last executing test programs: 8.23365412s ago: executing program 1 (id=1772): socket$alg(0x26, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) r2 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x54}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r2, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20048804) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r6, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) close_range(r5, 0xffffffffffffffff, 0x400000000000000) 7.958837936s ago: executing program 1 (id=1777): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cgroup.max.depth\x00', 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x401, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) write$cgroup_int(r2, &(0x7f0000000040)=0xd7, 0x12) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/29, 0x1d, 0x0, &(0x7f0000000080)=""/120, 0x78}, &(0x7f0000000140)=0x40) sendfile(r3, r2, 0x0, 0x4) 7.890313208s ago: executing program 1 (id=1779): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0/file0\x00', 0x42, 0x140) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) socket$inet_udp(0x2, 0x2, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 7.789402948s ago: executing program 1 (id=1782): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') getdents64(r0, 0x0, 0x46) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x2000000, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x9}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r2, 0x0, 0xe7dd}, 0xc) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r3) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) fsopen(&(0x7f0000000080)='tracefs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xfe}}]}}}]}, 0x5c}}, 0x0) 7.406581105s ago: executing program 4 (id=1788): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x20480, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, 0x0) acct(0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0xd, 0x24, &(0x7f0000002240)=ANY=[@ANYRESHEX=r3, @ANYRES16, @ANYRESDEC=r3, @ANYRES32, @ANYRES64, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) syz_usb_connect(0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004280)={0x2020}, 0x2020) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r0, 0x20, &(0x7f0000000640)={0x0, 0x0, 0x0, &(0x7f0000032680)=""/4096, 0x1000}}, 0x10) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x82000, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000f40)=""/4096, 0x1000) 6.783323167s ago: executing program 1 (id=1791): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x200000000000019d, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) io_setup(0x3ff, &(0x7f0000000000)=0x0) io_submit(r1, 0x2, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) lsetxattr$security_selinux(&(0x7f0000000080)='.\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:systemd_logger_exec_t:s0\x00', 0x2b, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000380), 0x5, 0x300) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000003c0)={0x9f, 0x4, {r0}, {0xffffffffffffffff}, 0xf4a6, 0x1}) syz_emit_vhci(&(0x7f0000000980)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc9, 0x82}}}, 0x7) fsopen(&(0x7f00000001c0)='pstore\x00', 0x1) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000180)='debugfs\x00', 0x2200003, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1) r7 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x800) getsockname$tipc(r7, &(0x7f0000000300)=@name, &(0x7f0000000340)=0x10) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r6, 0x4068aea3, &(0x7f0000000080)={0xce, 0x0, r6}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r8, 0x112, 0xe, 0x0, &(0x7f0000000080)) r9 = socket$inet6_sctp(0xa, 0x0, 0x84) dup(r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 5.965922302s ago: executing program 4 (id=1794): socket(0x2d, 0x2, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05000000000000000000210000000800", @ANYRES32=r3, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000043fa1636aba9415c2af067c92f15fe133ed378470ccbc51ec64b71948ef916c1c1fa36606ab8ee6ffaf67b3854e24c9de3f2edf270a8d5401ee39c8e", @ANYRES64=r0, @ANYBLOB], 0x44}}, 0x0) 5.734237865s ago: executing program 1 (id=1796): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000080)={0x8, 0x2, 0x7}) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf", @ANYRESOCT=0x0], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000480)=""/82, 0x52, 0x0) socket(0xb, 0x2, 0xd) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000010000050001"], 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x4014) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000000010401013100000000000000"], 0x24}}, 0x0) close(0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002e80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000ec", @ANYRES16=r6, @ANYBLOB="01002abd3000fddbdf25070000000a0004007770616e33000000080005000000000008000500000000000800010000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4048044}, 0x24004014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="46c8d809d1a7e6b5a88d54000000", @ANYRES16=r9, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000100000000000000000d0001007564703a73797a3000000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r9, 0x1, 0xfffffffe, 0x10000, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5.687501033s ago: executing program 4 (id=1797): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000080)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000001f80), 0x1, 0x0) write(r1, &(0x7f0000001fc0)="1322dd809a890ec18f984875887850c810c1782cf30a07c1d3b3cf3ba59b8fc3ca1ca894d0316441d993e6b9541eb41f18478c1d854a612640ec17ac49c16e30383518af40820450adc4f8575b42f570d74495149281d5b58e0c17f0066af5eaf818a75c47eda14cab67adc6959272bc9588e848a7c0c40df6a9478f1504d3fbf5f4eb7800", 0x85) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d484"], 0x340a) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r5, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r6, r5, 0x0, 0x578410eb) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 5.157225356s ago: executing program 0 (id=1801): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206050000000500040000000000090028010000c6958d72cdc7dc634726000c00078005001500000000000500050002000000050001000600000016000300686173683a6e65742c706f72742c6e00"/92], 0x5c}}, 0x0) getpid() close(0x3) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f041}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$vsock(0xffffffffffffff9c, 0x0, 0x125801, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc0b01, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000100)=0x200241, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) close(0x3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) r4 = syz_socket_connect_nvme_tcp() close(r4) openat$drirender128(0xffffffffffffff9c, 0x0, 0x440001, 0x0) 4.656096169s ago: executing program 0 (id=1804): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x2b9, &(0x7f0000000100)={0x0, 0x1c2a, 0x10100, 0x0, 0x400000, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r8, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) 4.605728793s ago: executing program 2 (id=1805): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) getpid() r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8fffdffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="000000000000f3ffb704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r8, 0x0, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44010) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) sendmsg$inet6(r9, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 4.358950444s ago: executing program 4 (id=1806): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af8ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f000feffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa0040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61", 0x72}], 0x1}], 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) read$msr(0xffffffffffffffff, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x18, 0x20000227, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 3.247162993s ago: executing program 4 (id=1807): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={@empty, 0x1a, r5}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff85000000ae000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff85000000ae000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0), 0x281, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000500)={0x0, 0x3, 0xd1, 0x3e}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000002060100000000060000001d810000000e0003006269746d61703a697000000005000400000000000900020073797a30000000001800078005000300230000000c000180080001400a01010205000500020000000500010006000000"], 0x60}}, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6(0xa, 0x3, 0x3c) (async) r8 = socket$inet6(0xa, 0x3, 0x3c) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10a900, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) (async) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r10, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r10, 0x400454cb, 0x3) close(0x3) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="ed8939d3e9a475201421afe14dce8e7fdb5dca6d27e352da59b06578e9e10560ba870e3f381e26d229f8ae56dede020fa8213df5cf8f9a772b", 0x39}, {&(0x7f0000000540)="169021be73cd7fdeaaecc11073d0b9150f08ef4875744456a9181f77c6484cce9f7fe28ba2ef2dbea4a29f33f2e35bf4b6f8ad0bd892e28c871dc0768034c82bae5062b5ebb3efb875c9d2913684215790fed950ae71f47b84f9585bb7ae233275954090317348b04e50d845e09c371d85117e0b82dc101d5d5a2e3aee619329aad24587916b1cd59ea6320e518c5289c5658da26d9f6f14d2ae7422841669", 0x9f}, {&(0x7f0000000140)="b1a917e0db9368f8df08e76852e95ed6a9999bc98549da76ba49e765da701aaa19355d2b62f562d6646d42090c561982f9cc0c2e3a75bd54257c28a4901a333e8340bfb178cfcd8df2f71a6c68daab69d65f2c7e56cdd769ed86123ff49333489d4bb9cf0ca7286679554b34656a975196c35e16", 0x74}, {&(0x7f0000000600)="8ff13fbd23ee8336360ee984bc8d58a06bb38b56a066e853a9bfeecbd06bf0992d843240325ea4cc78c0c65187badcc5838bb53dc13297c9b8da086866564ced98295f38107ff8c6abd44c2eb88ffb9e5fb9c0c0cc9d166e8448a941cd877466d47ea6f47f4b4bf7664fc623abaea21a17434ab1126ced668498ca7d860a1f3bd1", 0x81}, {&(0x7f0000000200)="29d5d91e2105ea1fce7a539318e0fca1df8d7f6bd84f2a06731f17572d4b67c98e1bdeb0dd656dadc315199c8eecc6e2c394f786a1c24e3743dc9cdd", 0x3c}, {&(0x7f0000000380)="860fbcd26ccd74289f0be4ea92e319e36935a9241633da9027ac4d0f23504cc61ad702d6ad9e64263920cf0903cf2541dc53364996", 0x35}], 0x6) 3.105642159s ago: executing program 2 (id=1808): r0 = socket$inet(0x2, 0x3, 0x4) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x10) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000040), 0x95) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff5f2624e908b2e6a832261431b850ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe8800000000000000000000000002b38f004e0000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000280)={&(0x7f00000002c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x0, 0xc0c0c0c0}) recvmmsg(r5, 0x0, 0x0, 0x122, 0x0) shutdown(r5, 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x119) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f", 0x6c, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190001090000000020000000021800000002fd010000000008000100ac141400100016800c00018008000100", @ANYRES32, @ANYBLOB="08001e00af3900000600150004000000cd43cdfb859626bc880f03af8842f4fe90c7cadfdfa70af69a6070b8e71b360d666dc89fbb6605e3dc5c68f7f61a37777c6a73a2607b7ba458a23fc2d4c299e051fc29917412ce5c46430f8cdec617e74d3ced0c95899e4271669559155d35cd83718fe65b80d207045051efe1c7aa2771e123ce4a3d810fbe273ef055e8e0c73e11c9275d160d0e9aca35a00ce94c81fe1afe31f8c032e3bb04d16802966abbe545ae8694a5f3059b9cf6cc102d722334"], 0x44}}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x8000) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x622, @multicast2}, 0x10) 3.104294896s ago: executing program 0 (id=1809): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 3.079982261s ago: executing program 0 (id=1810): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x2, 0x3, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 2.74517219s ago: executing program 0 (id=1811): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x2, 0x3, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 2.540200332s ago: executing program 3 (id=1812): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040)={0x3, 0x4}, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xe01, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000001, 0x0, 0xffffffffffffffff}]}) 2.226056079s ago: executing program 3 (id=1813): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d80762ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x80000001, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r2, 0x932, 0x200000000005) 2.176186357s ago: executing program 3 (id=1814): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f00000000c0), 0x1003) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r3, 0x4002f516, &(0x7f0000000000)={0xd, 0x7f}) 1.997091322s ago: executing program 2 (id=1815): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0xcc, "41018bfed8fc10a5008e6cdac75e782a3094ff2537bafd901131b976b02f81454b4d6e8dec87ae5068ce39ca613db8d415f854be06a2d35ffbb5ab765ed27b8964b635d45016376789df33b4e4580f08a7e5492898b1c6a700e9bbd22443fa9257fadc980bc5ad7b5412bb9accf30571eca7b0ef6987a5e7d6a860c57b43a27ee8c672ff9f8e676e1e38fa1c42afb982e11959b1a835c5600ed10975cb88c2c6a966f36499d49e35c52fc5780b22451fc339318576a6f78c88493b5c72c375424e143e8dc04c64b52725e4e5"}, &(0x7f0000000100)=0xd4) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r1, 0x3, 0x10}, 0xc) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f00000001c0)="8710486f318fd88255f543b1fb124eede8c9fa8204233d41189a3632bcc616b74235e547b59e824a25828d2789d0d396445459b99bb8c6a9af48722b33511c4ba9287c4ded43cb63cc29477dd5103bc4228ecdc60a229a3489c5995c90ce948e95ece059abc452df3418269494cd2463ec8a11b797f55e0917eba0c89dbbbb07a300b3a8f3c25a3f327f1f69e561e0a84eda79a015cc9539c8248891004dd3abb508aeda32fdb24434b79e236a1999e4760a22a8f3739fe4da33c76dfd992644eab74d7cbc1c4d108a8d5774eb17e8591ba4689aa964768235a7fa19c8f223e950a9cd311ea6caaf86ac75", 0xeb}, {&(0x7f00000002c0)="47d50d2e84ac1156a478ce3fcb423e1d64178ec0d9930471432464f7e16cc3bb6211c6a1b8", 0x25}, {&(0x7f0000000300)="b0735f63719eeefe5a5cb86ab10abbe25ee54e14eee69cc9155a28571610c1727be1ca29f96324b0f1c5d5cc65859d12272232f908879253a402c4074744a70a950e24b8d0388fc0e8c805122205314e93c1542c55081d1298f6230eed74bc47a1", 0x61}, {&(0x7f0000000380)}, {&(0x7f00000003c0)="93a62173918aa02472bcbc81411c35c7c3f275043312e46169738ac178cb6cd8", 0x20}], 0x5) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x4400, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000004c0)={0x4, 0x4, {}, {0xee00}, 0x4, 0x9}) r4 = request_key(&(0x7f0000000500)='big_key\x00', &(0x7f0000000540)={'syz', 0x0}, &(0x7f0000000580)='/dev/virtual_nci\x00', 0xfffffffffffffffc) keyctl$get_persistent(0x16, r3, r4) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000005c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r6, 0xc0086442, &(0x7f0000000600)) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000640)={0x30000, 0x100000, 0x1}) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000b00)={'syztnl1\x00', &(0x7f0000000a80)={'syztnl0\x00', 0x0, 0x29, 0xfd, 0x4, 0x0, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x8000, 0x720, 0x1, 0x10000}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000027c0)={'ip6_vti0\x00', &(0x7f0000002740)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x7, 0xffffffff, 0x60, @dev={0xfe, 0x80, '\x00', 0x1a}, @empty, 0x8, 0x7, 0x9, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000002940)={'syztnl2\x00', &(0x7f0000002800)={'sit0\x00', 0x0, 0x8, 0x80, 0x10, 0x4, {{0x47, 0x4, 0x1, 0x8, 0x11c, 0x64, 0x0, 0x8, 0x2f, 0x0, @multicast1, @rand_addr=0x64010101, {[@end, @ssrr={0x89, 0x7, 0xa5, [@local]}, @timestamp_addr={0x44, 0x44, 0xa2, 0x1, 0x4, [{@multicast2, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x80000000}, {@loopback, 0x10}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x40}, {@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x2ef7}, {@broadcast, 0x81}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x7}]}, @cipso={0x86, 0x56, 0x1, [{0x0, 0xd, "41939a6f0cc81afb39805b"}, {0x5, 0xd, "c63d0ed0f971d0a7206712"}, {0x7, 0x12, "6d21585ff50aa257d7e8e577fbf8e1e8"}, {0x2, 0x4, "24a9"}, {0x1, 0xf, "379ac0738834d2d2c501ecaf45"}, {0x6, 0x11, "363756fb6b8ab17acb6bfdf64ef0c5"}]}, @timestamp={0x44, 0x10, 0xd9, 0x0, 0x9, [0x1, 0x101, 0x8]}, @generic={0x86, 0xd, "d1dc1aba25da1e9ed9c43d"}, @cipso={0x86, 0x30, 0xffffffffffffffff, [{0x0, 0xb, "d1772374eff5955a53"}, {0x0, 0xe, "7377cb992bdcf29628df1f43"}, {0x2, 0x11, "fb9e3fbe2e284c1999b3e30063acbd"}]}, @ra={0x94, 0x4}, @generic={0x89, 0x12, "829f03217f02e89c0d1a1334ba7f04a2"}]}}}}}) sendmmsg$inet(r8, &(0x7f0000002dc0)=[{{&(0x7f0000000680)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000a00)=[{&(0x7f00000006c0)="6f8fac5c8a5e11ce34cadb2c0855a2123f91c617e728e4f9f32aeb76cc4b2659ea1c6c05f46d4f87e4", 0x29}, {&(0x7f0000000700)="818100272dcc40b308f5a17c133770f624644d6b7414b7998bf9c94e7a4de8625f6eaf28d8888f9de653b0227da2563b2d942bf73ab16fe394ab7968732dd5d8be3aabf992ce73102b86cab4312c718881360f46eb7df98d103895ef9d6311b43d11b272442857c5f028ff56ef6e3ae05f25403046137487f8be1e7ec334b0512b6b8bc7eb8ac7593ea08c5f48816fdb1796104d7f8ca27bb399f09cf45d", 0x9e}, {&(0x7f00000007c0)="7711a110c7dbced074ed286c009791438a9093981f3024fbd43789a2c38b0071bf54", 0x22}, {&(0x7f0000000800)="df15082016105fc905cecc5109da85f4ed4e740558caa53a663b430b50088754dec04b71fbdbe48ef233421816158e205cf0104a4c94eab900b8", 0x3a}, {&(0x7f0000000840)="38810d4e660d7bffa32ce7d3a3e5c6290bbd3bf0f88441846265dc3d831929969bff3568e4ee9316dbe77070f74fd32af7c96ce28ff80f7343c99e15e8c6ceb99eb4f732b1ffc9733c5ae83209eba39c146d1d90ebdc975e3d02998310cbc910ef74bf6e96c6901d534213e226b8a1975bcec9e815e145803ec0a08a18746101e8883e065762a57545b19a3f420962a21a077c96e43e90f21083f68805d592ec547ee9144a0f5563a8f9a0ecfd299809f4c31e18df630cca77ec423c13de0031bf2cec508045e07027503da07acf1c5cce0fe5210bb6507f3f6496780135b45a134758ad6d761ed6cb", 0xe9}, {&(0x7f0000000940)="ab2f3e51685daaae6f234e962664464dd0b27e0dbd777350edea7c88f7912a512b073c27ffb39e3303b96378b6e258fae01a5e9aa998a83f5863508c620f366e3d184053052aab91f34200624ba6c39c784cf2e669899083c9b7dc08666eb415e234ec28a3ba21fc271e4f51574bf586b48bebcbc9e1add098e17d147274738fa774183584042c58fa8f8fdf97a12b", 0x8f}], 0x6, &(0x7f0000000b40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x81}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0x74, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x8a, 0x1, 0xc, [{@loopback, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}, @lsrr={0x83, 0x17, 0x75, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @broadcast, @empty]}, @generic={0xc5, 0xd, "09870aa31df27d3f1e996c"}, @ssrr={0x89, 0xf, 0x3b, [@multicast2, @loopback, @broadcast]}, @timestamp_addr={0x44, 0x14, 0x73, 0x1, 0x1, [{@multicast2, 0x80000000}, {@empty, 0x400}]}, @end, @lsrr={0x83, 0x7, 0x93, [@multicast2]}]}}}], 0xe8}}, {{&(0x7f0000000c40)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000c80)="c94647bdc00449d34cd44d97400e3db5a0f88714ee320ccba737d8170530c54e88a1225a713f97fd3907b8b6d9f7d5efb4aa10ce9b43982e8875ebc5efbb7cf19d5233be49d94822849980c3b434e3b56a0fb56a150379492c", 0x59}, {&(0x7f0000000d00)="4818dc8bae886245630eb6908c023e922d28de2b324956685b98f9e0472a1d265b9d6a8ca30fd86ff8e85b7b8b3780784af46dd234875bd82c22a1ef9ad2a68508788f2bfb64408e2669a85d9f207fe8dad36b109cfb021d7199742d5c1cd848e30c416d1bd4d4d539feb3cb155e8f30442a09a567c8efb0bcee10e82410dedf", 0x80}, {&(0x7f0000000d80)="47f0f11189a38b6fb8fb28e824608fa53be64244e6b2d8348eaf09f82e2ff3c870b6cd635e585a1b4b6de2ab76231247e86e3bbaba4d67796208d1d97aef3a9dcd94379ab28b2fc67494171b367ed49857b686", 0x53}, {&(0x7f0000000e00)="2aeb375775a1b0d874fab1fd9d1d96419ac04d8bbe5f6652b0268535c28f283c53162cfb5d6bf83ad9b788fa6b1bc0bf3e1355547a", 0x35}, {&(0x7f0000000e40)="51203fee686f8969ff46d5c104d4de057767428a65a557f6277d54c48f83f464bb49ac3c6bd0ace18980a17d65d76a4cabfbd48effb06128de44e1cffc02dffe875ba0a1ff8b3b66b7c4ec6f45fd278026958d17c7b61f473584d03b9c566bfc1f2f11e1f4", 0x65}], 0x5, &(0x7f0000000f40)=[@ip_retopts={{0x134, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x44, 0x1f, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@private=0xa010102, 0x9}, {@remote, 0x8}, {@multicast2, 0x4}, {@broadcast, 0x8d4}, {@remote, 0x1}, {@empty, 0x4}, {@multicast2, 0x101}]}, @end, @end, @end, @ssrr={0x89, 0x2b, 0x8e, [@broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x26}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x39}, @dev={0xac, 0x14, 0x14, 0x1a}, @multicast1]}, @timestamp={0x44, 0x28, 0x51, 0x0, 0x0, [0x9, 0x2b43, 0x6, 0x1ff, 0x9, 0xffffffff, 0x1000000, 0x2, 0x92]}, @timestamp_prespec={0x44, 0x34, 0xf8, 0x3, 0xe, [{@broadcast, 0xfffffff8}, {@rand_addr=0x64010102, 0x4}, {@empty, 0xffffe711}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xbcc}, {@private=0xa010101, 0xea7}]}, @lsrr={0x83, 0x1f, 0xfa, [@local, @rand_addr=0x64010101, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x2f}, @remote]}, @rr={0x7, 0x23, 0xe6, [@local, @rand_addr=0x64010101, @remote, @multicast1, @loopback, @local, @loopback, @broadcast]}, @timestamp_prespec={0x44, 0x14, 0x94, 0x3, 0x4, [{@remote, 0x657}, {@dev={0xac, 0x14, 0x14, 0x29}, 0xbc4c62e7}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xba1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x138, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0x6a, [@empty, @multicast1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @cipso={0x86, 0x29, 0xffffffffffffffff, [{0x5, 0x7, "f80bb43854"}, {0xc, 0x7, "e2a98f9866"}, {0x1, 0xd, "636557b85cd1ff03290478"}, {0x1, 0x8, "18190272988e"}]}, @end, @generic={0x88, 0xf, "a2b8a1dd2d7dc626383595d95b"}, @timestamp_prespec={0x44, 0x54, 0x2f, 0x3, 0x4, [{@empty, 0x4}, {@multicast1, 0x7fffffff}, {@loopback, 0x3}, {@rand_addr=0x64010100, 0x40}, {@remote, 0x6}, {@private=0xa010102, 0x2}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x3ff}, {@empty, 0xdc76}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@local, 0x80000001}]}, @generic={0x94, 0xe, "89f2491672c4721b2520795f"}, @timestamp_addr={0x44, 0x4c, 0xc4, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x2}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@rand_addr=0x8000, 0x5}, {@dev={0xac, 0x14, 0x14, 0x31}, 0xa531}, {@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x3}, {@private=0xa010101, 0x655}, {@rand_addr=0x64010102, 0x6}, {@empty, 0x16}]}, @end, @timestamp={0x44, 0x28, 0x4e, 0x0, 0x4, [0x7, 0x49, 0x7, 0x7, 0x6, 0x6365, 0xe, 0xfff, 0x5]}]}}}], 0x2a0}}, {{&(0x7f0000001200)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000001240)="05ff778b376c867e1f9c9365c875010368102a420a5d995ec36a8f18cd70f3e3eeee37fa6070a680136389e8e4733d44542e6705b8f2098d", 0x38}, {&(0x7f0000001280)="0908ee2b044f56177369", 0xa}], 0x2}}, {{&(0x7f0000001300)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f00000026c0)=[{&(0x7f0000001340)="cd2d3a25f9fe4caca04fc0f58b96", 0xe}, {&(0x7f0000001380)="681ec763b2004e66bfeecf141afd500677b4230b2a2ff3361f621c4c7650a7f98b7f848ff1eb9803c2eeb5020cecfa0aa5f3b897f6966bd6c63333b53b39a11f183e55125d44af35ac042d0d8ceda88f91f25f5f2d850ce63e0750afa49332466d8e99a9d69abd92700188a05816d670fbe4a2efce7b88c52a8cddebaed7e5e3b03c4da050c65b32162926d12d37c97811373e88b45d7b3cfc7d", 0x9a}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="55a609e936e64421914fbaec2417972ff9a6e4ce6ef59a2865daa9ef7c7c2944c6dfe2a3493d5706518603afb7a4161e69afd0a9b3dfff1fd382883bb967da51341c4fe7308ea6ce954c594494e3c5da70e2feadc952a71eb6974d52f91427adea42c67161df66147a28952893fdd4787dd25423ae1a600f1eb6c8541a92b6aac060d91ed47f1935cc53db0767b3a107b739a9cc2a51fec78ec444e5d7935d2777573a9fee704ab6fb26a31f5993f0bbded6fcadf1e434834e1551429e1c2094ab03969bea27bc66e59a54c8ea9684b5ed1d2a429166e877200f6b98b0386abec6dde8e1daca96", 0xe7}, {&(0x7f0000002540)="cfc0326186b1178a3b9f7c5820e00cd7950722b2bd71001af523d77d639054e96c2ab9722e8832f71d7f123673c5cb36ab329c", 0x33}, {&(0x7f0000002580)="bda34f669d3e62ddc47fffd366dcc3d828e9a5eebc86f678c9cea4eb037040e4faa14e148b7182dadbc3f705", 0x2c}, {&(0x7f00000025c0)="c69878a58e808409ea5a2a62c80e554cb1e8ae9f5a2c2fea203861207fcd33e6bd04cbf6c582988b019b20fbf151e949816bb3ef397981b32c8ca7f830746b90857dc6369f56e9e95744b45e90d30b160f8b64bd1dda325ff2a1028b3863a71c1a0aa2727f2aadcfa83f6508b7038dbc321e273e7abbbf28468f4fcf8c651f269804a8f73942487c64c1e17e96415bcd7baabf43ca7d1b59ae0a51d55ddedc83b31445d80ffca99867c2d7d877c462f52296c07b1bc838f5685936e360ff04b0a673bb9e03eb9d42f6b021", 0xcb}], 0x7, &(0x7f0000002980)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @loopback, @private=0xa010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_retopts={{0x50, 0x0, 0x7, {[@generic={0x94, 0xc, "cdae672efdb87ea39df8"}, @noop, @timestamp={0x44, 0x8, 0xa7, 0x0, 0x9, [0x3]}, @end, @end, @generic={0x94, 0x4, "d1d4"}, @cipso={0x86, 0x25, 0x462977b5537ada03, [{0x6, 0xf, "ce47fc58a3ea1e1ccae6f8ddc6"}, {0x0, 0x4, "e9e6"}, {0x1, 0xc, "6d1b7be3e8734f36acf1"}]}]}}}, @ip_retopts={{0xdc, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0x5e, 0x1, 0x0, [{@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@rand_addr=0x64010102, 0x4}, {@remote, 0x80000001}, {@broadcast, 0x9}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x3b}}]}, @timestamp_addr={0x44, 0x44, 0x7c, 0x1, 0xa, [{@broadcast}, {@local, 0x2}, {@rand_addr=0x64010100, 0x3}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote, 0x3}, {@multicast2, 0xfd}, {@broadcast, 0x9}]}, @timestamp_prespec={0x44, 0x44, 0xbb, 0x3, 0x1, [{@remote, 0xff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@broadcast, 0xff}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x7fffffff}, {@loopback, 0xff}, {@broadcast, 0x9}, {@local, 0xffffffff}, {@broadcast, 0x400}]}, @ssrr={0x89, 0x7, 0x5d, [@rand_addr=0x64010101]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @loopback, @private=0xa010102}}}], 0x1b8}}, {{&(0x7f0000002b40)={0x2, 0x7f, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f0000002bc0)=[{&(0x7f0000002b80)}], 0x1, &(0x7f0000002c00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x62}}, @ip_retopts={{0x50, 0x0, 0x7, {[@generic={0x82, 0x2}, @timestamp={0x44, 0x18, 0xd0, 0x0, 0x0, [0x7, 0x5, 0xff, 0xfffffff7, 0x8]}, @end, @timestamp={0x44, 0x18, 0x66, 0x0, 0x3, [0x8, 0xfffff92e, 0x8001, 0x3, 0x0]}, @end, @lsrr={0x83, 0xb, 0x37, [@multicast2, @multicast1]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x50, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0x87, 0x0, 0xe, [0x84d0, 0xed2e, 0x8, 0x0]}, @timestamp_addr={0x44, 0x2c, 0x8d, 0x1, 0x9, [{@broadcast, 0x8}, {@multicast2, 0x5}, {@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@private=0xa010100, 0xfff}]}]}}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@generic={0x86, 0x8, "29011e66999e"}, @cipso={0x86, 0x1e, 0x2, [{0x5, 0xd, "4e81aa769d236a14e2a702"}, {0x5, 0xb, "eab018894952344503"}]}, @timestamp_addr={0x44, 0x1c, 0x36, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffe23}, {@broadcast, 0x3}, {@empty, 0xc}]}, @cipso={0x86, 0xc, 0x3, [{0x0, 0x6, "e2e73508"}]}, @cipso={0x86, 0x2c, 0xfffffffffffffffc, [{0x5, 0xd, "bd1d766a9600b622ca8dc2"}, {0x6, 0x7, "d9d6847de5"}, {0x2, 0x12, "14becde9ca2e03de40904fd615bf7654"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x1a8}}], 0x5, 0x44005) mount$overlay(0x0, &(0x7f0000002f00)='./file0\x00', &(0x7f0000002f40), 0x2040020, &(0x7f0000002f80)={[{@workdir={'workdir', 0x3d, './file0'}}], [{@fowner_gt={'fowner>', r3}}, {@obj_role={'obj_role', 0x3d, 'syztnl0\x00'}}, {@appraise}, {@subj_role={'subj_role', 0x3d, '*#('}}, {@uid_gt={'uid>', r3}}]}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000003000)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) mq_timedsend(r12, &(0x7f0000003040)="c643d988bee26c2685d92dd729547447d134082a6c391cfa87050d8d6035df3a98ab654e5d60a226749989222d29eb41fb77fd1655a2b62c13b3e0adacd49834d4945750d11a280a5627561457f8dd504828536e966ac9fa772f8ed2bc8d26113e295a803d2610e6b694b28c136dbb66d911a0f6dd9f7da94aaede5522258a017b22d27bbdd377671dd6009cea5839504a3315562582048bf75e0f6411c99b2e0f2aa9be8457152895bd79ecf1aa641461", 0xb1, 0x9e66, &(0x7f0000003100)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000031c0)={'sit0\x00', &(0x7f0000003140)={@broadcast, 0x0, 0x0, 0x60, 0x0, [{@broadcast}, {@multicast1}, {@dev}, {}, {@dev}, {@initdev}]}}) splice(r5, &(0x7f0000003200)=0x4, r7, &(0x7f0000003240)=0x9, 0x7, 0x9) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000032c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r12, &(0x7f0000003480)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003440)={&(0x7f0000003300)={0x128, r13, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_STRSET_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x43) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r12, 0x13, &(0x7f00000034c0)=[0x4, 0x5], 0x2) setsockopt$RXRPC_SECURITY_KEY(r12, 0x110, 0x1, &(0x7f0000003500)='\x00', 0x1) shmdt(0x0) 770.037208ms ago: executing program 3 (id=1816): lsm_set_self_attr(0x69, &(0x7f00000000c0)={0x65, 0x1, 0x20}, 0x20, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, &(0x7f0000000340)=""/131, &(0x7f0000000100)=0x83) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video(&(0x7f0000000140), 0x1, 0x200) r1 = syz_usb_connect(0x2, 0x3d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x5f, 0xfc, 0x70, 0x20, 0x711, 0x210, 0xfdd6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8b, 0x0, 0x2, 0xbe, 0x44, 0x8f, 0xff, [], [{{0x9, 0x5, 0x80, 0x2, 0x3ff, 0x9, 0xf, 0x5, [@generic={0x7, 0x5, "bdf74e3781"}]}}, {{0x9, 0x5, 0x8b, 0x3, 0x40, 0xe, 0x4b, 0x2}}]}}]}}]}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a3000000000050005000000000005000100060000001c00078006000400000000000600054000000000080008", @ANYRES16=r1, @ANYRES32, @ANYRES16], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) 732.232221ms ago: executing program 0 (id=1817): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRES8=r0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000000)=0xffff) gettid() sched_setscheduler(0x0, 0x1, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x50424752, 0x2, @stepwise={0x5, 0xbc, 0x4, 0x766, 0x6, 0x2}}) syz_emit_vhci(&(0x7f0000001880)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x9) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f000001b040)={0x6, 0x7, 'syz0\x00'}, &(0x7f000001b000)=0x28) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x6, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f00000001c0)={0x0, r6}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000340)={@dev={0xfe, 0x80, '\x00', 0x31}, @loopback, @private2, 0x6, 0xa, 0x0, 0x100, 0xffffffffffffffff, 0x2480187, r2}) lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_default\x00', &(0x7f00000002c0)=""/181, 0xb5) 661.570269ms ago: executing program 2 (id=1818): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x18, 0x0, 0x1) accept4$ax25(r1, 0x0, 0x0, 0x800) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r8) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002ebd7000c8dbdf252100000008000300", @ANYRES32=r9, @ANYBLOB="3c002d800800030007000000080002000300000005000400010000000500"], 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3da613f791a4169e45369e465fd9ecf7567fe3f8ed2745fd8e3a80781dd4778bd20b7a83f7c0c5ae2b52cac7836a95a8ff5bb0fd5bbdea18fe54bb8c39ab3d16236ac3b15af48d8477d38142bd2d2b4246062e9cbb2b0210e9e1e3c261bc75ec7d670a258cc320204b85b66ea0366c01e93b1a70cb4839d5b0c561a97d4d9528b6a1bf717ff7bca8151a9505988f30650e5fe8cd5f4f238ef2d2d4657eae20ad67f1c9bd9539f1fd604dafe38efb4d216bd59d45979698c962e723a127d5d43d50f1d585e395abbf2ad7bb9f3c59023f18408a612b52031a3ecd34fa587e812a49a9d816a97f1b9ab6c728ac9fb84ce320", @ANYRES16=0x0, @ANYBLOB="020026bd7000fedbdf251400000008000300", @ANYRES32=r5, @ANYBLOB="08001d00", @ANYRES32, @ANYRES32=r2, @ANYRES32=r6, @ANYBLOB="0c00060003000000000000000c00060003000000000000000c000600020000000300000008000300", @ANYRES32=r9, @ANYBLOB="080001000200000008000100030000000c0006000200000002000000"], 0x74}, 0x1, 0x0, 0x0, 0x2004c810}, 0xc016) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x14, r13, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, 0x0, 0x0) 584.085248ms ago: executing program 2 (id=1819): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000040), 0x0, 0x4430) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) (async) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x3}], 0x1, 0x40800) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = socket(0x2, 0x3, 0xff) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) r7 = timerfd_create(0x8, 0x0) timerfd_settime(r7, 0x3, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) timerfd_settime(r7, 0x0, &(0x7f00000000c0)={{0x77359400}}, 0x0) (async) sendfile(r6, r3, 0x0, 0xffba83) 435.492765ms ago: executing program 2 (id=1820): syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) (async) r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$kcm(0x10, 0x2, 0x0) r1 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x20007, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/oops_count', 0x8a883, 0x2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r6 = gettid() tkill(r6, 0xb) (async) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c01020301090224000101"], 0x0) (async) lseek(r7, 0x8c0b, 0x3) (async) close(0x3) 168.40878ms ago: executing program 3 (id=1821): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0/file0\x00', 0x42, 0x140) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) socket$inet_udp(0x2, 0x2, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 72.084091ms ago: executing program 4 (id=1822): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x95) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff5f2624e908b2e6a832261431b850ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe8800000000000000000000000002b38f004e0000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f00000001c0), &(0x7f0000000200), 0x0, 0x0, 0xc0c0c0c0}) shutdown(r4, 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x119) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f", 0x6c, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190001090000000020000000021800000002fd010000000008000100ac141400100016800c000180080001", @ANYBLOB="08001e00af3900000600150004000000cd43cdfb859626bc880f03af8842f4fe90c7cadfdfa70af69a6070b8e71b360d666dc89fbb6605e3dc5c68f7f61a37777c6a73a2607b7ba458a23fc2d4c299e051fc29917412ce5c46430f8cdec617e74d3ced0c95899e4271669559155d35cd83718fe65b80d207045051efe1c7aa2771e123ce4a3d810fbe273ef055e8e0c73e11c9275d160d0e9aca35a00ce94c81fe1afe31f8c032e3bb04d16802966abbe545ae86"], 0x44}}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x8000) sendmsg$inet(r0, 0x0, 0x30004084) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r8) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x44, r9, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 0s ago: executing program 3 (id=1823): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_tgsigqueueinfo(r0, r0, 0xe, &(0x7f0000000240)={0x6, 0xffffffff, 0xa7}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) capset(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000380)=0x5, 0x4) r7 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x14, 0x69, 0x0, 0x2, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x25}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100"/16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) kernel console output (not intermixed with test programs): [ T7749] usb 2-1: Using ep0 maxpacket: 32 [ 318.311701][ T7749] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 318.320258][ T7749] usb 2-1: config 0 has no interface number 0 [ 318.333697][ T7749] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 318.352913][ T7749] usb 2-1: config 0 interface 89 has no altsetting 0 [ 318.376556][ T7749] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 318.387706][ T7749] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.400067][ T7749] usb 2-1: Product: syz [ 318.405431][ T7749] usb 2-1: Manufacturer: syz [ 318.410540][ T7749] usb 2-1: SerialNumber: syz [ 318.428332][ T7749] usb 2-1: config 0 descriptor?? [ 318.439364][ T7749] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 318.449621][ T7749] em28xx 2-1:0.89: Video interface 89 found: [ 318.490204][T10099] FAULT_INJECTION: forcing a failure. [ 318.490204][T10099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.506285][ T7735] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 318.529257][T10099] CPU: 1 UID: 0 PID: 10099 Comm: syz.0.1191 Tainted: G L syzkaller #0 PREEMPT(full) [ 318.529289][T10099] Tainted: [L]=SOFTLOCKUP [ 318.529295][T10099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 318.529306][T10099] Call Trace: [ 318.529312][T10099] [ 318.529318][T10099] dump_stack_lvl+0x100/0x190 [ 318.529351][T10099] should_fail_ex.cold+0x5/0xa [ 318.529374][T10099] _copy_from_user+0x2e/0xd0 [ 318.529405][T10099] copy_msghdr_from_user+0x9f/0x4f0 [ 318.529424][T10099] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 318.529453][T10099] ___sys_sendmsg+0x106/0x1e0 [ 318.529471][T10099] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.529517][T10099] __sys_sendmsg+0x170/0x220 [ 318.529538][T10099] ? __pfx___sys_sendmsg+0x10/0x10 [ 318.529574][T10099] do_syscall_64+0x106/0xf80 [ 318.529597][T10099] ? clear_bhb_loop+0x40/0x90 [ 318.529618][T10099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.529636][T10099] RIP: 0033:0x7fa1e139bf79 [ 318.529652][T10099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.529667][T10099] RSP: 002b:00007fa1e218c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.529684][T10099] RAX: ffffffffffffffda RBX: 00007fa1e1615fa0 RCX: 00007fa1e139bf79 [ 318.529695][T10099] RDX: 00000000000080c0 RSI: 0000200000000f00 RDI: 0000000000000004 [ 318.529705][T10099] RBP: 00007fa1e218c090 R08: 0000000000000000 R09: 0000000000000000 [ 318.529715][T10099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.529725][T10099] R13: 00007fa1e1616038 R14: 00007fa1e1615fa0 R15: 00007ffe435f4cb8 [ 318.529749][T10099] [ 318.749852][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 318.749866][ T30] audit: type=1400 audit(1771059799.324:799): avc: denied { create } for pid=10100 comm="syz.4.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 318.777106][ T30] audit: type=1400 audit(1771059799.324:800): avc: denied { write } for pid=10100 comm="syz.4.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 318.798256][ T30] audit: type=1400 audit(1771059799.324:801): avc: denied { ioctl } for pid=10100 comm="syz.4.1192" path="socket:[30516]" dev="sockfs" ino=30516 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 318.803606][ T7735] usb 3-1: Using ep0 maxpacket: 16 [ 318.884891][ T7735] usb 3-1: config 1 has an invalid interface number: 36 but max is 0 [ 318.893012][ T7735] usb 3-1: config 1 has no interface number 0 [ 318.913751][ T7735] usb 3-1: config 1 interface 36 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 318.933826][ T7735] usb 3-1: config 1 interface 36 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 318.954196][ T7735] usb 3-1: config 1 interface 36 has no altsetting 0 [ 318.963039][ T7735] usb 3-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 318.993768][T10109] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1195'. [ 319.004898][ T7735] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.034300][ T8532] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 319.092445][ T7735] usb 3-1: Product: syz [ 319.104402][ T7735] usb 3-1: Manufacturer: syz [ 319.118715][ T7735] usb 3-1: SerialNumber: syz [ 319.136427][T10095] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 319.145437][T10095] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 319.234104][ T7749] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 319.255206][ T8532] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.273653][ T8532] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 319.289348][ T8532] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.305025][ T8532] usb 1-1: config 0 descriptor?? [ 319.368264][T10095] loop9: detected capacity change from 0 to 7 [ 319.537707][ T7749] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 319.717685][ T7749] em28xx 2-1:0.89: board has no eeprom [ 319.760733][T10095] Dev loop9: unable to read RDB block 7 [ 320.150298][T10095] loop9: unable to read partition table [ 320.165529][ T30] audit: type=1400 audit(1771059800.784:802): avc: denied { getopt } for pid=10104 comm="syz.0.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 320.205343][T10095] loop9: partition table beyond EOD, truncated [ 320.212931][ T8532] lg-g15 0003:046D:C222.000E: item fetching failed at offset 6/7 [ 320.222675][ T8532] lg-g15 0003:046D:C222.000E: probe with driver lg-g15 failed with error -22 [ 320.235749][T10095] loop_reread_partitions: partition scan of loop9 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 320.296944][ T7731] usb 1-1: USB disconnect, device number 24 [ 320.313755][ T7749] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 320.321011][ T7749] em28xx 2-1:0.89: analog set to bulk mode. [ 320.369763][ T5867] em28xx 2-1:0.89: Registering V4L2 extension [ 320.404027][ T7749] usb 2-1: USB disconnect, device number 21 [ 320.439375][ T7749] em28xx 2-1:0.89: Disconnecting em28xx [ 320.472104][T10127] bond0: entered promiscuous mode [ 320.488044][ T5867] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 320.501590][T10127] bond_slave_0: entered promiscuous mode [ 320.508522][ T5867] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 320.521831][ T5867] em28xx 2-1:0.89: No AC97 audio processor [ 320.523763][T10127] bond_slave_1: entered promiscuous mode [ 320.543849][T10127] batadv0: entered promiscuous mode [ 320.554903][T10127] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 320.557562][ T5867] usb 2-1: Decoder not found [ 320.565532][T10127] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 320.583658][ T5867] em28xx 2-1:0.89: failed to create media graph [ 320.583907][T10127] hsr1: entered promiscuous mode [ 320.589996][ T5867] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 320.595359][T10127] hsr1: entered allmulticast mode [ 320.613799][T10127] bond0: entered allmulticast mode [ 320.619501][T10127] bond_slave_0: entered allmulticast mode [ 320.623003][ T5867] em28xx 2-1:0.89: Registering snapshot button... [ 320.625579][T10127] bond_slave_1: entered allmulticast mode [ 320.643894][T10127] batadv0: entered allmulticast mode [ 320.649641][T10127] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 320.650904][ T5867] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input22 [ 320.667479][T10127] bond0: left promiscuous mode [ 320.672397][T10127] bond_slave_0: left promiscuous mode [ 320.693144][T10127] bond_slave_1: left promiscuous mode [ 320.703593][ T5867] em28xx 2-1:0.89: Remote control support is not available for this card. [ 320.712249][T10127] batadv0: left promiscuous mode [ 320.712887][ T7749] em28xx 2-1:0.89: Closing input extension [ 320.727579][ T7749] em28xx 2-1:0.89: Deregistering snapshot button [ 320.765032][ T7749] em28xx 2-1:0.89: Freeing device [ 320.984279][ T7735] ums-usbat 3-1:1.36: USB Mass Storage device detected [ 321.323738][ T7749] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 321.414758][ T7735] ums-usbat 3-1:1.36: probe with driver ums-usbat failed with error -5 [ 321.569810][ T7735] usb 3-1: USB disconnect, device number 30 [ 321.608784][ T7749] usb 4-1: Using ep0 maxpacket: 32 [ 321.625266][ T7749] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 321.644920][ T7749] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.659887][ T7749] usb 4-1: config 0 has no interface number 0 [ 321.667688][ T7749] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 321.677896][ T7749] usb 4-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 321.693817][ T7749] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 321.703129][ T7749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.711295][ T7749] usb 4-1: Product: syz [ 321.716797][T10157] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1207'. [ 321.753133][ T7749] usb 4-1: Manufacturer: syz [ 321.782902][ T7749] usb 4-1: SerialNumber: syz [ 321.816687][ T30] audit: type=1400 audit(1771059802.434:803): avc: denied { read } for pid=10155 comm="syz.2.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 321.837720][ T7749] usb 4-1: config 0 descriptor?? [ 321.876773][ T7749] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 321.917617][ T7749] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 321.917665][ T30] audit: type=1400 audit(1771059802.484:804): avc: denied { map } for pid=10155 comm="syz.2.1208" path="socket:[30610]" dev="sockfs" ino=30610 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 322.001375][ T30] audit: type=1400 audit(1771059802.484:805): avc: denied { read } for pid=10155 comm="syz.2.1208" path="socket:[30610]" dev="sockfs" ino=30610 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 322.039503][T10170] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1209'. [ 322.503090][ T30] audit: type=1326 audit(1771059803.114:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10182 comm="syz.1.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc23479bf79 code=0x7ffc0000 [ 322.528301][ T30] audit: type=1326 audit(1771059803.114:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10182 comm="syz.1.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc23479bf79 code=0x7ffc0000 [ 322.558956][ T30] audit: type=1326 audit(1771059803.144:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10182 comm="syz.1.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc23479bf79 code=0x7ffc0000 [ 322.793609][ T7735] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 322.968596][ T7735] usb 2-1: config 0 has an invalid interface number: 87 but max is 0 [ 322.984902][ T7735] usb 2-1: config 0 has no interface number 0 [ 322.991045][ T7735] usb 2-1: config 0 interface 87 has no altsetting 0 [ 323.004807][ T7735] usb 2-1: New USB device found, idVendor=0424, idProduct=cf18, bcdDevice=7d.82 [ 323.023689][ T7735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.035119][ T7735] usb 2-1: Product: syz [ 323.040205][ T7735] usb 2-1: Manufacturer: syz [ 323.044959][ T7735] usb 2-1: SerialNumber: syz [ 323.061008][ T7735] usb 2-1: config 0 descriptor?? [ 323.626269][ T8533] usb 2-1: USB disconnect, device number 22 [ 323.839109][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1222'. [ 323.848761][T10207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1222'. [ 323.857731][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1222'. [ 323.866588][T10207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1222'. [ 323.885635][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 323.885652][ T30] audit: type=1326 audit(1771059804.504:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10182 comm="syz.1.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc23475c84e code=0x7ffc0000 [ 323.953596][ T7735] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 324.019880][ T30] audit: type=1326 audit(1771059804.634:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10182 comm="syz.1.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc23475c84e code=0x7ffc0000 [ 324.071387][ T8533] usb 4-1: USB disconnect, device number 29 [ 324.119765][ T30] audit: type=1326 audit(1771059804.734:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10182 comm="syz.1.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc23475c84e code=0x7ffc0000 [ 324.124927][ T7735] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 324.190592][ T7735] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b [ 324.196184][T10217] fuse: Bad value for 'group_id' [ 324.200551][ T7735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.212803][ T7735] usb 1-1: Product: syz [ 324.213760][T10217] fuse: Bad value for 'group_id' [ 324.219772][ T7735] usb 1-1: Manufacturer: syz [ 324.222730][ T30] audit: type=1326 audit(1771059804.834:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10182 comm="syz.1.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc23479bf79 code=0x7ffc0000 [ 324.302267][T10219] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1225'. [ 324.417044][ T7735] usb 1-1: SerialNumber: syz [ 324.437820][ T7735] usb 1-1: config 0 descriptor?? [ 324.503379][T10225] netlink: 'syz.4.1230': attribute type 1 has an invalid length. [ 324.588036][T10225] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 324.765458][ T7735] usb 1-1: USB disconnect, device number 25 [ 324.829420][ T7430] udevd[7430]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 324.925495][ T30] audit: type=1400 audit(1771059805.544:874): avc: denied { mounton } for pid=10236 comm="syz.2.1227" path="/proc/537/task" dev="proc" ino=31867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 324.977983][T10239] fuse: Invalid rootmode [ 325.303599][ T30] audit: type=1400 audit(1771059805.864:875): avc: denied { setattr } for pid=10236 comm="syz.2.1227" path="socket:[31866]" dev="sockfs" ino=31866 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 325.371653][ T30] audit: type=1400 audit(1771059805.904:876): avc: denied { append } for pid=10243 comm="syz.0.1235" name="sg0" dev="devtmpfs" ino=782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 325.929224][T10264] fuse: Bad value for 'group_id' [ 325.934388][T10264] fuse: Bad value for 'group_id' [ 326.247005][T10271] fuse: Bad value for 'fd' [ 327.347333][T10294] mkiss: ax0: crc mode is auto. [ 327.358678][ T30] audit: type=1400 audit(1771059807.954:877): avc: denied { getopt } for pid=10288 comm="syz.3.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 327.453574][ T30] audit: type=1400 audit(1771059807.964:878): avc: denied { append } for pid=10288 comm="syz.3.1253" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 327.743600][ T7735] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 327.873579][ T7735] usb 2-1: device descriptor read/64, error -71 [ 327.999790][ T30] audit: type=1400 audit(1771059808.604:879): avc: denied { override_creds } for pid=10313 comm="syz.4.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 328.123571][ T7735] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 328.264862][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 328.275951][ T51] CPU: 0 UID: 0 PID: 51 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 328.275987][ T51] Tainted: [L]=SOFTLOCKUP [ 328.275993][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 328.276007][ T51] Workqueue: hci3 hci_rx_work [ 328.276036][ T51] Call Trace: [ 328.276042][ T51] [ 328.276049][ T51] dump_stack_lvl+0x100/0x190 [ 328.276084][ T51] sysfs_warn_dup.cold+0x1c/0x28 [ 328.276110][ T51] sysfs_create_dir_ns+0x24b/0x2b0 [ 328.276128][ T51] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 328.276145][ T51] ? find_held_lock+0x2b/0x80 [ 328.276167][ T51] ? kobject_add_internal+0x25f/0x930 [ 328.276196][ T51] ? kobject_add_internal+0x25f/0x930 [ 328.276228][ T51] ? do_raw_spin_unlock+0x145/0x1e0 [ 328.276248][ T51] kobject_add_internal+0x2c8/0x930 [ 328.276281][ T51] kobject_add+0x16a/0x1e0 [ 328.276309][ T51] ? __pfx_kobject_add+0x10/0x10 [ 328.276335][ T51] ? class_to_subsys+0x10f/0x150 [ 328.276365][ T51] ? kobject_put+0xb9/0x640 [ 328.276389][ T51] ? _raw_spin_unlock+0x28/0x50 [ 328.276419][ T51] device_add+0x294/0x1950 [ 328.276444][ T51] ? __pfx_dev_set_name+0x10/0x10 [ 328.276470][ T51] ? __pfx_device_add+0x10/0x10 [ 328.276491][ T51] ? mgmt_send_event_skb+0x2fb/0x460 [ 328.276518][ T51] hci_conn_add_sysfs+0x1a3/0x260 [ 328.276543][ T51] le_conn_complete_evt+0x11cb/0x1f40 [ 328.276567][ T51] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 328.276593][ T51] hci_le_conn_complete_evt+0x23c/0x3a0 [ 328.276622][ T51] ? skb_pull_data+0x15f/0x1e0 [ 328.276645][ T51] hci_le_meta_evt+0x34a/0x5f0 [ 328.276668][ T51] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 328.276693][ T51] hci_event_packet+0x682/0x11c0 [ 328.276713][ T51] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 328.276736][ T51] ? __pfx_hci_event_packet+0x10/0x10 [ 328.276760][ T51] ? kcov_remote_start+0x374/0x660 [ 328.276780][ T51] ? lockdep_hardirqs_on+0x78/0x100 [ 328.276808][ T51] hci_rx_work+0x451/0xfc0 [ 328.276833][ T51] process_one_work+0x9c2/0x1840 [ 328.276872][ T51] ? __pfx_process_one_work+0x10/0x10 [ 328.276907][ T51] ? __pfx_hci_rx_work+0x10/0x10 [ 328.276932][ T51] worker_thread+0x5da/0xe40 [ 328.276973][ T51] ? kthread+0x13a/0x450 [ 328.276997][ T51] ? __pfx_worker_thread+0x10/0x10 [ 328.277023][ T51] kthread+0x370/0x450 [ 328.277047][ T51] ? __pfx_kthread+0x10/0x10 [ 328.277074][ T51] ret_from_fork+0x754/0xd80 [ 328.277103][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 328.277133][ T51] ? __switch_to+0x7b4/0x10c0 [ 328.277153][ T51] ? __pfx_kthread+0x10/0x10 [ 328.277180][ T51] ret_from_fork_asm+0x1a/0x30 [ 328.277215][ T51] [ 328.277261][ T51] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 328.552907][ T7735] usb 2-1: device descriptor read/64, error -71 [ 328.559334][ T51] Bluetooth: hci3: failed to register connection device [ 328.663786][ T7735] usb usb2-port1: attempt power cycle [ 328.669485][T10332] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 328.676002][T10332] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 328.685283][T10332] vhci_hcd vhci_hcd.0: Device attached [ 328.709279][T10338] fuse: Unknown parameter 'grou00000000000000000000' [ 328.963613][ T8533] usb 33-1: new high-speed USB device number 3 using vhci_hcd [ 329.073672][ T5864] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 329.121666][T10335] vhci_hcd: connection reset by peer [ 329.133851][ T7735] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 329.167203][ T36] vhci_hcd vhci_hcd.0: stop threads [ 329.176579][ T36] vhci_hcd vhci_hcd.0: release socket [ 329.182141][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 329.231352][ T7735] usb 2-1: device descriptor read/8, error -71 [ 329.483649][ T7735] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 329.525435][ T7735] usb 2-1: device descriptor read/8, error -71 [ 329.543587][ T5864] usb 3-1: Using ep0 maxpacket: 16 [ 329.549993][ T5864] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 329.563580][ T5864] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 329.571760][ T5864] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 329.594129][ T5864] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 329.602336][ T5864] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 329.614429][ T5864] usb 3-1: config 0 has no interface number 0 [ 329.620555][ T5864] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 329.631723][ T5864] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 329.644737][ T7735] usb usb2-port1: unable to enumerate USB device [ 329.653584][ T5864] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 329.663431][ T5864] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 329.693618][ T5864] usb 3-1: config 0 interface 125 has no altsetting 0 [ 329.700406][ T5864] usb 3-1: config 0 interface 125 has no altsetting 2 [ 329.709131][ T5864] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 329.723586][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.731578][ T5864] usb 3-1: Product: syz [ 329.741009][ T5864] usb 3-1: Manufacturer: syz [ 329.745738][ T5864] usb 3-1: SerialNumber: syz [ 329.774233][ T5864] usb 3-1: config 0 descriptor?? [ 329.785288][ T5864] usb 3-1: selecting invalid altsetting 2 [ 331.062828][ T5864] get_1284_register timeout [ 331.070427][ C1] usb 3-1: async_complete: urb error -104 [ 331.076271][ C1] usb 3-1: async_complete: urb error -104 [ 331.082061][ C1] usb 3-1: async_complete: urb error -104 [ 331.087844][ C1] usb 3-1: async_complete: urb error -104 [ 331.103664][ T5864] uss720 3-1:0.125: probe with driver uss720 failed with error -5 [ 331.235626][T10379] 9p: Bad value for 'port' [ 331.645757][T10375] syz.0.1274 (10375): drop_caches: 2 [ 331.770045][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 331.770059][ T30] audit: type=1400 audit(1771059811.854:881): avc: denied { mounton } for pid=10372 comm="syz.0.1274" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 331.853648][ T7749] usb 3-1: USB disconnect, device number 31 [ 332.041461][T10387] fuse: Unknown parameter 'grou00000000000000000000' [ 332.224081][ T7735] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 332.285968][T10391] input: syz1 as /devices/virtual/input/input23 [ 332.375988][ T7735] usb 4-1: config 7 has an invalid interface number: 101 but max is 0 [ 332.384720][ T7735] usb 4-1: config 7 has no interface number 0 [ 332.407480][ T7735] usb 4-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 332.427040][ T7735] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.448385][ T7735] usb 4-1: Product: syz [ 332.456406][ T7735] usb 4-1: Manufacturer: syz [ 332.461094][ T7735] usb 4-1: SerialNumber: syz [ 333.096601][T10407] netlink: 'syz.4.1287': attribute type 16 has an invalid length. [ 333.143587][T10407] netlink: 'syz.4.1287': attribute type 17 has an invalid length. [ 333.236189][T10407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.256342][ T7735] as10x_usb: device has been detected [ 333.278084][ T7735] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 333.281544][T10407] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.353689][ T7735] usb 4-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 333.399947][T10407] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 333.515120][T10422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1290'. [ 333.530957][T10422] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1290'. [ 333.556001][T10422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1290'. [ 333.566075][T10422] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1290'. [ 333.625643][ T7735] as10x_usb: error during firmware upload part1 [ 333.717314][ T7735] Registered device Elgato EyeTV DTT Deluxe [ 333.854700][ T7735] usb 4-1: USB disconnect, device number 30 [ 334.008134][T10427] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 334.065869][ T8533] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 334.121347][ T7735] Unregistered device Elgato EyeTV DTT Deluxe [ 334.122943][ T7735] as10x_usb: device has been disconnected [ 334.453607][ T5867] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 334.633573][ T5867] usb 1-1: Using ep0 maxpacket: 8 [ 334.660972][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.682983][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.694361][ T5867] usb 1-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 334.704989][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.719206][ T5867] usb 1-1: config 0 descriptor?? [ 335.779019][T10434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.799628][T10434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.862252][ T30] audit: type=1326 audit(1771059816.474:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10454 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710719bf79 code=0x7ffc0000 [ 335.886911][ T30] audit: type=1326 audit(1771059816.484:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10454 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710719bf79 code=0x7ffc0000 [ 335.915323][ T30] audit: type=1326 audit(1771059816.504:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10454 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f710719bf79 code=0x7ffc0000 [ 335.958017][ T30] audit: type=1326 audit(1771059816.524:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10454 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710719bf79 code=0x7ffc0000 [ 335.973642][ T7719] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 335.982312][ T30] audit: type=1326 audit(1771059816.524:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10454 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710719bf79 code=0x7ffc0000 [ 336.017961][ T30] audit: type=1326 audit(1771059816.534:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10454 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f710719bf79 code=0x7ffc0000 [ 336.048856][ T30] audit: type=1326 audit(1771059816.554:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10454 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710719bf79 code=0x7ffc0000 [ 336.137562][ T30] audit: type=1326 audit(1771059816.554:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10454 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710719bf79 code=0x7ffc0000 [ 336.395620][ T30] audit: type=1326 audit(1771059816.584:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10454 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f710719bf79 code=0x7ffc0000 [ 336.535067][ T7719] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 336.544609][ T7719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.574309][ T7719] usb 4-1: config 0 descriptor?? [ 336.581373][ T7719] cp210x 4-1:0.0: cp210x converter detected [ 337.375307][T10483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=10483 comm=syz.2.1306 [ 337.407737][T10483] /dev/nullb0: Can't open blockdev [ 337.454553][T10482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1303'. [ 337.463772][T10482] bridge_slave_1: left allmulticast mode [ 337.493644][T10482] bridge_slave_1: left promiscuous mode [ 337.499635][T10482] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.634312][T10482] bridge_slave_0: left allmulticast mode [ 337.640338][T10482] bridge_slave_0: left promiscuous mode [ 337.646741][T10482] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.062775][ T3551] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x30 [ 338.284837][T10500] FAULT_INJECTION: forcing a failure. [ 338.284837][T10500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.298264][T10500] CPU: 0 UID: 0 PID: 10500 Comm: syz.1.1311 Tainted: G L syzkaller #0 PREEMPT(full) [ 338.298291][T10500] Tainted: [L]=SOFTLOCKUP [ 338.298297][T10500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 338.298306][T10500] Call Trace: [ 338.298312][T10500] [ 338.298319][T10500] dump_stack_lvl+0x100/0x190 [ 338.298350][T10500] should_fail_ex.cold+0x5/0xa [ 338.298375][T10500] _copy_from_user+0x2e/0xd0 [ 338.298398][T10500] ucma_listen+0x81/0x220 [ 338.298419][T10500] ? __pfx_ucma_listen+0x10/0x10 [ 338.298444][T10500] ? __pfx_ucma_listen+0x10/0x10 [ 338.298464][T10500] ucma_write+0x1fb/0x330 [ 338.298484][T10500] ? __pfx_ucma_write+0x10/0x10 [ 338.298503][T10500] ? bpf_lsm_file_permission+0x9/0x10 [ 338.298523][T10500] ? security_file_permission+0x76/0x210 [ 338.298543][T10500] ? rw_verify_area+0xce/0x6d0 [ 338.298562][T10500] vfs_write+0x2aa/0x1070 [ 338.298582][T10500] ? __pfx_ucma_write+0x10/0x10 [ 338.298603][T10500] ? __pfx_vfs_write+0x10/0x10 [ 338.298620][T10500] ? find_held_lock+0x2b/0x80 [ 338.298637][T10500] ? __fget_files+0x215/0x3d0 [ 338.298664][T10500] ? __fget_files+0x215/0x3d0 [ 338.298691][T10500] ? __fget_files+0x21f/0x3d0 [ 338.298719][T10500] ksys_write+0x1f8/0x250 [ 338.298739][T10500] ? __pfx_ksys_write+0x10/0x10 [ 338.298758][T10500] ? rcu_is_watching+0x12/0xc0 [ 338.298776][T10500] ? trace_csd_function_exit+0x71/0x1b0 [ 338.298802][T10500] do_syscall_64+0x106/0xf80 [ 338.298825][T10500] ? clear_bhb_loop+0x40/0x90 [ 338.298847][T10500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.298864][T10500] RIP: 0033:0x7fc23479bf79 [ 338.298880][T10500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.298897][T10500] RSP: 002b:00007fc2356b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 338.298914][T10500] RAX: ffffffffffffffda RBX: 00007fc234a16090 RCX: 00007fc23479bf79 [ 338.298926][T10500] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000007 [ 338.298936][T10500] RBP: 00007fc2356b3090 R08: 0000000000000000 R09: 0000000000000000 [ 338.298946][T10500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.298956][T10500] R13: 00007fc234a16128 R14: 00007fc234a16090 R15: 00007ffe01e5e2c8 [ 338.298980][T10500] [ 338.888564][T10502] fuse: Unknown parameter 'grou00000000000000000000' [ 338.979720][T10505] netlink: 193 bytes leftover after parsing attributes in process `syz.4.1313'. [ 339.611758][ T7719] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 339.619555][ T7719] cp210x 4-1:0.0: querying part number failed [ 339.619749][T10511] kAFS: unparsable volume name [ 339.637332][ T7719] usb 4-1: cp210x converter now attached to ttyUSB0 [ 339.687201][ T7719] usb 4-1: USB disconnect, device number 31 [ 339.719175][ T7719] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 339.746727][ T7719] cp210x 4-1:0.0: device disconnected [ 339.776615][ T5867] usbhid 1-1:0.0: can't add hid device: -71 [ 339.782690][ T5867] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 339.806694][ T5867] usb 1-1: USB disconnect, device number 26 [ 340.032515][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 340.032595][ T30] audit: type=1400 audit(1771059820.644:893): avc: denied { write } for pid=10512 comm="syz.3.1316" lport=43100 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 340.371400][T10521] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1319'. [ 340.486922][T10508] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1314'. [ 340.671693][ T5867] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 340.705612][T10536] fuse: Unknown parameter 'grou00000000000000000000' [ 340.843758][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 340.858345][ T5867] usb 3-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 340.884114][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.892781][ T5867] usb 3-1: Product: syz [ 340.927017][ T30] audit: type=1400 audit(1771059821.534:894): avc: denied { watch watch_reads } for pid=10538 comm="syz.4.1325" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 340.957222][ T5867] usb 3-1: Manufacturer: syz [ 340.963835][ T7749] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 340.975745][ T5867] usb 3-1: SerialNumber: syz [ 340.999722][ T5867] usb 3-1: config 0 descriptor?? [ 341.025057][ T5867] usb-storage 3-1:0.0: USB Mass Storage device detected [ 341.050927][ T5867] usb-storage 3-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 341.078141][ T5867] usb-storage 3-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 341.078141][ T5867] Please send a copy of this message to and [ 341.173595][ T7749] usb 1-1: Using ep0 maxpacket: 8 [ 341.189863][ T7749] usb 1-1: unable to get BOS descriptor or descriptor too short [ 341.202054][ T7749] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 341.243862][T10521] 9p: Bad value for 'rfdno' [ 341.271126][ T7749] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 341.289261][ T7749] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 341.299462][ T7749] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 341.310949][ T7749] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 341.321343][ T7749] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 341.331837][ T7749] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 341.348648][ T7749] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 341.359591][ T7749] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.370917][ T7749] usb 1-1: Product: syz [ 341.375395][ T7749] usb 1-1: Manufacturer: syz [ 341.380121][ T7749] usb 1-1: SerialNumber: syz [ 341.392459][ T7749] usb 1-1: config 0 descriptor?? [ 341.399915][T10534] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 341.413193][ T7749] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 341.509897][ T6903] udevd[6903]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.690859][ T5867] usb 3-1: USB disconnect, device number 32 [ 343.104037][T10534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1323'. [ 343.285058][ T5867] usb 1-1: USB disconnect, device number 27 [ 343.349956][ T30] audit: type=1400 audit(1771059823.954:895): avc: denied { map } for pid=10575 comm="syz.3.1333" path="socket:[33047]" dev="sockfs" ino=33047 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 343.362860][T10582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.394861][T10583] fuse: Unknown parameter 'grou00000000000000000000' [ 343.585452][T10582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.403580][T10594] FAULT_INJECTION: forcing a failure. [ 344.403580][T10594] name failslab, interval 1, probability 0, space 0, times 0 [ 344.412149][T10591] ptrace attach of ""[10592] was attempted by "./syz-executor exec"[10591] [ 344.425275][T10594] CPU: 1 UID: 0 PID: 10594 Comm: syz.0.1339 Tainted: G L syzkaller #0 PREEMPT(full) [ 344.425304][T10594] Tainted: [L]=SOFTLOCKUP [ 344.425310][T10594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 344.425319][T10594] Call Trace: [ 344.425325][T10594] [ 344.425331][T10594] dump_stack_lvl+0x100/0x190 [ 344.425370][T10594] should_fail_ex.cold+0x5/0xa [ 344.425394][T10594] should_failslab+0xc2/0x120 [ 344.425417][T10594] __kmalloc_cache_noprof+0x7a/0x6f0 [ 344.425443][T10594] ? tcf_chain_create+0x98/0x370 [ 344.425469][T10594] tcf_chain_create+0x98/0x370 [ 344.425492][T10594] __tcf_chain_get+0x153/0x1b0 [ 344.425517][T10594] tc_new_tfilter+0x640/0x23b0 [ 344.425553][T10594] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 344.425577][T10594] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 344.425601][T10594] ? __pfx_tc_new_tfilter+0x10/0x10 [ 344.425634][T10594] ? __lock_acquire+0x4a5/0x2630 [ 344.425668][T10594] ? find_held_lock+0x2b/0x80 [ 344.425685][T10594] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 344.425707][T10594] ? __pfx_tc_new_tfilter+0x10/0x10 [ 344.425730][T10594] rtnetlink_rcv_msg+0x95e/0xe90 [ 344.425752][T10594] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 344.425783][T10594] netlink_rcv_skb+0x159/0x420 [ 344.425805][T10594] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 344.425826][T10594] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 344.425862][T10594] netlink_unicast+0x5aa/0x870 [ 344.425886][T10594] ? __pfx_netlink_unicast+0x10/0x10 [ 344.425916][T10594] netlink_sendmsg+0x8b0/0xda0 [ 344.425941][T10594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.425961][T10594] ? __might_fault+0x70/0x140 [ 344.425985][T10594] ____sys_sendmsg+0xa54/0xc30 [ 344.426011][T10594] ? __pfx_____sys_sendmsg+0x10/0x10 [ 344.426036][T10594] ? rcu_is_watching+0x12/0xc0 [ 344.426052][T10594] ? kfree+0x2a0/0x670 [ 344.426079][T10594] ___sys_sendmsg+0x190/0x1e0 [ 344.426095][T10594] ? __pfx____sys_sendmsg+0x10/0x10 [ 344.426131][T10594] ? __pfx___might_resched+0x10/0x10 [ 344.426160][T10594] __sys_sendmmsg+0x205/0x430 [ 344.426181][T10594] ? __pfx___sys_sendmmsg+0x10/0x10 [ 344.426208][T10594] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 344.426239][T10594] ? fput+0x79/0x100 [ 344.426262][T10594] ? ksys_write+0x1ac/0x250 [ 344.426280][T10594] ? __pfx_ksys_write+0x10/0x10 [ 344.426302][T10594] __x64_sys_sendmmsg+0x9c/0x100 [ 344.426321][T10594] ? lockdep_hardirqs_on+0x78/0x100 [ 344.426340][T10594] do_syscall_64+0x106/0xf80 [ 344.426364][T10594] ? clear_bhb_loop+0x40/0x90 [ 344.426383][T10594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.426399][T10594] RIP: 0033:0x7fa1e139bf79 [ 344.426413][T10594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.426428][T10594] RSP: 002b:00007fa1e218c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 344.426444][T10594] RAX: ffffffffffffffda RBX: 00007fa1e1615fa0 RCX: 00007fa1e139bf79 [ 344.426454][T10594] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 344.426463][T10594] RBP: 00007fa1e218c090 R08: 0000000000000000 R09: 0000000000000000 [ 344.426472][T10594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 344.426480][T10594] R13: 00007fa1e1616038 R14: 00007fa1e1615fa0 R15: 00007ffe435f4cb8 [ 344.426502][T10594] [ 344.841738][ T30] audit: type=1326 audit(1771059825.454:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10590 comm="syz.1.1338" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc23479bf79 code=0x0 [ 344.876885][T10606] fuse: Unknown parameter 'grou00000000000000000000' [ 344.886000][ T30] audit: type=1400 audit(1771059825.504:897): avc: denied { create } for pid=10600 comm="syz.2.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 344.926867][ T30] audit: type=1400 audit(1771059825.504:898): avc: denied { bind } for pid=10600 comm="syz.2.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 344.957375][ T30] audit: type=1400 audit(1771059825.504:899): avc: denied { setopt } for pid=10600 comm="syz.2.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 345.163839][T10611] syzkaller0: entered promiscuous mode [ 345.169428][T10611] syzkaller0: entered allmulticast mode [ 345.192297][T10611] fuse: Unknown parameter 'roÅV¸ßf}xÑehÉ“otmode' [ 345.473601][ T7735] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 345.643690][ T7735] usb 2-1: Using ep0 maxpacket: 32 [ 345.650282][ T7735] usb 2-1: config 0 has no interfaces? [ 345.665931][ T7735] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 345.683725][ T7735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.692220][ T7735] usb 2-1: Product: syz [ 345.712286][ T7735] usb 2-1: Manufacturer: syz [ 345.721020][ T7735] usb 2-1: SerialNumber: syz [ 345.743017][T10626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.756043][ T7735] usb 2-1: config 0 descriptor?? [ 345.868770][ T30] audit: type=1400 audit(1771059826.474:900): avc: denied { setattr } for pid=10635 comm="syz.0.1352" name="ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 345.975308][T10613] fuse: Invalid rootmode [ 346.217522][ T7735] usb 2-1: USB disconnect, device number 27 [ 347.217340][T10672] binder: 10671:10672 ioctl c0306201 0 returned -14 [ 347.423634][ T7719] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 347.563606][ T7719] usb 2-1: device descriptor read/64, error -71 [ 347.885286][T10693] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 348.153480][T10697] fuse: Invalid rootmode [ 349.558905][ T7719] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 349.693655][ T7719] usb 2-1: device descriptor read/64, error -71 [ 350.049707][ T7719] usb usb2-port1: attempt power cycle [ 350.590445][T10715] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1370'. [ 350.879613][ T30] audit: type=1400 audit(1771059831.494:901): avc: denied { setopt } for pid=10719 comm="syz.0.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 351.906211][T10743] openvswitch: netlink: Actions may not be safe on all matching packets [ 351.941329][T10743] vlan2: entered promiscuous mode [ 351.951990][T10743] vlan2: entered allmulticast mode [ 351.963724][ T7735] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 351.982713][T10743] hsr_slave_1: entered allmulticast mode [ 352.034948][T10743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1383'. [ 352.143615][ T7735] usb 1-1: Using ep0 maxpacket: 32 [ 352.150736][ T7735] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 352.159690][ T7735] usb 1-1: config 0 has no interface number 0 [ 352.166138][ T7735] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 352.177511][ T7735] usb 1-1: config 0 interface 85 has no altsetting 0 [ 352.187401][ T7735] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 352.196843][ T7735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.206225][ T7735] usb 1-1: Product: syz [ 352.213691][ T7735] usb 1-1: Manufacturer: syz [ 352.218377][ T7735] usb 1-1: SerialNumber: syz [ 352.238667][ T7735] usb 1-1: config 0 descriptor?? [ 352.408324][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c1a [ 352.684551][T10764] ALSA: mixer_oss: invalid OSS volume '' [ 352.723660][ T30] audit: type=1400 audit(1771059833.324:902): avc: denied { listen } for pid=10762 comm="syz.1.1389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 352.996571][T10774] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1391'. [ 354.272806][ T30] audit: type=1326 audit(1771059834.484:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10728 comm="syz.0.1378" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa1e139bf79 code=0x0 [ 355.013591][ T7719] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 355.053264][T10799] xt_hashlimit: max too large, truncated to 1048576 [ 355.080078][T10799] No such timeout policy "syz1" [ 355.117138][ T30] audit: type=1400 audit(1771059835.734:904): avc: denied { getopt } for pid=10789 comm="syz.4.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 355.121184][T10799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=558 sclass=netlink_route_socket pid=10799 comm=syz.4.1396 [ 355.163886][ T7719] usb 3-1: Using ep0 maxpacket: 8 [ 355.187505][ T7719] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 355.199055][ T7719] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.230289][ T7719] usb 3-1: config 0 has no interface number 0 [ 355.246358][ T7719] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 355.275144][ T7719] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 355.293198][ T8534] IPVS: starting estimator thread 0... [ 355.303145][ T7719] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 355.318707][T10802] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1399'. [ 355.325803][ T7719] usb 3-1: config 0 interface 52 has no altsetting 0 [ 355.399246][ T7719] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 355.408958][T10803] IPVS: using max 46 ests per chain, 110400 per kthread [ 355.417183][ T7719] usb 3-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 355.426815][ T7719] usb 3-1: Product: syz [ 355.430981][ T7719] usb 3-1: SerialNumber: syz [ 355.468795][ T7719] usb 3-1: config 0 descriptor?? [ 355.477885][ T7735] appletouch 1-1:0.85: Failed to request geyser raw mode [ 355.507378][ T7735] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 355.542384][ T7735] usb 1-1: USB disconnect, device number 28 [ 355.682822][ T30] audit: type=1400 audit(1771059836.294:905): avc: denied { setopt } for pid=10810 comm="syz.1.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 355.705984][T10811] [U]  [ 355.708946][T10811] [U] K{‘ [ 355.712017][T10811] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖÆ¯¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 355.728231][T10811] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 355.754508][ T7719] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 355.766181][T10811] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 355.782041][T10811] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)޹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 355.814596][ T30] audit: type=1400 audit(1771059836.434:906): avc: denied { read } for pid=10810 comm="syz.1.1402" path="socket:[33687]" dev="sockfs" ino=33687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 355.818641][ T7719] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -5 [ 355.875275][T10811] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-ɿ߿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 355.907418][T10811] [U] ܾ˜4B`Ë—HÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 355.953979][T10811] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 355.971009][ T8534] usb 3-1: USB disconnect, device number 33 [ 355.994249][T10811] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`Ʀ\ [ 356.109971][T10811] [U] M¢XÎÂ"Ä{;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆÈ½ [ 356.120128][T10811] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 356.134747][T10811] [U] 22½“Æ©ÐÛ©X?0;3U± [ 356.140154][T10811] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 356.167650][T10811] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 356.178079][T10811] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 356.186947][T10811] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 356.193601][ T7719] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 356.193660][T10811] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 356.222900][T10811] [U] ¹ EC [ 356.226843][T10811] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙ߯Ë,ÎLÂ,Õ [ 356.240495][T10811] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 356.310183][ T30] audit: type=1400 audit(1771059836.924:908): avc: denied { open } for pid=10826 comm="syz.1.1408" path="/dev/ttyq6" dev="devtmpfs" ino=381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 356.367385][ T7719] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.387931][ T7719] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.403389][ T7719] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 356.415057][ T7719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.427410][ T7719] usb 4-1: config 0 descriptor?? [ 356.501320][T10833] md: md2 stopped. [ 356.714024][ T7735] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 356.833662][ T8533] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 356.847350][ T7719] hid_parser_main: 4 callbacks suppressed [ 356.847365][ T7719] hid-led 0003:0FC5:B080.000F: unknown main item tag 0x0 [ 356.938434][ T7735] usb 2-1: Using ep0 maxpacket: 16 [ 356.960586][ T7735] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.975115][ T7735] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 356.995830][ T8533] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 357.005515][ T8533] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 357.016460][ T7735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.016478][ T8533] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 357.039381][ T8533] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 357.051846][ T8533] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 357.053483][ T7735] usb 2-1: config 0 descriptor?? [ 357.104506][ T8533] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 357.118697][ T8533] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 357.127354][ T8533] usb 1-1: Product: syz [ 357.133215][ T8533] usb 1-1: Manufacturer: syz [ 357.153301][ T8533] cdc_wdm 1-1:1.0: skipping garbage [ 357.162004][ T30] audit: type=1400 audit(1771059837.774:909): avc: denied { ioctl } for pid=10845 comm="syz.4.1413" path="socket:[33719]" dev="sockfs" ino=33719 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 357.176828][ T8533] cdc_wdm 1-1:1.0: skipping garbage [ 357.202493][ T8533] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 357.215072][ T8533] cdc_wdm 1-1:1.0: Unknown control protocol [ 357.252099][T10848] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 357.285111][ T7719] hid-led 0003:0FC5:B080.000F: probe with driver hid-led failed with error -71 [ 357.313971][ T7719] usb 4-1: USB disconnect, device number 32 [ 357.367934][ T30] audit: type=1400 audit(1771059837.984:910): avc: denied { read write } for pid=10837 comm="syz.0.1412" name="cdc-wdm0" dev="devtmpfs" ino=3306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 357.412103][ T30] audit: type=1400 audit(1771059837.984:911): avc: denied { open } for pid=10837 comm="syz.0.1412" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 357.499473][ T7735] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 357.515455][ T7735] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 357.528921][ T7735] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 357.538574][ T7735] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 357.543028][T10851] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1414'. [ 357.545792][ T7735] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 357.546472][ T7735] mcp2221 0003:04D8:00DD.0010: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 357.616549][T10853] CUSE: info not properly terminated [ 357.683637][T10853] syzkaller0: entered promiscuous mode [ 357.689229][T10853] syzkaller0: entered allmulticast mode [ 357.929342][T10835] i2c i2c-1: unsupported multi-msg i2c transaction [ 357.945999][ T7735] usb 2-1: USB disconnect, device number 31 [ 359.193627][T10860] geneve2: entered promiscuous mode [ 359.198924][T10860] geneve2: entered allmulticast mode [ 359.212820][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.235783][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.256517][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.283362][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.323352][T10870] syzkaller0: entered promiscuous mode [ 359.330283][T10870] syzkaller0: entered allmulticast mode [ 359.364510][T10873] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=10873 comm=syz.4.1420 [ 359.460305][T10870] tipc: Enabled bearer , priority 0 [ 359.592954][T10869] tipc: Resetting bearer [ 359.613942][ T5867] usb 1-1: USB disconnect, device number 29 [ 359.662220][T10869] tipc: Disabling bearer [ 359.965299][T10892] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1426'. [ 359.995109][ T5867] kernel read not supported for file inotify (pid: 5867 comm: kworker/0:4) [ 360.425218][T10891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1427'. [ 361.603770][ T8533] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 361.763647][ T8533] usb 2-1: Using ep0 maxpacket: 16 [ 361.784059][ T8533] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.801598][ T8533] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 361.813871][ T8533] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.954108][ T8533] usb 2-1: config 0 descriptor?? [ 362.383868][ T8533] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 362.408143][ T8533] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 362.437042][ T8533] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 362.459784][ T8533] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 362.484322][ T8533] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 362.507259][ T8533] mcp2221 0003:04D8:00DD.0011: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 362.753779][ T7749] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 362.778602][T10900] i2c i2c-1: unsupported multi-msg i2c transaction [ 362.824190][ T5867] usb 2-1: USB disconnect, device number 32 [ 362.916604][ T7749] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 362.944158][ T7749] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.962339][ T7749] usb 1-1: Product: syz [ 362.979080][ T7749] usb 1-1: Manufacturer: syz [ 362.993662][ T7749] usb 1-1: SerialNumber: syz [ 363.010750][ T7749] usb 1-1: config 0 descriptor?? [ 363.142614][ T30] audit: type=1400 audit(1771059843.754:912): avc: denied { setopt } for pid=10924 comm="syz.4.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 363.163723][ T8533] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 363.345553][ T8533] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 363.358772][ T8533] usb 4-1: config 1 has no interface number 0 [ 363.372002][ T8533] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 363.401330][ T8533] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 363.422002][ T8533] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.455536][ T8533] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 363.470309][ T7749] usb 1-1: USB disconnect, device number 30 [ 363.484016][ T8533] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.503614][ T8533] usb 4-1: Product: syz [ 363.508042][ T8533] usb 4-1: Manufacturer: syz [ 363.517625][ T8533] usb 4-1: SerialNumber: syz [ 363.554888][T10920] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 363.693639][T10934] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 363.703861][T10934] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 363.704320][T10937] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1440'. [ 363.746800][T10936] ptrace attach of "./syz-executor exec"[5806] was attempted by "./syz-executor exec"[10936] [ 363.759298][T10934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1440'. [ 363.759298][T10937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1440'. [ 363.788969][T10920] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 363.865739][T10934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1440'. [ 364.043093][T10920] netlink: 'syz.3.1435': attribute type 21 has an invalid length. [ 364.144123][ T51] Bluetooth: hci4: link tx timeout [ 364.195368][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 364.224509][ T8533] usb 4-1: Incompatible driver and firmware versions [ 364.232499][ T5813] Bluetooth: hci4: link tx timeout [ 364.279174][ T5813] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 364.539980][ T30] audit: type=1400 audit(1771059845.154:913): avc: denied { ioctl } for pid=10949 comm="syz.2.1446" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 364.612007][T10950] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1446'. [ 364.705034][ T5813] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 365.203785][ T8533] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 365.341781][T10963] FAULT_INJECTION: forcing a failure. [ 365.341781][T10963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.360574][T10963] CPU: 1 UID: 0 PID: 10963 Comm: syz.0.1452 Tainted: G L syzkaller #0 PREEMPT(full) [ 365.360609][T10963] Tainted: [L]=SOFTLOCKUP [ 365.360615][T10963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 365.360625][T10963] Call Trace: [ 365.360630][T10963] [ 365.360637][T10963] dump_stack_lvl+0x100/0x190 [ 365.360668][T10963] should_fail_ex.cold+0x5/0xa [ 365.360689][T10963] _copy_from_user+0x2e/0xd0 [ 365.360713][T10963] copy_msghdr_from_user+0x9f/0x4f0 [ 365.360731][T10963] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 365.360758][T10963] ___sys_sendmsg+0x106/0x1e0 [ 365.360777][T10963] ? __pfx____sys_sendmsg+0x10/0x10 [ 365.360819][T10963] __sys_sendmsg+0x170/0x220 [ 365.360842][T10963] ? __pfx___sys_sendmsg+0x10/0x10 [ 365.360872][T10963] ? fput+0x79/0x100 [ 365.360896][T10963] do_syscall_64+0x106/0xf80 [ 365.360912][T10963] ? clear_bhb_loop+0x40/0x90 [ 365.360925][T10963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.360937][T10963] RIP: 0033:0x7fa1e139bf79 [ 365.360947][T10963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.360958][T10963] RSP: 002b:00007fa1e218c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 365.360970][T10963] RAX: ffffffffffffffda RBX: 00007fa1e1615fa0 RCX: 00007fa1e139bf79 [ 365.360977][T10963] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 365.360984][T10963] RBP: 00007fa1e218c090 R08: 0000000000000000 R09: 0000000000000000 [ 365.360990][T10963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.360996][T10963] R13: 00007fa1e1616038 R14: 00007fa1e1615fa0 R15: 00007ffe435f4cb8 [ 365.361010][T10963] [ 365.595146][ T8533] usb 2-1: Using ep0 maxpacket: 16 [ 365.672825][T10967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1453'. [ 365.722360][ T8533] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.742185][ T8533] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 365.836803][ T8533] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.857966][ T8533] usb 2-1: config 0 descriptor?? [ 365.932080][ T7735] usb 4-1: USB disconnect, device number 33 [ 365.938419][T10978] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1456'. [ 366.025909][ T30] audit: type=1400 audit(1771059846.634:914): avc: denied { mount } for pid=10979 comm="syz.0.1457" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 366.117864][ T30] audit: type=1400 audit(1771059846.694:915): avc: denied { unmount } for pid=5801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 366.145807][ T8534] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 366.220654][T10985] mmap: syz.0.1459 (10985): VmData 37593088 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 366.285034][ T8533] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 366.316485][ T8534] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 366.338777][ T8533] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 366.347403][ T8534] usb 3-1: config 1 has no interface number 0 [ 366.359609][ T8534] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1023 [ 366.372650][ T8533] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 366.373193][T10993] fuse: Bad value for 'group_id' [ 366.380644][ T8533] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 366.392494][ T8534] usb 3-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 366.403443][ T8533] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 366.405008][T10991] fuse: Bad value for 'fd' [ 366.410863][ T8534] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 366.426648][ T8533] mcp2221 0003:04D8:00DD.0012: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 366.443779][T10993] fuse: Bad value for 'group_id' [ 366.444974][ T8534] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 366.459758][ T8534] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.467941][ T8534] usb 3-1: Product: syz [ 366.472348][ T8534] usb 3-1: Manufacturer: syz [ 366.477249][ T8534] usb 3-1: SerialNumber: syz [ 366.510330][T10975] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 366.529363][ T8534] usb 3-1: Expected 3 endpoints, found: 2 [ 366.605971][T10999] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1464'. [ 366.680500][T10999] vivid-007: disconnect [ 366.823026][T10975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.178083][T11003] vivid-007: reconnect [ 367.191289][T10975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.209296][T10961] i2c i2c-1: unsupported multi-msg i2c transaction [ 367.358145][T10975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.387677][ T7735] usb 2-1: USB disconnect, device number 33 [ 367.389887][T10975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.467128][ T8533] usb 3-1: USB disconnect, device number 34 [ 369.836470][T11016] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 369.848233][T11016] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 369.871099][ T30] audit: type=1400 audit(1771059850.444:916): avc: denied { ioctl } for pid=11007 comm="syz.3.1466" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 369.990302][T11035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1472'. [ 370.044570][ T30] audit: type=1400 audit(1771059850.464:917): avc: denied { firmware_load } for pid=11007 comm="syz.3.1466" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 370.254022][T11044] fuse: Bad value for 'fd' [ 370.268510][T11045] 9p: Bad value for 'rfdno' [ 370.304838][ T8534] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 370.347506][T11047] fuse: Bad value for 'group_id' [ 370.352603][T11047] fuse: Bad value for 'group_id' [ 370.466403][ T8534] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 370.480530][ T8534] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.490820][ T8534] usb 2-1: Product: syz [ 370.500630][ T8534] usb 2-1: Manufacturer: syz [ 370.516643][ T8534] usb 2-1: SerialNumber: syz [ 370.538343][ T8534] usb 2-1: config 0 descriptor?? [ 370.838610][ T8534] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 370.855574][ T8534] usb 2-1: USB disconnect, device number 34 [ 370.883825][ T7749] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 370.906816][ T30] audit: type=1400 audit(1771059851.524:918): avc: denied { append } for pid=11053 comm="syz.0.1479" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 371.005386][ T30] audit: type=1400 audit(1771059851.624:919): avc: denied { watch watch_reads } for pid=11055 comm="syz.2.1480" path="/228/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 371.038222][ T30] audit: type=1804 audit(1771059851.654:920): pid=11056 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1480" name="/newroot/228/file1" dev="tmpfs" ino=1235 res=1 errno=0 [ 371.066521][ T7749] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.071278][T11056] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 371.076797][ T7749] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 371.092575][ T7749] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.102285][ T7749] usb 4-1: config 0 descriptor?? [ 371.110397][ T7749] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 371.194117][ T5867] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 371.381493][ T5867] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 371.438512][ T5867] usb 1-1: config 0 has no interface number 0 [ 371.481335][ T5867] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 371.528269][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.543962][ T30] audit: type=1400 audit(1771059852.014:921): avc: denied { connect } for pid=11059 comm="syz.4.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 371.591614][ T5867] usb 1-1: Product: syz [ 371.622218][ T5867] usb 1-1: Manufacturer: syz [ 371.648842][ T5867] usb 1-1: SerialNumber: syz [ 371.701762][ T5867] usb 1-1: config 0 descriptor?? [ 371.757019][T11065] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 371.763636][T11065] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 371.772609][T11065] vhci_hcd vhci_hcd.0: Device attached [ 371.779281][T11066] vhci_hcd: cannot find the pending unlink 4294967291 [ 371.786735][T11066] vhci_hcd: connection closed [ 371.786889][ T36] vhci_hcd vhci_hcd.1: stop threads [ 371.801018][ T36] vhci_hcd vhci_hcd.1: release socket [ 371.809333][ T36] vhci_hcd vhci_hcd.1: disconnect device [ 372.568135][T11082] netlink: 'syz.4.1486': attribute type 1 has an invalid length. [ 372.588183][T11082] 8021q: adding VLAN 0 to HW filter on device bond2 [ 372.603899][T11082] macvlan2: entered promiscuous mode [ 372.610537][T11082] macvlan2: entered allmulticast mode [ 372.616858][T11082] bond2: entered allmulticast mode [ 372.622039][T11082] bond2: entered promiscuous mode [ 372.628042][T11082] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 372.636373][T11082] team0: Port device macvlan2 added [ 372.685496][ T5867] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 372.701926][ T5867] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 372.715352][ T5867] asix 1-1:0.251: probe with driver asix failed with error -71 [ 372.742644][ T5867] usb 1-1: USB disconnect, device number 31 [ 372.805487][ T30] audit: type=1326 audit(1771059853.424:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11087 comm="syz.4.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52e3f9bf79 code=0x7ffc0000 [ 372.837729][T11088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1488'. [ 372.891894][ T30] audit: type=1326 audit(1771059853.424:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11087 comm="syz.4.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52e3f9bf79 code=0x7ffc0000 [ 372.934283][ T30] audit: type=1326 audit(1771059853.424:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11087 comm="syz.4.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f52e3f9bf79 code=0x7ffc0000 [ 372.975055][ T30] audit: type=1326 audit(1771059853.424:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11087 comm="syz.4.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52e3f9bf79 code=0x7ffc0000 [ 373.203462][T11096] fuse: Bad value for 'group_id' [ 373.226023][T11096] fuse: Bad value for 'group_id' [ 373.595346][ T7735] usb 4-1: USB disconnect, device number 34 [ 374.603767][T11108] Set syz1 is full, maxelem 65536 reached [ 375.938150][T11112] fuse: Bad value for 'user_id' [ 375.959923][T11112] fuse: Bad value for 'user_id' [ 375.965640][T11115] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1497'. [ 376.009535][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 376.017700][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 376.043301][T11112] ceph: No mds server is up or the cluster is laggy [ 376.059787][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 376.081013][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 376.140978][T11123] kvm: pic: level sensitive irq not supported [ 376.224027][ T7749] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 376.753629][ T7749] usb 1-1: Using ep0 maxpacket: 8 [ 376.761359][ T7749] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.776444][ T7749] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 376.790879][ T7749] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.805449][ T7749] usb 1-1: config 0 descriptor?? [ 376.834451][ T7749] uvcvideo 1-1:0.0: probe with driver uvcvideo failed with error -22 [ 377.017125][ T8534] usb 1-1: USB disconnect, device number 32 [ 377.188920][ T51] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 377.213405][ T7749] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 377.397933][ T7749] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.412404][ T7749] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 377.422518][T11144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=11144 comm=syz.4.1507 [ 377.451280][T11144] /dev/nullb0: Can't lookup blockdev [ 377.516169][ T7735] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 377.533890][ T7749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.558792][ T7749] usb 3-1: config 0 descriptor?? [ 377.569540][ T7749] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 377.693670][ T7735] usb 4-1: Using ep0 maxpacket: 16 [ 377.724147][ T7735] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.732573][T11152] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1509'. [ 377.755370][T11152] vivid-007: disconnect [ 377.769801][ T7735] usb 4-1: config 0 interface 0 has no altsetting 0 [ 377.859497][T11155] vivid-007: reconnect [ 378.102743][ T7735] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 378.104813][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.112202][ T7735] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.123478][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.127530][ T7735] usb 4-1: Product: syz [ 378.136645][ T7735] usb 4-1: Manufacturer: syz [ 378.142862][ T7735] usb 4-1: SerialNumber: syz [ 378.220700][ T7735] usb 4-1: config 0 descriptor?? [ 378.337626][ T7735] hub 4-1:0.0: bad descriptor, ignoring hub [ 378.354085][ T7735] hub 4-1:0.0: probe with driver hub failed with error -5 [ 379.338599][ T7735] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 379.357081][ T7735] usb 4-1: USB disconnect, device number 35 [ 379.497158][T11167] can0: slcan on pty20. [ 379.503398][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 379.773817][ T13] usb 4-1: Failed to submit usb control message: -71 [ 379.780861][ T13] usb 4-1: unable to send the bmi data to the device: -71 [ 379.790106][ T30] audit: type=1400 audit(1771059860.104:973): avc: denied { ioctl } for pid=11160 comm="syz.0.1512" path="/dev/ptyq4" dev="devtmpfs" ino=123 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 380.524880][T11160] can0 (unregistered): slcan off pty20. [ 380.543639][ T13] usb 4-1: unable to get target info from device [ 380.549999][ T13] usb 4-1: could not get target info (-71) [ 380.572963][ T13] usb 4-1: could not probe fw (-71) [ 380.973597][ T7749] usb 3-1: USB disconnect, device number 35 [ 381.600252][ T30] audit: type=1400 audit(1771059862.214:974): avc: denied { connect } for pid=11209 comm="syz.0.1523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 381.673819][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 381.925791][T11216] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1525'. [ 381.937544][T11216] vivid-007: disconnect [ 381.972782][T11218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=11218 comm=syz.4.1524 [ 381.988407][T11218] /dev/nullb0: Can't lookup blockdev [ 382.062646][T11219] vivid-007: reconnect [ 382.680930][ T7719] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 382.852748][T11229] fuse: Unknown parameter 'use00000000000000000000' [ 382.874189][ T7719] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.892648][ T7719] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 382.920068][ T7719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.951626][ T7719] usb 1-1: config 0 descriptor?? [ 383.097776][ T7719] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 384.093629][ T7719] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 384.253639][ T7719] usb 4-1: Using ep0 maxpacket: 8 [ 384.395300][ T7719] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 384.404959][ T7719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.427059][ T7719] pvrusb2: Hardware description: Terratec Grabster AV400 [ 384.442670][ T7719] pvrusb2: ********** [ 384.447013][ T7719] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 384.457674][ T7719] pvrusb2: Important functionality might not be entirely working. [ 384.466195][ T7719] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 384.478953][ T7719] pvrusb2: ********** [ 384.604452][T11267] fuse: Unknown parameter 'use00000000000000000000' [ 384.625718][ T2336] pvrusb2: Invalid write control endpoint [ 384.707449][ T2336] pvrusb2: Invalid write control endpoint [ 384.732373][ T30] audit: type=1400 audit(1771059865.344:975): avc: denied { write } for pid=11269 comm="syz.4.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 384.733787][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 384.818707][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 384.833762][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 384.844082][ T2336] pvrusb2: Device being rendered inoperable [ 384.867269][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 384.887852][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 384.903347][ T2336] pvrusb2: Attached sub-driver cx25840 [ 384.910843][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 384.921449][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 385.702905][ T7719] usb 1-1: USB disconnect, device number 33 [ 385.898229][T11288] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1548'. [ 387.167344][ T8532] usb 4-1: USB disconnect, device number 36 [ 387.211898][ T30] audit: type=1400 audit(1771059867.814:976): avc: denied { module_load } for pid=11290 comm="syz.1.1549" path="/sys/kernel/oops_count" dev="sysfs" ino=57509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 387.258301][T11301] SELinux: policydb table sizes (8,6) do not match mine (8,7) [ 387.258342][T11301] SELinux: failed to load policy [ 387.627373][T11311] fuse: Unknown parameter 'use00000000000000000000' [ 387.985599][T11319] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1552'. [ 388.127070][T11323] sd 0:0:1:0: PR command failed: 1026 [ 388.134569][T11323] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 388.141707][T11323] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 388.142255][T11325] netlink: 'syz.2.1556': attribute type 3 has an invalid length. [ 388.169183][T11325] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1556'. [ 388.287012][ T7749] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 388.311009][T11336] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.1562'. [ 388.333397][ T30] audit: type=1400 audit(1771059868.944:977): avc: denied { connect } for pid=11335 comm="syz.3.1562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 388.545021][ T7749] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.557132][ T7749] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.567740][ T7749] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 388.577785][ T7749] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.595071][ T7749] usb 1-1: config 0 descriptor?? [ 388.816592][T11353] fuse: Bad value for 'fd' [ 389.059601][T11357] kAFS: unparsable volume name [ 389.939026][ T7749] usbhid 1-1:0.0: can't add hid device: -71 [ 389.953644][ T7749] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 389.973115][ T7749] usb 1-1: USB disconnect, device number 34 [ 390.016989][T11364] fuse: Unknown parameter '' [ 390.025936][T11364] bridge0: entered allmulticast mode [ 390.061400][T11366] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1571'. [ 390.459871][T11371] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=770 sclass=netlink_audit_socket pid=11371 comm=syz.0.1573 [ 390.474731][T11371] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=82 sclass=netlink_audit_socket pid=11371 comm=syz.0.1573 [ 390.515858][ T30] audit: type=1400 audit(1771059871.134:978): avc: denied { read } for pid=11370 comm="syz.0.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 390.592414][T11381] trusted_key: encrypted_key: insufficient parameters specified [ 391.423922][T11341] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 391.502112][T11388] fuse: Bad value for 'fd' [ 391.864131][T11393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1579'. [ 391.886661][T11396] netlink: 'syz.3.1581': attribute type 6 has an invalid length. [ 391.925522][T11396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1581'. [ 392.034353][T11406] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1582'. [ 392.044587][T11406] vivid-007: disconnect [ 392.114055][T11409] vivid-007: reconnect [ 392.364559][T11408] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1585'. [ 392.410587][T11413] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1587'. [ 392.584725][T11422] fuse: Unknown parameter 'user_i00000000000000000000' [ 393.222695][ T30] audit: type=1400 audit(1771059873.334:979): avc: denied { read } for pid=11416 comm="syz.2.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 393.547042][T11433] kAFS: unparsable volume name [ 394.675791][T11443] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1598'. [ 395.170612][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1602'. [ 395.198450][T11455] vlan0: entered allmulticast mode [ 395.210312][T11455] bond0: entered allmulticast mode [ 395.246645][T11455] bond_slave_0: entered allmulticast mode [ 395.253327][T11455] bond_slave_1: entered allmulticast mode [ 395.255769][ T30] audit: type=1400 audit(1771059875.874:980): avc: denied { mounton } for pid=11454 comm="syz.1.1601" path="/349/file0" dev="tmpfs" ino=1873 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 395.379187][T11464] fuse: Bad value for 'fd' [ 395.419189][T11466] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1605'. [ 395.420033][ T30] audit: type=1400 audit(1771059876.034:981): avc: denied { mount } for pid=11465 comm="syz.2.1605" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 395.452661][ T30] audit: type=1400 audit(1771059876.034:982): avc: denied { remount } for pid=11465 comm="syz.2.1605" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 395.475423][ T30] audit: type=1400 audit(1771059876.074:983): avc: denied { unmount } for pid=6937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 395.741539][T11475] kAFS: unparsable volume name [ 396.196271][T11481] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.203533][T11481] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.297189][T11481] bridge0: entered allmulticast mode [ 396.765777][T11492] fuse: Unknown parameter 'user_id00000000000000000000' [ 396.862122][T11495] overlayfs: failed to clone upperpath [ 397.006207][ T5867] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 397.444114][ T5867] usb 2-1: Using ep0 maxpacket: 8 [ 397.462143][ T5867] usb 2-1: config 0 has an invalid interface number: 176 but max is 0 [ 397.471225][ T5867] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.482046][ T5867] usb 2-1: config 0 has no interface number 0 [ 397.489221][ T5867] usb 2-1: config 0 interface 176 altsetting 56 endpoint 0x8 has invalid wMaxPacketSize 0 [ 397.500321][ T5867] usb 2-1: config 0 interface 176 altsetting 56 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 397.514513][ T5867] usb 2-1: config 0 interface 176 has no altsetting 0 [ 397.524413][ T5867] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=68.dc [ 397.533639][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.555463][ T5867] usb 2-1: Product: syz [ 397.560135][ T5867] usb 2-1: Manufacturer: syz [ 397.571274][ T5867] usb 2-1: SerialNumber: syz [ 397.576043][ T7735] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 397.591984][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1621'. [ 397.602335][ T5867] usb 2-1: config 0 descriptor?? [ 397.735984][ T7735] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 397.763877][ T7735] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.783595][ T7735] usb 3-1: config 0 has no interface number 0 [ 397.818152][T11519] fuse: Invalid rootmode [ 397.822529][ T30] audit: type=1400 audit(1771059878.434:984): avc: denied { bind } for pid=11489 comm="syz.1.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 397.838628][ T5867] usb 2-1: probing VID:PID(0424:012C) [ 397.851252][ T7735] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 397.873045][ T5867] usb 2-1: vub300 testing UNKNOWN EndPoint(0) 08 [ 397.889425][ T7735] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.898322][ T5867] usb 2-1: vub300 ignoring EndPoint(0) 08 [ 397.905067][ T7735] usb 3-1: Product: syz [ 397.922901][ T5867] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 397.931075][ T30] audit: type=1400 audit(1771059878.434:985): avc: denied { write } for pid=11489 comm="syz.1.1615" path="socket:[37175]" dev="sockfs" ino=37175 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 397.933297][ T7735] usb 3-1: Manufacturer: syz [ 397.960620][ T5867] vub300 2-1:0.176: probe with driver vub300 failed with error -22 [ 397.996636][ T5867] usb 2-1: USB disconnect, device number 35 [ 398.006743][ T7735] usb 3-1: SerialNumber: syz [ 398.025234][ T7735] usb 3-1: config 0 descriptor?? [ 398.042328][ T7735] ims_pcu 3-1:0.41: Missing CDC union descriptor [ 398.049836][ T7735] ims_pcu 3-1:0.41: probe with driver ims_pcu failed with error -22 [ 398.223619][ T8534] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 398.363741][T11530] fuse: Bad value for 'fd' [ 398.373811][ T8534] usb 1-1: Using ep0 maxpacket: 32 [ 398.391833][ T8534] usb 1-1: config 0 has no interfaces? [ 398.400428][ T8534] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 398.980950][ T8534] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.990272][ T8534] usb 1-1: Product: syz [ 398.994949][ T8534] usb 1-1: Manufacturer: syz [ 399.000026][ T8534] usb 1-1: SerialNumber: syz [ 399.005812][T11537] overlayfs: failed to clone upperpath [ 399.013964][ T8534] usb 1-1: config 0 descriptor?? [ 399.105267][T11540] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1630'. [ 399.224196][T11525] fuse: Bad value for 'fd' [ 399.235775][ T8534] usb 1-1: USB disconnect, device number 35 [ 399.412098][T11546] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1632'. [ 399.734781][ T7735] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 399.848021][T11551] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1633'. [ 399.901238][T11555] fuse: Invalid rootmode [ 399.915913][ T7735] usb 2-1: Using ep0 maxpacket: 8 [ 399.935158][ T7735] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 399.946560][ T7735] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 399.957054][ T7735] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 399.972524][ T7735] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 399.981792][ T7735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.990810][ T7735] usb 2-1: Product: syz [ 399.999303][ T7735] usb 2-1: Manufacturer: syz [ 400.004967][ T7735] usb 2-1: SerialNumber: syz [ 400.013233][ T7735] usb 2-1: config 0 descriptor?? [ 400.201684][T11567] kAFS: unparsable volume name [ 400.285825][T11569] bond0: entered promiscuous mode [ 400.291216][T11569] bond_slave_0: entered promiscuous mode [ 400.303786][T11569] bond_slave_1: entered promiscuous mode [ 400.311506][T11569] batadv0: entered promiscuous mode [ 400.318757][T11569] hsr1: entered promiscuous mode [ 400.324273][T11569] hsr1: entered allmulticast mode [ 400.330375][T11569] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 400.363650][T11569] bond0: left promiscuous mode [ 400.368628][T11569] bond_slave_0: left promiscuous mode [ 400.374733][T11569] bond_slave_1: left promiscuous mode [ 400.381039][T11569] batadv0: left promiscuous mode [ 400.394453][ T8532] usb 3-1: USB disconnect, device number 36 [ 400.513974][ T30] audit: type=1400 audit(1771059881.134:986): avc: denied { getopt } for pid=11572 comm="syz.0.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 400.619781][T11576] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1641'. [ 400.911516][T11580] fuse: Bad value for 'fd' [ 401.033571][ T8532] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 401.195207][ T8532] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.213523][ T8532] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.233569][ T8532] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 401.242634][ T8532] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.266149][ T8532] usb 1-1: config 0 descriptor?? [ 401.529802][T11587] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1646'. [ 401.752538][T11589] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1647'. [ 401.755330][T11592] fuse: Bad value for 'rootmode' [ 401.793697][T11589] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1647'. [ 401.804492][T11590] Invalid source name [ 401.873678][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 401.880960][ T30] audit: type=1400 audit(1771059882.494:987): avc: denied { search } for pid=11597 comm="syz.2.1650" name="/" dev="configfs" ino=1142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 401.913994][ T8532] usbhid 1-1:0.0: can't add hid device: -71 [ 402.002819][ T8532] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 402.020167][ T30] audit: type=1400 audit(1771059882.494:988): avc: denied { search } for pid=11597 comm="syz.2.1650" name="/" dev="configfs" ino=1142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 402.051210][ T8532] usb 1-1: USB disconnect, device number 36 [ 402.499693][ T7735] usb 2-1: USB disconnect, device number 36 [ 402.527478][ T30] audit: type=1400 audit(1771059882.494:989): avc: denied { watch watch_reads } for pid=11597 comm="syz.2.1650" path="/" dev="configfs" ino=1142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 402.579041][ T30] audit: type=1400 audit(1771059882.494:990): avc: denied { search } for pid=11597 comm="syz.2.1650" name="/" dev="configfs" ino=1142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 402.632111][ T30] audit: type=1400 audit(1771059882.494:991): avc: denied { read open } for pid=11597 comm="syz.2.1650" path="/" dev="configfs" ino=1142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 402.737926][T11607] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1653'. [ 402.767170][T11607] vivid-007: disconnect [ 403.166738][T11614] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1655'. [ 403.181453][T11606] vivid-007: reconnect [ 403.242073][T11603] IPv6: NLM_F_CREATE should be specified when creating new route [ 403.262219][T11603] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 403.269910][T11603] IPv6: NLM_F_CREATE should be set when creating new route [ 403.292246][ T30] audit: type=1400 audit(1771059883.894:992): avc: denied { watch watch_reads } for pid=11608 comm="syz.0.1654" path="/proc/1002" dev="proc" ino=38283 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 403.320756][T11619] fuse: Bad value for 'fd' [ 403.464258][ T30] audit: type=1400 audit(1771059884.054:993): avc: denied { read } for pid=11618 comm="syz.1.1657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 403.738288][T11626] fuse: Bad value for 'rootmode' [ 403.902228][T11635] Failed to initialize the IGMP autojoin socket (err -2) [ 404.053338][ T30] audit: type=1400 audit(1771059884.634:994): avc: denied { read } for pid=11632 comm="syz.2.1661" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 404.933707][ T7735] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 405.154762][ T7735] usb 1-1: Invalid ep0 maxpacket: 32 [ 405.255640][ T30] audit: type=1326 audit(1771059885.874:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11642 comm="syz.2.1664" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f710719bf79 code=0x0 [ 405.313688][ T7735] usb 1-1: new low-speed USB device number 38 using dummy_hcd [ 405.577720][ T7735] usb 1-1: Invalid ep0 maxpacket: 32 [ 405.594168][ T7735] usb usb1-port1: attempt power cycle [ 405.599644][ T5867] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 405.787745][T11662] fuse: Bad value for 'rootmode' [ 405.795786][ T5867] usb 2-1: unable to get BOS descriptor or descriptor too short [ 405.804975][ T5867] usb 2-1: config 66 has an invalid interface number: 122 but max is 0 [ 405.814040][ T5867] usb 2-1: config 66 has an invalid descriptor of length 10, skipping remainder of the config [ 405.824927][ T5867] usb 2-1: config 66 has no interface number 0 [ 405.831155][ T5867] usb 2-1: too many endpoints for config 66 interface 122 altsetting 101: 58, using maximum allowed: 30 [ 405.854586][ T5867] usb 2-1: config 66 interface 122 altsetting 101 has 0 endpoint descriptors, different from the interface descriptor's value: 58 [ 405.891003][ T5867] usb 2-1: config 66 interface 122 has no altsetting 0 [ 405.912806][ T5867] usb 2-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 405.929008][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.946688][ T5867] usb 2-1: Product: syz [ 405.953958][ T7735] usb 1-1: new low-speed USB device number 39 using dummy_hcd [ 406.098985][ T5867] usb 2-1: Manufacturer: syz [ 406.110450][ T5867] usb 2-1: SerialNumber: syz [ 406.117163][ T7735] usb 1-1: Invalid ep0 maxpacket: 32 [ 406.255139][ T7735] usb 1-1: new low-speed USB device number 40 using dummy_hcd [ 406.296865][ T7735] usb 1-1: Invalid ep0 maxpacket: 32 [ 406.302413][ T7735] usb usb1-port1: unable to enumerate USB device [ 406.353124][ T5867] usb 2-1: USB disconnect, device number 37 [ 406.652446][ T8532] libceph: mon0 (1)[c::]:6789 connect error [ 406.699902][T11673] ceph: No mds server is up or the cluster is laggy [ 406.709673][T11676] delete_channel: no stack [ 407.841677][T11709] bond0: entered promiscuous mode [ 407.857052][T11709] batadv0: entered promiscuous mode [ 407.864585][ T30] audit: type=1326 audit(1771059888.474:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.2.1683" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f710719bf79 code=0x0 [ 407.888659][T11709] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 407.925359][T11709] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 407.941828][T11709] hsr1: entered promiscuous mode [ 407.950873][T11709] hsr1: entered allmulticast mode [ 407.959071][T11709] bond0: entered allmulticast mode [ 407.972141][T11709] batadv0: entered allmulticast mode [ 407.978706][T11709] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 408.131882][T11709] bond0: left promiscuous mode [ 408.140812][T11709] batadv0: left promiscuous mode [ 408.387690][ T5867] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 408.543707][ T5867] usb 2-1: Using ep0 maxpacket: 16 [ 408.550637][ T5867] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 408.565062][ T5867] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 408.573623][ T5867] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 408.669618][ T5867] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 408.678708][ T5867] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 408.812579][ T5867] usb 2-1: config 0 has no interface number 0 [ 408.843876][T11722] binder: BINDER_SET_CONTEXT_MGR already set [ 408.850285][T11722] binder: 11720:11722 ioctl 4018620d 200000000040 returned -16 [ 408.916178][ T5867] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 409.001978][ T5867] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 409.011931][ T5867] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 409.024440][ T5867] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 409.127146][ T5867] usb 2-1: config 0 interface 125 has no altsetting 0 [ 409.135403][ T5867] usb 2-1: config 0 interface 125 has no altsetting 2 [ 409.148002][ T5867] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 409.162047][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.172378][ T5867] usb 2-1: Product: syz [ 409.627160][ T5867] usb 2-1: Manufacturer: syz [ 409.631820][ T5867] usb 2-1: SerialNumber: syz [ 409.645181][ T5867] usb 2-1: config 0 descriptor?? [ 409.657370][ T5867] usb 2-1: selecting invalid altsetting 2 [ 409.746935][ T30] audit: type=1400 audit(1771059890.364:997): avc: denied { ioctl } for pid=11734 comm="syz.0.1693" path="socket:[37594]" dev="sockfs" ino=37594 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 409.774881][T11735] trusted_key: syz.0.1693 sent an empty control message without MSG_MORE. [ 410.209841][T11749] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1695'. [ 410.715960][ T5867] get_1284_register timeout [ 410.720623][ T5867] uss720 2-1:0.125: probe with driver uss720 failed with error -5 [ 410.720670][ C0] usb 2-1: async_complete: urb error -104 [ 410.734243][ C0] usb 2-1: async_complete: urb error -104 [ 410.739999][ C0] usb 2-1: async_complete: urb error -104 [ 410.745759][ C0] usb 2-1: async_complete: urb error -104 [ 410.751973][ T7749] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 411.363566][ T5867] usb 2-1: USB disconnect, device number 38 [ 411.556548][ T7749] usb 1-1: config 0 has an invalid interface number: 17 but max is 0 [ 411.586903][ T7749] usb 1-1: config 0 has no interface number 0 [ 411.593010][ T7749] usb 1-1: config 0 interface 17 has no altsetting 0 [ 411.605726][ T7749] usb 1-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c0.e6 [ 411.623601][ T7749] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.632110][ T7749] usb 1-1: Product: syz [ 411.636686][ T7749] usb 1-1: Manufacturer: syz [ 411.641289][ T7749] usb 1-1: SerialNumber: syz [ 411.677686][ T7749] usb 1-1: config 0 descriptor?? [ 411.682919][ T30] audit: type=1400 audit(1771059892.294:998): avc: denied { read } for pid=11760 comm="syz.2.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 411.715889][ T7749] esd_usb 1-1:0.17: sending version message failed [ 411.722486][ T7749] esd_usb 1-1:0.17: probe with driver esd_usb failed with error -22 [ 412.883358][ T30] audit: type=1326 audit(1771059893.494:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11779 comm="syz.4.1706" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52e3f9bf79 code=0x0 [ 412.932733][ T30] audit: type=1400 audit(1771059893.544:1000): avc: denied { rename } for pid=11780 comm="syz.2.1705" name="file0" dev="tmpfs" ino=1446 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 413.393680][ T8532] usb 1-1: USB disconnect, device number 41 [ 413.534173][ T30] audit: type=1326 audit(1771059894.154:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11788 comm="syz.0.1710" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa1e139bf79 code=0x0 [ 413.703562][ T5867] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 413.858560][ T5867] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 413.885506][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.904706][ T5867] usb 3-1: Product: syz [ 414.007081][ T5867] usb 3-1: Manufacturer: syz [ 414.012069][ T5867] usb 3-1: SerialNumber: syz [ 414.050737][ T5867] usb 3-1: config 0 descriptor?? [ 414.080052][ T5867] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 414.761938][ T7749] usb 3-1: USB disconnect, device number 37 [ 414.945919][T11814] fuse: Unknown parameter '' [ 414.993641][ T7731] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 415.244382][ T7731] usb 2-1: Using ep0 maxpacket: 16 [ 415.250610][ T30] audit: type=1326 audit(1771059895.864:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11827 comm="syz.4.1722" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52e3f9bf79 code=0x0 [ 415.340440][ T7731] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 415.359408][ T7731] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.371010][ T7731] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.397229][ T7731] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 415.413554][ T7731] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 415.423168][ T7731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.918131][T11835] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1724'. [ 416.375694][ T7731] usb 2-1: config 0 descriptor?? [ 416.423560][ T7719] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 416.645830][ T7719] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.653747][ T30] audit: type=1400 audit(1771059897.264:1003): avc: denied { connect } for pid=11839 comm="syz.3.1728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 416.656907][ T7719] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.712603][ T7719] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 416.727221][ T7719] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 416.736436][ T7719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.788468][ T51] Bluetooth: hci3: unknown advertising packet type: 0x75 [ 416.788606][ T51] Bluetooth: hci3: Malformed LE Event: 0x02 [ 416.889163][ T7719] usb 1-1: config 0 descriptor?? [ 417.167542][ T30] audit: type=1400 audit(1771059897.774:1004): avc: denied { mount } for pid=11805 comm="syz.1.1714" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 417.446851][ T7731] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0013/input/input28 [ 417.509570][T11859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1730'. [ 417.523718][ T30] audit: type=1326 audit(1771059898.144:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11856 comm="syz.4.1731" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52e3f9bf79 code=0x0 [ 417.549693][ T7719] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 417.572302][T11859] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1730'. [ 417.585326][ T7719] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 417.592738][ T7719] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 417.605989][ T7719] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 417.627854][ T7731] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0013/input/input29 [ 417.656311][ T7719] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 417.673990][ T7719] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 417.695537][ T7719] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 417.711427][ T7719] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 417.728809][ T30] audit: type=1400 audit(1771059898.344:1006): avc: denied { ioctl } for pid=11830 comm="syz.0.1723" path="socket:[38734]" dev="sockfs" ino=38734 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 417.768487][ T7731] kye 0003:0458:5013.0013: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 417.791886][ T7719] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 417.816676][ T7719] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 417.831648][ T30] audit: type=1400 audit(1771059898.404:1007): avc: denied { getopt } for pid=11830 comm="syz.0.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 417.860758][ T7719] plantronics 0003:047F:FFFF.0014: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 418.040634][ T7719] usb 1-1: USB disconnect, device number 42 [ 418.102032][T11873] fuse: Unknown parameter 'user_i00000000000000000000' [ 418.820024][ T30] audit: type=1326 audit(1771059899.434:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11884 comm="syz.3.1738" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb2ebf9bf79 code=0x0 [ 418.845851][ T5867] usb 2-1: reset high-speed USB device number 39 using dummy_hcd [ 418.984175][T11892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=11892 comm=syz.0.1737 [ 419.100901][T11892] qnx6: unable to read the first superblock [ 419.251299][T11899] syzkaller0: entered promiscuous mode [ 419.261483][T11899] syzkaller0: entered allmulticast mode [ 419.354402][T11904] fuse: Unknown parameter 'group_id00000000000000000000' [ 419.526798][T11907] fuse: Unknown parameter 'user_i00000000000000000000' [ 419.621151][ T30] audit: type=1326 audit(1771059900.234:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.4.1745" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52e3f9bf79 code=0x0 [ 419.690535][ T7731] usb 2-1: USB disconnect, device number 39 [ 420.123592][ T7719] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 420.253589][ T30] audit: type=1400 audit(1771059900.864:1010): avc: denied { getopt } for pid=11928 comm="syz.1.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 420.293564][ T7719] usb 1-1: Using ep0 maxpacket: 32 [ 420.310767][ T7719] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 420.327041][ T7719] usb 1-1: config 0 has no interface number 0 [ 420.350659][ T7719] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 420.359121][T11934] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1753'. [ 420.359981][ T7719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.382046][ T7719] usb 1-1: Product: syz [ 420.390611][ T7719] usb 1-1: Manufacturer: syz [ 420.404521][ T7719] usb 1-1: SerialNumber: syz [ 420.415677][ T7719] usb 1-1: config 0 descriptor?? [ 420.858658][ T7719] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 420.869735][ T7719] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 420.990834][T11939] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1755'. [ 421.302863][ T7719] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 421.313933][ T7719] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 421.326154][ T7719] usb 1-1: USB disconnect, device number 43 [ 421.461805][T11952] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1759'. [ 421.546994][T11952] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1759'. [ 421.552351][T11957] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 421.609707][ T6020] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.610678][T11957] netlink: 'syz.3.1761': attribute type 3 has an invalid length. [ 421.621190][ T6020] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.636212][ T6020] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.649857][ T6020] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.048986][T11988] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1770'. [ 423.129993][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1772'. [ 423.179607][T11993] netlink: 'syz.1.1772': attribute type 30 has an invalid length. [ 423.204183][T11996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1772'. [ 423.213079][T11996] netlink: 'syz.1.1772': attribute type 30 has an invalid length. [ 423.306599][T12002] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1774'. [ 423.509722][ T30] audit: type=1326 audit(1771059904.124:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12011 comm="syz.0.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e139bf79 code=0x7ffc0000 [ 423.595766][ T30] audit: type=1326 audit(1771059904.154:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12011 comm="syz.0.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e139bf79 code=0x7ffc0000 [ 423.615984][T12018] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1781'. [ 423.622947][ T30] audit: type=1326 audit(1771059904.154:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12011 comm="syz.0.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa1e139bf79 code=0x7ffc0000 [ 423.652438][ T30] audit: type=1326 audit(1771059904.154:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12011 comm="syz.0.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e139bf79 code=0x7ffc0000 [ 423.676661][ T30] audit: type=1326 audit(1771059904.154:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12011 comm="syz.0.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e139bf79 code=0x7ffc0000 [ 423.702333][ T30] audit: type=1326 audit(1771059904.154:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12011 comm="syz.0.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fa1e139bf79 code=0x7ffc0000 [ 423.753546][T12016] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 423.758253][ T30] audit: type=1326 audit(1771059904.154:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12011 comm="syz.0.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e139bf79 code=0x7ffc0000 [ 423.785275][ T30] audit: type=1326 audit(1771059904.154:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12011 comm="syz.0.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e139bf79 code=0x7ffc0000 [ 423.810986][ T30] audit: type=1326 audit(1771059904.154:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12011 comm="syz.0.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fa1e139bf79 code=0x7ffc0000 [ 424.141470][ T51] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 424.254640][T12045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1787'. [ 424.329430][T12046] IPVS: Unknown mcast interface: rose0 [ 424.803910][T12052] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 425.242228][T12054] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1790'. [ 425.634044][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 425.634060][ T30] audit: type=1400 audit(1771059906.254:1029): avc: denied { remove_name } for pid=5798 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 425.736708][ T30] audit: type=1400 audit(1771059906.254:1030): avc: denied { rmdir } for pid=5798 comm="syz-executor" name="375" dev="tmpfs" ino=2018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 425.983614][ T7719] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 426.164880][ T7719] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 426.201149][ T7719] usb 2-1: config 0 has no interface number 0 [ 426.211304][ T7719] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 12336, setting to 64 [ 426.251291][ T7719] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 426.260820][ T7719] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 426.270015][T12089] __nla_validate_parse: 2 callbacks suppressed [ 426.270026][T12089] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1801'. [ 426.287244][T12089] vivid-007: disconnect [ 426.293636][ T7719] usb 2-1: Product: syz [ 426.352006][ T7719] usb 2-1: SerialNumber: syz [ 426.358769][T12092] vivid-007: reconnect [ 426.393835][ T7719] usb 2-1: config 0 descriptor?? [ 426.618966][ T7719] cm109 2-1:0.8: invalid payload size 64, expected 4 [ 426.664711][ T7719] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input30 [ 428.109798][T12112] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1796'. [ 428.736476][T12131] FAULT_INJECTION: forcing a failure. [ 428.736476][T12131] name failslab, interval 1, probability 0, space 0, times 0 [ 428.799732][T12131] CPU: 0 UID: 0 PID: 12131 Comm: syz.0.1811 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.799763][T12131] Tainted: [L]=SOFTLOCKUP [ 428.799768][T12131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 428.799778][T12131] Call Trace: [ 428.799783][T12131] [ 428.799790][T12131] dump_stack_lvl+0x100/0x190 [ 428.799822][T12131] should_fail_ex.cold+0x5/0xa [ 428.799843][T12131] ? tomoyo_realpath_from_path+0xb6/0x690 [ 428.799865][T12131] should_failslab+0xc2/0x120 [ 428.799891][T12131] __kmalloc_noprof+0xe0/0x850 [ 428.799916][T12131] tomoyo_realpath_from_path+0xb6/0x690 [ 428.799940][T12131] tomoyo_path_number_perm+0x23c/0x580 [ 428.799965][T12131] ? tomoyo_path_number_perm+0x22e/0x580 [ 428.799993][T12131] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 428.800047][T12131] ? find_held_lock+0x2b/0x80 [ 428.800065][T12131] ? __fget_files+0x215/0x3d0 [ 428.800085][T12131] ? hook_file_ioctl_common+0x146/0x410 [ 428.800113][T12131] ? __fget_files+0x21f/0x3d0 [ 428.800140][T12131] security_file_ioctl+0xd3/0x230 [ 428.800160][T12131] __x64_sys_ioctl+0xb7/0x210 [ 428.800181][T12131] do_syscall_64+0x106/0xf80 [ 428.800210][T12131] ? clear_bhb_loop+0x40/0x90 [ 428.800230][T12131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.800248][T12131] RIP: 0033:0x7fa1e139bf79 [ 428.800262][T12131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.800278][T12131] RSP: 002b:00007fa1e218c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.800295][T12131] RAX: ffffffffffffffda RBX: 00007fa1e1615fa0 RCX: 00007fa1e139bf79 [ 428.800306][T12131] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 428.800316][T12131] RBP: 00007fa1e218c090 R08: 0000000000000000 R09: 0000000000000000 [ 428.800326][T12131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.800336][T12131] R13: 00007fa1e1616038 R14: 00007fa1e1615fa0 R15: 00007ffe435f4cb8 [ 428.800360][T12131] [ 428.802676][T12131] ERROR: Out of memory at tomoyo_realpath_from_path. [ 429.176150][T12136] fuse: Unknown parameter 'user_i00000000000000000000' [ 430.729050][T12156] fuse: Unknown parameter '' [ 430.856331][T12160] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.863660][T12160] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.876187][T12160] bridge0: entered allmulticast mode [ 430.911888][T12163] bridge_slave_1: left allmulticast mode [ 430.918053][T12163] bridge_slave_1: left promiscuous mode [ 430.943671][T12163] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.951917][ T30] audit: type=1400 audit(1771059911.544:1031): avc: denied { write } for pid=12161 comm="syz.2.1819" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 431.084155][T12168] loop9: detected capacity change from 0 to 7 [ 431.092584][ C0] blk_print_req_error: 15 callbacks suppressed [ 431.092600][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 431.108318][ C0] buffer_io_error: 15 callbacks suppressed [ 431.108328][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 431.122832][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 431.132421][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 431.170455][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 431.180193][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 431.188254][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 431.197818][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 431.207132][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 431.216735][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 431.256528][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 431.266212][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 431.276367][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 431.285945][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 431.296516][T12172] overlayfs: failed to clone upperpath [ 431.310454][T12168] ldm_validate_partition_table(): Disk read failed. [ 431.319742][T12163] bridge_slave_0: left allmulticast mode [ 431.325449][T12163] bridge_slave_0: left promiscuous mode [ 431.333325][T12163] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.544948][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 431.554542][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 431.563637][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 431.573227][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 431.998203][ C1] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 432.005180][ C1] ------------[ cut here ]------------ [ 432.010789][ C1] URB ffff88801dafa000 submitted while active [ 432.016913][ C1] WARNING: drivers/usb/core/urb.c:380 at usb_submit_urb+0x15fa/0x1910, CPU#1: syz.1.1796/12110 [ 432.027230][ C1] Modules linked in: [ 432.031267][ C1] CPU: 1 UID: 0 PID: 12110 Comm: syz.1.1796 Tainted: G L syzkaller #0 PREEMPT(full) [ 432.042175][ C1] Tainted: [L]=SOFTLOCKUP [ 432.046472][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 432.056511][ C1] RIP: 0010:usb_submit_urb+0x15fd/0x1910 [ 432.062125][ C1] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 0d 8d c1 fa 48 8d 3d 56 f0 9f 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00 [ 432.081715][ C1] RSP: 0018:ffffc90000a08ab8 EFLAGS: 00010087 [ 432.087760][ C1] RAX: 0000000000004699 RBX: ffff88801dafa000 RCX: ffffc900023d1000 [ 432.095705][ C1] RDX: 0000000000040000 RSI: ffff88801dafa000 RDI: ffffffff90e576d0 [ 432.103656][ C1] RBP: ffff8880775c8858 R08: 0000000000000001 R09: 0000000000000000 [ 432.111600][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 432.119543][ C1] R13: ffff8880775c8857 R14: ffff88802168c180 R15: 000000000000000f [ 432.127678][ C1] FS: 0000000000000000(0000) GS:ffff88812448b000(0000) knlGS:0000000000000000 [ 432.136580][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 432.143136][ C1] CR2: 0000200000008000 CR3: 000000005fa77000 CR4: 00000000003526f0 [ 432.151085][ C1] Call Trace: [ 432.154356][ C1] [ 432.157182][ C1] cm109_urb_irq_callback+0x479/0xa90 [ 432.162536][ C1] __usb_hcd_giveback_urb+0x38d/0x610 [ 432.167890][ C1] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 432.173063][ C1] dummy_timer+0xd85/0x3670 [ 432.177545][ C1] ? do_raw_spin_lock+0x128/0x260 [ 432.182542][ C1] ? find_held_lock+0x2b/0x80 [ 432.187193][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 432.192810][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 432.198416][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 432.204197][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 432.209818][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 432.214730][ C1] ? mark_held_locks+0x40/0x70 [ 432.219484][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 432.225285][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 432.230210][ C1] __hrtimer_run_queues+0x50e/0x990 [ 432.235398][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 432.241100][ C1] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 432.247154][ C1] hrtimer_run_softirq+0x17d/0x350 [ 432.252266][ C1] handle_softirqs+0x1ea/0x910 [ 432.257007][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 432.262268][ C1] __irq_exit_rcu+0xef/0x150 [ 432.266841][ C1] irq_exit_rcu+0x9/0x30 [ 432.271074][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 432.276710][ C1] [ 432.279619][ C1] [ 432.282527][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 432.288486][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 432.294878][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 76 02 60 f6 48 89 df e8 5e 50 60 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 c5 97 50 f6 65 8b 05 ce cf 85 08 85 c0 74 16 5b [ 432.314466][ C1] RSP: 0018:ffffc9000bd1f880 EFLAGS: 00000246 [ 432.320506][ C1] RAX: 0000000000000006 RBX: ffff888026360000 RCX: 0000000000000040 [ 432.328457][ C1] RDX: 0000000000000000 RSI: ffffffff8de6b9c0 RDI: ffffffff8c1adaa0 [ 432.336401][ C1] RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000000 [ 432.344348][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888026360000 [ 432.352290][ C1] R13: 0000000000000000 R14: 00000000ac6d0000 R15: ffff888026360c00 [ 432.360241][ C1] dummy_pullup+0x1e6/0x280 [ 432.364721][ C1] ? __pfx_dummy_pullup+0x10/0x10 [ 432.369717][ C1] usb_gadget_disconnect_locked+0x142/0x4b0 [ 432.375584][ C1] gadget_unbind_driver+0xd8/0x4f0 [ 432.380669][ C1] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 432.386381][ C1] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 432.392077][ C1] device_remove+0xcb/0x180 [ 432.396571][ C1] device_release_driver_internal+0x42e/0x600 [ 432.402626][ C1] driver_detach+0xd8/0x1b0 [ 432.407114][ C1] bus_remove_driver+0x13b/0x2e0 [ 432.412037][ C1] driver_unregister+0x76/0xb0 [ 432.416776][ C1] usb_gadget_unregister_driver+0x49/0x70 [ 432.422479][ C1] raw_release+0x19b/0x260 [ 432.426879][ C1] ? __pfx_raw_release+0x10/0x10 [ 432.431787][ C1] __fput+0x3ff/0xb40 [ 432.435751][ C1] task_work_run+0x150/0x240 [ 432.440322][ C1] ? __pfx_task_work_run+0x10/0x10 [ 432.445411][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 432.450585][ C1] do_exit+0x829/0x2a30 [ 432.454727][ C1] ? __pfx_do_exit+0x10/0x10 [ 432.459293][ C1] ? do_raw_spin_lock+0x128/0x260 [ 432.464296][ C1] ? find_held_lock+0x2b/0x80 [ 432.468945][ C1] ? get_signal+0x7e0/0x21e0 [ 432.473514][ C1] do_group_exit+0xd5/0x2a0 [ 432.478010][ C1] get_signal+0x1ec7/0x21e0 [ 432.482499][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 432.487411][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 432.492588][ C1] ? __pfx_get_signal+0x10/0x10 [ 432.497412][ C1] ? trace_sched_exit_tp+0xcd/0x100 [ 432.502589][ C1] arch_do_signal_or_restart+0x91/0x7a0 [ 432.508110][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 432.514245][ C1] ? __x64_sys_recvmmsg+0x1d9/0x280 [ 432.519424][ C1] exit_to_user_mode_loop+0x86/0x4a0 [ 432.524686][ C1] ? rcu_is_watching+0x12/0xc0 [ 432.529422][ C1] do_syscall_64+0x67c/0xf80 [ 432.533988][ C1] ? clear_bhb_loop+0x40/0x90 [ 432.538640][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.544504][ C1] RIP: 0033:0x7fc23479bf79 [ 432.548900][ C1] Code: Unable to access opcode bytes at 0x7fc23479bf4f. [ 432.555913][ C1] RSP: 002b:00007fc2356b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 432.564307][ C1] RAX: 0000000000010106 RBX: 00007fc234a16090 RCX: 00007fc23479bf79 [ 432.572253][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 432.580196][ C1] RBP: 00007fc2348327e0 R08: 0000000000000000 R09: 0000000000000000 [ 432.588148][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 432.596092][ C1] R13: 00007fc234a16128 R14: 00007fc234a16090 R15: 00007ffe01e5e2c8 [ 432.604050][ C1] [ 432.607043][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 432.614300][ C1] CPU: 1 UID: 0 PID: 12110 Comm: syz.1.1796 Tainted: G L syzkaller #0 PREEMPT(full) [ 432.625206][ C1] Tainted: [L]=SOFTLOCKUP [ 432.629500][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 432.639527][ C1] Call Trace: [ 432.642791][ C1] [ 432.645608][ C1] dump_stack_lvl+0x100/0x190 [ 432.650269][ C1] vpanic+0x552/0x970 [ 432.654234][ C1] ? __pfx_vpanic+0x10/0x10 [ 432.658712][ C1] panic+0xd1/0xe0 [ 432.662402][ C1] ? __pfx_panic+0x10/0x10 [ 432.666794][ C1] check_panic_on_warn.cold+0x19/0x34 [ 432.672140][ C1] ? usb_submit_urb+0x15fa/0x1910 [ 432.677137][ C1] __warn.cold+0x191/0x2f8 [ 432.681526][ C1] __report_bug+0x296/0x3d0 [ 432.686013][ C1] ? usb_submit_urb+0x15fa/0x1910 [ 432.691033][ C1] ? __pfx___report_bug+0x10/0x10 [ 432.696043][ C1] ? register_lock_class+0x187/0x560 [ 432.701316][ C1] ? dev_printk_emit+0xd2/0x10d [ 432.706153][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 432.711423][ C1] report_bug_entry+0xe1/0x290 [ 432.716170][ C1] ? usb_submit_urb+0x15fd/0x1910 [ 432.721187][ C1] handle_bug+0x1c9/0x2a0 [ 432.725498][ C1] exc_invalid_op+0x17/0x50 [ 432.729980][ C1] asm_exc_invalid_op+0x1a/0x20 [ 432.734803][ C1] RIP: 0010:usb_submit_urb+0x15fd/0x1910 [ 432.740412][ C1] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 0d 8d c1 fa 48 8d 3d 56 f0 9f 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00 [ 432.759990][ C1] RSP: 0018:ffffc90000a08ab8 EFLAGS: 00010087 [ 432.766040][ C1] RAX: 0000000000004699 RBX: ffff88801dafa000 RCX: ffffc900023d1000 [ 432.773982][ C1] RDX: 0000000000040000 RSI: ffff88801dafa000 RDI: ffffffff90e576d0 [ 432.781923][ C1] RBP: ffff8880775c8858 R08: 0000000000000001 R09: 0000000000000000 [ 432.789863][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 432.797805][ C1] R13: ffff8880775c8857 R14: ffff88802168c180 R15: 000000000000000f [ 432.805757][ C1] ? usb_submit_urb+0x15f3/0x1910 [ 432.810763][ C1] cm109_urb_irq_callback+0x479/0xa90 [ 432.816118][ C1] __usb_hcd_giveback_urb+0x38d/0x610 [ 432.821475][ C1] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 432.826648][ C1] dummy_timer+0xd85/0x3670 [ 432.831130][ C1] ? do_raw_spin_lock+0x128/0x260 [ 432.836127][ C1] ? find_held_lock+0x2b/0x80 [ 432.840784][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 432.846399][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 432.852013][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 432.857792][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 432.863401][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 432.868311][ C1] ? mark_held_locks+0x40/0x70 [ 432.873048][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 432.878831][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 432.883741][ C1] __hrtimer_run_queues+0x50e/0x990 [ 432.888919][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 432.894613][ C1] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 432.900660][ C1] hrtimer_run_softirq+0x17d/0x350 [ 432.905751][ C1] handle_softirqs+0x1ea/0x910 [ 432.910490][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 432.915748][ C1] __irq_exit_rcu+0xef/0x150 [ 432.920311][ C1] irq_exit_rcu+0x9/0x30 [ 432.924524][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 432.930131][ C1] [ 432.933052][ C1] [ 432.935955][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 432.941908][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 432.948295][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 76 02 60 f6 48 89 df e8 5e 50 60 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 c5 97 50 f6 65 8b 05 ce cf 85 08 85 c0 74 16 5b [ 432.967872][ C1] RSP: 0018:ffffc9000bd1f880 EFLAGS: 00000246 [ 432.973908][ C1] RAX: 0000000000000006 RBX: ffff888026360000 RCX: 0000000000000040 [ 432.981848][ C1] RDX: 0000000000000000 RSI: ffffffff8de6b9c0 RDI: ffffffff8c1adaa0 [ 432.989788][ C1] RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000000 [ 432.997729][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888026360000 [ 433.005671][ C1] R13: 0000000000000000 R14: 00000000ac6d0000 R15: ffff888026360c00 [ 433.013623][ C1] dummy_pullup+0x1e6/0x280 [ 433.018101][ C1] ? __pfx_dummy_pullup+0x10/0x10 [ 433.023098][ C1] usb_gadget_disconnect_locked+0x142/0x4b0 [ 433.028966][ C1] gadget_unbind_driver+0xd8/0x4f0 [ 433.034051][ C1] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 433.039572][ C1] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 433.045275][ C1] device_remove+0xcb/0x180 [ 433.049750][ C1] device_release_driver_internal+0x42e/0x600 [ 433.055790][ C1] driver_detach+0xd8/0x1b0 [ 433.060265][ C1] bus_remove_driver+0x13b/0x2e0 [ 433.065190][ C1] driver_unregister+0x76/0xb0 [ 433.069946][ C1] usb_gadget_unregister_driver+0x49/0x70 [ 433.075650][ C1] raw_release+0x19b/0x260 [ 433.080038][ C1] ? __pfx_raw_release+0x10/0x10 [ 433.084960][ C1] __fput+0x3ff/0xb40 [ 433.088936][ C1] task_work_run+0x150/0x240 [ 433.093519][ C1] ? __pfx_task_work_run+0x10/0x10 [ 433.098608][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 433.103789][ C1] do_exit+0x829/0x2a30 [ 433.107924][ C1] ? __pfx_do_exit+0x10/0x10 [ 433.112490][ C1] ? do_raw_spin_lock+0x128/0x260 [ 433.117490][ C1] ? find_held_lock+0x2b/0x80 [ 433.122139][ C1] ? get_signal+0x7e0/0x21e0 [ 433.126712][ C1] do_group_exit+0xd5/0x2a0 [ 433.131193][ C1] get_signal+0x1ec7/0x21e0 [ 433.135672][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 433.140584][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 433.145759][ C1] ? __pfx_get_signal+0x10/0x10 [ 433.150583][ C1] ? trace_sched_exit_tp+0xcd/0x100 [ 433.155757][ C1] arch_do_signal_or_restart+0x91/0x7a0 [ 433.161279][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 433.167410][ C1] ? __x64_sys_recvmmsg+0x1d9/0x280 [ 433.172593][ C1] exit_to_user_mode_loop+0x86/0x4a0 [ 433.177852][ C1] ? rcu_is_watching+0x12/0xc0 [ 433.182598][ C1] do_syscall_64+0x67c/0xf80 [ 433.187172][ C1] ? clear_bhb_loop+0x40/0x90 [ 433.191825][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.197690][ C1] RIP: 0033:0x7fc23479bf79 [ 433.202077][ C1] Code: Unable to access opcode bytes at 0x7fc23479bf4f. [ 433.209062][ C1] RSP: 002b:00007fc2356b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 433.217455][ C1] RAX: 0000000000010106 RBX: 00007fc234a16090 RCX: 00007fc23479bf79 [ 433.225399][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 433.233343][ C1] RBP: 00007fc2348327e0 R08: 0000000000000000 R09: 0000000000000000 [ 433.241285][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 433.249236][ C1] R13: 00007fc234a16128 R14: 00007fc234a16090 R15: 00007ffe01e5e2c8 [ 433.257186][ C1] [ 433.260484][ C1] Kernel Offset: disabled [ 433.264783][ C1] Rebooting in 86400 seconds..