm="syz.3.5137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1558.598948][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 1558.723466][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1558.732656][ T5812] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input64 [ 1558.750193][T25021] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5138'. [ 1558.765726][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1558.777543][ T30] audit: type=1400 audit(1760331582.845:1213): avc: denied { setopt } for pid=25018 comm="syz.3.5137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1558.799238][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1558.809762][T15841] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1558.818815][T15841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.828257][T15841] usb 3-1: Product: syz [ 1558.833449][ T42] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 1558.843561][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.851653][T15841] usb 3-1: Manufacturer: syz [ 1558.856248][T15841] usb 3-1: SerialNumber: syz [ 1558.865490][ T42] usb 5-1: Product: syz [ 1558.872143][T15841] usb 3-1: config 0 descriptor?? [ 1558.877314][ T42] usb 5-1: Manufacturer: syz [ 1558.883928][ T42] usb 5-1: SerialNumber: syz [ 1558.908769][ T42] usb 5-1: config 0 descriptor?? [ 1558.930905][ T42] kobil_sct 5-1:0.0: KOBIL USB smart card terminal converter detected [ 1558.959907][ T5812] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1558.974250][ T42] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1558.976872][ T5812] (id 0x00) [ 1559.094241][ T42] usb 3-1: USB disconnect, device number 97 [ 1559.099591][ T5812] rc_core: IR keymap rc-imon-pad not found [ 1559.122691][ T5812] Registered IR keymap rc-empty [ 1559.178776][ T5812] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1559.203730][ T5812] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1559.231880][ T5812] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 1559.244502][ T5812] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input65 [ 1559.260849][ T5812] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:107> initialized [ 1559.386680][T25034] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5140'. [ 1559.913996][T25047] tipc: Enabling of bearer rejected, already enabled [ 1559.958846][T25045] imon:send_packet: task interrupted [ 1560.011970][T25045] imon:send_packet: packet tx failed (-512) [ 1560.025056][T25045] imon:vfd_write: send packet #1 failed [ 1560.114682][T25052] xt_TCPMSS: Only works on TCP SYN packets [ 1560.294745][ T42] usb 5-1: USB disconnect, device number 115 [ 1560.420024][ T42] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1560.440234][ T42] kobil_sct 5-1:0.0: device disconnected [ 1560.640940][T25059] FAULT_INJECTION: forcing a failure. [ 1560.640940][T25059] name failslab, interval 1, probability 0, space 0, times 0 [ 1560.787226][T25059] CPU: 0 UID: 0 PID: 25059 Comm: syz.2.5148 Not tainted syzkaller #0 PREEMPT(full) [ 1560.787248][T25059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1560.787255][T25059] Call Trace: [ 1560.787260][T25059] [ 1560.787265][T25059] dump_stack_lvl+0x16c/0x1f0 [ 1560.787286][T25059] should_fail_ex+0x512/0x640 [ 1560.787302][T25059] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1560.787321][T25059] should_failslab+0xc2/0x120 [ 1560.787339][T25059] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1560.787351][T25059] ? __alloc_skb+0x2b2/0x380 [ 1560.787367][T25059] ? __alloc_skb+0x2b2/0x380 [ 1560.787376][T25059] ? __pfx_netlink_insert+0x10/0x10 [ 1560.787390][T25059] __alloc_skb+0x2b2/0x380 [ 1560.787400][T25059] ? __pfx___alloc_skb+0x10/0x10 [ 1560.787412][T25059] ? netlink_autobind.isra.0+0x158/0x370 [ 1560.787430][T25059] netlink_alloc_large_skb+0x69/0x140 [ 1560.787445][T25059] netlink_sendmsg+0x698/0xdd0 [ 1560.787462][T25059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1560.787481][T25059] ____sys_sendmsg+0xa98/0xc70 [ 1560.787498][T25059] ? copy_msghdr_from_user+0x10a/0x160 [ 1560.787511][T25059] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1560.787533][T25059] ___sys_sendmsg+0x134/0x1d0 [ 1560.787546][T25059] ? __pfx____sys_sendmsg+0x10/0x10 [ 1560.787558][T25059] ? __lock_acquire+0x622/0x1c90 [ 1560.787590][T25059] __sys_sendmsg+0x16d/0x220 [ 1560.787603][T25059] ? __pfx___sys_sendmsg+0x10/0x10 [ 1560.787626][T25059] do_syscall_64+0xcd/0xfa0 [ 1560.787640][T25059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.787651][T25059] RIP: 0033:0x7ff7a2b8eec9 [ 1560.787661][T25059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1560.787671][T25059] RSP: 002b:00007ff7a398d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1560.787683][T25059] RAX: ffffffffffffffda RBX: 00007ff7a2de5fa0 RCX: 00007ff7a2b8eec9 [ 1560.787690][T25059] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 1560.787697][T25059] RBP: 00007ff7a398d090 R08: 0000000000000000 R09: 0000000000000000 [ 1560.787703][T25059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1560.787709][T25059] R13: 00007ff7a2de6038 R14: 00007ff7a2de5fa0 R15: 00007fffc53f5ab8 [ 1560.787724][T25059] [ 1561.010651][ C0] vkms_vblank_simulate: vblank timer overrun [ 1561.051906][T25062] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5147'. [ 1561.182168][T25069] binder: BINDER_SET_CONTEXT_MGR already set [ 1561.188860][T25069] binder: 25068:25069 ioctl 4018620d 200000004a80 returned -16 [ 1561.230073][ T30] audit: type=1400 audit(1760331585.495:1214): avc: denied { read } for pid=25068 comm="syz.3.5151" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1561.371855][ T5812] usb 1-1: USB disconnect, device number 107 [ 1561.454345][T25073] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5152'. [ 1561.546971][T25076] binder_alloc: 25075: binder_alloc_buf size -16 failed, no address space [ 1561.577235][ T30] audit: type=1400 audit(1760331585.495:1215): avc: denied { open } for pid=25068 comm="syz.3.5151" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1561.602659][ T30] audit: type=1400 audit(1760331585.495:1216): avc: denied { ioctl } for pid=25068 comm="syz.3.5151" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1561.628787][T25076] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1561.659564][ T30] audit: type=1400 audit(1760331585.505:1217): avc: denied { set_context_mgr } for pid=25068 comm="syz.3.5151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1561.747887][ T30] audit: type=1400 audit(1760331585.505:1218): avc: denied { map } for pid=25068 comm="syz.3.5151" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1561.796023][ T30] audit: type=1400 audit(1760331585.665:1219): avc: denied { mount } for pid=25065 comm="syz.2.5150" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 1561.821699][ T30] audit: type=1400 audit(1760331585.865:1220): avc: denied { call } for pid=25075 comm="syz.4.5153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1561.841765][ T30] audit: type=1400 audit(1760331586.105:1221): avc: denied { read write } for pid=25081 comm="syz.0.5157" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1561.845499][T25084] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5156'. [ 1561.882231][ T30] audit: type=1400 audit(1760331586.105:1222): avc: denied { open } for pid=25081 comm="syz.0.5157" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1561.959715][ T42] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1562.017327][ T30] audit: type=1400 audit(1760331586.115:1223): avc: denied { ioctl } for pid=25081 comm="syz.0.5157" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1562.186654][ T42] usb 4-1: config 0 has an invalid interface number: 17 but max is 0 [ 1562.205547][ T42] usb 4-1: config 0 has no interface number 0 [ 1562.215666][ T42] usb 4-1: config 0 interface 17 has no altsetting 0 [ 1562.227887][ T42] usb 4-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c1.09 [ 1562.237271][ T30] audit: type=1400 audit(1760331586.285:1224): avc: denied { shutdown } for pid=25083 comm="syz.4.5156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1562.317257][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.326491][T25082] team0: Port device team_slave_0 removed [ 1562.385349][ T42] usb 4-1: Product: syz [ 1562.399847][ T42] usb 4-1: Manufacturer: syz [ 1562.404640][ T42] usb 4-1: SerialNumber: syz [ 1562.435551][ T42] usb 4-1: config 0 descriptor?? [ 1562.448430][ T42] esd_usb 4-1:0.17: sending version message failed [ 1562.460302][ T42] esd_usb 4-1:0.17: probe with driver esd_usb failed with error -22 [ 1563.754607][T25116] netlink: 'syz.5.5163': attribute type 1 has an invalid length. [ 1564.575362][T25120] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5164'. [ 1564.820907][ T5879] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1564.981223][ T5879] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1565.002959][ T5879] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1565.033159][ T5879] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1565.042640][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.064095][ T5879] usb 6-1: Product: syz [ 1565.072967][ T5879] usb 6-1: Manufacturer: syz [ 1565.087443][ T5879] usb 6-1: SerialNumber: syz [ 1565.119918][ T5879] cdc_mbim 6-1:1.0: skipping garbage [ 1565.281399][T25144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5173'. [ 1565.332540][T25125] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1565.415442][T25146] binder: 25141:25146 ioctl ae80 0 returned -22 [ 1566.060365][T25125] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1566.095186][ T5879] cdc_mbim 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1566.103117][ T5879] cdc_mbim 6-1:1.0: setting rx_max = 2048 [ 1566.296308][ T5879] cdc_mbim 6-1:1.0: setting tx_max = 184 [ 1566.311003][ T5879] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 1566.354733][ T5879] wwan wwan0: port wwan0mbim0 attached [ 1566.497707][ C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 1566.504450][ C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 1566.511384][ C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 1566.518080][ C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 1566.524553][ C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 1566.531216][ C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 1566.537527][ C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 1566.544182][ C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 1566.550543][ C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 1566.557212][ C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 1566.563533][ C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 1566.570209][ C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 1566.577175][ C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 1566.583841][ C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 1566.590205][ C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 1566.596858][ C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 1566.603152][ C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 1566.609813][ C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 1566.616166][ C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 1566.622834][ C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 1567.062713][ T5812] usb 4-1: USB disconnect, device number 103 [ 1567.079718][ T5879] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 8e:84:8a:1a:53:b7 [ 1567.140909][ T5879] usb 6-1: USB disconnect, device number 39 [ 1567.173995][ T5879] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 1567.199283][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1567.199300][ T30] audit: type=1400 audit(1760331591.515:1246): avc: denied { search } for pid=5477 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1567.276618][ T30] audit: type=1400 audit(1760331591.515:1247): avc: denied { search } for pid=5477 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1567.370632][T25163] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5176'. [ 1567.379780][ T42] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1567.436476][ T30] audit: type=1400 audit(1760331591.515:1248): avc: denied { search } for pid=5477 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1567.490465][ T5879] wwan wwan0: port wwan0mbim0 disconnected [ 1567.516146][ T30] audit: type=1400 audit(1760331591.515:1249): avc: denied { read } for pid=5477 comm="dhcpcd" name="n325" dev="tmpfs" ino=11153 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1567.641876][ T30] audit: type=1400 audit(1760331591.515:1250): avc: denied { open } for pid=5477 comm="dhcpcd" path="/run/udev/data/n325" dev="tmpfs" ino=11153 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1567.689922][ T42] usb 5-1: device descriptor read/64, error -71 [ 1567.718300][ T30] audit: type=1400 audit(1760331591.515:1251): avc: denied { getattr } for pid=5477 comm="dhcpcd" path="/run/udev/data/n325" dev="tmpfs" ino=11153 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1567.782640][T25171] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5179'. [ 1567.905086][ T30] audit: type=1400 audit(1760331591.965:1252): avc: denied { read open } for pid=25168 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1567.930924][ T30] audit: type=1400 audit(1760331591.965:1253): avc: denied { getattr } for pid=25168 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1568.469226][ T42] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1568.619753][ T42] usb 5-1: device descriptor read/64, error -71 [ 1568.747673][ T42] usb usb5-port1: attempt power cycle [ 1568.892595][ T30] audit: type=1400 audit(1760331593.215:1254): avc: denied { add_name } for pid=25164 comm="dhcpcd-run-hook" name="resolv.conf.wwan0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1569.029980][T25193] netlink: 'syz.3.5185': attribute type 1 has an invalid length. [ 1569.039402][ T30] audit: type=1400 audit(1760331593.215:1255): avc: denied { create } for pid=25164 comm="dhcpcd-run-hook" name="resolv.conf.wwan0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1569.129792][ T42] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1569.161970][ T42] usb 5-1: device descriptor read/8, error -71 [ 1569.333926][T25193] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1569.373826][T25203] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5185'. [ 1569.394719][T25203] bond1: entered allmulticast mode [ 1569.499944][ T42] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1569.544915][ T42] usb 5-1: device descriptor read/8, error -71 [ 1569.682739][ T42] usb usb5-port1: unable to enumerate USB device [ 1569.687371][T25193] bond1: (slave ip6gretap1): making interface the new active one [ 1569.724887][T25193] ip6gretap1: entered allmulticast mode [ 1569.966101][T25193] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1572.041859][T25259] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5196'. [ 1572.892590][T25251] Process accounting resumed [ 1573.105426][T25285] overlayfs: failed to resolve './file0': -2 [ 1573.124854][T25283] syzkaller1: entered promiscuous mode [ 1573.131923][T25283] syzkaller1: entered allmulticast mode [ 1573.145271][T25281] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5205'. [ 1573.154323][T25281] netlink: 194 bytes leftover after parsing attributes in process `syz.3.5205'. [ 1573.219862][ T42] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1573.334257][ T5879] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1573.400266][T25291] mkiss: ax0: crc mode is auto. [ 1573.449624][ T42] usb 1-1: Using ep0 maxpacket: 8 [ 1573.539992][ T42] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 1573.691008][ T42] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 1573.787780][ T42] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1573.882545][ T42] usb 1-1: config 250 has no interface number 0 [ 1573.889607][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 1573.896381][T25296] netlink: 'syz.5.5210': attribute type 72 has an invalid length. [ 1573.897307][ T42] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1573.905751][ T5879] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1573.937373][ T5879] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1573.945171][ T42] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1573.960258][ T5879] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1573.970315][ T5879] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1573.982299][ T5879] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1573.988469][ T42] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 12336, setting to 1024 [ 1573.997436][ T5879] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1574.017079][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.030310][ T42] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1574.041785][ T42] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1574.055605][ T42] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1574.064532][ T42] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1574.157375][T25298] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5211'. [ 1574.179887][ T42] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1574.188337][ T42] usb 1-1: Product: syz [ 1574.205021][ T42] usb 1-1: SerialNumber: syz [ 1574.216608][ T42] hub 1-1:250.228: bad descriptor, ignoring hub [ 1574.217782][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1574.217796][ T30] audit: type=1400 audit(1760331598.535:1268): avc: denied { setopt } for pid=25301 comm="syz.3.5213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1574.231417][ T42] hub 1-1:250.228: probe with driver hub failed with error -5 [ 1574.265097][ T30] audit: type=1400 audit(1760331598.585:1269): avc: denied { create } for pid=25301 comm="syz.3.5213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1574.285963][ T30] audit: type=1400 audit(1760331598.585:1270): avc: denied { setopt } for pid=25301 comm="syz.3.5213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1574.373705][ T5879] usb 5-1: usb_control_msg returned -32 [ 1574.397085][ T5879] usbtmc 5-1:16.0: can't read capabilities [ 1574.424471][ T30] audit: type=1400 audit(1760331598.745:1271): avc: denied { create } for pid=25278 comm="syz.0.5204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1574.459472][ T42] usblp 1-1:250.228: usblp1: USB Bidirectional printer dev 108 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1574.471847][ T30] audit: type=1400 audit(1760331598.745:1272): avc: denied { ioctl } for pid=25278 comm="syz.0.5204" path="socket:[100316]" dev="sockfs" ino=100316 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1574.510142][ T30] audit: type=1400 audit(1760331598.745:1273): avc: denied { connect } for pid=25278 comm="syz.0.5204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1574.553795][ T30] audit: type=1400 audit(1760331598.745:1274): avc: denied { write } for pid=25278 comm="syz.0.5204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1574.576950][ T30] audit: type=1400 audit(1760331598.835:1275): avc: denied { create } for pid=25307 comm="syz.2.5214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1574.597043][ T30] audit: type=1400 audit(1760331598.855:1276): avc: denied { ioctl } for pid=25307 comm="syz.2.5214" path="socket:[100329]" dev="sockfs" ino=100329 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1574.663426][ T42] usb 1-1: USB disconnect, device number 108 [ 1574.694506][ T42] usblp1: removed [ 1574.869912][ T30] audit: type=1400 audit(1760331599.185:1277): avc: denied { ioctl } for pid=25307 comm="syz.2.5214" path="socket:[100336]" dev="sockfs" ino=100336 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1576.485525][T25327] overlayfs: failed to resolve './file1': -2 [ 1577.709802][T25347] netlink: 'syz.3.5225': attribute type 13 has an invalid length. [ 1578.388020][ T5879] usb 5-1: USB disconnect, device number 120 [ 1579.279805][ T5879] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1579.357130][T25379] fuse: Bad value for 'fd' [ 1579.669658][ T5879] usb 1-1: Using ep0 maxpacket: 16 [ 1580.627781][T25388] random: crng reseeded on system resumption [ 1580.750436][ T5879] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1580.816579][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1580.876773][T25398] random: crng reseeded on system resumption [ 1580.960854][ T5879] usb 1-1: Product: syz [ 1580.965098][ T5879] usb 1-1: Manufacturer: syz [ 1580.969962][ T5879] usb 1-1: SerialNumber: syz [ 1581.019203][ T5879] usb 1-1: config 0 descriptor?? [ 1581.028657][T25394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1581.639214][T25411] netlink: 'syz.0.5232': attribute type 4 has an invalid length. [ 1582.816928][T25433] fuse: Bad value for 'group_id' [ 1582.822462][T25433] fuse: Bad value for 'group_id' [ 1584.683145][ T5879] usb 1-1: USB disconnect, device number 109 [ 1584.709675][T25154] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1585.005747][T25154] usb 6-1: Using ep0 maxpacket: 16 [ 1585.067475][T25154] usb 6-1: config 0 has no interfaces? [ 1585.074734][T25154] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1585.099755][T25154] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.116600][T25154] usb 6-1: Product: syz [ 1585.126742][T25154] usb 6-1: Manufacturer: syz [ 1585.147080][T25154] usb 6-1: SerialNumber: syz [ 1585.169460][T25154] usb 6-1: config 0 descriptor?? [ 1586.645840][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1586.645860][ T30] audit: type=1400 audit(1760331610.225:1283): avc: denied { getopt } for pid=25470 comm="syz.4.5258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1587.021261][T15841] usb 6-1: USB disconnect, device number 40 [ 1587.169986][T25486] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5261'. [ 1587.671599][T15841] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1587.899603][T15841] usb 6-1: Using ep0 maxpacket: 32 [ 1587.908779][T15841] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1587.918517][T15841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.932315][T15841] usb 6-1: config 0 descriptor?? [ 1587.942461][T15841] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1588.179814][ T42] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1588.434548][T25506] fuse: Bad value for 'fd' [ 1588.818186][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 1588.836956][ T42] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1588.846237][ T42] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1588.856268][ T42] usb 5-1: Product: syz [ 1588.863886][ T42] usb 5-1: Manufacturer: syz [ 1588.870622][ T42] usb 5-1: SerialNumber: syz [ 1588.887570][ T42] usb 5-1: config 0 descriptor?? [ 1589.032336][T25482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1589.450470][T25482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1589.886789][T25482] veth1_vlan: default FDB implementation only supports local addresses [ 1589.943860][T25154] usb 6-1: USB disconnect, device number 41 [ 1591.001675][T25530] fuse: Unknown parameter 'group_i00000000000000000000' [ 1591.987077][T25539] xt_TCPMSS: Only works on TCP SYN packets [ 1592.280937][T25154] usb 5-1: USB disconnect, device number 121 [ 1592.653039][T25552] tipc: Enabling of bearer rejected, already enabled [ 1592.669620][ T5812] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1593.352423][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1593.364187][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1593.453263][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1593.493943][ T5812] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1593.511629][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.526396][ T5812] usb 4-1: Product: syz [ 1593.539148][ T5812] usb 4-1: Manufacturer: syz [ 1593.544564][ T5812] usb 4-1: SerialNumber: syz [ 1593.813176][ T5812] usb 4-1: config 0 descriptor?? [ 1594.090583][T25572] siw: device registration error -23 [ 1594.141176][ T5812] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1594.682655][ T5812] usb 4-1: USB disconnect, device number 104 [ 1594.909793][T25578] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.5286'. [ 1596.445641][T25596] tipc: Enabling of bearer rejected, already enabled [ 1596.959085][ T5812] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1597.273413][T25611] fuse: Bad value for 'fd' [ 1597.280901][ T5812] usb 3-1: Using ep0 maxpacket: 16 [ 1597.911691][ T5812] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1597.999789][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1598.007903][ T5812] usb 3-1: Product: syz [ 1598.030538][ T5812] usb 3-1: Manufacturer: syz [ 1598.035189][ T5812] usb 3-1: SerialNumber: syz [ 1598.050574][ T5812] usb 3-1: config 0 descriptor?? [ 1598.241997][ T30] audit: type=1400 audit(1760331622.545:1284): avc: denied { create } for pid=25623 comm="syz.0.5300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1598.261655][ C0] vkms_vblank_simulate: vblank timer overrun [ 1598.439801][ T30] audit: type=1400 audit(1760331622.565:1285): avc: denied { shutdown } for pid=25623 comm="syz.0.5300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1598.550670][T25629] netlink: 'syz.2.5290': attribute type 4 has an invalid length. [ 1598.829740][ T5812] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1598.892876][T25637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5301'. [ 1598.909473][ T30] audit: type=1400 audit(1760331623.205:1286): avc: denied { bind } for pid=25633 comm="syz.5.5301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1598.928870][ C0] vkms_vblank_simulate: vblank timer overrun [ 1599.199740][ T5812] usb 1-1: Using ep0 maxpacket: 16 [ 1599.209856][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1599.254366][ T5812] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1599.271299][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.306046][ T5812] usb 1-1: config 0 descriptor?? [ 1600.129042][ T5812] mcp2221 0003:04D8:00DD.0044: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 1601.260735][ T5812] usb 3-1: USB disconnect, device number 98 [ 1601.640074][T25660] siw: device registration error -23 [ 1601.974072][ T30] audit: type=1400 audit(1760331626.295:1287): avc: denied { open } for pid=25657 comm="syz.3.5307" path="/dev/ttyqa" dev="devtmpfs" ino=385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1602.017537][T25154] usb 1-1: USB disconnect, device number 110 [ 1602.090449][T25664] netlink: 'syz.0.5309': attribute type 13 has an invalid length. [ 1602.819758][ T42] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1603.125697][ T42] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 1603.134012][ T42] usb 4-1: config 0 has no interface number 0 [ 1603.346562][ T42] usb 4-1: config 0 interface 255 altsetting 237 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1603.366229][ T42] usb 4-1: config 0 interface 255 altsetting 237 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1603.377143][ T42] usb 4-1: config 0 interface 255 has no altsetting 0 [ 1603.384274][ T42] usb 4-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.00 [ 1603.393678][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.435185][ T42] usb 4-1: config 0 descriptor?? [ 1603.476159][T25682] xt_TCPMSS: Only works on TCP SYN packets [ 1603.940184][ T30] audit: type=1400 audit(1760331628.235:1288): avc: denied { kexec_image_load } for pid=25675 comm="syz.0.5313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1604.557949][ T42] usbhid 4-1:0.255: can't add hid device: -71 [ 1604.570653][ T42] usbhid 4-1:0.255: probe with driver usbhid failed with error -71 [ 1604.636111][ T42] usb 4-1: USB disconnect, device number 105 [ 1605.274216][ T30] audit: type=1400 audit(1760331629.595:1289): avc: denied { mounton } for pid=25693 comm="syz.5.5317" path="/526/file0" dev="cgroup" ino=525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1605.341535][ T30] audit: type=1400 audit(1760331629.665:1290): avc: denied { unmount } for pid=15285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1605.939614][ T42] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1606.699709][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 1607.019443][ T42] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1607.029167][ T42] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1607.038292][ T42] usb 4-1: Product: syz [ 1607.044951][T25720] SELinux: policydb string does not match my string SE Linux [ 1607.047071][ T42] usb 4-1: Manufacturer: syz [ 1607.057444][ T42] usb 4-1: SerialNumber: syz [ 1607.067831][ T42] usb 4-1: config 0 descriptor?? [ 1607.073024][T25720] SELinux: failed to load policy [ 1607.681797][ T30] audit: type=1400 audit(1760331631.995:1291): avc: denied { unlink } for pid=25718 comm="syz.5.5326" name="#42" dev="tmpfs" ino=2801 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1607.722007][T25725] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=25725 comm=syz.5.5326 [ 1607.766818][ T30] audit: type=1400 audit(1760331632.005:1292): avc: denied { mount } for pid=25718 comm="syz.5.5326" name="/" dev="overlay" ino=2796 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1608.233246][T25735] netlink: 'syz.3.5320': attribute type 4 has an invalid length. [ 1608.256675][T25154] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1608.330579][ T5879] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1608.435699][T25154] usb 3-1: Using ep0 maxpacket: 16 [ 1608.445524][T25154] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1608.458232][T25154] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1608.467643][T25154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.485000][T25154] usb 3-1: Product: syz [ 1608.496148][T25154] usb 3-1: Manufacturer: syz [ 1608.502271][ T5879] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1608.508984][ T5879] usb 1-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 1608.524780][T25154] usb 3-1: SerialNumber: syz [ 1608.533923][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.551387][T25154] usb 3-1: config 0 descriptor?? [ 1608.571002][ T5879] usb 1-1: config 0 descriptor?? [ 1608.929166][ T30] audit: type=1400 audit(1760331633.245:1293): avc: denied { unmount } for pid=15285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1609.021531][ T5879] smartjoyplus 0003:0B43:0003.0045: item fetching failed at offset 0/3 [ 1609.030815][ T5879] smartjoyplus 0003:0B43:0003.0045: parse failed [ 1609.037171][ T5879] smartjoyplus 0003:0B43:0003.0045: probe with driver smartjoyplus failed with error -22 [ 1609.229477][ T42] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1609.259733][ T5879] usb 1-1: USB disconnect, device number 111 [ 1609.282720][T25745] xt_TCPMSS: Only works on TCP SYN packets [ 1609.412330][T25154] usb 4-1: USB disconnect, device number 106 [ 1609.450991][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1609.466135][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1609.479100][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1609.501734][ T42] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1609.515363][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.529652][ T42] usb 6-1: Product: syz [ 1609.535085][ T42] usb 6-1: Manufacturer: syz [ 1609.543785][ T42] usb 6-1: SerialNumber: syz [ 1609.584895][ T42] usb 6-1: config 0 descriptor?? [ 1609.815746][ T42] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1610.511796][T25756] netlink: 'syz.3.5336': attribute type 13 has an invalid length. [ 1611.529370][ T42] usb 3-1: USB disconnect, device number 99 [ 1612.687735][ T42] usb 6-1: USB disconnect, device number 42 [ 1613.109933][ T30] audit: type=1400 audit(1760331637.425:1294): avc: denied { listen } for pid=25784 comm="syz.0.5345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1613.129911][ T30] audit: type=1400 audit(1760331637.425:1295): avc: denied { setopt } for pid=25784 comm="syz.0.5345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1613.135245][T25779] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=25779 comm=syz.4.5341 [ 1613.189826][T15841] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1613.629678][T15841] usb 4-1: Using ep0 maxpacket: 8 [ 1613.646226][T15841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 185, changing to 11 [ 1613.675517][T15841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1353, setting to 1024 [ 1613.717832][T15841] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1613.790850][T15841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.805721][T25800] xt_TCPMSS: Only works on TCP SYN packets [ 1614.080396][T15841] usb 4-1: config 0 descriptor?? [ 1614.105021][T25782] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1614.439788][T15841] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1614.470236][ T42] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1614.638270][ T30] audit: type=1400 audit(1760331638.955:1296): avc: denied { write } for pid=25780 comm="syz.3.5344" name="iowarrior0" dev="devtmpfs" ino=5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1614.640904][T15841] usb 4-1: USB disconnect, device number 107 [ 1614.661910][ C0] vkms_vblank_simulate: vblank timer overrun [ 1614.675275][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 1614.681765][ T42] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1614.690366][T25154] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1614.701919][ T42] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1614.711097][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.719169][ T42] usb 3-1: Product: syz [ 1614.723382][ T42] usb 3-1: Manufacturer: syz [ 1614.727963][ T42] usb 3-1: SerialNumber: syz [ 1614.735131][ T42] usb 3-1: config 0 descriptor?? [ 1614.740335][ T5944] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1614.849604][T25154] usb 5-1: Using ep0 maxpacket: 8 [ 1614.856592][T25154] usb 5-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 1614.869591][ T5879] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1614.878630][T25154] usb 5-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d [ 1614.887786][T25154] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.895862][T25154] usb 5-1: Product: syz [ 1614.899627][ T5944] usb 1-1: Using ep0 maxpacket: 8 [ 1614.900066][T25154] usb 5-1: Manufacturer: syz [ 1614.906725][ T5944] usb 1-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 1614.909645][T25154] usb 5-1: SerialNumber: syz [ 1614.925688][ T5944] usb 1-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d [ 1614.934940][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.942980][ T5944] usb 1-1: Product: syz [ 1614.947223][ T5944] usb 1-1: Manufacturer: syz [ 1614.951899][ T5944] usb 1-1: SerialNumber: syz [ 1615.019608][ T5879] usb 6-1: Using ep0 maxpacket: 8 [ 1615.026108][ T5879] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 1615.034621][ T5879] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 1615.043185][ T5879] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1615.052315][ T5879] usb 6-1: config 250 has no interface number 0 [ 1615.058591][ T5879] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1615.070315][ T5879] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1615.080863][ T5879] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 12336, setting to 1024 [ 1615.092601][ T5879] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1615.103172][ T5879] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1615.116707][ T5879] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1615.126303][ T5879] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1615.135571][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1615.144066][ T5879] usb 6-1: Product: syz [ 1615.169645][ T5879] usb 6-1: SerialNumber: syz [ 1615.239690][T25154] usb 5-1: USB disconnect, device number 122 [ 1615.242088][ T5944] usb 1-1: USB disconnect, device number 112 [ 1615.277277][ T5879] hub 6-1:250.228: bad descriptor, ignoring hub [ 1615.291683][ T5879] hub 6-1:250.228: probe with driver hub failed with error -5 [ 1615.481952][ T5879] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 43 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1615.520517][ T5879] usb 6-1: USB disconnect, device number 43 [ 1615.528115][ T5879] usblp0: removed [ 1615.559921][T15841] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1615.720655][T15841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1615.731527][T15841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1615.741240][T15841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1615.753829][T15841] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1615.763581][T15841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.771740][T15841] usb 4-1: Product: syz [ 1615.775895][T15841] usb 4-1: Manufacturer: syz [ 1615.780616][T15841] usb 4-1: SerialNumber: syz [ 1615.787440][T15841] usb 4-1: config 0 descriptor?? [ 1616.136232][T15841] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1616.574585][T15841] usb 4-1: USB disconnect, device number 108 [ 1616.662717][T25829] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5357'. [ 1616.893799][T25836] SELinux: policydb string SE does not match my string SE Linux [ 1616.903115][T25836] SELinux: failed to load policy [ 1617.509278][T25848] fuse: Bad value for 'fd' [ 1617.604650][T15841] usb 3-1: USB disconnect, device number 100 [ 1619.079614][ T5879] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1619.194387][T25875] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5371'. [ 1619.229575][ T5879] usb 4-1: Using ep0 maxpacket: 8 [ 1619.236043][ T5879] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 1619.253681][ T5879] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 1619.270651][ T5879] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1619.288770][ T5879] usb 4-1: config 250 has no interface number 0 [ 1619.308194][ T5879] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1619.321112][ T5879] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1619.331722][ T5879] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 12336, setting to 1024 [ 1619.348401][ T5879] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1619.379999][ T5879] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1619.398095][ T5879] usb 4-1: config 250 interface 228 has no altsetting 0 [ 1619.412667][ T5879] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1619.427502][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1619.442354][ T5879] usb 4-1: Product: syz [ 1619.450149][ T5879] usb 4-1: SerialNumber: syz [ 1619.468625][ T5879] hub 4-1:250.228: bad descriptor, ignoring hub [ 1619.477910][ T5879] hub 4-1:250.228: probe with driver hub failed with error -5 [ 1619.675866][T25883] random: crng reseeded on system resumption [ 1619.699829][ T5879] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 109 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1619.768320][ T5879] usb 4-1: USB disconnect, device number 109 [ 1619.809330][ T5879] usblp0: removed [ 1620.219938][T15841] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1620.381177][T15841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1620.392534][T15841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1620.408634][T15841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1620.435492][T15841] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1620.445216][T15841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.458412][T15841] usb 6-1: Product: syz [ 1620.467054][T15841] usb 6-1: Manufacturer: syz [ 1620.476806][T15841] usb 6-1: SerialNumber: syz [ 1620.489476][T15841] usb 6-1: config 0 descriptor?? [ 1620.509564][ T5879] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1620.660548][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 1620.686635][T25881] comedi comedi0: reset error (fatal) [ 1620.724010][ T5879] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1620.737579][ T5879] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1620.738097][T15841] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1620.757376][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.894860][T25894] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5376'. [ 1620.992260][ T5879] usb 4-1: Product: syz [ 1620.996467][ T5879] usb 4-1: Manufacturer: syz [ 1621.001096][ T5879] usb 4-1: SerialNumber: syz [ 1621.073051][ T5879] usb 4-1: config 0 descriptor?? [ 1621.469620][ T5879] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1621.620399][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 1621.647376][ T5879] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1622.002790][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1622.013036][ T5879] usb 3-1: Product: syz [ 1622.031729][ T5879] usb 3-1: Manufacturer: syz [ 1622.041054][ T5879] usb 3-1: SerialNumber: syz [ 1622.058746][ T5879] usb 3-1: config 0 descriptor?? [ 1622.711216][T25920] netlink: 'syz.2.5378': attribute type 4 has an invalid length. [ 1622.745948][ T30] audit: type=1400 audit(1760331647.065:1297): avc: denied { ioctl } for pid=25921 comm="syz.4.5383" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1623.623613][ T5879] usb 4-1: USB disconnect, device number 110 [ 1623.641294][T25154] usb 6-1: USB disconnect, device number 44 [ 1623.784367][T25930] netlink: 'syz.5.5386': attribute type 13 has an invalid length. [ 1623.924349][T25935] netlink: 'syz.4.5387': attribute type 1 has an invalid length. [ 1624.039810][T25935] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1624.075907][T25940] veth3: entered promiscuous mode [ 1624.380005][ T5879] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1624.458185][T25935] bond1: (slave dummy0): making interface the new active one [ 1624.475300][T25935] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1624.569587][ T5879] usb 4-1: Using ep0 maxpacket: 8 [ 1624.784420][ T5879] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 1624.809667][ T5879] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 1624.823076][ T5879] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1624.832295][ T5879] usb 4-1: config 250 has no interface number 0 [ 1624.899627][T15841] usb 3-1: USB disconnect, device number 101 [ 1624.948491][ T5879] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1625.501300][ T5879] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1625.530517][ T5879] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 12336, setting to 1024 [ 1625.550399][ T5879] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1625.561953][ T5879] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1625.578828][ T5879] usb 4-1: config 250 interface 228 has no altsetting 0 [ 1625.600539][ T5879] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1625.631304][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1625.643045][ T5879] usb 4-1: Product: syz [ 1625.647255][ T5879] usb 4-1: SerialNumber: syz [ 1625.930480][ T5879] hub 4-1:250.228: bad descriptor, ignoring hub [ 1625.936771][ T5879] hub 4-1:250.228: probe with driver hub failed with error -5 [ 1625.987469][T25945] bond1 (unregistering): (slave dummy0): Releasing active interface [ 1625.999814][T25945] bond1 (unregistering): Released all slaves [ 1626.089660][T25965] fuse: Unknown parameter '/dev/cpu/#/msr' [ 1626.432531][ T5879] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 111 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1626.487394][ T5879] usb 4-1: USB disconnect, device number 111 [ 1626.500757][ T5879] usblp0: removed [ 1626.871199][T25972] lo speed is unknown, defaulting to 1000 [ 1627.138753][T25973] input: syz0 as /devices/virtual/input/input66 [ 1628.074000][T25990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5399'. [ 1628.535879][T25990] IPVS: Error connecting to the multicast addr [ 1629.959184][T26005] xt_TCPMSS: Only works on TCP SYN packets [ 1629.990996][T26010] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5405'. [ 1630.042672][ T30] audit: type=1400 audit(1760331654.355:1298): avc: denied { write } for pid=26007 comm="syz.2.5404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1630.597814][T26027] fuse: Unknown parameter 'use00000000000000000000' [ 1630.660758][ T5879] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1631.086989][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 1631.098642][ T5879] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 1631.121932][ T5879] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 1631.155077][ T5879] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1631.176508][ T5879] usb 3-1: config 250 has no interface number 0 [ 1631.194105][ T5879] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1631.303089][ T5879] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1631.489558][ T5879] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 12336, setting to 1024 [ 1631.501523][ T5879] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1631.518567][ T5879] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1631.549695][ T5879] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1631.581485][ T5879] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1631.598287][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1631.643077][ T5879] usb 3-1: Product: syz [ 1631.654735][ T5879] usb 3-1: SerialNumber: syz [ 1631.672938][ T5879] hub 3-1:250.228: bad descriptor, ignoring hub [ 1631.686547][ T5879] hub 3-1:250.228: probe with driver hub failed with error -5 [ 1631.969439][T15841] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 1631.977723][ T5879] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 102 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1632.015995][ T5879] usb 3-1: USB disconnect, device number 102 [ 1632.025754][ T5879] usblp0: removed [ 1632.105204][ T30] audit: type=1400 audit(1760331656.425:1299): avc: denied { bind } for pid=26047 comm="syz.4.5416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1632.150514][T15841] usb 4-1: device descriptor read/64, error -71 [ 1632.459587][T15841] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 1632.770334][T15841] usb 4-1: device descriptor read/64, error -71 [ 1632.952854][T15841] usb usb4-port1: attempt power cycle [ 1633.935493][T15841] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 1633.980552][T15841] usb 4-1: device descriptor read/8, error -71 [ 1634.136053][T26075] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5423'. [ 1634.263444][T26076] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5422'. [ 1634.279592][T15841] usb 4-1: new full-speed USB device number 115 using dummy_hcd [ 1634.300465][T15841] usb 4-1: device descriptor read/8, error -71 [ 1634.409789][T15841] usb usb4-port1: unable to enumerate USB device [ 1634.972610][ T5879] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1635.099767][T15841] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1635.169609][ T5879] usb 1-1: Using ep0 maxpacket: 32 [ 1635.188632][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1635.285575][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1635.299601][T15841] usb 4-1: Using ep0 maxpacket: 8 [ 1635.315888][ T5879] usb 1-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 1635.321441][T15841] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 1635.350012][T15841] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 1635.358669][T15841] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1635.367939][T15841] usb 4-1: config 250 has no interface number 0 [ 1635.374668][T15841] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1635.387558][T15841] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1635.399908][T15841] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 12336, setting to 1024 [ 1635.412363][T15841] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1635.423199][T15841] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1635.437088][T15841] usb 4-1: config 250 interface 228 has no altsetting 0 [ 1635.447488][T15841] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1635.457910][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.457910][T15841] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1635.457936][T15841] usb 4-1: Product: syz [ 1635.480452][T15841] usb 4-1: SerialNumber: syz [ 1635.581380][T15841] hub 4-1:250.228: bad descriptor, ignoring hub [ 1635.601310][T15841] hub 4-1:250.228: probe with driver hub failed with error -5 [ 1635.608774][ T5879] usb 1-1: config 0 descriptor?? [ 1635.707946][T15841] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 116 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1635.759652][T15841] usb 4-1: USB disconnect, device number 116 [ 1635.776152][T15841] usblp0: removed [ 1637.077303][ T5879] cypress 0003:04B4:BCA1.0046: unknown main item tag 0x7 [ 1637.124315][ T5879] cypress 0003:04B4:BCA1.0046: hidraw0: USB HID v0.00 Device [HID 04b4:bca1] on usb-dummy_hcd.0-1/input0 [ 1637.350685][ T5879] usb 1-1: USB disconnect, device number 113 [ 1637.405102][T26111] fido_id[26111]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1638.327708][T26130] netlink: 'syz.5.5441': attribute type 1 has an invalid length. [ 1638.345275][T26130] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5441'. [ 1638.372664][T26134] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5439'. [ 1638.405386][T26135] netlink: 1272 bytes leftover after parsing attributes in process `syz.5.5441'. [ 1639.222785][T26146] fuse: Unknown parameter '/dev/cpu/#/msr' [ 1639.430290][T15841] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1639.586485][T26149] overlayfs: missing 'workdir' [ 1639.601412][T15841] usb 6-1: Using ep0 maxpacket: 8 [ 1639.794491][T26154] random: crng reseeded on system resumption [ 1639.928702][T15841] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1639.937500][T15841] usb 6-1: config 46 has no interfaces? [ 1639.948328][T15841] usb 6-1: New USB device found, idVendor=1b3d, idProduct=016e, bcdDevice=35.b4 [ 1639.970903][T15841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.971829][T26158] netlink: 'syz.2.5449': attribute type 13 has an invalid length. [ 1639.980128][T15841] usb 6-1: Product: syz [ 1639.993582][T15841] usb 6-1: Manufacturer: syz [ 1640.001933][T15841] usb 6-1: SerialNumber: syz [ 1640.240907][T15841] usb 6-1: USB disconnect, device number 45 [ 1641.591840][T26175] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5452'. [ 1641.960088][ T5879] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1642.184288][T26189] ================================================================== [ 1642.192359][T26189] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70 [ 1642.200343][T26189] Read of size 8 at addr ffff8880338cec30 by task syz.5.5456/26189 [ 1642.208216][T26189] [ 1642.210528][T26189] CPU: 0 UID: 0 PID: 26189 Comm: syz.5.5456 Not tainted syzkaller #0 PREEMPT(full) [ 1642.210554][T26189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1642.210567][T26189] Call Trace: [ 1642.210574][T26189] [ 1642.210581][T26189] dump_stack_lvl+0x116/0x1f0 [ 1642.210607][T26189] print_report+0xcd/0x630 [ 1642.210635][T26189] ? __virt_addr_valid+0x81/0x610 [ 1642.210654][T26189] ? __phys_addr+0xe8/0x180 [ 1642.210674][T26189] ? sysfs_remove_file_ns+0x63/0x70 [ 1642.210704][T26189] kasan_report+0xe0/0x110 [ 1642.210730][T26189] ? sysfs_remove_file_ns+0x63/0x70 [ 1642.210759][T26189] sysfs_remove_file_ns+0x63/0x70 [ 1642.210786][T26189] driver_remove_file+0x4a/0x60 [ 1642.210808][T26189] bus_remove_driver+0x224/0x2c0 [ 1642.210838][T26189] driver_unregister+0x76/0xb0 [ 1642.210859][T26189] comedi_device_detach_locked+0x12f/0xa50 [ 1642.210884][T26189] do_devconfig_ioctl+0x555/0x710 [ 1642.210909][T26189] ? __mutex_lock+0x1c5/0x1060 [ 1642.210937][T26189] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 1642.210970][T26189] ? find_held_lock+0x2b/0x80 [ 1642.210989][T26189] comedi_unlocked_ioctl+0x165d/0x2f00 [ 1642.211020][T26189] ? futex_wake+0x1ad/0x530 [ 1642.211049][T26189] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1642.211079][T26189] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1642.211110][T26189] ? do_vfs_ioctl+0x128/0x14f0 [ 1642.211130][T26189] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1642.211149][T26189] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1642.211181][T26189] ? hook_file_ioctl_common+0x145/0x410 [ 1642.211208][T26189] ? selinux_file_ioctl+0x180/0x270 [ 1642.211231][T26189] ? selinux_file_ioctl+0xb4/0x270 [ 1642.211256][T26189] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1642.211284][T26189] __x64_sys_ioctl+0x18e/0x210 [ 1642.211304][T26189] do_syscall_64+0xcd/0xfa0 [ 1642.211327][T26189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.211346][T26189] RIP: 0033:0x7f644a18eec9 [ 1642.211362][T26189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1642.211381][T26189] RSP: 002b:00007f644b096038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1642.211399][T26189] RAX: ffffffffffffffda RBX: 00007f644a3e6180 RCX: 00007f644a18eec9 [ 1642.211411][T26189] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000007 [ 1642.211424][T26189] RBP: 00007f644a211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1642.211436][T26189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1642.211448][T26189] R13: 00007f644a3e6218 R14: 00007f644a3e6180 R15: 00007ffd126e3d58 [ 1642.211466][T26189] [ 1642.211473][T26189] [ 1642.467222][T26189] Allocated by task 25903: [ 1642.471614][T26189] kasan_save_stack+0x33/0x60 [ 1642.476277][T26189] kasan_save_track+0x14/0x30 [ 1642.480947][T26189] __kasan_kmalloc+0xaa/0xb0 [ 1642.485519][T26189] __kmalloc_noprof+0x32f/0x880 [ 1642.490347][T26189] security_inode_init_security+0x13f/0x390 [ 1642.496232][T26189] shmem_symlink+0x135/0x9f0 [ 1642.500802][T26189] vfs_symlink+0x403/0x680 [ 1642.505199][T26189] do_symlinkat+0x261/0x310 [ 1642.509688][T26189] __x64_sys_symlinkat+0x93/0xc0 [ 1642.514642][T26189] do_syscall_64+0xcd/0xfa0 [ 1642.519125][T26189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.525002][T26189] [ 1642.527304][T26189] Freed by task 25903: [ 1642.531345][T26189] kasan_save_stack+0x33/0x60 [ 1642.536004][T26189] kasan_save_track+0x14/0x30 [ 1642.540665][T26189] __kasan_save_free_info+0x3b/0x60 [ 1642.545843][T26189] __kasan_slab_free+0x5f/0x80 [ 1642.550592][T26189] kfree+0x2b8/0x6d0 [ 1642.554466][T26189] security_inode_init_security+0x2eb/0x390 [ 1642.560336][T26189] shmem_symlink+0x135/0x9f0 [ 1642.564907][T26189] vfs_symlink+0x403/0x680 [ 1642.569300][T26189] do_symlinkat+0x261/0x310 [ 1642.573902][T26189] __x64_sys_symlinkat+0x93/0xc0 [ 1642.578822][T26189] do_syscall_64+0xcd/0xfa0 [ 1642.583306][T26189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.589178][T26189] [ 1642.591478][T26189] The buggy address belongs to the object at ffff8880338cec00 [ 1642.591478][T26189] which belongs to the cache kmalloc-256 of size 256 [ 1642.605518][T26189] The buggy address is located 48 bytes inside of [ 1642.605518][T26189] freed 256-byte region [ffff8880338cec00, ffff8880338ced00) [ 1642.619203][T26189] [ 1642.621505][T26189] The buggy address belongs to the physical page: [ 1642.627901][T26189] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x338ce [ 1642.636647][T26189] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1642.645126][T26189] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1642.653083][T26189] page_type: f5(slab) [ 1642.657041][T26189] raw: 00fff00000000040 ffff88813ff26b40 0000000000000000 dead000000000001 [ 1642.665603][T26189] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1642.674168][T26189] head: 00fff00000000040 ffff88813ff26b40 0000000000000000 dead000000000001 [ 1642.682816][T26189] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1642.691465][T26189] head: 00fff00000000001 ffffea0000ce3381 00000000ffffffff 00000000ffffffff [ 1642.700111][T26189] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1642.708766][T26189] page dumped because: kasan: bad access detected [ 1642.715150][T26189] page_owner tracks the page as allocated [ 1642.720845][T26189] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10423, tgid 10421 (syz.1.1331), ts 447899240559, free_ts 323433087282 [ 1642.742366][T26189] post_alloc_hook+0x1c0/0x230 [ 1642.747112][T26189] get_page_from_freelist+0x10a3/0x3a30 [ 1642.752636][T26189] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 1642.758508][T26189] alloc_pages_mpol+0x1fb/0x550 [ 1642.763342][T26189] new_slab+0x24a/0x360 [ 1642.767477][T26189] ___slab_alloc+0xdc4/0x1ae0 [ 1642.772132][T26189] __slab_alloc.constprop.0+0x63/0x110 [ 1642.777576][T26189] __kmalloc_noprof+0x501/0x880 [ 1642.782405][T26189] io_cache_alloc_new+0x45/0xf0 [ 1642.787241][T26189] __io_prep_rw+0x21d/0x1090 [ 1642.791817][T26189] io_prep_rw+0x76/0x2c0 [ 1642.796045][T26189] io_prep_writev+0x23/0xa0 [ 1642.800525][T26189] io_submit_sqes+0x855/0x2710 [ 1642.805267][T26189] __do_sys_io_uring_enter+0xd69/0x1630 [ 1642.810811][T26189] do_syscall_64+0xcd/0xfa0 [ 1642.815296][T26189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.821170][T26189] page last free pid 5808 tgid 5808 stack trace: [ 1642.827469][T26189] __free_frozen_pages+0x7df/0x1160 [ 1642.832645][T26189] __put_partials+0x130/0x170 [ 1642.837301][T26189] qlist_free_all+0x4d/0x120 [ 1642.841875][T26189] kasan_quarantine_reduce+0x195/0x1e0 [ 1642.847316][T26189] __kasan_slab_alloc+0x69/0x90 [ 1642.852149][T26189] __kmalloc_cache_node_noprof+0x28b/0x7a0 [ 1642.857942][T26189] __get_vm_area_node+0x101/0x330 [ 1642.862969][T26189] __vmalloc_node_range_noprof+0x271/0x1480 [ 1642.868849][T26189] __vmalloc_node_noprof+0xad/0xf0 [ 1642.873946][T26189] do_ipt_get_ctl+0x6b6/0xaa0 [ 1642.878603][T26189] nf_getsockopt+0x7c/0xe0 [ 1642.883007][T26189] ip_getsockopt+0x18c/0x1e0 [ 1642.887576][T26189] tcp_getsockopt+0xa1/0x100 [ 1642.892146][T26189] do_sock_getsockopt+0x34d/0x440 [ 1642.897163][T26189] __sys_getsockopt+0x12f/0x260 [ 1642.901993][T26189] __x64_sys_getsockopt+0xbd/0x160 [ 1642.907083][T26189] [ 1642.909385][T26189] Memory state around the buggy address: [ 1642.915004][T26189] ffff8880338ceb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1642.923057][T26189] ffff8880338ceb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1642.931129][T26189] >ffff8880338cec00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1642.939178][T26189] ^ [ 1642.944787][T26189] ffff8880338cec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1642.952844][T26189] ffff8880338ced00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1642.960882][T26189] ================================================================== [ 1643.498489][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1643.509383][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1643.519105][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1643.610952][ T5879] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1643.620117][T26189] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1643.627324][T26189] CPU: 0 UID: 0 PID: 26189 Comm: syz.5.5456 Not tainted syzkaller #0 PREEMPT(full) [ 1643.636700][T26189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1643.646757][T26189] Call Trace: [ 1643.650041][T26189] [ 1643.652977][T26189] dump_stack_lvl+0x3d/0x1f0 [ 1643.657577][T26189] vpanic+0x640/0x6f0 [ 1643.661572][T26189] panic+0xca/0xd0 [ 1643.665306][T26189] ? __pfx_panic+0x10/0x10 [ 1643.669731][T26189] ? sysfs_remove_file_ns+0x63/0x70 [ 1643.674942][T26189] ? preempt_schedule_common+0x44/0xc0 [ 1643.680410][T26189] ? preempt_schedule_thunk+0x16/0x30 [ 1643.685793][T26189] check_panic_on_warn+0xab/0xb0 [ 1643.690733][T26189] end_report+0x107/0x170 [ 1643.695049][T26189] kasan_report+0xee/0x110 [ 1643.699461][T26189] ? sysfs_remove_file_ns+0x63/0x70 [ 1643.704672][T26189] sysfs_remove_file_ns+0x63/0x70 [ 1643.709701][T26189] driver_remove_file+0x4a/0x60 [ 1643.714743][T26189] bus_remove_driver+0x224/0x2c0 [ 1643.719682][T26189] driver_unregister+0x76/0xb0 [ 1643.724433][T26189] comedi_device_detach_locked+0x12f/0xa50 [ 1643.730233][T26189] do_devconfig_ioctl+0x555/0x710 [ 1643.735254][T26189] ? __mutex_lock+0x1c5/0x1060 [ 1643.740003][T26189] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 1643.745541][T26189] ? find_held_lock+0x2b/0x80 [ 1643.750199][T26189] comedi_unlocked_ioctl+0x165d/0x2f00 [ 1643.755653][T26189] ? futex_wake+0x1ad/0x530 [ 1643.760154][T26189] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1643.765950][T26189] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1643.771918][T26189] ? do_vfs_ioctl+0x128/0x14f0 [ 1643.776662][T26189] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1643.781664][T26189] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1643.788503][T26189] ? hook_file_ioctl_common+0x145/0x410 [ 1643.794030][T26189] ? selinux_file_ioctl+0x180/0x270 [ 1643.799216][T26189] ? selinux_file_ioctl+0xb4/0x270 [ 1643.804317][T26189] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1643.810115][T26189] __x64_sys_ioctl+0x18e/0x210 [ 1643.814859][T26189] do_syscall_64+0xcd/0xfa0 [ 1643.819345][T26189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1643.825222][T26189] RIP: 0033:0x7f644a18eec9 [ 1643.829616][T26189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1643.849213][T26189] RSP: 002b:00007f644b096038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1643.857708][T26189] RAX: ffffffffffffffda RBX: 00007f644a3e6180 RCX: 00007f644a18eec9 [ 1643.865658][T26189] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000007 [ 1643.873608][T26189] RBP: 00007f644a211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1643.881558][T26189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1643.889510][T26189] R13: 00007f644a3e6218 R14: 00007f644a3e6180 R15: 00007ffd126e3d58 [ 1643.897466][T26189] [ 1643.900667][T26189] Kernel Offset: disabled [ 1643.904962][T26189] Rebooting in 86400 seconds..