last executing test programs: 4m37.375193048s ago: executing program 2 (id=1453): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x2c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24004880) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) gettid() io_pgetevents(0x0, 0x4, 0x3, &(0x7f0000000240)=[{}, {}, {}], &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000000)={0x0}) socket$netlink(0x10, 0x3, 0x10) r3 = open(&(0x7f0000000380)='./bus\x00', 0x105040, 0x145) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r3], 0x2b) sendfile(r5, r3, 0x0, 0x4000000053d2) 4m36.312811958s ago: executing program 2 (id=1460): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = creat(0x0, 0x93) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x2, 0x10001, 0x8, 0xfff, 0xffffff73}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x0, &(0x7f0000000180)='pquota\x00\x00\xe4\xb7\xceZpB\xe2\x93T\xe4Y\x91\x05\xe1q\xb3\x83\x83\xfe\x14\xe2\xfe\x8b\xfe\xad{$\xbb\xdf\b\x0fN6\xe6N9\x9a\xe2w\x1cW\x9fl\x0fL\x9d\xafE\xeb\x9b;?\xe0\xb4\x8am\xe9\xecv\xe6\xd9\x88\xf2\v\x94D\xb4\xdf\xb3M\xf9\xdaJ\x1e2\x9b\x00\x97\xabe\xc2H.v\x06\xce\xb1\xdd1@2\x14\x85G\xef\xafu\xff\xcdQ\x1d\b!\f\xdbI\xc3\xbd{\xb9\xd8yn\xd0T\x91\xebq\xaauw\x87O\x9e\x15\xd4\xa2\x83\xa5)\t\x96]\xefg\x8e\x16\xa7\xf6\xf5\x9c\xac\xc5\xee\xfb\xff\xff\xff\xff\xff\xff\xff\xb7\x05\xfd\x8b\x93o9:\x00\x80\xe1^\xc8\xe9\x83') r2 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000028c0)={'wlan0\x00', &(0x7f0000000100)=@ethtool_gstrings={0x1b, 0x1}}) syz_usb_connect(0x3, 0x34, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000000000000000705e3"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x1e5782) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc0405602, &(0x7f00000001c0)=@multiplanar_fd={0x0, 0x1, 0x4, 0x24, 0x8, {0x0, 0x2710}, {0x2, 0xc, 0x3, 0xff, 0xc, 0x7, 'P[9A'}, 0x56b, 0x4, {0x0}, 0xd}) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={&(0x7f0000000140)="daa2c810654de07f1f9b586d5e1cfc7b5ec97fc513462e09278b90d206fa1595c5718c04606721a343dafec5ff7e1dbbd7d6673fe54623dfa02617a82155f866e60a3ff68d67be0912a309920d0a5f5ed91fe7a20bb649f892c7ad2160cde4a634de66f5419f6ee351a561fa0d04e5a1cac5", &(0x7f0000000580)=""/200, &(0x7f0000000680)="a1a5a20af4cbc68e7de62fbc970f1341b2639aefa0e8d3b7b791d1a365d35c1bf25e18c7f4", &(0x7f00000006c0)="bede4b0a724e376e25e52f78af7d9093f95ba4aa81955d174fdd1904ca1ed631e6370d23b3de4bd436c24a10ea5f3cfe45152c84da2e0cbd469b4dfe1305d48794b1c70552265109e1664fd0b4b52900117f9884015e2533c640f13a4fc8b9bf1d6388f313e289c5434a0b10b1c640ff55213cc47fc7c4d9bd8fe9aff8830a35f518f0d6953097e711dcbd023d733d4c", 0xa, r1, 0x4}, 0x38) getpid() 4m33.045778133s ago: executing program 2 (id=1465): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) fcntl$setpipe(r1, 0x407, 0x7f) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001a0001000000ff000000"], 0x14}}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4m32.559039296s ago: executing program 2 (id=1467): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x30, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x1, 0x10, 0xf9, "", [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x2, 0x6, 0x0, 0x3, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x0, 0x40}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x8, 0xa0, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x7, 0x4, 0x3}}}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f0000000400)=@string={0x2}}]}) 4m29.556807586s ago: executing program 2 (id=1478): r0 = open(&(0x7f0000000280)='.\x00', 0x400, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x7a, 0x0, 0x1, 0x7, 0x10000, @value=r0}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x2c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24004880) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) r5 = gettid() tkill(r5, 0x12) io_pgetevents(0x0, 0x4, 0x3, &(0x7f0000000240)=[{}, {}, {}], &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000000)={0x0}) socket$netlink(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000380)='./bus\x00', 0x105040, 0x145) creat(&(0x7f0000000100)='./bus\x00', 0x0) msgget$private(0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/vlan/config\x00') read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) 4m29.197974061s ago: executing program 2 (id=1480): add_key$user(&(0x7f0000000140), 0x0, &(0x7f0000000740)="f4", 0x1, 0xfffffffffffffffb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x1) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) getpeername(r3, 0x0, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r4, 0x0, 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002540)={&(0x7f00000000c0)={0x1c, r6, 0xad0e41e9ad2f93a7, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044884}, 0x4000000) 4m28.789275668s ago: executing program 32 (id=1480): add_key$user(&(0x7f0000000140), 0x0, &(0x7f0000000740)="f4", 0x1, 0xfffffffffffffffb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x1) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) getpeername(r3, 0x0, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r4, 0x0, 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002540)={&(0x7f00000000c0)={0x1c, r6, 0xad0e41e9ad2f93a7, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044884}, 0x4000000) 3m9.143086712s ago: executing program 4 (id=1715): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) socket$rxrpc(0x21, 0x2, 0xa) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c000600010000"], 0x48}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x20004080) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fbdbdf2503000000100007800c00018008000100", @ANYRES32, @ANYBLOB="080001"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000844) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x170, 0xc8, 0x8, 0x170, 0x5803, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [0x0, 0xff], [], 'lo\x00', 'geneve1\x00', {}, {}, 0x0, 0x0, 0x0, 0x55}, 0x0, 0xa8, 0x110, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x6, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x0, 0x7, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) r8 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd01800905020210020200000905820200"], 0x0) syz_usb_control_io$uac1(r8, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$lan78xx(r8, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)={0x40, 0x3, 0x6, "b5b986ccab81"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, 0xffffffffffffffff, 0x0) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) 3m5.253052581s ago: executing program 4 (id=1726): r0 = socket(0x10, 0x3, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x24) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="033f000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (fail_nth: 2) 3m4.863219673s ago: executing program 4 (id=1729): r0 = open(&(0x7f0000000280)='.\x00', 0x400, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x7a, 0x0, 0x1, 0x7, 0x10000, @value=r0}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x2c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24004880) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) r5 = gettid() tkill(r5, 0x12) io_pgetevents(0x0, 0x4, 0x0, &(0x7f0000000240), &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000000)={0x0}) socket$netlink(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000100)='./bus\x00', 0x0) r6 = msgget$private(0x0, 0x0) msgctl$MSG_STAT(r6, 0xb, &(0x7f00000003c0)=""/172) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendfile(r7, 0xffffffffffffffff, 0x0, 0x4000000053d2) 3m3.521419279s ago: executing program 4 (id=1730): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x2, 0x3a, 0x8, 0xffffffffffffffff}) symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x1a, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff4, 0x0, 0xff, 0x2, 0x0, '\x00', 0xa}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r5, 0xae71, &(0x7f0000000080)={0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="02000000910800004003000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0100002001000000040000600b0200000a7c7f0dc3f5eeab1c902c994d94ac755e6090d7f1281e2b311069803045c6e2e7c652262e39e89272d2424a0902303bc5e6ee70a9eb045336d93ae80eaf2cce5d6832029b3c214da1"], 0x80}, 0x1, 0x0, 0x0, 0x880}, 0x14000) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r6 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x40049366, &(0x7f0000000180)) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) 3m2.993105807s ago: executing program 4 (id=1733): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x18140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) openat(r4, &(0x7f0000000280)='.\x00', 0x2000, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273", 0x7, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x200040f0}, 0x20004810) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000ffff5700cad20000000009000000000057fd702db8268a7eb645656678137cec2bd48e26aafb3651c523f3e49e8435e25820ae4e1a0f4c1b45e1b75e69f0f5ce6298f61af38aff96cfaea0532398a06a11c6f35f244682157f61e0fbc79f951896b938c091feaf911ac57a044d4cab020e732eaab3a1451140542e6069", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000ffffff7f00000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRESHEX=r2, @ANYRES8, @ANYBLOB='\x00'/20], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x1c, &(0x7f0000000980)=ANY=[@ANYBLOB="180800000000000000000000409200001811f5ff3600a26e57ed1b78b83e5071b6f6de3a4b3a19a761687ec99e7fb9bca0220043b6719341a5829a9340e5d1032dcbb139cdb53e6f2199447a08f3d7060000000000000a7a24d43689cbc9f1b2080f38df78c012e03bf8239ce65e8b36a8f1abf6821bb4e6d79de32cdd6de7c75cff47b35bebe1034ae34bef3b7c4c5123bdb5e6", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000000000b5090100000000009500000000000000b509000002000000639a04fe00000000b5090000fdffffffc39a00fee1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x27, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$alg(r6, &(0x7f00000010c0)=[{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000004c0)="f78d9ca38f413535ff09000063ff3448412ba8", 0x13}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380), 0x0, 0x40}, {0x0, 0x0, &(0x7f0000000bc0), 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x290, 0x8010}], 0x2, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/79, 0x4f}, {&(0x7f0000000200)=""/76, 0x4c}], 0x2}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="010000000012000000002b000880030044f1b132e1668c44bdbde9c42f30f81bc61cfea1c4bb384a429f2c853f546a35635f9c3615e538771488da2e18c2cd45f03d90afd522825c68a65704893a43d3a5d2662d9a5bd38f71263562e3da4a5fc9bdc75807ee9adab105891ee46e83a68c619f5911cf80b165d36109785549b95b11c3a5dc2e31bd05efbf94ecb8b2b1b4178fe9b68daf0f2066b23217b8ba40f0298d03ad800f5e50d4f53dab6122abea63b0137ea522c28ca8d2c942bcb59badfe50f912cf1c14e2730551f1d08f5ec875632e32d758690ee57300afd6c935c9958c0876733ff0787aee67ede3fef26fd5bd37", @ANYRES32=r11, @ANYRESHEX=r1], 0x6f4}}, 0x40044) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) 3m2.841929546s ago: executing program 4 (id=1734): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$COMEDI_POLL(0xffffffffffffffff, 0x640f) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="090000000400000004000000070000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r2}, 0x38) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@gettaction={0x28, 0x32, 0x1, 0x72bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc1) r4 = socket(0x840000000002, 0x3, 0xff) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000700)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_delrule={0x44, 0x21, 0x1, 0x70bd2c, 0x25dfdbfe, {0xa, 0x20, 0x20, 0x8, 0xfe, 0x0, 0x0, 0x1, 0x10}, [@FRA_DST={0x14, 0x1, @loopback}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}}, 0x0) sendmsg$inet(r4, &(0x7f0000000900)={&(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000600)="9745010000006000012c8cc5ffff", 0xe}, {&(0x7f0000000640)="865bfdbd2e3eefbd8bde56327327", 0xe}], 0x2}, 0x4004804) 3m2.342353505s ago: executing program 33 (id=1734): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$COMEDI_POLL(0xffffffffffffffff, 0x640f) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="090000000400000004000000070000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r2}, 0x38) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@gettaction={0x28, 0x32, 0x1, 0x72bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc1) r4 = socket(0x840000000002, 0x3, 0xff) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000700)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_delrule={0x44, 0x21, 0x1, 0x70bd2c, 0x25dfdbfe, {0xa, 0x20, 0x20, 0x8, 0xfe, 0x0, 0x0, 0x1, 0x10}, [@FRA_DST={0x14, 0x1, @loopback}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}}, 0x0) sendmsg$inet(r4, &(0x7f0000000900)={&(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000600)="9745010000006000012c8cc5ffff", 0xe}, {&(0x7f0000000640)="865bfdbd2e3eefbd8bde56327327", 0xe}], 0x2}, 0x4004804) 14.694796229s ago: executing program 1 (id=2218): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x9901) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r6 = syz_open_dev$loop(&(0x7f0000000100), 0xf, 0xc28c2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x14, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd0000009f19000000000000000000ffff0000000000000000000000004e00", [0x7, 0xffffffff9673e35d]}}) recvmsg(r5, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r8, 0x0, 0x0, &(0x7f00000041c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {0x1, 0x6}, [], {}, [], {0x10, 0x7}, {0x20, 0x1}}, 0x24, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8fffdffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000010000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000080000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x40) 13.483301402s ago: executing program 1 (id=2222): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000d00)="514eb043c1744fe0f3995a6c8766219ae464bbb269e0209aa8f95bad4be67e9d0311cc6254dd306334f312678157ac639e4b20d963e1c1ff5c1cc34459b6129a10b93f71344fd2f8219da91e3a158d37a30b6d677484f8b3d8bd8d18a953862d03561b4a61ba114eed5abf576424432d83d03457d157e321eb8f93c7f82d0b038e8f4e8d4d29c20b2aabbd990930368672392abe75d6479baf4238322b871043e5956beb06c71b5d9e4963da4693a8b63f44381b6711078f0203ed62f14f19465094ee00633691b3d28a281718fed3c18f621f117b01871d758c9faabc01a268747966ba634b05886a27d260c31151a91a0a04d5ea3fb4b07e6d64526f366a39cff9635eaf3dca07780b19f90cc8374e164263c1d396ba08fd950b183efdec9a3b8edabac5366ffe36784bc0e3ec7685939a4f77d2e4b0facd02c5bf175ffc9472295290ab4b8cfd5be2601ec22e0b7a91510a1dcae741f20fbcde4be45484505f53eb08f3bc69b6d360e274eea7fa4972f094ccb2c66897398d158df3f1ed5e802ec9435fb8e9a74d66c738ac815a9783e55b53053312b052c613e1499cdb972d22995832332a58e304a274061f463ac417ead7518e7e548a89496ddf6426f3d970ea3bb0b9c4f164fd164c69809094324c3abe21d80e592d6b0ca3d7512a08374d53c8303ff21c19961f90835d35591caba445e61737cbca9352193e70755403f68c2ecae5f964679b0771c6dee6abf7da6561a1954fa85958159b59aeb6a32c0565c9510f665ef3dfc0984a6555fd5011cac0ec0ba41332842646d351ac44f20356f12ffc789253edb403762a58e2a18aa2584b4e2f837221c9fb98c19a5dc94194cb921ac8348c692966b205ef68b51b0654e8135711b02f0d2d5b6d45fe5b3f52e9a9e2299d8b4bf597e5a0558ca9a1082d2521b845c411ab21eebe1c6b51c3578fa2d72c344dfbe44df7d6d47fa29b890ddd2ae60215701c4bc88c4d4a91e0614c9162dd6caf49e0ae922391aac30dc8bc9394dbb081f7c40f7a75831e2381da88e8e3e43905eb0416d30dd79d42620cc89e77dba15e52c84b1793a11aef8896aa0d0275d6142d6e98ade627b4983b12f33fd274fc6755fef9c0e0243640e6dac9973248223382702e9a2d7046064c17e1cbd82cdceb938a7d9aedcec976b7cc2d0bf2930e3a05e5e95824fbc64ef7d94031e3adf7ffb7402439e16327dc04e851961556a78e8b1ad6c4cf10b19f2d0367624c23c5ca978268639ea02af690d5cc8b57118d8afbf0f01ad1f3d998aab624ce59dcf79f510b0cf7e134c7b5fc31b378b11e1328252f6d50fa39adbc5be12276e3c93bf12c47c9a27b2733d38ea37dca46e1ba62f8e50bf3c3d6c03a26ac1412fafa16f9c5d7d49f7f8212d88d5128757c3b291649307091d40d07047fd5dfbcfb93360018cd4eb2afa405bfdbbb3ffcc8d0bea600c7cf6a5dce6531d95fe8398c56005f5e9b4efdd3da00258377c3ad04c4d9f97ea26779507457837ba4fca2a68c768e3f254880c535a79459144821bdf546720b230edacf46ea741afcb24543bd5ea28d1f235ace78febddb25a4262a48159207280603208d5a01416589e7e6beb000a42774847a733db605f75477c8ab17a48a30cdceb99bf03cc150c2d72f6b4412b042c342c616e5ddee9be62146eb2fe4545482374fc3d55257557c02a7359034f120c82fea5803ef5127733c3f1855a51b92f9cf92e3dc4ed9e38c90225892ea7026407839c131ff8d0f55f63c978562ee5dbc74f40b2cb3e1ba76492dc2003ac26b1f2fad405fcb5b0e77b6e830e132e566c424862e47a049e9996ae3cbe62fc24b8f5bb8a75f459326f04a16f806493f0c2d718e7e9e0eee400b5789b4", 0x537}], 0x1}}], 0x1, 0xc0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x5, 0xfffffffffffffffc, 0xffffffff, 0xbf4, 0xfff, 0x808000000000007, 0x800000068], 0x2000, 0x80cd4}) syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x20) 11.939319974s ago: executing program 3 (id=2226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b40)=@newtfilter={0x944, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffff, 0x7}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x918, 0x2, [@TCA_U32_SEL={0x644, 0x5, {0x10, 0x2c, 0x43, 0xb, 0x0, 0x6bff, 0x8001, 0xffff, [{0x10001, 0xe6c00000, 0x5, 0x3}, {0x4, 0x44, 0x2, 0x7f}, {0x4, 0xd0, 0xffffffff, 0x6}, {0x7, 0x2, 0xfff, 0xfffffffe}, {0x10001, 0x65, 0x68, 0x80}, {0x6, 0x68, 0x3, 0x71}, {0x4, 0xc0fe, 0x1, 0x86}, {0x6, 0x400, 0x3, 0x8}, {0x5a9f, 0x8, 0xa45, 0xe0}, {0x10000, 0x9, 0x279e, 0x2}, {0x5, 0xb050, 0x1ff, 0xf41}, {0x40, 0x8, 0x0, 0x1}, {0xff, 0xffffffff, 0x4, 0x7}, {0x5, 0xffffffff, 0x4, 0xad}, {0xfff, 0x6, 0x4, 0x400}, {0x2}, {0x7, 0xe1, 0x1bd, 0x10}, {0xd, 0xfffffffc, 0x8, 0x2}, {0xfffffffc, 0x1, 0x8000, 0x5}, {0x401, 0x7, 0x7, 0x5}, {0x4, 0x95f4, 0x80000000, 0x80000001}, {0xbef3, 0x4, 0x2, 0x6}, {0x3, 0x7f, 0x8, 0x4}, {0xd4, 0xc, 0x10000, 0xffffffff}, {0xffffffff, 0x3, 0x3, 0x3}, {0xa26, 0x9, 0x3, 0x7fffffff}, {0xfffffffa, 0x1, 0x9182, 0x7}, {0x6, 0x7fffffff, 0x40, 0x3}, {0x1000, 0x1a, 0x8}, {0x5, 0x9, 0x7, 0xb2be}, {0x8000, 0x1ff, 0x4, 0x8}, {0x4, 0x4, 0x30c1abf, 0x3}, {0x800, 0x6, 0x7}, {0xef, 0xb66, 0x5, 0x3}, {0x5, 0x8, 0x35b, 0x1e}, {0x5, 0x5, 0x4, 0x3}, {0x0, 0x3ff, 0x100, 0x80000001}, {0x9, 0x8, 0x5523274a, 0xf10}, {0x3, 0xfffffffe, 0x8001, 0x40}, {0xfffffffa, 0x0, 0xc, 0x10001}, {0x6, 0x9, 0x6b1, 0x4}, {0xe4, 0x7, 0x9a, 0x7fff}, {0x7, 0x2133, 0x0, 0xa}, {0x7, 0x3, 0x10000, 0x6}, {0xe7, 0x40, 0x7, 0x425}, {0x2, 0x9, 0x5aaf, 0x7}, {0x1, 0x5, 0x8036, 0x6}, {0x99, 0x9, 0x4, 0x7}, {0xffffffff, 0x0, 0x1000, 0x80000001}, {0x1, 0x8, 0x3d, 0xa}, {0x1, 0xa, 0xd403, 0x1}, {0x80000001, 0x401, 0x7, 0x74}, {0xa35, 0x1, 0xffff, 0x4}, {0xdfa, 0x8, 0x7, 0x7}, {0x4, 0x8, 0xfffffffd, 0x10000}, {0xffff, 0x0, 0x5aa7}, {0xe1, 0x7, 0x5841, 0x9}, {0xfffffff8, 0x0, 0x6, 0x7fff}, {0x9, 0x6, 0xfffffff8, 0x1}, {0x2, 0x80, 0x4, 0x7}, {0x8001, 0xfffffff5, 0x1, 0x1}, {0xe, 0x6, 0xfffffff8, 0x3ff}, {0x2d, 0x80, 0x98, 0x4}, {0x2, 0xde, 0x7, 0x40}, {0x7fff, 0x8, 0x0, 0xd}, {0x4, 0x5, 0xfffffff8, 0x5}, {0x2, 0x7, 0x7, 0x4}, {0x7, 0xb372, 0x2, 0x7}, {0x10, 0xbb6, 0xfffffffc, 0xffffffff}, {0x8, 0x6, 0x5, 0xfb51}, {0x9, 0x0, 0x4f8, 0x8}, {0x8, 0x81d, 0x2, 0x200}, {0x8, 0x80, 0x2, 0x200}, {0x3, 0x90, 0xb}, {0x7, 0x800, 0x5, 0x2}, {0x7, 0x0, 0x5, 0x5}, {0x1, 0x2, 0x4183, 0x2}, {0x21, 0x1000, 0x0, 0xffff}, {0x0, 0x1, 0x1, 0x9}, {0x0, 0x3}, {0x3, 0x2, 0x0, 0x10001}, {0x6058, 0x7, 0x1, 0xaea}, {0x5, 0xffff, 0x35}, {0x10, 0x9, 0xf, 0x29b9}, {0x80, 0x41, 0x43, 0x8}, {0x7, 0x2c98, 0x8, 0x2}, {0x9, 0x1824, 0x2, 0x3}, {0x1ff, 0x7f, 0x5, 0x5}, {0x8, 0x2, 0x8, 0xa00}, {0x9, 0x7f, 0x10000, 0x80000000}, {0x5, 0x6, 0x3aea, 0x8}, {0x6, 0x6, 0x6, 0x660}, {0x9, 0xb, 0x800, 0x6}, {0x5, 0x52, 0x1, 0xbac9}, {0x1, 0x1, 0x2878, 0x2}, {0xfffffff8, 0x4, 0x6, 0x3}, {0xfffff000, 0x2, 0xd683, 0x9}, {0x6, 0x8132, 0xfffffffc, 0xaaa7}, {0x2, 0x10001, 0x1, 0xffffffff}]}}, @TCA_U32_SEL={0x1f4, 0x5, {0x8, 0xb, 0x8, 0x5a5, 0x95a, 0xc, 0x4, 0x1, [{0xfff, 0x1, 0x4, 0x2}, {0x93fd4811, 0x6, 0x4c7, 0xfd3e}, {0x500, 0x400000, 0x493, 0x8}, {0x200, 0x40, 0x3ff, 0x10001}, {0x3, 0x8, 0xffffffff, 0xffff}, {0x0, 0x1b, 0x4, 0x4}, {0x1ff, 0x3, 0x0, 0x9}, {0x1, 0x7fffffff, 0x8, 0x7}, {0x4, 0x4, 0x1b81, 0x1}, {0x8, 0x5, 0xabf2, 0x7}, {0x100, 0x2, 0x0, 0x7}, {0x6, 0x1, 0xf, 0x7ab9}, {0x7ff, 0x6, 0x101, 0x80000001}, {0x9, 0x7, 0xc02b, 0x80000000}, {0x80000001, 0xaed9, 0x6, 0x100}, {0x870, 0x5c411945, 0x6, 0x1ff}, {0x0, 0x1, 0x5134, 0x7}, {0x9, 0x8, 0x1, 0x8}, {0xa69b, 0x3ff, 0xac87, 0x1000}, {0x50fc, 0x3, 0x7, 0x58}, {0x3, 0x9, 0x4, 0x6}, {0x5, 0x3, 0x8, 0x300}, {0xe338, 0x0, 0x81, 0x7}, {0x3, 0x7, 0x47c68bdd, 0x3}, {0xbbc8, 0x6c, 0x10000, 0x6}, {0xd, 0x2, 0x2e75, 0x10001}, {0x4, 0x7, 0x6, 0x7f}, {0x88d6, 0x3, 0x7, 0x40}, {0x8, 0x7, 0x9, 0x2}, {0x6, 0x5, 0x1000, 0xf}]}}, @TCA_U32_SEL={0xc4, 0x5, {0x8, 0x63, 0xf7, 0x32a1, 0x8, 0x9d6, 0x7, 0x0, [{0x78a7, 0x4, 0x7, 0x5}, {0x8001, 0x9, 0xff, 0x2}, {0xffffffc0, 0x0, 0x0, 0xd}, {0x9, 0xffff0001, 0x8, 0x4}, {0x0, 0xffff8189, 0x1, 0x10}, {0x3d, 0x7, 0xa6, 0x80000000}, {0xef84, 0x7fff, 0x7fffffff, 0x54}, {0x8, 0x6, 0xe3, 0x8}, {0x5, 0x2, 0x7, 0xfffffff8}, {0x2, 0xfffffffb, 0x6, 0xfffff800}, {0x6, 0xb, 0x3e, 0x8306}]}}, @TCA_U32_MARK={0x10, 0xa, {0x0, 0xef}}, @TCA_U32_FLAGS={0x8, 0xb, 0x3}]}}]}, 0x944}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) 11.245494039s ago: executing program 3 (id=2229): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) socket$rxrpc(0x21, 0x2, 0xa) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c00060001000000000000000c00020000000000000000001c0007"], 0x48}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x20004080) r4 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fbdbdf2503000000100007800c00018008000100", @ANYRES32, @ANYBLOB="080001"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000844) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x170, 0xc8, 0x8, 0x170, 0x5803, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [0x0, 0xff], [], 'lo\x00', 'geneve1\x00', {}, {}, 0x0, 0x0, 0x0, 0x55}, 0x0, 0xa8, 0x110, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x6, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x0, 0x7, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) r8 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd01800905020210020200000905820200"], 0x0) syz_usb_control_io$uac1(r8, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$lan78xx(r8, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)={0x40, 0x3, 0x6, "b5b986ccab81"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, 0xffffffffffffffff, 0x0) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) 10.833924645s ago: executing program 0 (id=2231): r0 = socket(0x8, 0xa, 0x40) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000080)={{0x84, @private=0xa010101, 0x4e3f, 0x3, 'rr\x00', 0x4, 0x6, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x8000, 0x12d5c, 0x3}}, 0x44) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="ce25f98d", @ANYRES16=r3, @ANYBLOB="00022cbd7000fcdbdf254c0000000c00a6000300000000000000080001007063690011000200303030303a30303a31302e3000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x8054) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e22, 0x3, 'nq\x00', 0x2, 0x4, 0x38}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) 10.597358406s ago: executing program 0 (id=2232): syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12015082d5281b08c00901024ffa0102030109021200013daea0"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x1}}, 0x18) renameat2(r1, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x3) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000980)={0x14, 0x0, &(0x7f0000000940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="000059dbe797"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001600)={0x2c, &(0x7f0000001400)={0x60, 0xa}, 0x0, 0x0, 0x0, 0x0}) 10.59678537s ago: executing program 1 (id=2233): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x62, &(0x7f0000000a00)={@broadcast, @multicast, @val={@void, {0x8100, 0x3, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x0, 0x1ff0000aa}, @mcast2}}}}}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020ac050f022200e5818301090224000101000000090400000203010200092100050001ffff00090581", @ANYBLOB="ebed"], 0x0) syz_usb_connect(0x2, 0x8ef, &(0x7f0000000a80)={{0x12, 0x1, 0x201, 0xe, 0x9a, 0x6c, 0x8, 0x7b0, 0x7, 0xe6e7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8dd, 0x3, 0x28, 0xff, 0x50, 0xf9, "", [{{0x9, 0x4, 0x3c, 0xe2, 0xe, 0xc6, 0x5d, 0xf5, 0xbb, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x4, 0x5, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x91, 0x0, 0x1}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xff80, 0x40, 0xf, "e54037407d8bc834"}]}, @generic={0xce, 0xf, "e0d211eec085495f05d6e953c5d0ec84d1f7ab0567b029707aa7b8848dc374296527ce42662e34e59915b4733004d768cc5f76f07ec9ee4c05e9f915f273036dcc912085a640493d5891cd49db5551d7e4f49188e7481e3ed004304a2347f2a6ba4045f848013c5f535f240efa3485b7383be765586cb0646b77f22544128dc57c205545aab7288c38f4e7476fb2fe241f810b17849f47306edf021957076ca8aca0120bcc462dccfcee51e4cf5f1d8e948de41c92cdfca11f7db18da7605520477eca5b85cc4ef94ea2abb8"}], [{{0x9, 0x5, 0xf, 0x1, 0x400, 0x5, 0x0, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0xbf9}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x3, 0x7f, 0xf5}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x8, 0x1, 0x8, [@generic={0x7a, 0x5, "1ca3c5801a4fa56473a5efbb884f4ddb2f4826ecbe62afca36df0703e76a13d9205d0e40fddb4fd6ea444e21057362977feb0225b0adcf876ca6bac935979a7ac055bfed6b8e4459a21375f259d154847c47ec8873c1cd346af2fce5a609131fb9b58795c7c84f5123bc0dbff57d69af3354909ae4ba0f18"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x5232}]}}, {{0x9, 0x5, 0x1, 0x1, 0x3ff, 0x3, 0x7, 0x1e}}, {{0x9, 0x5, 0x80, 0xc, 0x8, 0x5, 0x6a, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0xfffe}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xf, 0x6}]}}, {{0x9, 0x5, 0x0, 0x3, 0x10, 0xb3, 0x1, 0x6, [@generic={0xe, 0x9, "c2cc96cd63c5b2ee439f4512"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x8, 0x9, 0x6, [@generic={0xd8, 0x21, "98aa170914a7ad04c05092fdd3afc9e78bfca6ba448bdee1b521825a2efa3a6e03471fcbb06b357d915f8b0d8be4ccd5c1500e67712eb30a0b8cfbbf46c1fb5aeb03ae46107d10e68d2128ec57e23d6f0f69749989e3e5f66e6ba2ea13fe34ff5020e4b8f92a20eb31baa00c4f5b0bf755a30a30f57b734880e100b3ef33abbf9893f52f50d157c4dfce6d7d5d2a5782c68d0d5fe788cc6b00c8609a41b29200da9fbd637d490a0eb9ce848582cc9d42d8be95a56b193a759125900ef9c4e13b4e7661532d939e67dbab504f9ad73eba09d8e4484c87"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xa1, 0x7}]}}, {{0x9, 0x5, 0xf, 0x11, 0x10, 0xf, 0x3, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb, 0x4}]}}, {{0x9, 0x5, 0x2, 0x3, 0x10, 0x7, 0x6, 0xe, [@generic={0x8b, 0x21, "fea7b1d5d47b4912ee44ebcde6d0d2704af2ca44d4effb6b994936b26d6314266c1faa99afc0a5dfd124886f798e4530936621af8f749c8f92a4b648a7b273dee659f947ca794e1a8bf71820a9e89bdb2c73da9407b61a1da843a197e4aec5cd639abc4a7aa9ab338f18b8165a37d4f79b7eec5bc42cb26d66608b0ee3825dcd5408ba3955ae72aeae"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x86, 0x1000}]}}, {{0x9, 0x5, 0xb, 0x10, 0x0, 0x6, 0xa5, 0x3}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x9, 0x22, 0xc}}, {{0x9, 0x5, 0xd, 0x1d, 0x40, 0x3, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x9}, @generic={0xa2, 0x6, "5e086d7f93532696f1f08d3763cf44f9bcb2d0d096b5b0252818678ee66e54665a199cf7df70903c590500d91953bc7733f671e0820401c158c15434ae3224a8555432ce28942b0907feaeca1088330eb04aa4702bb3a68b2898055051afe161cfbb9a9a8d632cba39a44814d8e147f789e4b06837e263e1d4d38fc48210bc87b37ad2e8a3a2fe7f636e21ce62d34c4df832bbac35b59a2999f6bceb1cce8af7"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0xaf, 0xd3, 0xcf, [@generic={0x5c, 0x22, "a078a28607efc101cf5cae6d5735a29f70c017ff926c434f49319c1f9e966334586f2c03ce57e15b9bcf158fc207a42953f7e38cf5b44e5a30978d531e0a303d6c4bc5f36b0ea6b49dfb29ddcdaf60d796c1e831ca8ae53c6116"}, @generic={0x43, 0x23, "be0b7d5ca5430480568f4df3f6372760e997aadbfb7c577c2ad59ed6023ec7add9d57d2acf7be017d817d6eecf803b5b7afe53843a9fdbc5fddd3e96fc1a76bdcf"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x7, 0x2, 0xfc}}]}}, {{0x9, 0x4, 0x1b, 0x8, 0x1, 0xff, 0x5d, 0x81, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x2e}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x303, 0x1, 0x2, 0xf}, @selector_unit={0xa, 0x24, 0x5, 0x2, 0x7d, "4f0633e4e4"}, @feature_unit={0x11, 0x24, 0x6, 0x5, 0x5, 0x5, [0x2, 0x2, 0x9, 0x8, 0x9], 0xe7}]}, @generic={0x76, 0xd, "0c1b25cda3bd7293a839a5d5e7b66464c7ef156db0df5b59451b15faab95f9ba1682fb139482bd1894d3b28911227a3d6bbd2d0457521a9f9c94a820dd390b8dc6171fe2a737edc249e12d5ded2a4001e0e22394568a2551f2b67438deeba962cf06adca076425324f7f5537b02455d0548cea25"}], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x9, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x31}]}}]}}, {{0x9, 0x4, 0x92, 0x3, 0xe, 0x40, 0xfb, 0x55, 0x80, [], [{{0x9, 0x5, 0xc, 0x0, 0x20, 0x6, 0x9, 0xd5}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0x9, 0x8, 0x0, [@generic={0x67, 0xc, "72adca93f68a216d7fb469ac90d83950167aed29ac0e085a28b5b5fc48de6d9121e4340290ed74cd624131b5e94cfbd1e8a21ce96d97c816c5ef524936222ed9acd345f55571c36f08ddcb9bba87730ec9987678be95a75cdba7e1ea4b6040b92d6e23123c"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x3c}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x0, 0x28, 0xd1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5}, @generic={0x78, 0x11, "7ccf2ab5ddbd78e10e9d8fead97d2e338e460e8fe4cf12c3bfdcf07cab244bd9874ea7b7d1e145b40126ddb77d1c5dd3805f2c4b6646d60a93abce5b5d51b34edceb1541013ada9d7d60a638a1d6d1ae57fcdfe40b72942da9cff2106e0c9c2ac58d5b43d5671f900eb8ef127a8a0969cc0f25e572fa"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x3ff, 0x3, 0xf2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x1}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0xf7, 0x9, 0x4}}, {{0x9, 0x5, 0xe, 0x3, 0x200, 0x4, 0x6, 0x4, [@generic={0x37, 0x21, "5a0c78fd3781d08fa5c1c2413bd4cc7414cfb5160879a37a2f68b4da91d7a191faea4120c273ab95db2786b8985c75337a1025b5da"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xd7, 0x2}]}}, {{0x9, 0x5, 0x9, 0x3, 0x3ff, 0x10, 0x3, 0x6}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x5, 0x2, 0xe4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x4}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x4, 0x6, 0xff, [@generic={0xba, 0xa, "60df5e779451017ee65d69b9731a5b8c3891da51d0fbc054164d529dd30530fe324cb17c91a095d60f7fe999d220d168777b2282705cfd3194e6e4ca7837a5937eca702a5e9205e6c7eb6fafa2df90d06ef6b1f64fcf9bc30d08557cb9ac56af1f665a7c62ebb718b2fe43d551df6b709e7c886d12a5e0736f39347d38dcd48c81032cd804fe39c33d09f5e269bcb0ac7d6ccc67d8368dff19db9b45195bd3b6ae700a574237b8237689634335879b1d53c13bb2e87ab017"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xd, 0x1ff}]}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x3, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x6}, @generic={0x27, 0x5, "52c2031399b0a9244b1cd8c45fa59722b0475237124f4dcf3b7ddbd73a8aa355b80cc1b552"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x81, 0x7, 0x8}}, {{0x9, 0x5, 0x9, 0x1, 0x8, 0x4, 0xfb, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0xff}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x0, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x81, 0x3}, @generic={0x6d, 0x9, "377f00af190579f3f742fd7713eb9ea497f73c6a1a9d5542eff238aebf4278f93e64213a18f733fec2f2d90a2fa2b94bd3009a6ec4bbb8bc8071e9d17496683e0d1c604f6edcd0f06916a31fcaa0897ae86e6959c4adc62b0fb5ba31652df1885b4c230ae8cf47fad0c55e"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x400, 0x80, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe, 0x7fff}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x8}]}}]}}]}}]}}, &(0x7f0000001780)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x250, 0x1b, 0x7f, 0x8, 0x20}, 0x5, &(0x7f00000013c0)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000001400)=@lang_id={0x4}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x3401}}, {0xf3, &(0x7f0000001480)=@string={0xf3, 0x3, "edcb16fafbdcb4dd1de0409e9ad3380b834e1f4ba03e826a4eb5f1bad6934c5ea1a941787192fb629bd01d2cf23b174f567e5b3c2020644f10fb11c57c236f718a94cff9fd6b3d253852ba7107b7d542c7df4e37b79f6773a552bbd1971bb6022d474c17ae1774a38726004679cc5ad9a665bedd3c242052d375c417d2c38abc899cf9aa13bb3d94854e35c4a060e4da257ea2f6ad9cbc1d6a418506c452fd01e943be7e89122e8f444350d8560d131d479dc254b35398ec9f052735fac1e7dff0cb94fbc7728128d4198b314bb41894088c343afaaf189a55e423fb4b4cbc0ae5ca1a0334d3a78b48a22021db60b42244"}}, {0x9d, &(0x7f0000001580)=@string={0x9d, 0x3, "2edc5c84237a977f330ee7210ff5420c8e451ff1b218cf9d10764a4c1df44683e43304c9c4d23aba848f84b1d1686356dab3d760513b14182ac8311a3cfda2bbc37aa50ae6b1f80e351279d52b9e459217a5e63bba0fd678d996f406c53b847bf6197f10021efb715a9392a48adbc3d21e81a1521ff9a23c10099586538497aec78da80019f88976446dc4440955d4788e3bf028b8b3090a714aff"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x43}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x406}}, {0xa9, &(0x7f00000016c0)=@string={0xa9, 0x3, "d822fe0678ae2471975281cc9bea629d6c1433b9eef92dddbdd017aac21cac5d99663037eab5f34d0de153f047eb7c69f71b135bf6a9d52693aeceb978d8db31dc37f585dd054077d26685f5bb745dccee832dd1179c6cb3b094408334080b35cca92c225f63d54df9bd9d659ea78102382e8b1fdf2c934c5db50c5031089e3eb3aa5c04cd8f4c50428817e68bccdb71a498893ad70c2ec77401c61c6b4997948dbe897c2f5ffe"}}]}) openat$mice(0xffffff9c, &(0x7f0000000100), 0x40800) 10.373884932s ago: executing program 5 (id=2236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir_follow}, {@metacopy_on}]}) r1 = socket(0x40000000015, 0x5, 0x0) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000680)=[{{&(0x7f00000001c0)=@nfc_llcp, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/241, 0xf1}], 0x1, &(0x7f0000000600)=""/91, 0x5b}, 0x9}], 0x1, 0x40010020, &(0x7f0000000700)={r2, r3+60000000}) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xa, 0xa}], 0x10, 0x7ff}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="00d92bee742517b46d39612c2c072ea136c0e26a5d0fa720e0d1650c3686e3f26058", 0x22}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x20000011) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000080)=0x7f) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000000)) read$dsp(r6, &(0x7f0000000280)=""/79, 0x4f) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r7, &(0x7f000001aa40)=""/102392, 0x18ff8) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r8, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x1d, 0x1, 0x5}) socket$nl_route(0x10, 0x3, 0x0) 9.145472217s ago: executing program 5 (id=2238): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x26}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f00007da000/0x3000)=nil, 0x3000, 0x3) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_RANGEINFO(r1, 0x80106408, &(0x7f0000000280)={0xfffffff8, 0x0}) write$RDMA_USER_CM_CMD_BIND(r0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0xd01, 0x0) fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) 8.822303662s ago: executing program 5 (id=2239): mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') preadv(r0, &(0x7f0000001200)=[{&(0x7f0000001d40)=""/4098, 0x1002}], 0x1, 0x9, 0x6a76) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000080)=']\x00', 0x0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a01, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000014f000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x29, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000c80)=ANY=[@ANYBLOB="12015002e9973f40450c0a809d5a0102030109021200010081909c0904"], &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000002bc0)=@vmx={0x109, 0x0, 0x2080, {0x26000, 0xd000, {}, 0x1, 0x20000009a2}, {"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", "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"}}) 8.389759301s ago: executing program 1 (id=2240): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7c1c, 0x8) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x848000, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001440)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 7.18001057s ago: executing program 1 (id=2241): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000002c0)="b8001800000f23d00f21f8353000000e0f23f83e0fae8d001000000fd8e866baf80cb84a8cce8cef66bafc0cec26640f23dbc7442400b30d45d5c744240204000000c744240600000000c4c11167600066baf80cb8dc759680ef66bafc0c66b8134266ef66ba4300ec0f0f49e4b70fbaa70a0000000d", 0x76}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x4f6, 0x0, &(0x7f0000000180), 0x0, 0x0) r3 = eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$MAP_CREATE(0xc00000000000018, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="1e00000000000000000000000000000000000002", @ANYRES32, @ANYBLOB="00000000114000"/28], 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r7, 0x7ac, &(0x7f0000000e40)={0x0, 0x0, 0x89}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ptrace$setsig(0x4203, r4, 0x3, &(0x7f0000000040)={0x38, 0x1000000, 0x6}) setsockopt(r8, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r8, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x9) close_range(r3, 0xffffffffffffffff, 0x0) 6.793009525s ago: executing program 0 (id=2242): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0x0, 0xee01}}, './file0\x00'}) statx(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x6000, 0x4, &(0x7f0000000840)) creat(&(0x7f0000000000)='./file0\x00', 0xca) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x800) read$FUSE(0xffffffffffffffff, &(0x7f0000000940)={0x2020}, 0x2020) syz_open_dev$admmidi(&(0x7f0000002980), 0x6, 0x8200) syz_open_dev$audion(0x0, 0x7fffffff, 0x4a100) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14) sendmmsg(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000280)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0xb}, 0x7}}, 0x80, &(0x7f0000003f80)=[{&(0x7f0000002e40)="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", 0x1000}, {&(0x7f0000003e40)="7c555d288a9b5e4632d1d7d3d40c7950fa055bd4f6261e9380713662c1d419dca5586d5293fb554121b24e85e4da5c532619ff5e0bd45ca89733d08489e083c83ffe450b35f8d48aec3ff45c226dd3d0e7ea321a33d91e7cc3d3d0c8d0c5486fcde2efd6f63c290234d4869fb230344287c97be51e8d89513610fc7cbc7969e2365886b8721b06fc5c4cdf01492f9feae531f880c9574420032a7be9ffa03e00839f786d408248f747207319d871a27595d0a7", 0xb3}, {&(0x7f0000003f00)="3303a197bbbb57c7125fbf5d29dbf7d65a3a88391a1db5e151e3c85f73ef775ad1261982ff49a658e838ecaced9056ec989f52a6dbf7eb6b69bcaa3fc24296c7cfe47cff932deee5caa7f9ce4b40f7f4ba885042", 0x54}], 0x3, &(0x7f0000003fc0)=ANY=[@ANYBLOB="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"], 0x130}}], 0x3, 0x20048800) 6.637694031s ago: executing program 3 (id=2243): r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r0, 0x0, 0x0) 6.374128044s ago: executing program 3 (id=2244): syz_emit_ethernet(0x11e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000500", 0xe8, 0x3a, 0xff, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8001, [{0x18, 0xf, "00000000e50053bff4db7fb81947a98ef6c30aef8bffd4310d8c8cfbdfdcf5ad49792ea9afa9553dcd662ba253fb01a9bda9916838f848a6e18c02bf95848d398ec9dba34d082016dcb10b44b93da65d02ba88666428204a908ad971d0047aabc2491e667b9900"/118}, {0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x2, 0x1, "005ff9297d00001392000100"}]}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv4=@local}}, @common=@addrtype={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'dummy0\x00'}}}, {{@uncond, 0x0, 0x2c8, 0x328, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x0, [{}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}]}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x25dfdbff}, 0x24}, 0x1, 0x0, 0x0, 0x40051}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x3, &(0x7f0000000040)=0xfffffa7a, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000001140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x1, 0x0, 0x0, 0xe, 0x4, 0x1}, @enum={0x5, 0x2, 0x0, 0x6, 0x4, [{0xa, 0x7fffffff}, {0x10, 0x1}]}, @restrict={0x10, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x30, 0x30]}}, &(0x7f00000011c0)=""/202, 0x54, 0xca, 0x0, 0x8}, 0x28) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000001580)='.log\x00', 0x400700, 0x10) bind$tipc(r3, &(0x7f00000015c0)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x2}}, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000002, 0x13, r4, 0x80c3e000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000f600000000004400000044000000060000000600000004800006040000000d0000006ed5de65050000000080ffffffffffff7f000000120300000000305f305f00"/84], &(0x7f0000000100)=""/4096, 0x62, 0x1000, 0x1, 0xffff9cac}, 0x28) 6.360978622s ago: executing program 0 (id=2245): recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10120, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000007880)=""/102400, 0x19000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2, 0x0, 0x200000000000000}, 0x38) 5.898609467s ago: executing program 3 (id=2246): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x11) syz_usb_connect(0x2, 0x2d, &(0x7f0000001240)={{0x12, 0x1, 0x310, 0xcd, 0x44, 0x73, 0x8, 0x15c2, 0x3c, 0x8a3e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x5, 0xbc, 0x80, 0x7, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x2b, 0x89, 0xd9, 0x94, [], [{{0x9, 0x5, 0x5, 0x10, 0x200, 0x4, 0x1, 0xff}}]}}]}}]}}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0}) close(0x3) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) sendmmsg$alg(r3, &(0x7f0000000ec0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x14}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/33, 0x21}], 0x1}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000240)="42edb114088c47ed4324942a457beb3afb87a82521c72194b0a042d985d545ba9fcf0487b9b0af09000000f65c3d49ee9e63c6ef76c0f18945d191db6727d2e066623745ffa28686c5fec1ac3f7b492bafa554", 0x53, 0x8000, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x12040, 0x100) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 5.326191243s ago: executing program 6 (id=2247): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x79, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_ublk_setup_io_uring(0x757b, &(0x7f00000016c0)={0x0, 0xed61, 0x40, 0x0, 0xe6}, &(0x7f0000001740), &(0x7f0000001780), &(0x7f00000017c0)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r3, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 5.317010844s ago: executing program 5 (id=2248): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xeed7e89f6334c933}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) poll(&(0x7f00000002c0)=[{r1, 0x80ad}], 0x1, 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24000805) r7 = io_uring_setup(0x3b95, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x4000003, 0x256}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000020301010000000000000000020000010900090000000007010000000800010001"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="c1fe10eab87c0d", 0x7}, {&(0x7f0000000400)="c74852f07e8f08a8e8914734e548ffe9c343833e5b0c8e2177b7db0c5d698ae9f9c9ea7856981c3b18c063d3aef956c9c0fb7b0aa2e5787365707f1a502121dd3e08f6b4c664bb3d883430b6b8704babb8a3d4613f0f8510b07816a58dc4a5907fb3565596b39dcb7b77720258fb390a958eee888f", 0x75}], 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="1cfbff40000000000100000002000000578b3c6af1338d1a40af9733d46183b9cbf158d8042aac6abc8b31417630f67d", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r8, @ANYRES32=r2, @ANYRES32=r6], 0x80, 0x80}, 0x4000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000020301010000000000000000020080010800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000) close(0x3) 3.90644882s ago: executing program 5 (id=2249): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x79, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_procfs(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) ioperm(0x6, 0x9, 0x824) syz_ublk_setup_io_uring(0x757b, &(0x7f00000016c0)={0x0, 0xed61, 0x40, 0x0, 0xe6}, &(0x7f0000001740), &(0x7f0000001780), &(0x7f00000017c0)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r3, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 3.697156194s ago: executing program 6 (id=2250): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x66, 0x0, 0xffffffffffffff84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @local}, 0xa}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) r4 = socket(0xa, 0x3, 0xff) sendmmsg$unix(r0, &(0x7f00000014c0)=[{{&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000400)="7d5b2ce510a32921f9b95cbaedc9cc829b675e8f697db7700bf5117278a9af389737f16513056a57b9", 0x29}], 0x1, 0x0, 0x0, 0x4}}, {{&(0x7f0000000a80)=@file={0x0, './file1/file0\x00'}, 0x6e, 0x0}}, {{&(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000640)="0769b709", 0x4}, {&(0x7f00000006c0)="697682c2358769b1e938b223ac5348851fb24936facf5c39f9d40e6bdbbbdb7deae541f1a65e61006c681b9000ae1f90d8838cadac", 0x35}, {&(0x7f0000000700)="25806fad3ef08e96989437494003a7791f08bbbb5923f906c3dbb012de81cdfeaf416ba41973637c2af34e7b863ebf138d8252dc11c01af47caccc7f22f1f181e443fa9c8ad4e62184ba4525aa8aaf656e61dc61a1ac51965af976", 0x5b}, {&(0x7f0000000780)="0e90fea66f523f7b3b", 0x9}, {&(0x7f00000007c0)="831ee01aa2b1022579820c5d5877555db3639dbaa4edca1ae2cf0715ca9ac25cac5adccf60aaeae76ec0eff1099849fe0ce69b83ed345729d6f2deb9f5cb050fc227b0127bb9972d334b2a4a79796a82a8658220b849a5d9dfc0fd8c24570eeff9e59a05e0b80f4c24985f7c630adef4fad7f2a8a751f21abdb37bee48ca9a1054669b735747c4a56f3180cbcbb58bfabc", 0x91}], 0x5, &(0x7f0000000b00)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="53f204caa51532636c0857418cd2617ade1725cd02870cfe127561eafe7e740a68a347eea23c972c5bf57852c82dac56ed30e87118956b", @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES8=r4], 0x98, 0x24040090}}, {{&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001400)=[{&(0x7f0000000100)="79cdfc158b63b88969aa491004c8d27af83d48fb8fcf7ce27550905d87944d7be7", 0x21}, {&(0x7f0000000e00)="c7db7f737ef4c3529007e4bbe7e004545ca683", 0x13}, {0x0}, {&(0x7f0000001000)="f300be06093b290c9d8c62f69b93a7ee55bcf28e32f2ee39dab0f80082fea46d67f46a854d0f55dd702ce7905b39a6c2c34bfd4d1abb521ca0d921d99b05ae13a13e95bd368b925771892dcae02e07a7a6b8ef328c5a616fa793d12c698a56b550152283b1f35bc2a394c88cbc8638d3fd48369ee46ecc108ff24272abe98a034ee7232345e062d57b637ff15cc848389d0ff74408da3590e27a271c48b39f3c3297396f67df0ff9979cdf13fa0cea6d5b375dbcbd3cd8e627ebd9db6fc326422ef7a9cdcc40816a90dd55db7e632ca1a9", 0xd1}, {&(0x7f0000001300)="af3438d934b22b73817688d194e35a72f80b928278eacf98651af9db970465fc9d51444944d86f8d1a16582b60178fd314b337691ef57b9f0fe6bdc1f80eb4b0de45ed7c1d1b62a02a03ddb1211b49bc4de697cd6de958f58a85e16c68b0639e539ce92d2435bacb7ca8e5849522ff11ddc7fa96e0cc56ed68a78cbcc42b9c5c258d9dff10e9c24a1ccc67084fec8b5b9c2edab72a5c6453b36c016ac84fcbb122fe78155dcaa9fef9a5fca9445c925e091ced8961df19d282472629fd579bfaedeb215be996793b", 0xc8}], 0x5, &(0x7f0000001480)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x94982, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) gettid() r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r7, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r6, 0x3ba0, &(0x7f0000000300)={0x48, 0xa, r8, 0x0, r9}) socket$inet_udp(0x2, 0x2, 0x0) 3.593628099s ago: executing program 0 (id=2251): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioperm(0x0, 0x2, 0x7e) clock_getres(0x8957b56da8435663, 0x0) inotify_init1(0x800) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000002540)={0x2020}, 0x2020) add_key(&(0x7f0000000000)='encrypted\x00', 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000001000000090000000005"], 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, r2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30]}}}}]}) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r6, 0x6, 0x23, &(0x7f0000000000)=""/40, &(0x7f0000000200)=0x28) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000500)='\n'}) 2.241627026s ago: executing program 0 (id=2252): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="110cf9ff0000000094"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, 0x0) syz_usb_control_io$uac2(r0, &(0x7f00000002c0)={0x14, &(0x7f0000000140)={0x40, 0x11, 0xbb, {0xbb, 0x10, "5c49319ea2c05c042c44589c50296219cc72d8a23cc4a5a9adb81420386bab9955821a0de01f2357e2b16c274c3692d732099d2fe1cf6a7f2211e73f7091439711cd55aeb7c7678631e7a5649ffe6142db5093b1068740d31f7dbee63c7a0f03a2a1b764638607b6357f1e5ae5f58296e5123a078ac89f8b0c16dcfb0dd7fb820d59db078dc2f9aa2c8ebcb0f405083fe6b98e7ecda61a21edb7856c3fe770499e109c470d2c1e69cbaec36605bec2f0fc58daf22c366dea47"}}, &(0x7f0000000240)={0x0, 0x3, 0x38, @string={0x38, 0x3, "90a1340b7a5ffe62e30d4d83cb33a9cea72c98769fb9f61de8cea03bea3a193e2ce342a4030ccf33e75c73242dc52907cc65ca79903d"}}}, &(0x7f0000000680)={0x44, &(0x7f0000000380)={0x20, 0x7, 0xa5, "829732bee7d3a0d15faf49067f0f64f8dacb91a36bdef97dec7d40aa3742744049a836406fd2b60812bfc1ee44107ee0ebff6f7f8e742f44b81603a8d4f6958f322d03fc45b6a622fed827a387728639931249b9a729d0421743c210b6bd4ecf05e81e01094e508d4d4ca11339c0d073115aca3e6507b07a0b0a473e572b97aa9bf974b44ad81b40df9867575d8f22ced3dcca346fc12790e52c8091c1b916dfde9b1de892"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000004c0)={0x20, 0x81, 0x1, '8'}, &(0x7f0000000500)={0x20, 0x82, 0x1, 'l'}, &(0x7f0000000540)={0x20, 0x83, 0x1, "e8"}, &(0x7f0000000600)={0x20, 0x84, 0x4, "fcee2b8b"}, &(0x7f0000000640)={0x20, 0x85, 0x3, "9eff61"}}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 2.082636089s ago: executing program 6 (id=2253): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0xffbd, 0x2, r1, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1020800}) close(r0) 1.849569369s ago: executing program 1 (id=2254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r1, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) sendmsg$NFT_BATCH(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x45) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r4, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000672000/0x1000)=nil) syz_clone3(&(0x7f0000000140)={0x120006200, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) close(r0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) close(0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) write(r0, &(0x7f00000001c0)="f279cab401a8aa60d569a864269b2f11ff4b5e622fe28fccad246c8cd6476567f6d4c0186c9a0dbd6fed08b7a29c31adf6bcff4fba1a283c0eb61d7990a1dd7c", 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.835199404s ago: executing program 6 (id=2255): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x66, 0x0, 0xffffffffffffff84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @local}, 0xa}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) r4 = socket(0xa, 0x3, 0xff) sendmmsg$unix(r0, &(0x7f00000014c0)=[{{&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000400)="7d5b2ce510a32921f9b95cbaedc9cc829b675e8f697db7700bf5117278a9af389737f16513056a57b9", 0x29}], 0x1, 0x0, 0x0, 0x4}}, {{&(0x7f0000000a80)=@file={0x0, './file1/file0\x00'}, 0x6e, 0x0}}, {{&(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000640)="0769b709", 0x4}, {&(0x7f00000006c0)="697682c2358769b1e938b223ac5348851fb24936facf5c39f9d40e6bdbbbdb7deae541f1a65e61006c681b9000ae1f90d8838cadac", 0x35}, {&(0x7f0000000700)="25806fad3ef08e96989437494003a7791f08bbbb5923f906c3dbb012de81cdfeaf416ba41973637c2af34e7b863ebf138d8252dc11c01af47caccc7f22f1f181e443fa9c8ad4e62184ba4525aa8aaf656e61dc61a1ac51965af976", 0x5b}, {&(0x7f0000000780)="0e90fea66f523f7b3b", 0x9}, {&(0x7f00000007c0)="831ee01aa2b1022579820c5d5877555db3639dbaa4edca1ae2cf0715ca9ac25cac5adccf60aaeae76ec0eff1099849fe0ce69b83ed345729d6f2deb9f5cb050fc227b0127bb9972d334b2a4a79796a82a8658220b849a5d9dfc0fd8c24570eeff9e59a05e0b80f4c24985f7c630adef4fad7f2a8a751f21abdb37bee48ca9a1054669b735747c4a56f3180cbcbb58bfabc", 0x91}], 0x5, &(0x7f0000000b00)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="53f204caa51532636c0857418cd2617ade1725cd02870cfe127561eafe7e740a68a347eea23c972c5bf57852c82dac56ed30e87118956b", @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES8=r4], 0x98, 0x24040090}}, {{&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001400)=[{&(0x7f0000000100)="79cdfc158b63b88969aa491004c8d27af83d48fb8fcf7ce27550905d87944d7be7", 0x21}, {&(0x7f0000000e00)="c7db7f737ef4c3529007e4bbe7e004545ca683", 0x13}, {0x0}, {0x0}, {&(0x7f0000001000)="f300be06093b290c9d8c62f69b93a7ee55bcf28e32f2ee39dab0f80082fea46d67f46a854d0f55dd702ce7905b39a6c2c34bfd4d1abb521ca0d921d99b05ae13a13e95bd368b925771892dcae02e07a7a6b8ef328c5a616fa793d12c698a56b550152283b1f35bc2a394c88cbc8638d3fd48369ee46ecc108ff24272abe98a034ee7232345e062d57b637ff15cc848389d0ff74408da3590e27a271c48b39f3c3297396f67df0ff9979cdf13fa0cea6d5b375dbcbd3cd8e627ebd9db6fc326422ef7a9cdcc40816a90dd55db7e632ca1a9", 0xd1}, {&(0x7f0000001300)="af3438d934b22b73817688d194e35a72f80b928278eacf98651af9db970465fc9d51444944d86f8d1a16582b60178fd314b337691ef57b9f0fe6bdc1f80eb4b0de45ed7c1d1b62a02a03ddb1211b49bc4de697cd6de958f58a85e16c68b0639e539ce92d2435bacb7ca8e5849522ff11ddc7fa96e0cc56ed68a78cbcc42b9c5c258d9dff10e9c24a1ccc67084fec8b5b9c2edab72a5c6453b36c016ac84fcbb122fe78155dcaa9fef9a5fca9445c925e091ced8961df19d282472629fd579bfaedeb215be996793b", 0xc8}], 0x6, &(0x7f0000001480)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x94982, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) gettid() r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r7, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r6, 0x3ba0, &(0x7f0000000300)={0x48, 0xa, r8, 0x0, r9}) socket$inet_udp(0x2, 0x2, 0x0) 1.386483633s ago: executing program 3 (id=2256): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x242942, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r3, &(0x7f0000002100)={0x2020}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000006380)="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", 0x2000, &(0x7f000000b2c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvfrom(r5, 0x0, 0x0, 0x40010320, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) read$FUSE(0xffffffffffffffff, &(0x7f0000003b80)={0x2020}, 0x2020) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0xa, 0x801, 0x84) kexec_load(0xd0ffbf, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0xbfffd000, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000000)=0x81, 0x4) ioctl$TCSETA(r1, 0x5406, &(0x7f00000001c0)={0xfffd, 0x81, 0x8, 0xb3, 0x11, "0100"}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x24, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x7, "d9b30deb"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @global=@item_4={0x3, 0x1, 0x7, "4bc35313"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 1.133939304s ago: executing program 6 (id=2257): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$COMEDI_POLL(r0, 0x640f) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r3}, 0x38) socket(0x10, 0x3, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) sendmsg$inet(r4, &(0x7f0000000900)={&(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000600)="9745010000006000012c8cc5ffff", 0xe}, {&(0x7f0000000640)="865bfdbd2e3eefbd8bde56327327", 0xe}], 0x2}, 0x4004804) 168.729936ms ago: executing program 6 (id=2258): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x66, 0x0, 0xffffffffffffff84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @local}, 0xa}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) r4 = socket(0xa, 0x3, 0xff) sendmmsg$unix(r0, &(0x7f00000014c0)=[{{&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000400)="7d5b2ce510a32921f9b95cbaedc9cc829b675e8f697db7700bf5117278a9af389737f16513056a57b9", 0x29}], 0x1, 0x0, 0x0, 0x4}}, {{&(0x7f0000000a80)=@file={0x0, './file1/file0\x00'}, 0x6e, 0x0}}, {{&(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000640)="0769b709", 0x4}, {&(0x7f00000006c0)="697682c2358769b1e938b223ac5348851fb24936facf5c39f9d40e6bdbbbdb7deae541f1a65e61006c681b9000ae1f90d8838cadac", 0x35}, {&(0x7f0000000700)="25806fad3ef08e96989437494003a7791f08bbbb5923f906c3dbb012de81cdfeaf416ba41973637c2af34e7b863ebf138d8252dc11c01af47caccc7f22f1f181e443fa9c8ad4e62184ba4525aa8aaf656e61dc61a1ac51965af976", 0x5b}, {&(0x7f0000000780)="0e90fea66f523f7b3b", 0x9}, {&(0x7f00000007c0)="831ee01aa2b1022579820c5d5877555db3639dbaa4edca1ae2cf0715ca9ac25cac5adccf60aaeae76ec0eff1099849fe0ce69b83ed345729d6f2deb9f5cb050fc227b0127bb9972d334b2a4a79796a82a8658220b849a5d9dfc0fd8c24570eeff9e59a05e0b80f4c24985f7c630adef4fad7f2a8a751f21abdb37bee48ca9a1054669b735747c4a56f3180cbcbb58bfabc", 0x91}], 0x5, &(0x7f0000000b00)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="53f204caa51532636c0857418cd2617ade1725cd02870cfe127561eafe7e740a68a347eea23c972c5bf57852c82dac56ed30e87118956b", @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES8=r4], 0x98, 0x24040090}}, {{&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001400)=[{&(0x7f0000000100)="79cdfc158b63b88969aa491004c8d27af83d48fb8fcf7ce27550905d87944d7be7", 0x21}, {&(0x7f0000000e00)="c7db7f737ef4c3529007e4bbe7e004545ca683", 0x13}, {0x0}, {0x0}, {&(0x7f0000001000)="f300be06093b290c9d8c62f69b93a7ee55bcf28e32f2ee39dab0f80082fea46d67f46a854d0f55dd702ce7905b39a6c2c34bfd4d1abb521ca0d921d99b05ae13a13e95bd368b925771892dcae02e07a7a6b8ef328c5a616fa793d12c698a56b550152283b1f35bc2a394c88cbc8638d3fd48369ee46ecc108ff24272abe98a034ee7232345e062d57b637ff15cc848389d0ff74408da3590e27a271c48b39f3c3297396f67df0ff9979cdf13fa0cea6d5b375dbcbd3cd8e627ebd9db6fc326422ef7a9cdcc40816a90dd55db7e632ca1a9", 0xd1}, {&(0x7f0000001300)="af3438d934b22b73817688d194e35a72f80b928278eacf98651af9db970465fc9d51444944d86f8d1a16582b60178fd314b337691ef57b9f0fe6bdc1f80eb4b0de45ed7c1d1b62a02a03ddb1211b49bc4de697cd6de958f58a85e16c68b0639e539ce92d2435bacb7ca8e5849522ff11ddc7fa96e0cc56ed68a78cbcc42b9c5c258d9dff10e9c24a1ccc67084fec8b5b9c2edab72a5c6453b36c016ac84fcbb122fe78155dcaa9fef9a5fca9445c925e091ced8961df19d282472629fd579bfaedeb215be996793b", 0xc8}], 0x6, &(0x7f0000001480)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x94982, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) gettid() r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r7, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r6, 0x3ba0, &(0x7f0000000300)={0x48, 0xa, r8, 0x0, r9}) socket$inet_udp(0x2, 0x2, 0x0) 0s ago: executing program 5 (id=2259): ioprio_set$pid(0x1, 0x0, 0x4000) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080), 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000280)={@mcast1, 0x4f}) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x3, 0x9809e7, 0x3}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r2}, 0x38) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) kernel console output (not intermixed with test programs): =3 [ 618.440763][ T5840] usb 4-1: Product: syz [ 618.446675][ T10] usb 7-1: Product: syz [ 618.455088][ T5840] usb 4-1: Manufacturer: syz [ 618.459807][ T10] usb 7-1: Manufacturer: syz [ 618.466899][ T5840] usb 4-1: SerialNumber: syz [ 618.474221][ T10] usb 7-1: SerialNumber: syz [ 618.481257][ T5840] usb 4-1: config 0 descriptor?? [ 618.489755][ T10] usb 7-1: config 0 descriptor?? [ 618.496284][T12781] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 618.500264][T12786] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 618.514020][T12786] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 618.523138][ T10] usb 7-1: ucan: probing device on interface #0 [ 618.759710][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.769762][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 618.963116][ T10] usb 7-1: ucan: device protocol version 0 is not supported [ 618.982061][ T10] usb 7-1: ucan: probe failed; try to update the device firmware [ 619.087146][ T29] audit: type=1400 audit(1784012701.570:1380): avc: denied { watch watch_reads } for pid=12819 comm="syz.0.1827" path="/" dev="ramfs" ino=39188 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 619.241416][ T42] usb 7-1: USB disconnect, device number 3 [ 619.353643][ T5840] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 619.388817][ T5840] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 619.562392][ T5828] usb 4-1: USB disconnect, device number 46 [ 619.780283][ T5828] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 619.904404][T12840] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 620.468130][ T29] audit: type=1400 audit(1784012702.940:1381): avc: denied { write } for pid=12831 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 620.697427][ T29] audit: type=1800 audit(1784012703.180:1382): pid=12821 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1827" name="bus" dev="ramfs" ino=39189 res=0 errno=0 [ 620.752444][ T29] audit: type=1400 audit(1784012703.210:1383): avc: denied { write } for pid=12854 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 620.883255][ T29] audit: type=1400 audit(1784012703.370:1384): avc: denied { connect } for pid=12856 comm="syz.3.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 621.400424][ T5840] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 621.579652][ T5840] usb 1-1: Using ep0 maxpacket: 32 [ 621.616113][ T5840] usb 1-1: no configurations [ 621.631131][ T5840] usb 1-1: can't read configurations, error -22 [ 621.809108][ T5840] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 621.859524][ T5730] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 622.344871][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 622.344887][ T29] audit: type=1400 audit(1784012704.830:1388): avc: denied { write } for pid=12893 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 622.595400][ T5840] usb 1-1: Using ep0 maxpacket: 32 [ 622.606685][ T5840] usb 1-1: no configurations [ 622.631474][ T5840] usb 1-1: can't read configurations, error -22 [ 622.664256][ T5840] usb usb1-port1: attempt power cycle [ 622.764776][ T5730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.775927][ T5730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.787558][ T5730] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 622.801028][ T5730] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 622.810465][ T5730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.858093][ T5730] usb 4-1: config 0 descriptor?? [ 622.963261][T12902] nbd: must specify at least one socket [ 622.984762][T12902] nbd: couldn't find a device at index 0 [ 623.059511][ T5840] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 623.089575][ T5840] usb 1-1: Using ep0 maxpacket: 32 [ 623.096765][ T5840] usb 1-1: no configurations [ 623.106169][ T5840] usb 1-1: can't read configurations, error -22 [ 623.239108][ T5840] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 623.266347][ T29] audit: type=1400 audit(1784012705.750:1389): avc: denied { write } for pid=12907 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.313416][ T5828] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 623.317064][ T5840] usb 1-1: Using ep0 maxpacket: 32 [ 623.365128][ T5840] usb 1-1: no configurations [ 623.384578][ T5840] usb 1-1: can't read configurations, error -22 [ 623.395963][T12920] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 623.415141][ T5840] usb usb1-port1: unable to enumerate USB device [ 623.494322][ T29] audit: type=1400 audit(1784012705.980:1390): avc: denied { write } for pid=12921 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.547628][ T29] audit: type=1400 audit(1784012706.020:1391): avc: denied { cmd } for pid=12919 comm="syz.5.1844" path="/dev/ublk-control" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 623.583665][T12924] netlink: 'syz.5.1844': attribute type 1 has an invalid length. [ 623.601371][T12924] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1844'. [ 623.619324][ T5828] usb 7-1: Using ep0 maxpacket: 32 [ 623.642190][ T5828] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 623.676756][ T5828] usb 7-1: config 0 has no interface number 0 [ 623.704259][ T5828] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 623.746609][ T5828] usb 7-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 623.784203][ T5828] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 623.829668][ T5828] usb 7-1: config 0 interface 196 has no altsetting 0 [ 623.850950][ T5828] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 623.878515][ T5828] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.896830][ T5828] usb 7-1: Product: syz [ 623.903342][ T5730] plantronics 0003:047F:FFFF.0014: unbalanced delimiter at end of report description [ 623.912945][ T5828] usb 7-1: Manufacturer: syz [ 623.918259][ T5828] usb 7-1: SerialNumber: syz [ 623.923198][ T5730] plantronics 0003:047F:FFFF.0014: parse failed [ 623.935729][ T5730] plantronics 0003:047F:FFFF.0014: probe with driver plantronics failed with error -22 [ 623.947860][ T5828] usb 7-1: config 0 descriptor?? [ 623.954203][T12902] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 624.029758][T12931] FAULT_INJECTION: forcing a failure. [ 624.029758][T12931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.054432][T12931] CPU: 1 UID: 0 PID: 12931 Comm: syz.0.1846 Tainted: G L syzkaller #0 PREEMPT(full) [ 624.054465][T12931] Tainted: [L]=SOFTLOCKUP [ 624.054471][T12931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 624.054482][T12931] Call Trace: [ 624.054489][T12931] [ 624.054496][T12931] dump_stack_lvl+0x100/0x190 [ 624.054525][T12931] should_fail_ex.cold+0x5/0xa [ 624.054550][T12931] _copy_to_user+0x32/0xd0 [ 624.054574][T12931] simple_read_from_buffer+0xcb/0x170 [ 624.054603][T12931] proc_fail_nth_read+0x1af/0x230 [ 624.054627][T12931] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 624.054652][T12931] ? rw_verify_area+0xce/0x6d0 [ 624.054675][T12931] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 624.054697][T12931] vfs_read+0x1e4/0xb40 [ 624.054725][T12931] ? __pfx_vfs_read+0x10/0x10 [ 624.054747][T12931] ? __fget_files+0x215/0x3d0 [ 624.054781][T12931] ? __fget_files+0x21f/0x3d0 [ 624.054814][T12931] ksys_read+0x12a/0x250 [ 624.054838][T12931] ? __pfx_ksys_read+0x10/0x10 [ 624.054869][T12931] do_syscall_64+0x115/0x870 [ 624.054895][T12931] ? clear_bhb_loop+0x40/0x90 [ 624.054916][T12931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.054934][T12931] RIP: 0033:0x7f09ff15e68e [ 624.054950][T12931] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 624.054967][T12931] RSP: 002b:00007f09fffa8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 624.054985][T12931] RAX: ffffffffffffffda RBX: 00007f09fffa96c0 RCX: 00007f09ff15e68e [ 624.054996][T12931] RDX: 000000000000000f RSI: 00007f09fffa90a0 RDI: 0000000000000003 [ 624.055006][T12931] RBP: 00007f09fffa9090 R08: 0000000000000000 R09: 0000000000000000 [ 624.055017][T12931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.055027][T12931] R13: 00007f09ff426038 R14: 00007f09ff425fa0 R15: 00007fffce3a7ba8 [ 624.055051][T12931] [ 625.326218][T12940] kAFS: unable to lookup cell 'ÿ' [ 625.431253][ T29] audit: type=1400 audit(1784012707.920:1392): avc: denied { setopt } for pid=12928 comm="syz.1.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 625.444012][ T5828] ipheth 7-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 625.494045][ T5828] ipheth 7-1:0.196: Apple iPhone USB Ethernet device attached [ 625.665359][ T5828] usb 7-1: USB disconnect, device number 4 [ 625.744482][T12944] netlink: 'syz.0.1847': attribute type 10 has an invalid length. [ 625.892331][ T5828] ipheth 7-1:0.196: Apple iPhone USB Ethernet now disconnected [ 626.376560][ T29] audit: type=1400 audit(1784012708.860:1393): avc: denied { write } for pid=12946 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.619087][ T29] audit: type=1400 audit(1784012709.100:1394): avc: denied { write } for pid=12961 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.954853][T12969] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1851'. [ 627.140931][ T42] usb 4-1: USB disconnect, device number 47 [ 627.265428][T12978] FAULT_INJECTION: forcing a failure. [ 627.265428][T12978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.295835][T12978] CPU: 1 UID: 0 PID: 12978 Comm: syz.0.1852 Tainted: G L syzkaller #0 PREEMPT(full) [ 627.295865][T12978] Tainted: [L]=SOFTLOCKUP [ 627.295870][T12978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 627.295879][T12978] Call Trace: [ 627.295885][T12978] [ 627.295891][T12978] dump_stack_lvl+0x100/0x190 [ 627.295915][T12978] should_fail_ex.cold+0x5/0xa [ 627.295934][T12978] _copy_from_user+0x2e/0xd0 [ 627.295955][T12978] __sys_bpf+0x2f5/0x4e80 [ 627.295987][T12978] ? __pfx___sys_bpf+0x10/0x10 [ 627.296012][T12978] ? find_held_lock+0x2b/0x80 [ 627.296037][T12978] ? get_pid_task+0xfc/0x250 [ 627.296061][T12978] ? get_pid_task+0xfc/0x250 [ 627.296093][T12978] ? find_held_lock+0x2b/0x80 [ 627.296122][T12978] ? rcu_read_lock_any_held+0x6a/0xa0 [ 627.296147][T12978] ? find_held_lock+0x2b/0x80 [ 627.296169][T12978] ? ksys_write+0x190/0x250 [ 627.296193][T12978] ? ksys_write+0x190/0x250 [ 627.296234][T12978] ? fput+0x79/0x100 [ 627.296256][T12978] ? __x64_sys_bpf+0xce/0x140 [ 627.296278][T12978] __x64_sys_bpf+0xce/0x140 [ 627.296294][T12978] ? do_syscall_64+0x90/0x870 [ 627.296321][T12978] do_syscall_64+0x115/0x870 [ 627.296344][T12978] ? clear_bhb_loop+0x40/0x90 [ 627.296366][T12978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.296383][T12978] RIP: 0033:0x7f09ff19de59 [ 627.296398][T12978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.296414][T12978] RSP: 002b:00007f09fffa9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 627.296431][T12978] RAX: ffffffffffffffda RBX: 00007f09ff425fa0 RCX: 00007f09ff19de59 [ 627.296441][T12978] RDX: 0000000000000050 RSI: 0000200000000580 RDI: 000000000000000a [ 627.296454][T12978] RBP: 00007f09fffa9090 R08: 0000000000000000 R09: 0000000000000000 [ 627.296463][T12978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.296473][T12978] R13: 00007f09ff426038 R14: 00007f09ff425fa0 R15: 00007fffce3a7ba8 [ 627.296497][T12978] [ 628.370933][ T29] audit: type=1400 audit(1784012710.860:1395): avc: denied { write } for pid=12965 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 628.505014][T12979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.543490][ T29] audit: type=1400 audit(1784012711.030:1396): avc: denied { write } for pid=13000 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 628.703402][T13006] FAULT_INJECTION: forcing a failure. [ 628.703402][T13006] name failslab, interval 1, probability 0, space 0, times 0 [ 628.800292][T13006] CPU: 1 UID: 0 PID: 13006 Comm: syz.5.1857 Tainted: G L syzkaller #0 PREEMPT(full) [ 628.800324][T13006] Tainted: [L]=SOFTLOCKUP [ 628.800330][T13006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 628.800340][T13006] Call Trace: [ 628.800346][T13006] [ 628.800353][T13006] dump_stack_lvl+0x100/0x190 [ 628.800380][T13006] should_fail_ex.cold+0x5/0xa [ 628.800404][T13006] should_failslab+0xc2/0x120 [ 628.800426][T13006] __kmalloc_noprof+0xfc/0x820 [ 628.800443][T13006] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 628.800462][T13006] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 628.800498][T13006] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 628.800532][T13006] genl_family_rcv_msg_doit+0xc7/0x300 [ 628.800566][T13006] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 628.800603][T13006] ? bpf_lsm_capable+0x9/0x10 [ 628.800619][T13006] ? security_capable+0x80/0x260 [ 628.800644][T13006] genl_rcv_msg+0x560/0x800 [ 628.800674][T13006] ? __pfx_genl_rcv_msg+0x10/0x10 [ 628.800703][T13006] ? __pfx_nfsd_nl_cache_flush_doit+0x10/0x10 [ 628.800742][T13006] netlink_rcv_skb+0x159/0x420 [ 628.800766][T13006] ? __pfx_genl_rcv_msg+0x10/0x10 [ 628.800795][T13006] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 628.800830][T13006] ? netlink_deliver_tap+0x1ae/0xcc0 [ 628.800857][T13006] genl_rcv+0x28/0x40 [ 628.800882][T13006] netlink_unicast+0x585/0x850 [ 628.800910][T13006] ? __pfx_netlink_unicast+0x10/0x10 [ 628.800942][T13006] netlink_sendmsg+0x8b0/0xda0 [ 628.800972][T13006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 628.800999][T13006] ? selinux_socket_sendmsg+0x198/0x2f0 [ 628.801027][T13006] ____sys_sendmsg+0xa4d/0xbe0 [ 628.801049][T13006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 628.801076][T13006] ? __pfx_____sys_sendmsg+0x10/0x10 [ 628.801110][T13006] ___sys_sendmsg+0x190/0x1e0 [ 628.801137][T13006] ? __pfx____sys_sendmsg+0x10/0x10 [ 628.801159][T13006] ? __lock_acquire+0x49f/0x1a40 [ 628.801181][T13006] ? get_pid_task+0x106/0x250 [ 628.801236][T13006] __sys_sendmsg+0x160/0x210 [ 628.801256][T13006] ? __pfx___sys_sendmsg+0x10/0x10 [ 628.801292][T13006] do_syscall_64+0x115/0x870 [ 628.801318][T13006] ? clear_bhb_loop+0x40/0x90 [ 628.801341][T13006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.801359][T13006] RIP: 0033:0x7f1a8039de59 [ 628.801374][T13006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.801390][T13006] RSP: 002b:00007f1a811bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 628.801408][T13006] RAX: ffffffffffffffda RBX: 00007f1a80625fa0 RCX: 00007f1a8039de59 [ 628.801420][T13006] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 628.801430][T13006] RBP: 00007f1a811bb090 R08: 0000000000000000 R09: 0000000000000000 [ 628.801441][T13006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.801451][T13006] R13: 00007f1a80626038 R14: 00007f1a80625fa0 R15: 00007ffc539a3648 [ 628.801475][T13006] [ 630.010078][T13019] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 630.239254][ T5840] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 630.400245][ T5840] usb 6-1: Using ep0 maxpacket: 16 [ 630.414563][ T5840] usb 6-1: config 0 interface 0 has no altsetting 0 [ 630.424610][ T5840] usb 6-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 630.449855][ T5840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.481469][ T5840] usb 6-1: config 0 descriptor?? [ 630.542892][T13026] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1865'. [ 630.939150][T13031] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 631.150097][ T5620] Bluetooth: hci3: command 0x0406 tx timeout [ 631.195567][ T5840] kye 0003:0458:0153.0015: unknown main item tag 0x0 [ 631.202448][ T5840] kye 0003:0458:0153.0015: unknown main item tag 0x0 [ 631.209244][ T5840] kye 0003:0458:0153.0015: unknown main item tag 0x0 [ 631.301309][ T5840] kye 0003:0458:0153.0015: unknown main item tag 0x0 [ 631.319739][ T5840] kye 0003:0458:0153.0015: unknown main item tag 0x0 [ 631.342137][ T29] audit: type=1400 audit(1784012713.820:1397): avc: denied { ioctl } for pid=13034 comm="syz.1.1868" path="socket:[39483]" dev="sockfs" ino=39483 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 631.367964][ T5840] kye 0003:0458:0153.0015: unknown main item tag 0x0 [ 631.376908][ T5840] kye 0003:0458:0153.0015: unknown main item tag 0x0 [ 631.411879][ T5840] kye 0003:0458:0153.0015: unknown main item tag 0x0 [ 631.411909][ T5840] kye 0003:0458:0153.0015: unknown main item tag 0x0 [ 631.411929][ T5840] kye 0003:0458:0153.0015: unknown main item tag 0x0 [ 631.411949][ T5840] kye 0003:0458:0153.0015: collection stack underflow [ 631.411967][ T5840] kye 0003:0458:0153.0015: item 0 0 0 12 parsing failed [ 631.415128][ T5840] kye 0003:0458:0153.0015: parse failed [ 631.415173][ T5840] kye 0003:0458:0153.0015: probe with driver kye failed with error -22 [ 631.425644][ T5840] usb 6-1: USB disconnect, device number 6 [ 631.452838][ T29] audit: type=1400 audit(1784012713.920:1398): avc: denied { setopt } for pid=13041 comm="syz.3.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 631.618107][ T29] audit: type=1400 audit(1784012714.100:1399): avc: denied { read } for pid=13033 comm="syz.6.1867" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 631.657087][T13050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1870'. [ 631.667578][ T29] audit: type=1400 audit(1784012714.130:1400): avc: denied { open } for pid=13033 comm="syz.6.1867" path="/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 631.703859][ T29] audit: type=1400 audit(1784012714.190:1401): avc: denied { ioctl } for pid=13049 comm="syz.3.1870" path="socket:[38413]" dev="sockfs" ino=38413 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 631.785039][T13038] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 631.796498][T13038] block device autoloading is deprecated and will be removed. [ 631.951524][ T29] audit: type=1400 audit(1784012714.440:1402): avc: denied { unmount } for pid=12284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 631.979391][T13059] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 632.006136][T13062] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1872'. [ 632.036365][T13061] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1874'. [ 632.055455][T13062] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.064150][T13062] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.076463][T13059] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1872'. [ 632.085616][ T29] audit: type=1400 audit(1784012714.560:1403): avc: denied { write } for pid=13060 comm="syz.5.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 632.089057][ T42] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 632.138853][ T29] audit: type=1400 audit(1784012714.620:1404): avc: denied { read } for pid=13060 comm="syz.5.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 632.795640][T13066] syz.6.1873 (13066): drop_caches: 2 [ 632.809264][ T42] usb 4-1: device descriptor read/64, error -71 [ 633.308204][T13069] syzkaller1: entered promiscuous mode [ 633.313708][T13069] syzkaller1: entered allmulticast mode [ 633.339297][ T42] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 633.379091][ T29] audit: type=1400 audit(1784012715.860:1405): avc: denied { connect } for pid=13068 comm="syz.6.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 633.489252][ T42] usb 4-1: device descriptor read/64, error -71 [ 633.619416][ T42] usb usb4-port1: attempt power cycle [ 633.969108][ T42] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 634.011503][ T42] usb 4-1: device descriptor read/8, error -71 [ 634.135436][T13035] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 634.158551][ T29] audit: type=1400 audit(1784012716.640:1406): avc: denied { name_connect } for pid=13071 comm="syz.6.1876" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 634.260036][ T42] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 634.309838][ T42] usb 4-1: device descriptor read/8, error -71 [ 634.429835][ T42] usb usb4-port1: unable to enumerate USB device [ 634.952450][T13090] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1880'. [ 635.600808][T13096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1883'. [ 635.611946][T13096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1883'. [ 636.457229][T13096] SELinux: invalid class [ 636.463541][ T29] audit: type=1400 audit(1784012718.940:1407): avc: denied { load_policy } for pid=13095 comm="syz.0.1883" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 636.501596][T13096] SELinux: failed to load policy [ 636.518796][T13105] FAULT_INJECTION: forcing a failure. [ 636.518796][T13105] name failslab, interval 1, probability 0, space 0, times 0 [ 636.659334][T13105] CPU: 1 UID: 0 PID: 13105 Comm: syz.3.1886 Tainted: G L syzkaller #0 PREEMPT(full) [ 636.659362][T13105] Tainted: [L]=SOFTLOCKUP [ 636.659367][T13105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 636.659375][T13105] Call Trace: [ 636.659381][T13105] [ 636.659387][T13105] dump_stack_lvl+0x100/0x190 [ 636.659413][T13105] should_fail_ex.cold+0x5/0xa [ 636.659433][T13105] should_failslab+0xc2/0x120 [ 636.659453][T13105] __kmalloc_cache_noprof+0x91/0x6c0 [ 636.659478][T13105] ? percpu_ref_init+0xec/0x3f0 [ 636.659506][T13105] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 636.659530][T13105] percpu_ref_init+0xec/0x3f0 [ 636.659557][T13105] io_uring_setup.cold+0x2be/0x1cae [ 636.659588][T13105] ? __pfx_io_uring_setup+0x10/0x10 [ 636.659610][T13105] ? find_held_lock+0x2b/0x80 [ 636.659634][T13105] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 636.659650][T13105] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 636.659681][T13105] ? ksys_write+0x1ac/0x250 [ 636.659706][T13105] ? __pfx_ksys_write+0x10/0x10 [ 636.659733][T13105] __x64_sys_io_uring_setup+0xc2/0x170 [ 636.659758][T13105] do_syscall_64+0x115/0x870 [ 636.659782][T13105] ? clear_bhb_loop+0x40/0x90 [ 636.659804][T13105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.659821][T13105] RIP: 0033:0x7fb6e399de59 [ 636.659836][T13105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.659853][T13105] RSP: 002b:00007fb6e47acee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 636.659870][T13105] RAX: ffffffffffffffda RBX: 0000200000000488 RCX: 00007fb6e399de59 [ 636.659881][T13105] RDX: 0000200000000508 RSI: 0000200000000488 RDI: 00000000000003c9 [ 636.659891][T13105] RBP: 0000200000000480 R08: 0000000000000000 R09: 0000000000000000 [ 636.659901][T13105] R10: 0000200000000510 R11: 0000000000000206 R12: 0000200000000508 [ 636.659911][T13105] R13: 0000200000000510 R14: 00007fb6e47acfd8 R15: 0000000000000000 [ 636.659935][T13105] [ 638.889081][ T5840] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 639.080539][ T5840] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 639.089249][ T5840] usb 7-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 639.108719][ T5840] usb 7-1: config 0 has no interface number 0 [ 639.123280][ T5840] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 12336, setting to 64 [ 639.785811][T13137] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1893'. [ 640.111745][ T5840] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 640.494016][ T5840] usb 7-1: config 0 interface 52 has no altsetting 0 [ 640.534986][ T29] audit: type=1400 audit(1784012723.020:1408): avc: denied { bind } for pid=13139 comm="syz.1.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 640.586675][ T5840] usb 7-1: string descriptor 0 read error: -71 [ 640.596042][ T29] audit: type=1400 audit(1784012723.040:1409): avc: denied { write } for pid=13139 comm="syz.1.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 640.601364][ T5840] usb 7-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 640.659295][ T5840] usb 7-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 640.670180][ T29] audit: type=1400 audit(1784012723.050:1410): avc: denied { getopt } for pid=13139 comm="syz.1.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 640.688570][ T5840] usb 7-1: config 0 descriptor?? [ 640.713790][ T5840] usb 7-1: can't set config #0, error -71 [ 640.714330][T13148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1897'. [ 640.735906][ T5840] usb 7-1: USB disconnect, device number 5 [ 640.749373][ T29] audit: type=1400 audit(1784012723.160:1411): avc: denied { map } for pid=13141 comm="syz.0.1895" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 640.771368][T13142] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1895'. [ 640.773266][T13148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1897'. [ 640.796256][T13148] netlink: 'syz.3.1897': attribute type 11 has an invalid length. [ 640.826631][T13148] netlink: 'syz.3.1897': attribute type 12 has an invalid length. [ 640.827073][T13142] syzkaller1: entered promiscuous mode [ 640.857533][T13142] syzkaller1: entered allmulticast mode [ 640.866745][T13155] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 640.919211][ T5725] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 640.993421][ T29] audit: type=1400 audit(1784012723.480:1412): avc: denied { setopt } for pid=13154 comm="syz.1.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 641.069217][ T5840] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 641.124471][ T5725] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 641.191837][ T29] audit: type=1400 audit(1784012723.500:1413): avc: denied { read } for pid=13154 comm="syz.1.1899" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 641.243488][ T5725] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 641.325476][ T5840] usb 7-1: not running at top speed; connect to a high speed hub [ 641.347219][ T5725] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 641.396154][ T5840] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 641.447678][ T29] audit: type=1400 audit(1784012723.500:1414): avc: denied { open } for pid=13154 comm="syz.1.1899" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 641.504314][ T5840] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 641.531883][ T5725] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 641.573294][T13156] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.679536][ T5725] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 641.699224][ T5840] usb 7-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 641.767692][ T29] audit: type=1400 audit(1784012723.500:1415): avc: denied { write } for pid=13154 comm="syz.1.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 641.788903][ T5725] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.806296][ T5840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.833805][ T5725] usb 6-1: Product: syz [ 641.840553][ T5840] usb 7-1: Product: syz [ 641.849042][ T5725] usb 6-1: Manufacturer: syz [ 641.853654][ T5840] usb 7-1: Manufacturer: syz [ 641.869842][ T5725] usb 6-1: SerialNumber: syz [ 641.876685][ T5840] usb 7-1: SerialNumber: syz [ 641.900320][T13144] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 642.144958][T13144] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 642.174279][ T5840] usb 7-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 642.187830][ T5840] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 643.089112][ T5840] usb 7-1: USB disconnect, device number 6 [ 643.764041][T13183] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 643.814204][T13176] syz_tun: left allmulticast mode [ 644.086718][T13176] syz_tun: left promiscuous mode [ 644.169524][T13176] bridge0: port 3(syz_tun) entered disabled state [ 644.332898][ T24] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 644.385712][T13176] bridge_slave_0: left allmulticast mode [ 644.409681][T13176] bridge_slave_0: left promiscuous mode [ 644.422175][T13176] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.444882][T13176] bridge_slave_1: left allmulticast mode [ 644.459876][T13176] bridge_slave_1: left promiscuous mode [ 644.471210][T13176] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.504075][T13176] bond0: (slave bond_slave_0): Releasing backup interface [ 644.531355][T13176] bond0: (slave bond_slave_1): Releasing backup interface [ 644.550515][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 644.565470][ T24] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 644.586282][T13176] team0: Port device team_slave_0 removed [ 644.594252][ T24] usb 2-1: config 6 has 1 interface, different from the descriptor's value: 3 [ 644.610914][T13176] team0: Port device team_slave_1 removed [ 644.624475][ T24] usb 2-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 644.634058][T13176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.644646][ T5725] cdc_ncm 6-1:1.0: SET_NTB_FORMAT failed [ 644.648663][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.653364][T13176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.680142][T13176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 644.681032][ T24] usb 2-1: Product: syz [ 644.681212][ T5725] cdc_ncm 6-1:1.0: bind() failure [ 644.700171][T13176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.704595][ T24] usb 2-1: Manufacturer: syz [ 644.714359][ T5725] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 644.722904][ T24] usb 2-1: SerialNumber: syz [ 644.729629][ T5725] cdc_ncm 6-1:1.1: bind() failure [ 644.742223][T13176] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 644.743549][ T24] usb 2-1: Fast Track Pro config OK [ 644.744178][ T5725] usb 6-1: USB disconnect, device number 7 [ 644.821196][ T24] usb 2-1: cannot find UAC_HEADER [ 644.948205][ T24] snd-usb-audio 2-1:6.0: probe with driver snd-usb-audio failed with error -22 [ 645.030786][ T6410] udevd[6410]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:6.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 645.146038][T13193] fuse: Unknown parameter '0x0000000000000004' [ 645.803067][T13199] xt_hashlimit: size too large, truncated to 1048576 [ 645.883706][T13201] syzkaller1: entered promiscuous mode [ 645.912556][T13201] syzkaller1: entered allmulticast mode [ 645.952156][ T29] audit: type=1400 audit(1784012728.440:1416): avc: denied { write } for pid=13200 comm="syz.5.1909" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 646.519056][ T5730] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 646.569321][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 646.660469][ T5730] usb 7-1: device descriptor read/64, error -71 [ 646.731845][ T5840] usb 2-1: USB disconnect, device number 38 [ 646.759108][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 646.791858][ T24] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 646.821592][ T24] usb 6-1: config 0 has no interface number 0 [ 646.838732][ T24] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 646.857459][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.881896][ T24] usb 6-1: Product: syz [ 646.894897][ T24] usb 6-1: Manufacturer: syz [ 646.906593][ T24] usb 6-1: SerialNumber: syz [ 646.927078][ T24] usb 6-1: config 0 descriptor?? [ 647.019077][ T5730] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 647.171154][ T5730] usb 7-1: device descriptor read/64, error -71 [ 647.309474][ T5730] usb usb7-port1: attempt power cycle [ 647.371195][T13195] kexec: Could not allocate control_code_buffer [ 647.379393][T13213] comedi comedi4: bad chanlist[0]=0x0000000a chan=10 range length=2 [ 647.426997][ T24] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 647.454120][ T24] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 647.475599][ T24] usb 6-1: USB disconnect, device number 8 [ 648.662510][ T5730] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 649.596466][ T5730] usb 7-1: device descriptor read/8, error -71 [ 649.685153][ T29] audit: type=1400 audit(1784012732.170:1417): avc: denied { append } for pid=13229 comm="syz.3.1918" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 649.710761][T13230] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1918'. [ 649.719836][T13230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1918'. [ 649.898169][ T29] audit: type=1400 audit(1784012732.380:1418): avc: denied { ioctl } for pid=13237 comm="syz.6.1920" path="socket:[39955]" dev="sockfs" ino=39955 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 650.082063][ T29] audit: type=1400 audit(1784012732.410:1419): avc: denied { create } for pid=13237 comm="syz.6.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 650.766149][T13251] fuse: Unknown parameter '0x0000000000000004' [ 651.919124][T13188] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 652.099088][T13188] usb 1-1: Using ep0 maxpacket: 16 [ 652.111430][T13188] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 187, changing to 11 [ 652.144937][T13188] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 652.176677][T13188] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 652.211226][T13188] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 652.236813][T13188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.253192][T13188] usb 1-1: Product: à°š [ 652.264616][T13188] usb 1-1: Manufacturer: à¡¡ [ 652.282668][T13188] usb 1-1: SerialNumber: syz [ 653.166575][T13270] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 653.385182][ T29] audit: type=1400 audit(1784012735.870:1420): avc: denied { create } for pid=13271 comm="syz.3.1929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 653.465027][ T29] audit: type=1400 audit(1784012735.900:1421): avc: denied { write } for pid=13271 comm="syz.3.1929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 653.524457][T13277] overlayfs: failed to resolve './file1/file0': -2 [ 653.640388][T13188] cdc_ncm 1-1:1.0: bind() failure [ 653.687786][T13188] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 653.717731][T13188] cdc_ncm 1-1:1.1: bind() failure [ 653.763296][T13188] usb 1-1: USB disconnect, device number 60 [ 654.331517][ T29] audit: type=1400 audit(1784012736.820:1422): avc: denied { create } for pid=13287 comm="syz.6.1934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 654.358423][T13260] kexec: Could not allocate control_code_buffer [ 654.381447][T13291] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1934'. [ 654.553221][ T29] audit: type=1400 audit(1784012737.040:1423): avc: denied { open } for pid=13287 comm="syz.6.1934" path="/dev/ptyr1" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 654.581536][T13295] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1935'. [ 654.638733][T13295] bridge_slave_1: left allmulticast mode [ 654.678781][T13295] bridge_slave_1: left promiscuous mode [ 654.710735][T13295] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.806964][T13295] bridge_slave_0: left allmulticast mode [ 654.847546][T13295] bridge_slave_0: left promiscuous mode [ 655.156116][T13295] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.272863][T13303] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 655.531730][ T29] audit: type=1400 audit(1784012738.020:1424): avc: denied { map } for pid=13311 comm="syz.6.1941" path="socket:[40196]" dev="sockfs" ino=40196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 655.680163][ T29] audit: type=1400 audit(1784012738.160:1425): avc: denied { watch watch_reads } for pid=13320 comm="syz.1.1943" path="/397/file0" dev="tmpfs" ino=2159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 655.977250][T13316] tipc: Started in network mode [ 656.539556][T13316] tipc: Node identity 6230804e5c2f, cluster identity 4711 [ 656.740385][T13316] tipc: Enabled bearer , priority 0 [ 656.768842][T13311] tipc: Disabling bearer [ 656.896973][T13321] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20005 [ 658.149903][T13338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 658.275459][ T29] audit: type=1400 audit(1784012740.760:1426): avc: denied { connect } for pid=13337 comm="syz.3.1948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 659.628214][ T29] audit: type=1400 audit(1784012742.110:1427): avc: denied { recv } for pid=13350 comm="syz.6.1951" saddr=10.128.0.169 src=34208 daddr=10.128.0.216 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 659.679285][ T5828] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 659.970157][T13356] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20005 [ 660.031456][ T5828] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 660.031561][T13353] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1951'. [ 660.053261][T13353] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1951'. [ 660.060747][ T5828] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 660.093884][ T5828] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 660.114576][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.140921][T13353] netlink: 144 bytes leftover after parsing attributes in process `syz.6.1951'. [ 660.142135][T13351] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 660.192000][T13353] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1951'. [ 660.206964][ T5828] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 660.413400][ T5828] usb 1-1: USB disconnect, device number 61 [ 660.519075][T13188] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 660.535467][ T29] audit: type=1400 audit(1784012743.020:1428): avc: denied { bind } for pid=13361 comm="syz.3.1955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 660.592806][ T29] audit: type=1400 audit(1784012743.040:1429): avc: denied { connect } for pid=13361 comm="syz.3.1955" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 660.732494][T13368] Invalid argument reading file caps for ./file0 [ 660.772746][T13188] usb 2-1: unable to get BOS descriptor or descriptor too short [ 660.784303][T13188] usb 2-1: config index 0 descriptor too short (expected 198, got 134) [ 660.805916][T13188] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 660.850379][T13188] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 660.881182][T13188] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 660.892731][T13188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.901156][T13188] usb 2-1: Product: syz [ 660.906531][T13188] usb 2-1: Manufacturer: syz [ 660.912733][T13188] usb 2-1: SerialNumber: syz [ 660.929104][T13188] usb 2-1: 0:1 : does not exist [ 660.979384][ T5828] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 661.099106][ T5725] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 661.141230][ T5828] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 661.159389][ T5828] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 661.170503][ T5828] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 661.184051][ T5828] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.201880][ T5828] usb 7-1: config 0 descriptor?? [ 661.220511][ T5828] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 661.234225][ T5828] dvb-usb: bulk message failed: -22 (3/0) [ 661.259403][ T5828] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 661.262786][ T5725] usb 6-1: Using ep0 maxpacket: 8 [ 661.281345][ T5828] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 661.284618][ T5725] usb 6-1: unable to get BOS descriptor or descriptor too short [ 661.301304][ T5828] usb 7-1: media controller created [ 661.310890][ T5828] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 661.327174][T13188] usb 2-1: unit 0 not found! [ 661.332949][ T5725] usb 6-1: config 4 has an invalid interface number: 110 but max is 0 [ 661.350744][ T5725] usb 6-1: config 4 has no interface number 0 [ 661.358606][ T5725] usb 6-1: string descriptor 0 read error: -22 [ 661.368502][ T5725] usb 6-1: New USB device found, idVendor=0781, idProduct=0001, bcdDevice= 2.00 [ 661.381001][ T5828] dvb-usb: bulk message failed: -22 (6/0) [ 661.415629][ T5828] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 661.421098][ T5725] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.443245][T13368] dibusb: i2c wr: len=61 is too big! [ 661.443245][T13368] [ 661.469592][ T5828] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input22 [ 661.500723][ T5725] usb-storage 6-1:4.110: USB Mass Storage device detected [ 661.518198][T13188] usb 2-1: USB disconnect, device number 39 [ 661.530026][T13372] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1957'. [ 661.558259][ T5725] usb-storage 6-1:4.110: Quirks match for vid 0781 pid 0001: 1 [ 661.571142][ T5828] dvb-usb: schedule remote query interval to 150 msecs. [ 661.619627][ T5828] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 661.693120][ T5828] usb 7-1: USB disconnect, device number 11 [ 661.801225][ T5828] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 661.935078][ T5725] usb 6-1: USB disconnect, device number 9 [ 662.089076][ T5730] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 662.569082][ T5730] usb 1-1: device descriptor read/64, error -71 [ 663.005215][ T5730] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 663.155113][ T5730] usb 1-1: device descriptor read/64, error -71 [ 663.289652][ T5730] usb usb1-port1: attempt power cycle [ 663.391207][T13188] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 663.427109][T13396] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1964'. [ 663.486417][ T29] audit: type=1400 audit(1784012745.970:1430): avc: denied { getopt } for pid=13394 comm="syz.3.1964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 663.528968][T13396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1964'. [ 663.563476][T13188] usb 2-1: device descriptor read/64, error -71 [ 663.650001][ T5730] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 663.690125][ T5730] usb 1-1: device descriptor read/8, error -71 [ 663.795858][T13404] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 663.805083][T13403] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 663.819101][T13188] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 663.939820][ T5730] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 663.959081][T13188] usb 2-1: device descriptor read/64, error -71 [ 664.269546][ T5730] usb 1-1: device descriptor read/8, error -71 [ 664.360136][T13188] usb usb2-port1: attempt power cycle [ 664.383902][ T5730] usb usb1-port1: unable to enumerate USB device [ 664.467334][T13409] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1968'. [ 664.729071][T13188] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 664.759567][T13188] usb 2-1: device descriptor read/8, error -71 [ 665.009069][T13188] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 665.028948][T13400] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1965'. [ 665.042583][T13400] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1965'. [ 665.069807][ T29] audit: type=1400 audit(1784012747.560:1431): avc: denied { ioctl } for pid=13414 comm="syz.0.1971" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 665.105205][T13188] usb 2-1: device descriptor read/8, error -71 [ 665.212720][T13188] usb usb2-port1: unable to enumerate USB device [ 665.337420][ T29] audit: type=1326 audit(1784012747.820:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13420 comm="syz.5.1972" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a8039de59 code=0x0 [ 665.582272][ T29] audit: type=1400 audit(1784012748.060:1433): avc: denied { read } for pid=13420 comm="syz.5.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 665.750733][ T29] audit: type=1400 audit(1784012748.210:1434): avc: denied { sqpoll } for pid=13420 comm="syz.5.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 665.888024][T13425] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1973'. [ 665.978280][T13428] netlink: 160 bytes leftover after parsing attributes in process `syz.6.1973'. [ 666.001058][T13425] syzkaller1: entered promiscuous mode [ 666.016919][T13425] syzkaller1: entered allmulticast mode [ 668.459188][ T5725] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 668.619063][ T5725] usb 2-1: Using ep0 maxpacket: 32 [ 668.628376][ T5725] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 127, changing to 10 [ 668.660712][ T5725] usb 2-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 668.677659][ T5725] usb 2-1: config 0 interface 0 has no altsetting 0 [ 668.685594][ T5725] usb 2-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 668.696305][ T5725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.923154][ T5725] usb 2-1: config 0 descriptor?? [ 669.027993][T13462] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 669.256333][ T5725] usb 2-1: string descriptor 0 read error: -71 [ 669.297704][ T5725] usbhid 2-1:0.0: can't add hid device: -71 [ 669.315011][ T5725] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 669.480080][ T5725] usb 2-1: USB disconnect, device number 44 [ 673.432768][T13484] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20005 [ 675.129275][T13493] netlink: 'syz.1.1988': attribute type 1 has an invalid length. [ 675.215502][T13491] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1989'. [ 675.328446][T13493] 8021q: adding VLAN 0 to HW filter on device bond2 [ 675.426438][ T29] audit: type=1400 audit(1784012757.910:1435): avc: denied { bind } for pid=13499 comm="syz.0.1992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 675.454273][T13495] 8021q: adding VLAN 0 to HW filter on device bond2 [ 675.485901][T13495] bond2: (slave ip6_vti0): The slave device specified does not support setting the MAC address [ 675.487283][T13501] netlink: 'syz.0.1992': attribute type 6 has an invalid length. [ 675.498892][T13495] bond2: (slave ip6_vti0): Error -95 calling set_mac_address [ 675.574713][T13501] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1992'. [ 676.066875][ T29] audit: type=1400 audit(1784012758.550:1436): avc: denied { write } for pid=13510 comm="syz.1.1994" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 676.178177][ T29] audit: type=1400 audit(1784012758.550:1437): avc: denied { open } for pid=13510 comm="syz.1.1994" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 677.218182][T13523] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1995'. [ 677.985599][ T29] audit: type=1400 audit(1784012758.630:1438): avc: denied { create } for pid=13510 comm="syz.1.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 678.102781][ T29] audit: type=1400 audit(1784012759.000:1439): avc: denied { create } for pid=13509 comm="syz.5.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 679.160029][ T29] audit: type=1400 audit(1784012759.000:1440): avc: denied { write } for pid=13509 comm="syz.5.1996" path="socket:[41701]" dev="sockfs" ino=41701 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 680.330903][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.337443][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.771321][T13552] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20005 [ 682.442504][T13561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2003'. [ 682.442524][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2003'. [ 682.553762][T13565] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2005'. [ 682.949123][ T29] audit: type=1400 audit(1784012765.370:1441): avc: denied { connect } for pid=13573 comm="syz.0.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 683.589843][ T5725] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 683.679151][ T5730] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 684.054667][ T5730] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 684.071411][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.072130][ T5725] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 684.100050][ T29] audit: type=1400 audit(1784012766.580:1442): avc: denied { cmd } for pid=13597 comm="iou-wrk-13598" path="socket:[40788]" dev="sockfs" ino=40788 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 684.125900][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.144852][ T5730] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 684.147924][ T5725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.159398][ T5730] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 684.228048][ T5730] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 684.245251][ T5725] usb 4-1: config 0 descriptor?? [ 684.268858][ T5730] usb 2-1: Manufacturer: syz [ 684.284520][ T5725] cp210x 4-1:0.0: cp210x converter detected [ 684.310985][ T5730] usb 2-1: config 0 descriptor?? [ 686.303058][T13188] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 686.533778][T13613] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 686.727066][ T5730] usbhid 2-1:0.0: can't add hid device: -71 [ 686.733559][ T5725] usb 4-1: cp210x converter now attached to ttyUSB0 [ 686.771651][ T5730] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 686.790134][T13188] usb 1-1: Using ep0 maxpacket: 8 [ 686.804914][ T5725] usb 4-1: USB disconnect, device number 52 [ 686.807221][ T29] audit: type=1400 audit(1784012769.290:1443): avc: denied { write } for pid=13597 comm="syz.0.2013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 686.836130][ T5730] usb 2-1: USB disconnect, device number 45 [ 686.909814][T13188] usb 1-1: device descriptor read/all, error -71 [ 686.973706][ T5725] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 687.010273][ T5725] cp210x 4-1:0.0: device disconnected [ 687.119950][T13624] can0: slcan on ttyS3. [ 687.199324][T13628] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2019'. [ 687.379741][ T5730] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 687.566782][ T5730] usb 2-1: unable to get BOS descriptor or descriptor too short [ 687.633273][ T5730] usb 2-1: not running at top speed; connect to a high speed hub [ 687.667136][ T5730] usb 2-1: config 5 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 687.716251][ T5730] usb 2-1: New USB device found, idVendor=15c2, idProduct=003c, bcdDevice=8a.3e [ 687.975307][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.026763][T13644] can0 (unregistered): slcan off ttyS3. [ 688.082748][ T5730] usb 2-1: Product: syz [ 688.097435][ T5730] usb 2-1: Manufacturer: syz [ 688.109668][ T5730] usb 2-1: SerialNumber: syz [ 688.247089][ T29] audit: type=1400 audit(1784012770.730:1444): avc: denied { write } for pid=13630 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 688.340943][ T5725] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 688.401860][T13656] can0: slcan on ttyS3. [ 688.494290][ T5730] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 688.516135][ T29] audit: type=1400 audit(1784012771.000:1445): avc: denied { write } for pid=13659 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 688.541800][ T5725] usb 1-1: unable to get BOS descriptor or descriptor too short [ 688.549300][ T5730] imon 2-1:5.0: unable to initialize intf0, err -19 [ 688.550370][ T1709] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 688.569827][ T5730] imon:imon_probe: failed to initialize context! [ 688.583861][ T5730] imon 2-1:5.0: unable to register, err -19 [ 688.593928][ T5725] usb 1-1: not running at top speed; connect to a high speed hub [ 688.602232][ T5730] usb 2-1: USB disconnect, device number 46 [ 688.643044][ T29] audit: type=1400 audit(1784012771.130:1446): avc: denied { write } for pid=13638 comm="syz.6.2022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 688.653132][ T5725] usb 1-1: config 5 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 688.702229][ T29] audit: type=1400 audit(1784012771.160:1447): avc: denied { connect } for pid=13638 comm="syz.6.2022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 688.708781][ T5725] usb 1-1: New USB device found, idVendor=15c2, idProduct=003c, bcdDevice=8a.3e [ 688.773903][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.811316][ T1709] usb 4-1: unable to get BOS descriptor or descriptor too short [ 688.833764][ T5725] usb 1-1: Product: syz [ 688.842634][ T1709] usb 4-1: not running at top speed; connect to a high speed hub [ 688.853429][ T5725] usb 1-1: Manufacturer: syz [ 688.864671][ T5725] usb 1-1: SerialNumber: syz [ 688.870990][ T1709] usb 4-1: config 5 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 688.895542][ T1709] usb 4-1: New USB device found, idVendor=15c2, idProduct=003c, bcdDevice=8a.3e [ 688.950812][ T1709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.252457][ T1709] usb 4-1: Product: syz [ 689.277414][T13668] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20005 [ 689.308690][ T1709] usb 4-1: Manufacturer: syz [ 689.335780][ T1709] usb 4-1: SerialNumber: syz [ 689.420627][ T5725] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 689.450014][ T5725] imon 1-1:5.0: unable to initialize intf0, err -19 [ 689.466730][ T5725] imon:imon_probe: failed to initialize context! [ 689.474529][ T5725] imon 1-1:5.0: unable to register, err -19 [ 689.497656][ T5725] usb 1-1: USB disconnect, device number 68 [ 690.656731][T13676] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2028'. [ 690.671588][ T1709] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 690.690912][ T1709] imon 4-1:5.0: unable to initialize intf0, err -19 [ 690.759872][T13678] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 690.811599][ T1709] imon:imon_probe: failed to initialize context! [ 690.884801][ T1709] imon 4-1:5.0: unable to register, err -19 [ 690.971681][ T1709] usb 4-1: USB disconnect, device number 53 [ 691.044176][T13691] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 691.074662][ T29] audit: type=1400 audit(1784012773.550:1448): avc: denied { write } for pid=13664 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 691.136218][T13654] can0 (unregistered): slcan off ttyS3. [ 691.368446][ T29] audit: type=1400 audit(1784012773.850:1449): avc: denied { write } for pid=13694 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 691.459292][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2034'. [ 691.488126][T13699] netlink: 'syz.3.2034': attribute type 5 has an invalid length. [ 691.522881][T13699] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2034'. [ 691.567384][T13698] misc userio: Can't change port type on an already running userio instance [ 691.620232][T13698] misc userio: Begin command sent, but we're already running [ 691.928547][ T29] audit: type=1400 audit(1784012774.410:1450): avc: denied { read } for pid=13690 comm="syz.0.2032" name="usbmon6" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 691.979299][T13691] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 691.997436][ T29] audit: type=1400 audit(1784012774.440:1451): avc: denied { open } for pid=13690 comm="syz.0.2032" path="/dev/usbmon6" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 692.128828][T13690] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 692.185202][ T29] audit: type=1400 audit(1784012774.450:1452): avc: denied { ioctl } for pid=13690 comm="syz.0.2032" path="/dev/usbmon6" dev="devtmpfs" ino=735 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 692.488580][ T1709] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 692.497062][ T29] audit: type=1400 audit(1784012774.530:1453): avc: denied { watch } for pid=13690 comm="syz.0.2032" path="/385/file5" dev="tmpfs" ino=2052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 692.497565][T13711] No such timeout policy "syz1" [ 692.567091][ T1709] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 692.577940][ T1709] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 692.588686][ T1709] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 692.598141][ T1709] rtc rtc0: __rtc_set_alarm: err=-22 [ 695.121242][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 695.121258][ T29] audit: type=1400 audit(1784012777.610:1456): avc: denied { name_bind } for pid=13730 comm="syz.0.2041" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 695.242259][T13734] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2041'. [ 696.725234][T13736] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20005 [ 696.895487][T13747] 0x000000000000-0x000000020000 : "" [ 696.903764][ T29] audit: type=1400 audit(1784012779.380:1457): avc: denied { ioctl } for pid=13745 comm="syz.1.2045" path="/dev/mtd0" dev="devtmpfs" ino=704 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 697.029542][ T5725] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 697.110179][T13747] ftl_cs: FTL header not found. [ 697.239739][ T5725] usb 1-1: Using ep0 maxpacket: 8 [ 697.518657][ T5725] usb 1-1: unable to get BOS descriptor or descriptor too short [ 697.599816][ T5730] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 697.607600][T13759] xt_connbytes: Forcing CT accounting to be enabled [ 697.622972][ T5725] usb 1-1: config 4 has an invalid interface number: 110 but max is 0 [ 697.641092][T13759] set match dimension is over the limit! [ 697.652359][ T5725] usb 1-1: config 4 has no interface number 0 [ 697.662158][ T5725] usb 1-1: string descriptor 0 read error: -22 [ 697.687146][ T5725] usb 1-1: New USB device found, idVendor=0781, idProduct=0001, bcdDevice= 2.00 [ 697.732665][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.790054][ T5730] usb 2-1: device descriptor read/64, error -71 [ 697.822847][ T5725] usb-storage 1-1:4.110: USB Mass Storage device detected [ 697.884949][ T29] audit: type=1400 audit(1784012780.360:1458): avc: denied { accept } for pid=13754 comm="syz.6.2047" lport=45405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 697.947548][ T5725] usb-storage 1-1:4.110: Quirks match for vid 0781 pid 0001: 1 [ 698.092517][ T5730] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 698.129116][ T5725] usb 1-1: USB disconnect, device number 69 [ 698.239158][ T5730] usb 2-1: device descriptor read/64, error -71 [ 698.284234][T13775] No such timeout policy "syz1" [ 698.359259][ T5730] usb usb2-port1: attempt power cycle [ 698.569074][ T5828] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 698.709077][ T5730] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 698.729047][ T5828] usb 4-1: Using ep0 maxpacket: 16 [ 698.735785][ T5730] usb 2-1: device descriptor read/8, error -71 [ 698.748150][ T5828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.762312][ T5828] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 699.149927][ T5730] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 699.632910][ T5828] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 699.646119][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.665154][ T5730] usb 2-1: device descriptor read/8, error -71 [ 699.673333][ T5828] usb 4-1: config 0 descriptor?? [ 699.790099][ T5730] usb usb2-port1: unable to enumerate USB device [ 700.082910][ T29] audit: type=1400 audit(1784012782.570:1459): avc: denied { watch } for pid=13799 comm="syz.1.2058" path="/415" dev="tmpfs" ino=2255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 700.111904][T13801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=13801 comm=syz.1.2058 [ 700.146480][ T29] audit: type=1400 audit(1784012782.620:1460): avc: denied { read append } for pid=13799 comm="syz.1.2058" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 700.179648][ T29] audit: type=1400 audit(1784012782.620:1461): avc: denied { open } for pid=13799 comm="syz.1.2058" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 700.451972][ T5828] microsoft 0003:045E:07DA.0016: invalid report_size -351423527 [ 700.467230][ T5828] microsoft 0003:045E:07DA.0016: item 0 4 1 7 parsing failed [ 700.477986][ T5828] microsoft 0003:045E:07DA.0016: parse failed [ 700.484682][ T5828] microsoft 0003:045E:07DA.0016: probe with driver microsoft failed with error -22 [ 700.999183][ T5710] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 701.113578][T13794] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2055'. [ 701.211569][ T5710] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 701.225529][ T5710] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 701.371613][ T5710] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 701.381639][ T5710] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.397623][T13790] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 701.428362][ T5710] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 701.983776][T13814] can0: slcan on ttyS3. [ 701.992896][ T5725] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 702.192082][ T5725] usb 1-1: unable to get BOS descriptor or descriptor too short [ 702.222812][ T5725] usb 1-1: not running at top speed; connect to a high speed hub [ 702.223015][ T42] usb 4-1: USB disconnect, device number 54 [ 702.323351][ T5725] usb 1-1: config 5 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 702.383845][ T5725] usb 1-1: New USB device found, idVendor=15c2, idProduct=003c, bcdDevice=8a.3e [ 702.411175][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.440688][ T5725] usb 1-1: Product: syz [ 702.453595][ T5725] usb 1-1: Manufacturer: syz [ 702.453606][ T5828] usb 6-1: USB disconnect, device number 10 [ 702.509286][ T5725] usb 1-1: SerialNumber: syz [ 703.786745][T13814] can0 (unregistered): slcan off ttyS3. [ 704.407911][ T5725] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 704.408373][T13835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2064'. [ 704.436776][ T5725] imon 1-1:5.0: unable to initialize intf0, err -19 [ 704.451395][ T5725] imon:imon_probe: failed to initialize context! [ 704.491052][ T5725] imon 1-1:5.0: unable to register, err -19 [ 704.506576][T13835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2064'. [ 704.533300][ T29] audit: type=1400 audit(1784012787.010:1462): avc: denied { ioctl } for pid=13837 comm="syz.3.2065" path="socket:[42503]" dev="sockfs" ino=42503 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 704.533614][ T5725] usb 1-1: USB disconnect, device number 70 [ 704.603744][ T29] audit: type=1400 audit(1784012787.020:1463): avc: denied { write } for pid=13837 comm="syz.3.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 704.635071][ T29] audit: type=1400 audit(1784012787.060:1464): avc: denied { read } for pid=13837 comm="syz.3.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 704.681818][T13847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2067'. [ 704.692080][T13847] FAULT_INJECTION: forcing a failure. [ 704.692080][T13847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 704.707206][T13847] CPU: 0 UID: 0 PID: 13847 Comm: syz.1.2067 Tainted: G L syzkaller #0 PREEMPT(full) [ 704.707229][T13847] Tainted: [L]=SOFTLOCKUP [ 704.707234][T13847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 704.707243][T13847] Call Trace: [ 704.707248][T13847] [ 704.707254][T13847] dump_stack_lvl+0x100/0x190 [ 704.707278][T13847] should_fail_ex.cold+0x5/0xa [ 704.707299][T13847] _copy_from_user+0x2e/0xd0 [ 704.707322][T13847] copy_msghdr_from_user+0x9f/0x4c0 [ 704.707346][T13847] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 704.707378][T13847] ___sys_sendmsg+0x106/0x1e0 [ 704.707401][T13847] ? __pfx____sys_sendmsg+0x10/0x10 [ 704.707420][T13847] ? __lock_acquire+0x49f/0x1a40 [ 704.707439][T13847] ? get_pid_task+0x106/0x250 [ 704.707486][T13847] __sys_sendmsg+0x160/0x210 [ 704.707502][T13847] ? __pfx___sys_sendmsg+0x10/0x10 [ 704.707529][T13847] do_syscall_64+0x115/0x870 [ 704.707551][T13847] ? clear_bhb_loop+0x40/0x90 [ 704.707572][T13847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.707588][T13847] RIP: 0033:0x7f19ad99de59 [ 704.707603][T13847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.707619][T13847] RSP: 002b:00007f19ae7da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 704.707636][T13847] RAX: ffffffffffffffda RBX: 00007f19adc25fa0 RCX: 00007f19ad99de59 [ 704.707647][T13847] RDX: 0000000004040000 RSI: 0000200000000100 RDI: 0000000000000004 [ 704.707657][T13847] RBP: 00007f19ae7da090 R08: 0000000000000000 R09: 0000000000000000 [ 704.707668][T13847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.707677][T13847] R13: 00007f19adc26038 R14: 00007f19adc25fa0 R15: 00007ffc28042d88 [ 704.707699][T13847] [ 705.870735][ T29] audit: type=1400 audit(1784012788.340:1465): avc: denied { write } for pid=13828 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 706.005981][ T29] audit: type=1400 audit(1784012788.490:1466): avc: denied { write } for pid=13876 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 706.357959][ T29] audit: type=1400 audit(1784012788.840:1467): avc: denied { write } for pid=13878 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 706.450777][ T29] audit: type=1400 audit(1784012788.940:1468): avc: denied { write } for pid=13891 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 706.859292][T13859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2069'. [ 708.067400][T13905] netlink: 'syz.0.2076': attribute type 11 has an invalid length. [ 708.090368][T13905] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2076'. [ 708.141541][T13908] fuse: Unknown parameter 'user_id00000000000000000000' [ 708.231498][T13902] 9pnet_fd: Insufficient options for proto=fd [ 708.319825][T13907] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2076'. [ 708.362370][T13907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2076'. [ 708.571366][T13912] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20005 [ 708.711781][T13905] block device autoloading is deprecated and will be removed. [ 709.184442][T13918] syzkaller1: entered promiscuous mode [ 709.190162][T13918] syzkaller1: entered allmulticast mode [ 709.371671][T13920] No such timeout policy "syz1" [ 711.653441][T13936] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2084'. [ 712.411477][T13909] kexec: Could not allocate control_code_buffer [ 712.427799][ T29] audit: type=1400 audit(1784012794.910:1469): avc: denied { map } for pid=13946 comm="syz.1.2088" path="/dev/comedi3" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 712.568951][T13954] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=13954 comm=syz.6.2090 [ 712.600163][T13954] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=13954 comm=syz.6.2090 [ 712.649473][ T5725] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 712.741674][ T29] audit: type=1400 audit(1784012795.230:1470): avc: denied { connect } for pid=13962 comm="syz.3.2094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 712.803550][T13964] netlink: 'syz.1.2091': attribute type 21 has an invalid length. [ 712.909067][T13964] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2091'. [ 713.056049][ T5725] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 713.209246][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.250097][ T5725] usb 1-1: Product: syz [ 713.469320][ T5725] usb 1-1: Manufacturer: syz [ 713.578676][ T5725] usb 1-1: SerialNumber: syz [ 714.789294][ T5725] rtl8150 1-1:1.0: couldn't reset the device [ 714.806487][ T5725] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 714.867406][ T5725] usb 1-1: USB disconnect, device number 71 [ 714.889053][ T42] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 715.139047][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 716.117974][T13983] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2098'. [ 716.207981][ T42] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 716.228738][ T42] usb 4-1: config 0 has no interface number 0 [ 716.239320][ T42] usb 4-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 4 [ 716.256328][ T42] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 716.275008][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.306793][ T42] usb 4-1: Product: syz [ 716.333293][ T42] usb 4-1: Manufacturer: syz [ 716.347881][ T42] usb 4-1: SerialNumber: syz [ 716.380220][ T42] usb 4-1: config 0 descriptor?? [ 716.402540][ T29] audit: type=1400 audit(1784012798.880:1471): avc: denied { write } for pid=13986 comm="syz.0.2100" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 716.433340][T13976] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 716.783598][ T42] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 716.826295][T13987] overlay: Unknown parameter 'dont_measure' [ 716.849573][ T5976] usb 4-1: Unsupported hardware version: 0x85706d2a [ 716.892545][ T5976] usb 4-1: could not get hw params (-22) [ 716.928089][ T5976] usb 4-1: could not probe fw (-22) [ 717.055362][ T29] audit: type=1400 audit(1784012799.540:1472): avc: denied { connect } for pid=13996 comm="syz.0.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 717.078205][ T42] usb 4-1: USB disconnect, device number 55 [ 717.124633][T13995] can0: slcan on ttyS3. [ 717.177948][ T29] audit: type=1400 audit(1784012799.580:1473): avc: denied { write } for pid=13996 comm="syz.0.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 717.300875][ T5725] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 717.542549][ T5725] usb 2-1: unable to get BOS descriptor or descriptor too short [ 718.018815][ T5725] usb 2-1: not running at top speed; connect to a high speed hub [ 718.251928][ T5725] usb 2-1: config 5 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 718.282833][ T5611] Bluetooth: hci2: command 0x0406 tx timeout [ 718.481357][T14009] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2105'. [ 718.538827][ T5725] usb 2-1: New USB device found, idVendor=15c2, idProduct=003c, bcdDevice=8a.3e [ 718.541372][T14013] netlink: 'syz.3.2104': attribute type 2 has an invalid length. [ 718.577887][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.579000][T14013] netlink: 'syz.3.2104': attribute type 2 has an invalid length. [ 718.656759][ T5725] usb 2-1: Product: syz [ 718.678516][ T5725] usb 2-1: Manufacturer: syz [ 718.709178][ T5725] usb 2-1: SerialNumber: syz [ 718.764717][ T29] audit: type=1400 audit(1784012801.250:1474): avc: denied { write } for pid=14000 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 718.930900][ T29] audit: type=1400 audit(1784012801.420:1475): avc: denied { write } for pid=14023 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 719.046535][ T5725] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 719.078302][ T5725] imon 2-1:5.0: unable to initialize intf0, err -19 [ 719.098914][ T29] audit: type=1400 audit(1784012801.530:1476): avc: denied { ioctl } for pid=13994 comm="syz.1.2101" path="socket:[43508]" dev="sockfs" ino=43508 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 719.103007][ T5725] imon:imon_probe: failed to initialize context! [ 719.191819][T13994] can0 (unregistered): slcan off ttyS3. [ 719.225499][ T5725] imon 2-1:5.0: unable to register, err -19 [ 719.271533][ T5725] usb 2-1: USB disconnect, device number 51 [ 719.487803][T14038] fuse: Unknown parameter 'user_id00000000000000000000' [ 719.771609][ T10] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 720.653932][ T10] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 720.709440][ T10] usb 7-1: config 0 has no interface number 0 [ 720.724254][ T10] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 720.797319][ T10] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 720.851090][ T10] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 720.897490][ T10] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 720.948411][ T10] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 720.982915][ T29] audit: type=1400 audit(1784012803.460:1477): avc: denied { write } for pid=14026 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 721.007970][ T10] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 721.094055][ T10] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 721.120420][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.137412][ T29] audit: type=1400 audit(1784012803.620:1478): avc: denied { ioctl } for pid=14067 comm="syz.5.2115" path="socket:[44228]" dev="sockfs" ino=44228 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 721.158544][ T10] usb 7-1: config 0 descriptor?? [ 721.235525][T14042] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 721.257679][T14042] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 721.293299][ T29] audit: type=1400 audit(1784012803.780:1479): avc: denied { write } for pid=14072 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 721.331130][ T42] usb 1-1: new low-speed USB device number 72 using dummy_hcd [ 721.397142][T14074] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2116'. [ 721.400233][ T10] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 721.502219][T14045] kexec: Could not allocate control_code_buffer [ 721.573365][T14077] 9p: Unknown access argument 18446744073709551615: -34 [ 721.629072][ T42] usb 1-1: Invalid ep0 maxpacket: 32 [ 721.744849][T14042] ldusb 7-1:0.55: Write buffer overflow, 16 bytes dropped [ 721.755864][ T5710] usb 7-1: USB disconnect, device number 12 [ 721.789514][ T42] usb 1-1: new low-speed USB device number 73 using dummy_hcd [ 721.801610][ T29] audit: type=1400 audit(1784012804.280:1480): avc: denied { mounton } for pid=14086 comm="syz.1.2120" path="/432/file0" dev="tmpfs" ino=2352 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 721.801701][T14087] 9pnet_fd: Insufficient options for proto=fd [ 721.846457][ C0] ldusb 7-1:0.55: usb_submit_urb failed (-19) [ 721.873921][ T5710] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 721.939065][ T42] usb 1-1: Invalid ep0 maxpacket: 32 [ 721.944851][ T42] usb usb1-port1: attempt power cycle [ 722.012732][T14090] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2118'. [ 722.132792][ T29] audit: type=1400 audit(1784012804.440:1481): avc: denied { connect } for pid=14079 comm="syz.3.2118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 722.156696][ T29] audit: type=1400 audit(1784012804.510:1482): avc: denied { getopt } for pid=14079 comm="syz.3.2118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 722.269162][ T5828] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 722.409064][ T5828] usb 2-1: device descriptor read/64, error -71 [ 722.499071][ T42] usb 1-1: new low-speed USB device number 74 using dummy_hcd [ 722.541008][ T42] usb 1-1: Invalid ep0 maxpacket: 32 [ 722.659159][ T5828] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 722.669407][ T42] usb 1-1: new low-speed USB device number 75 using dummy_hcd [ 722.700837][ T42] usb 1-1: Invalid ep0 maxpacket: 32 [ 722.706821][ T42] usb usb1-port1: unable to enumerate USB device [ 722.819080][ T5828] usb 2-1: device descriptor read/64, error -71 [ 722.962122][T14094] can0: slcan on ttyS3. [ 723.118144][ T5710] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 723.641461][ T5828] usb usb2-port1: attempt power cycle [ 723.671713][ T5710] usb 7-1: unable to get BOS descriptor or descriptor too short [ 723.700263][ T5710] usb 7-1: not running at top speed; connect to a high speed hub [ 723.741654][ T5710] usb 7-1: config 5 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 723.799853][ T5710] usb 7-1: New USB device found, idVendor=15c2, idProduct=003c, bcdDevice=8a.3e [ 723.835039][ T5710] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.844770][ T29] audit: type=1400 audit(1784012806.320:1483): avc: denied { mount } for pid=14106 comm="syz.5.2125" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 723.870432][T14115] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 723.909327][ T5710] usb 7-1: Product: syz [ 723.913807][ T29] audit: type=1400 audit(1784012806.320:1484): avc: denied { mounton } for pid=14106 comm="syz.5.2125" path="/134/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 723.999316][ T5828] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 724.025783][ T5710] usb 7-1: Manufacturer: syz [ 724.039693][ T5828] usb 2-1: device descriptor read/8, error -71 [ 724.057967][ T5710] usb 7-1: SerialNumber: syz [ 724.064070][T14115] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 724.460199][ T5828] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 724.511831][ T5828] usb 2-1: device descriptor read/8, error -71 [ 724.565239][T14130] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2128'. [ 724.616323][ T29] audit: type=1400 audit(1784012807.090:1485): avc: denied { write } for pid=14108 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.675311][ T5828] usb usb2-port1: unable to enumerate USB device [ 724.729077][ T42] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 724.823949][ T5710] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 724.869662][ T5710] imon 7-1:5.0: unable to initialize intf0, err -19 [ 724.914138][ T42] usb 6-1: Using ep0 maxpacket: 16 [ 724.945982][ T5710] imon:imon_probe: failed to initialize context! [ 724.967033][ T42] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 724.982670][ T5710] imon 7-1:5.0: unable to register, err -19 [ 725.060820][ T42] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 725.084158][ T5710] usb 7-1: USB disconnect, device number 13 [ 725.100784][T14093] can0 (unregistered): slcan off ttyS3. [ 725.114837][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.178486][ T42] usb 6-1: Product: syz [ 725.207581][ T42] usb 6-1: Manufacturer: syz [ 725.207932][ T29] audit: type=1400 audit(1784012807.690:1486): avc: denied { write } for pid=14139 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 725.326927][ T42] usb 6-1: SerialNumber: syz [ 725.392624][ T42] usb 6-1: config 0 descriptor?? [ 725.428137][ T29] audit: type=1400 audit(1784012807.910:1487): avc: denied { bind } for pid=14142 comm="syz.1.2131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 727.077880][T14150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2132'. [ 729.626305][ T5710] usb 6-1: USB disconnect, device number 11 [ 729.830261][ T29] audit: type=1400 audit(1784012812.310:1488): avc: denied { unmount } for pid=11181 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 730.019530][ T29] audit: type=1400 audit(1784012812.500:1489): avc: denied { write } for pid=14147 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 730.313169][ T5710] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 730.379250][ T29] audit: type=1400 audit(1784012812.870:1490): avc: denied { write } for pid=14187 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 730.691428][ T5710] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.734711][ T5710] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 730.788503][ T5710] usb 6-1: config 0 interface 0 has no altsetting 0 [ 730.795192][ T5710] usb 6-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 730.804264][ T5710] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.825622][ T5710] usb 6-1: config 0 descriptor?? [ 731.761895][ T5710] thrustmaster 0003:044F:B304.0017: unknown main item tag 0x0 [ 731.774773][ T5710] thrustmaster 0003:044F:B304.0017: unknown main item tag 0x0 [ 731.788079][T14200] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20005 [ 731.803836][ T5710] thrustmaster 0003:044F:B304.0017: unknown main item tag 0x0 [ 731.820018][ T5710] thrustmaster 0003:044F:B304.0017: unknown main item tag 0x0 [ 732.964471][T14206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2145'. [ 733.060000][ T5710] thrustmaster 0003:044F:B304.0017: unknown main item tag 0x0 [ 733.116746][ T5710] thrustmaster 0003:044F:B304.0017: unknown main item tag 0x0 [ 733.162732][ T5710] thrustmaster 0003:044F:B304.0017: unknown main item tag 0x0 [ 733.200125][ T5710] thrustmaster 0003:044F:B304.0017: unknown main item tag 0x0 [ 733.227971][ T5710] thrustmaster 0003:044F:B304.0017: unknown main item tag 0x0 [ 733.264411][ T5710] thrustmaster 0003:044F:B304.0017: unknown main item tag 0x0 [ 733.300661][ T5710] thrustmaster 0003:044F:B304.0017: item fetching failed at offset 126/235 [ 733.358066][ T5710] thrustmaster 0003:044F:B304.0017: parse failed [ 733.379791][ T5710] thrustmaster 0003:044F:B304.0017: probe with driver thrustmaster failed with error -22 [ 733.403247][ T29] audit: type=1400 audit(1784012815.890:1491): avc: denied { setopt } for pid=14218 comm="syz.3.2151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 733.405789][ T5710] usb 6-1: USB disconnect, device number 12 [ 733.629156][ T5730] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 733.832006][ T5730] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 733.889840][ T5730] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.939019][ T5730] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.967356][ T5730] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 734.005365][ T5730] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 734.028454][ T5730] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 734.054667][ T5730] usb 7-1: Manufacturer: syz [ 734.076125][ T5730] usb 7-1: config 0 descriptor?? [ 734.329222][T14229] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 734.813314][ T5730] appleir 0003:05AC:8243.0018: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 735.070650][T14231] nbd: couldn't find a device at index 0 [ 735.375323][ T5828] usb 7-1: USB disconnect, device number 14 [ 735.381460][ T5730] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 735.549265][ T5730] usb 4-1: Using ep0 maxpacket: 32 [ 735.561483][ T5730] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 735.579349][ T5730] usb 4-1: config 0 has no interface number 0 [ 735.586751][ T5730] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 735.599559][ T5730] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 735.612372][ T5730] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 735.623973][ T5730] usb 4-1: config 0 interface 196 has no altsetting 0 [ 735.639444][ T5730] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 735.649475][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.657556][ T5730] usb 4-1: Product: syz [ 735.663122][ T5730] usb 4-1: Manufacturer: syz [ 735.667815][ T5730] usb 4-1: SerialNumber: syz [ 735.692799][ T5730] usb 4-1: config 0 descriptor?? [ 735.721010][T14231] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 736.302437][T14253] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 736.614609][ T5730] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 736.759020][ T5730] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 737.756046][T14256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2158'. [ 737.913879][T14257] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20005 [ 738.220559][ T5840] usb 4-1: USB disconnect, device number 56 [ 738.339779][ T5840] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 738.659083][ T5710] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 738.851040][ T5710] usb 7-1: config 0 has no interfaces? [ 738.877972][ T5710] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 738.904574][ T5710] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.934350][ T5710] usb 7-1: config 0 descriptor?? [ 739.076840][ T29] audit: type=1400 audit(1784012821.560:1492): avc: denied { write } for pid=14264 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.207306][ T29] audit: type=1400 audit(1784012821.690:1493): avc: denied { write } for pid=14287 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.281663][T14281] nbd: couldn't find a device at index 0 [ 739.549178][ T5828] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 740.569811][ T5725] usb 7-1: USB disconnect, device number 15 [ 740.702558][T14268] siw: device registration error -23 [ 740.839010][ T5828] usb 4-1: Using ep0 maxpacket: 32 [ 740.853303][ T5828] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 740.870528][ T5828] usb 4-1: config 0 has no interface number 0 [ 740.882982][ T5828] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 740.905999][ T5828] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 740.936044][ T5828] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 740.963143][ T5828] usb 4-1: config 0 interface 196 has no altsetting 0 [ 740.984707][ T5828] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 741.015769][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.051376][ T5828] usb 4-1: Product: syz [ 741.064995][ T5828] usb 4-1: Manufacturer: syz [ 741.079043][ T5828] usb 4-1: SerialNumber: syz [ 741.099743][ T5828] usb 4-1: config 0 descriptor?? [ 741.117529][T14281] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 741.669682][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.676182][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 741.788381][ T5828] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 742.168933][ T29] audit: type=1400 audit(1784012824.650:1494): avc: denied { write } for pid=14303 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.262181][ T29] audit: type=1400 audit(1784012824.740:1495): avc: denied { write } for pid=14324 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 743.362896][T14337] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 745.126545][ T5828] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 745.153837][ T5828] usb 4-1: USB disconnect, device number 57 [ 745.336909][ T29] audit: type=1400 audit(1784012827.820:1496): avc: denied { write } for pid=14352 comm="syz.6.2175" lport=59512 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 745.369895][T14355] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2176'. [ 745.385589][ T29] audit: type=1400 audit(1784012827.860:1497): avc: denied { setopt } for pid=14352 comm="syz.6.2175" lport=59512 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 745.417397][ T29] audit: type=1400 audit(1784012827.870:1498): avc: denied { getopt } for pid=14352 comm="syz.6.2175" lport=59512 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 745.520208][ T5828] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 746.694844][ T29] audit: type=1400 audit(1784012829.180:1499): avc: denied { ioctl } for pid=14365 comm="syz.3.2179" path="socket:[44902]" dev="sockfs" ino=44902 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 747.223395][ T29] audit: type=1400 audit(1784012829.260:1500): avc: denied { lock } for pid=14365 comm="syz.3.2179" path="socket:[44900]" dev="sockfs" ino=44900 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 748.279210][ T5828] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 748.409427][ T5717] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 748.463637][ T5828] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 748.503312][ T5828] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 748.537748][ T5828] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 748.689120][ T5717] usb 2-1: Using ep0 maxpacket: 32 [ 748.707544][ T5717] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 749.010584][ T5828] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 749.019773][ T5717] usb 2-1: config 0 has no interface number 0 [ 749.025974][ T5828] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.036258][ T5717] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 749.050727][ T5828] usb 7-1: Product: syz [ 749.055094][ T5828] usb 7-1: Manufacturer: syz [ 749.060169][ T5717] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 749.070560][ T5828] usb 7-1: SerialNumber: syz [ 749.101825][ T5717] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 749.114218][ T5828] usb 7-1: config 0 descriptor?? [ 749.141160][T14380] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 749.142889][ T5717] usb 2-1: config 0 interface 196 has no altsetting 0 [ 749.165270][ T5717] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 749.174532][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.182818][ T5717] usb 2-1: Product: syz [ 749.187085][ T5717] usb 2-1: Manufacturer: syz [ 749.192217][ T5717] usb 2-1: SerialNumber: syz [ 749.233644][ T5717] usb 2-1: config 0 descriptor?? [ 749.251635][T14374] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 749.290591][ T5828] rc_core: IR keymap rc-streamzap not found [ 749.306916][ T5828] Registered IR keymap rc-empty [ 749.324803][ T5828] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 749.369569][ T5828] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input24 [ 749.792822][T14410] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20005 [ 750.120892][ T5725] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 750.200354][ T5828] IPVS: starting estimator thread 0... [ 750.206120][ T5717] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 750.419389][ T5717] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 750.471428][ T5717] usb 2-1: USB disconnect, device number 56 [ 750.557439][T14415] IPVS: using max 50 ests per chain, 120000 per kthread [ 750.683595][ T5725] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 751.034652][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.050179][ T5710] usb 7-1: USB disconnect, device number 16 [ 751.067964][ T5725] usb 4-1: Product: syz [ 751.143644][ T5725] usb 4-1: Manufacturer: syz [ 751.181913][ T5725] usb 4-1: SerialNumber: syz [ 751.192320][T14420] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 751.217233][ T5725] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 751.250015][ T5717] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 751.292265][ T29] audit: type=1400 audit(1784012833.780:1501): avc: denied { setopt } for pid=14421 comm="syz.0.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 751.456961][ T29] audit: type=1400 audit(1784012833.780:1502): avc: denied { listen } for pid=14421 comm="syz.0.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 751.469430][ T5840] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 751.561623][ T29] audit: type=1400 audit(1784012833.910:1503): avc: denied { firmware_load } for pid=5840 comm="kworker/0:7" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 751.852475][T14442] batadv_slave_0: mtu less than device minimum [ 752.837468][ T5840] usb 4-1: Service connection timeout for: 256 [ 752.848455][ T29] audit: type=1400 audit(1784012835.320:1504): avc: denied { mount } for pid=14423 comm="syz.6.2195" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 752.891367][ T5717] usb 4-1: USB disconnect, device number 58 [ 753.043947][ T5840] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 753.139705][ T5840] ath9k_htc: Failed to initialize the device [ 753.173421][ T5717] usb 4-1: ath9k_htc: USB layer deinitialized [ 753.761800][ T29] audit: type=1400 audit(1784012836.240:1505): avc: denied { create } for pid=14453 comm="syz.6.2201" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 754.147598][ T5725] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 754.177128][T14449] can0: slcan on ttyS3. [ 754.511701][T14469] 9p: Bad value for 'wfdno' [ 754.529789][T14472] netlink: 'syz.5.2204': attribute type 1 has an invalid length. [ 755.602474][T14472] 8021q: adding VLAN 0 to HW filter on device bond2 [ 755.947175][ T5725] usb 1-1: unable to get BOS descriptor or descriptor too short [ 755.969068][ T5725] usb 1-1: not running at top speed; connect to a high speed hub [ 755.984856][ T5725] usb 1-1: config 5 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 756.060956][T14476] 8021q: adding VLAN 0 to HW filter on device bond2 [ 756.119811][T14476] bond2: (slave ipip0): The slave device specified does not support setting the MAC address [ 756.180566][ T5725] usb 1-1: string descriptor 0 read error: -71 [ 756.197108][T14476] bond2: (slave ipip0): Error -95 calling set_mac_address [ 756.220997][ T5725] usb 1-1: New USB device found, idVendor=15c2, idProduct=003c, bcdDevice=8a.3e [ 756.261427][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.346503][ T5725] usb 1-1: can't set config #5, error -71 [ 756.403055][ T5725] usb 1-1: USB disconnect, device number 76 [ 756.460665][T14451] can0 (unregistered): slcan off ttyS3. [ 756.718068][ T29] audit: type=1400 audit(1784012839.200:1506): avc: denied { write } for pid=14458 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 756.775118][T14498] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2209'. [ 757.589030][ T42] usb 1-1: new low-speed USB device number 77 using dummy_hcd [ 757.752244][ T29] audit: type=1400 audit(1784012840.240:1507): avc: denied { write } for pid=14508 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 758.233079][ T29] audit: type=1400 audit(1784012840.720:1508): avc: denied { map } for pid=14517 comm="syz.1.2213" path="socket:[45215]" dev="sockfs" ino=45215 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 758.235889][T14515] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2212'. [ 758.541426][ T29] audit: type=1400 audit(1784012840.850:1509): avc: denied { append } for pid=14517 comm="syz.1.2213" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 758.676373][ T1709] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 758.962130][T14535] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 759.049159][ T1709] usb 6-1: Using ep0 maxpacket: 32 [ 759.450993][ T29] audit: type=1400 audit(1784012841.910:1510): avc: denied { write } for pid=14516 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 759.711796][ T5710] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 759.719748][ T29] audit: type=1400 audit(1784012842.140:1511): avc: denied { write } for pid=14549 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 759.917056][ T1709] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 759.925251][ T1709] usb 6-1: config 0 has no interface number 0 [ 759.931338][ T1709] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 759.941314][ T1709] usb 6-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 759.951197][ T1709] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 759.961084][ T1709] usb 6-1: config 0 interface 196 has no altsetting 0 [ 760.389243][ T5710] usb 7-1: Using ep0 maxpacket: 16 [ 760.437636][ T5710] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.484010][ T5710] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 760.516868][ T5710] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 760.534150][ T1709] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 760.578394][ T1709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.580279][ T42] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 760.598904][ T5710] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.770498][ T42] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 760.807217][ T42] usb 1-1: can't set config #4, error -71 [ 760.807608][ T1709] usb 6-1: config 0 descriptor?? [ 760.822023][ T42] usb 1-1: USB disconnect, device number 77 [ 760.822188][ T5710] usb 7-1: config 0 descriptor?? [ 760.844737][ T1709] usb 6-1: can't set config #0, error -71 [ 761.053836][ T1709] usb 6-1: USB disconnect, device number 13 [ 761.115052][T14561] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2218'. [ 761.351709][T14565] overlayfs: failed to resolve './file2': -2 [ 761.378785][T14557] can0: slcan on ttyS3. [ 761.711458][ T1709] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 761.757615][T14575] kernel read not supported for file /memory.swap.current (pid: 14575 comm: syz.0.2223) [ 761.801234][ T29] audit: type=1800 audit(1784012844.290:1512): pid=14575 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2223" name="memory.swap.current" dev="mqueue" ino=46301 res=0 errno=0 [ 761.893235][ T5710] microsoft 0003:045E:07DA.0019: invalid report_size -351423527 [ 761.903654][ T5710] microsoft 0003:045E:07DA.0019: item 0 4 1 7 parsing failed [ 761.940171][ T1709] usb 6-1: unable to get BOS descriptor or descriptor too short [ 761.989559][ T42] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 762.026524][ T5710] microsoft 0003:045E:07DA.0019: parse failed [ 762.207864][ T1709] usb 6-1: not running at top speed; connect to a high speed hub [ 763.002240][ T5710] microsoft 0003:045E:07DA.0019: probe with driver microsoft failed with error -22 [ 763.019159][ T1709] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 763.103561][ T1709] usb 6-1: New USB device found, idVendor=15c2, idProduct=003c, bcdDevice=8a.3e [ 763.150962][ T42] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 763.176930][ T1709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.232923][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.279310][ T1709] usb 6-1: Product: syz [ 763.297993][ T42] usb 2-1: Product: syz [ 763.323685][ T42] usb 2-1: Manufacturer: syz [ 763.344777][ T1709] usb 6-1: Manufacturer: syz [ 763.357477][ T42] usb 2-1: SerialNumber: syz [ 763.417204][ T1709] usb 6-1: SerialNumber: syz [ 763.758350][ T42] rtl8150 2-1:1.0: couldn't reset the device [ 763.792491][ T42] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 763.887091][ T42] usb 2-1: USB disconnect, device number 57 [ 763.903384][T14557] can0 (unregistered): slcan off ttyS3. [ 763.972310][ T1709] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 764.002357][ T1709] imon 6-1:5.0: unable to initialize intf0, err -19 [ 764.019452][ T1709] imon:imon_probe: failed to initialize context! [ 764.021506][ T5828] usb 7-1: USB disconnect, device number 17 [ 764.028463][ T1709] imon 6-1:5.0: unable to register, err -19 [ 764.073488][ T1709] usb 6-1: USB disconnect, device number 14 [ 764.281700][ T5710] IPVS: starting estimator thread 0... [ 764.396312][ T29] audit: type=1400 audit(1784012846.880:1513): avc: denied { write } for pid=14577 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 764.438359][T14618] IPVS: using max 46 ests per chain, 110400 per kthread [ 764.471928][T14623] futex_wake_op: syz.0.2232 tries to shift op by 144; fix this program [ 764.709309][ T5710] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 764.749132][ T1709] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 764.774474][T14634] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 764.779108][ T5840] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 764.812324][ T29] audit: type=1400 audit(1784012847.290:1514): avc: denied { write } for pid=14631 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 764.919028][ T5710] usb 4-1: Using ep0 maxpacket: 32 [ 764.944486][ T5710] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 764.980608][ T5710] usb 4-1: config 0 has no interface number 0 [ 765.008224][ T5710] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 765.022880][ T5840] usb 2-1: Using ep0 maxpacket: 32 [ 765.033862][ T1709] usb 1-1: unable to get BOS descriptor or descriptor too short [ 765.051156][ T5840] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 765.066160][ T5710] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 765.076084][ T5710] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 765.097815][ T1709] usb 1-1: not running at top speed; connect to a high speed hub [ 765.105701][ T5840] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 765.118528][ T5710] usb 4-1: config 0 interface 196 has no altsetting 0 [ 765.174496][ T1709] usb 1-1: config 61 has an invalid descriptor of length 0, skipping remainder of the config [ 765.200514][ T1709] usb 1-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 765.295641][ T5710] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 765.305516][ T5840] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 765.325069][ T1709] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 765.335106][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.343918][ T5840] usb 2-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 765.355617][ T1709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.366090][ T5710] usb 4-1: Product: syz [ 765.374886][ T5840] usb 2-1: Product: syz [ 765.393731][ T5710] usb 4-1: Manufacturer: syz [ 765.399090][ T5840] usb 2-1: Manufacturer: syz [ 765.406165][ T1709] usb 1-1: Product: syz [ 765.412949][ T5710] usb 4-1: SerialNumber: syz [ 765.418603][ T5840] usb 2-1: SerialNumber: syz [ 765.426367][ T1709] usb 1-1: Manufacturer: syz [ 765.448713][ T1709] usb 1-1: SerialNumber: syz [ 765.460220][ T5710] usb 4-1: config 0 descriptor?? [ 765.472174][ T5840] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input25 [ 765.486423][T14604] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 765.705717][T14626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.740153][T14626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.780758][ T29] audit: type=1400 audit(1784012848.260:1515): avc: denied { read } for pid=14625 comm="syz.1.2233" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 765.909046][ T5840] usb 2-1: USB disconnect, device number 58 [ 765.909081][ C0] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 765.956663][ T29] audit: type=1400 audit(1784012848.260:1516): avc: denied { open } for pid=14625 comm="syz.1.2233" path="/dev/input/mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 766.011403][ T5828] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 766.105003][ T5840] appletouch 2-1:1.0: input: appletouch disconnected [ 766.106485][ T29] audit: type=1400 audit(1784012848.590:1517): avc: denied { write } for pid=14639 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 766.229269][ T5828] usb 7-1: Using ep0 maxpacket: 32 [ 766.240637][ T5828] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 766.250961][ T5710] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 766.255835][ T5828] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 766.282779][ T5710] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 766.286197][ T29] audit: type=1400 audit(1784012848.770:1518): avc: denied { write } for pid=14658 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 766.327309][ T5828] usb 7-1: config 0 interface 0 has no altsetting 0 [ 766.349191][ T5828] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 766.360994][ T5828] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.381052][ T5828] usb 7-1: Product: syz [ 766.387098][ T5828] usb 7-1: Manufacturer: syz [ 766.398545][ T5828] usb 7-1: SerialNumber: syz [ 766.409169][ T5828] usb 7-1: config 0 descriptor?? [ 766.458431][ T5730] usb 4-1: USB disconnect, device number 59 [ 766.530753][ T5730] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 767.736295][ T5828] gs_usb 7-1:0.0: Couldn't send data format (err=-110) [ 767.779292][ T5828] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -110 [ 767.793501][ T5840] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 767.820183][ T5828] usb 1-1: USB disconnect, device number 78 [ 768.322059][ T5840] usb 6-1: unable to get BOS descriptor or descriptor too short [ 768.354624][ T5840] usb 6-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=5a.9d [ 768.382091][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.429439][ T5840] usb 6-1: Product: syz [ 768.451719][ T5840] usb 6-1: Manufacturer: syz [ 768.473572][ T5840] usb 6-1: SerialNumber: syz [ 768.511191][ T5840] usb 6-1: config 0 descriptor?? [ 768.669564][T14683] xt_bpf: check failed: parse error [ 768.757365][ T29] audit: type=1400 audit(1784012851.240:1519): avc: denied { map } for pid=14681 comm="syz.3.2244" path="socket:[46555]" dev="sockfs" ino=46555 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 768.879720][ T5840] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 768.908233][ T5840] gspca_sn9c2028: read1 error -71 [ 768.925070][ T5840] gspca_sn9c2028: read1 error -71 [ 768.947358][ T5840] gspca_sn9c2028: read1 error -71 [ 768.970008][ T5840] sn9c2028 6-1:0.0: probe with driver sn9c2028 failed with error -71 [ 768.985600][ T29] audit: type=1400 audit(1784012851.470:1520): avc: denied { write } for pid=14663 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 769.036155][ T5840] usb 6-1: USB disconnect, device number 15 [ 769.297040][ T29] audit: type=1400 audit(1784012851.780:1521): avc: denied { write } for pid=14692 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 769.411033][T14693] can0: slcan on ttyS3. [ 769.519317][ T5717] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 769.564826][ T5840] usb 7-1: USB disconnect, device number 18 [ 769.691565][ T5717] usb 4-1: unable to get BOS descriptor or descriptor too short [ 769.733089][ T5717] usb 4-1: not running at top speed; connect to a high speed hub [ 769.783992][ T5717] usb 4-1: config 5 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 769.847360][ T5717] usb 4-1: New USB device found, idVendor=15c2, idProduct=003c, bcdDevice=8a.3e [ 770.020917][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.012430][T14701] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2248'. [ 771.126567][ T5717] usb 4-1: Product: syz [ 771.152639][ T5717] usb 4-1: Manufacturer: syz [ 771.177795][ T5717] usb 4-1: SerialNumber: syz [ 771.665510][T14714] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 771.877459][T14715] binder: 14712:14715 ioctl 4018620d 0 returned -22 [ 772.054600][T14693] can0 (unregistered): slcan off ttyS3. [ 772.711183][ T5717] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 772.747955][ T5717] imon 4-1:5.0: unable to initialize intf0, err -19 [ 772.783666][ T5717] imon:imon_probe: failed to initialize context! [ 772.821775][ T5717] imon 4-1:5.0: unable to register, err -19 [ 772.864627][ T5717] usb 4-1: USB disconnect, device number 60 [ 773.018707][T14729] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 773.065105][ T29] audit: type=1400 audit(1784012855.550:1522): avc: denied { write } for pid=14696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 773.101986][ T5828] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 773.279046][ T5828] usb 1-1: Using ep0 maxpacket: 16 [ 773.297670][ T5828] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 773.394769][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 773.399278][T14734] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 773.532656][ T5828] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 773.615379][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.657280][ T5828] usb 1-1: Product: syz [ 773.689675][ T5828] usb 1-1: Manufacturer: syz [ 773.707481][ T29] audit: type=1400 audit(1784012856.190:1523): avc: denied { write } for pid=14736 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 773.735636][ T5828] usb 1-1: SerialNumber: syz [ 773.762444][ T5828] usb 1-1: config 0 descriptor?? [ 773.804046][ T5828] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 773.843943][ T5828] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 773.914510][ T29] audit: type=1400 audit(1784012856.400:1524): avc: denied { map } for pid=14735 comm="syz.1.2254" path="socket:[46689]" dev="sockfs" ino=46689 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 773.998738][ T29] audit: type=1400 audit(1784012856.420:1525): avc: denied { read } for pid=14735 comm="syz.1.2254" path="socket:[46689]" dev="sockfs" ino=46689 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 774.051334][ T5710] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 774.484043][ T5828] em28xx 1-1:0.0: chip ID is em2874 [ 774.599029][ T5710] usb 4-1: Using ep0 maxpacket: 16 [ 774.823520][ T5710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.838100][ T5710] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 774.852200][ T5710] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 774.861897][ T5710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.880537][ T5710] usb 4-1: config 0 descriptor?? [ 775.239072][T14753] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 880.368912][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 880.375912][ C1] rcu: 0-...!: (0 ticks this GP) idle=c274/0/0x1 softirq=80661/80661 fqs=0 [ 880.385476][ C1] rcu: (detected by 1, t=10502 jiffies, g=85165, q=177 ncpus=2) [ 880.393187][ C1] Sending NMI from CPU 1 to CPUs 0: [ 880.393213][ C0] NMI backtrace for cpu 0 [ 880.393227][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 880.393252][ C0] Tainted: [L]=SOFTLOCKUP [ 880.393257][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 880.393265][ C0] RIP: 0010:lock_acquire+0x2d/0x370 [ 880.393286][ C0] Code: fa 41 57 41 56 41 89 f6 41 55 45 89 c5 41 54 41 89 cc 55 48 89 fd 53 89 d3 48 83 ec 38 65 4c 8b 3d e0 0d 7e 12 4c 89 7c 24 30 <4d> 89 cf 66 90 65 8b 05 fb 0d 7e 12 83 f8 07 0f 87 da 00 00 00 48 [ 880.393299][ C0] RSP: 0000:ffffc90000007d20 EFLAGS: 00000082 [ 880.393312][ C0] RAX: 0000000000010003 RBX: 0000000000000000 RCX: 0000000000000000 [ 880.393321][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff9b9d4e70 [ 880.393330][ C0] RBP: ffffffff9b9d4e70 R08: 0000000000000001 R09: 0000000000000000 [ 880.393340][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 880.393348][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 509d17ac5f908900 [ 880.393358][ C0] FS: 0000000000000000(0000) GS:ffff888123de8000(0000) knlGS:0000000000000000 [ 880.393373][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 880.393382][ C0] CR2: 0000001b334efff8 CR3: 0000000056280000 CR4: 00000000003526f0 [ 880.393392][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 880.393401][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 880.393410][ C0] Call Trace: [ 880.393416][ C0] [ 880.393422][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 880.393442][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 880.393461][ C0] ? debug_object_deactivate+0x135/0x3b0 [ 880.393478][ C0] debug_object_deactivate+0x135/0x3b0 [ 880.393494][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 880.393512][ C0] ? timerqueue_linked_add+0x260/0x430 [ 880.393530][ C0] __hrtimer_run_queues+0x2e9/0x9c0 [ 880.393552][ C0] hrtimer_interrupt+0x3e5/0x940 [ 880.393576][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 880.393597][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 880.393616][ C0] [ 880.393621][ C0] [ 880.393627][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 880.393643][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 880.393662][ C0] Code: 76 8d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 39 12 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 880.393675][ C0] RSP: 0000:ffffffff8e807e10 EFLAGS: 00000242 [ 880.393686][ C0] RAX: 0000000003e62919 RBX: ffffffff8e891480 RCX: ffffffff8bb962d5 [ 880.393696][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a3c59 RDI: ffffffff8c400f80 [ 880.393705][ C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed101708678d [ 880.393714][ C0] R10: ffff8880b8433c6b R11: 0000000000000000 R12: 0000000000000000 [ 880.393723][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 880.393735][ C0] ? ct_kernel_exit+0x125/0x180 [ 880.393757][ C0] default_idle+0x9/0x10 [ 880.393770][ C0] default_idle_call+0x6c/0xb0 [ 880.393783][ C0] do_idle+0x3a7/0x5b0 [ 880.393801][ C0] ? __pfx_do_idle+0x10/0x10 [ 880.393821][ C0] cpu_startup_entry+0x4f/0x60 [ 880.393839][ C0] rest_init+0x251/0x260 [ 880.393853][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 880.393869][ C0] start_kernel+0x48e/0x490 [ 880.393891][ C0] x86_64_start_reservations+0x24/0x30 [ 880.393906][ C0] x86_64_start_kernel+0x12b/0x130 [ 880.393921][ C0] common_startup_64+0x13e/0x158 [ 880.393945][ C0] [ 880.394208][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g85165 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 880.752271][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 880.762226][ C1] rcu: RCU grace-period kthread stack dump: [ 880.768093][ C1] task:rcu_preempt state:R running task stack:27592 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 880.781577][ C1] Call Trace: [ 880.784841][ C1] [ 880.787763][ C1] __schedule+0x125c/0x6730 [ 880.792291][ C1] ? __pfx___schedule+0x10/0x10 [ 880.797135][ C1] ? find_held_lock+0x2b/0x80 [ 880.801807][ C1] ? schedule+0x225/0x2c0 [ 880.806133][ C1] schedule+0xdd/0x2c0 [ 880.810197][ C1] schedule_timeout+0x127/0x280 [ 880.815036][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 880.820400][ C1] ? __pfx_process_timeout+0x10/0x10 [ 880.825689][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 880.831489][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 880.836941][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 880.841694][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 880.846975][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 880.851904][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 880.857090][ C1] ? rcu_is_watching+0x12/0xc0 [ 880.861846][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 880.867647][ C1] rcu_gp_kthread+0x179/0x230 [ 880.872314][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 880.877498][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 880.883298][ C1] ? __kthread_parkme+0x18c/0x230 [ 880.888318][ C1] ? kthread+0x13a/0x450 [ 880.892556][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 880.897744][ C1] kthread+0x370/0x450 [ 880.901808][ C1] ? __pfx_kthread+0x10/0x10 [ 880.906394][ C1] ret_from_fork+0x72b/0xd50 [ 880.910980][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 880.916085][ C1] ? __switch_to+0x800/0x10f0 [ 880.920760][ C1] ? __pfx_kthread+0x10/0x10 [ 880.925349][ C1] ret_from_fork_asm+0x1a/0x30 [ 880.930119][ C1] [ 880.933123][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 880.939430][ C1] CPU: 1 UID: 0 PID: 14737 Comm: syz.1.2254 Tainted: G L syzkaller #0 PREEMPT(full) [ 880.950350][ C1] Tainted: [L]=SOFTLOCKUP [ 880.954658][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 880.964699][ C1] RIP: 0010:smp_call_function_many_cond+0x5ad/0x16c0 [ 880.971379][ C1] Code: c9 95 0c 00 f3 90 41 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 2c 0f 00 00 8b 45 08 31 ff 83 e0 01 41 89 c6 89 c6 e8 13 90 0c 00 <45> 85 f6 75 d0 e8 99 95 0c 00 e8 94 95 0c 00 83 c3 01 bf 07 00 00 [ 880.990975][ C1] RSP: 0018:ffffc90004ccfb40 EFLAGS: 00000297 [ 880.997029][ C1] RAX: 0000000000000002 RBX: 0000000000000000 RCX: ffffffff81fd46fd [ 881.004984][ C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff888027732540 [ 881.012943][ C1] RBP: ffff8880b8443680 R08: 0000000000000005 R09: 0000000000000000 [ 881.020899][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 881.028857][ C1] R13: ffffed10170886d1 R14: 0000000000000001 R15: ffff8880b853c880 [ 881.036817][ C1] FS: 00007f19ae7da6c0(0000) GS:ffff888123ee8000(0000) knlGS:0000000000000000 [ 881.045736][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 881.052308][ C1] CR2: 0000001b2f71dff8 CR3: 000000007634e000 CR4: 00000000003526f0 [ 881.060270][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 881.068225][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 881.076187][ C1] Call Trace: [ 881.079451][ C1] [ 881.082374][ C1] ? __pfx_retrigger_next_event+0x10/0x10 [ 881.088092][ C1] ? clock_was_set+0x1c3/0x850 [ 881.092850][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 881.099186][ C1] ? mark_held_locks+0x40/0x70 [ 881.103941][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 881.109743][ C1] clock_was_set+0x61c/0x850 [ 881.114337][ C1] ? __pfx_clock_was_set+0x10/0x10 [ 881.119445][ C1] ? rcu_is_watching+0x12/0xc0 [ 881.124201][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 881.130000][ C1] do_settimeofday64+0x330/0x4d0 [ 881.134936][ C1] ? __pfx_do_settimeofday64+0x10/0x10 [ 881.140385][ C1] ? security_capable+0x80/0x260 [ 881.145309][ C1] ? cma_netdev_callback+0x7/0x3b0 [ 881.150414][ C1] ? capable+0xd3/0xf0 [ 881.154476][ C1] do_sys_settimeofday64+0x1dc/0x260 [ 881.159754][ C1] __x64_sys_clock_settime+0x1c1/0x2a0 [ 881.165210][ C1] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 881.171190][ C1] do_syscall_64+0x115/0x870 [ 881.175774][ C1] ? clear_bhb_loop+0x40/0x90 [ 881.180445][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.186327][ C1] RIP: 0033:0x7f19ad99de59 [ 881.190732][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 881.210327][ C1] RSP: 002b:00007f19ae7da028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 881.218730][ C1] RAX: ffffffffffffffda RBX: 00007f19adc25fa0 RCX: 00007f19ad99de59 [ 881.226686][ C1] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 881.234646][ C1] RBP: 00007f19ada33e6f R08: 0000000000000000 R09: 0000000000000000 [ 881.242602][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 881.250561][ C1] R13: 00007f19adc26038 R14: 00007f19adc25fa0 R15: 00007ffc28042d88 [ 881.258538][ C1]