last executing test programs: 17.515026674s ago: executing program 3 (id=2031): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000540)={0x5, 0xfb, 0x40, 0xec, 0x7, 0x4, 0x5, 0x7, 0x1, 0x2, 0x9, 0xb, 0xfd, 0xcc}, 0xe) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000e001400400000004000000041"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000f3ff00000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000c20000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96}, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x20040054) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000400000000f1ff"], 0x0, 0x26}, 0x20) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000001b00)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) socket$packet(0x11, 0xa, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b40)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r5, 0x0, 0x0}, 0x10) r6 = syz_usb_connect(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f00000003c0), 0x3, 0x189e42) syz_usb_disconnect(r6) unshare(0x400) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) write$vhost_msg_v2(r3, &(0x7f0000000780)={0x2, 0x0, {&(0x7f0000000680)=""/167, 0xa7, &(0x7f0000000740)=""/1, 0x1, 0x2}}, 0x48) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f00000005c0)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000600)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) getsockopt$inet6_mreq(r7, 0x29, 0x1, 0x0, &(0x7f0000000640)) socket$alg(0x26, 0x5, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r8 = io_uring_setup(0x63d6, &(0x7f0000000840)) io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0x14, &(0x7f00000008c0)={0x4, 0x0, 0x4, &(0x7f0000000900)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r8, 0x15, &(0x7f0000000940)=[{0x4, 0x0, 0x0}], 0x1) pselect6(0x40, &(0x7f0000000400)={0x0, 0xfffffffffffffff9, 0x1, 0x400, 0x800, 0x6, 0x8000001000000000}, 0x0, &(0x7f0000000500)={0x1f, 0x0, 0x381, 0x9, 0x4, 0x9e22, 0x0, 0x100}, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0), &(0x7f0000000680), 0x1006, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r1, &(0x7f00000014c0), &(0x7f0000000100)=""/31}, 0x20) 15.616580376s ago: executing program 2 (id=2035): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000840)={0xc}) ioctl$IOMMU_IOAS_IOVA_RANGES(r1, 0x3b84, 0x0) syz_open_dev$vbi(&(0x7f0000000480), 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) r2 = getpid() r3 = open(&(0x7f0000000100)='./bus\x00', 0x21c2, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000140)={r3, 0xffffffffffffffff, 0x2}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x7c2d5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002fc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000003000)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000003080), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000030c0), 0x10106, 0x2, 0x0) r7 = syz_io_uring_setup(0x3522, &(0x7f0000003100)={0x0, 0xaa1, 0x10000, 0x8, 0x2d0}, &(0x7f0000003180)=0x0, &(0x7f00000031c0)=0x0, &(0x7f0000003200)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000003240)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0xff, '\x00', 0x0}}) io_uring_enter(r7, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160012000a00037c0248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b551d77f9565b777f41282e", 0xd8}], 0x1}, 0x10) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg(r12, &(0x7f0000002f00)=[{{&(0x7f0000000400)=@ethernet={0x306, @broadcast}, 0x80, &(0x7f0000000540)}}, {{&(0x7f00000007c0)=@pppoe={0x18, 0x0, {0x3, @random="1822800fa036", 'veth1_to_hsr\x00'}}, 0x80, 0x0}}, {{&(0x7f0000002c80)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002d00)="8c4e0d30bce40945a30c178255a62142a7def8a144c06c14d667c4b180f9b8510f3859f2bcf85d3c011084f1197febf13cdb097a28a76cd995d0fcfd06ee1bb0c9e0c822a0bf0ef9bf68366f6c0aa63eb7f693aed1bc1126e6a52b774e1949bb4311", 0x62}], 0x1}}], 0x3, 0xfc) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, 0x0) 14.525693564s ago: executing program 2 (id=2036): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = request_key(0x0, 0x0, &(0x7f0000000340)='-*.\x00', 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000380)={r1}, &(0x7f00000003c0)=ANY=[@ANYBLOB="656e633d72617720686173683d7374726565626f673235362d67656e6572696300000000000000000000000000000000000000000000000000377ba3fbb522a4ce00c900"/87], 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x3004c047}, 0x4000050) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmmsg$unix(r3, 0x0, 0x0, 0x2000c080) sendmsg(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) r4 = io_uring_setup(0x4850, &(0x7f0000000500)={0x0, 0xa974, 0x2, 0x0, 0x170}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000580)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x8) connect$inet6(r5, &(0x7f00000005c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x8, 0x9, 0x4010, r4, 0x20000000) socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCGETS2(r7, 0x802c542a, &(0x7f0000000600)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000004400010029bd70000400000001000000040048801c000180150075800400808008001700", @ANYRES32, @ANYBLOB="27ca57b50a8e7c164f23000000"], 0x34}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) sendto$inet6(r0, &(0x7f00000007c0)="046bf184b7b7b1ada23bef11a44b7193cf786d2f6e3e97299a064d1a26591bf94e10004f2cb7822d4ef078e72a04f212638d4e0e06ea890b8d996160170459e6897e84bc5d74607c3dae92496ef61c849fd28ac2cd49d98a61069a1469e7630d8d15b1afef9b86b962ca4085319ca560cc3115fc2849d914d4f2d7967569e97bc7c07cd3ec765c7ac438bb34717ef7e4bbf9d3171d0eaf312c32f03d02ede42599007e9399bb9efa7bf38a31bc432612f972166815a6ef91ebc0d2f1c23f087aacc4e482a3e9ddefc758309e1090ee7f6c2065324a373d5ac65296163e67e49b64d42755c2dd5d3e9f66b92f12ca", 0xfffffffffffffea8, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=r7], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r9, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0063e7d3f937f33ef0f3f08a4442f212d27a50", @ANYRES32=0x0, @ANYBLOB="90010000305200001c00128009000100626f6e64000000000c000280050016"], 0x3c}}, 0x80) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) 13.374278114s ago: executing program 3 (id=2041): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite6\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000000940)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000980), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000009c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000a00)={0x2, 0x0, 0x80000000}) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000f74000/0x3000)=nil, 0x3) close_range(r0, r0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa2f01, 0x0) r3 = socket(0x2, 0x3, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000ac0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000a80)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000b40)={0x12, 0x10, 0xfa00, {&(0x7f0000000a40), r4, r5}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) symlinkat(0x0, 0xffffffffffffff9c, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) r8 = dup(r6) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000840)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000b80)={@val={0x0, 0x17}, @void, @eth={@random="71ea1a08eda3", @broadcast, @val={@void}, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x3, 0x6, 0x1028, 0x65, 0x0, 0x7f, 0x21, 0x0, @private=0xa010100, @private=0xa010100, {[@end]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0x4, 0x0, 0x0, 0x9, 0x3, "2708ca", 0xff, "85a395"}, "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"}}}}}}, 0x103e) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000180)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000880)={[0xdcfe]}, 0x8, 0x80800) r10 = signalfd(0xffffffffffffffff, &(0x7f00000008c0)={[0x6ba]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000900)='.\x00', &(0x7f0000001bc0), 0xa, &(0x7f0000001c00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',b']) timer_create(0x0, &(0x7f0000001c40)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000001c80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000001cc0)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r11, 0x1, &(0x7f0000001d00)={{0x0, 0x989680}}, 0x0) 12.475918768s ago: executing program 0 (id=2042): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000003f0007012bbd700000000000017c00000400fc800c00018055fd0400", @ANYRES32=0x0, @ANYBLOB="0c0002"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async, rerun: 64) r3 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) (rerun: 64) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000240), 0x4) (async, rerun: 32) mkdir(0x0, 0x0) (rerun: 32) mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit']) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="b702000000000000b703000000000000850000007c000000b70000000100000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000003c0)={0x0, 0x0, 0x10001, 0x8}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c25, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x0}, 0x50) (async, rerun: 32) chdir(&(0x7f0000000100)='./file0\x00') (async, rerun: 32) setresuid(0x0, 0xee00, 0x0) (async) r5 = mq_open(&(0x7f0000000640)='system.sockprotoname\x00', 0x840, 0x20, 0x0) mq_notify(r5, &(0x7f0000000680)={0x0, 0x38}) (async) read(r5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xa982, 0x0) 12.420592693s ago: executing program 1 (id=2043): mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000640)) syz_open_dev$dmmidi(&(0x7f0000000680), 0x200, 0x40002) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r3, 0x1000) syz_open_dev$hidraw(&(0x7f0000000380), 0x0, 0xbb42) close_range(r2, 0xffffffffffffffff, 0x0) close(0x3) syz_open_dev$sndmidi(&(0x7f00000006c0), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12.21948945s ago: executing program 2 (id=2044): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000001680), 0x1, 0x2703) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000016c0)={0x1, 0x5, 0x0, &(0x7f0000001700)={0x5, "c6000000fa00008c0000c87fb100000000000100"}}) write(r0, &(0x7f0000000040)="1df8d4111e6823052ecb4d5f8802aee5c71a87c02fb5935c387e", 0x1a) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2c41, 0x112) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000000c0)) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000001780)={0x44, &(0x7f0000001800)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000001840), 0x1, 0x402) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001880)={0x1, &(0x7f00000018c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) write$dsp(r4, 0x0, 0x0) 11.327189334s ago: executing program 3 (id=2045): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x1000000, 0x80, &(0x7f00000023c0)=@broute={'broute\x00', 0x20, 0x2, 0x338, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000002040], 0x0, 0x0, &(0x7f0000002040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x84}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x11, 0x20, 0x88e5, 'gretap0\x00', 'erspan0\x00', 'bridge0\x00', 'ip6tnl0\x00', @random="6eb5912a74f1", [0xde3aaf8ee7cc9fc1, 0xff, 0xff, 0xff, 0xff, 0xff], @multicast, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0x0, 0x70, 0xd8, 0x208, [], [@common=@dnat={'dnat\x00', 0x10, {{@random="7b25106df783", 0xfffffffffffffffc}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x1}}}], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x1, 'system_u:object_r:dmidecode_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{0x11, 0xc, 0x88a8, 'geneve1\x00', 'team_slave_1\x00', 'team_slave_1\x00', 'lo\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0xff, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xa0, [], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}]}, 0x3b0) 11.19261107s ago: executing program 0 (id=2046): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000840)={0xc}) ioctl$IOMMU_IOAS_IOVA_RANGES(r1, 0x3b84, 0x0) syz_open_dev$vbi(&(0x7f0000000480), 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) r2 = fsopen(&(0x7f0000000040)='fuse\x00', 0x1) r3 = open(&(0x7f0000000100)='./bus\x00', 0x21c2, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, &(0x7f0000000140)={r3, 0xffffffffffffffff, 0x2}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x7c2d5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002fc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000003000)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000003080), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000030c0), 0x10106, 0x2, 0x0) r7 = syz_io_uring_setup(0x3522, &(0x7f0000003100)={0x0, 0xaa1, 0x10000, 0x8, 0x2d0}, &(0x7f0000003180)=0x0, &(0x7f00000031c0)=0x0, &(0x7f0000003200)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000003240)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0xff, '\x00', 0x0}}) io_uring_enter(r7, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160012000a00037c0248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b551d77f9565b777f41282e", 0xd8}], 0x1}, 0x10) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg(r12, &(0x7f0000002f00)=[{{&(0x7f0000000400)=@ethernet={0x306, @broadcast}, 0x80, &(0x7f0000000540)}}, {{&(0x7f00000007c0)=@pppoe={0x18, 0x0, {0x3, @random="1822800fa036", 'veth1_to_hsr\x00'}}, 0x80, 0x0}}, {{&(0x7f0000002c80)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002d00)="8c4e0d30bce40945a30c178255a62142a7def8a144c06c14d667c4b180f9b8510f3859f2bcf85d3c011084f1197febf13cdb097a28a76cd995d0fcfd06ee1bb0c9e0c822a0bf0ef9bf68366f6c0aa63eb7f693aed1bc1126e6a52b774e1949bb4311", 0x62}], 0x1}}], 0x3, 0xfc) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, 0x0) 10.995161034s ago: executing program 1 (id=2047): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x3938700}}, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000080)={0x3ff, 0x0, 0x0, 0xc, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x800, 0x9, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1003, 0x100000001, 0x2, 0x1ff, 0x0, 0x3, 0x4}) socket$inet6(0xa, 0x3, 0x8000000003c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000019e80)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500fffffff52c0006800000000100000001200002800c000100706f6c69637930000800020005000002080003000000001e", 0x68}], 0x1}, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0xfffffffffffffd52}, {0x6, 0x1, 0x41c}}}, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000000e00)=""/102392, 0x18ff8) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x8001) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @multicast2, @multicast2}, &(0x7f0000000300)=0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x7, [@enum={0xb, 0x7, 0x0, 0x6, 0x4, [{0xf, 0x5a44}, {0x8, 0x4}, {0x7, 0xffff}, {0x3, 0x1}, {0xb, 0x2}, {0x6, 0x8}, {0x8, 0x4}]}, @struct={0xa, 0x5, 0x0, 0x4, 0x1, 0x2000, [{0x8, 0x0, 0xa9}, {0xd, 0x4, 0x2b}, {0x9, 0x4, 0x3}, {0xe, 0x3, 0x6}, {0xd, 0x3, 0x7}]}]}, {0x0, [0x30, 0x30, 0x2e, 0x30, 0x30]}}, &(0x7f0000000440)=""/83, 0xab, 0x53, 0x0, 0x8, 0x10000}, 0x28) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r5, &(0x7f00000005c0)='4', 0x1) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000019e00)={{r3, &(0x7f0000000600)='keyring\x00', 0x101200, &(0x7f0000000640)={@_ha_fsid={[0x5, 0x3]}, {0x7, 0x2, 0xfffffff9, 0xf10}}, 0x2, &(0x7f0000000680)={@_ha_fsid}, &(0x7f00000006c0)=0x3}, {[0xbb, 0x8, 0x8, 0x200]}, 0x8, 0xcc, &(0x7f0000000700)=""/204}) fsmount(r4, 0x1, 0x70) r6 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000800)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000840)='asymmetric\x00', 0x0, &(0x7f0000000880)="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", 0x559, r6) 10.198463904s ago: executing program 0 (id=2048): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r5 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r8, &(0x7f0000000240)=""/102392, 0x18ff8) sched_setaffinity(r7, 0x8, &(0x7f0000019240)=0x80000000000003) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f00000192c0)='proc\x00', 0x0, 0x0) r9 = socket(0xa, 0x3, 0x87) sendto(r9, &(0x7f0000019300)="e1118ce4809b28ab595a99a4a14d829f95e25207b78d4492d8afe33ab9b7be9b1776271bbd", 0x25, 0x800, &(0x7f0000019340)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000193c0)={0x0, 0x0, &(0x7f0000019400)={&(0x7f0000019440)={0x88, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x6b, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @random=0x3b, 0x4803, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x4}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x7, 0x30, 0x44}}, @val={0x2d, 0x1a, {0x1, 0x2, 0x1, 0x0, {0x1, 0xa, 0x0, 0x5, 0x0, 0x1, 0x0, 0x3}, 0x1, 0x4, 0x81}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x4, 0xb9, 0x19, 0x3}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x880}, 0x0) inotify_init1(0xc00) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 10.152610458s ago: executing program 4 (id=2049): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20702, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYRES16=r0], &(0x7f0000000140)='syzkaller\x00', 0xfff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000280)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)}, 0x200}], 0x1, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000780), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000007c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) write$nci(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r3, &(0x7f0000000900)=ANY=[@ANYBLOB="400104"], 0x14) socket(0x1e, 0x4, 0x0) 10.138600053s ago: executing program 3 (id=2050): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) rmdir(&(0x7f0000000400)='./sys_mnt/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='27', 0x2) syz_usb_connect$uac1(0x0, 0xdf, &(0x7f0000000480)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd, 0x3, 0x1, 0xa, 0x70, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2d78, 0x3b}, [@selector_unit={0xa, 0x24, 0x5, 0x1, 0x7a, "52e0847064"}, @processing_unit={0xb, 0x24, 0x7, 0x4, 0x2, 0x5, "0d28cce5"}, @mixer_unit={0x5, 0x24, 0x4, 0x4, 0x80}, @selector_unit={0x7, 0x24, 0x5, 0x2, 0xfd, "7892"}, @selector_unit={0x5, 0x24, 0x5, 0x6}, @selector_unit={0xb, 0x24, 0x5, 0x2, 0x1, "53a610bb9fc6"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xf, 0x2, 0x3, 0x7, "fe"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xfe, 0x2, 0x89, 0x3, "", 'n'}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x9, 0x8, 0x40, {0x7, 0x25, 0x1, 0x8, 0x5, 0xfffa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x6, 0x2, 0x2}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x89, 0x1, 0x7f, 0x8}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x2, 0x9, 0xff, "976d809e89"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xace, 0x1, 0x5, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xc, 0x4, 0x4d, {0x7, 0x25, 0x1, 0xc, 0x0, 0x5}}}}}}}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x300, 0x6, 0x7, 0x0, 0x20, 0x55}, 0x24, &(0x7f00000005c0)={0x5, 0xf, 0x24, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0xfe, 0x3, 0x6, 0x0, 0xff, [0xffff18, 0x3f00, 0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x2, 0x7}]}, 0x6, [{0x4, &(0x7f0000000600)=@lang_id={0x2, 0x3, 0x447}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0xc1a}}, {0xc0, &(0x7f0000000680)=@string={0xc0, 0x3, "38e7f430c025125dcf7d60c61aac4a5799d5404a14c84138b79e01e1e6195d525dcbfc8f8783349c883423899abbc81b327167064d2aa34c6435bfa574220b586283ef64734ef954d5bf6d71e341997bb5b589a161f8cde11b4c8e23edf23ddee48e7d930d68a7f4c2a1f1f1bc1ea549a079c921fe72eb7b4d1328b05cd98db286f095f3f41eead84065c921623fb2a9e0519db153428289f9287f21bb1a99e3028122b34b4d33ca1333604c7797f6e5ea8fb85e459748dbaa95231bb34d"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x81d}}, {0xd0, &(0x7f0000000780)=@string={0xd0, 0x3, "5e16250574b5c57b45decc76965def3b00dea81621876cf3dc4238916c485bc0ced55fb1ac3c6d054d471957cf3d96eb4f6946999954bc08b470013e3d835f7893477551b75e84a733095b312deb40a4dfc474a24387e61a574029c31502ce36070ce04857c780298afffa57d34b2f491bb3f148b7bdfd730d4169b3ce98c76cf7240e62b21f24029ec934af3fcf2619be74c8d3c56a87a65ef511315896f1aeafc25b3396c3001cc415f773f6512687388e9a1740796f2786f20010c04920f01fa2b57749bfdf651a1c8920bd40"}}, {0x85, &(0x7f0000000880)=@string={0x85, 0x3, "5be52385e0cd8a8b14c43bc599b5bea3b9299b376c3fd0f0380d6c2e7bcc39264ab168984476e1ac2e931072234493617294a587b5b1d5e0017f2f8e545b471b98ecd9b4d09d3c8b138ea17d1d7b3889dd9fa4305c2625c61f6ea0076744b3705ee408befe98aedb0198207f755e145e24a0739c7fd801fd69ee714b26b2d4688633be"}}]}) 8.862040287s ago: executing program 0 (id=2051): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f00000001c0)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000280)=0x84) shutdown(r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_create_resource$futex(&(0x7f00000003c0)=0x1) futex(r4, 0x86, 0x2, 0x0, r4, 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40042, 0x1) r5 = getpid() syz_pidfd_open(r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x44, &(0x7f0000000400)=ANY=[]) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060088470000100015007f0000017f00000191004000140002"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) 8.507945077s ago: executing program 2 (id=2052): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = request_key(0x0, 0x0, &(0x7f0000000000)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x9e\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xea\xd1L\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!\'\xc3\xf9\xa3\xd9\x85\xddI\x11\x8a\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3R\x92q.\x8d)\"\x8f\xb2\xc6$s^\xd1vU\x9cB\x00ao\xf1\'\x00', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141102) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x8, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000600)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x58, &(0x7f0000000880)}, 0x10) r5 = socket(0x10, 0x803, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000940), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x5, 0x840, 0x800, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x3}, 0x2c, 0x2, 0x0, 0x0, "77cdd5ec2fbc7a9ec4a453d493b56c7c14329ec7276f956b67944c3c74fa4e7197ca171b8de8de55252f560ae405bcfa7cf6dfdd4e660583b714a00b39113edb"}}, 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a80)={'syz_tun\x00', 0x0}) add_key$user(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x3}, &(0x7f0000000b40), 0x0, r2) sendmsg$nl_route(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x41, 0xfffffffc, {0xa, 0x40, 0x9, 0xfd, r7}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0xbe2e5b1053dc3ea0}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 8.248729188s ago: executing program 3 (id=2053): openat$uinput(0xffffffffffffff9c, &(0x7f0000000640), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000006c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000700)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000780)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000800), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000840), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000880)=0x6) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000008c0)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000900)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000940)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000980)={0x2, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x10, 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB="b40000000000000079a048000000"], &(0x7f0000000ac0)='GPL\x00', 0x2, 0xc3, &(0x7f0000000b00)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) preadv(0xffffffffffffffff, &(0x7f0000000c40)=[{&(0x7f0000000c80)=""/192, 0xc0}], 0x1, 0x180, 0x0) io_uring_setup(0x523, &(0x7f0000000d40)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="640000001800010401000000000000000a400000fe030001000000001400010020010db800010000000000000000000008000400020000000600140005000000240015002000010001000000000204000000000020010db8000000000000000000000001", 0x64) r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc16, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x3, 0xc0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x80, 0x15, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000540)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 7.896498441s ago: executing program 1 (id=2054): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b400000000000000791048000000"], &(0x7f0000000480)='GPL\x00', 0x2, 0xc3, &(0x7f00000004c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000840)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000880)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000980), 0x366, 0x10, &(0x7f00000009c0), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000c80)='./dev\x00', 0x0) mount(&(0x7f0000000cc0)=@filename='./dev/sda1\x00', &(0x7f0000000d00)='./mnt\x00', &(0x7f0000000d40)='ext4\x00', 0x8410, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000d80)='./mnt\x00', 0xa0000, 0x14) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a40)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r5}, &(0x7f0000000ac0), &(0x7f0000000b00)=r3}, 0x20) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r6, 0x388, 0x41d9fda7) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) 6.281294745s ago: executing program 1 (id=2055): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = request_key(0x0, 0x0, &(0x7f0000000000)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x9e\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xea\xd1L\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!\'\xc3\xf9\xa3\xd9\x85\xddI\x11\x8a\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3R\x92q.\x8d)\"\x8f\xb2\xc6$s^\xd1vU\x9cB\x00ao\xf1\'\x00', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141102) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x8, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000600)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x58, &(0x7f0000000880)}, 0x10) r4 = socket(0x10, 0x803, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000900)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000000940)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000a80)={'syz_tun\x00'}) add_key$user(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x3}, &(0x7f0000000b40)="a9be6420edee6e6b228f0751afc7b27eb73586213ba3213856a6f45b425d9a5a9c863f5e396e5ac0a321242b75a02b975929ec52989eabbaaafeeabfa127263666810e14acf4d9714218b3a06c65664e37fdcb38bd01776f9b94c794b799288ee4c49bad9722", 0x66, r1) getsockopt$TIPC_NODE_RECVQ_DEPTH(r4, 0x10f, 0x83, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4) 6.173739529s ago: executing program 2 (id=2056): memfd_create(0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x3401) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000196c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000019740)={0x11, 0xd, &(0x7f0000019800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000019880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000198c0)={r3, r2}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='clear_refs\x00') pread64(r4, &(0x7f0000000200)=""/250, 0xfa, 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xd, 0x4, 0x0, 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000019940)={0x2, 0x2382, @loopback}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000019b40)={@map, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) recvmsg(r5, &(0x7f0000019d00)={0x0, 0x0, &(0x7f0000019d40)=[{&(0x7f0000019d80)=""/128, 0x80}], 0x1}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) read$msr(r6, &(0x7f0000000500)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000019500)={0x6, 0x15, &(0x7f00000195c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000019680)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.162169526s ago: executing program 4 (id=2057): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 6.046359118s ago: executing program 4 (id=2058): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000180)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000004540)={&(0x7f0000004600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x80000000, 0xdb0078e61ebfe5fb, 0xdd2, 0x3, 0xb, 0x0, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chmod(&(0x7f0000004680)='./file0\x00', 0x8) setxattr$trusted_overlay_origin(&(0x7f00000046c0)='./file0\x00', &(0x7f0000004700), 0x0, 0xffffffffffffff57, 0x0) syz_fuse_handle_req(r3, &(0x7f0000004740)="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", 0x2000, &(0x7f0000006740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006800)={0x78, 0x0, 0x0, {0x87, 0x3, 0x0, {0x1, 0xfffffffffffffff7, 0x3, 0x800000000002, 0x8, 0x8, 0x2, 0x4000003, 0x404, 0x4000, 0x6, 0x0, 0x0, 0x6, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000400), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000680)={0xf0, 0x40000}) 3.800850178s ago: executing program 1 (id=2059): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x6001, 0x4, 0x3f0, 0x0, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff, 0xff000000, 0x2, 0x1, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x7ff, 0x9d, 0xf9, 0xd, 0x0, 0x7, 'ip6tnl0\x00', 'hsr0\x00', {}, {0xfd}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@multicast2, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 'veth1_vlan\x00', 'team_slave_0\x00', {0x101}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f9bcdc63c0c8", @mac, @multicast2, @rand_addr=0x64010101, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000140)=0x4f4e, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 3.336370503s ago: executing program 3 (id=2060): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0xf, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000007c0)) r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x5, 0x155081) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f000063b000/0x4000)=nil, 0x4000, 0x2, 0x13, r1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_usb_connect(0x3, 0x32, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24004045) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x400000000a882, 0x0) r4 = dup(r3) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) write$sysctl(r1, &(0x7f00000000c0)='1\x00', 0x2) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002300000002001200ff1901"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000680)={r5, 0x0, &(0x7f0000000600)=""/86}, 0x20) 3.278312608s ago: executing program 4 (id=2061): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = request_key(0x0, 0x0, &(0x7f0000000000)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x9e\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xea\xd1L\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!\'\xc3\xf9\xa3\xd9\x85\xddI\x11\x8a\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3R\x92q.\x8d)\"\x8f\xb2\xc6$s^\xd1vU\x9cB\x00ao\xf1\'\x00', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141102) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x8, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000600)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x58, &(0x7f0000000880)}, 0x10) r5 = socket(0x10, 0x803, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000900)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f0000000940)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x5, 0x840, 0x800, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x3}, 0x2c, 0x2, 0x0, 0x0, "77cdd5ec2fbc7a9ec4a453d493b56c7c14329ec7276f956b67944c3c74fa4e7197ca171b8de8de55252f560ae405bcfa7cf6dfdd4e660583b714a00b39113edb"}}, 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a80)={'syz_tun\x00', 0x0}) add_key$user(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x3}, &(0x7f0000000b40)="a9be6420edee6e6b228f0751afc7b27eb73586213ba3213856a6f45b425d9a5a9c863f5e396e5ac0a321242b75a02b975929ec52989eabbaaafeeabfa127263666810e14acf4d9714218b3a06c65664e37fdcb38bd01776f9b94c794b799288ee4c49bad9722", 0x66, r2) sendmsg$nl_route(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x41, 0xfffffffc, {0xa, 0x40, 0x9, 0xfd, r8}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 3.057217136s ago: executing program 0 (id=2062): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000180)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000004540)={&(0x7f0000004600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x80000000, 0xdb0078e61ebfe5fb, 0xdd2, 0x3, 0xb, 0x0, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chmod(&(0x7f0000004680)='./file0\x00', 0x8) setxattr$trusted_overlay_origin(&(0x7f00000046c0)='./file0\x00', &(0x7f0000004700), 0x0, 0xffffffffffffff57, 0x0) syz_fuse_handle_req(r3, &(0x7f0000004740)="308f4f94771584351b85c5532a9cb3f13986e87863cfd608f17cb38bfda319b1b6d9db268133fddb02793b3a1b7181dc6313dc41ecafbf1ea3019af5ba74c41b3541d155925411d9cb3b4f2d7ef7c0c0a388f683aefdd9cc0c02cd972c6c47ce2751d7a1b6934222cb3096aabe72040ee4133e86c0217bdeedf7f8579e7026eba71d2bd71cad8e39e9c27dae9d321037e38158ac3bc8efddd849a3ecd08d51a09e670f0e7fd2246c268f23192ff644711e285eb6a0651797189819bd1e7d53c12f1d3da1249901cb1f7eb2078555a4537658cb0ea50b7da2bfffd71e3e476fd61a341ae840b184e2f0010f3a306ea794392992c2dc2eabb74eff7c97831b1241ff7e31e37898bbdc99362c73da8d1f215434ca06420ea62fb997f8a67bb02f1139ac96e04bbe07628156f37d94777b3402e46189855ae041e716a0cd828533972db242ebbb1b6dc7dc39ddcc8d869a3bf4c341329cf806cb22d31953f5184f1f23d67381ea29b23ed37d2318bd92b525be93d275e09b9fb5856aab08d9cb87e858673025a4cfcf534cf2becca10e2334d1051dda98f9f63ab2093559ba2d6778d4f502bb51e5a73841fa436cef7fd217b3767cf9e09d01a6887a15f73d6296771119262b319d4e4291325461fff02678d8bc169a47820111c3ca3fdb5d2bd45d6629728e999374b312cb81bdb9d4c53b0cb2a442b987a968f78e3387796fc1016f67b8250fc8c98adeaac1f44da1d35faaa50b9329ec998f5e0ec2ba75f8c44ab8ffc944c0c6473f25c2f05ee289089317b06f2704d00af5ef3efde2fe9ff0933f14fad803e923d207e24a0d999bc5e34b1c1c292cd2a8278346cbf3c8f826cbcb4457b947212e2150e82743f0a90989a50b4ed751c131a3ba860921bcd7446bff9ab953a9de76a22fc0a5c6795ba7eafb35a91dd464ee7354e6e8784166295976a25aaf2eaad3c2750137b3507aee0a01cb79b0b92ab1b33b0e916fd8364dfa688b17328c23bfcdd61f24d36942707a8a4fa0e74cad7c3b3a898af2d225dbce9604933248d6bbebd34178dd0e6e63b8debed6ad5688704cfdb6b8514b0a7463a21cc02315def4d0f81aa7627ebde1e02acd1e598a265fe122f868e072a163037de847302d2ab8b80d10154810194b3ba3830e6e4f3d68063ffde12fa6515f23c83299afd889b3fbf6ff782e51a5342abcd1d6d707aea071d18479cd28abdcc4617d0094c1e7af425dafb9a580e71a7aff964b9ac8ed50e7b9498ea3f420ba43353ceb9a965824b3faad049d98370b465061243fae891f5eb9cf8e284cadf3d49c3e216438422bcaad32b275ffdba21e1cb8d4f7a83576f5968e552dcca09a11e1744c63d96b6884315e274f028e5c0c8d3b00f8ce2cd844388127fe9ef02ac9e2bb7544b61c00c82ef8552b01f55aadd3b3de2c2c3e106ef4099a320b76e637ade07a2792fdc0b1464022a7d11d2228d91f15a1c017847c4a0d12e5c51434f2fa50f94ff6d969f013765a67d0991a3cbf93828eb32e3c7c824dec7374e576b1651511a702c3f07ad2c0ba9a046b8d6cd56c74523682f1aa892986f29e13a7a49175f6e59fd0387f1b9279c76ffc0b87696d112a815a770d50206a2e9d4532d37ac9da0b600f2d75a9aaa7702cfcb4d2f4a463f06ba14d13f1f890033d89ca4a5b4b392828d25b274003dd27c311903ef1b8674d37e169af1078257b6d25a76d6374711c18d656c6ddbed246d6d629401d304c9d240b0f230b3a80e42646f95ba6468faad645cf0805de47a05a45db26ff8bd949a8a49055ae167196922b4fd0502e630dd6ff0186702bbdebadf981e7022691335144b1fcc0d8b0fade1f178bb3f052a2c480e55b9b6fe17b27368ebf429a3745fd7314a3799e692c8cac67b04053c5cb656e190fbdfb2afbe1d79d546f3bc268307210ee318b1205a579cf308995908a302b52eac5318c04af7ff3d172b0ce810cffb15b778472eb68d3ff886fb09d3e553912851e66687b48e881d55689382a48c8166c738ad94ec28c1f7c048d543c791e9c43136a26e2a871b3871c312240d6c9432cacbad105d3a0d5f2bcf24d2835e624c65fca1da66388a0a603ae0e3a0969bd100f6c61c766901a5f7d08cae2f648be0ad00fd7191b318d4abccb863e33f5a389d89306934e4d1a786420ef118bd46f3d87618b707234496b8825250b424cf49714c5598a8c480b625c4f8a6a9fbac9e25ae827b2883a2ba4c7b4e920cf9dc51edcc26d7f6c5200717bb7deee62fe3c439ccfca6b22e6593a631f7ff20975dd0e19582d3571c80e4b34ea625566f124562e5332e323c7a1a8509e3650a2b5a79df7d7165219e471ee226bffc55a75efc5d2d2eb4384820fbf1cf23f506d91b595d20ad9dc61be99e6ea68303aee3943e82c2d25deba50f9f5e979e08bbf6bc9266d9a5cc5f5501645fc1217c1110f495fbf25814102de273f5fcd1cce82acf474e7caf8baec955b1a6fdeba6e4937df67bab7dd8ec31a630f04e1f93684435caf02611214a2e57ce895f6f3af108e1de38db5bbcaa4df8c0c31cb6e26f3f5837fb5acddf99619a1addffa413ee29913d255e70b2f60b6882892a9ecaf76aeddd41cdacc4df88295d2eb565fbf659fa5cafc2463c8c54878fffc54008693f253eb590d665c9671b7a969c72d56f10bfb4d3ad644db2ff2b01172c51db49917ede52edf4e11023a525599a241fad18710430cd9533e88a8a3b3885ab1fd396f1969633bfe77efeb325013e2bda4bf87a17290fd06bbb3ff120922acd161acfe2774733f33ca578981828a790311b611558e58fa9f0b44e92288f5cb9324c0c26ac1e33210e914026797f0fd0b7207953112da4f4541a36d6ab2a3a80903375fa352f19306a01be396679c581d72542087701a2943bb86556c991ab736ca7954bbc99d5ebb8e6a7ad148fe7ef4a30d17bce34ad252408236c0a55cee344ba79fa9233fb7ae72c07b1505305d8ce2f834b9aee3f4f3e77f86cc529d729592b509287d5e03b8b215e0c0dd20ec668c5b022fda4de57ed890e0dd3fcf8fd370a2e6a210139361d0233a550c60fd30bc6f62f948cd5691d64b2ddf1a0a82c3109896a5ed057a59bf9089191f6b664913fb75b2b5392da6205e4926967092d4c71a9c95bacbbe327783c24a47f385023752d05556c7a6225692f931d121c1caa6c75dae4d656e4cb8f0b6d745f3f590ee9ab0883d93ce76956c24c1838a2f4e7903bc2a041db42ba7ff3c54541ad4e2f83c7b47d07f1672c0f014d87fe17de3dcde1e47f50a76ef390c9d9b69ab317948dac2b47aef1fa0bd6c92ba31151b4c774f018ca3ad428d3fd6dd503084165d7e82860763db1c45728c238a19e62a93102655e4bc10f60996cdfc6e62489021a521d2edb63319cd5d91a2ecf2a98e125a82df82e5872adf15f2328dbd3a10cdb509b6b8f8f81fc2c286ac62e8b64daca66b4d36152399a38a59e100cb70694228b03d60a21269421f07088815736ceddc054e610bc3a08a3c9215f3905e9de9c5d216ead0910f99616a33d4bd0d11399b4e3fb5843515b72591e44fcb7462bc9b2dd8a0bb26b8add560946a609fa5f2c95db31aec78924665819f75d56547d40d00a42fbb01236fdfa612467601eb358ef664efbb10b2e1c949729763f8e58f99ee33ac9fefa98234232e2590343f563a0b458497adff08b4bfd42aaa2e218e540c811467f2f28430ac408ff4d88e1a94dd26d8f8f7e1bc6055228b2772049ce830adc5fee653b28fec3a9588197f5b9afadc9c8a14eea738d863ebeb709d3120713ec2ccb7da6b614bb2d8eaab6e5b7455b3d9f8afa691823d9cb293454230a5db24fc1a091781231026339d3d05fcf731d9bbbfa5cb1b58ffc8e5a801daf948df3529aef142791b1d6f54c21f310d8bac7527fd63f2dfbd9cc03f34ba3ecda9fe478883dac7ec025370ff594d37735431d3c5a63580783d5e79b3d5c6e9b8ee3f0f69541a1fb2a4afa836e5683a0fefaa965ffa79349bf2a2f15a3afb0322885f4cbbb761320973c27a44b924c38b56f79d81120e3c6272eafb741986c52ef0eb93821866239574d98157b4da7c9a91113785311b1e99836d0195aac8ba86560f25f7580f69a1ad752ea26ca555e17a0678a2d075d58dbe2d87a441ba92c7355dae578ba9b5ac14cb92950107bd148122fee16f0f4519423e9ce25d0108ecdefb5c17b414f5191da6c8b699bdd95257fac0e00c1112ad4f1f7e887b2e5eab1dca1e8feed87328adfbecbb8e3614347b28621ab0d9d0576b4daa2c8fd3ede61742656d1f1c26b46669fea8f58267e439f6355dab1d7e5146e3533c6fc3906023919275d810789f8046e78f2741b4c6be3ca01b2df4a45c45b9a338948351ffe2059566f1091396062576ae674b359f71c815d0f1cd18579a581146b81ce05eb92e9758a8cbbb11c206555b14be788f8ba3057ffbaaad8916144e56bdfcae8a9b3640f387558afe4095b4779696fe497dbbffe0070bf133eb1f0d929b5134efd0aeb317927af709b0ed5218d88110cdd27ae146048bb26a6ce8f53cc422951221023765d4629375c582ce90baeb1b9dca05d3550e96d1556e4031f0289e5ac18304bfbfc75fc4a2998ab507a1fa89f9a5fa67a9a4dd80ab0011e6d72c2c6835a6b9ea2ed28a4431a31e2695d7fd2f613bca1b5d1dc6ada9f2031c92ed38b30cc05ef25067c29fa1616c16f17975c08792fc4d521aa32cd09e492c8f90023afda5f4664f0c706dbf79b40e6558c691ddac572c92cae3e9d132c665ab69a519df9eb85098abb8ba1baa0b576b93ef8f34908cf43e8d2843f8703cba2a22fd7667ce9b0d5a9a1a5d5138be4a34bef70b9e3531963b6cbbf07da131efee739ab887a8c976b7423a1464f56563c6b65edc8ae66d2fc526cedc6af4ac616c9e9daf00b865fcfaac28202743ed40aa1641bd272358886981f3fc17e3c6187859757172adeffc2c6578387fcb9de29d957e7fd4c8fba790349ced82cf212ef6c234c1bf565451f353598a957793a6e7dfe940e957a49b593e17a387703f008396e0ea0d5d98e1d07212dfcb4fbab9b54fc78a0a07803ffe62796feec1e0f59220d821dd52b18c3b2a8eccd9cc8a04bac6a536b625070e1628dcc8d90d24e19d3945aca91f11c54caff198503a316e5b2ed18a52d5d416fbb5290900fffe47c72f2350b3c62202cc4e06c7c33f57cbe16cd7c335a46fb63b4e3e77a20bdcf7deb810f7eda4ca9787458052f7a317e05739a93a2a4fbd9967855a91afbc07ab1ce297bd95b97ec5d890e1e09e704908752a172c3ba4bee5f7a459b1373b9244fea7c5cc585e644b0fbe0cf13cad973eaf0e58beee2dadd0033756ab239fd92f7defc96d4f837b133a0a2ca59e70223a0677d2019439389a567e06c3f67e6dcf6b0a74fc61eb8e0a70bbd28d69093ecfbb6eb27eb51230edf06743684d0b81aae253a9880d0fc73f065e261c097876e8978daad1c7d7ba5b3019ab39cdebb26230e72fdadc6f1036e1a06d0e6bf733b9b89b68a7e8743a6ee2125d9a8b5357c35c93e1de4ab1c8247dbd55cb6b6d16efc03cefabe2b013741d707ad7650d6be75be3a7d469290abec3abbcfef1561a424fa54aeda345d15d626b2f5184bd08c349fd5288d9e39f5645203f763cba13733f0c72cb4d22adbc5300d3da50db2b732a72a17efbd6b2187f1201abeaf686c703f6b364018af4a0b8cbaf89936d9d85b24ac7df6685a464123d4bbaa189039fe6dccb5454bdb3403909e6969a4ad18ed8a427d3b9fa3532467e9f2e07e4bf17e6acc89c1fba74f78b63b7e9713022b62930e0242ba50f5c52699fc333ebed1e4061d37e5109b75774a24ba9ec2ba76daacb4f69281b29adaf89a440b060929a411a281832810b6975f944f47eaaf8b6509986760480550be0f5f128ea460d0d12231eebe5cbf0c787f72d438d4c62a80f995dcdfe933c4f9fab3c54a3f01126ae011a5dfa703820e7a073950b1537b77b9551f30cb50a1d0c53047f8cb62c64f11b87a55eadf99a0c6e2a40753a02daa2635c269170247a0a59c7971aa7a60ce00236d6226b8ded67be89a3b7c6ed658013eea108cc227ce5391da62caa4df4bf5c84f12e24510cea6dcffa77a9351f827d99610ed2838bd01be98507e35246b9f0d1627877df2dd7a030d6699a29bdbfac7821fa840683b69755f496086fd1c481eece51d8751394a815c2620c1b6b0d0ace2301cc1cf161a048ea190f65ade47dcde3a261b5802bb54d9abe1d30fda5b6168a04c08b7b254787adfebc7ab32502173b88356e4672245d3f336bf1ef61bcac2bfaac0bf626ad1437bc0434f935b96a24a5b8ee6c684be40a3f5552410ddddbf6cc0aa719c154aede8d3ecff053e33d3a674623ed2f69ee8fd2e37989f8d3fad25627d17658613a95ae8b29c317920f3ed6a5e541eb85312da5858e02f087d79f002c2a509823bc7bfad1093d0acb0092e6d92984e7148aa264356e97f112e55dd4cd7b962c29e40cb58b1c752bf549e683bb8ed68ba4f6396032577db95a6fcd382a905f3fd84c1accef612cb4721079abee24bf4e6621e861338e211b8c605586f63d8851df63b64c65ac0148d95e23e0b40c55fa4736e234ea9d3e520c5187ddd894fcfecae3547f7d3516a96d52364478b816dedd31f8de2072a3e4052742e09892c1af11e7912a218a3150343afd34b2047f99725600636371dfc584229240cf669df60c8b956ad1f0945c35f60d78d8741d1205482c8985f5208ad95a41bbbd5204e22192d8d6dff18cac16bedf9e47ef596e86a5c7e11133395c755f0dd213f484ec28d9d41db6ab3d030ae4d110384d11f00cb9c791318884d35bbf0d47f1f735d7ec931758919a5fb379b7430acd688705566a5946b766bed8881bdb57a8369930533c10e1063f377ff0319238c517f71ec97b03e1b954e240a2131845cd6a0af86c0c4e93af284d7da07d8e7ad80227f620dadb5f81852f7fe23a6cf56340dd71e3cd3dc68731562e236ec9ffbd056b9c2ea14deea83bf4c2218e4cba4bfc6fae34d1c8004df23724d3d4781b55ab266ac4d44a9d468d983b1f583cc951a3651fe25c6f0fc811565d9268c5f4f54f915343a74ab39ace954a72bfface0353996599b346e903391b23a114e2772a04c4294060c644c7cf52485942b98ca93d150682be61cb160a69f2c69a05c6c1805dd0d132182a70f8b81ade01b1dcb8520e659feb46066122db68109627546adf269fc67c66fad21a9232ad4c0e6bdc44c1e93fec19e4707a7d51e7c7f2803ce9211e6280e195700830bf578f31be6316b01bda4475d4eaf75fad4134faf16f51521e830e718401461a5f62fe515cf56e2f51da2c8f667cf6b124c8c8be28843acc82671d2d701d05ebb19df1a6f48f1d4543e9496d3d50d5ef67d29b393bdf0a4bd5d01c32fc8e6f0dc384285b6f58defc06cd7b20b04a47d6719a4238f0d6a69ead55c5905aad066362ae1a459d88f14d5c379726c8e9b177029ca80473871a3176969291675ca61d214ae4f47b09ebb3d610d18be8cef820868356776b9129d7875d8221c53cf5d0ee1559dad42c5f776a5b679dea1a0454ee10ec7a8950d56513aecc74ccfc81acb4c25252e4a66fc248329e5246eb5fc7a8f18deb555a36b2488e07ce2a18a9d7f3b0f5990675c1d64af8369e9840ad0c3ba428a0690c7407bdd4a2d5a75d6ecaba6c4e7bebe8a5293fb29a67021e61f99417a6081fc47d7486bb337347cc3bcf3940a320675f1e6b1fbf78fe34af5485dbe22f2a6c0c863b0ebfec2a27923215917aebe107a6e902b7e21eafe124dcecad4112a3337280d41de0a8dba13679c6b8ac07389c31b418827a938b188b043587d0781903a3f38e7cfe8486cf03de749991e9634f70f6c966475f92de5993caf0f5c3ff4a26305578aa5b6fd17567343fdebf20c80ff648b9e3cc92ead693526356da4dcf23beb2ba12a61a38b8b04ec7ad0bba7dddea3affc7f4b5770517a44ec8a5c97ce96b9802a8f8e319153da820ebab1994936f3c3406efd2e435829c9e8db5bc5a86d291a87c10600e91f9c7ea3c550558bb1adaa6a81ba836ca38d7da5194a2e6cb0f45efbb19953a1db093a7e02512e5638666b372d518e3c24a8cb60032235c51813dcda0a10d6e3ddf14dc6b13ee8d82bda2155335c0151ef1e056c675dd5059f80885c653a2b1283e3b4fab926e98a2a1d1af4a700e5798e79e8f816b30bdd7fd377f9fa803a81d76b5d378776ca820e83677c66bc2d6a4f3454734cb244259bbcb99827a5b214d66574e1951325828233622f4cb0cb9194bd8ce8217b0f76faea49e7f742640f039f5017d9c77d6c1711bea52396e04e930b3eb70b27f41980f61d191585b111d2338ef32bd20d3679d41a9d434e0b21235c42b776217aabe6bf69ab728b40fda0570b1f7688ae9b9fd3ded0f19fa7b12e5e7d8d7b7df562d212e88721ce8a5b877ed992ca37948558d57778e0d5f809ae4598534cb7b6c1b16cef5ba41ff318d993d3dac9a39981d27cb35043e394e1c491ab8050b7dfb02897a77b728dd1e84e9ac4da54160c6f68238ba1f2e56c01222d252f6b4b2331516288de3bdb8db926721de32a1d28fdb431df6f79edcb3fda2529703a2e3792f5bf6f664f1935409ba85c03215d2ca2c5c72adb7325c7ffd3a149860bc84a4d8fd4017cbcf6d4233e00485d6bbb4e1ac87301f320a8cb24426c1c67a96a01ac94fed196fd90872e25ec944d4d301ef386175a9302437b4a5e7142eb232074703bc15ec04430656194675a3ea982b26a10625da6649128ba32d69c78b4538ada76cb84f932a51b32c61ad95e49134bd416820f57d2894edbc5dc5b63ff61f62b3ee8f006f722675be420544304e600fdc584bd4e58d2534b32937caf369f4bf6bafd04746654dca48e434570e0a633915dc302292605fa7575bc4fde147282cd63b72f3d3b4697371a6c9b378089a16b97cca9b62fca17a251e1e221156fd23101811be97050d1a92117fbdabf1306636d1714a2b2406b246e9104b350f662bc334e239015ae384be398ac02bcf552646a9ad8a88da27052ad16f85f006788cdfe307d0c736b3a929f9f9393de73fc00300c7b38531afad6627a5fd0ff8165baa03faf8238c45851bfc362d7fe58b306a3ade0ab711fd1fa2f215f8bb9b909ad446a5a44e8d8903c5982ee664031bf91ec3560a88022e3be3df4c1d4764d3cccca239b14dd839b110f54cf8745fc986fff5976334502439ab836e7ca747f91e7ad3f202fd999d003a24db2f337d52aebda89cdf6141e05fb030bd0b0eee61915a4364a33f7a05181e44f5f1a15a907eb92eb2000033350357ca2bfd7ff375b62d877185dc612d2f14625ccbbc4aee1b4bdc4e15fdd1532963adc984c929ec32f0b048287308438a9bf237b58d96d65caefbef0267581bf6a7918b8175dd026b3d6f37904840b5ba6c4bb0a226c39554cffdd9fe6ea4e9b04c7b91fcdc21606e1cfaf62ba41886b967ebe7d813e2c342b71db1b22b7f0c43c0309497ea038a632eaa51aada24533000a677ebb46f7c3c210565d7aeda40ce29865fa97d051ee5490bdcc6e491751099ac2320f049530b2d414b6ad5858dde992423ff2a7ba7cc4315e19ca73aa63d8020275915d26e9a259fad594c0f25402da3ec66756b2af91b76f7300ab3f40cc15ec6a19c43aba2f97a38e1cbd368c275e4fb34e7c1bc436c482e217227a8f4465c0f5c4cdf03510f785c56120196e1594b2d4f34b10a5acb1b23947a4a9c9c0d9704d88f2c62020e20d3db89d2b09ae560f018fdb6c2ac9720eec3b6d0cb8c9c7144048910f4bbe7070a998deabbdbd98b6dc1f824e6a66ce0bb71037cbe7cc2cb393cee0c87963f8d442150abcacca378371ce8790e86769956b30c0e04ca7c4af0c066402ad10ddb35d984012a7d02702b67f12cfb5c1f28d52d0d618469c722bf9c90bcc521e510bf61f7933edb383faa331907a4fe0f283a6ef71b0ba9dacf52a2e4b6ac1106211f99ada45a48309519e2f4a56d43e1ca43fbe7d612ead95c8a516a916448bc7281803338eed8eb0d7b0d06700f7745332c86ba048579b7c2dc6f94b048bc3903ac637296605378b4d9b7a445fe7d24027a59f0af02d006347b61cc8660c80268fa85d65baa4ccccaa213c6f0bebd4673c312558febcededb5192738d347bda4920eff6ecd42357c86fc3f8ffc72143598ce6faba1acf3e35562a0ce73f3182bbf5b84257a522298c500265db3e774788b5b72a933566bfda2dc4b3bed6bc81669bbe0b2705ac5b08cb669e69ab6740456c7e1a3abb96c9b212512a8780cb59f82744d1f712d1e5591f9cbdf02be11bdc3b647a7e4da5c62017bd16dc495b1cc0da65ee035ecbd96f673da66e1adabb58ccfabd01d55beea781cd5270e18e4846a2f2d527a43b70380507568876ad5499386511a94988840f2e6c565a7b3db9909e010c48e31e9ddbc107eb3b7d8bd11aa0549e18d4e0749f0dee8913e0231dd25bc66915f02f74f29af0ccf67f7b3efa990538cb676baa926c3f567193b7387e548ee6be5161b2da1039532fd1a0c4096b93179ee11a806724bba3fb50d699a0b09fe8919c731b6c848adb17410b4da64f6f03def4b3b92e64df2fc8dd4c981a633f8ada2d1bc6b0f32b7a756a6edd7029528fd6b4a11da00c55769224936f4adef968d516952137740b75112dedab146a2bc09073d49d1e960da845876a6e60fd8b0f444af01dfd3c00372462c0f57273e774f3cddb16ca2fcd7dd13f28b6f13251fbe77ed7cb190f73fa4ecc00b71e73b0545a906c5e30d495c41ba95bbe14fb30f9508482c82e434873fb588a65f3ff951d17f1beeef07da5bd974d84adf1b34df8f96005768e810194f756c1ee60cd429c7b00c98cfe430581313f3ceebf7bcc3e27a3537926a072af66e9d8eb64050f936b3709238f4aa4e99bec0aa4716cdd2a77f259cf591ec900a17875d813faa04eea61a2a796cd51103cdf4473472b26caae2bc07e5b422ad0ee8523c05c2db9ce75a90cf6174366b8aff045b8fd601f3f63fa0b698c6305543eb468edfb30d9b482a554ca786181f2b543b0a8a1cdad8366b29d60ed21fce9e7bdcef32417281e45aa0acb4bc2f0be0de1e42691317e0e799f29e3e230ce3629397f6d236f4c8bb77e488ade6b39fa7b1925f9df6245a7662b75c57dcc9286effdc537f97875ae46f54ba2e0ec5924bc56754a4058ee987be3ca2d552d2414d77209dc79eb714ecd544facf85bd37275859e079153a36a41b7700192069a8df7df93d527258d7587b02863a892f7cc2aa4a26989661257768ad5e4e49635e06726bd2544c50bf6ff5867f9dc48a8dce0c5954734da63b63f1ad6954286994790b81e3f0c4d64f1321ad652ea9a989c63a5bda214ea147720d65ce6075096968a4fb54e239177be207e7a728e480600a5144d089d9a196a50f6c0c04f023d9834c09056f811d18c771a6bcbc4cc51c4c63455e95664a2034b6171bbbf763d65297bbe5550e3c055c21abcc9f038a760", 0x2000, &(0x7f0000006740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006800)={0x78, 0x0, 0x0, {0x87, 0x3, 0x0, {0x1, 0xfffffffffffffff7, 0x3, 0x800000000002, 0x8, 0x8, 0x2, 0x4000003, 0x404, 0x4000, 0x6, 0x0, 0x0, 0x6, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000400), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000680)={0xf0, 0x40000}) 2.468147035s ago: executing program 2 (id=2063): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) (async, rerun: 64) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x3, @vbi={0x3442f1d1, 0x3, 0xc4, 0x0, [0x9, 0xb], [0x1, 0x8001], 0x108}}) (async, rerun: 64) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (rerun: 64) close_range(r2, 0xffffffffffffffff, 0x0) 2.298276432s ago: executing program 1 (id=2064): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) getsockopt(0xffffffffffffffff, 0x200000000114, 0x7fffffff, 0x0, &(0x7f0000000540)) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f00000007c0)=0x40065eb, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6c370c8900083c0120010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="23000000d5ec000000e1000000ff000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000a40)={r2, 0x0, 0x0}, 0x20) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000600)="14a0f24a3bae5ec76510d34b89fd07c449ce9ac456899a2039f024c7ccc2256994021e1c95dccef802da1330ac07101f1b63da99939a650174710fdde1bd7418fb82e437", 0x44, 0x0, 0x0, 0x0) clock_gettime(0x9, &(0x7f0000000880)) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "4b38c3", 0x0, 0x29, 0x1, @local, @mcast2}}}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x1, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x4b, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x3}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010102030109021b000f00e700000904000001cbcc7a000905", @ANYRES32=0x0], 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000580)=[@ioring_restriction_register_op], 0x1) mkdir(&(0x7f0000000200)='./file0\x00', 0x100) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) syz_io_uring_setup(0x201, &(0x7f0000000680)={0x0, 0x4395, 0x80, 0x3, 0xffffffff}, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_connect$uac3(0x3, 0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000010cd0cb10040000102030109029c000301698000080b000001013003092401092a000500000015240a0205030000000200000000000000000000000b240d004006000000e909090401000001023000090401010101023000062402010240082402018e01f20109050109ff039fb77f0a252508000000048000090402000001023000090402010101023000090582090002f100a60a252500000000100400"], &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0xf, 0x10, 0x70, 0x40, 0x1}, 0xb5, &(0x7f00000008c0)=ANY=[@ANYBLOB="050fb500030a100302020008fd03009b100352282ab885387d6baf1185f1d9503a79afeeab5b4c5c9842f3869b27444ea6dc63e03e0cf957d466dd84e26eb5129569e129859494bffa002f0579981783a57538d15c9c4019593b347ff02570b3f559978c478a8ae3cd84d98dc904f188463009e0570ed65f192c3257df99121c25a6f7195cb96fc12efafd977917caeab80b88813051b6c4bae04893615e0cb90cdb11d92f3bad0b10010cb3009400000062dc895d996de584ba4cd83f562cc65198a194e8e7429416543eeb1b1ad68d67b7e1bc275bb0783c273053fa47b796b76eb69b62648eae532e3424d047d04e52e961429ce3deefd14d79b621d3f96cd57487641e00"/276], 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40e}}]}) 571.519828ms ago: executing program 0 (id=2065): mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000640)) syz_open_dev$dmmidi(&(0x7f0000000680), 0x200, 0x40002) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r4, 0x1000) r5 = syz_open_dev$hidraw(&(0x7f0000000380), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r5, 0xc0404807, &(0x7f00000003c0)={0x5, "1f7f67491b5a90eeaddb94a4031a82687063ba6e44f7b91d902d0008424ad04b9634bef178be4ba64223a1d6da6d232b4ea6a453724e5a9c45a204ec36715596"}) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a31000000002800048010000180090001006d61737100000000140001800a0001007265646972000000040002800900020073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) close(0x3) syz_open_dev$sndmidi(&(0x7f00000006c0), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 532.570864ms ago: executing program 4 (id=2066): memfd_create(0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x3401) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000196c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000019740)={0x11, 0xd, &(0x7f0000019800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000019880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='clear_refs\x00') pread64(r3, &(0x7f0000000200)=""/250, 0xfa, 0x53) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xd, 0x4, 0x0, 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000019940)={0x2, 0x2382, @loopback}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000019980)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000019a00)={0xe, 0x2, &(0x7f0000019ac0)=ANY=[@ANYBLOB="b70000000100000095"], &(0x7f0000019b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000019b40)={@map=r5, r6, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000019b80)={r5, &(0x7f0000019bc0), &(0x7f0000019c00)=@udp=r4}, 0x20) sendto(r4, &(0x7f0000019c40)='h', 0x1, 0x0, &(0x7f0000019c80)=@in={0x2, 0x2382, @loopback}, 0x80) recvmsg(r4, &(0x7f0000019d00)={0x0, 0x0, &(0x7f0000019d40)=[{&(0x7f0000019d80)=""/128, 0x80}], 0x1}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) read$msr(r7, &(0x7f0000000500)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000019500)={0x6, 0x15, &(0x7f00000195c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000019680)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 4 (id=2067): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = request_key(0x0, 0x0, &(0x7f0000000000)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x9e\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xea\xd1L\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!\'\xc3\xf9\xa3\xd9\x85\xddI\x11\x8a\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3R\x92q.\x8d)\"\x8f\xb2\xc6$s^\xd1vU\x9cB\x00ao\xf1\'\x00', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141102) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x8, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000600)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x58, &(0x7f0000000880)}, 0x10) r5 = socket(0x10, 0x803, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000940), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x5, 0x840, 0x800, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x3}, 0x2c, 0x2, 0x0, 0x0, "77cdd5ec2fbc7a9ec4a453d493b56c7c14329ec7276f956b67944c3c74fa4e7197ca171b8de8de55252f560ae405bcfa7cf6dfdd4e660583b714a00b39113edb"}}, 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a80)={'syz_tun\x00', 0x0}) add_key$user(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x3}, &(0x7f0000000b40)="a9be6420edee6e6b228f0751afc7b27eb73586213ba3213856a6f45b425d9a5a9c863f5e396e5ac0a321242b75a02b975929ec", 0x33, r2) sendmsg$nl_route(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x41, 0xfffffffc, {0xa, 0x40, 0x9, 0xfd, r7}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0xbe2e5b1053dc3ea0}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) kernel console output (not intermixed with test programs): zd0, dev f803 [ 914.213830][T12697] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.213905][T12697] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.213977][T12697] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.214065][T12697] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.214136][T12697] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.214205][T12697] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.214275][T12697] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.214363][T12697] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.214435][T12697] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.214505][T12697] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.214584][T12697] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.214706][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.214830][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.214903][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.214972][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.215041][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.215126][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.215195][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.215265][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.215332][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.215423][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.215501][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.215578][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.215656][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.216078][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.216690][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.217252][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.217625][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.218214][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.221817][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.227730][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.228958][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.234472][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.234554][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.234624][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.234723][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.234812][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.234897][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.254545][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.254624][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.254699][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.257820][T12697] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.257933][T12697] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.258006][T12697] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.258078][T12697] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.258149][T12697] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.258221][T12697] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.258294][T12697] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.258681][T12697] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.258755][T12697] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.258829][T12697] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.258905][T12697] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.258981][T12697] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.259056][T12697] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.259129][T12697] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.259201][T12697] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.259272][T12697] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.259353][T12697] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.261042][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.261136][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.261207][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.261278][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.261350][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.262264][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.262339][T12699] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.278420][T12697] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.278513][T12697] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.278587][T12697] device-mapper: ioctl: Invalid ioctl structure: name syzd0, dev f803 [ 914.405088][T12705] Process accounting resumed [ 914.598870][ T2364] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 914.747652][ T2364] usb 5-1: device descriptor read/8, error -71 [ 915.127591][ T2364] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 915.217808][ T5700] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 915.352775][ T2364] usb 5-1: device not accepting address 62, error -71 [ 915.353022][ T2364] usb usb5-port1: unable to enumerate USB device [ 915.483635][ T5700] usb 4-1: Using ep0 maxpacket: 8 [ 915.525757][ T5700] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 915.609352][ T5700] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 915.609403][ T5700] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 915.609431][ T5700] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 915.609454][ T5700] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 915.609479][ T5700] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 915.609502][ T5700] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 915.609544][ T5700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.793339][ T30] audit: type=1326 audit(1792736764.958:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12730 comm="syz.4.1787" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742f79f559 code=0x7ffc0000 [ 915.876550][ T30] audit: type=1326 audit(1792736765.024:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12730 comm="syz.4.1787" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f742f79f559 code=0x7ffc0000 [ 915.876587][ T30] audit: type=1326 audit(1792736765.024:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12730 comm="syz.4.1787" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742f79f559 code=0x7ffc0000 [ 915.876610][ T30] audit: type=1326 audit(1792736765.024:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12730 comm="syz.4.1787" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742f79f559 code=0x7ffc0000 [ 915.897228][ T30] audit: type=1326 audit(1792736765.033:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12730 comm="syz.4.1787" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f742f79f559 code=0x7ffc0000 [ 915.897294][ T30] audit: type=1326 audit(1792736765.033:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12730 comm="syz.4.1787" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742f79f559 code=0x7ffc0000 [ 915.897331][ T30] audit: type=1326 audit(1792736765.033:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12730 comm="syz.4.1787" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742f79f559 code=0x7ffc0000 [ 915.897372][ T30] audit: type=1326 audit(1792736765.033:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12730 comm="syz.4.1787" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f742f79f559 code=0x7ffc0000 [ 915.897406][ T30] audit: type=1326 audit(1792736765.033:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12730 comm="syz.4.1787" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742f79f559 code=0x7ffc0000 [ 915.897440][ T30] audit: type=1326 audit(1792736765.033:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12730 comm="syz.4.1787" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742f79f559 code=0x7ffc0000 [ 915.927368][T12735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=12735 comm=syz.0.1788 [ 915.927396][T12735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=12735 comm=syz.0.1788 [ 915.927416][T12735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=12735 comm=syz.0.1788 [ 915.927435][T12735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=12735 comm=syz.0.1788 [ 915.927454][T12735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=12735 comm=syz.0.1788 [ 915.927472][T12735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2575 sclass=netlink_route_socket pid=12735 comm=syz.0.1788 [ 916.278075][T12745] netlink: 'syz.2.1789': attribute type 4 has an invalid length. [ 916.922819][ T5700] usb 4-1: usb_control_msg returned -32 [ 916.924100][ T5700] usbtmc 4-1:16.0: can't read capabilities [ 917.058227][T12749] cramfs: checking physical address 0x000000002a2e0000 for linear cramfs image [ 917.058253][T12749] cramfs: wrong magic [ 917.059021][T12749] cramfs: wrong magic [ 917.137049][T12751] netlink: 'syz.0.1792': attribute type 6 has an invalid length. [ 917.206415][ T5701] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 917.420111][ T5701] usb 5-1: Using ep0 maxpacket: 8 [ 917.435131][ T5701] usb 5-1: New USB device found, idVendor=0c16, idProduct=0003, bcdDevice= 0.00 [ 917.436129][ T5701] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 917.436158][ T5701] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 917.436182][ T5701] usb 5-1: config 0 interface 0 has no altsetting 0 [ 917.436208][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.497554][ T5701] usb 5-1: config 0 descriptor?? [ 918.112162][ T5701] input: HID 0c16:0003 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0C16:0003.001F/input/input35 [ 918.940483][ T5701] gyration 0003:0C16:0003.001F: input,hiddev1,hidraw0: USB HID v0.03 Device [HID 0c16:0003] on usb-dummy_hcd.4-1/input0 [ 919.322520][T12719] Process accounting resumed [ 919.409674][ T5701] usb 5-1: USB disconnect, device number 63 [ 919.561448][T12763] fido_id[12763]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 919.681241][ T5715] usb 4-1: USB disconnect, device number 55 [ 919.759922][T12768] block nbd4: NBD_DISCONNECT [ 923.177001][ T2364] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 923.310416][T12789] netlink: zone id is out of range [ 923.394176][T12794] netlink: 'syz.2.1800': attribute type 20 has an invalid length. [ 923.394225][T12794] netlink: 'syz.2.1800': attribute type 21 has an invalid length. [ 923.782954][T12796] netlink: 'syz.3.1803': attribute type 4 has an invalid length. [ 923.915661][ T5700] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 923.975771][T12789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1801'. [ 923.975828][T12789] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1801'. [ 924.086522][ T5700] usb 3-1: Using ep0 maxpacket: 8 [ 924.089556][ T5700] usb 3-1: New USB device found, idVendor=0c16, idProduct=0003, bcdDevice= 0.00 [ 924.096465][ T5700] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 924.096606][ T5700] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 924.111519][ T5700] usb 3-1: config 0 interface 0 has no altsetting 0 [ 924.123731][ T5700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.210302][ T2364] usb 1-1: device not accepting address 61, error -71 [ 924.251664][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 924.251684][ T30] audit: type=1326 audit(1792737028.867:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12802 comm="syz.0.1805" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaac19f559 code=0x7ffc0000 [ 924.251874][ T30] audit: type=1326 audit(1792737028.867:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12802 comm="syz.0.1805" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaac19f559 code=0x7ffc0000 [ 924.254169][ T30] audit: type=1326 audit(1792737028.867:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12802 comm="syz.0.1805" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7feaac19f559 code=0x7ffc0000 [ 924.254357][ T30] audit: type=1326 audit(1792737028.867:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12802 comm="syz.0.1805" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaac19f559 code=0x7ffc0000 [ 924.254570][ T30] audit: type=1326 audit(1792737028.867:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12802 comm="syz.0.1805" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaac19f559 code=0x7ffc0000 [ 924.254814][ T30] audit: type=1326 audit(1792737028.867:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12802 comm="syz.0.1805" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feaac19f559 code=0x7ffc0000 [ 924.254978][ T30] audit: type=1326 audit(1792737028.867:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12802 comm="syz.0.1805" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaac19f559 code=0x7ffc0000 [ 924.255151][ T30] audit: type=1326 audit(1792737028.867:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12802 comm="syz.0.1805" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaac19f559 code=0x7ffc0000 [ 924.255371][ T30] audit: type=1326 audit(1792737028.867:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12802 comm="syz.0.1805" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feaac19f559 code=0x7ffc0000 [ 924.255546][ T30] audit: type=1326 audit(1792737028.867:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12802 comm="syz.0.1805" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaac19f559 code=0x7ffc0000 [ 924.378012][ T5700] usb 3-1: config 0 descriptor?? [ 924.569189][ T5687] hid_parser_main: 1 callbacks suppressed [ 924.569221][ T5687] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 924.580799][ T5687] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 925.606301][T12813] netlink: 'syz.3.1808': attribute type 6 has an invalid length. [ 926.367037][ T5700] usbhid 3-1:0.0: can't add hid device: -71 [ 926.367124][ T5700] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 926.369362][ T5700] usb 3-1: USB disconnect, device number 59 [ 926.530751][T12823] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20000 [ 926.531811][T12823] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1812'. [ 926.531838][T12823] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 926.532319][T12823] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1812'. [ 926.562183][ T2364] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 926.623415][T12826] ipip0: entered promiscuous mode [ 926.623431][T12826] ipip0: entered allmulticast mode [ 926.624548][T12826] team0: Device ipip0 is of different type [ 926.729047][ T2364] usb 5-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.40 [ 926.747703][ T2364] usb 5-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 926.747767][ T2364] usb 5-1: config 1 interface 0 has no altsetting 0 [ 926.788677][ T2364] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.788752][ T2364] usb 5-1: Product: syz [ 926.788782][ T2364] usb 5-1: Manufacturer: ģ³­ź·°ģ½‘锬莠䑙ģˆƒę–Øļ¾āˆ£ź»’ļ’›ė±¤ģ…¶ģˆ†īžœęŽ¤ļ„žķ†’怓į‹Æą»“ā­¼é¢“ź®¾ć™ę»į³ę±Œķ›•ź­Øī¤žź—®é¾“ėŒžę¬Øé ¤ģ§­ę„»å‚Æ隹įŽ©é¼¢ē“·ē˜Œģ¦¢ģŒ¼Ė™į—»ę½Æ蜖čæą°Æ蔙į‹—ļ¹­ė“’ć˜”ėŖ§č”¢ [ 926.788824][ T2364] usb 5-1: SerialNumber: syz [ 927.050338][T12649] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 927.817236][T12649] usb 2-1: Using ep0 maxpacket: 16 [ 928.811127][ T2364] usbhid 5-1:1.0: can't add hid device: -71 [ 928.811216][ T2364] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 928.827669][T12649] usb 2-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=5c.a8 [ 928.829007][T12649] usb 2-1: config 3 has an invalid interface number: 88 but max is 0 [ 928.829031][T12649] usb 2-1: config 3 has no interface number 0 [ 928.829057][T12649] usb 2-1: config 3 interface 88 has no altsetting 0 [ 928.840347][ T2364] usb 5-1: USB disconnect, device number 64 [ 928.886228][T12649] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.886254][T12649] usb 2-1: Product: syz [ 928.886267][T12649] usb 2-1: Manufacturer: syz [ 928.886281][T12649] usb 2-1: SerialNumber: syz [ 929.098867][T12841] Process accounting paused [ 929.136820][T12819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 929.137185][T12819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 929.152144][T12819] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1810'. [ 929.162591][T12819] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1810'. [ 929.162702][T12819] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1810'. [ 929.193256][T12649] kl5kusb105 2-1:3.88: KL5KUSB105D / PalmConnect converter detected [ 929.206858][T12649] usb 2-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 929.209001][T12649] usb 2-1: USB disconnect, device number 45 [ 929.211827][T12649] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 929.212499][T12649] kl5kusb105 2-1:3.88: device disconnected [ 929.227108][T12845] netlink: 'syz.2.1816': attribute type 4 has an invalid length. [ 930.952346][T12819] Process accounting paused [ 934.633780][T12860] Process accounting paused [ 936.651880][T12898] netlink: 'syz.0.1832': attribute type 6 has an invalid length. [ 937.171524][T12913] netlink: 'syz.1.1835': attribute type 39 has an invalid length. [ 941.425964][T12933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=12933 comm=syz.0.1840 [ 941.426055][T12933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=12933 comm=syz.0.1840 [ 941.426120][T12933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=12933 comm=syz.0.1840 [ 941.426182][T12933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=12933 comm=syz.0.1840 [ 941.427801][T12933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=12933 comm=syz.0.1840 [ 941.427826][T12933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2575 sclass=netlink_route_socket pid=12933 comm=syz.0.1840 [ 942.119242][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 942.119266][ T30] audit: type=1400 audit(1792737557.579:1583): avc: denied { write } for pid=12942 comm="syz.3.1845" name="cluster" dev="configfs" ino=1170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 942.306049][T12951] Process accounting paused [ 942.532438][T12955] netlink: 'syz.0.1843': attribute type 4 has an invalid length. [ 943.213772][T12961] binder: 12960:12961 ioctl 4018620d 0 returned -22 [ 943.248168][ T30] audit: type=1400 audit(1792737558.617:1584): avc: denied { create } for pid=12962 comm="syz.2.1850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 944.055283][T12963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1850'. [ 944.055546][T12963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1850'. [ 944.488036][T12975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=12975 comm=syz.2.1853 [ 944.488297][T12975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=12975 comm=syz.2.1853 [ 944.488411][T12975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=12975 comm=syz.2.1853 [ 944.488568][T12975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=12975 comm=syz.2.1853 [ 946.201883][T12997] siw: device registration error -23 [ 946.573598][T13001] FAULT_INJECTION: forcing a failure. [ 946.573598][T13001] name failslab, interval 1, probability 0, space 0, times 0 [ 946.573635][T13001] CPU: 1 UID: 0 PID: 13001 Comm: syz.3.1857 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 946.573669][T13001] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 946.573678][T13001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 946.573691][T13001] Call Trace: [ 946.573700][T13001] [ 946.573709][T13001] dump_stack_lvl+0x100/0x190 [ 946.573747][T13001] should_fail_ex.cold+0x5/0xa [ 946.573778][T13001] should_failslab+0xc2/0x120 [ 946.573811][T13001] __kmalloc_noprof+0xfc/0x840 [ 946.573838][T13001] ? handler_new_ref+0x1ab/0xc60 [ 946.573866][T13001] handler_new_ref+0x1ab/0xc60 [ 946.573894][T13001] v4l2_ctrl_new+0xe67/0x23a0 [ 946.573927][T13001] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 946.573963][T13001] v4l2_ctrl_new_std+0x1bb/0x290 [ 946.573994][T13001] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 946.574014][T13001] ? rcu_is_watching+0x13/0xc0 [ 946.574048][T13001] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 946.574084][T13001] ? media_request_object_init+0x105/0x180 [ 946.574121][T13001] vicodec_open+0x1b2/0xf70 [ 946.574144][T13001] ? kobject_get_unless_zero+0x156/0x200 [ 946.574181][T13001] v4l2_open+0x1d2/0x490 [ 946.574202][T13001] ? __pfx_v4l2_open+0x10/0x10 [ 946.574221][T13001] chrdev_open+0x234/0x6a0 [ 946.574252][T13001] ? __pfx_chrdev_open+0x10/0x10 [ 946.574283][T13001] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 946.574315][T13001] do_dentry_open+0x674/0x1470 [ 946.574343][T13001] ? __pfx_chrdev_open+0x10/0x10 [ 946.574397][T13001] vfs_open_consume+0xcc/0x460 [ 946.574434][T13001] path_openat+0x1547/0x23f0 [ 946.574475][T13001] ? __pfx_path_openat+0x10/0x10 [ 946.574516][T13001] do_file_open+0x20e/0x430 [ 946.574551][T13001] ? __pfx_do_file_open+0x10/0x10 [ 946.574604][T13001] ? _raw_spin_unlock+0x28/0x50 [ 946.574623][T13001] ? alloc_fd+0x471/0x7a0 [ 946.574662][T13001] do_sys_openat2+0x163/0x1d0 [ 946.574683][T13001] ? __pfx_do_sys_openat2+0x10/0x10 [ 946.574717][T13001] __x64_sys_openat+0x12d/0x210 [ 946.574739][T13001] ? __pfx___x64_sys_openat+0x10/0x10 [ 946.574771][T13001] do_syscall_64+0x123/0x790 [ 946.574798][T13001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.574819][T13001] RIP: 0033:0x7f849779f559 [ 946.574838][T13001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 946.574859][T13001] RSP: 002b:00007f84959d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 946.574882][T13001] RAX: ffffffffffffffda RBX: 00007f8497a26090 RCX: 00007f849779f559 [ 946.574896][T13001] RDX: 0000000000000002 RSI: 0000200000000700 RDI: ffffffffffffff9c [ 946.574911][T13001] RBP: 00007f8497836b20 R08: 0000000000000000 R09: 0000000000000000 [ 946.574923][T13001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 946.574936][T13001] R13: 00007f8497a26128 R14: 00007f8497a26090 R15: 00007ffdb9f4b368 [ 946.574965][T13001] [ 947.220779][T13008] syzkaller0: entered promiscuous mode [ 947.220803][T13008] syzkaller0: entered allmulticast mode [ 948.586805][T13018] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 948.586831][T13018] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 948.872209][ T2364] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 949.095070][ T2364] usb 5-1: Using ep0 maxpacket: 8 [ 949.095567][ T2364] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 949.096482][ T2364] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 949.096523][ T2364] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 949.096542][ T2364] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 949.096565][ T2364] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 949.096589][ T2364] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 949.096610][ T2364] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 949.096634][ T2364] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.252002][T12649] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 949.813928][ T2364] usb 5-1: usb_control_msg returned -32 [ 949.813971][ T2364] usbtmc 5-1:16.0: can't read capabilities [ 949.875350][T12649] usb 1-1: Using ep0 maxpacket: 16 [ 949.939180][T12649] usb 1-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=5c.a8 [ 949.941520][T12649] usb 1-1: config 3 has an invalid interface number: 88 but max is 0 [ 949.941537][T12649] usb 1-1: config 3 has no interface number 0 [ 949.941553][T12649] usb 1-1: config 3 interface 88 has no altsetting 0 [ 949.943335][T12649] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.943359][T12649] usb 1-1: Product: syz [ 949.943373][T12649] usb 1-1: Manufacturer: syz [ 949.943387][T12649] usb 1-1: SerialNumber: syz [ 950.217206][T13023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.217655][T13023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.266267][T13035] cramfs: checking physical address 0x000000002a2e0000 for linear cramfs image [ 950.266287][T13035] cramfs: wrong magic [ 950.266939][T13035] cramfs: wrong magic [ 950.279544][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 950.279602][T13035] usbtmc 5-1:16.0: Unable to send data, error -71 [ 950.365657][T13036] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5585] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[13036] [ 950.806722][T13023] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1868'. [ 950.807718][T13023] 9p: Bad value for 'rfdno' [ 950.811622][T12649] kl5kusb105 1-1:3.88: KL5KUSB105D / PalmConnect converter detected [ 950.836633][T12649] usb 1-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 950.853387][T12649] usb 1-1: USB disconnect, device number 63 [ 950.869576][T12649] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 950.872809][T12649] kl5kusb105 1-1:3.88: device disconnected [ 951.475498][ T2364] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 951.599244][T13053] Process accounting paused [ 951.635931][ T2364] usb 2-1: Using ep0 maxpacket: 16 [ 951.636461][ T2364] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 951.637375][ T2364] usb 2-1: config 1 interface 0 altsetting 179 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 951.637406][ T2364] usb 2-1: config 1 interface 0 has no altsetting 0 [ 951.639217][ T2364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.639239][ T2364] usb 2-1: Product: syz [ 951.639252][ T2364] usb 2-1: Manufacturer: syz [ 951.639266][ T2364] usb 2-1: SerialNumber: syz [ 951.646150][T13043] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 951.721998][T13072] overlay: filesystem on ./file0 not supported as upperdir [ 951.733551][ T5715] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 951.786572][T13035] Process accounting resumed [ 951.887435][ T5687] usb 5-1: USB disconnect, device number 65 [ 951.903155][ T5715] usb 1-1: Using ep0 maxpacket: 16 [ 951.904633][ T5715] usb 1-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=5c.a8 [ 951.905650][ T5715] usb 1-1: config 3 has an invalid interface number: 88 but max is 0 [ 951.905695][ T5715] usb 1-1: config 3 has no interface number 0 [ 951.905721][ T5715] usb 1-1: config 3 interface 88 has no altsetting 0 [ 951.907861][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.907890][ T5715] usb 1-1: Product: syz [ 951.907905][ T5715] usb 1-1: Manufacturer: syz [ 951.907921][ T5715] usb 1-1: SerialNumber: syz [ 951.950439][T13043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.950801][T13043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.182505][T13058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.182954][T13058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.018949][T13087] FAULT_INJECTION: forcing a failure. [ 953.018949][T13087] name failslab, interval 1, probability 0, space 0, times 0 [ 953.018982][T13087] CPU: 0 UID: 0 PID: 13087 Comm: syz.2.1877 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 953.019015][T13087] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 953.019024][T13087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 953.019040][T13087] Call Trace: [ 953.019048][T13087] [ 953.019057][T13087] dump_stack_lvl+0x100/0x190 [ 953.019093][T13087] should_fail_ex.cold+0x5/0xa [ 953.019124][T13087] should_failslab+0xc2/0x120 [ 953.019154][T13087] __kmalloc_cache_noprof+0x91/0x6d0 [ 953.019175][T13087] ? __pfx_sprintf+0x10/0x10 [ 953.019197][T13087] ? call_usermodehelper_setup+0xaf/0x360 [ 953.019230][T13087] ? __pfx_umh_keys_cleanup+0x10/0x10 [ 953.019260][T13087] call_usermodehelper_setup+0xaf/0x360 [ 953.019290][T13087] ? __pfx_umh_keys_init+0x10/0x10 [ 953.019320][T13087] call_sbin_request_key+0x6f5/0xd80 [ 953.019359][T13087] ? __pfx_call_sbin_request_key+0x10/0x10 [ 953.019388][T13087] ? key_instantiate_and_link+0x39d/0x4b0 [ 953.019420][T13087] ? key_alloc+0xbb4/0x1310 [ 953.019452][T13087] ? __pfx_key_instantiate_and_link+0x10/0x10 [ 953.019505][T13087] ? request_key_auth_new+0x72d/0xb40 [ 953.019538][T13087] ? __pfx_request_key_auth_new+0x10/0x10 [ 953.019578][T13087] ? __pfx_call_sbin_request_key+0x10/0x10 [ 953.019608][T13087] request_key_and_link+0x10c3/0x1360 [ 953.019642][T13087] ? __pfx_request_key_and_link+0x10/0x10 [ 953.019670][T13087] ? __pfx___might_resched+0x10/0x10 [ 953.019701][T13087] ? find_held_lock+0x2b/0x80 [ 953.019732][T13087] ? __pfx_key_default_cmp+0x10/0x10 [ 953.019753][T13087] ? __pfx_keyring_search_iterator+0x10/0x10 [ 953.019779][T13087] ? _copy_from_user+0x59/0xd0 [ 953.019820][T13087] __do_sys_request_key+0x2a2/0x3c0 [ 953.019848][T13087] ? __pfx___do_sys_request_key+0x10/0x10 [ 953.019884][T13087] do_syscall_64+0x123/0x790 [ 953.019911][T13087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.019932][T13087] RIP: 0033:0x7f24c9b9f559 [ 953.019950][T13087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 953.019970][T13087] RSP: 002b:00007f24ca990028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 953.019991][T13087] RAX: ffffffffffffffda RBX: 00007f24c9e25fa0 RCX: 00007f24c9b9f559 [ 953.020005][T13087] RDX: 00002000000003c0 RSI: 0000200000000380 RDI: 0000200000000280 [ 953.020018][T13087] RBP: 00007f24c9c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 953.020031][T13087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 953.020043][T13087] R13: 00007f24c9e26038 R14: 00007f24c9e25fa0 R15: 00007fff3f1976e8 [ 953.020072][T13087] [ 953.137542][T13058] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1873'. [ 953.238033][T13094] 9p: Bad value for 'rfdno' [ 953.255853][T13058] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1873'. [ 953.401967][ T5715] kl5kusb105 1-1:3.88: KL5KUSB105D / PalmConnect converter detected [ 953.485565][ T5715] usb 1-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 953.519775][ T5715] usb 1-1: USB disconnect, device number 64 [ 953.646158][ T5715] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 953.654640][ T5715] kl5kusb105 1-1:3.88: device disconnected [ 953.743837][ T2364] usb 2-1: No union descriptors [ 953.752036][ T2364] usb 2-1: USB disconnect, device number 46 [ 953.872475][T13103] netlink: zone id is out of range [ 953.971138][T13108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1879'. [ 953.971159][T13108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1879'. [ 955.145453][T13109] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1881'. [ 955.201745][ T30] audit: type=1400 audit(1792737569.814:1585): avc: denied { ioctl } for pid=13107 comm="syz.4.1881" path="socket:[39654]" dev="sockfs" ino=39654 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 955.240069][T13117] netlink: 'syz.3.1884': attribute type 6 has an invalid length. [ 955.421795][T13123] netlink: zone id is out of range [ 955.498113][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1885'. [ 955.498136][T13125] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1885'. [ 956.184319][T13132] netlink: 'syz.2.1887': attribute type 20 has an invalid length. [ 956.184368][T13132] netlink: 'syz.2.1887': attribute type 21 has an invalid length. [ 956.701538][T13134] netlink: zone id is out of range [ 956.763246][T13136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1888'. [ 956.763269][T13136] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1888'. [ 958.796073][T13150] FAULT_INJECTION: forcing a failure. [ 958.796073][T13150] name failslab, interval 1, probability 0, space 0, times 0 [ 958.796108][T13150] CPU: 1 UID: 0 PID: 13150 Comm: syz.0.1891 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 958.796139][T13150] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 958.796148][T13150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 958.796161][T13150] Call Trace: [ 958.796167][T13150] [ 958.796175][T13150] dump_stack_lvl+0x100/0x190 [ 958.796206][T13150] should_fail_ex.cold+0x5/0xa [ 958.796231][T13150] should_failslab+0xc2/0x120 [ 958.796258][T13150] __kmalloc_cache_noprof+0x91/0x6d0 [ 958.796288][T13150] ? raw_ioctl_init+0x164/0x850 [ 958.796315][T13150] raw_ioctl_init+0x164/0x850 [ 958.796339][T13150] ? __pfx_raw_ioctl_init+0x10/0x10 [ 958.796360][T13150] ? tomoyo_path_number_perm+0x188/0x580 [ 958.796410][T13150] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 958.796433][T13150] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 958.796466][T13150] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 958.796502][T13150] raw_ioctl+0x138a/0x2b80 [ 958.796531][T13150] ? __pfx_raw_ioctl+0x10/0x10 [ 958.796552][T13150] ? selinux_file_ioctl+0x1e0/0x290 [ 958.796579][T13150] ? selinux_file_ioctl+0x1e7/0x290 [ 958.796610][T13150] ? __pfx_raw_ioctl+0x10/0x10 [ 958.796632][T13150] __x64_sys_ioctl+0x18e/0x210 [ 958.796656][T13150] do_syscall_64+0x123/0x790 [ 958.796680][T13150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.796701][T13150] RIP: 0033:0x7feaac19f1eb [ 958.796720][T13150] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 958.796739][T13150] RSP: 002b:00007feaacfc9f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 958.796759][T13150] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007feaac19f1eb [ 958.796771][T13150] RDX: 00007feaacfcafd0 RSI: 0000000041015500 RDI: 0000000000000004 [ 958.796782][T13150] RBP: 00007feaacfcafd0 R08: 0000000000000001 R09: 00000000ffffffff [ 958.796794][T13150] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feaacfc9fa0 [ 958.796806][T13150] R13: 0000200000000480 R14: 0000000000000000 R15: 0000000000000000 [ 958.796834][T13150] [ 959.281754][T13164] netlink: zone id is out of range [ 959.371447][T13168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1895'. [ 959.371472][T13168] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1895'. [ 960.429961][T13171] 9p: Bad value for 'rfdno' [ 960.440141][T13171] 8021q: VLANs not supported on tunl0 [ 960.441250][T13172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1896'. [ 960.441262][T13172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 960.441273][T13172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 961.190394][T13172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 961.190416][T13172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 961.212722][T13172] batman_adv: batadv0: Removing interface: ip6gretap1 [ 962.069904][ T5701] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 963.250137][ T5701] usb 3-1: Invalid ep0 maxpacket: 32 [ 963.579530][ T5701] usb 3-1: new low-speed USB device number 61 using dummy_hcd [ 963.911919][T13194] Process accounting resumed [ 965.415729][T13150] Process accounting resumed [ 965.471102][T13208] netlink: zone id is out of range [ 965.588020][T13212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1904'. [ 965.588044][T13212] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1904'. [ 965.845585][T13222] netlink: 'syz.4.1907': attribute type 20 has an invalid length. [ 965.845632][T13222] netlink: 'syz.4.1907': attribute type 21 has an invalid length. [ 966.390826][ T5715] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 966.550629][ T5715] usb 5-1: Using ep0 maxpacket: 8 [ 966.551163][ T5715] usb 5-1: New USB device found, idVendor=0c16, idProduct=0003, bcdDevice= 0.00 [ 966.552328][ T5715] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 966.552347][ T5715] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 966.552363][ T5715] usb 5-1: config 0 interface 0 has no altsetting 0 [ 966.552380][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.558578][ T5715] usb 5-1: config 0 descriptor?? [ 967.026868][ T5715] input: HID 0c16:0003 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0C16:0003.0021/input/input36 [ 967.083845][ T5701] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 967.108035][ T5715] gyration 0003:0C16:0003.0021: input,hiddev0,hidraw0: USB HID v0.03 Device [HID 0c16:0003] on usb-dummy_hcd.4-1/input0 [ 967.265664][ T5701] usb 2-1: Using ep0 maxpacket: 32 [ 967.266414][ T5701] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 967.287349][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.287374][ T5701] usb 2-1: Product: syz [ 967.287388][ T5701] usb 2-1: Manufacturer: syz [ 967.287401][ T5701] usb 2-1: SerialNumber: syz [ 967.293081][ T5701] usb 2-1: config 0 descriptor?? [ 967.306673][ T5701] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 967.516410][ T5701] gspca_topro: reg_w err -71 [ 967.554941][ T5701] gspca_topro: Sensor soi763a [ 967.569738][ T5701] usb 2-1: USB disconnect, device number 47 [ 969.032859][T12649] usb 5-1: USB disconnect, device number 66 [ 969.063614][T13244] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 969.064642][T13251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1910'. [ 969.188029][T13254] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1912'. [ 969.188054][T13254] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1912'. [ 969.317107][ T5701] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 969.326292][ T5701] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 969.545823][T13266] netlink: 'syz.1.1914': attribute type 20 has an invalid length. [ 969.545869][T13266] netlink: 'syz.1.1914': attribute type 21 has an invalid length. [ 969.833735][T12649] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 969.991694][T12649] usb 2-1: Using ep0 maxpacket: 8 [ 969.993786][T12649] usb 2-1: New USB device found, idVendor=0c16, idProduct=0003, bcdDevice= 0.00 [ 969.996150][T12649] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 969.996182][T12649] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 969.996208][T12649] usb 2-1: config 0 interface 0 has no altsetting 0 [ 969.996234][T12649] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.009529][T12649] usb 2-1: config 0 descriptor?? [ 970.045099][ T5715] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 970.105283][T13271] binder: 13270:13271 ioctl 4018620d 0 returned -22 [ 970.215674][ T30] audit: type=1326 audit(1792737839.853:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13267 comm="syz.2.1917" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c9b9f559 code=0x7ffc0000 [ 970.215927][ T30] audit: type=1326 audit(1792737839.853:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13267 comm="syz.2.1917" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c9b9f559 code=0x7ffc0000 [ 970.248069][ T30] audit: type=1326 audit(1792737839.853:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13267 comm="syz.2.1917" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c9b9f559 code=0x7ffc0000 [ 970.248225][ T30] audit: type=1326 audit(1792737839.862:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13267 comm="syz.2.1917" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c9b9f559 code=0x7ffc0000 [ 970.261552][ T5715] usb 4-1: unable to get BOS descriptor or descriptor too short [ 970.261596][ T5715] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=86.b8 [ 970.266581][ T5715] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 970.268411][ T5715] usb 4-1: New USB device strings: Mfr=164, Product=146, SerialNumber=3 [ 970.268431][ T5715] usb 4-1: Product: syz [ 970.268445][ T5715] usb 4-1: Manufacturer: syz [ 970.268458][ T5715] usb 4-1: SerialNumber: syz [ 970.275122][ T30] audit: type=1326 audit(1792737839.918:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13267 comm="syz.2.1917" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c9b9f559 code=0x7ffc0000 [ 970.275161][ T30] audit: type=1326 audit(1792737839.918:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13267 comm="syz.2.1917" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f24c9b9f2c2 code=0x7ffc0000 [ 970.275193][ T30] audit: type=1326 audit(1792737839.918:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13267 comm="syz.2.1917" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f24c9b9f357 code=0x7ffc0000 [ 970.275225][ T30] audit: type=1326 audit(1792737839.918:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13267 comm="syz.2.1917" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f24c9b5c251 code=0x7ffc0000 [ 970.275257][ T30] audit: type=1326 audit(1792737839.918:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13267 comm="syz.2.1917" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f24c9ba0349 code=0x7ffc0000 [ 970.275288][ T30] audit: type=1326 audit(1792737839.918:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13267 comm="syz.2.1917" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f24c9b5c2bb code=0x7ffc0000 [ 970.550575][T12649] input: HID 0c16:0003 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0C16:0003.0023/input/input37 [ 970.623781][T12649] gyration 0003:0C16:0003.0023: input,hiddev0,hidraw0: USB HID v0.03 Device [HID 0c16:0003] on usb-dummy_hcd.1-1/input0 [ 970.724004][ T5715] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 970.724045][ T5715] dvb-usb: bulk message failed: -22 (2/0) [ 970.724060][ T5715] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 970.730516][ T5715] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 970.730556][ T5715] usb 4-1: media controller created [ 970.796780][ T5715] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 970.853233][ T5715] dvb-usb: bulk message failed: -22 (1/0) [ 970.853293][ T5715] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 970.866851][ T5715] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input38 [ 970.923012][ T5715] dvb-usb: schedule remote query interval to 50 msecs. [ 970.923035][ T5715] dvb-usb: bulk message failed: -22 (2/0) [ 970.923049][ T5715] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 970.954127][ T5715] usb 4-1: USB disconnect, device number 56 [ 971.425121][ T5715] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 971.580167][T13284] FAULT_INJECTION: forcing a failure. [ 971.580167][T13284] name fail_futex, interval 1, probability 0, space 0, times 1 [ 971.580201][T13284] CPU: 1 UID: 0 PID: 13284 Comm: syz.0.1920 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 971.580231][T13284] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 971.580239][T13284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 971.580251][T13284] Call Trace: [ 971.580258][T13284] [ 971.580266][T13284] dump_stack_lvl+0x100/0x190 [ 971.580304][T13284] should_fail_ex.cold+0x5/0xa [ 971.580331][T13284] get_futex_key+0x1c9/0x13e0 [ 971.580360][T13284] ? __pfx_get_futex_key+0x10/0x10 [ 971.580385][T13284] ? futex_wake+0x4ea/0x5e0 [ 971.580413][T13284] futex_wake+0xf4/0x5e0 [ 971.580431][T13284] ? futex_wait+0x11e/0x370 [ 971.580454][T13284] ? __pfx_futex_wake+0x10/0x10 [ 971.580479][T13284] ? __lock_acquire+0x5c0/0x1f40 [ 971.580501][T13284] ? ksys_write+0x190/0x250 [ 971.580529][T13284] do_futex+0x2b2/0x440 [ 971.580558][T13284] ? __pfx_do_futex+0x10/0x10 [ 971.580587][T13284] ? __fget_files+0x34/0x3d0 [ 971.580616][T13284] ? find_held_lock+0x2b/0x80 [ 971.580645][T13284] __x64_sys_futex+0x34f/0x4d0 [ 971.580678][T13284] ? __pfx___x64_sys_futex+0x10/0x10 [ 971.580717][T13284] do_syscall_64+0x123/0x790 [ 971.580742][T13284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.580764][T13284] RIP: 0033:0x7feaac19f559 [ 971.580782][T13284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 971.580800][T13284] RSP: 002b:00007feaacfcc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 971.580821][T13284] RAX: ffffffffffffffda RBX: 00007feaac425fa8 RCX: 00007feaac19f559 [ 971.580835][T13284] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007feaac425fac [ 971.580847][T13284] RBP: 00007feaac425fa0 R08: 0000000000000001 R09: 0000000000000000 [ 971.580860][T13284] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 971.580872][T13284] R13: 00007feaac426038 R14: 00007ffe24058240 R15: 00007ffe24058328 [ 971.580899][T13284] [ 971.916120][T13290] FAULT_INJECTION: forcing a failure. [ 971.916120][T13290] name failslab, interval 1, probability 0, space 0, times 0 [ 971.916152][T13290] CPU: 0 UID: 0 PID: 13290 Comm: syz.0.1923 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 971.916180][T13290] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 971.916189][T13290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 971.916200][T13290] Call Trace: [ 971.916207][T13290] [ 971.916215][T13290] dump_stack_lvl+0x100/0x190 [ 971.916247][T13290] should_fail_ex.cold+0x5/0xa [ 971.916276][T13290] should_failslab+0xc2/0x120 [ 971.916303][T13290] kmem_cache_alloc_noprof+0x92/0x6a0 [ 971.916329][T13290] ? vm_area_dup+0x27/0x9d0 [ 971.916362][T13290] vm_area_dup+0x27/0x9d0 [ 971.916394][T13290] __split_vma+0x19c/0x1de0 [ 971.916416][T13290] ? __lock_acquire+0x5c0/0x1f40 [ 971.916440][T13290] ? __pfx___split_vma+0x10/0x10 [ 971.916470][T13290] ? lock_acquire+0x1d1/0x380 [ 971.916489][T13290] ? is_bpf_text_address+0x25/0x1a0 [ 971.916519][T13290] vms_gather_munmap_vmas+0x1d2/0x1720 [ 971.916547][T13290] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 971.916565][T13290] ? mtree_range_walk+0x72b/0xb70 [ 971.916599][T13290] ? mas_walk+0x260/0x310 [ 971.916628][T13290] __mmap_region+0x4cc/0x32e0 [ 971.916647][T13290] ? ima_match_policy+0x8b8/0x23e0 [ 971.916666][T13290] ? ima_match_policy+0x8b8/0x23e0 [ 971.916684][T13290] ? __pfx___mmap_region+0x10/0x10 [ 971.916702][T13290] ? __lock_acquire+0x5c0/0x1f40 [ 971.916736][T13290] ? __pfx___might_resched+0x10/0x10 [ 971.916763][T13290] ? find_held_lock+0x2b/0x80 [ 971.916785][T13290] ? process_measurement+0x4c8/0x2350 [ 971.916812][T13290] ? down_write+0x141/0x1f0 [ 971.916845][T13290] ? __lock_acquire+0x5c0/0x1f40 [ 971.916869][T13290] ? __lock_acquire+0x5c0/0x1f40 [ 971.916933][T13290] mmap_region+0x3db/0x6d0 [ 971.916955][T13290] ? __pfx_mmap_region+0x10/0x10 [ 971.916976][T13290] ? shmem_mapping+0xd/0x50 [ 971.916996][T13290] ? __pfx_memfd_check_seals_mmap+0x10/0x10 [ 971.917014][T13290] ? bpf_lsm_mmap_addr+0x9/0x30 [ 971.917037][T13290] ? security_mmap_addr+0x71/0x1e0 [ 971.917053][T13290] ? __get_unmapped_area+0x255/0x3e0 [ 971.917081][T13290] do_mmap+0x12c7/0x1c30 [ 971.917109][T13290] ? lock_acquire+0x1d1/0x380 [ 971.917124][T13290] ? __pfx_do_mmap+0x10/0x10 [ 971.917150][T13290] ? __pfx___might_resched+0x10/0x10 [ 971.917175][T13290] ? bpf_lsm_current_getlsmprop_subj+0x9/0x10 [ 971.917192][T13290] ? security_current_getlsmprop_subj+0x6e/0x130 [ 971.917222][T13290] ? __pfx_down_write_killable+0x10/0x10 [ 971.917242][T13290] ? find_held_lock+0x2b/0x80 [ 971.917267][T13290] vm_mmap_pgoff+0x28d/0x470 [ 971.917295][T13290] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 971.917317][T13290] ? __fget_files+0x215/0x3d0 [ 971.917350][T13290] ? __fget_files+0x21f/0x3d0 [ 971.917384][T13290] ksys_mmap_pgoff+0x3cb/0x610 [ 971.917413][T13290] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 971.917435][T13290] ? fput+0x7c/0x100 [ 971.917461][T13290] ? ksys_write+0x1ac/0x250 [ 971.917485][T13290] ? __pfx_ksys_write+0x10/0x10 [ 971.917511][T13290] __x64_sys_mmap+0x125/0x190 [ 971.917537][T13290] do_syscall_64+0x123/0x790 [ 971.917561][T13290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.917580][T13290] RIP: 0033:0x7feaac19f559 [ 971.917596][T13290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 971.917614][T13290] RSP: 002b:00007feaacfcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 971.917638][T13290] RAX: ffffffffffffffda RBX: 00007feaac425fa0 RCX: 00007feaac19f559 [ 971.917651][T13290] RDX: 0000000002000008 RSI: 0000000000004000 RDI: 0000200000ffa000 [ 971.917663][T13290] RBP: 00007feaacfcc090 R08: 0000000000000003 R09: 00000000390b9000 [ 971.917675][T13290] R10: 0000000000020052 R11: 0000000000000246 R12: 0000000000000001 [ 971.917687][T13290] R13: 00007feaac426038 R14: 00007feaac425fa0 R15: 00007ffe24058328 [ 971.917715][T13290] [ 973.267441][ T5700] usb 2-1: USB disconnect, device number 48 [ 973.504974][T13306] siw: device registration error -23 [ 973.561637][T13315] netlink: 'syz.0.1930': attribute type 6 has an invalid length. [ 974.514074][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 974.514125][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 974.799437][T13317] Process accounting resumed [ 974.974203][T13323] netlink: 'syz.4.1929': attribute type 6 has an invalid length. [ 975.035632][T13327] netlink: zone id is out of range [ 975.700441][ T5687] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 975.735696][T13335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1931'. [ 975.735720][T13335] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1931'. [ 975.869415][ T5687] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 975.928642][ T5687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 975.928669][ T5687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.957796][ T5687] usb 4-1: config 0 descriptor?? [ 975.974557][ T5687] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 976.189127][T13310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.189323][T13310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.276956][ T30] kauditd_printk_skb: 95 callbacks suppressed [ 976.276968][ T30] audit: type=1400 audit(1792738357.530:1691): avc: denied { name_connect } for pid=13339 comm="syz.2.1934" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 976.383742][T12649] usb 4-1: USB disconnect, device number 57 [ 978.420457][T13359] CIFS: bad ip= option (:27.0.0.1) [ 978.604079][T13361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 979.176765][T13363] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1939'. [ 979.239335][T12649] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 979.400829][T12649] usb 3-1: Using ep0 maxpacket: 8 [ 979.402159][T12649] usb 3-1: New USB device found, idVendor=0c16, idProduct=0003, bcdDevice= 0.00 [ 979.403174][T12649] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 979.403203][T12649] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 979.403219][T12649] usb 3-1: config 0 interface 0 has no altsetting 0 [ 979.403236][T12649] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.421717][T12649] usb 3-1: config 0 descriptor?? [ 979.538399][ T5715] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 979.710047][ T5715] usb 5-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 979.710956][ T5715] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 979.710977][ T5715] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 979.711014][ T5715] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 15104, setting to 1024 [ 979.711039][ T5715] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 979.714909][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.714965][ T5715] usb 5-1: Product: syz [ 979.715033][ T5715] usb 5-1: Manufacturer: syz [ 979.715117][ T5715] usb 5-1: SerialNumber: syz [ 979.780924][T13381] SET target dimension over the limit! [ 980.162301][T13367] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 980.210066][T13382] tmpfs: Unknown parameter 'fd' [ 980.400955][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.403361][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.403446][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.403546][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.403646][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.403712][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.403812][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.403883][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.404019][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.404126][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.404189][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.408059][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.408407][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.408490][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.408547][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.408635][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.408693][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.408776][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.408862][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.408943][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.409000][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.411201][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.411266][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.411350][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.411408][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.411540][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.411628][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.411686][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.411764][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.411823][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.411947][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.412005][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.412088][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.412145][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.412231][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.412292][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.412388][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.412487][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.414745][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.414816][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.415173][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.415235][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.415315][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.416884][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.416952][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.417032][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.417557][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.417653][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.417712][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.417794][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.417852][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.417973][ T6545] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 980.758012][ T5701] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 980.918232][ T5701] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 980.930733][ T5701] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 980.930775][ T5701] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 980.930812][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.995907][ T5701] usb 2-1: config 0 descriptor?? [ 981.168036][ T5701] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 981.168100][ T5701] dvb-usb: bulk message failed: -22 (3/0) [ 981.428144][T12649] usbhid 3-1:0.0: can't add hid device: -71 [ 981.428220][T12649] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 981.444680][ T5701] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 981.445264][ T5701] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 981.445302][ T5701] usb 2-1: media controller created [ 981.446227][ T5701] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 981.450125][T12649] usb 3-1: USB disconnect, device number 62 [ 981.509096][ T5701] dvb-usb: bulk message failed: -22 (6/0) [ 981.509154][ T5701] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 981.520107][ T5701] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input39 [ 981.545328][ T5701] dvb-usb: schedule remote query interval to 150 msecs. [ 981.545350][ T5701] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 981.636153][ T5687] usb 5-1: USB disconnect, device number 67 [ 981.642679][ T5600] Bluetooth: hci5: CSR: Local version failed (-19) [ 981.653350][T13385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.653699][T13385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.710192][T12649] dvb-usb: bulk message failed: -22 (1/0) [ 981.710210][T12649] dvb-usb: error while querying for an remote control event. [ 981.880171][T12649] dvb-usb: bulk message failed: -22 (1/0) [ 981.880197][T12649] dvb-usb: error while querying for an remote control event. [ 982.050744][T12649] dvb-usb: bulk message failed: -22 (1/0) [ 982.050886][T12649] dvb-usb: error while querying for an remote control event. [ 982.245116][T12649] dvb-usb: bulk message failed: -22 (1/0) [ 982.518177][T13394] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1948'. [ 982.605081][T12649] dvb-usb: error while querying for an remote control event. [ 983.105943][ T5701] dvb-usb: bulk message failed: -22 (1/0) [ 983.105971][ T5701] dvb-usb: error while querying for an remote control event. [ 983.201240][T13408] netlink: 'syz.0.1952': attribute type 6 has an invalid length. [ 983.269895][ T5701] dvb-usb: bulk message failed: -22 (1/0) [ 983.269912][ T5701] dvb-usb: error while querying for an remote control event. [ 983.723975][ T5701] dvb-usb: bulk message failed: -22 (1/0) [ 983.723997][ T5701] dvb-usb: error while querying for an remote control event. [ 983.912432][ T5701] dvb-usb: bulk message failed: -22 (1/0) [ 983.912453][ T5701] dvb-usb: error while querying for an remote control event. [ 984.088035][ T5701] dvb-usb: bulk message failed: -22 (1/0) [ 984.088056][ T5701] dvb-usb: error while querying for an remote control event. [ 984.751313][T13412] Process accounting paused [ 984.762518][ T5701] dvb-usb: bulk message failed: -22 (1/0) [ 984.762581][ T5701] dvb-usb: error while querying for an remote control event. [ 984.926547][ T5701] dvb-usb: bulk message failed: -22 (1/0) [ 984.926621][ T5701] dvb-usb: error while querying for an remote control event. [ 985.201264][ T5701] dvb-usb: bulk message failed: -22 (1/0) [ 985.201338][ T5701] dvb-usb: error while querying for an remote control event. [ 985.314042][T13426] netlink: 'syz.2.1955': attribute type 20 has an invalid length. [ 985.314094][T13426] netlink: 'syz.2.1955': attribute type 21 has an invalid length. [ 985.848613][ T5701] dvb-usb: bulk message failed: -22 (1/0) [ 985.848645][ T5701] dvb-usb: error while querying for an remote control event. [ 986.695556][ T5701] dvb-usb: bulk message failed: -22 (1/0) [ 986.695576][ T5701] dvb-usb: error while querying for an remote control event. [ 986.695952][T12649] usb 2-1: USB disconnect, device number 49 [ 986.709517][T13409] Process accounting resumed [ 986.765270][ T5715] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 986.798237][T12649] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 987.086129][ T5715] usb 3-1: Using ep0 maxpacket: 8 [ 987.104237][ T5715] usb 3-1: New USB device found, idVendor=0c16, idProduct=0003, bcdDevice= 0.00 [ 987.109356][ T5715] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 987.109382][ T5715] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 987.109404][ T5715] usb 3-1: config 0 interface 0 has no altsetting 0 [ 987.109429][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.126152][ T5715] usb 3-1: config 0 descriptor?? [ 988.013071][ T5715] input: HID 0c16:0003 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0C16:0003.0024/input/input40 [ 989.191852][ T5715] gyration 0003:0C16:0003.0024: input,hiddev0,hidraw0: USB HID v0.03 Device [HID 0c16:0003] on usb-dummy_hcd.2-1/input0 [ 989.250295][ T5715] usb 3-1: USB disconnect, device number 63 [ 989.331786][ T30] audit: type=1400 audit(1792738624.944:1692): avc: denied { create } for pid=13435 comm="syz.1.1958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 989.332362][ T30] audit: type=1400 audit(1792738624.944:1693): avc: denied { ioctl } for pid=13435 comm="syz.1.1958" path="socket:[42026]" dev="sockfs" ino=42026 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 990.376150][T13441] fido_id[13441]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 990.396349][T13446] sit0: entered promiscuous mode [ 990.409932][T13446] netlink: 'syz.2.1960': attribute type 1 has an invalid length. [ 990.409948][T13446] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1960'. [ 990.937099][T13455] CIFS: bad ip= option (:27.0.0.1) [ 992.170088][ T30] audit: type=1400 audit(1792738628.396:1694): avc: denied { read } for pid=13474 comm="syz.4.1968" name="failed_transaction_log" dev="binder" ino=1048648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 992.170433][ T30] audit: type=1400 audit(1792738628.396:1695): avc: denied { open } for pid=13474 comm="syz.4.1968" path="/dev/binderfs/binder_logs/failed_transaction_log" dev="binder" ino=1048648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 992.241565][T13478] FAULT_INJECTION: forcing a failure. [ 992.241565][T13478] name failslab, interval 1, probability 0, space 0, times 0 [ 992.241601][T13478] CPU: 0 UID: 0 PID: 13478 Comm: syz.4.1968 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 992.241630][T13478] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 992.241638][T13478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 992.241650][T13478] Call Trace: [ 992.241657][T13478] [ 992.241666][T13478] dump_stack_lvl+0x100/0x190 [ 992.241700][T13478] should_fail_ex.cold+0x5/0xa [ 992.241728][T13478] should_failslab+0xc2/0x120 [ 992.241757][T13478] __kmalloc_noprof+0xfc/0x840 [ 992.241779][T13478] ? rcu_is_watching+0x13/0xc0 [ 992.241805][T13478] ? tomoyo_realpath_from_path+0xb6/0x690 [ 992.241831][T13478] tomoyo_realpath_from_path+0xb6/0x690 [ 992.241857][T13478] tomoyo_path_number_perm+0x23c/0x580 [ 992.241884][T13478] ? tomoyo_path_number_perm+0x22e/0x580 [ 992.241913][T13478] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 992.241950][T13478] ? __lock_acquire+0x5c0/0x1f40 [ 992.241985][T13478] ? __fget_files+0x34/0x3d0 [ 992.242013][T13478] ? find_held_lock+0x2b/0x80 [ 992.242039][T13478] ? hook_file_ioctl_common+0x140/0x440 [ 992.242067][T13478] ? __fget_files+0x21f/0x3d0 [ 992.242099][T13478] security_file_ioctl+0xd3/0x230 [ 992.242129][T13478] __x64_sys_ioctl+0xb7/0x210 [ 992.242156][T13478] do_syscall_64+0x123/0x790 [ 992.242182][T13478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.242202][T13478] RIP: 0033:0x7f742f79f559 [ 992.242220][T13478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 992.242238][T13478] RSP: 002b:00007f743067a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 992.242257][T13478] RAX: ffffffffffffffda RBX: 00007f742fa26090 RCX: 00007f742f79f559 [ 992.242270][T13478] RDX: 0000200000000080 RSI: 0000000040187542 RDI: 0000000000000003 [ 992.242289][T13478] RBP: 00007f743067a090 R08: 0000000000000000 R09: 0000000000000000 [ 992.242301][T13478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 992.242313][T13478] R13: 00007f742fa26128 R14: 00007f742fa26090 R15: 00007ffc25d49d48 [ 992.242343][T13478] [ 992.242351][T13478] ERROR: Out of memory at tomoyo_realpath_from_path. [ 992.281903][T13480] netlink: zone id is out of range [ 992.281916][T13480] netlink: zone id is out of range [ 992.343651][T13483] FAULT_INJECTION: forcing a failure. [ 992.343651][T13483] name failslab, interval 1, probability 0, space 0, times 0 [ 992.343685][T13483] CPU: 1 UID: 0 PID: 13483 Comm: syz.3.1970 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 992.343717][T13483] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 992.343726][T13483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 992.343738][T13483] Call Trace: [ 992.343744][T13483] [ 992.343752][T13483] dump_stack_lvl+0x100/0x190 [ 992.343782][T13483] should_fail_ex.cold+0x5/0xa [ 992.343807][T13483] should_failslab+0xc2/0x120 [ 992.343839][T13483] __kmalloc_noprof+0xfc/0x840 [ 992.343863][T13483] ? constrain_params_by_rules+0x175/0xd20 [ 992.343896][T13483] constrain_params_by_rules+0x175/0xd20 [ 992.343923][T13483] ? kfree+0x22b/0x6d0 [ 992.343947][T13483] ? constrain_params_by_rules+0xa88/0xd20 [ 992.343975][T13483] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 992.344007][T13483] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 992.344048][T13483] snd_pcm_hw_refine+0x82a/0xb40 [ 992.344078][T13483] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 992.344102][T13483] ? snd_pcm_hw_refine+0x35c/0xb40 [ 992.344131][T13483] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 992.344166][T13483] snd_pcm_hw_param_first+0x2b0/0x680 [ 992.344199][T13483] snd_pcm_hw_params+0x45c/0x1cd0 [ 992.344222][T13483] ? do_raw_spin_lock+0x128/0x260 [ 992.344246][T13483] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 992.344271][T13483] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 992.344290][T13483] ? lockdep_hardirqs_on+0x7d/0x110 [ 992.344309][T13483] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 992.344330][T13483] snd_pcm_kernel_ioctl+0x104/0x280 [ 992.344351][T13483] snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 992.344391][T13483] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 992.344440][T13483] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 992.344469][T13483] snd_pcm_oss_sync+0x265/0x840 [ 992.344490][T13483] snd_pcm_oss_release+0x238/0x300 [ 992.344507][T13483] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 992.344525][T13483] __fput+0x3fb/0xb50 [ 992.344557][T13483] fput_close_sync+0x118/0x250 [ 992.344575][T13483] ? __pfx_fput_close_sync+0x10/0x10 [ 992.344600][T13483] filp_close_sync+0x75/0xa0 [ 992.344619][T13483] __x64_sys_close+0x81/0x110 [ 992.344637][T13483] do_syscall_64+0x123/0x790 [ 992.344661][T13483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.344679][T13483] RIP: 0033:0x7f849779f559 [ 992.344695][T13483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 992.344712][T13483] RSP: 002b:00007f84959f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 992.344730][T13483] RAX: ffffffffffffffda RBX: 00007f8497a25fa0 RCX: 00007f849779f559 [ 992.344742][T13483] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 992.344753][T13483] RBP: 00007f8497836b20 R08: 0000000000000000 R09: 0000000000000000 [ 992.344764][T13483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 992.344774][T13483] R13: 00007f8497a26038 R14: 00007f8497a25fa0 R15: 00007ffdb9f4b368 [ 992.344800][T13483] [ 992.357173][ T30] audit: type=1400 audit(1792738628.555:1696): avc: denied { write } for pid=13482 comm="syz.3.1970" name="rpc" dev="proc" ino=4026533557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 992.366503][ T30] audit: type=1400 audit(1792738628.574:1697): avc: denied { remount } for pid=13482 comm="syz.3.1970" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 992.425202][T13484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1969'. [ 992.425228][T13484] FAULT_INJECTION: forcing a failure. [ 992.425228][T13484] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 992.425254][T13484] CPU: 1 UID: 0 PID: 13484 Comm: syz.2.1969 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 992.425281][T13484] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 992.425289][T13484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 992.425301][T13484] Call Trace: [ 992.425308][T13484] [ 992.425315][T13484] dump_stack_lvl+0x100/0x190 [ 992.425349][T13484] should_fail_ex.cold+0x5/0xa [ 992.425370][T13484] ? prepare_alloc_pages+0x16d/0x5b0 [ 992.425400][T13484] should_fail_alloc_page+0xeb/0x140 [ 992.425428][T13484] prepare_alloc_pages+0x1f0/0x5b0 [ 992.425459][T13484] __alloc_frozen_pages_noprof+0x1e8/0x32e0 [ 992.425484][T13484] ? panic_on_this_cpu+0x32/0x40 [ 992.425504][T13484] ? _prb_read_valid+0x72a/0x880 [ 992.425525][T13484] ? format_decode+0x1ad/0xdd0 [ 992.425553][T13484] ? __pfx_format_decode+0x10/0x10 [ 992.425580][T13484] ? __pfx__prb_read_valid+0x10/0x10 [ 992.425600][T13484] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 992.425636][T13484] ? desc_update_last_finalized+0x15d/0x1d0 [ 992.425660][T13484] ? printk_parse_prefix+0x66/0x250 [ 992.425688][T13484] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 992.425714][T13484] ? policy_nodemask+0xed/0x4f0 [ 992.425744][T13484] alloc_pages_mpol+0x201/0x550 [ 992.425773][T13484] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 992.425800][T13484] ? tick_nohz_tick_stopped+0x6c/0xa0 [ 992.425831][T13484] ? __pfx_mac80211_hwsim_link_info_changed+0x10/0x10 [ 992.425858][T13484] ___kmalloc_large_node+0xe8/0x130 [ 992.425888][T13484] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 992.425913][T13484] __kmalloc_large_node_noprof+0x1c/0x70 [ 992.425942][T13484] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 992.425964][T13484] __kmalloc_noprof+0x5a3/0x840 [ 992.425986][T13484] ? irq_work_queue+0xd1/0x100 [ 992.426010][T13484] ? wiphy_new_nm+0x701/0x2350 [ 992.426036][T13484] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 992.426058][T13484] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 992.426079][T13484] ? __pfx_mac80211_hwsim_link_info_changed+0x10/0x10 [ 992.426103][T13484] wiphy_new_nm+0x701/0x2350 [ 992.426127][T13484] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 992.426149][T13484] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 992.426169][T13484] ? __pfx_mac80211_hwsim_link_info_changed+0x10/0x10 [ 992.426192][T13484] ieee80211_alloc_hw_nm+0x1b2e/0x2310 [ 992.426213][T13484] ? __local_bh_enable_ip+0xa5/0x120 [ 992.426234][T13484] mac80211_hwsim_new_radio+0x1de/0x6510 [ 992.426259][T13484] ? __pfx__printk+0x10/0x10 [ 992.426276][T13484] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 992.426303][T13484] ? rcu_is_watching+0x13/0xc0 [ 992.426328][T13484] ? do_trace_netlink_extack+0x72/0x1e0 [ 992.426349][T13484] ? __nla_validate_parse+0x1e7/0x28b0 [ 992.426377][T13484] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 992.426409][T13484] hwsim_new_radio_nl+0xc6b/0x13f0 [ 992.426437][T13484] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 992.426470][T13484] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 992.426495][T13484] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 992.426527][T13484] genl_family_rcv_msg_doit+0x214/0x300 [ 992.426555][T13484] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 992.426589][T13484] ? bpf_lsm_capable+0x9/0x10 [ 992.426605][T13484] ? security_capable+0x80/0x260 [ 992.426628][T13484] ? ns_capable+0xcd/0xf0 [ 992.426656][T13484] genl_rcv_msg+0x560/0x800 [ 992.426684][T13484] ? __pfx_genl_rcv_msg+0x10/0x10 [ 992.426708][T13484] ? __lock_acquire+0x5c0/0x1f40 [ 992.426727][T13484] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 992.426761][T13484] netlink_rcv_skb+0x159/0x420 [ 992.426784][T13484] ? __pfx_genl_rcv_msg+0x10/0x10 [ 992.426814][T13484] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 992.426847][T13484] ? netlink_deliver_tap+0x1ae/0xcc0 [ 992.426873][T13484] genl_rcv+0x28/0x40 [ 992.426895][T13484] netlink_unicast+0x65f/0x950 [ 992.426922][T13484] ? __pfx_netlink_unicast+0x10/0x10 [ 992.426954][T13484] netlink_sendmsg+0x9ac/0x10c0 [ 992.426984][T13484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 992.427015][T13484] ? selinux_socket_sendmsg+0x198/0x2f0 [ 992.427043][T13484] ? ____sys_sendmsg+0xa4d/0xbe0 [ 992.427061][T13484] ____sys_sendmsg+0xa4d/0xbe0 [ 992.427079][T13484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 992.427103][T13484] ? __pfx_____sys_sendmsg+0x10/0x10 [ 992.427134][T13484] ___sys_sendmsg+0x190/0x1e0 [ 992.427155][T13484] ? __pfx____sys_sendmsg+0x10/0x10 [ 992.427174][T13484] ? futex_wait+0x11e/0x370 [ 992.427202][T13484] ? find_held_lock+0x2b/0x80 [ 992.427243][T13484] __sys_sendmsg+0x160/0x210 [ 992.427267][T13484] ? __pfx___sys_sendmsg+0x10/0x10 [ 992.427306][T13484] do_syscall_64+0x123/0x790 [ 992.427329][T13484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.427348][T13484] RIP: 0033:0x7f24c9b9f559 [ 992.427365][T13484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 992.427382][T13484] RSP: 002b:00007f24c7df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 992.427400][T13484] RAX: ffffffffffffffda RBX: 00007f24c9e26090 RCX: 00007f24c9b9f559 [ 992.427413][T13484] RDX: 0000000000000004 RSI: 0000200000000240 RDI: 000000000000000d [ 992.427423][T13484] RBP: 00007f24c9c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 992.427434][T13484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 992.427445][T13484] R13: 00007f24c9e26128 R14: 00007f24c9e26090 R15: 00007fff3f1976e8 [ 992.427474][T13484] [ 994.529688][T13494] selinux_netlink_send: 2 callbacks suppressed [ 994.529702][T13494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=13494 comm=syz.0.1976 [ 994.529715][T13494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=13494 comm=syz.0.1976 [ 994.529727][T13494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=13494 comm=syz.0.1976 [ 994.529738][T13494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=13494 comm=syz.0.1976 [ 994.529750][T13494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=13494 comm=syz.0.1976 [ 994.529761][T13494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2575 sclass=netlink_route_socket pid=13494 comm=syz.0.1976 [ 996.212087][T13504] Process accounting paused [ 996.244827][T13505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1975'. [ 996.244851][T13505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1975'. [ 996.451072][ T5700] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 996.999856][ T5700] usb 1-1: unable to get BOS descriptor or descriptor too short [ 996.999903][ T5700] usb 1-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice=73.9f [ 997.001803][ T5700] usb 1-1: config 2 has an invalid interface number: 69 but max is 0 [ 997.001830][ T5700] usb 1-1: config 2 has no interface number 0 [ 997.001857][ T5700] usb 1-1: config 2 interface 69 has no altsetting 0 [ 997.005723][ T5700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.005758][ T5700] usb 1-1: Product: syz [ 997.005772][ T5700] usb 1-1: Manufacturer: syz [ 997.005784][ T5700] usb 1-1: SerialNumber: syz [ 998.007543][T13528] FAULT_INJECTION: forcing a failure. [ 998.007543][T13528] name failslab, interval 1, probability 0, space 0, times 0 [ 998.007568][T13528] CPU: 1 UID: 0 PID: 13528 Comm: syz.4.1983 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 998.007587][T13528] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 998.007593][T13528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 998.007601][T13528] Call Trace: [ 998.007606][T13528] [ 998.007612][T13528] dump_stack_lvl+0x100/0x190 [ 998.007637][T13528] should_fail_ex.cold+0x5/0xa [ 998.007654][T13528] should_failslab+0xc2/0x120 [ 998.007674][T13528] __kmalloc_cache_noprof+0x91/0x6d0 [ 998.007689][T13528] ? raw_ioctl_init+0x164/0x850 [ 998.007705][T13528] raw_ioctl_init+0x164/0x850 [ 998.007719][T13528] ? __pfx_raw_ioctl_init+0x10/0x10 [ 998.007732][T13528] ? tomoyo_path_number_perm+0x188/0x580 [ 998.007761][T13528] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 998.007775][T13528] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 998.007797][T13528] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 998.007820][T13528] raw_ioctl+0x138a/0x2b80 [ 998.007837][T13528] ? __pfx_raw_ioctl+0x10/0x10 [ 998.007849][T13528] ? selinux_file_ioctl+0x1e0/0x290 [ 998.007867][T13528] ? selinux_file_ioctl+0x1e7/0x290 [ 998.007887][T13528] ? __pfx_raw_ioctl+0x10/0x10 [ 998.007902][T13528] __x64_sys_ioctl+0x18e/0x210 [ 998.007918][T13528] do_syscall_64+0x123/0x790 [ 998.007933][T13528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.007946][T13528] RIP: 0033:0x7f742f79f1eb [ 998.007960][T13528] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 998.007972][T13528] RSP: 002b:00007f7430698f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 998.007985][T13528] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f742f79f1eb [ 998.007993][T13528] RDX: 00007f7430699fd0 RSI: 0000000041015500 RDI: 0000000000000004 [ 998.008000][T13528] RBP: 00007f7430699fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 998.008007][T13528] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7430698fa0 [ 998.008014][T13528] R13: 0000200000000480 R14: 0000000000000000 R15: 0000000000000000 [ 998.008031][T13528] [ 998.501755][ T5700] snd_usb_podhd 1-1:2.69: Line 6 POD HD300 found [ 998.557649][ T2364] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 998.563741][T13532] netlink: zone id is out of range [ 998.626693][T13534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1985'. [ 998.626719][T13534] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1985'. [ 998.714746][ T5700] snd_usb_podhd 1-1:2.69: cannot get proper max packet size [ 998.715019][ T5700] snd_usb_podhd 1-1:2.69: Line 6 POD HD300 now disconnected [ 998.717346][ T2364] usb 3-1: Using ep0 maxpacket: 8 [ 998.725846][ T30] audit: type=1400 audit(1792738634.523:1698): avc: denied { create } for pid=13535 comm="syz.4.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 998.728434][ T2364] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 998.729317][ T2364] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 998.729355][ T2364] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 998.729379][ T2364] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 998.729400][ T2364] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 998.729423][ T2364] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 998.729444][ T2364] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 998.729478][ T2364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.810192][ T5700] snd_usb_podhd 1-1:2.69: probe with driver snd_usb_podhd failed with error -22 [ 998.970781][T13543] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=13543 comm=syz.4.1988 [ 998.970817][T13543] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=13543 comm=syz.4.1988 [ 998.970844][T13543] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=13543 comm=syz.4.1988 [ 998.970863][T13543] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=13543 comm=syz.4.1988 [ 999.190233][ T5700] usb 1-1: USB disconnect, device number 65 [ 999.802211][ T2364] usb 3-1: usb_control_msg returned -32 [ 999.802254][ T2364] usbtmc 3-1:16.0: can't read capabilities [ 1000.108211][T13511] Process accounting paused [ 1001.152723][T13546] cramfs: checking physical address 0x000000002a2e0000 for linear cramfs image [ 1001.152748][T13546] cramfs: wrong magic [ 1001.153488][T13546] cramfs: wrong magic [ 1001.174281][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1001.175843][T13546] usbtmc 3-1:16.0: Unable to send data, error -71 [ 1001.796677][T13559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1992'. [ 1002.549042][T13582] netlink: Failed to add helper -22 [ 1002.549088][T13582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1002.554089][T13582] tipc: Started in network mode [ 1002.554107][T13582] tipc: Node identity 4, cluster identity 4711 [ 1002.554118][T13582] tipc: Node number set to 4 [ 1002.582628][T13582] tipc: Enabled bearer , priority 0 [ 1002.587098][ T30] audit: type=1400 audit(1792738638.133:1699): avc: denied { bind } for pid=13581 comm="syz.0.1997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1002.615491][ T30] audit: type=1400 audit(1792738638.171:1700): avc: denied { name_bind } for pid=13581 comm="syz.0.1997" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1002.616287][ T30] audit: type=1400 audit(1792738638.171:1701): avc: denied { node_bind } for pid=13581 comm="syz.0.1997" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1002.670534][ T30] audit: type=1400 audit(1792738638.218:1702): avc: denied { mount } for pid=13581 comm="syz.0.1997" name="/" dev="pstore" ino=3616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 1002.885936][T13547] Process accounting resumed [ 1002.916682][T13590] CIFS: bad ip= option (:27.0.0.1) [ 1003.529237][ T5687] usb 3-1: USB disconnect, device number 64 [ 1003.584001][ T30] audit: type=1400 audit(1792738639.078:1703): avc: denied { unmount } for pid=5589 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 1005.014105][ T5700] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 1005.036431][ T5701] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1005.517373][ T5700] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1005.663701][ T5701] usb 4-1: Using ep0 maxpacket: 16 [ 1005.664161][ T5700] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.664175][ T5700] usb 3-1: config 0 has no interfaces? [ 1005.695689][ T5701] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1005.707916][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.707933][ T5700] usb 3-1: Product: syz [ 1005.707942][ T5700] usb 3-1: Manufacturer: syz [ 1005.707951][ T5700] usb 3-1: SerialNumber: syz [ 1005.716756][ T5701] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1005.716776][ T5701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1005.743485][ T5700] usb 3-1: config 0 descriptor?? [ 1005.761211][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.761236][ T5701] usb 4-1: Product: syz [ 1005.761251][ T5701] usb 4-1: Manufacturer: syz [ 1005.761267][ T5701] usb 4-1: SerialNumber: syz [ 1005.785866][ T5701] usb 4-1: config 0 descriptor?? [ 1005.792256][ T5701] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1005.792292][ T5701] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1006.107981][ T5700] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 1006.298392][T13627] netlink: 'syz.0.2009': attribute type 4 has an invalid length. [ 1006.853398][ T5701] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1006.854106][ T5701] em28xx 4-1:0.0: Config register raw data: 0xf7 [ 1006.854126][ T5701] em28xx 4-1:0.0: I2S Audio (3 sample rate(s)) [ 1006.854136][ T5701] em28xx 4-1:0.0: No AC97 audio processor [ 1006.864840][ T5700] usb 2-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=32.fe [ 1006.879536][ T5700] usb 2-1: config 16 has an invalid interface number: 125 but max is 2 [ 1006.879560][ T5700] usb 2-1: config 16 has an invalid interface number: 213 but max is 2 [ 1006.879579][ T5700] usb 2-1: config 16 contains an unexpected descriptor of type 0x2, skipping [ 1006.879597][ T5700] usb 2-1: config 16 has an invalid interface number: 217 but max is 2 [ 1006.879615][ T5700] usb 2-1: config 16 has 4 interfaces, different from the descriptor's value: 3 [ 1006.879771][ T5700] usb 2-1: config 16 has no interface number 0 [ 1006.879805][ T5700] usb 2-1: config 16 has no interface number 2 [ 1006.879820][ T5700] usb 2-1: config 16 has no interface number 3 [ 1006.879870][ T5700] usb 2-1: config 16 interface 125 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1006.879889][ T5700] usb 2-1: config 16 interface 125 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1006.879912][ T5700] usb 2-1: too many endpoints for config 16 interface 213 altsetting 198: 187, using maximum allowed: 30 [ 1006.879957][ T5700] usb 2-1: config 16 interface 213 altsetting 198 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 1006.879978][ T5700] usb 2-1: config 16 interface 213 altsetting 198 endpoint 0x8C has invalid maxpacket 63591, setting to 64 [ 1006.879999][ T5700] usb 2-1: config 16 interface 213 altsetting 198 has 1 endpoint descriptor, different from the interface descriptor's value: 187 [ 1006.880029][ T5700] usb 2-1: config 16 interface 1 altsetting 2 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1006.880048][ T5700] usb 2-1: config 16 interface 1 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1006.880066][ T5700] usb 2-1: config 16 interface 1 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 1006.880099][ T5700] usb 2-1: config 16 interface 1 altsetting 2 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1006.880125][ T5700] usb 2-1: config 16 interface 1 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1006.880142][ T5700] usb 2-1: config 16 interface 1 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 1006.880202][ T5700] usb 2-1: config 16 interface 1 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 1006.880220][ T5700] usb 2-1: config 16 interface 1 altsetting 2 endpoint 0x3 has invalid maxpacket 1024, setting to 1023 [ 1006.880258][ T5700] usb 2-1: config 16 interface 1 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1006.880276][ T5700] usb 2-1: config 16 interface 1 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 1006.880295][ T5700] usb 2-1: config 16 interface 213 has no altsetting 0 [ 1006.880311][ T5700] usb 2-1: config 16 interface 1 has no altsetting 0 [ 1006.880327][ T5700] usb 2-1: config 16 interface 217 has no altsetting 0 [ 1006.916516][ T5700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.916560][ T5700] usb 2-1: Product: syz [ 1006.916575][ T5700] usb 2-1: Manufacturer: syz [ 1006.916589][ T5700] usb 2-1: SerialNumber: syz [ 1007.014656][T13608] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1007.152292][ T5809] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1007.295747][ T5700] usb 2-1: invalid MIDI EP [ 1007.295761][ T5700] usb 2-1: snd-bcd2000: error during probing [ 1007.308487][ T5700] snd-bcd2000 2-1:16.125: probe with driver snd-bcd2000 failed with error -22 [ 1007.312610][ T5809] usb 5-1: Using ep0 maxpacket: 32 [ 1007.314939][ T5809] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1007.321360][ T5809] usb 5-1: language id specifier not provided by device, defaulting to English [ 1007.349507][ T5701] usb 4-1: USB disconnect, device number 58 [ 1007.374567][T13635] FAULT_INJECTION: forcing a failure. [ 1007.374567][T13635] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.374604][T13635] CPU: 0 UID: 0 PID: 13635 Comm: syz.0.2012 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1007.374635][T13635] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1007.374644][T13635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1007.374655][T13635] Call Trace: [ 1007.374662][T13635] [ 1007.374670][T13635] dump_stack_lvl+0x100/0x190 [ 1007.374704][T13635] should_fail_ex.cold+0x5/0xa [ 1007.374733][T13635] should_failslab+0xc2/0x120 [ 1007.374773][T13635] __kmalloc_node_noprof+0xff/0x870 [ 1007.374799][T13635] ? __get_vm_area_node+0x1ff/0x350 [ 1007.374824][T13635] ? __get_vm_area_node+0x22b/0x350 [ 1007.374849][T13635] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 1007.374882][T13635] __vmalloc_node_range_noprof+0x3d4/0x1420 [ 1007.374917][T13635] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1007.374943][T13635] ? lz4_alloc_ctx+0x14/0x40 [ 1007.374979][T13635] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1007.375006][T13635] ? mark_held_locks+0x40/0x70 [ 1007.375027][T13635] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1007.375047][T13635] ? rcu_is_watching+0x13/0xc0 [ 1007.375072][T13635] ? pcpu_alloc_noprof+0xf00/0x1e50 [ 1007.375095][T13635] ? lz4_alloc_ctx+0x14/0x40 [ 1007.375122][T13635] __vmalloc_node_noprof+0xad/0xf0 [ 1007.375150][T13635] ? lz4_alloc_ctx+0x14/0x40 [ 1007.375183][T13635] lz4_alloc_ctx+0x14/0x40 [ 1007.375211][T13635] crypto_acomp_alloc_streams+0xab/0x470 [ 1007.375240][T13635] crypto_scomp_init_tfm+0x4e/0x1b0 [ 1007.375265][T13635] crypto_create_tfm_node+0x171/0x3b0 [ 1007.375291][T13635] crypto_init_scomp_ops_async+0x5d/0x170 [ 1007.375322][T13635] crypto_acomp_init_tfm+0x303/0x3b0 [ 1007.375348][T13635] crypto_create_tfm_node+0x171/0x3b0 [ 1007.375372][T13635] crypto_alloc_tfm_node+0x102/0x260 [ 1007.375398][T13635] ? __pfx_zswap_cpu_comp_prepare+0x10/0x10 [ 1007.375416][T13635] zswap_cpu_comp_prepare+0x15f/0x460 [ 1007.375438][T13635] cpuhp_invoke_callback+0x205/0x9a0 [ 1007.375469][T13635] ? __pfx_zswap_cpu_comp_prepare+0x10/0x10 [ 1007.375493][T13635] cpuhp_issue_call+0x1b8/0x970 [ 1007.375527][T13635] __cpuhp_state_add_instance_cpuslocked+0x2d7/0x400 [ 1007.375554][T13635] __cpuhp_state_add_instance+0xd5/0x2d0 [ 1007.375579][T13635] zswap_pool_create+0x289/0x670 [ 1007.375598][T13635] ? __pfx_zswap_pool_create+0x10/0x10 [ 1007.375616][T13635] ? lock_acquire+0x1d1/0x380 [ 1007.375643][T13635] ? __local_bh_enable_ip+0xa5/0x120 [ 1007.375665][T13635] zswap_compressor_param_set+0x51f/0x9d0 [ 1007.375692][T13635] param_attr_store+0x199/0x300 [ 1007.375715][T13635] ? __pfx_param_attr_store+0x10/0x10 [ 1007.375735][T13635] module_attr_store+0x58/0x80 [ 1007.375773][T13635] ? __pfx_module_attr_store+0x10/0x10 [ 1007.375803][T13635] sysfs_kf_write+0xf2/0x150 [ 1007.375836][T13635] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1007.375860][T13635] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1007.375890][T13635] vfs_write+0x6af/0x1050 [ 1007.375915][T13635] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1007.375943][T13635] ? __pfx_vfs_write+0x10/0x10 [ 1007.375964][T13635] ? find_held_lock+0x2b/0x80 [ 1007.376009][T13635] ksys_write+0x12a/0x250 [ 1007.376031][T13635] ? __pfx_ksys_write+0x10/0x10 [ 1007.376065][T13635] do_syscall_64+0x123/0x790 [ 1007.376092][T13635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.376113][T13635] RIP: 0033:0x7feaac19f559 [ 1007.376132][T13635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1007.376151][T13635] RSP: 002b:00007feaacfcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1007.376173][T13635] RAX: ffffffffffffffda RBX: 00007feaac425fa0 RCX: 00007feaac19f559 [ 1007.376188][T13635] RDX: 0000000000000003 RSI: 00002000000005c0 RDI: 0000000000000007 [ 1007.376201][T13635] RBP: 00007feaac236b20 R08: 0000000000000000 R09: 0000000000000000 [ 1007.376213][T13635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1007.376225][T13635] R13: 00007feaac426038 R14: 00007feaac425fa0 R15: 00007ffe24058328 [ 1007.376255][T13635] [ 1007.378305][ T5700] usb 2-1: invalid MIDI EP [ 1007.378321][ T5700] usb 2-1: snd-bcd2000: error during probing [ 1007.381508][ T5700] snd-bcd2000 2-1:16.213: probe with driver snd-bcd2000 failed with error -22 [ 1007.411682][T13635] syz.0.2012: vmalloc error: size 20480, failed to allocated page array size 40, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1007.411929][T13635] CPU: 1 UID: 0 PID: 13635 Comm: syz.0.2012 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1007.411959][T13635] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1007.411968][T13635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1007.411981][T13635] Call Trace: [ 1007.411988][T13635] [ 1007.411996][T13635] dump_stack_lvl+0x100/0x190 [ 1007.412029][T13635] warn_alloc.cold+0x9e/0xb2 [ 1007.412051][T13635] ? __pfx_warn_alloc+0x10/0x10 [ 1007.412073][T13635] ? dump_stack_lvl+0x17c/0x190 [ 1007.412101][T13635] ? rcu_is_watching+0x13/0xc0 [ 1007.412130][T13635] ? __kasan_kmalloc+0x8a/0xb0 [ 1007.412154][T13635] ? __kmalloc_node_noprof+0x360/0x870 [ 1007.412177][T13635] ? __get_vm_area_node+0x1ff/0x350 [ 1007.412200][T13635] ? __get_vm_area_node+0x22b/0x350 [ 1007.412224][T13635] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 1007.412263][T13635] __vmalloc_node_range_noprof+0x10f4/0x1420 [ 1007.412299][T13635] ? lz4_alloc_ctx+0x14/0x40 [ 1007.412335][T13635] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1007.412363][T13635] ? mark_held_locks+0x40/0x70 [ 1007.412383][T13635] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1007.412405][T13635] ? rcu_is_watching+0x13/0xc0 [ 1007.412428][T13635] ? pcpu_alloc_noprof+0xf00/0x1e50 [ 1007.412448][T13635] ? lz4_alloc_ctx+0x14/0x40 [ 1007.412473][T13635] __vmalloc_node_noprof+0xad/0xf0 [ 1007.412498][T13635] ? lz4_alloc_ctx+0x14/0x40 [ 1007.412527][T13635] lz4_alloc_ctx+0x14/0x40 [ 1007.412552][T13635] crypto_acomp_alloc_streams+0xab/0x470 [ 1007.412579][T13635] crypto_scomp_init_tfm+0x4e/0x1b0 [ 1007.412603][T13635] crypto_create_tfm_node+0x171/0x3b0 [ 1007.412628][T13635] crypto_init_scomp_ops_async+0x5d/0x170 [ 1007.412652][T13635] crypto_acomp_init_tfm+0x303/0x3b0 [ 1007.412675][T13635] crypto_create_tfm_node+0x171/0x3b0 [ 1007.412698][T13635] crypto_alloc_tfm_node+0x102/0x260 [ 1007.412722][T13635] ? __pfx_zswap_cpu_comp_prepare+0x10/0x10 [ 1007.412740][T13635] zswap_cpu_comp_prepare+0x15f/0x460 [ 1007.412760][T13635] cpuhp_invoke_callback+0x205/0x9a0 [ 1007.412788][T13635] ? __pfx_zswap_cpu_comp_prepare+0x10/0x10 [ 1007.412811][T13635] cpuhp_issue_call+0x1b8/0x970 [ 1007.412846][T13635] __cpuhp_state_add_instance_cpuslocked+0x2d7/0x400 [ 1007.412872][T13635] __cpuhp_state_add_instance+0xd5/0x2d0 [ 1007.412894][T13635] zswap_pool_create+0x289/0x670 [ 1007.412914][T13635] ? __pfx_zswap_pool_create+0x10/0x10 [ 1007.412930][T13635] ? lock_acquire+0x1d1/0x380 [ 1007.412957][T13635] ? __local_bh_enable_ip+0xa5/0x120 [ 1007.412978][T13635] zswap_compressor_param_set+0x51f/0x9d0 [ 1007.413003][T13635] param_attr_store+0x199/0x300 [ 1007.413024][T13635] ? __pfx_param_attr_store+0x10/0x10 [ 1007.413041][T13635] module_attr_store+0x58/0x80 [ 1007.413066][T13635] ? __pfx_module_attr_store+0x10/0x10 [ 1007.413091][T13635] sysfs_kf_write+0xf2/0x150 [ 1007.413120][T13635] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1007.413142][T13635] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1007.413171][T13635] vfs_write+0x6af/0x1050 [ 1007.413194][T13635] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1007.413220][T13635] ? __pfx_vfs_write+0x10/0x10 [ 1007.413240][T13635] ? find_held_lock+0x2b/0x80 [ 1007.413288][T13635] ksys_write+0x12a/0x250 [ 1007.413309][T13635] ? __pfx_ksys_write+0x10/0x10 [ 1007.413339][T13635] do_syscall_64+0x123/0x790 [ 1007.413362][T13635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.413381][T13635] RIP: 0033:0x7feaac19f559 [ 1007.413399][T13635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1007.413416][T13635] RSP: 002b:00007feaacfcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1007.413433][T13635] RAX: ffffffffffffffda RBX: 00007feaac425fa0 RCX: 00007feaac19f559 [ 1007.413445][T13635] RDX: 0000000000000003 RSI: 00002000000005c0 RDI: 0000000000000007 [ 1007.413456][T13635] RBP: 00007feaac236b20 R08: 0000000000000000 R09: 0000000000000000 [ 1007.413467][T13635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1007.413477][T13635] R13: 00007feaac426038 R14: 00007feaac425fa0 R15: 00007ffe24058328 [ 1007.413505][T13635] [ 1007.413859][ T5700] usb 2-1: invalid MIDI EP [ 1007.413874][ T5700] usb 2-1: snd-bcd2000: error during probing [ 1007.414363][ T5700] snd-bcd2000 2-1:16.1: probe with driver snd-bcd2000 failed with error -22 [ 1007.427043][T13635] Mem-Info: [ 1007.427058][T13635] active_anon:14941 inactive_anon:1169 isolated_anon:0 [ 1007.427058][T13635] active_file:1041 inactive_file:59516 isolated_file:0 [ 1007.427058][T13635] unevictable:0 dirty:680 writeback:0 [ 1007.427058][T13635] slab_reclaimable:12782 slab_unreclaimable:103946 [ 1007.427058][T13635] mapped:38834 shmem:8212 pagetables:4367 [ 1007.427058][T13635] sec_pagetables:0 bounce:0 [ 1007.427058][T13635] kernel_misc_reclaimable:0 [ 1007.427058][T13635] free:1269909 free_pcp:8651 free_cma:0 [ 1007.427106][T13635] Node 0 active_anon:59764kB inactive_anon:4676kB active_file:4164kB inactive_file:237860kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:155336kB dirty:2720kB writeback:0kB shmem:32848kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12864kB pagetables:16980kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1007.427182][T13635] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:488kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1007.427229][T13635] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1007.427282][T13635] lowmem_reserve[]: 0 2451 2451 2451 2451 [ 1007.427345][T13635] Node 0 DMA32 free:1124744kB boost:0kB min:33836kB low:42292kB high:50748kB reserved_highatomic:0kB free_highatomic:0kB active_anon:59764kB inactive_anon:4676kB active_file:4164kB inactive_file:237860kB unevictable:0kB writepending:2720kB zspages:1596kB present:3129332kB managed:2510720kB mlocked:0kB bounce:0kB free_pcp:34604kB local_pcp:17684kB free_cma:0kB [ 1007.427512][T13635] lowmem_reserve[]: 0 0 0 0 0 [ 1007.427545][T13635] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:48kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1007.427590][T13635] lowmem_reserve[]: 0 0 0 0 0 [ 1007.427646][T13635] Node 1 Normal free:3939532kB boost:0kB min:56064kB low:70080kB high:84096kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1007.427696][T13635] lowmem_reserve[]: 0 0 0 0 0 [ 1007.427728][T13635] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1007.446861][T13635] Node 0 DMA32: 1176*4kB (UE) 696*8kB (UME) 1018*16kB (UME) 2684*32kB (UME) 1227*64kB (UME) 1085*128kB (UME) 605*256kB (UME) 383*512kB (UME) 203*1024kB (UM) 5*2048kB (UME) 55*4096kB (UM) = 1124224kB [ 1007.447040][T13635] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1007.447147][T13635] Node 1 Normal: 7*4kB (UM) 8*8kB (UM) 13*16kB (UM) 11*32kB (UM) 13*64kB (UM) 8*128kB (UM) 5*256kB (UM) 5*512kB (UM) 1*1024kB (M) 4*2048kB (UM) 958*4096kB (M) = 3939532kB [ 1007.447632][T13635] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1007.447648][T13635] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1007.447663][T13635] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1007.447679][T13635] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1007.447718][T13635] 68838 total pagecache pages [ 1007.447726][T13635] 23 pages in swap cache [ 1007.447733][T13635] Free swap = 106676kB [ 1007.447742][T13635] Total swap = 124996kB [ 1007.447750][T13635] 2097051 pages RAM [ 1007.447756][T13635] 0 pages HighMem/MovableOnly [ 1007.447762][T13635] 437743 pages reserved [ 1007.447768][T13635] 0 pages cma reserved [ 1007.468168][T13635] zswap: could not alloc crypto acomp lz4 : -ENOMEM [ 1007.475885][ T5700] usb 2-1: invalid MIDI EP [ 1007.475904][ T5700] usb 2-1: snd-bcd2000: error during probing [ 1007.476407][ T5700] snd-bcd2000 2-1:16.217: probe with driver snd-bcd2000 failed with error -22 [ 1007.488431][ T5700] usb 2-1: USB disconnect, device number 50 [ 1007.938492][ T5700] usb 3-1: USB disconnect, device number 65 [ 1008.525520][T13646] CIFS: bad ip= option (:27.0.0.1) [ 1009.293161][T13427] nvmet: connect request for invalid subsystem testsubsys! [ 1009.314402][T13638] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 1009.889809][T13649] capability: warning: `syz.2.2017' uses 32-bit capabilities (legacy support in use) [ 1009.919478][T13653] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2018'. [ 1010.075199][ T5809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.087351][ T5809] usb 5-1: can't set config #1, error -71 [ 1010.088106][ T5809] usb 5-1: USB disconnect, device number 68 [ 1011.842841][T13675] sctp: [Deprecated]: syz.1.2022 (pid 13675) Use of int in max_burst socket option deprecated. [ 1011.842841][T13675] Use struct sctp_assoc_value instead [ 1011.976469][T13678] netlink: 'syz.2.2021': attribute type 4 has an invalid length. [ 1012.155534][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1012.978229][T13688] binder: 13684:13688 ioctl 4018620d 0 returned -22 [ 1013.660012][ T30] audit: type=1400 audit(1792738648.498:1704): avc: denied { mounton } for pid=13674 comm="syz.4.2023" path="/proc/1324/cgroup" dev="proc" ino=42439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1013.769701][ T5687] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 1013.944594][ T5687] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1013.950468][ T5687] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.950487][ T5687] usb 1-1: config 0 has no interfaces? [ 1013.979178][ T5687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.979205][ T5687] usb 1-1: Product: syz [ 1013.979219][ T5687] usb 1-1: Manufacturer: syz [ 1013.979233][ T5687] usb 1-1: SerialNumber: syz [ 1014.562666][ T5687] usb 1-1: config 0 descriptor?? [ 1015.502584][ T5701] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1015.865280][ T5687] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1015.925461][ T5701] usb 5-1: Using ep0 maxpacket: 32 [ 1015.969497][ T5701] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1016.027285][ T5687] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1016.029438][ T5687] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1016.029506][ T5687] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1016.029611][ T5687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.100082][ T5701] usb 5-1: language id specifier not provided by device, defaulting to English [ 1016.142502][T13713] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1016.223182][ T5687] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1016.617119][ T5715] usb 1-1: USB disconnect, device number 66 [ 1016.741978][ T5687] usb 4-1: USB disconnect, device number 59 [ 1016.930521][T13723] FAULT_INJECTION: forcing a failure. [ 1016.930521][T13723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1016.930558][T13723] CPU: 0 UID: 0 PID: 13723 Comm: syz.0.2034 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1016.930586][T13723] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1016.930594][T13723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1016.930604][T13723] Call Trace: [ 1016.930611][T13723] [ 1016.930616][T13723] dump_stack_lvl+0x100/0x190 [ 1016.930640][T13723] should_fail_ex.cold+0x5/0xa [ 1016.930661][T13723] _copy_from_user+0x2e/0xd0 [ 1016.930691][T13723] copy_msghdr_from_user+0x9f/0x4c0 [ 1016.930716][T13723] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1016.930740][T13723] ? rcu_is_watching+0x13/0xc0 [ 1016.930757][T13723] ? ___sys_recvmsg+0x177/0x1a0 [ 1016.930768][T13723] ? kfree+0x1e5/0x6d0 [ 1016.930782][T13723] ___sys_recvmsg+0xdd/0x1a0 [ 1016.930795][T13723] ? __pfx____sys_recvmsg+0x10/0x10 [ 1016.930811][T13723] ? lock_acquire+0x1d1/0x380 [ 1016.930843][T13723] ? __pfx___might_resched+0x10/0x10 [ 1016.930875][T13723] do_recvmmsg+0x2f3/0x750 [ 1016.930894][T13723] ? __pfx_do_recvmmsg+0x10/0x10 [ 1016.930906][T13723] ? lock_acquire+0x1d1/0x380 [ 1016.930919][T13723] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1016.930937][T13723] ? __fget_files+0x21f/0x3d0 [ 1016.930963][T13723] __x64_sys_recvmmsg+0x22a/0x280 [ 1016.930990][T13723] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1016.931022][T13723] do_syscall_64+0x123/0x790 [ 1016.931044][T13723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.931062][T13723] RIP: 0033:0x7feaac19f559 [ 1016.931078][T13723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1016.931094][T13723] RSP: 002b:00007feaacfab028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1016.931112][T13723] RAX: ffffffffffffffda RBX: 00007feaac426090 RCX: 00007feaac19f559 [ 1016.931124][T13723] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000007 [ 1016.931136][T13723] RBP: 00007feaacfab090 R08: 0000000000000000 R09: 0000000000000000 [ 1016.931146][T13723] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1016.931157][T13723] R13: 00007feaac426128 R14: 00007feaac426090 R15: 00007ffe24058328 [ 1016.931180][T13723] [ 1017.193582][ T30] audit: type=1400 audit(1792738651.809:1705): avc: denied { write } for pid=13719 comm="syz.0.2034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1017.384127][T13723] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 1017.517405][T13730] netlink: 'syz.2.2035': attribute type 4 has an invalid length. [ 1018.297323][T13732] netlink: zone id is out of range [ 1018.411137][T13705] Process accounting resumed [ 1018.411674][T13736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2036'. [ 1018.411688][T13736] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2036'. [ 1018.413001][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.467212][ T5701] usb 5-1: can't set config #1, error -71 [ 1018.472808][ T5701] usb 5-1: USB disconnect, device number 69 [ 1019.171947][T13713] Process accounting paused [ 1020.250596][T13753] ip_tables: iptables: counters copy to user failed while replacing table [ 1020.268510][T13753] ip_tables: iptables: counters copy to user failed while replacing table [ 1020.344565][ T5700] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1020.363912][ T2364] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 1020.388734][ T2364] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1020.482451][T13759] netlink: 'syz.0.2042': attribute type 2 has an invalid length. [ 1020.482472][T13759] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2042'. [ 1020.515490][ T5700] usb 5-1: Using ep0 maxpacket: 8 [ 1020.516075][ T5700] usb 5-1: New USB device found, idVendor=0c16, idProduct=0003, bcdDevice= 0.00 [ 1020.518283][ T5700] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1020.518315][ T5700] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1020.518341][ T5700] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1020.518382][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.525569][ T5700] usb 5-1: config 0 descriptor?? [ 1020.529188][T13759] Uż: entered promiscuous mode [ 1020.773446][ T5701] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 1020.933517][ T5701] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1020.936315][ T5701] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.936343][ T5701] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1020.939519][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.939570][ T5701] usb 3-1: Product: syz [ 1020.939586][ T5701] usb 3-1: Manufacturer: syz [ 1020.939601][ T5701] usb 3-1: SerialNumber: syz [ 1020.983031][ T5701] usb 3-1: config 0 descriptor?? [ 1021.777228][T13773] netlink: 'syz.0.2046': attribute type 4 has an invalid length. [ 1022.406239][ T5700] usbhid 5-1:0.0: can't add hid device: -71 [ 1022.406337][ T5700] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1022.425770][ T5700] usb 5-1: USB disconnect, device number 70 [ 1022.617185][T13775] netlink: 'syz.1.2047': attribute type 6 has an invalid length. [ 1022.978750][T13779] binder: 13777:13779 ioctl 4018620d 0 returned -22 [ 1022.983348][T13783] FAULT_INJECTION: forcing a failure. [ 1022.983348][T13783] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.983382][T13783] CPU: 0 UID: 0 PID: 13783 Comm: syz.3.2050 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1022.983415][T13783] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1022.983424][T13783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1022.983437][T13783] Call Trace: [ 1022.983444][T13783] [ 1022.983452][T13783] dump_stack_lvl+0x100/0x190 [ 1022.983496][T13783] should_fail_ex.cold+0x5/0xa [ 1022.983527][T13783] should_failslab+0xc2/0x120 [ 1022.983558][T13783] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 1022.983588][T13783] ? kstrdup_const+0x63/0x80 [ 1022.983614][T13783] kstrdup+0x51/0xe0 [ 1022.983634][T13783] kstrdup_const+0x63/0x80 [ 1022.983655][T13783] __kernfs_new_node+0x9b/0xa10 [ 1022.983681][T13783] ? lock_acquire+0x1d1/0x380 [ 1022.983703][T13783] ? __pfx___kernfs_new_node+0x10/0x10 [ 1022.983727][T13783] ? lock_acquire+0x1d1/0x380 [ 1022.983743][T13783] ? kernfs_root+0x23/0x2a0 [ 1022.983759][T13783] ? find_held_lock+0x2b/0x80 [ 1022.983780][T13783] ? kernfs_root+0xee/0x2a0 [ 1022.983798][T13783] ? kernfs_root+0xee/0x2a0 [ 1022.983820][T13783] kernfs_new_node+0x194/0x200 [ 1022.983845][T13783] ? __pfx_kernfs_new_node+0x10/0x10 [ 1022.983863][T13783] ? kernfs_create_link+0xe4/0x280 [ 1022.983884][T13783] ? kernfs_create_link+0xe4/0x280 [ 1022.983912][T13783] kernfs_create_link+0x100/0x280 [ 1022.983937][T13783] sysfs_do_create_link_sd+0x90/0x140 [ 1022.983955][T13783] sysfs_create_link+0x61/0xc0 [ 1022.983972][T13783] driver_sysfs_add+0x91/0x2d0 [ 1022.983993][T13783] really_probe+0x146/0xa60 [ 1022.984015][T13783] __driver_probe_device+0x210/0x460 [ 1022.984034][T13783] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1022.984053][T13783] driver_probe_device+0x4a/0x140 [ 1022.984073][T13783] __driver_attach+0x21f/0x5b0 [ 1022.984093][T13783] ? __pfx___driver_attach+0x10/0x10 [ 1022.984112][T13783] bus_for_each_dev+0x13e/0x1d0 [ 1022.984128][T13783] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1022.984142][T13783] ? bus_add_driver+0x306/0x620 [ 1022.984165][T13783] bus_add_driver+0x4bf/0x620 [ 1022.984185][T13783] driver_register+0x1e2/0x360 [ 1022.984206][T13783] ? rcu_is_watching+0x13/0xc0 [ 1022.984229][T13783] usb_gadget_register_driver_owner+0x132/0x210 [ 1022.984251][T13783] raw_ioctl+0x1a85/0x2b80 [ 1022.984275][T13783] ? __pfx_raw_ioctl+0x10/0x10 [ 1022.984295][T13783] ? selinux_file_ioctl+0x1e0/0x290 [ 1022.984322][T13783] ? selinux_file_ioctl+0x1e7/0x290 [ 1022.984350][T13783] ? __pfx_raw_ioctl+0x10/0x10 [ 1022.984371][T13783] __x64_sys_ioctl+0x18e/0x210 [ 1022.984388][T13783] do_syscall_64+0x123/0x790 [ 1022.984404][T13783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.984417][T13783] RIP: 0033:0x7f849779f1eb [ 1022.984428][T13783] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 1022.984441][T13783] RSP: 002b:00007f84959f3f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1022.984453][T13783] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f849779f1eb [ 1022.984461][T13783] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 1022.984474][T13783] RBP: 00007f84959f4fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 1022.984481][T13783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1022.984489][T13783] R13: 0000200000000480 R14: 0000000000000000 R15: 0000000000000000 [ 1022.984506][T13783] [ 1022.986778][T13783] raw-gadget.0 gadget.3: really_probe: driver_sysfs_add failed [ 1022.987154][T13783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.987358][T13783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1024.095472][ T5700] usb 3-1: USB disconnect, device number 66 [ 1025.442284][T13804] netlink: 'syz.3.2053': attribute type 20 has an invalid length. [ 1025.442336][T13804] netlink: 'syz.3.2053': attribute type 21 has an invalid length. [ 1026.030263][T13778] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1026.502460][ T5700] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1026.684005][ T5700] usb 4-1: Using ep0 maxpacket: 8 [ 1026.684597][ T5700] usb 4-1: New USB device found, idVendor=0c16, idProduct=0003, bcdDevice= 0.00 [ 1026.685522][ T5700] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1026.685542][ T5700] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1026.685558][ T5700] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1026.685576][ T5700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.703805][ T5700] usb 4-1: config 0 descriptor?? [ 1028.866808][T13808] Process accounting resumed [ 1028.867827][ T5700] input: HID 0c16:0003 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0C16:0003.0026/input/input41 [ 1029.365851][ T5700] gyration 0003:0C16:0003.0026: input,hiddev0,hidraw0: USB HID v0.03 Device [HID 0c16:0003] on usb-dummy_hcd.3-1/input0 [ 1029.380436][ T5700] usb 4-1: USB disconnect, device number 60 [ 1029.523300][ T30] audit: type=1400 audit(1792738919.339:1706): avc: denied { shutdown } for pid=13818 comm="syz.0.2051" lport=52701 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1029.528624][T13821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1029.556031][T13820] fido_id[13820]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1030.439577][T13825] netlink: 'syz.3.2060': attribute type 7 has an invalid length. [ 1031.290197][ T30] audit: type=1400 audit(1792738920.901:1707): avc: denied { create } for pid=13829 comm="syz.4.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1031.290379][ T30] audit: type=1400 audit(1792738920.910:1708): avc: denied { write } for pid=13829 comm="syz.4.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1032.532126][ T5687] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 1032.538859][T13837] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2064'. [ 1032.540210][ T5687] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1032.563797][ T2364] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1032.735741][ T2364] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 1032.736609][ T2364] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.736654][ T2364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.775953][ T2364] as10x_usb: device has been detected [ 1032.776276][ T2364] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1032.799934][ T5687] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1032.848953][ T2364] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1032.938078][ T5687] usb 2-1: device descriptor read/64, error -71 [ 1033.188483][T13850] ------------[ cut here ]------------ [ 1033.188499][T13850] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 1033.188506][T13850] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x93f/0x1c10, CPU#1: syz.2.2063/13850 [ 1033.209995][T13850] Modules linked in: [ 1033.213887][T13850] CPU: 1 UID: 0 PID: 13850 Comm: syz.2.2063 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1033.224947][T13850] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1033.230815][T13850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1033.241087][T13850] RIP: 0010:__mutex_lock+0x946/0x1c10 [ 1033.246442][T13850] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 75 12 00 00 44 8b 05 bd 02 6d 06 45 85 c0 75 13 48 8d 3d 81 0e 70 06 48 c7 c6 00 f5 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 1033.266460][T13850] RSP: 0018:ffffc9000e8476a0 EFLAGS: 00010246 [ 1033.272537][T13850] RAX: 0000000000000003 RBX: ffff88808ff22010 RCX: 1ffffffff248c364 [ 1033.280595][T13850] RDX: 0000000000000000 RSI: ffffffff8beff500 RDI: ffffffff924926f0 [ 1033.288639][T13850] RBP: ffffc9000e847810 R08: 0000000000000000 R09: 0000000000000000 [ 1033.296614][T13850] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 1033.304583][T13850] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888036255320 [ 1033.312665][T13850] FS: 00007f24c7dd56c0(0000) GS:ffff888122a2a000(0000) knlGS:0000000000000000 [ 1033.321605][T13850] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1033.328178][T13850] CR2: 00007f24c7dd4ff8 CR3: 00000000724d1000 CR4: 00000000003526f0 [ 1033.336133][T13850] DR0: 0000000000000009 DR1: 00000000000000c9 DR2: 00000000000000f3 [ 1033.344300][T13850] DR3: 00000000000000c0 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1033.352247][T13850] Call Trace: [ 1033.355659][T13850] [ 1033.358575][T13850] ? lock_acquire+0x1d1/0x380 [ 1033.363227][T13850] ? as102_stream_ctrl+0x28/0xd0 [ 1033.368154][T13850] ? __pfx___mutex_lock+0x10/0x10 [ 1033.373151][T13850] ? __lock_acquire+0x5c0/0x1f40 [ 1033.378105][T13850] ? rcu_is_watching+0x13/0xc0 [ 1033.382849][T13850] ? __mutex_lock+0x267/0x1c10 [ 1033.387601][T13850] ? __pfx_as102_fe_ts_bus_ctrl+0x10/0x10 [ 1033.393313][T13850] ? as102_stream_ctrl+0x28/0xd0 [ 1033.398252][T13850] as102_stream_ctrl+0x28/0xd0 [ 1033.402990][T13850] ? __pfx_as102_fe_ts_bus_ctrl+0x10/0x10 [ 1033.408711][T13850] __dvb_frontend_open+0x122/0xf80 [ 1033.413815][T13850] dvb_frontend_open+0x767/0x960 [ 1033.418736][T13850] ? find_held_lock+0x2b/0x80 [ 1033.423415][T13850] ? __pfx_dvb_frontend_open+0x10/0x10 [ 1033.428857][T13850] dvb_device_open+0x270/0x3b0 [ 1033.433650][T13850] ? __pfx_dvb_device_open+0x10/0x10 [ 1033.438942][T13850] chrdev_open+0x234/0x6a0 [ 1033.443419][T13850] ? __pfx_chrdev_open+0x10/0x10 [ 1033.448362][T13850] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1033.454880][T13850] do_dentry_open+0x674/0x1470 [ 1033.459629][T13850] ? __pfx_chrdev_open+0x10/0x10 [ 1033.464749][T13850] vfs_open_consume+0xcc/0x460 [ 1033.469501][T13850] path_openat+0x1547/0x23f0 [ 1033.474113][T13850] ? __pfx_path_openat+0x10/0x10 [ 1033.479045][T13850] do_file_open+0x20e/0x430 [ 1033.483553][T13850] ? __pfx_do_file_open+0x10/0x10 [ 1033.488556][T13850] ? __pfx___schedule+0x10/0x10 [ 1033.493394][T13850] ? _raw_spin_unlock+0x3e/0x50 [ 1033.498239][T13850] ? alloc_fd+0x471/0x7a0 [ 1033.502555][T13850] do_sys_openat2+0x163/0x1d0 [ 1033.507261][T13850] ? __pfx_do_sys_openat2+0x10/0x10 [ 1033.512444][T13850] ? rcu_is_watching+0x13/0xc0 [ 1033.517243][T13850] __x64_sys_openat+0x12d/0x210 [ 1033.522081][T13850] ? __pfx___x64_sys_openat+0x10/0x10 [ 1033.527469][T13850] do_syscall_64+0x123/0x790 [ 1033.532037][T13850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.537968][T13850] RIP: 0033:0x7f24c9b5fd8e [ 1033.542361][T13850] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1033.562148][T13850] RSP: 002b:00007f24c7dd4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1033.570716][T13850] RAX: ffffffffffffffda RBX: 00007f24c7dd56c0 RCX: 00007f24c9b5fd8e [ 1033.578668][T13850] RDX: 0000000000000802 RSI: 00007f24c7dd4c00 RDI: ffffffffffffff9c [ 1033.586632][T13850] RBP: 00007f24c7dd4c00 R08: 0000000000000000 R09: 0000000000000000 [ 1033.594594][T13850] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1033.602592][T13850] R13: 00007f24c9e26218 R14: 00007f24c9e26180 R15: 00007fff3f1976e8 [ 1033.610547][T13850] [ 1033.613564][T13850] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1033.620817][T13850] CPU: 1 UID: 0 PID: 13850 Comm: syz.2.2063 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1033.631816][T13850] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1033.637599][T13850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1033.647631][T13850] Call Trace: [ 1033.650898][T13850] [ 1033.653804][T13850] dump_stack_lvl+0x100/0x190 [ 1033.658459][T13850] vpanic+0x553/0x970 [ 1033.662414][T13850] ? __pfx_vpanic+0x10/0x10 [ 1033.666886][T13850] ? lock_release+0x24d/0x310 [ 1033.671557][T13850] panic+0xd1/0xe0 [ 1033.675255][T13850] ? __pfx_panic+0x10/0x10 [ 1033.679646][T13850] check_panic_on_warn.cold+0x19/0x34 [ 1033.684991][T13850] ? __mutex_lock+0x93f/0x1c10 [ 1033.689735][T13850] __warn.cold+0x191/0x318 [ 1033.694137][T13850] __report_bug+0x30f/0x440 [ 1033.698616][T13850] ? __mutex_lock+0x93f/0x1c10 [ 1033.703354][T13850] ? __pfx___report_bug+0x10/0x10 [ 1033.708355][T13850] ? __mutex_lock+0x946/0x1c10 [ 1033.713100][T13850] report_bug_entry+0xe2/0x290 [ 1033.717854][T13850] ? __mutex_lock+0x946/0x1c10 [ 1033.722602][T13850] handle_bug+0x1cd/0x2a0 [ 1033.726913][T13850] exc_invalid_op+0x17/0x50 [ 1033.731406][T13850] asm_exc_invalid_op+0x1a/0x20 [ 1033.736246][T13850] RIP: 0010:__mutex_lock+0x946/0x1c10 [ 1033.741612][T13850] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 75 12 00 00 44 8b 05 bd 02 6d 06 45 85 c0 75 13 48 8d 3d 81 0e 70 06 48 c7 c6 00 f5 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 1033.761203][T13850] RSP: 0018:ffffc9000e8476a0 EFLAGS: 00010246 [ 1033.767255][T13850] RAX: 0000000000000003 RBX: ffff88808ff22010 RCX: 1ffffffff248c364 [ 1033.775220][T13850] RDX: 0000000000000000 RSI: ffffffff8beff500 RDI: ffffffff924926f0 [ 1033.783169][T13850] RBP: ffffc9000e847810 R08: 0000000000000000 R09: 0000000000000000 [ 1033.791117][T13850] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 1033.799062][T13850] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888036255320 [ 1033.807028][T13850] ? lock_acquire+0x1d1/0x380 [ 1033.811686][T13850] ? as102_stream_ctrl+0x28/0xd0 [ 1033.816609][T13850] ? __pfx___mutex_lock+0x10/0x10 [ 1033.821614][T13850] ? __lock_acquire+0x5c0/0x1f40 [ 1033.826527][T13850] ? rcu_is_watching+0x13/0xc0 [ 1033.831268][T13850] ? __mutex_lock+0x267/0x1c10 [ 1033.836008][T13850] ? __pfx_as102_fe_ts_bus_ctrl+0x10/0x10 [ 1033.841720][T13850] ? as102_stream_ctrl+0x28/0xd0 [ 1033.846632][T13850] as102_stream_ctrl+0x28/0xd0 [ 1033.851381][T13850] ? __pfx_as102_fe_ts_bus_ctrl+0x10/0x10 [ 1033.857078][T13850] __dvb_frontend_open+0x122/0xf80 [ 1033.862171][T13850] dvb_frontend_open+0x767/0x960 [ 1033.867081][T13850] ? find_held_lock+0x2b/0x80 [ 1033.871740][T13850] ? __pfx_dvb_frontend_open+0x10/0x10 [ 1033.877170][T13850] dvb_device_open+0x270/0x3b0 [ 1033.881908][T13850] ? __pfx_dvb_device_open+0x10/0x10 [ 1033.887173][T13850] chrdev_open+0x234/0x6a0 [ 1033.891570][T13850] ? __pfx_chrdev_open+0x10/0x10 [ 1033.896487][T13850] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1033.902806][T13850] do_dentry_open+0x674/0x1470 [ 1033.907565][T13850] ? __pfx_chrdev_open+0x10/0x10 [ 1033.912501][T13850] vfs_open_consume+0xcc/0x460 [ 1033.917260][T13850] path_openat+0x1547/0x23f0 [ 1033.921845][T13850] ? __pfx_path_openat+0x10/0x10 [ 1033.926833][T13850] do_file_open+0x20e/0x430 [ 1033.931334][T13850] ? __pfx_do_file_open+0x10/0x10 [ 1033.936349][T13850] ? __pfx___schedule+0x10/0x10 [ 1033.941190][T13850] ? _raw_spin_unlock+0x3e/0x50 [ 1033.946025][T13850] ? alloc_fd+0x471/0x7a0 [ 1033.950336][T13850] do_sys_openat2+0x163/0x1d0 [ 1033.954986][T13850] ? __pfx_do_sys_openat2+0x10/0x10 [ 1033.960167][T13850] ? rcu_is_watching+0x13/0xc0 [ 1033.964906][T13850] __x64_sys_openat+0x12d/0x210 [ 1033.969739][T13850] ? __pfx___x64_sys_openat+0x10/0x10 [ 1033.975101][T13850] do_syscall_64+0x123/0x790 [ 1033.979678][T13850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.985564][T13850] RIP: 0033:0x7f24c9b5fd8e [ 1033.989965][T13850] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1034.009550][T13850] RSP: 002b:00007f24c7dd4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1034.018051][T13850] RAX: ffffffffffffffda RBX: 00007f24c7dd56c0 RCX: 00007f24c9b5fd8e [ 1034.026012][T13850] RDX: 0000000000000802 RSI: 00007f24c7dd4c00 RDI: ffffffffffffff9c [ 1034.033977][T13850] RBP: 00007f24c7dd4c00 R08: 0000000000000000 R09: 0000000000000000 [ 1034.042012][T13850] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1034.049955][T13850] R13: 00007f24c9e26218 R14: 00007f24c9e26180 R15: 00007fff3f1976e8 [ 1034.057905][T13850] [ 1034.061105][T13850] Kernel Offset: disabled [ 1034.065402][T13850] Rebooting in 86400 seconds..