last executing test programs: 12m57.863933926s ago: executing program 2 (id=1472): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100000008bd2809090000000000010902240001000000100904ea030103000100092104000e0122280009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r6}, 0x0) landlock_restrict_self(r5, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) ioctl$FE_GET_EVENT(r2, 0x80286f4e, &(0x7f00000002c0)={0x0, {0x0, 0x0, @ofdm}}) syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="0006280000002823f70ba399030000000000000000cb4f"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000300)={@flat=@handle={0x73682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x80002, &(0x7f0000000440)=""/210, 0xd2, 0x1, 0x31}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xc8}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 12m55.779637563s ago: executing program 2 (id=1492): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) getpid() r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509000000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000840}, 0x24000840) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x4a6141) read$qrtrtun(r4, &(0x7f0000000240)=""/238, 0xee) recvmmsg(r0, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x3fffffffffffde9, 0x10002, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000340), 0x7, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r5, 0x4020565b, &(0x7f0000000140)) 12m51.472374369s ago: executing program 2 (id=1516): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r3) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000fc0)={0x2c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x14c, r4, 0x310, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_OURS={0x108, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xd2, 0x4, "b33dba0fe0cd95f3e3bd15ee91f097e6612575dc7c2a4eda29b1115061c35e38fab5b2da8ea6d86c95887eed5c36ae69d0d9f6523ce65131c684b62046469c19f320e9dedec5ad7e617ccb8e4249c7e80d275868ccc8ad2b8ae487399e4cbf726c6918fa340b8dfded4575195d8bd2109ee7016a526e3944fedb0b57352d9c4f566e14a2a33055f475acfd3778a13b832bd2fafaa86d6177cef09ec366133ea1da0fb90751be75583db66b72a48b556941500b954626432503cb7b92301d4a0d7655e134d0d3e84f277a350af1e2"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x7}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x73}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000850) close(r2) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8864000000000000) 12m50.539508202s ago: executing program 2 (id=1519): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 12m50.402242212s ago: executing program 2 (id=1522): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) r2 = eventfd(0x9f) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000140)={r1, 0x2, 0x3, r2}) r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902240003000000000904020000ff4f9b000904b000003a3846000904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000003c0)='./file1\x00') r4 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x128) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc211, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0xfc, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xea}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5}}}}}]}}]}}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e1"], 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) ptrace$ARCH_MAP_VDSO_64(0x1e, r6, 0xc3, 0x2003) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3d5c2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x2, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x201, 0xc1, 0x12, 0x95, 0x10, 0x557, 0x7820, 0x5552, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc, 0x81, 0xa0, 0x0, "", [{{0x9, 0x4, 0x66, 0x6, 0x0, 0x3d, 0x11, 0xdb, 0x6}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) 12m47.06084703s ago: executing program 2 (id=1534): mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=bind:7-N:', @ANYRESDEC]) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000000)={0x0, 0x9, 0x3}, 0x10000000000001) creat(&(0x7f0000000080)='./cgroup\x00', 0x7d) (async) creat(&(0x7f0000000080)='./cgroup\x00', 0x7d) 12m30.801340765s ago: executing program 32 (id=1534): mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=bind:7-N:', @ANYRESDEC]) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000000)={0x0, 0x9, 0x3}, 0x10000000000001) creat(&(0x7f0000000080)='./cgroup\x00', 0x7d) (async) creat(&(0x7f0000000080)='./cgroup\x00', 0x7d) 10m40.265592642s ago: executing program 1 (id=2290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0xf5ff, &(0x7f0000000080)={&(0x7f0000000480)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000810) 10m40.026043971s ago: executing program 1 (id=2293): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x403000) mlockall(0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000006c0)={0x1c, r2, 0x8a12e65bbb5a0a19, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40084) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x244a00, 0x0) r5 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r6 = io_uring_setup(0x1ddd, &(0x7f0000000400)={0x0, 0x5cb6, 0x80, 0x9, 0x8}) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r6, 0x17, &(0x7f0000000300)={0x0}, 0x1) listen(r5, 0x0) r7 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r7, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$inet6(r5, 0x0, 0x0, 0x0) sendmsg$tipc(r7, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) unshare(0x2c020400) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000080) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x880, 0x0, 0x0) r8 = open_tree(r4, 0x0, 0x1102) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) shutdown(r8, 0x0) r10 = syz_usb_connect$printer(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902247251000000000904000012070103000905010200000000000905820200"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) 10m35.392263571s ago: executing program 1 (id=2308): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x3, 0x5, 0x100, "e528527acbd12872542c590b789ae7ef96c87d770f266de199d11e463f942af2", 0x32314752}) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) unshare(0x62000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) ioctl$KVM_RUN(r0, 0xae80, 0x0) socketpair(0x11, 0x2, 0x8, &(0x7f0000000080)) 10m34.00941016s ago: executing program 1 (id=2313): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0xffffffffffffffff, 0x6, 0x4, 0x100fff}) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000180)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x6}, {0x0, 0x6}]}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0xc040ff0b, &(0x7f0000000200)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x84}}}, 0x58}, 0x1, 0x0, 0x0, 0x2806c8c8}, 0x0) 10m33.808348133s ago: executing program 1 (id=2316): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x20000014) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="018d008d8dff"}) 10m32.463950905s ago: executing program 1 (id=2321): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x2000fb) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000040)="0f01c4f2a700ef0f01c866b862abd34d0f23c80f21f86635080040000f23f80f20e06635000200000f22e0f30f44e70f01caccf20f08", 0x36}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10m32.149774876s ago: executing program 33 (id=2321): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x2000fb) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000040)="0f01c4f2a700ef0f01c866b862abd34d0f23c80f21f86635080040000f23f80f20e06635000200000f22e0f30f44e70f01caccf20f08", 0x36}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13.203308518s ago: executing program 4 (id=5404): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0xa, 0x0, 0x3}, 0x1, 0x1, 0x80000001, 0x6, 0x2, 0x1c, 0x14, 0xa, 0x5, 0x7f, {0xc609, 0x5, 0x80, 0x5, 0x6, 0xf}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r4, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x3f00) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0x11) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x763800, 0x0) sendfile(r3, r6, 0x0, 0x2000fb) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) ioctl$KVM_CAP_HYPERV_SYNIC(r5, 0x4068aea3, &(0x7f0000000200)) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81efffff00000000380012800b00010065727370616e00002800028008001400ff030000080014000200000004001200060002000008000008000100", @ANYRES32=0x0, @ANYBLOB="080001"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x24000, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) ioctl$FBIOBLANK(r8, 0x4611, 0x4) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x4}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000380)={r9, 0x3, 0x5, 0x7}, &(0x7f0000000580)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x6}, 0x8) 13.071680164s ago: executing program 4 (id=5405): r0 = socket(0x40000000015, 0x5, 0x0) mlockall(0x7) mlockall(0x7) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x400060, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x2000000c}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x14000082}, 0x240408b1) 11.909105086s ago: executing program 4 (id=5409): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0xc0189436, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r6, 0xfffdc000) 9.830244689s ago: executing program 4 (id=5416): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) setreuid(0xffffffffffffffff, 0xee01) r3 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff9000/0x2000)=nil) shmctl$SHM_LOCK(r3, 0xb) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r6, &(0x7f0000007880)=""/102400, 0x19000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000080)=0x40000086, 0x4) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) 8.484237501s ago: executing program 4 (id=5420): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="400c1c"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f0000000200)=[{0xc01, 0xc001, 0x0, 0x0}, {0x7, 0x19, 0x0, 0x0}], 0x2}) 7.147386918s ago: executing program 5 (id=5430): mkdirat(0xffffffffffffff9c, 0x0, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) lseek(0xffffffffffffffff, 0x2000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r3 = epoll_create(0xb398) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc7d44050b66d8034, &(0x7f0000000480)={0x7, &(0x7f00000003c0)=[{0x2, 0xe, 0x4, 0x2}, {0x5, 0x7, 0x2, 0x3}, {0x165, 0x31, 0x7, 0x7ff}, {0xfff4, 0xb, 0x9, 0x4}, {0x5, 0x4, 0xc1, 0x43}, {0x6, 0x82, 0x5, 0x5}, {0x4, 0x8, 0x9, 0xc2c9}]}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd) stat(&(0x7f00000001c0)='./file0\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40810}, 0x84) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) clock_gettime(0x6, &(0x7f0000000180)) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10c400, &(0x7f0000000540)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xa33}}, {@max_read={'max_read', 0x3d, 0x9}}, {@max_read={'max_read', 0x3d, 0x5}}], [{@subj_user={'subj_user', 0x3d, '\x00'}}, {@euid_lt={'euid<', r5}}, {@fsmagic={'fsmagic', 0x3d, 0x24b9}}, {@flag='nomand'}, {@uid_eq={'uid', 0x3d, r6}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}]}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f00000001c0), &(0x7f00000004c0)=@udp}, 0x20) 6.607509564s ago: executing program 0 (id=5431): mkdirat(0xffffffffffffff9c, 0x0, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000005c0)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc7d44050b66d8034, &(0x7f0000000480)={0x0, 0x0}) write$vga_arbiter(r1, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x84) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10c400, &(0x7f0000000540)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xa33}}, {@max_read={'max_read', 0x3d, 0x9}}, {@blksize}], [{@subj_user={'subj_user', 0x3d, '\x00'}}, {@euid_lt}, {@fsmagic={'fsmagic', 0x3d, 0x24b9}}, {@flag='nomand'}, {@uid_eq={'uid', 0x3d, r2}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}]}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x64, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}}]}]}]}, 0x64}}, 0x4000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f00000001c0), &(0x7f00000004c0)=@udp}, 0x20) 6.317977885s ago: executing program 0 (id=5433): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) lsetxattr$security_capability(0x0, &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0x4, 0x3}, {0x4, 0x4}]}, 0x14, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000006c0)) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r4, 0x2285, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f00000005c0)=[{0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x3, 0x5, 0x7f, 0x0, @tick=0x6, {0x1, 0x2}, {0x9, 0x81}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x38) 5.736298673s ago: executing program 6 (id=5435): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xd0, 0x0, 0x0) 5.727661341s ago: executing program 5 (id=5436): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xa, {"a2e39b214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324d078b089b3b0838681a0890e0878f0e1ac6e7049b3d6d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b343b0d076c0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c30900004288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ffd145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef7becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe505003d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6ae4effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d71eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d471c8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fdd4acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949d9a92587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15aa82000000000000a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000", 0x1000}}, 0x1006) socket$can_j1939(0x1d, 0x2, 0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) creat(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xae) r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x84, 0x80, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f00000020c0)={0x14, &(0x7f0000000040)={0x20, 0x31, 0x6d, {0x6d, 0x10, "e9324a738f7a124ca577676cecb249a4bb0358387fc296ec705ec27c4b182808e36d0e3e37caf1e1342764b81f661a52c596e96b8787e1c48a8dd8bf1043826d4a043c26e37a4e7547aa5f0a5936198803728c2c22cf3f5d6a63b9237b3f395100b08bc200484ed80ac9ac"}}, &(0x7f0000002080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002300)={0x44, &(0x7f0000002100)={0x0, 0x2f, 0x10, "4135c1640d3980feff4e5896bb9de208"}, &(0x7f0000002140)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000002180)={0x0, 0x8, 0x1, 0xb}, &(0x7f00000021c0)={0x20, 0x80, 0x1c, {0x3, 0xfcf, 0x2, 0x0, 0x3, 0x7, 0x3, 0x2, 0x6, 0x6, 0xff, 0x4}}, &(0x7f0000002200)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000002240)={0x20, 0x83, 0x2}, &(0x7f0000002280)={0x20, 0x87, 0x2, 0x5}, &(0x7f00000022c0)={0x20, 0x89, 0x2}}) 5.666901092s ago: executing program 6 (id=5437): socket$can_bcm(0x1d, 0x2, 0x2) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x9, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f0000000500)='binfmt_misc\x00', 0x1) r4 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmctl$IPC_SET(r4, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x8}, 0x6, 0x4, 0x101, 0x751268ea, 0x0, 0x0, 0x101}) shmctl$SHM_UNLOCK(r4, 0xc) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f00000000c0)=0x4) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000d40)=']:{\'\x00', &(0x7f0000000d80)='p', 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x7}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xa3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}, 0x1, 0x0, 0x0, 0x801}, 0x48080) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x21) getpriority(0x2, 0x0) 5.539572058s ago: executing program 6 (id=5438): r0 = socket(0xa, 0x3, 0x3a) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x400) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaa28684a8513f233abaabb08000000001c000000000002907800000000e00003001100907800ca531b"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1, @ANYRES16=r3], 0x0) r7 = socket(0x10, 0x2, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = dup(r8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r8, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r9, 0x84, 0x12, &(0x7f0000000100)=0x9, 0x4) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r11, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r10, 0x0, r8, 0x0, 0x34000, 0xa) write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r7, &(0x7f0000002ec0), 0x0, 0x2, &(0x7f00000001c0)) 5.321187108s ago: executing program 0 (id=5439): r0 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r0, 0x1, 0x48, &(0x7f0000000040)=0x3, 0x4) connect$inet(r0, &(0x7f0000002040)={0x2, 0x4e24, @loopback}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) file_setattr(r2, 0x0, &(0x7f0000000080)={0x88, 0xd9, 0x3, 0xb, 0x57519bea}, 0x18, 0x1000) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet6(0xa, 0x6, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x4, &(0x7f0000001c00)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0xa, 0xfe00}]}, 0x0, 0xf}, 0x94) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 4.561395144s ago: executing program 6 (id=5441): semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/161) r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f00000001c0)={0x20, 0x12}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000040)={0x20, 0x81, 0x3, "03b706"}, 0x0, &(0x7f0000000000)={0x20, 0x83, 0x3, '\x00\x00\x00'}, &(0x7f0000000400)={0x20, 0x84, 0x1, "c4"}, 0x0}) 4.530029848s ago: executing program 0 (id=5442): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000500)={0x52, 0x0, 0x560c, {0x80b, 0x5d5}, {0xfffa, 0xd89}, @period={0x5c, 0x0, 0x8, 0x0, 0x4, {0xa, 0xffff, 0xdc, 0x5}, 0x2, &(0x7f0000000140)=[0x3, 0x1]}}) syz_clone3(&(0x7f0000000380)={0x1181700, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_mrelease(r3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002080)={0xc, {"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", 0x94a}}, 0x1006) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x50, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x60, 0x1, "", [{{0x9, 0x4, 0x0, 0x25, 0x1, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0xa, 0xfc}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x8, 0x8c, 0x8, 0x40, 0x9}, 0xba, &(0x7f0000000240)={0x5, 0xf, 0xba, 0x1, [@generic={0xb5, 0x10, 0x3, "91466bafc6667025b7fb32d4ba8b2e5306b6c3215aa20f7cd48821a5dd0efeffc7066107859e6db2b1d0d22f85c223dc0e5169bd0686b76c7d4057604b40681fc16544aef68f1baa36624abd782dd905613011f0e81b31e2c2f82f672008f5175eace560c6763bf359374279b0f0db39663ff7534e75dad1c7d77367de7f4e4dfabb31ce605de0b755d64ce7ad25b1cb3fe394533498b1b455eff2fdd24b3843b30cb4e04762e61aa86d6a476cdb7aea00ba"}]}, 0x5, [{0x23, &(0x7f0000000300)=@string={0x23, 0x3, "bb52a21ff245ff06921e0ae81f011683af3f3f5b3d3836afa00214d1c9bc590f93"}}, {0x22, &(0x7f0000000340)=@string={0x22, 0x3, "7df9e95a59e35013636274dba11d7b9df08dca7e8da034733c116ee9ee07e0c6"}}, {0xd1, &(0x7f0000000380)=@string={0xd1, 0x3, "c75779b83b67343ef7bb955d4f6f572635c4537ee44c63f6b58a2bcfd65e4f72bf2e6295cb0fe7c60507985901cab8e32276160b9e2eb8ff0a41aa78792cb7972989266b75e0cc10fae45b82a8d7aa595d7a42353069013ab4cb3f240fa19258e4ab2cd84ecbd34980d984de469688145a15649b2983ccc21a7bf66637589c8f71157e477a0a7b9d39ccd917e18728f1ab263d99a16dba77ae2f5c0baa577b56a890303aab9eb3fb7ba81c2e32943a5985aa5df7902612257ae4028558c00bd5d97bd8a56bf9eb315c9017a68af69f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x445}}]}) 4.471270267s ago: executing program 4 (id=5444): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224000100"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0) syz_usb_control_io(r3, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$pid(0x1, 0x0, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) readv(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="000709000000c41d21447228b20bbfd3610e583908744ef875bee5691e8cf3bc3175972ca62d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.849069672s ago: executing program 5 (id=5445): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b0001000010000904"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f00"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) ioctl$EVIOCGMASK(r1, 0x80104592, 0x0) syz_usb_disconnect(r0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect$cdc_ecm(0x0, 0x56, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) syz_usb_ep_write(r2, 0x82, 0xfffffcc6, &(0x7f0000000400)="16688a4a3f1cd2db03000007000000000d7c36e51e67f08f961d2fc0c37d7c8c2136536697a794f470c5f44c560dedb1b190fa63c35a3c256fb8b4e2542f15f331") syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d4"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000180)='./file0\x00') setxattr$system_posix_acl(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="0200000001000000000000000400070000000000100000000000000020"], 0x24, 0x1) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000580)={0x40, 0xb, 0x4, "ef060bea"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d2200000000000001090224000100000000090400000103000000092100000001220500090581"], 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 2.609280637s ago: executing program 3 (id=5447): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0xfc1}) 2.494423882s ago: executing program 3 (id=5448): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x4a3, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040)=0xc8, 0x4c) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2.406327793s ago: executing program 3 (id=5449): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@null, 0x4, 'bond0\x00'}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000700)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f0000000580)='m'}) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x8100, r6, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r8, 0x402c542c, &(0x7f0000000000)={0x104, 0x8001, 0xfffff7f9, 0xe06, 0x8f, "ffff402000", 0xb, 0x4c}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) syz_pidfd_open(0x0, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_drvinfo={0x11, "7339099042a557a8850e56fbf75bc095f998cb3ef37b7f039b4ec027363efa54", "9aa6c4b80a4ed65890ec802b70a5ea39fc53864809df7e77b156b1b640f1777c", "a59a57c7318bfed4ac17a10b39ad26b068644d7b7c9c8e03bb61b6147c12ae59", "3b9379f5952f6e17183155f8a98a3af781746628c6e400", "c5b433a31c2aa404b51099f9d8ddbb8b4f70c2683b24b5f08be8fe769a73865b", "39bc601815fefa6141b60866", 0x1, 0x51, 0x7, 0x6, 0x9}}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000180)={0x12}) write(r11, &(0x7f0000000340), 0x11000) splice(r10, 0x0, r7, 0x0, 0x100020000003, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b40)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x6, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80000000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x24040084) 2.119827274s ago: executing program 0 (id=5450): socket$packet(0x11, 0x3, 0x300) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x24008010) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) eventfd2(0x0, 0x0) set_mempolicy(0x1, 0x0, 0x1ff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) connect$inet(r1, &(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x3, 0xb7, 0x0, 0x8000000}}, 0xe8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x6c) fcntl$setlease(r3, 0x400, 0x0) link(0x0, &(0x7f0000000100)='./file0\x00') r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRES64=0x0, @ANYBLOB=',group_id=', @ANYRES32]) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), 0x1000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000800)={{{@in, @in6=@dev}}, {{@in6=@loopback}}}, &(0x7f0000000900)=0xe8) getresgid(&(0x7f00000006c0), &(0x7f0000000700)=0x0, &(0x7f0000000740)) r6 = gettid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000780)={{0x3, 0x0, 0x0, 0x0, r5, 0x10, 0x963}, 0x0, 0x0, 0x3, 0x78000, 0x8, 0x945, 0x4, 0x7, 0x8000, 0x7, r6}) inotify_init1(0x800) r7 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r7, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x3a}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x62}}}, @dstopts={{0x18, 0x29, 0x37, {0x32}}}], 0x48}}], 0x1, 0x4001c00) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) 2.075074837s ago: executing program 5 (id=5451): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40680, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x10, 0x17, 0x0, 0x2d92197, 0xfc, 0x9, 0x4, 0xff, 0xfc, 0x5, 0x1, 0x0, 0x7, 0x3, 0x4, 0x7, 0x6, 0xfa, '\x00', 0x3, 0x1ff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r3, &(0x7f0000000b00)=[{{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}], 0x1}}], 0x1, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x80) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000080)={0x10, 0x2, 0xff}) socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1.918859176s ago: executing program 3 (id=5452): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000b40), 0xb1, 0x2) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/136, 0x88}], 0x1, 0x3, 0xac5) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002700090026bd7000fddbdf25080000000b0001006175746f"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000040)) r8 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_XRUN(r8, 0x4148, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2b, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7e, 0x0, &(0x7f0000000140)="d2ffb49ede31518d65a476a96e4a4e0b75db47ec5454c327bb5b7233ac3507e16db41d0000008000000000a8ca9d22a565ff96d46e88faa10ff4240c00"/70}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1.542152928s ago: executing program 3 (id=5453): r0 = syz_open_dev$video4linux(&(0x7f0000000340), 0x8, 0x200001) r1 = signalfd4(r0, &(0x7f0000000000)={[0x10000]}, 0x8, 0x1000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x700, 0x40, 0x7, 0x400, {{0x22, 0x4, 0x2, 0x7, 0x88, 0x68, 0x0, 0x40, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_addr={0x44, 0x4c, 0xe0, 0x1, 0x9, [{@multicast2, 0x9}, {@multicast1, 0x10}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x800}, {@broadcast, 0x1}, {@rand_addr=0x64010100, 0xa800}, {@local}, {@private=0xa010102, 0x8001}, {@empty, 0xffffffff}, {@multicast2, 0x3}]}, @timestamp={0x44, 0x28, 0x40, 0x0, 0xa, [0x3, 0x0, 0xfff, 0x7, 0x4800, 0x7, 0x2, 0x0, 0x4]}]}}}}}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20980, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000001c0)={[0x85, 0x6, 0x0, 0x0, 0x10003, 0x3d, 0x400200cc4, 0xffd, 0x4, 0x9, 0x8001, 0x4, 0x2, 0xfffffffffffffffc, 0x6a, 0x8d], 0x60000, 0x2011c0}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r7, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0xd18e, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xb0, 0x0, 0xfffffffffffffff7, [{{0x1, 0x1, 0x400, 0x86, 0x9, 0x2, {0x3, 0x3, 0x7f, 0xa, 0x8, 0x7, 0xfffff1be, 0x2, 0x4, 0xe000, 0x6679aa80, r8, r9, 0x8, 0x8}}, {0x0, 0x1, 0x8, 0x2, 'rootmode'}}]}, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in=@remote, 0x4e21, 0x0, 0x4e21, 0x7, 0xa, 0x0, 0x80, 0x16, r2, r8}, {0xffff, 0x1800000, 0x76e, 0x100, 0x2, 0xa, 0x8000000000000001, 0xc}, {0x0, 0x200, 0x4, 0x4}, 0x1, 0x6e6bb5, 0x1, 0x0, 0x2, 0x3}, {{@in6=@loopback, 0x4d4, 0x2b}, 0x2, @in=@empty, 0x3500, 0x0, 0x3, 0x3, 0x8000, 0x5266}}, 0xe8) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000140)) 1.478539424s ago: executing program 0 (id=5454): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="400c1c"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f0000000200)=[{0xc01, 0xc001, 0x0, 0x0}, {0x7, 0x19, 0x0, 0x0}], 0x2}) 1.427889913s ago: executing program 3 (id=5455): r0 = syz_usb_connect(0x2, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09050b13200007039a0705d15b"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x41, @string={0x41, 0x3, "a604e855d2759c4989f7189f1547ef6758d281ad9cbfc076d83b60829c1a2c95138879a7883a22cb8bfd910ad2caf731fa9701091bbd3f4e68ab7e7bda7676"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000440)={0x20, 0x15, 0x4, "57b752a4"}, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000010000000000000000000000791200000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$uac3(r0, &(0x7f0000000600)={0x14, &(0x7f00000002c0)={0x20, 0x2, 0xe7, {0xe7, 0x23, "a4f300cc04990df032822a2844967dd1d944958b28d48a7759c9296cef495b45f0c7b36f4f06c0819cb88f199548e0c22164f30363cbe06fd5719ad23125e68a489ac5d5cc4907e553ae0200eefa88a8f8e789ee21142aa0b475b1e7fd1725140dd066cad1b1faee3b211bf067191b2f2b320134a4cda36ba6128edfa3365c90e73dd98d47d7d8c5d293c688f089010ceadc3ee801f6edcc80cb29bdd4b4d875ff6dd3f4d8682ac917c773199e2d37d7b48210471d7e37e65a9916f4e121c1ecc15ab74ed3516ad0b090766f0945b6c6eba0c68527b4358d58e8f5dcd2cfc2a0bdad2fa9c6"}}, &(0x7f0000000540)={0x0, 0x3, 0xa0, @string={0xa0, 0x3, "a2f879c71734aa3c10b9e7db04facb8614aa3162b34d63cd1402e9876fe7453e7faaab5ccc26cec751ab105b9f03ebb46452a1a5ce297c5815ef70bc04216bb29a6afeb73c51c34251841c6e5dcd86414303f871ac2220b13a4a56e81029862c7ef87a5f989160537a3ba394ab8f25d20c58905eac7342941f717b885db7f7a25216012f6cc04f2c0e174335590f0cde6d8b9e8ca807ce1f778d4fe2ff6f"}}}, &(0x7f0000000980)={0x44, &(0x7f0000000680)={0x40, 0xb, 0xe3, "2c9f4b6af8db8b9b4ee27cdc904cf55507babdd8bcf1718359b0854754c2028be40c55ad3302e285b710017136867d795c4d33b061daa3e353c8cc413824931e0da2d41383b16958a8cc848fa8fef9d83b253a3ec0bf2f00832feea45201ac65c11346f178d339b2c3c86a77e951025e8de0ed509efbb1f4bb5acced791503694259f195e2fe402184982ca86ae27e4024e319aa74ee871d2ca35f334f230d206a53052b866fdab86662bbcd9db8c748abad8d0241da59e54510f5b0f741bac85eca8bb53f80862be9723d84611f7fd4b084de114ffa51ef0e3085b7d82048460500b6"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0xb6}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000800)={0x20, 0x81, 0x2, "02d4"}, &(0x7f0000000840)={0x20, 0x82, 0x1, "c2"}, &(0x7f0000000880)={0x20, 0x83, 0x3, "52d4e0"}, &(0x7f00000008c0)={0x20, 0x84, 0x4, "2b6b0885"}, &(0x7f0000000940)={0x20, 0x85, 0x3, "5e11f2"}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.290038175s ago: executing program 6 (id=5456): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000102c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x8400040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, 0x50) link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f0000008cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008700)={0x90, 0x0, 0x100000000, {0x1, 0x2, 0xd, 0x3, 0x9, 0x23b, {0x2, 0x0, 0x81, 0x8, 0xd, 0x0, 0x8, 0x10001, 0x9, 0x1000, 0x8, 0x0, r3, 0x634, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {0x1, 0x4}, [{0x2, 0x1, r2}, {0x2, 0x0, r2}, {0x2, 0x4, r2}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x5, r3}], {}, {0x20, 0x1}}, 0x4c, 0x1) 1.246067077s ago: executing program 6 (id=5457): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r1, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000340)={0x40, 0x24}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac3(r4, 0x0, &(0x7f0000000680)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000000c0)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x50b, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000) (rerun: 64) r5 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) (async, rerun: 32) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0505510, &(0x7f0000000140)={0x2, 0x40000000000009a, 0x0, 0x6, &(0x7f0000001600)}) (async, rerun: 32) r8 = socket(0x400000000010, 0x800, 0x2004) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) (async, rerun: 64) socket$kcm(0x29, 0x2, 0x0) (async, rerun: 64) writev(0xffffffffffffffff, 0x0, 0x0) (async) r10 = socket$kcm(0x29, 0x2, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') (async) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, 0x0) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x804) (async) preadv(r11, &(0x7f00000014c0)=[{&(0x7f0000000800)=""/203, 0xcb}], 0x1, 0x182, 0x20010000) (async, rerun: 32) socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r9, {0xfff2, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x100}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4090) (async) prctl$PR_MCE_KILL_GET(0x22) 987.953316ms ago: executing program 5 (id=5458): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) lsetxattr$security_capability(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, &(0x7f0000000140)=@v2={0x2000000, [{0x4, 0x3}, {0x4, 0x4}]}, 0x14, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000006c0)) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r4, 0x2285, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f00000005c0)=[{0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x3, 0x5, 0x7f, 0x0, @tick=0x6, {0x1, 0x2}, {0x9, 0x81}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x38) 0s ago: executing program 5 (id=5459): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0xb05, 0x17e0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x21, "", [{{0x9, 0x4, 0x0, 0x3, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfe, 0xf, 0xbe}}}}}]}}]}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)={0x20, 0x22, 0x28, {0x28, 0x1, "f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 411160][T24383] loop9: p2 start 1702059890 is beyond EOD, truncated [ 1012.461181][ T4962] bcm5974 5-1:1.0: could not read from device [ 1012.468910][T17943] bcm5974 5-1:1.0: could not read from device [ 1012.483110][ T4962] bcm5974 5-1:1.0: could not read from device [ 1012.492568][T17943] input: failed to attach handler mousedev to device input77, error: -5 [ 1012.504072][ T4962] bcm5974 5-1:1.0: could not read from device [ 1012.511247][T17943] usb 5-1: USB disconnect, device number 27 [ 1012.603347][T16390] Bluetooth: hci5: command 0x1003 tx timeout [ 1012.603535][ T4927] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1012.615745][ T9] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 1012.653906][T24402] syzkaller0: entered promiscuous mode [ 1012.660224][T24402] syzkaller0: entered allmulticast mode [ 1012.688311][ T29] audit: type=1400 audit(1782286226.324:10181): avc: denied { map } for pid=24401 comm="syz.0.5099" path="socket:[95955]" dev="sockfs" ino=95955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1012.777516][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.815700][T24404] netlink: 'syz.3.5100': attribute type 11 has an invalid length. [ 1012.831209][ T9] usb 6-1: config 0 has no interfaces? [ 1012.845968][ T9] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1012.855614][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1012.864429][ T9] usb 6-1: Product: syz [ 1012.868655][ T9] usb 6-1: Manufacturer: syz [ 1012.873436][ T9] usb 6-1: SerialNumber: syz [ 1012.923568][ T9] usb 6-1: config 0 descriptor?? [ 1013.106966][ T5698] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1013.171631][T24416] random: crng reseeded on system resumption [ 1014.184440][T20805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.218503][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1014.324744][ T5698] usb 4-1: Using ep0 maxpacket: 8 [ 1014.331575][ T29] audit: type=1400 audit(1782286227.868:10182): avc: denied { write } for pid=24420 comm="syz.6.5106" path="socket:[95991]" dev="sockfs" ino=95991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1014.369253][ T5698] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 1014.379502][ T5698] usb 4-1: config 2 has no interface number 0 [ 1014.388805][ T5698] usb 4-1: config 2 interface 31 has no altsetting 0 [ 1014.404441][ T5698] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1014.413825][ T5698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.422167][ T5698] usb 4-1: Product: syz [ 1014.426552][ T5698] usb 4-1: Manufacturer: syz [ 1014.431179][ T5698] usb 4-1: SerialNumber: syz [ 1014.455794][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1014.461213][T24424] FAULT_INJECTION: forcing a failure. [ 1014.461213][T24424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1014.474444][T24424] CPU: 0 UID: 0 PID: 24424 Comm: syz.6.5107 Tainted: G L syzkaller #0 PREEMPT(full) [ 1014.474469][T24424] Tainted: [L]=SOFTLOCKUP [ 1014.474475][T24424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1014.474485][T24424] Call Trace: [ 1014.474490][T24424] [ 1014.474497][T24424] dump_stack_lvl+0x100/0x190 [ 1014.474522][T24424] should_fail_ex.cold+0x5/0xa [ 1014.474541][T24424] _copy_to_user+0x32/0xd0 [ 1014.474568][T24424] simple_read_from_buffer+0xcb/0x170 [ 1014.474593][T24424] proc_fail_nth_read+0x1af/0x230 [ 1014.474614][T24424] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1014.474633][T24424] ? security_file_permission+0x76/0x210 [ 1014.474652][T24424] ? rw_verify_area+0xce/0x6d0 [ 1014.474674][T24424] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1014.474697][T24424] vfs_read+0x1e4/0xb40 [ 1014.474720][T24424] ? __pfx_vfs_read+0x10/0x10 [ 1014.474742][T24424] ? rcu_is_watching+0x12/0xc0 [ 1014.474769][T24424] ? __fget_files+0x21f/0x3d0 [ 1014.474787][T24424] ksys_read+0x12a/0x250 [ 1014.474809][T24424] ? __pfx_ksys_read+0x10/0x10 [ 1014.474831][T24424] ? rcu_is_watching+0x12/0xc0 [ 1014.474860][T24424] do_syscall_64+0x115/0x870 [ 1014.474882][T24424] ? clear_bhb_loop+0x40/0x90 [ 1014.474900][T24424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.474916][T24424] RIP: 0033:0x7f9a01f5d68e [ 1014.474929][T24424] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1014.474945][T24424] RSP: 002b:00007f9a02e7efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1014.474961][T24424] RAX: ffffffffffffffda RBX: 00007f9a02e7f6c0 RCX: 00007f9a01f5d68e [ 1014.474971][T24424] RDX: 000000000000000f RSI: 00007f9a02e7f0a0 RDI: 0000000000000007 [ 1014.474981][T24424] RBP: 00007f9a02e7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1014.474990][T24424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1014.475000][T24424] R13: 00007f9a02216128 R14: 00007f9a02216090 R15: 00007fff08ba8c98 [ 1014.475015][T24424] [ 1014.830677][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1014.842457][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1014.912799][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.926476][T20805] usb 6-1: USB disconnect, device number 47 [ 1014.933510][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1014.942630][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.950710][ T9] usb 1-1: Product: syz [ 1014.954904][ T9] usb 1-1: Manufacturer: syz [ 1014.959915][ T9] usb 1-1: SerialNumber: syz [ 1014.969915][ T9] usb 1-1: config 0 descriptor?? [ 1014.993856][ T9] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1015.008792][ T9] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1015.271994][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.317488][T24437] kernel read not supported for file / œ7³ÏüâW)«s“§Ç!Qöì¥fsõ‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 24437 comm: syz.6.5110) [ 1015.357260][ T29] audit: type=1800 audit(1782286228.822:10183): pid=24437 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.5110" name=20019C1437B3CFFCC3A25729AB7393A7C721518FF6ECA56673F58772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=96013 res=0 errno=0 [ 1015.507517][T24442] FAULT_INJECTION: forcing a failure. [ 1015.507517][T24442] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.521036][T24442] CPU: 0 UID: 0 PID: 24442 Comm: syz.5.5113 Tainted: G L syzkaller #0 PREEMPT(full) [ 1015.521063][T24442] Tainted: [L]=SOFTLOCKUP [ 1015.521069][T24442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1015.521079][T24442] Call Trace: [ 1015.521084][T24442] [ 1015.521091][T24442] dump_stack_lvl+0x100/0x190 [ 1015.521112][T24442] should_fail_ex.cold+0x5/0xa [ 1015.521126][T24442] should_failslab+0xc2/0x120 [ 1015.521143][T24442] __kmalloc_cache_noprof+0x91/0x6c0 [ 1015.521166][T24442] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 1015.521185][T24442] ? kvm_init_irq_routing+0x43/0xf0 [ 1015.521209][T24442] kvm_init_irq_routing+0x43/0xf0 [ 1015.521230][T24442] kvm_dev_ioctl+0x7d4/0x1a50 [ 1015.521241][T24442] ? rcu_is_watching+0x12/0xc0 [ 1015.521258][T24442] ? hook_file_ioctl_common+0x140/0x440 [ 1015.521273][T24442] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1015.521284][T24442] ? selinux_file_ioctl+0x13b/0x290 [ 1015.521303][T24442] ? selinux_file_ioctl+0xb6/0x290 [ 1015.521320][T24442] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1015.521336][T24442] __x64_sys_ioctl+0x18e/0x210 [ 1015.521358][T24442] do_syscall_64+0x115/0x870 [ 1015.521380][T24442] ? clear_bhb_loop+0x40/0x90 [ 1015.521391][T24442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.521402][T24442] RIP: 0033:0x7f01c539ce59 [ 1015.521412][T24442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1015.521423][T24442] RSP: 002b:00007f01c35d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1015.521434][T24442] RAX: ffffffffffffffda RBX: 00007f01c5616090 RCX: 00007f01c539ce59 [ 1015.521445][T24442] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000006 [ 1015.521455][T24442] RBP: 00007f01c35d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1015.521465][T24442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1015.521474][T24442] R13: 00007f01c5616128 R14: 00007f01c5616090 R15: 00007ffea04013c8 [ 1015.521490][T24442] [ 1015.744607][ T5698] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 1015.765770][ T5698] usb 4-1: USB disconnect, device number 28 [ 1015.971548][ T9] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1016.034549][ T9] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1016.281169][T24456] random: crng reseeded on system resumption [ 1017.197244][ T9] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 1017.206308][ T9] em28xx 1-1:0.0: No AC97 audio processor [ 1017.364998][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.467401][ T5698] usb 1-1: USB disconnect, device number 18 [ 1017.473864][ T5698] em28xx 1-1:0.0: Disconnecting em28xx [ 1017.487693][ T5698] em28xx 1-1:0.0: Freeing device [ 1017.534159][ T29] audit: type=1400 audit(1782286230.870:10184): avc: denied { ioctl } for pid=24462 comm="syz.3.5119" path="socket:[96315]" dev="sockfs" ino=96315 ioctlcmd=0x48cc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1017.580245][ T29] audit: type=1400 audit(1782286230.908:10185): avc: denied { mounton } for pid=24462 comm="syz.3.5119" path="/proc/1077/cgroup" dev="proc" ino=96075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1017.610409][ T29] audit: type=1400 audit(1782286230.908:10186): avc: denied { getopt } for pid=24462 comm="syz.3.5119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1017.830952][T17943] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1017.948617][ T46] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1018.002495][T17943] usb 5-1: Using ep0 maxpacket: 16 [ 1018.014285][T17943] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 1018.027027][T17943] usb 5-1: config 0 has no interface number 0 [ 1018.039319][T17943] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1018.066255][T17943] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1018.079332][T17943] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1018.098201][T17943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.106226][T17943] usb 5-1: Product: syz [ 1018.110430][T17943] usb 5-1: Manufacturer: syz [ 1018.115015][T17943] usb 5-1: SerialNumber: syz [ 1018.119602][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 1018.120906][ T46] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1018.139214][T17943] usb 5-1: config 0 descriptor?? [ 1018.145480][T24469] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1018.148077][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1018.153225][T24469] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1018.171107][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.182320][ T46] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1018.202387][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.213131][ T46] usb 4-1: Product: syz [ 1018.226549][ T46] usb 4-1: Manufacturer: syz [ 1018.231188][ T46] usb 4-1: SerialNumber: syz [ 1018.237631][ T46] usb 4-1: config 0 descriptor?? [ 1018.244848][ T46] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1018.254291][ T46] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1018.301384][ T5698] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1018.405220][T17943] asix 5-1:0.34: probe with driver asix failed with error -71 [ 1018.420556][T17943] usb 5-1: USB disconnect, device number 28 [ 1018.461903][ T5698] usb 6-1: Using ep0 maxpacket: 16 [ 1018.473947][ T5698] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1018.495407][ T5698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1018.515487][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.527199][ T5698] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1018.536398][ T5698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.545030][ T5698] usb 6-1: Product: syz [ 1018.549488][ T5698] usb 6-1: Manufacturer: syz [ 1018.554268][ T5698] usb 6-1: SerialNumber: syz [ 1018.561266][ T5698] usb 6-1: config 0 descriptor?? [ 1018.573922][T24486] Failed to initialize the IGMP autojoin socket (err -2) [ 1018.581200][ T29] audit: type=1400 audit(1782286231.824:10187): avc: denied { map } for pid=24485 comm="syz.0.5126" path="/proc/1223/task/1224/net" dev="proc" ino=96347 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1018.606206][ T5698] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1018.615713][ T5698] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1018.886961][T24493] random: crng reseeded on system resumption [ 1019.827638][ T46] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1019.835373][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.852561][ T46] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1019.859701][T24495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5129'. [ 1019.872512][T24495] FAULT_INJECTION: forcing a failure. [ 1019.872512][T24495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1019.886519][T24495] CPU: 1 UID: 0 PID: 24495 Comm: syz.0.5129 Tainted: G L syzkaller #0 PREEMPT(full) [ 1019.886537][T24495] Tainted: [L]=SOFTLOCKUP [ 1019.886541][T24495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1019.886547][T24495] Call Trace: [ 1019.886552][T24495] [ 1019.886556][T24495] dump_stack_lvl+0x100/0x190 [ 1019.886573][T24495] should_fail_ex.cold+0x5/0xa [ 1019.886588][T24495] _copy_to_user+0x32/0xd0 [ 1019.886610][T24495] simple_read_from_buffer+0xcb/0x170 [ 1019.886638][T24495] proc_fail_nth_read+0x1af/0x230 [ 1019.886660][T24495] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1019.886680][T24495] ? security_file_permission+0x76/0x210 [ 1019.886693][T24495] ? rw_verify_area+0xce/0x6d0 [ 1019.886706][T24495] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1019.886720][T24495] vfs_read+0x1e4/0xb40 [ 1019.886736][T24495] ? __pfx_vfs_read+0x10/0x10 [ 1019.886750][T24495] ? rcu_is_watching+0x12/0xc0 [ 1019.886767][T24495] ? __fget_files+0x21f/0x3d0 [ 1019.886778][T24495] ksys_read+0x12a/0x250 [ 1019.886792][T24495] ? __pfx_ksys_read+0x10/0x10 [ 1019.886808][T24495] ? rcu_is_watching+0x12/0xc0 [ 1019.886824][T24495] do_syscall_64+0x115/0x870 [ 1019.886841][T24495] ? clear_bhb_loop+0x40/0x90 [ 1019.886853][T24495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.886863][T24495] RIP: 0033:0x7f0a5635d68e [ 1019.886872][T24495] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1019.886883][T24495] RSP: 002b:00007f0a572bafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1019.886895][T24495] RAX: ffffffffffffffda RBX: 00007f0a572bb6c0 RCX: 00007f0a5635d68e [ 1019.886903][T24495] RDX: 000000000000000f RSI: 00007f0a572bb0a0 RDI: 0000000000000005 [ 1019.886909][T24495] RBP: 00007f0a572bb090 R08: 0000000000000000 R09: 0000000000000000 [ 1019.886916][T24495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1019.886922][T24495] R13: 00007f0a56616038 R14: 00007f0a56615fa0 R15: 00007ffd2dd56c18 [ 1019.886932][T24495] [ 1019.894638][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.105999][T24484] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5125'. [ 1020.299989][ T5698] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1020.307303][ T5698] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1020.326689][ T5698] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1020.338817][ T46] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1020.347978][ T46] em28xx 4-1:0.0: No AC97 audio processor [ 1020.369590][ T5698] em28xx 6-1:0.0: No AC97 audio processor [ 1020.392700][ T29] audit: type=1400 audit(1782286233.527:10188): avc: denied { ioctl } for pid=24500 comm="syz.4.5131" path="/dev/ptyqd" dev="devtmpfs" ino=132 ioctlcmd=0x5439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1020.442931][ T46] usb 4-1: USB disconnect, device number 29 [ 1020.559063][ T46] em28xx 4-1:0.0: Disconnecting em28xx [ 1020.593108][ T5698] usb 6-1: USB disconnect, device number 48 [ 1020.742189][ T46] em28xx 4-1:0.0: Freeing device [ 1020.798845][ T5698] em28xx 6-1:0.0: Disconnecting em28xx [ 1021.013750][ T5698] em28xx 6-1:0.0: Freeing device [ 1021.254458][ T29] audit: type=1400 audit(1782286233.536:10189): avc: denied { getattr } for pid=24500 comm="syz.4.5131" path="/" dev="nsfs" ino=4026532882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1021.300051][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.338117][ T5899] udevd[5899]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1021.490839][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.768996][T24518] FAULT_INJECTION: forcing a failure. [ 1021.768996][T24518] name failslab, interval 1, probability 0, space 0, times 0 [ 1021.783379][ T29] audit: type=1400 audit(1782286234.827:10190): avc: denied { map } for pid=24516 comm="syz.5.5135" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1021.820409][T24518] CPU: 1 UID: 0 PID: 24518 Comm: syz.5.5135 Tainted: G L syzkaller #0 PREEMPT(full) [ 1021.820436][T24518] Tainted: [L]=SOFTLOCKUP [ 1021.820442][T24518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1021.820451][T24518] Call Trace: [ 1021.820457][T24518] [ 1021.820464][T24518] dump_stack_lvl+0x100/0x190 [ 1021.820489][T24518] should_fail_ex.cold+0x5/0xa [ 1021.820509][T24518] should_failslab+0xc2/0x120 [ 1021.820528][T24518] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 1021.820547][T24518] ? rcu_is_watching+0x12/0xc0 [ 1021.820570][T24518] ? sidtab_sid2str_get+0x17a/0x670 [ 1021.820591][T24518] kmemdup_noprof+0x29/0x60 [ 1021.820608][T24518] sidtab_sid2str_get+0x17a/0x670 [ 1021.820628][T24518] security_sid_to_context_core+0x35a/0x6d0 [ 1021.820646][T24518] ? avc_audit_post_callback+0x115/0x910 [ 1021.820668][T24518] avc_audit_post_callback+0x1aa/0x910 [ 1021.820688][T24518] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 1021.820707][T24518] ? skb_put+0x138/0x180 [ 1021.820730][T24518] ? audit_log_n_string+0x256/0x550 [ 1021.820750][T24518] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 1021.820770][T24518] common_lsm_audit+0x23f/0x2b0 [ 1021.820790][T24518] ? __pfx_common_lsm_audit+0x10/0x10 [ 1021.820809][T24518] ? rcu_is_watching+0x12/0xc0 [ 1021.820833][T24518] ? rcu_is_watching+0x12/0xc0 [ 1021.820857][T24518] slow_avc_audit+0x186/0x210 [ 1021.820878][T24518] ? __pfx_slow_avc_audit+0x10/0x10 [ 1021.820900][T24518] ? avc_has_extended_perms+0x33a/0x1080 [ 1021.820930][T24518] ? rcu_is_watching+0x12/0xc0 [ 1021.820953][T24518] ? avc_has_extended_perms+0x33a/0x1080 [ 1021.820975][T24518] avc_has_extended_perms+0x9b7/0x1080 [ 1021.820999][T24518] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 1021.821022][T24518] ? rcu_is_watching+0x12/0xc0 [ 1021.821046][T24518] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1021.821073][T24518] ? tomoyo_path_number_perm+0x28f/0x580 [ 1021.821099][T24518] ? lock_release+0x24d/0x310 [ 1021.821120][T24518] ? tomoyo_path_number_perm+0x188/0x580 [ 1021.821150][T24518] ? preempt_count_add+0x76/0x150 [ 1021.821171][T24518] ioctl_has_perm.constprop.0.isra.0+0x376/0x540 [ 1021.821193][T24518] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1021.821215][T24518] ? rcu_is_watching+0x12/0xc0 [ 1021.821241][T24518] ? hook_file_ioctl_common+0x140/0x440 [ 1021.821267][T24518] ? selinux_file_ioctl+0x13b/0x290 [ 1021.821284][T24518] selinux_file_ioctl+0x13b/0x290 [ 1021.821303][T24518] security_file_ioctl+0xfb/0x230 [ 1021.821322][T24518] __x64_sys_ioctl+0xb7/0x210 [ 1021.821345][T24518] do_syscall_64+0x115/0x870 [ 1021.821371][T24518] ? clear_bhb_loop+0x40/0x90 [ 1021.821390][T24518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.821407][T24518] RIP: 0033:0x7f01c539ce59 [ 1021.821422][T24518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1021.821439][T24518] RSP: 002b:00007f01c35f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1021.821456][T24518] RAX: ffffffffffffffda RBX: 00007f01c5615fa0 RCX: 00007f01c539ce59 [ 1021.821468][T24518] RDX: 0000000000000000 RSI: 000000000000125f RDI: 0000000000000005 [ 1021.821478][T24518] RBP: 00007f01c35f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1021.821488][T24518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1021.821498][T24518] R13: 00007f01c5616038 R14: 00007f01c5615fa0 R15: 00007ffea04013c8 [ 1021.821516][T24518] [ 1021.825172][ T29] audit: type=1400 audit(1782286234.827:10191): avc: denied { execute } for pid=24516 comm="syz.5.5135" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1022.390662][T24535] random: crng reseeded on system resumption [ 1023.232712][T24532] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1023.340671][ T29] audit: type=1326 audit(1782286234.874:10193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24519 comm="syz.0.5137" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a5639ce59 code=0x0 [ 1023.416163][ T29] audit: type=1400 audit(1782286234.827:10192): avc: denied { ioctl } for pid=24516 comm="syz.5.5135" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tsid=34 tclass=blk_file permissive=1 [ 1023.474410][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.886810][T24548] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.894053][T24548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1024.011800][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1024.129609][T24548] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1024.194322][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1024.202754][ T9] usb 1-1: config 0 has no interface number 0 [ 1024.218678][ T9] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1024.230763][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.241477][ T6208] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.248555][ T6208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1024.391477][ T9] usb 1-1: Product: syz [ 1024.400499][ T9] usb 1-1: Manufacturer: syz [ 1024.412282][ T9] usb 1-1: SerialNumber: syz [ 1024.423792][ T9] usb 1-1: config 0 descriptor?? [ 1024.476804][ T29] audit: type=1400 audit(1782286237.353:10194): avc: denied { bind } for pid=24568 comm="syz.3.5151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1024.515146][ T29] audit: type=1400 audit(1782286237.399:10195): avc: denied { ioctl } for pid=24568 comm="syz.3.5151" path="socket:[96576]" dev="sockfs" ino=96576 ioctlcmd=0x5872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1024.604185][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.830939][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.865022][T24543] IPVS: Error during creation of socket; terminating [ 1024.885469][ T9] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1024.901991][ T9] usb 1-1: USB disconnect, device number 19 [ 1024.920782][T24576] syzkaller0: entered promiscuous mode [ 1024.935210][T24576] syzkaller0: entered allmulticast mode [ 1025.048389][T24579] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1025.238911][T24581] SELinux: policydb table sizes (2147483647,27029) do not match mine (8,7) [ 1025.256098][T24581] SELinux: failed to load policy [ 1025.333248][ T29] audit: type=1400 audit(1782286238.157:10196): avc: denied { create } for pid=24582 comm="syz.3.5156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1025.355129][ T29] audit: type=1400 audit(1782286238.176:10197): avc: denied { sys_admin } for pid=24582 comm="syz.3.5156" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1025.778844][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.800876][ T29] audit: type=1326 audit(1782286238.597:10198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24590 comm="syz.4.5157" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e019ce59 code=0x7ffc0000 [ 1025.849738][ T29] audit: type=1326 audit(1782286238.597:10199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24590 comm="syz.4.5157" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e019ce59 code=0x7ffc0000 [ 1025.908475][ T29] audit: type=1326 audit(1782286238.625:10200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24590 comm="syz.4.5157" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f92e019ce59 code=0x7ffc0000 [ 1025.974064][ T29] audit: type=1326 audit(1782286238.625:10201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24590 comm="syz.4.5157" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e019ce59 code=0x7ffc0000 [ 1026.385257][T24604] syzkaller0: entered promiscuous mode [ 1026.450633][T24604] syzkaller0: entered allmulticast mode [ 1026.470646][T24606] FAULT_INJECTION: forcing a failure. [ 1026.470646][T24606] name failslab, interval 1, probability 0, space 0, times 0 [ 1026.486927][T24606] CPU: 0 UID: 0 PID: 24606 Comm: syz.4.5162 Tainted: G L syzkaller #0 PREEMPT(full) [ 1026.486955][T24606] Tainted: [L]=SOFTLOCKUP [ 1026.486961][T24606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1026.486971][T24606] Call Trace: [ 1026.486977][T24606] [ 1026.486984][T24606] dump_stack_lvl+0x100/0x190 [ 1026.487011][T24606] should_fail_ex.cold+0x5/0xa [ 1026.487032][T24606] ? __kmalloc_noprof+0xd6/0x820 [ 1026.487051][T24606] should_failslab+0xc2/0x120 [ 1026.487071][T24606] __kmalloc_noprof+0xfc/0x820 [ 1026.487089][T24606] ? __tipc_nl_compat_doit+0xe6/0x3d0 [ 1026.487112][T24606] __tipc_nl_compat_doit+0xe6/0x3d0 [ 1026.487134][T24606] ? kmem_cache_free+0x127/0x6b0 [ 1026.487161][T24606] ? __pfx___tipc_nl_compat_doit+0x10/0x10 [ 1026.487183][T24606] ? __dev_queue_xmit+0x1b9d/0x4940 [ 1026.487210][T24606] ? netlink_deliver_tap+0xa4d/0xcc0 [ 1026.487235][T24606] ? netlink_unicast+0x62b/0x850 [ 1026.487264][T24606] ? bpf_lsm_capable+0x9/0x10 [ 1026.487280][T24606] ? security_capable+0x80/0x260 [ 1026.487306][T24606] tipc_nl_compat_doit+0x11e/0x290 [ 1026.487329][T24606] tipc_nl_compat_recv+0x908/0xc40 [ 1026.487351][T24606] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 1026.487374][T24606] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 1026.487392][T24606] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 1026.487417][T24606] ? lock_acquire+0x301/0x370 [ 1026.487440][T24606] ? trace_contention_end+0x126/0x160 [ 1026.487463][T24606] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 1026.487486][T24606] genl_family_rcv_msg_doit+0x214/0x300 [ 1026.487506][T24606] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1026.487524][T24606] ? genl_get_cmd+0x3e7/0x760 [ 1026.487544][T24606] ? __dev_queue_xmit+0xa11/0x4940 [ 1026.487570][T24606] ? __radix_tree_lookup+0x217/0x2b0 [ 1026.487597][T24606] genl_rcv_msg+0x560/0x800 [ 1026.487615][T24606] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1026.487633][T24606] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 1026.487660][T24606] netlink_rcv_skb+0x159/0x420 [ 1026.487686][T24606] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1026.487704][T24606] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1026.487734][T24606] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1026.487760][T24606] genl_rcv+0x28/0x40 [ 1026.487775][T24606] netlink_unicast+0x585/0x850 [ 1026.487802][T24606] ? __pfx_netlink_unicast+0x10/0x10 [ 1026.487832][T24606] netlink_sendmsg+0x8b0/0xda0 [ 1026.487866][T24606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1026.487898][T24606] ____sys_sendmsg+0xa4d/0xbe0 [ 1026.487923][T24606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1026.487951][T24606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1026.487977][T24606] ? kstrtouint_from_user+0x13c/0x1d0 [ 1026.488000][T24606] ___sys_sendmsg+0x190/0x1e0 [ 1026.488026][T24606] ? __pfx____sys_sendmsg+0x10/0x10 [ 1026.488052][T24606] ? get_pid_task+0x106/0x250 [ 1026.488082][T24606] ? rcu_is_watching+0x12/0xc0 [ 1026.488115][T24606] __sys_sendmsg+0x160/0x210 [ 1026.488134][T24606] ? __pfx___sys_sendmsg+0x10/0x10 [ 1026.488158][T24606] ? rcu_is_watching+0x12/0xc0 [ 1026.488185][T24606] do_syscall_64+0x115/0x870 [ 1026.488209][T24606] ? clear_bhb_loop+0x40/0x90 [ 1026.488228][T24606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.488246][T24606] RIP: 0033:0x7f92e019ce59 [ 1026.488261][T24606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1026.488278][T24606] RSP: 002b:00007f92e10fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1026.488299][T24606] RAX: ffffffffffffffda RBX: 00007f92e0416090 RCX: 00007f92e019ce59 [ 1026.488311][T24606] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 1026.488322][T24606] RBP: 00007f92e10fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1026.488333][T24606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1026.488343][T24606] R13: 00007f92e0416128 R14: 00007f92e0416090 R15: 00007ffedb4a1528 [ 1026.488360][T24606] [ 1026.715140][T20805] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 1026.959141][T19774] Bluetooth: hci5: Frame reassembly failed (-84) [ 1026.968962][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.992865][ T24] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1027.143731][T20805] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 1027.155551][T20805] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 1027.170420][ T24] usb 4-1: config 1 has an invalid interface number: 188 but max is 0 [ 1027.182831][T20805] usb 6-1: config 0 has no interface number 0 [ 1027.192081][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.202298][T20805] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1027.214007][ T24] usb 4-1: config 1 has no interface number 0 [ 1027.220254][T20805] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1027.231694][ T24] usb 4-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1027.245071][T20805] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1027.259964][ T24] usb 4-1: config 1 interface 188 has no altsetting 0 [ 1027.268142][T20805] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1027.280592][T20805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.292055][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b [ 1027.301452][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.310423][ T24] usb 4-1: Product: syz [ 1027.315681][T20805] usb 6-1: config 0 descriptor?? [ 1027.326654][ T24] usb 4-1: Manufacturer: syz [ 1027.331463][ T24] usb 4-1: SerialNumber: syz [ 1027.336498][T24608] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1027.662350][ T24] usb 4-1: unknown interface protocol 0xc1, assuming v1 [ 1027.669591][ T24] usb 4-1: 188:0 : does not exist [ 1027.703065][ T24] usb 4-1: USB disconnect, device number 30 [ 1027.748081][T24625] fuse: Bad value for 'user_id' [ 1027.755808][T24625] fuse: Bad value for 'user_id' [ 1028.054676][T24635] random: crng reseeded on system resumption [ 1028.120254][ T5849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.981762][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.982083][T20805] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.21/input/input78 [ 1029.109538][T16390] Bluetooth: hci5: command 0x1003 tx timeout [ 1029.109590][ T4927] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1029.132216][T24636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.170943][T24636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.189969][T24639] syzkaller0: entered promiscuous mode [ 1029.197199][T20805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.207766][T24639] syzkaller0: entered allmulticast mode [ 1029.222033][T24641] syzkaller0: entered promiscuous mode [ 1029.238583][T24641] syzkaller0: entered allmulticast mode [ 1029.257578][T24639] FAULT_INJECTION: forcing a failure. [ 1029.257578][T24639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1029.271226][T24641] tipc: Started in network mode [ 1029.279975][T24641] tipc: Node identity f6b286e002b4, cluster identity 4711 [ 1029.284561][T24636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.289979][T24641] tipc: Enabled bearer , priority 0 [ 1029.300586][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 1029.300628][ T29] audit: type=1400 audit(1782286241.871:10268): avc: denied { setattr } for pid=24642 comm="syz.3.5175" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1029.302969][T24639] CPU: 0 UID: 0 PID: 24639 Comm: syz.4.5173 Tainted: G L syzkaller #0 PREEMPT(full) [ 1029.302992][T24639] Tainted: [L]=SOFTLOCKUP [ 1029.302997][T24639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1029.303008][T24639] Call Trace: [ 1029.303013][T24639] [ 1029.303019][T24639] dump_stack_lvl+0x100/0x190 [ 1029.303043][T24639] should_fail_ex.cold+0x5/0xa [ 1029.303063][T24639] _copy_from_iter+0x1f4/0x1690 [ 1029.303087][T24639] ? _copy_from_iter+0x270/0x1690 [ 1029.303108][T24639] ? __pfx__copy_from_iter+0x10/0x10 [ 1029.303131][T24639] ? __pfx__copy_from_iter+0x10/0x10 [ 1029.303153][T24639] ? _copy_from_iter+0x270/0x1690 [ 1029.303176][T24639] copy_page_from_iter+0x238/0x300 [ 1029.303199][T24639] skb_copy_datagram_from_iter+0x399/0x720 [ 1029.303217][T24639] packet_sendmsg+0x227e/0x5100 [ 1029.303238][T24639] ? sock_has_perm+0x25a/0x2f0 [ 1029.303262][T24639] ? __pfx_sock_has_perm+0x10/0x10 [ 1029.303284][T24639] ? __pfx_packet_sendmsg+0x10/0x10 [ 1029.303303][T24639] __sys_sendto+0x48b/0x4e0 [ 1029.303318][T24639] ? __pfx_packet_sendmsg+0x10/0x10 [ 1029.303333][T24639] ? __pfx___sys_sendto+0x10/0x10 [ 1029.303351][T24639] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1029.303378][T24639] ? ksys_write+0x1ac/0x250 [ 1029.303399][T24639] ? __pfx_ksys_write+0x10/0x10 [ 1029.303420][T24639] __x64_sys_sendto+0xe0/0x1c0 [ 1029.303436][T24639] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1029.303457][T24639] do_syscall_64+0x115/0x870 [ 1029.303479][T24639] ? clear_bhb_loop+0x40/0x90 [ 1029.303496][T24639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.303512][T24639] RIP: 0033:0x7f92e019ce59 [ 1029.303525][T24639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1029.303540][T24639] RSP: 002b:00007f92e111f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1029.303557][T24639] RAX: ffffffffffffffda RBX: 00007f92e0415fa0 RCX: 00007f92e019ce59 [ 1029.303567][T24639] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000005 [ 1029.303577][T24639] RBP: 00007f92e111f090 R08: 0000200000000140 R09: 0000000000000014 [ 1029.303587][T24639] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 1029.303597][T24639] R13: 00007f92e0416038 R14: 00007f92e0415fa0 R15: 00007ffedb4a1528 [ 1029.303612][T24639] [ 1029.305711][T24641] tipc: Resetting bearer [ 1029.308502][ T29] audit: type=1400 audit(1782286241.871:10269): avc: denied { ioctl } for pid=24642 comm="syz.3.5175" path="/dev/input/mice" dev="devtmpfs" ino=917 ioctlcmd=0x5340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1029.378531][T24636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.601425][T24640] tipc: Resetting bearer [ 1029.608636][T24640] tipc: Disabling bearer [ 1029.664272][T20805] usb 6-1: USB disconnect, device number 49 [ 1029.664326][ C1] keyspan_remote 6-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 1029.726280][T24648] syzkaller0: entered promiscuous mode [ 1029.731923][T24648] syzkaller0: entered allmulticast mode [ 1029.819231][T24653] bond0: entered promiscuous mode [ 1029.824300][T24653] bond_slave_0: entered promiscuous mode [ 1029.844176][T24653] bond_slave_1: entered promiscuous mode [ 1029.856805][T24653] veth0_to_bond: entered promiscuous mode [ 1029.862957][ T29] audit: type=1400 audit(1782286242.394:10270): avc: denied { accept } for pid=24654 comm="syz.0.5180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1029.883819][T24653] bond0: left promiscuous mode [ 1029.889312][T24653] bond_slave_0: left promiscuous mode [ 1029.897298][T24653] bond_slave_1: left promiscuous mode [ 1029.903154][T24653] veth0_to_bond: left promiscuous mode [ 1029.954377][ T29] audit: type=1400 audit(1782286242.488:10271): avc: denied { relabelfrom } for pid=24657 comm="syz.0.5181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1030.001299][ T29] audit: type=1400 audit(1782286242.488:10272): avc: denied { relabelto } for pid=24657 comm="syz.0.5181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1030.155821][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.463128][T24672] binder: BINDER_SET_CONTEXT_MGR already set [ 1030.494097][T24672] binder: 24671:24672 ioctl 4018620d 200000004a80 returned -16 [ 1030.656659][ T29] audit: type=1400 audit(1782286243.133:10273): avc: denied { bind } for pid=24673 comm="syz.5.5185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1030.838997][ T29] audit: type=1804 audit(1782286243.302:10274): pid=24693 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.5192" name="/newroot/518/file0" dev="tmpfs" ino=2751 res=1 errno=0 [ 1030.908009][T24693] syzkaller0: entered promiscuous mode [ 1030.935879][T20805] libceph: mon0 (1)[c::]:6789 connect error [ 1030.950619][T24693] syzkaller0: entered allmulticast mode [ 1030.975856][ T29] audit: type=1400 audit(1782286243.433:10275): avc: denied { getopt } for pid=24682 comm="syz.3.5189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1031.090926][T24705] bridge0: port 3(erspan0) entered blocking state [ 1031.098727][T24705] bridge0: port 3(erspan0) entered disabled state [ 1031.105642][T24705] erspan0: entered allmulticast mode [ 1031.114264][T24705] erspan0: entered promiscuous mode [ 1031.122027][T24705] bridge0: port 3(erspan0) entered blocking state [ 1031.128532][T24705] bridge0: port 3(erspan0) entered forwarding state [ 1031.136015][T24696] ceph: No mds server is up or the cluster is laggy [ 1031.436594][T24713] binder: 24709:24713 ioctl c0306201 200000000480 returned -14 [ 1031.932606][ T5712] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1031.957172][T24718] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.5198'. [ 1032.025411][T24718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5198'. [ 1032.092986][ T5712] usb 4-1: device descriptor read/64, error -71 [ 1032.359670][T17943] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1032.381263][ T5712] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1032.584650][T17943] usb 5-1: Using ep0 maxpacket: 32 [ 1032.592871][ T5712] usb 4-1: device descriptor read/64, error -71 [ 1032.624626][T17943] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1032.669297][T17943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.715473][T17943] usb 5-1: Product: syz [ 1032.739697][T17943] usb 5-1: Manufacturer: syz [ 1032.756334][ T5712] usb usb4-port1: attempt power cycle [ 1032.768642][T17943] usb 5-1: SerialNumber: syz [ 1032.808681][ T990] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1032.835623][T17943] usb 5-1: config 0 descriptor?? [ 1032.892717][T17943] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1032.928375][T17943] dvb-usb: bulk message failed: -22 (4/0) [ 1032.943969][T17943] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1032.955822][T17943] dvb-usb: bulk message failed: -22 (5/0) [ 1032.963509][T17943] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1032.982962][T17943] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1032.993878][T17943] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1033.002827][T17943] usb 5-1: media controller created [ 1033.015354][ T990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.039941][ T990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.063925][T17943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1033.073123][ T990] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1033.103432][ T990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.125803][T17943] usb 5-1: selecting invalid altsetting 3 [ 1033.136229][ T990] usb 1-1: config 0 descriptor?? [ 1033.147240][T17943] ttusb2: set interface to alts=3 failed [ 1033.152986][ T5712] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1033.174617][ T9] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1033.215242][ T5712] usb 4-1: device descriptor read/8, error -71 [ 1033.243098][T17943] DVB: Unable to find symbol tda10086_attach() [ 1033.256041][T17943] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1033.264517][T17943] dvb-usb: bulk message failed: -22 (4/0) [ 1033.270958][T17943] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1033.281403][T17943] dvb-usb: bulk message failed: -22 (5/0) [ 1033.287129][T17943] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1033.298933][T17943] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1033.312703][T17943] usb 5-1: USB disconnect, device number 29 [ 1033.331574][T17943] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1033.365371][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1033.373447][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1033.398411][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1033.425865][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1033.435663][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.443973][ T9] usb 6-1: Product: syz [ 1033.448161][ T9] usb 6-1: Manufacturer: syz [ 1033.452939][ T9] usb 6-1: SerialNumber: syz [ 1033.458901][ T9] usb 6-1: config 0 descriptor?? [ 1033.467348][ T9] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1033.476915][ T9] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1033.492955][ T5712] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1033.514534][ T5712] usb 4-1: device descriptor read/8, error -71 [ 1033.632043][ T5712] usb usb4-port1: unable to enumerate USB device [ 1033.684924][T24727] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5201'. [ 1033.770317][ T5597] udevd[5597]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1033.782386][ T9] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1033.789199][ T9] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1033.797735][ T9] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1033.805051][ T9] em28xx 6-1:0.0: No AC97 audio processor [ 1033.814416][ T9] usb 6-1: USB disconnect, device number 50 [ 1033.820863][ T9] em28xx 6-1:0.0: Disconnecting em28xx [ 1033.827795][ T990] usbhid 1-1:0.0: can't add hid device: -32 [ 1033.835203][ T9] em28xx 6-1:0.0: Freeing device [ 1033.846440][ T990] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 1033.879841][ T990] usb 1-1: USB disconnect, device number 20 [ 1033.907860][T24735] syzkaller0: entered promiscuous mode [ 1033.915143][T24735] syzkaller0: entered allmulticast mode [ 1034.030549][ T29] audit: type=1400 audit(1782286246.295:10276): avc: denied { map } for pid=24736 comm="syz.3.5203" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1034.134735][T24739] syzkaller0: entered promiscuous mode [ 1034.140227][T24739] syzkaller0: entered allmulticast mode [ 1034.546258][T20805] libceph: mon0 (1)[c::]:6789 connect error [ 1034.701858][T24746] ceph: No mds server is up or the cluster is laggy [ 1034.711156][ T29] audit: type=1400 audit(1782286246.922:10277): avc: denied { ioctl } for pid=24761 comm="syz.6.5210" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1035.536513][T24789] netlink: 'syz.6.5219': attribute type 6 has an invalid length. [ 1035.544723][T24789] netlink: 156 bytes leftover after parsing attributes in process `syz.6.5219'. [ 1035.561901][T24789] netlink: 'syz.6.5219': attribute type 12 has an invalid length. [ 1035.561914][T24789] netlink: 'syz.6.5219': attribute type 29 has an invalid length. [ 1035.561922][T24789] netlink: 148 bytes leftover after parsing attributes in process `syz.6.5219'. [ 1035.561932][T24789] netlink: 'syz.6.5219': attribute type 1 has an invalid length. [ 1035.561939][T24789] netlink: 'syz.6.5219': attribute type 2 has an invalid length. [ 1035.641650][T20805] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1035.663115][ T5849] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1035.706246][ T990] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 1035.807833][T20805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.819013][T20805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.837161][ T5849] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1035.845855][T20805] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1035.858961][ T5849] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1035.871045][T20805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.887206][ T5849] usb 1-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice= 0.40 [ 1035.901175][ T5849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.901549][ T990] usb 6-1: not running at top speed; connect to a high speed hub [ 1035.909726][T20805] usb 4-1: config 0 descriptor?? [ 1035.926298][ T5849] usb 1-1: Product: syz [ 1035.931396][ T5849] usb 1-1: Manufacturer: syz [ 1035.950082][ T5849] usb 1-1: SerialNumber: syz [ 1036.014392][ T990] usb 6-1: config 3 has an invalid interface number: 52 but max is 0 [ 1036.024522][ T990] usb 6-1: config 3 has no interface number 0 [ 1036.040606][ T990] usb 6-1: config 3 interface 52 has no altsetting 0 [ 1036.054442][ T990] usb 6-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=ef.ca [ 1036.063865][ T990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.072863][ T990] usb 6-1: Product: syz [ 1036.077089][ T990] usb 6-1: Manufacturer: syz [ 1036.077960][ T29] audit: type=1400 audit(1782286248.203:10278): avc: denied { append } for pid=24797 comm="syz.4.5222" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1036.082886][ T990] usb 6-1: SerialNumber: syz [ 1036.269034][T24781] vivid-000: ================= START STATUS ================= [ 1036.280191][T24781] vivid-000: Radio HW Seek Mode: Bounded [ 1036.287671][T24781] vivid-000: Radio Programmable HW Seek: false [ 1036.294789][T24781] vivid-000: RDS Rx I/O Mode: Block I/O [ 1036.301276][T24781] vivid-000: Generate RBDS Instead of RDS: false [ 1036.308682][T24781] vivid-000: RDS Reception: true [ 1036.313777][T24781] vivid-000: RDS Program Type: 0 inactive [ 1036.321387][T24781] vivid-000: RDS PS Name: inactive [ 1036.327274][T24781] vivid-000: RDS Radio Text: inactive [ 1036.337366][T24781] vivid-000: RDS Traffic Announcement: false inactive [ 1036.343471][ T990] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 1036.345189][T24781] vivid-000: RDS Traffic Program: false inactive [ 1036.358417][ T990] usb 6-1: selecting invalid altsetting 0 [ 1036.358763][T24781] vivid-000: RDS Music: false inactive [ 1036.370186][T24781] vivid-000: ================== END STATUS ================== [ 1036.370415][ T2357] pvrusb2: control-write URB failure, status=-71 [ 1036.403356][ T990] usb 6-1: USB disconnect, device number 51 [ 1036.409603][ T2357] pvrusb2: Device being rendered inoperable [ 1036.416648][ T2357] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1036.427367][ T2357] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1036.472846][T24781] netlink: 'syz.0.5216': attribute type 1 has an invalid length. [ 1036.480865][T24781] netlink: 'syz.0.5216': attribute type 4 has an invalid length. [ 1036.489836][T24781] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.5216'. [ 1036.528837][ T5712] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 1036.544688][ T5849] usb 1-1: can't set first interface for hiFace device. [ 1036.552987][ T5849] snd-usb-hiface 1-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 1036.572423][ T5849] usb 1-1: can't set first interface for hiFace device. [ 1036.579538][ T5849] snd-usb-hiface 1-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 1036.597256][T20805] usbhid 4-1:0.0: can't add hid device: -32 [ 1036.604933][T20805] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1036.622655][T20805] usb 4-1: USB disconnect, device number 35 [ 1036.629034][ T5849] usb 1-1: USB disconnect, device number 21 [ 1036.714434][ T5712] usb 5-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=97.b4 [ 1036.726178][ T5712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.747503][ T5712] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 1036.971556][ T5712] gspca_sunplus: reg_w_riv err -71 [ 1036.976892][ T5712] sunplus 5-1:8.0: probe with driver sunplus failed with error -71 [ 1036.994383][ T5712] usb 5-1: USB disconnect, device number 30 [ 1037.419899][ T29] audit: type=1400 audit(1782286249.466:10279): avc: denied { mount } for pid=24822 comm="syz.5.5230" name="/" dev="configfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1037.444465][ T29] audit: type=1400 audit(1782286249.485:10280): avc: denied { search } for pid=24822 comm="syz.5.5230" name="/" dev="configfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1037.516353][ T29] audit: type=1400 audit(1782286249.485:10281): avc: denied { search } for pid=24822 comm="syz.5.5230" name="/" dev="configfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1037.609164][ T29] audit: type=1400 audit(1782286249.485:10282): avc: denied { read } for pid=24822 comm="syz.5.5230" name="/" dev="configfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1037.724788][ T29] audit: type=1400 audit(1782286249.485:10283): avc: denied { read open } for pid=24822 comm="syz.5.5230" path="/" dev="configfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1037.968014][T24841] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5232'. [ 1037.986764][T24841] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5232'. [ 1038.080886][T24842] Failed to initialize the IGMP autojoin socket (err -2) [ 1038.528907][ T990] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1038.592384][ T5712] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1038.731172][ T990] usb 5-1: Using ep0 maxpacket: 16 [ 1038.746094][ T29] audit: type=1400 audit(1782286250.710:10284): avc: denied { mount } for pid=24855 comm="syz.5.5240" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1038.748022][ T990] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1038.769728][T24856] FAULT_INJECTION: forcing a failure. [ 1038.769728][T24856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1038.804110][ T990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1038.826689][T24859] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1038.834885][T24856] CPU: 0 UID: 0 PID: 24856 Comm: syz.5.5240 Tainted: G L syzkaller #0 PREEMPT(full) [ 1038.834906][T24856] Tainted: [L]=SOFTLOCKUP [ 1038.834910][T24856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1038.834917][T24856] Call Trace: [ 1038.834921][T24856] [ 1038.834925][T24856] dump_stack_lvl+0x100/0x190 [ 1038.834942][T24856] should_fail_ex.cold+0x5/0xa [ 1038.834956][T24856] copy_folio_from_iter_atomic+0x5c8/0x2000 [ 1038.834977][T24856] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1038.834994][T24856] ? shmem_write_begin+0x1ba/0x420 [ 1038.835007][T24856] ? current_time+0x8a/0x3b0 [ 1038.835024][T24856] ? __pfx_shmem_write_begin+0x10/0x10 [ 1038.835038][T24856] ? rcu_is_watching+0x12/0xc0 [ 1038.835054][T24856] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1038.835068][T24856] generic_perform_write+0x4cb/0xa40 [ 1038.835084][T24856] ? __pfx_generic_perform_write+0x10/0x10 [ 1038.835103][T24856] ? file_update_time_flags+0x373/0x500 [ 1038.835123][T24856] shmem_file_write_iter+0x10e/0x140 [ 1038.835139][T24856] vfs_write+0x6ac/0x1050 [ 1038.835154][T24856] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1038.835167][T24856] ? __pfx_vfs_write+0x10/0x10 [ 1038.835185][T24856] ksys_write+0x12a/0x250 [ 1038.835201][T24856] ? __pfx_ksys_write+0x10/0x10 [ 1038.835216][T24856] ? rcu_is_watching+0x12/0xc0 [ 1038.835232][T24856] do_syscall_64+0x115/0x870 [ 1038.835248][T24856] ? clear_bhb_loop+0x40/0x90 [ 1038.835260][T24856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.835271][T24856] RIP: 0033:0x7f01c539ce59 [ 1038.835285][T24856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1038.835296][T24856] RSP: 002b:00007f01c35f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1038.835307][T24856] RAX: ffffffffffffffda RBX: 00007f01c5615fa0 RCX: 00007f01c539ce59 [ 1038.835314][T24856] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000003 [ 1038.835320][T24856] RBP: 00007f01c35f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1038.835327][T24856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1038.835333][T24856] R13: 00007f01c5616038 R14: 00007f01c5615fa0 R15: 00007ffea04013c8 [ 1038.835343][T24856] [ 1039.060882][ T5712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1039.071806][ T5712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1039.081624][ T5712] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1039.090981][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.100773][ T5712] usb 1-1: config 0 descriptor?? [ 1039.111768][ T990] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1039.130183][T24858] mac80211_hwsim hwsim21 wlan0: Caught tx_queue_len zero misconfig [ 1039.173603][ T990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.181909][ T990] usb 5-1: Product: syz [ 1039.186128][ T990] usb 5-1: Manufacturer: syz [ 1039.190795][ T990] usb 5-1: SerialNumber: syz [ 1039.209826][ T990] usb 5-1: config 0 descriptor?? [ 1039.219390][ T990] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1039.228745][ T990] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1039.269948][T24866] syzkaller0: entered promiscuous mode [ 1039.275446][T24866] syzkaller0: entered allmulticast mode [ 1039.294603][T24866] tipc: Started in network mode [ 1039.299636][T24866] tipc: Node identity da9b1448a57, cluster identity 4711 [ 1039.306964][T24866] tipc: Enabled bearer , priority 0 [ 1039.322243][T24866] fuse: fd is not a fuse device [ 1039.351611][T24866] tipc: Resetting bearer [ 1039.359421][T24866] tipc: Disabling bearer [ 1039.407822][ T29] audit: type=1400 audit(1782286251.327:10285): avc: denied { unmount } for pid=20355 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1039.508108][T24873] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5246'. [ 1039.572420][T24877] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5247'. [ 1039.633379][ T5600] udevd[5600]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1039.651856][T24868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.669158][ T5600] udevd[5600]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1039.674254][T24868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.698202][ T9] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 1039.752511][ T5712] usbhid 1-1:0.0: can't add hid device: -32 [ 1039.759642][ T5712] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 1039.782077][ T5712] usb 1-1: USB disconnect, device number 22 [ 1039.789018][ T29] audit: type=1400 audit(1782286251.674:10286): avc: denied { map } for pid=24882 comm="syz.5.5249" path="socket:[98631]" dev="sockfs" ino=98631 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1039.868343][ T990] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1039.942458][ T990] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1039.971218][ T990] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 1040.124975][ T990] em28xx 5-1:0.0: No AC97 audio processor [ 1040.159464][ T990] usb 5-1: USB disconnect, device number 31 [ 1040.168607][ T990] em28xx 5-1:0.0: Disconnecting em28xx [ 1040.186911][ T990] em28xx 5-1:0.0: Freeing device [ 1040.367116][ T5712] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1040.401302][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.539335][ T5712] usb 6-1: config 0 has no interfaces? [ 1040.616514][T24902] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5255'. [ 1040.644482][ T5712] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1040.910315][ T5712] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.951422][ T5712] usb 6-1: config 0 descriptor?? [ 1041.025655][T24911] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5256'. [ 1041.057989][ T5600] udevd[5600]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1041.441710][ T5600] udevd[5600]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1042.304241][T24937] netlink: 'syz.0.5263': attribute type 11 has an invalid length. [ 1042.408586][T24933] syz.4.5262 (24933): drop_caches: 2 [ 1042.797799][ T5712] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1042.888817][ T990] libceph: mon0 (1)[c::]:6789 connect error [ 1042.909733][ T5698] usb 6-1: USB disconnect, device number 52 [ 1042.975823][ T5712] usb 1-1: Using ep0 maxpacket: 8 [ 1042.984672][ T5712] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 1042.992918][ T5712] usb 1-1: config 2 has no interface number 0 [ 1042.999545][ T5712] usb 1-1: config 2 interface 31 has no altsetting 0 [ 1043.013207][ T5712] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1043.022805][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.030846][ T5712] usb 1-1: Product: syz [ 1043.035136][ T5712] usb 1-1: Manufacturer: syz [ 1043.040060][ T5712] usb 1-1: SerialNumber: syz [ 1043.057395][T24943] ceph: No mds server is up or the cluster is laggy [ 1043.488470][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1043.488485][ T29] audit: type=1400 audit(1782286255.135:10289): avc: denied { write } for pid=24965 comm="syz.6.5271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1043.549261][ T29] audit: type=1400 audit(1782286255.200:10290): avc: denied { listen } for pid=24965 comm="syz.6.5271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1043.569151][ T29] audit: type=1400 audit(1782286255.200:10291): avc: denied { accept } for pid=24965 comm="syz.6.5271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1043.713169][T24973] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1043.779694][ T5712] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 1043.882954][ T5712] usb 1-1: USB disconnect, device number 23 [ 1044.035135][T24966] netlink: 'syz.6.5271': attribute type 1 has an invalid length. [ 1044.049293][ T29] audit: type=1400 audit(1782286255.668:10292): avc: denied { ioctl } for pid=24982 comm="syz.3.5276" path="socket:[98802]" dev="sockfs" ino=98802 ioctlcmd=0x582a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1044.444227][ T29] audit: type=1326 audit(1782286256.023:10293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24976 comm="syz.5.5274" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c539ce59 code=0x7ffc0000 [ 1044.486738][ T29] audit: type=1326 audit(1782286256.023:10294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24976 comm="syz.5.5274" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c539ce59 code=0x7ffc0000 [ 1044.520717][ T29] audit: type=1326 audit(1782286256.023:10295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24976 comm="syz.5.5274" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f01c539ce59 code=0x7ffc0000 [ 1044.547799][ T29] audit: type=1326 audit(1782286256.023:10296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24976 comm="syz.5.5274" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c539ce59 code=0x7ffc0000 [ 1044.577922][ T5698] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1044.584159][ T29] audit: type=1326 audit(1782286256.023:10297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24976 comm="syz.5.5274" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c539ce59 code=0x7ffc0000 [ 1044.638801][ T29] audit: type=1326 audit(1782286256.023:10298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24976 comm="syz.5.5274" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f01c539ce59 code=0x7ffc0000 [ 1044.749947][ T5698] usb 4-1: Using ep0 maxpacket: 8 [ 1044.757277][ T5698] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1044.768580][ T5698] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1044.778318][ T5698] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1044.788245][ T5698] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1044.799513][ T5698] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1044.809620][ T5698] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1044.819003][ T5698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.827902][ T5698] usb 4-1: config 0 descriptor?? [ 1044.834025][T24985] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1044.878221][ T5849] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1044.904056][T24999] netlink: 98 bytes leftover after parsing attributes in process `syz.5.5282'. [ 1045.049257][ T5849] usb 1-1: Using ep0 maxpacket: 16 [ 1045.056196][ T5849] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.073679][ T5849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1045.084886][ T5849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1045.094912][ T5849] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1045.104895][ T5849] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1045.118682][ T5849] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1045.127876][ T5849] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1045.136075][ T5849] usb 1-1: Manufacturer: syz [ 1045.141966][ T5849] usb 1-1: config 0 descriptor?? [ 1045.263126][ T9] usb 6-1: new low-speed USB device number 53 using dummy_hcd [ 1045.296295][T24983] team0: entered promiscuous mode [ 1045.301404][T24983] team_slave_0: entered promiscuous mode [ 1045.307416][T24983] team_slave_1: entered promiscuous mode [ 1045.313393][T24983] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1045.333142][T24983] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5276'. [ 1045.344353][ T4927] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 1045.344519][ T5698] usb 4-1: USB disconnect, device number 37 [ 1045.403208][ T5849] rc_core: IR keymap rc-hauppauge not found [ 1045.409204][ T5849] Registered IR keymap rc-empty [ 1045.414525][ T5849] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1045.434227][ T5849] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1045.446520][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1045.454636][ T9] usb 6-1: config 0 has no interface number 0 [ 1045.460776][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1045.461272][ T5849] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1045.471928][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1045.494707][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1045.503820][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.513533][ T5849] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input80 [ 1045.513831][ T9] usb 6-1: config 0 descriptor?? [ 1045.531955][T25005] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1045.539374][ T5849] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1045.541464][ T9] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1045.565074][ T5849] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1045.595324][ T5849] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1045.628961][ T5849] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1045.648441][ T5849] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1045.666359][T25011] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1045.669390][ T5849] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1045.707607][ T5849] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1045.734486][ T5849] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1045.755605][ T5849] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1045.776764][ T5849] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1045.800198][ T5849] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1045.833925][ T5849] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1045.842804][ T5849] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1045.890626][ T5849] usb 1-1: USB disconnect, device number 24 [ 1046.136750][T25015] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5285'. [ 1046.192181][T25019] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5285'. [ 1046.973376][T25024] binder: BINDER_SET_CONTEXT_MGR already set [ 1046.979475][T25024] binder: 25023:25024 ioctl 4018620d 200000004a80 returned -16 [ 1047.277582][T25030] openvswitch: netlink: Tunnel attr 2560 out of range max 16 [ 1047.754511][ T990] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 1047.918719][ T990] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.943402][ T990] usb 4-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=3f.5a [ 1047.956977][T25041] FAULT_INJECTION: forcing a failure. [ 1047.956977][T25041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1047.967768][ T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.970463][T25041] CPU: 1 UID: 0 PID: 25041 Comm: syz.0.5295 Tainted: G L syzkaller #0 PREEMPT(full) [ 1047.970491][T25041] Tainted: [L]=SOFTLOCKUP [ 1047.970497][T25041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1047.970507][T25041] Call Trace: [ 1047.970513][T25041] [ 1047.970518][T25041] dump_stack_lvl+0x100/0x190 [ 1047.970542][T25041] should_fail_ex.cold+0x5/0xa [ 1047.970562][T25041] _copy_from_user+0x2e/0xd0 [ 1047.970584][T25041] move_addr_to_kernel+0x65/0x170 [ 1047.970607][T25041] __sys_sendto+0x1b8/0x4e0 [ 1047.970623][T25041] ? __pfx___sys_sendto+0x10/0x10 [ 1047.970641][T25041] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1047.970668][T25041] ? ksys_write+0x1ac/0x250 [ 1047.970689][T25041] ? __pfx_ksys_write+0x10/0x10 [ 1047.970711][T25041] __x64_sys_sendto+0xe0/0x1c0 [ 1047.970726][T25041] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1047.970747][T25041] do_syscall_64+0x115/0x870 [ 1047.970769][T25041] ? clear_bhb_loop+0x40/0x90 [ 1047.970786][T25041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.970801][T25041] RIP: 0033:0x7f0a5639ce59 [ 1047.970814][T25041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1047.970829][T25041] RSP: 002b:00007f0a572bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1047.970845][T25041] RAX: ffffffffffffffda RBX: 00007f0a56615fa0 RCX: 00007f0a5639ce59 [ 1047.970855][T25041] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1047.970864][T25041] RBP: 00007f0a572bb090 R08: 0000200000000180 R09: 0000000000000014 [ 1047.970873][T25041] R10: 0000000008000800 R11: 0000000000000246 R12: 0000000000000001 [ 1047.970883][T25041] R13: 00007f0a56616038 R14: 00007f0a56615fa0 R15: 00007ffd2dd56c18 [ 1047.970897][T25041] [ 1048.207886][ T990] usb 4-1: Product: syz [ 1048.212076][ T990] usb 4-1: Manufacturer: syz [ 1048.217158][ T990] usb 4-1: SerialNumber: syz [ 1048.224777][ T990] usb 4-1: config 0 descriptor?? [ 1048.237221][ T990] net1080 4-1:0.0: probe with driver net1080 failed with error -22 [ 1048.252169][ T5735] usb 6-1: USB disconnect, device number 53 [ 1048.481676][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1048.583141][T25048] netlink: 'syz.5.5298': attribute type 2 has an invalid length. [ 1048.685909][ T5712] usb 4-1: USB disconnect, device number 38 [ 1048.695020][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1048.711663][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1048.742355][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1048.756084][T12321] libceph: mon0 (1)[c::]:6789 connect error [ 1048.756183][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1048.773294][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.781519][ T9] usb 1-1: Product: syz [ 1048.785785][ T9] usb 1-1: Manufacturer: syz [ 1048.790412][ T9] usb 1-1: SerialNumber: syz [ 1048.800993][ T9] usb 1-1: config 0 descriptor?? [ 1048.814489][ T9] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1048.830181][ T9] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1048.913232][T25055] ceph: No mds server is up or the cluster is laggy [ 1049.860503][ T9] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1049.918289][ T9] em28xx 1-1:0.0: Config register raw data: 0x00 [ 1049.974453][T25077] binder: BINDER_SET_CONTEXT_MGR already set [ 1049.982142][T25077] binder: 25076:25077 ioctl 4018620d 200000004a80 returned -16 [ 1050.662286][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.539752][ T5735] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1051.559869][T12321] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1051.606053][ T5712] usb 1-1: USB disconnect, device number 25 [ 1051.645122][ T5712] em28xx 1-1:0.0: Disconnecting em28xx [ 1051.686501][ T5712] em28xx 1-1:0.0: Freeing device [ 1051.733576][ T5735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1051.788687][ T5735] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1051.841005][ T5735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1051.887542][ T5735] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1051.927679][ T5735] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1051.955248][ T5735] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.980316][ T5735] usb 4-1: Product: syz [ 1051.993581][ T5735] usb 4-1: Manufacturer: syz [ 1052.009703][ T5735] usb 4-1: SerialNumber: syz [ 1052.046406][ T5735] usb 4-1: config 0 descriptor?? [ 1052.072474][ T5735] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 1052.241246][T25111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5316'. [ 1052.307875][T12321] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.357437][T12321] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1052.413155][T12321] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1052.464179][T12321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.570602][T12321] usb 6-1: config 0 descriptor?? [ 1052.693241][T20805] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1052.869673][T20805] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1052.896178][T20805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.950665][T20805] usb 5-1: Product: syz [ 1052.979278][T20805] usb 5-1: Manufacturer: syz [ 1052.995067][ T5735] ums-isd200 4-1:0.0: probe with driver ums-isd200 failed with error -22 [ 1053.002903][T20805] usb 5-1: SerialNumber: syz [ 1053.051090][T12321] cp2112 0003:10C4:EA90.002D: unknown main item tag 0x0 [ 1053.090131][T20805] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1053.107308][ T24] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1053.156333][T12321] cp2112 0003:10C4:EA90.002D: unknown main item tag 0x0 [ 1053.246766][T12321] cp2112 0003:10C4:EA90.002D: unknown main item tag 0x0 [ 1053.357864][T12321] cp2112 0003:10C4:EA90.002D: unknown main item tag 0x0 [ 1053.431090][T12321] cp2112 0003:10C4:EA90.002D: unknown main item tag 0x0 [ 1053.474270][T12321] cp2112 0003:10C4:EA90.002D: unknown main item tag 0x0 [ 1053.504693][T12321] cp2112 0003:10C4:EA90.002D: unknown main item tag 0x0 [ 1053.541079][T12321] cp2112 0003:10C4:EA90.002D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1053.602377][T12321] cp2112 0003:10C4:EA90.002D: error requesting version [ 1053.603024][T12321] cp2112 0003:10C4:EA90.002D: probe with driver cp2112 failed with error -32 [ 1054.132696][T25154] binder: BINDER_SET_CONTEXT_MGR already set [ 1054.139060][T25154] binder: 25153:25154 ioctl 4018620d 200000004a80 returned -16 [ 1054.504685][ T24] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1054.512427][ T24] ath9k_htc: Failed to initialize the device [ 1054.533424][ T24] usb 5-1: ath9k_htc: USB layer deinitialized [ 1054.842206][ T5698] usb 5-1: USB disconnect, device number 32 [ 1054.872804][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 1054.872821][ T29] audit: type=1400 audit(1782286265.789:10314): avc: denied { mounton } for pid=25158 comm="syz.4.5321" path="/381/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 1054.905079][T12321] usb 4-1: USB disconnect, device number 39 [ 1054.963617][T25163] tipc: Enabled bearer , priority 0 [ 1054.977992][T25163] syzkaller0: entered promiscuous mode [ 1054.989281][T25163] syzkaller0: entered allmulticast mode [ 1055.018418][T25165] binder: 25160:25165 ioctl c0285840 0 returned -22 [ 1055.048638][T25163] tipc: Resetting bearer [ 1055.086562][T25167] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5322'. [ 1055.237438][ T5698] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1055.462514][ T990] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1055.648245][ T990] usb 1-1: Using ep0 maxpacket: 16 [ 1055.670104][ T990] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1055.705282][ T5712] usb 6-1: USB disconnect, device number 54 [ 1055.741956][ T990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1055.850862][T25162] tipc: Resetting bearer [ 1055.865632][ T990] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1055.910048][ T990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.936376][T25162] tipc: Disabling bearer [ 1055.954957][ T990] usb 1-1: Product: syz [ 1055.966608][ T990] usb 1-1: Manufacturer: syz [ 1055.971477][ T990] usb 1-1: SerialNumber: syz [ 1055.978294][ T990] usb 1-1: config 0 descriptor?? [ 1055.985323][ T990] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1055.994955][ T990] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1056.054308][T25177] ubi: mtd0 is already attached to ubi8 [ 1056.103445][ T5698] usb 5-1: Using ep0 maxpacket: 8 [ 1056.113428][ T5698] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1056.136207][ T5698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 29377, setting to 1024 [ 1056.166399][ T5698] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 1024 [ 1056.218562][ T5698] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1056.256028][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.293902][ T5698] usb 5-1: Product: syz [ 1056.315503][ T5698] usb 5-1: Manufacturer: syz [ 1056.339768][ T5698] usb 5-1: SerialNumber: syz [ 1056.385433][ T5698] usb 5-1: config 0 descriptor?? [ 1056.412467][T25159] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1056.436761][ T5698] streamzap 5-1:0.0: streamzap_probe: endpoint attributes don't match xfer 02ca [ 1056.716009][ T990] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1056.730734][ T990] em28xx 1-1:0.0: Config register raw data: 0x00 [ 1056.776889][ T5712] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1056.949812][ T5712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.962987][ T5712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1056.976610][ T5712] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 1056.991482][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.005435][ T5712] usb 4-1: config 0 descriptor?? [ 1057.016802][T25195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1057.031349][T25195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1057.680738][T25191] EXT4-fs (loop3): unable to read superblock [ 1057.690472][ T5712] usbhid 4-1:0.0: can't add hid device: -71 [ 1057.707214][ T5712] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1057.729671][ T5712] usb 4-1: USB disconnect, device number 40 [ 1058.132258][ T5712] usb 5-1: USB disconnect, device number 33 [ 1058.567823][ T24] usb 1-1: USB disconnect, device number 26 [ 1058.584443][ T24] em28xx 1-1:0.0: Disconnecting em28xx [ 1058.596880][ T24] em28xx 1-1:0.0: Freeing device [ 1058.804769][T25207] random: crng reseeded on system resumption [ 1059.795181][T25212] No source specified [ 1060.134044][ T5712] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1060.172236][T25221] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1060.260535][ T29] audit: type=1400 audit(1782286270.821:10315): avc: denied { bind } for pid=25214 comm="syz.5.5339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1060.495398][ T5712] usb 5-1: config 0 has an invalid descriptor of length 215, skipping remainder of the config [ 1060.513497][ T5712] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1060.552718][ T5712] usb 5-1: New USB device found, idVendor=0004, idProduct=0000, bcdDevice= 0.00 [ 1060.595540][ T5712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.604570][T25234] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5344'. [ 1060.618329][ T5712] usb 5-1: config 0 descriptor?? [ 1060.645262][T25232] IPv6: NLM_F_CREATE should be specified when creating new route [ 1060.713081][T25239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5343'. [ 1060.940548][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.579260][T25250] input: syz1 as /devices/virtual/input/input81 [ 1061.685716][T25252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1061.693190][T25252] batadv0: mtu less than device minimum [ 1061.700092][T25252] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1061.710703][T25252] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1061.721230][T25252] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1061.731796][T25252] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1061.742357][T25252] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1061.752889][T25252] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1061.763422][T25252] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1061.773980][T25252] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1061.791489][T25252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1061.799223][T25252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1061.816212][T25252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1061.832937][T25252] batman_adv: batadv0: Interface deactivated: dummy0 [ 1061.840069][T25252] batman_adv: batadv0: Removing interface: dummy0 [ 1061.916911][T25261] Failed to initialize the IGMP autojoin socket (err -2) [ 1061.945591][ T990] libceph: mon0 (1)[c::]:6789 connect error [ 1062.001860][T25269] binder: 25267:25269 unknown command 0 [ 1062.007569][T25269] binder: 25267:25269 ioctl c0306201 200000000080 returned -22 [ 1062.021636][T25269] binder: 25267:25269 unknown command 0 [ 1062.027313][T25269] binder: 25267:25269 ioctl c0306201 2000000003c0 returned -22 [ 1062.036358][T25269] binder: 25267:25269 ioctl 5000940a 2000000021c0 returned -22 [ 1062.046204][T25269] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1062.109228][T25263] ceph: No mds server is up or the cluster is laggy [ 1062.154341][ T5698] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1062.304034][T20805] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1062.314634][ T5698] usb 4-1: Using ep0 maxpacket: 8 [ 1062.322222][ T5698] usb 4-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=5b.65 [ 1062.331552][ T5698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.339765][ T5698] usb 4-1: Product: syz [ 1062.343958][ T5698] usb 4-1: Manufacturer: syz [ 1062.348839][ T5698] usb 4-1: SerialNumber: syz [ 1062.354499][ T5698] usb 4-1: config 0 descriptor?? [ 1062.360530][ T5698] pegasus 4-1:0.0: Missing or invalid endpoints [ 1062.400261][ T24] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1062.465633][T20805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1062.475666][T20805] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1062.485519][T20805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1062.495616][T20805] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1062.509317][T20805] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1062.518493][T20805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.526471][T20805] usb 1-1: Product: syz [ 1062.530970][T20805] usb 1-1: Manufacturer: syz [ 1062.535651][T20805] usb 1-1: SerialNumber: syz [ 1062.541275][T20805] usb 1-1: config 0 descriptor?? [ 1062.548408][T20805] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 1062.560497][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1062.566760][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1062.578019][ T29] audit: type=1400 audit(1782286272.982:10316): avc: denied { ioctl } for pid=25258 comm="syz.3.5350" path="socket:[100144]" dev="sockfs" ino=100144 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1062.578434][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1062.615602][ T990] usb 4-1: USB disconnect, device number 41 [ 1062.622778][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1062.634177][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.643029][ T24] usb 6-1: Product: syz [ 1062.647251][ T24] usb 6-1: Manufacturer: syz [ 1062.651948][ T24] usb 6-1: SerialNumber: syz [ 1062.659520][ T24] usb 6-1: config 0 descriptor?? [ 1062.666191][ T24] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1062.676312][ T24] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1062.766263][T25269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.775600][T25269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.830102][T20805] scsi host1: usb-storage 1-1:0.0 [ 1062.841208][T20805] usb 1-1: USB disconnect, device number 27 [ 1063.003529][ T5698] usb 5-1: USB disconnect, device number 34 [ 1063.318965][ T24] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1063.334396][ T24] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1064.044655][T25299] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5363'. [ 1064.104271][T25300] overlay: Unknown parameter 'fsuuid' [ 1064.153549][T25273] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5354'. [ 1064.215753][ T24] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 1064.227333][ T24] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1064.236142][ T5698] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1064.246951][ T24] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 1064.259412][ T24] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1064.269966][ T24] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1064.279440][ T24] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1064.301954][ T24] usb 6-1: USB disconnect, device number 55 [ 1064.314078][ T5600] udevd[5600]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1064.371184][T25308] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5366'. [ 1064.411790][ T5698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1064.423179][ T5698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1064.423987][T25316] Failed to initialize the IGMP autojoin socket (err -2) [ 1064.433953][ T5698] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1064.449782][ T5698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.458744][ T5698] usb 5-1: config 0 descriptor?? [ 1064.986450][T25323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5368'. [ 1064.988722][ T5698] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 1065.004537][T25323] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1065.054303][ T5698] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 1065.063427][ T5698] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 1065.070533][ T5698] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 1065.079364][ T5698] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 1065.089484][ T5698] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 1065.097786][ T5698] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 1065.116235][ T5698] cp2112 0003:10C4:EA90.002E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1065.192128][ T5698] cp2112 0003:10C4:EA90.002E: error requesting version [ 1065.209443][ T5698] cp2112 0003:10C4:EA90.002E: probe with driver cp2112 failed with error -32 [ 1065.442655][T25331] fuse: Bad value for 'fd' [ 1066.035070][ T5712] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1066.207794][T25355] netlink: 'syz.3.5374': attribute type 4 has an invalid length. [ 1066.399820][ T5712] usb 1-1: Using ep0 maxpacket: 8 [ 1066.496863][ T5712] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.522297][ T5712] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1066.543803][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1066.561975][ T5712] usb 1-1: Product: syz [ 1066.643457][ T5712] usb 1-1: Manufacturer: syz [ 1066.653534][ T5712] usb 1-1: SerialNumber: syz [ 1066.665272][ T5712] usb 1-1: config 0 descriptor?? [ 1066.677776][ T5712] imon_raw 1-1:0.0: IR endpoint missing [ 1067.029003][ T5712] usb 1-1: USB disconnect, device number 28 [ 1067.391884][ T5712] usb 5-1: USB disconnect, device number 35 [ 1067.631815][T25371] fuse: Bad value for 'fd' [ 1067.766664][T25377] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5387'. [ 1067.824787][ T29] audit: type=1400 audit(1782286277.902:10317): avc: denied { mount } for pid=25380 comm="syz.3.5388" name="/" dev="autofs" ino=100798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1068.842475][T25405] fuse: Bad value for 'fd' [ 1068.921663][ T5712] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1068.929469][ T9] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1069.199813][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1069.221137][ T5712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1069.238853][ T5712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1069.248660][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.262295][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1069.282952][ T5712] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1069.303370][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1069.315298][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.329886][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.337933][ T9] usb 6-1: Product: syz [ 1069.345875][ T9] usb 6-1: Manufacturer: syz [ 1069.352797][ T9] usb 6-1: SerialNumber: syz [ 1069.357879][ T5712] usb 4-1: config 0 descriptor?? [ 1069.507451][ T9] usb 6-1: 0:2 : does not exist [ 1069.613990][ T29] audit: type=1400 audit(1782286279.577:10318): avc: denied { lock } for pid=25413 comm="syz.4.5401" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1069.682056][T25412] FAULT_INJECTION: forcing a failure. [ 1069.682056][T25412] name failslab, interval 1, probability 0, space 0, times 0 [ 1069.696299][T25412] CPU: 0 UID: 0 PID: 25412 Comm: syz.0.5400 Tainted: G L syzkaller #0 PREEMPT(full) [ 1069.696326][T25412] Tainted: [L]=SOFTLOCKUP [ 1069.696331][T25412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1069.696341][T25412] Call Trace: [ 1069.696347][T25412] [ 1069.696352][T25412] dump_stack_lvl+0x100/0x190 [ 1069.696380][T25412] should_fail_ex.cold+0x5/0xa [ 1069.696401][T25412] ? __kmalloc_noprof+0xd6/0x820 [ 1069.696422][T25412] should_failslab+0xc2/0x120 [ 1069.696444][T25412] __kmalloc_noprof+0xfc/0x820 [ 1069.696463][T25412] ? bpf_test_init.isra.0+0x88/0x100 [ 1069.696490][T25412] bpf_test_init.isra.0+0x88/0x100 [ 1069.696513][T25412] bpf_prog_test_run_skb+0x497/0x3540 [ 1069.696540][T25412] ? rcu_is_watching+0x12/0xc0 [ 1069.696566][T25412] ? __fget_files+0x215/0x3d0 [ 1069.696582][T25412] ? lock_release+0x151/0x310 [ 1069.696603][T25412] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1069.696631][T25412] ? fput+0x79/0x100 [ 1069.696648][T25412] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1069.696672][T25412] __sys_bpf+0x2a12/0x4e80 [ 1069.696692][T25412] ? kstrtouint_from_user+0x70/0x1d0 [ 1069.696712][T25412] ? __pfx___sys_bpf+0x10/0x10 [ 1069.696726][T25412] ? rcu_is_watching+0x12/0xc0 [ 1069.696751][T25412] ? get_pid_task+0xfc/0x250 [ 1069.696775][T25412] ? rcu_is_watching+0x12/0xc0 [ 1069.696798][T25412] ? get_pid_task+0xfc/0x250 [ 1069.696821][T25412] ? lock_release+0x24d/0x310 [ 1069.696848][T25412] ? ksys_write+0x12a/0x250 [ 1069.696871][T25412] ? rcu_is_watching+0x12/0xc0 [ 1069.696897][T25412] ? preempt_count_add+0x76/0x150 [ 1069.696917][T25412] ? ksys_write+0x190/0x250 [ 1069.696939][T25412] ? rcu_is_watching+0x12/0xc0 [ 1069.696963][T25412] ? ksys_write+0x190/0x250 [ 1069.696984][T25412] ? lock_release+0x24d/0x310 [ 1069.697010][T25412] ? fput+0x79/0x100 [ 1069.697029][T25412] ? __x64_sys_bpf+0xce/0x140 [ 1069.697045][T25412] __x64_sys_bpf+0xce/0x140 [ 1069.697062][T25412] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1069.697086][T25412] do_syscall_64+0x115/0x870 [ 1069.697112][T25412] ? clear_bhb_loop+0x40/0x90 [ 1069.697131][T25412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.697149][T25412] RIP: 0033:0x7f0a5639ce59 [ 1069.697163][T25412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1069.697179][T25412] RSP: 002b:00007f0a572bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1069.697197][T25412] RAX: ffffffffffffffda RBX: 00007f0a56615fa0 RCX: 00007f0a5639ce59 [ 1069.697208][T25412] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 000000000000000a [ 1069.697219][T25412] RBP: 00007f0a572bb090 R08: 0000000000000000 R09: 0000000000000000 [ 1069.697230][T25412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1069.697240][T25412] R13: 00007f0a56616038 R14: 00007f0a56615fa0 R15: 00007ffd2dd56c18 [ 1069.697256][T25412] [ 1070.294051][ T5712] cp2112 0003:10C4:EA90.002F: unknown main item tag 0x0 [ 1070.301118][ T5712] cp2112 0003:10C4:EA90.002F: unknown main item tag 0x0 [ 1070.315440][ T5712] cp2112 0003:10C4:EA90.002F: unknown main item tag 0x0 [ 1070.333950][ T5712] cp2112 0003:10C4:EA90.002F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1070.356057][T25397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.369065][T25419] IPVS: Error during creation of socket; terminating [ 1070.385252][T25397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.469619][ T5712] cp2112 0003:10C4:EA90.002F: error requesting version [ 1070.500449][ T5712] cp2112 0003:10C4:EA90.002F: probe with driver cp2112 failed with error -32 [ 1070.518445][ T29] audit: type=1400 audit(1782286280.428:10319): avc: denied { create } for pid=25421 comm="syz.0.5403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1071.070501][ T5712] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 1071.188642][ T990] net_ratelimit: 31 callbacks suppressed [ 1071.188666][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.203133][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.211274][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.219418][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.227546][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.236758][T12321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.244918][T12321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.253050][T12321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.261685][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.290526][T25422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.304914][T25422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.314306][T25422] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5403'. [ 1071.329689][T25422] bridge1: entered promiscuous mode [ 1071.339545][ T5712] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1071.347230][ T5712] usb 1-1: can't read configurations, error -71 [ 1072.210716][ T9] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1072.249327][ T9] usb 6-1: USB disconnect, device number 56 [ 1072.325197][ T5600] udevd[5600]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1072.602274][ T9] usb 4-1: USB disconnect, device number 42 [ 1072.829837][T25457] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1072.829837][T25457] program syz.6.5411 not setting count and/or reply_len properly [ 1073.490916][T25459] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1073.498232][T25459] overlayfs: failed to set xattr on upper [ 1073.504062][T25459] overlayfs: ...falling back to redirect_dir=nofollow. [ 1073.510932][T25459] overlayfs: ...falling back to metacopy=off. [ 1073.517033][T25459] overlayfs: ...falling back to index=off. [ 1073.523168][T25459] overlayfs: ...falling back to uuid=null. [ 1073.722967][ T29] audit: type=1400 audit(1782286283.000:10320): avc: denied { mount } for pid=25448 comm="syz.4.5409" name="/" dev="ramfs" ino=100950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1074.029769][T25462] batadv_slave_0: entered promiscuous mode [ 1074.036269][T25462] batadv_slave_0: left promiscuous mode [ 1074.053876][T25462] netlink: 'syz.3.5413': attribute type 39 has an invalid length. [ 1074.064976][ T29] audit: type=1400 audit(1782286283.197:10321): avc: denied { mounton } for pid=25448 comm="syz.4.5409" path="/file0" dev="ramfs" ino=101634 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1074.087525][ T29] audit: type=1400 audit(1782286283.290:10322): avc: denied { map } for pid=25448 comm="syz.4.5409" path="/dev/vbi7" dev="devtmpfs" ino=995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1074.364134][ T29] audit: type=1400 audit(1782286283.730:10323): avc: denied { setattr } for pid=25461 comm="syz.3.5413" name="" dev="pipefs" ino=100953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1074.648397][T25474] random: crng reseeded on system resumption [ 1076.077552][T25484] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1076.174795][T25485] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1076.174795][T25485] program syz.0.5418 not setting count and/or reply_len properly [ 1076.255164][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1076.345189][T25490] tipc: Started in network mode [ 1076.350115][T25490] tipc: Node identity 82af5e97f4e9, cluster identity 4711 [ 1076.357773][T25490] tipc: Enabled bearer , priority 0 [ 1076.379671][T25489] tipc: Disabling bearer [ 1076.428118][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1076.439244][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1076.449282][ T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1076.459006][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.468557][ T9] usb 5-1: config 0 descriptor?? [ 1076.688773][T25504] Failed to initialize the IGMP autojoin socket (err -2) [ 1076.810745][T25505] siw: device registration error -23 [ 1076.846494][T25505] binder: 25501:25505 ioctl c0306201 200000000640 returned -22 [ 1076.993227][T25509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5429'. [ 1077.087375][ T9] hid_parser_main: 4 callbacks suppressed [ 1077.087415][ T9] cp2112 0003:10C4:EA90.0030: unknown main item tag 0x0 [ 1077.145762][ T29] audit: type=1400 audit(1782286286.592:10324): avc: denied { read } for pid=25507 comm="syz.3.5429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1077.173260][ T9] cp2112 0003:10C4:EA90.0030: unknown main item tag 0x0 [ 1077.212892][ T9] cp2112 0003:10C4:EA90.0030: unknown main item tag 0x0 [ 1077.249777][ T9] cp2112 0003:10C4:EA90.0030: unknown main item tag 0x0 [ 1077.306176][ T9] cp2112 0003:10C4:EA90.0030: unknown main item tag 0x0 [ 1077.347027][ T9] cp2112 0003:10C4:EA90.0030: unknown main item tag 0x0 [ 1077.481079][T25514] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1077.660889][ T9] cp2112 0003:10C4:EA90.0030: unknown main item tag 0x0 [ 1077.760693][ T9] cp2112 0003:10C4:EA90.0030: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1077.962566][ T9] cp2112 0003:10C4:EA90.0030: error requesting version [ 1078.024386][ T9] cp2112 0003:10C4:EA90.0030: probe with driver cp2112 failed with error -32 [ 1078.403526][T25531] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1078.403526][T25531] program syz.0.5433 not setting count and/or reply_len properly [ 1078.608804][ T29] audit: type=1400 audit(1782286287.995:10325): avc: denied { mount } for pid=25537 comm="syz.6.5437" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 1078.810495][ T9] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1079.006939][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1079.032975][T25544] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.055510][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1079.065485][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 1079.079043][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 1079.091948][ T9] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1079.101620][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.112176][T25544] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.126485][ T9] usb 6-1: Product: syz [ 1079.127031][ T29] audit: type=1326 audit(1782286288.482:10326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25548 comm="syz.3.5440" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652f59ce59 code=0x7ffc0000 [ 1079.132043][ T9] usb 6-1: Manufacturer: syz [ 1079.158940][ T29] audit: type=1326 audit(1782286288.482:10327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25548 comm="syz.3.5440" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652f59ce59 code=0x7ffc0000 [ 1079.162623][ T9] usb 6-1: SerialNumber: syz [ 1079.190135][ T29] audit: type=1326 audit(1782286288.482:10328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25548 comm="syz.3.5440" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652f59ce59 code=0x7ffc0000 [ 1079.200750][ T9] usb 6-1: config 0 descriptor?? [ 1079.227932][ T29] audit: type=1326 audit(1782286288.482:10329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25548 comm="syz.3.5440" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652f59ce59 code=0x7ffc0000 [ 1079.257712][T25544] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.259618][ T29] audit: type=1326 audit(1782286288.510:10330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25548 comm="syz.3.5440" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f652f59ce59 code=0x7ffc0000 [ 1079.295239][ T29] audit: type=1326 audit(1782286288.510:10331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25548 comm="syz.3.5440" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652f59ce59 code=0x7ffc0000 [ 1079.299348][T25549] qnx6: unable to set blocksize [ 1079.322416][ T29] audit: type=1326 audit(1782286288.510:10332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25548 comm="syz.3.5440" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652f59ce59 code=0x7ffc0000 [ 1079.354190][ T29] audit: type=1326 audit(1782286288.510:10333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25548 comm="syz.3.5440" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652f59ce59 code=0x7ffc0000 [ 1079.382209][ T29] audit: type=1326 audit(1782286288.510:10334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25548 comm="syz.3.5440" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652f59ce59 code=0x7ffc0000 [ 1079.428147][T25544] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.492440][ T9] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1079.527069][ T29] audit: type=1326 audit(1782286288.538:10335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25548 comm="syz.3.5440" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f652f59ce59 code=0x7ffc0000 [ 1079.560614][ T5812] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.627360][ T5812] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.636163][ T5812] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.645607][ T5812] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.735908][T12321] usb 5-1: USB disconnect, device number 36 [ 1079.776241][T20805] usb 6-1: USB disconnect, device number 57 [ 1079.988238][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1080.050444][ T24] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 1080.093160][T12321] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1080.146747][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1080.152949][ T9] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1080.161372][ T9] usb 1-1: config 179 has no interface number 0 [ 1080.167654][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1080.179438][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1080.190843][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1080.202096][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1080.211871][ T24] usb 4-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1080.213813][ T9] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1080.225831][ T24] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1080.238541][ T9] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1080.252264][ T24] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1080.258952][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.278971][ T24] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1080.280020][T25555] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1080.288421][ T24] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1080.303684][ T24] usb 4-1: Manufacturer: syz [ 1080.308556][T12321] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.318932][T12321] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1080.327938][T12321] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1080.337082][ T24] usb 4-1: SerialNumber: syz [ 1080.342271][T12321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.355963][T12321] usb 5-1: config 0 descriptor?? [ 1080.559341][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input82 [ 1080.567788][ T24] yealink 4-1:36.0: invalid payload size 0, expected 16 [ 1080.583837][ T24] input: Yealink usb-p1k as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:36.0/input/input83 [ 1080.586324][ T9] usb 5-1: USB disconnect, device number 37 [ 1080.600199][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1080.600397][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1080.614340][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1080.621309][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1080.628324][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1080.635334][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1080.642711][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1080.649832][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1080.656594][ C1] yealink 4-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1080.665967][T12321] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1080.700978][ T24] usb 4-1: USB disconnect, device number 43 [ 1080.830774][T12321] usb 6-1: Using ep0 maxpacket: 32 [ 1080.833352][T12321] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.860446][T12321] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1080.869892][T12321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.880509][T12321] usb 6-1: Product: syz [ 1080.891287][T12321] usb 6-1: Manufacturer: syz [ 1080.896495][T12321] usb 6-1: SerialNumber: syz [ 1080.902904][T12321] usb 6-1: config 0 descriptor?? [ 1080.913001][T12321] quatech2 6-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 1080.971929][T25555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1080.981759][T25555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1081.131487][T25561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1081.141573][T25561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1081.172976][ T9] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1081.485250][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.509009][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1081.523279][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1081.540824][T25561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1081.541698][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1081.553600][T25561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1081.571922][T25561] overlayfs: failed lookup in lower (newroot/300, name='file0', err=-40): overlapping layers [ 1081.579097][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.601505][T12321] usb 6-1: qt2_attach - failed to power on unit: -71 [ 1081.609874][T12321] quatech2 6-1:0.0: probe with driver quatech2 failed with error -71 [ 1081.623831][T12321] usb 6-1: USB disconnect, device number 58 [ 1081.635361][ T9] usb 5-1: config 0 descriptor?? [ 1081.802639][ T9] usb 1-1: USB disconnect, device number 31 [ 1081.808601][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1081.808628][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1081.958437][T25557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1081.984152][T25573] binder: 25571:25573 ioctl c0306201 2000000006c0 returned -14 [ 1082.000388][T25557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.060735][ T5712] usb 5-1: USB disconnect, device number 38 [ 1082.448200][T25585] fuse: Bad value for 'user_id' [ 1082.453199][T25585] fuse: Bad value for 'user_id' [ 1082.642934][T25584] siw: device registration error -23 [ 1082.650853][T25584] binder: 25583:25584 ioctl c0306201 200000000640 returned -22 [ 1082.669762][ T5712] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1082.863155][ T5712] usb 5-1: config 0 has an invalid interface number: 168 but max is 0 [ 1082.883328][ T5712] usb 5-1: config 0 has no interface number 0 [ 1082.889447][ T5712] usb 5-1: config 0 interface 168 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1082.915602][ T5712] usb 5-1: config 0 interface 168 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1082.936802][ T5712] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 1082.945993][ T5712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.960296][T25595] fuse: Bad value for 'fd' [ 1082.969951][ T5712] usb 5-1: config 0 descriptor?? [ 1083.033072][T12321] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1083.040721][ T24] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 1083.192702][ T5712] usb 5-1: string descriptor 0 read error: -71 [ 1083.202313][ T5712] keyspan 5-1:0.168: Keyspan 2 port adapter converter detected [ 1083.205257][T12321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1083.210081][ T5712] keyspan 5-1:0.168: found no endpoint descriptor for endpoint 81 [ 1083.231067][T12321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1083.241942][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1083.242095][ T5712] keyspan 5-1:0.168: found no endpoint descriptor for endpoint 84 [ 1083.250840][T12321] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1083.266835][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 1083.272232][ T5712] keyspan 5-1:0.168: found no endpoint descriptor for endpoint 2 [ 1083.280312][T12321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.290217][ T5712] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1083.310264][ T5712] keyspan 5-1:0.168: found no endpoint descriptor for endpoint 88 [ 1083.319713][ T5712] keyspan 5-1:0.168: found no endpoint descriptor for endpoint 6 [ 1083.329163][ T5712] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1083.353730][ T5712] usb 5-1: USB disconnect, device number 39 [ 1083.370612][ T5712] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1083.382208][T12321] usb 1-1: config 0 descriptor?? [ 1083.387673][ T24] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 1083.395926][ T24] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 1083.397812][ T5712] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1083.404767][ T24] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.417768][ T5712] keyspan 5-1:0.168: device disconnected [ 1083.424969][ T24] usb 4-1: config 14 has no interface number 0 [ 1083.437527][ T24] usb 4-1: config 14 has no interface number 1 [ 1083.445171][ T24] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1083.457295][ T24] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1083.470620][ T24] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1083.482651][ T24] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1083.493904][ T24] usb 4-1: config 14 interface 57 has no altsetting 0 [ 1083.514525][T25602] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1083.514525][T25602] program syz.5.5458 not setting count and/or reply_len properly [ 1083.561278][ T24] usb 4-1: config 14 interface 228 has no altsetting 0 [ 1083.644708][ T24] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1083.655113][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.663301][ T24] usb 4-1: Product: syz [ 1083.667805][ T24] usb 4-1: Manufacturer: syz [ 1083.672432][ T24] usb 4-1: SerialNumber: syz [ 1083.878855][T12321] cp2112 0003:10C4:EA90.0031: unknown main item tag 0x0 [ 1083.885963][T12321] cp2112 0003:10C4:EA90.0031: unknown main item tag 0x0 [ 1083.893179][T12321] cp2112 0003:10C4:EA90.0031: unknown main item tag 0x0 [ 1083.900390][T12321] cp2112 0003:10C4:EA90.0031: unknown main item tag 0x0 [ 1083.907693][T12321] cp2112 0003:10C4:EA90.0031: unknown main item tag 0x0 [ 1083.914945][T12321] cp2112 0003:10C4:EA90.0031: unknown main item tag 0x0 [ 1083.922026][T12321] cp2112 0003:10C4:EA90.0031: unknown main item tag 0x0 [ 1083.929913][T12321] cp2112 0003:10C4:EA90.0031: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1084.006282][ T5712] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 1084.093263][T12321] cp2112 0003:10C4:EA90.0031: error requesting version [ 1084.100862][T12321] cp2112 0003:10C4:EA90.0031: probe with driver cp2112 failed with error -32 [ 1084.122282][ T24] legousbtower 4-1:14.57: interrupt endpoints not found [ 1084.167319][ T5712] usb 5-1: config 4 has an invalid interface number: 44 but max is 0 [ 1084.175916][ T5712] usb 5-1: config 4 has no interface number 0 [ 1084.182800][ T5712] usb 5-1: config 4 interface 44 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1084.193418][ T5712] usb 5-1: config 4 interface 44 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1084.204979][ T5712] usb 5-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 1084.217130][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.225769][ T5712] usb 5-1: Product: syz [ 1084.234904][ T5712] usb 5-1: Manufacturer: syz [ 1084.246002][ T5712] usb 5-1: SerialNumber: syz [ 1084.497747][T12321] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1084.558584][ T24] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1084.569889][ T24] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1084.657983][T12321] usb 6-1: Using ep0 maxpacket: 8 [ 1084.664211][T12321] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 1084.675517][T12321] usb 6-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1084.688450][T12321] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1084.695347][T12321] usb 6-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 1084.696113][ T5712] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 1084.706024][T12321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.712997][ T5712] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1084.722655][T12321] usb 6-1: config 0 descriptor?? [ 1084.728634][ T5712] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 1084.740478][ T5712] usb 5-1: media controller created [ 1084.746625][ T5712] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1084.769779][ T5712] DVB: Unable to find symbol dib7000p_attach() [ 1084.783614][ T5712] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 1084.829005][ T5712] rc_core: IR keymap rc-dib0700-rc5 not found [ 1084.835112][ T5712] Registered IR keymap rc-empty [ 1084.840358][ T5712] dvb-usb: could not initialize remote control. [ 1084.846601][ T5712] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 1084.976527][ T5712] dib0700: There's no endpoint for remote controller [ 1084.976527][T25609] ------------[ cut here ]------------ [ 1084.988775][T25609] usb 5-1: BOGUS control dir, pipe 80002880 doesn't match bRequestType c0 [ 1084.997322][T25609] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x15ff/0x19b0, CPU#1: syz.0.5454/25609 [ 1085.007700][T25609] Modules linked in: [ 1085.011678][T25609] CPU: 1 UID: 0 PID: 25609 Comm: syz.0.5454 Tainted: G L syzkaller #0 PREEMPT(full) [ 1085.022657][T25609] Tainted: [L]=SOFTLOCKUP [ 1085.026977][T25609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1085.037101][T25609] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 1085.043174][T25609] Code: 48 89 54 24 40 e8 43 f5 a6 fa 4c 89 e7 e8 0b 1b dc fe 48 89 c6 48 8d 3d c1 ea 85 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 14 f5 a6 fa 89 ee bf ff 00 00 00 [ 1085.063028][T25609] RSP: 0018:ffffc9000369f968 EFLAGS: 00010283 [ 1085.069133][T25609] RAX: ffffffff8c8421e0 RBX: ffff88801fafd300 RCX: 0000000080002880 [ 1085.077158][T25609] RDX: ffff88807818b620 RSI: ffffffff8c8421e0 RDI: ffffffff90e874b0 [ 1085.085138][T25609] RBP: ffff8880226a1058 R08: 00000000000000c0 R09: 0000000000000000 [ 1085.093185][T25609] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880226a10b0 [ 1085.101341][T25609] R13: ffff88802d8cb680 R14: ffff88802d8cb686 R15: ffff88802d8cb687 [ 1085.109463][T25609] FS: 00007f0a572796c0(0000) GS:ffff8881243ef000(0000) knlGS:0000000000000000 [ 1085.118441][T25609] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1085.125045][T25609] CR2: 0000001b2d023ffc CR3: 000000004623c000 CR4: 00000000003526f0 [ 1085.133064][T25609] Call Trace: [ 1085.136342][T25609] [ 1085.139283][T25609] ? __init_swait_queue_head+0xca/0x150 [ 1085.144851][T25609] usb_start_wait_urb+0x10e/0x580 [ 1085.149918][T25609] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1085.155468][T25609] ? trace_kmalloc+0xeb/0x110 [ 1085.160148][T25609] ? __asan_memset+0x23/0x50 [ 1085.164818][T25609] usb_control_msg+0x328/0x4b0 [ 1085.169578][T25609] ? __pfx_usb_control_msg+0x10/0x10 [ 1085.174886][T25609] dib0700_ctrl_rd+0x1b5/0x320 [ 1085.179653][T25609] dib0700_i2c_xfer+0x460/0xd90 [ 1085.184522][T25609] __i2c_transfer+0x5d9/0x1740 [ 1085.189274][T25609] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1085.195472][T25609] ? __pfx___i2c_transfer+0x10/0x10 [ 1085.200711][T25609] ? rt_mutex_slowtrylock+0x93/0x100 [ 1085.206055][T25609] i2c_transfer+0x15f/0x380 [ 1085.210553][T25609] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 1085.215509][T25609] i2cdev_ioctl+0x19d/0x830 [ 1085.220032][T25609] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1085.225125][T25609] ? selinux_file_ioctl+0x13b/0x290 [ 1085.230372][T25609] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1085.235443][T25609] __x64_sys_ioctl+0x18e/0x210 [ 1085.240210][T25609] do_syscall_64+0x115/0x870 [ 1085.244808][T25609] ? clear_bhb_loop+0x40/0x90 [ 1085.249538][T25609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.255441][T25609] RIP: 0033:0x7f0a5639ce59 [ 1085.259932][T25609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1085.279665][T25609] RSP: 002b:00007f0a57279028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1085.288103][T25609] RAX: ffffffffffffffda RBX: 00007f0a56616180 RCX: 00007f0a5639ce59 [ 1085.296155][T25609] RDX: 0000200000000080 RSI: 0000000000000707 RDI: 0000000000000005 [ 1085.304164][T25609] RBP: 00007f0a56432e6f R08: 0000000000000000 R09: 0000000000000000 [ 1085.312198][T25609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1085.320183][T25609] R13: 00007f0a56616218 R14: 00007f0a56616180 R15: 00007ffd2dd56c18 [ 1085.328300][T25609] [ 1085.331338][T25609] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1085.338602][T25609] CPU: 1 UID: 0 PID: 25609 Comm: syz.0.5454 Tainted: G L syzkaller #0 PREEMPT(full) [ 1085.349527][T25609] Tainted: [L]=SOFTLOCKUP [ 1085.353824][T25609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1085.363853][T25609] Call Trace: [ 1085.367119][T25609] [ 1085.370033][T25609] dump_stack_lvl+0x100/0x190 [ 1085.374686][T25609] vpanic+0x552/0x970 [ 1085.378644][T25609] ? __pfx_vpanic+0x10/0x10 [ 1085.383121][T25609] ? lock_release+0x24d/0x310 [ 1085.387774][T25609] panic+0xd1/0xe0 [ 1085.391473][T25609] ? __pfx_panic+0x10/0x10 [ 1085.395861][T25609] check_panic_on_warn.cold+0x19/0x34 [ 1085.401205][T25609] ? usb_submit_urb+0x15ff/0x19b0 [ 1085.406199][T25609] __warn.cold+0x191/0x318 [ 1085.410598][T25609] __report_bug+0x30f/0x440 [ 1085.415090][T25609] ? usb_submit_urb+0x15ff/0x19b0 [ 1085.420100][T25609] ? __pfx___report_bug+0x10/0x10 [ 1085.425113][T25609] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1085.431160][T25609] ? kasan_save_stack+0x3f/0x50 [ 1085.435993][T25609] report_bug_entry+0xe1/0x290 [ 1085.440753][T25609] ? usb_submit_urb+0x160d/0x19b0 [ 1085.445756][T25609] handle_bug+0x1cd/0x2a0 [ 1085.450067][T25609] exc_invalid_op+0x17/0x50 [ 1085.454553][T25609] asm_exc_invalid_op+0x1a/0x20 [ 1085.459391][T25609] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 1085.465010][T25609] Code: 48 89 54 24 40 e8 43 f5 a6 fa 4c 89 e7 e8 0b 1b dc fe 48 89 c6 48 8d 3d c1 ea 85 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 14 f5 a6 fa 89 ee bf ff 00 00 00 [ 1085.484606][T25609] RSP: 0018:ffffc9000369f968 EFLAGS: 00010283 [ 1085.490652][T25609] RAX: ffffffff8c8421e0 RBX: ffff88801fafd300 RCX: 0000000080002880 [ 1085.498607][T25609] RDX: ffff88807818b620 RSI: ffffffff8c8421e0 RDI: ffffffff90e874b0 [ 1085.506557][T25609] RBP: ffff8880226a1058 R08: 00000000000000c0 R09: 0000000000000000 [ 1085.514511][T25609] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880226a10b0 [ 1085.522478][T25609] R13: ffff88802d8cb680 R14: ffff88802d8cb686 R15: ffff88802d8cb687 [ 1085.530440][T25609] ? usb_submit_urb+0x15f5/0x19b0 [ 1085.535453][T25609] ? __init_swait_queue_head+0xca/0x150 [ 1085.540987][T25609] usb_start_wait_urb+0x10e/0x580 [ 1085.546174][T25609] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1085.551723][T25609] ? trace_kmalloc+0xeb/0x110 [ 1085.556389][T25609] ? __asan_memset+0x23/0x50 [ 1085.560955][T25609] usb_control_msg+0x328/0x4b0 [ 1085.565697][T25609] ? __pfx_usb_control_msg+0x10/0x10 [ 1085.570956][T25609] dib0700_ctrl_rd+0x1b5/0x320 [ 1085.575710][T25609] dib0700_i2c_xfer+0x460/0xd90 [ 1085.580543][T25609] __i2c_transfer+0x5d9/0x1740 [ 1085.585295][T25609] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1085.591341][T25609] ? __pfx___i2c_transfer+0x10/0x10 [ 1085.596526][T25609] ? rt_mutex_slowtrylock+0x93/0x100 [ 1085.601802][T25609] i2c_transfer+0x15f/0x380 [ 1085.606293][T25609] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 1085.611235][T25609] i2cdev_ioctl+0x19d/0x830 [ 1085.615749][T25609] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1085.620775][T25609] ? selinux_file_ioctl+0x13b/0x290 [ 1085.625959][T25609] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1085.630968][T25609] __x64_sys_ioctl+0x18e/0x210 [ 1085.635803][T25609] do_syscall_64+0x115/0x870 [ 1085.640411][T25609] ? clear_bhb_loop+0x40/0x90 [ 1085.645082][T25609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.650964][T25609] RIP: 0033:0x7f0a5639ce59 [ 1085.655372][T25609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1085.674958][T25609] RSP: 002b:00007f0a57279028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1085.683354][T25609] RAX: ffffffffffffffda RBX: 00007f0a56616180 RCX: 00007f0a5639ce59 [ 1085.691300][T25609] RDX: 0000200000000080 RSI: 0000000000000707 RDI: 0000000000000005 [ 1085.699242][T25609] RBP: 00007f0a56432e6f R08: 0000000000000000 R09: 0000000000000000 [ 1085.707280][T25609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1085.715228][T25609] R13: 00007f0a56616218 R14: 00007f0a56616180 R15: 00007ffd2dd56c18 [ 1085.723177][T25609] [ 1085.726384][T25609] Kernel Offset: disabled [ 1085.730691][T25609] Rebooting in 86400 seconds..