last executing test programs: 4m45.730806218s ago: executing program 1 (id=3191): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0xf00, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40890) 4m45.619910726s ago: executing program 1 (id=3192): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000540001050000000000c4000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRESOCT], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x68, 0x30, 0x10, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ct={0x50, 0x1, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @empty}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x1800}, @TCA_CT_MARK={0x8, 0x5, 0x2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000140)={0x34, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}]}, 0x34}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x400000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) close(r9) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000080)={0x400, 0x1003, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000200)={&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x59}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 4m44.518791137s ago: executing program 1 (id=3196): openat$tun(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) read$char_usb(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0xff, 0x8, 0xd, 0x8}, {0x0, 0x72, 0x4, 0xffffffff}, {0x2, 0x40, 0x1b, 0x8}]}) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x0, 0x8040) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xa}) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x6, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a8, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4m44.221050008s ago: executing program 1 (id=3199): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6dbf}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x109001, 0x74) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r4, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) getpgrp(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000032680)=""/102392, 0x18ff8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r10, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$binfmt_elf32(r11, &(0x7f0000002180)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0xc, 0x2, 0x5, 0xf, 0x2, 0x3e, 0xe7d26f7, 0x65, 0x38, 0x212, 0x0, 0x7, 0x20, 0x1, 0x7, 0x4, 0x8001}, [{0x5, 0xfffffffe, 0x1, 0x3, 0x9, 0x9, 0x5}]}, 0x58) getpriority(0x2, r12) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000480)={@fallback=r3, r5, 0x2f, 0x24, 0x4, @void, @void, @void, @value, r6}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@fallback=r2, r2, 0x28, 0x100c, 0x0, @void, @value=r2, @void, @void, r6}, 0x20) fcntl$lock(r2, 0x5, &(0x7f0000000200)={0x0, 0x2}) 4m40.485002372s ago: executing program 1 (id=3207): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x0, 0x3f, 0x0, 0x5}, 0x28) io_setup(0x3, &(0x7f0000000000)=0x0) syz_clone3(&(0x7f0000000080)={0x80800400, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_pgetevents(r2, 0x80000000, 0x0, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) listen(r3, 0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_TDX_FINALIZE_VM(r5, 0xc004aeba, 0x0) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4m39.079861279s ago: executing program 1 (id=3216): iopl(0x3) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) listen(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x204841, 0x8) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r2, 0x2) flock(0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r4, 0x0, 0x3b) syz_open_dev$video(&(0x7f0000000040), 0x400, 0x39f282) 4m38.237190382s ago: executing program 32 (id=3216): iopl(0x3) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) listen(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x204841, 0x8) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r2, 0x2) flock(0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r4, 0x0, 0x3b) syz_open_dev$video(&(0x7f0000000040), 0x400, 0x39f282) 2m13.808063518s ago: executing program 0 (id=3812): r0 = socket(0xa, 0x1, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000002840), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000017c0)={0x3c, r2, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='/d\xf6f\xb0\x1dY\t\xcd\x99\b\xa9xa\xf5ev/hwrng\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000100)='GPL\x00') timer_create(0x2, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f0000000040)={0x0, 0x80000002}, 0x0) sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) listen(r3, 0x200) accept4$llc(r3, 0x0, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000400)=0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r4, 0x107, 0x16, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, &(0x7f0000000140)=0x3, 0x4) 2m12.404432197s ago: executing program 0 (id=3817): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r2) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r3, 0x1, 0x70bd25, 0x200000, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, &(0x7f0000000040)=0x24) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xa4}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0xc1cc6, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x2, 0x0, 0x7cce8c743ee810df, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0x1, 0x6f}, 0xfffffff4, 0x4}) setsockopt(r7, 0x6, 0x6d, &(0x7f0000000080)="9a18672d8a7a2ac4a524db3b455c38d55bd0e4f63c6521ae502c897a5864dd515b5372b5b171", 0x26) 2m11.328640103s ago: executing program 0 (id=3819): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x40, 0xf, 0x2, {0x2, 0xa}}, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r1, @ANYBLOB="60005e80080006000002000008000700f605000008000900000000000c0001000500000002000000080005"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8d0) 2m10.056054595s ago: executing program 0 (id=3824): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (fail_nth: 6) 2m9.878826188s ago: executing program 0 (id=3825): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70fd2b, 0x25d7dbff, {0x45, 0x0, 0x3f00}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x23, 0x8e, 0x2}}]}, 0x79}, 0x1, 0x0, 0x0, 0x4c040}, 0xc800) 2m8.532467935s ago: executing program 0 (id=3833): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf00b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd8, 0x9, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x1, 0x33, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @void, {@ipv6={0x86dd, @icmpv6={0x6, 0x6, "4e4106", 0x8, 0x3a, 0x1, @remote, @empty, {[], @echo_request={0x80, 0x0, 0x0, 0x3, 0x8001}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m8.165201945s ago: executing program 33 (id=3833): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf00b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd8, 0x9, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x1, 0x33, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @void, {@ipv6={0x86dd, @icmpv6={0x6, 0x6, "4e4106", 0x8, 0x3a, 0x1, @remote, @empty, {[], @echo_request={0x80, 0x0, 0x0, 0x3, 0x8001}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.271069543s ago: executing program 5 (id=4277): mount(&(0x7f0000000000)=@sg0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ext4\x00', 0x900800, &(0x7f00000000c0)='\x00') r0 = accept(0xffffffffffffffff, &(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, &(0x7f0000000180)=0x80) getsockname$unix(r0, &(0x7f00000001c0), &(0x7f0000000240)=0x6e) unshare(0x8000000) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x1c, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @jmp={0x5, 0x1, 0xd, 0x1, 0x6, 0x40, 0x10}, @ldst={0x3, 0x1, 0x4, 0x1, 0x6, 0x18, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x6, 0xe, 0x3}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000440)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000480)=[{0x1, 0x5, 0xc, 0x9}, {0x2, 0x3, 0xc, 0xa}, {0x4, 0x5, 0x1, 0x9}, {0x0, 0x1, 0x3, 0x5}, {0x5, 0x3, 0x0, 0xa}], 0x10, 0x200}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@fallback=r0, 0x32, 0x1, 0x32, &(0x7f00000005c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000600)=[0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000780)=[0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0], 0x0, 0x88, &(0x7f0000000800)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0xf0, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@fallback=r0, r1, 0x0, 0x20, 0x0, @void, @void, @void, @value=r4, r3}, 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000a40)=[@in6={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e20, 0x6, @mcast1, 0xc}, @in6={0xa, 0x4e22, 0x9, @remote, 0x7}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e23, 0x401, @private0, 0xa831}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x9}, @in={0x2, 0x4e21, @loopback}], 0xbc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x527, 0x8, &(0x7f0000000b00)=0x1) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000b40)=@gcm_256={{0x304}, "aedb3aaf49cf5dfe", "baeb5b8394e4fb17a9eebe9a84233cec70f500a0514d5aeaee337a4cfdac0604", "461347cf", "5b244a4f3b4cbe52"}, 0x38) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000bc0)={0x0, @remote}, &(0x7f0000000c00)=0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)=@getqdisc={0x3c, 0x26, 0x4, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0x1}, {0xffff, 0xfff1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000d00)={0xffffffffffffffff, 0x0, 0x7, r5, 0x5}, 0xc) unshare(0x10020000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000d40)={'wpan4\x00'}) close(r2) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6cd, 0x1, &(0x7f0000000d80)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000e80)={r2, &(0x7f0000000dc0)="3263d65b6808e56aedbecd10667a497a92a2602d4ab92a5f8c77e3def2dda7376803c09af8cb6f8ce1fc8f99402edecc8fd2b11e6460d2af482ac9b8a3526ca3d563ac1d764ca0bb60d0ea9cc4033c694ce2d8152e1832ef8a74132e561610c45796fbaea3a41f178e8848915d858127aa2c4a1243edb1", &(0x7f0000000e40)=@tcp=r0, 0x4}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000000ec0)=0x80000000) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) unshare(0x41000) ioctl$DVB_DEMUX_DMX_STOP(r2, 0x6f2a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x5b95, &(0x7f0000000f00)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001080)={r2, &(0x7f0000000f40)="073a34e7075c7e7cb26fd778825fb30e0532519f408f15960d60cfd0047af5a1ea0892f5e3930eb6336112b0965294cc6cd50126be19a1277694669e4c72b2b7cb0f75e08ab1ea1c9d6713f6ed0ad455d34f9a7824a39286e6f0d310b32273c71b027317b95c5eba978e96321462ec6af538aa0792adfbf3c1b571816f6072abdba7c26701f162330ef779863b64a7b816acac5b4d5392126c0ef928cdec68cfc13fb1ad8b2505d7bfb44eb0f61425cf738133f0da86ca3587c55309250b989bc40555a1ac511d6101ca1f87e68f905f95148e1a2ab508e1c90684948ccc30a0fc04365193affce6c6ac1b", &(0x7f0000001040)=@tcp=r0, 0x4}, 0x20) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001100)={r7, r2}, 0xc) 7.807420927s ago: executing program 6 (id=4280): syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902"], 0x0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0xb, 0x90, 0x2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1000, 0x1007, 0xc}, {0x6, 0x24, 0x1a, 0x1, 0x21}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x5, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x3, 0xe, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x2d, 0x93}}}}}}}]}}, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000a80)='.\x00', 0x89901) fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x81, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) epoll_create1(0x80000) pipe(&(0x7f00000000c0)) pipe(&(0x7f0000000300)) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900000000000800110000000000", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) 6.632013929s ago: executing program 5 (id=4292): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) connect$unix(r0, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x100000001, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c0000000000000000000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$igmp6(0xa, 0x3, 0x2) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 6.31025813s ago: executing program 6 (id=4295): symlinkat(&(0x7f0000000340)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x200402) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x88840, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r3], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000016102401800a000100726564697200000009000900020073797a32000000001400000011000100"/139], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(r5) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r4) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r6, &(0x7f0000000280)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) listen(r6, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) 5.335715268s ago: executing program 2 (id=4300): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x80047458, 0x0) 5.211049175s ago: executing program 6 (id=4302): r0 = syz_open_dev$video4linux(&(0x7f0000000480), 0xf, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f00000005c0)={0xe7, 0x0, @raw_data=[0x80b, 0x4, 0x1014, 0x1, 0x800008, 0x7f, 0xff, 0x6, 0xfffffffb, 0x8, 0x5, 0xd60, 0x80000004, 0x4, 0x1, 0xeb]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000400000006000000ff00000042"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x2c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x80, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @rand_addr=0x64010101}, @RTA_GATEWAY={0x8, 0x5, @empty}]}, 0x2c}}, 0x0) 4.271767415s ago: executing program 4 (id=4304): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffffe3, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, 0x123, 0x4, 0x70bd28, 0x25dfdbff, {0x16}, [@typed={0x8, 0x142}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) setresgid(0xee00, 0xee01, 0x0) setresgid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x2) ppoll(&(0x7f0000000100)=[{r1, 0x100}, {r1, 0x1411}, {r1, 0x1200}, {r1, 0x2200}, {r1, 0x4000}, {}], 0x6, &(0x7f0000000180), &(0x7f00000001c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0xff, 0x37, '\x00', 0x0, @tracing=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x61) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000000)={0x1, 0x1, @stop_pts=0x5}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x0, 0x84) close(0x4) accept(0xffffffffffffffff, &(0x7f0000000200)=@tipc, &(0x7f0000000280)=0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 4.169457386s ago: executing program 6 (id=4306): ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0x980901}) 4.086558929s ago: executing program 5 (id=4308): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = msgget$private(0x0, 0x0) msgsnd(r1, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="010000ffffffffffffff9900000008000300", @ANYRES32=r4, @ANYBLOB="7c005a80"], 0x98}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b178afec", @ANYRES16=r3, @ANYBLOB="000129bd7000fddbdf25620000000c0099007f000000760000000600b300030000000600b300010000000600b300010000000600b400060e0000"], 0x40}, 0x1, 0x0, 0x0, 0x24008081}, 0x81) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r5, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x3, {}, {}, @result={0x1f00}}], 0x1c) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000002c0)=""/99) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000140)=0x5, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000206010200000000000000000000000605000100070000000900020073797a3000000000140007800500151e0100000008001340fffff80005000400000000000500040001000000050005000a000000"], 0x54}, 0x1, 0x0, 0x0, 0xc040}, 0x40800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 4.002803506s ago: executing program 6 (id=4309): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) getpid() mmap(&(0x7f0000a45000/0x3000)=nil, 0x3000, 0x1, 0x810, r0, 0x6ca01000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000244000/0xc00000)=nil, 0xc00000, 0x17) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0xc, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x44) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_XSAVE2(r4, 0x9000aecf, &(0x7f00008a9000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f0000000040)={0x400000000000027c, &(0x7f0000000080)}) 4.001891236s ago: executing program 4 (id=4310): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000002400)={&(0x7f0000000000)={0xa, 0x4e23, 0x2, @local, 0xf}, 0x1c, 0x0, 0x300, &(0x7f0000002280)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}], 0x18}, 0x20000) 3.952462407s ago: executing program 3 (id=4311): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x101}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000600)=ANY=[@ANYBLOB="400100001000010028bd7000ffdbdf25ac1414aa0000000000000000000000007f0000010000000000000000000000004e23000020008000000020000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="64010102000000000900000000000000000000206c000000fe800000000000000000000000000023feffffffffffffff000000000000000000000000000000000100000000000008c802000000000100060000000000000000000000000004000000000000000000ffffffffff1f0000080000000000000000000000000000000400000000000000000000000900000000000000000000000000000002000100030000000000000008001f0004000000480003006465666c61746500"/248], 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f00000000c0)={0x0, 0x0, "ec31b4d492c76f544443846108063aef"}) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049dc) write$binfmt_elf64(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="e102"], 0x40) close(r2) io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000003380)={&(0x7f0000005000)={[{&(0x7f00000008c0)="4480b2f9af8a4c404c28ac572edca4606773dc7332b67a6de2950a332ba3866c853080dd094bd92b7c5a10f8cc454806a3d041019fdc65d68ea12cf5b5c19591463121ce67b55412511bb4b8850f83a8ac0a6c324b2c25420fc0ecadaec96ae985d9b9dd4c3d558525a51750346f6c6f3f00f60db09b30b08daa120edfc9e4a76e6f80a9afe7c0c7ca97948d7e30e57398f591512c58f8ec27c6352b8760bc5ca951b3d14c51dbb932abc4f6751d75ac3135446466255e9dd807612d83b8f1ebabc9e2eed1ea247f91998602912b26141cf3e71f9d03d8894439ee69f471d4b62e05d0", 0xe3}, {&(0x7f00000009c0)="f55d255ea7120e03ea5c8f047f04f84a8f416f45a9ec1c3e00fed28b4da19907e4f59d0464b93672170953d8ca340752b760474b3e103c8c35b6b1f11055937a61061d46716ff0e6f64afb6e815470340049a030a8b5c7a2057a016701313975f9f8d8029cfbb017cd7cc74d4c639b33c5c71f63eccb32b3b23a9e4831a3e9f98f95c1ee9d5f2e8ab4f0024430ce6f9345ba184f911a8d8a2891f416bb6f7349029f2a63434f34eea950d6c140", 0xad}, {&(0x7f0000000a80)="38db124c0cab79d60322a21fd2bffe93d859ba1d11c76ffe6fc449ac0cc730b6f50eba4a5b60ccd016eecd7074834680b1243b2cbcfaad291428c2c07858fcbde40c11d365d1367846508f9ba87ee28949ebb50fb78ff4ae69437416638841400184714e7aa17828d96ce32b0046675d263cabdb2014271afcc0f4d4ef2eb7f3daf328d42493fd39071111a763966b8b8fc9cb91248241075a67e22230d43f734206779d385a402c84664054b5", 0xad, 0x1}, {&(0x7f0000000b40)="db1d834ef55fa119bd1475f8bac90f6a2887d6c83e64692ca781de3cd6149d1502461e1d3c38d58d1b7f", 0x2a, 0x3}, {&(0x7f0000001280)="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", 0x1000, 0x3}, {&(0x7f0000002280)="2294a3cb1d6acbfa5fc5c6f8f70df9f2816f77658e91c887e17d7599379665566bb1fc792ab5a11c43f91f682dc3f6ebf41e2528253633bf54fa994156b2882975304e24484e3e32864290a34a6a49c1c3986d1f61a6636b2fbba6b56aa03237da559e58e22d361e6e8662271d", 0x6d}, {&(0x7f0000002300)="bbf257d2e49222e4699785ea6217ca21d7f19bed256c127cf08078f33956b3eb616f999460b86584d45597d521510935c31db2a9d77ff886288b1c3419749cc014a266cfc692bb1c4c79249fada579c9fa15b3fc10bcd9d42f3b05f124339e6c9446a166d97294278bb60edf3de1a95b8aa944348de63ed3e75df4a6ae3b0a614c0c875066b42745f73714658c45c66bf5f700ae0631083ef03e1305339be77642a50d796d5b5f61bee3ab9d6357c67d8ca9652ac04c70a04ea75c0306b7f0cd3a6c6300c688a9217b6847b65cd0440149bd600de109ef642d71c18b80c72eb15ec1e51956a66db608af87709976176b7b56d0863ef2ace1402d66247d34700c1a930068e9eae72088e933564d61375d1ecc5b938bd708fd12dbdc7b8305df618d684cbb9f8fec54c345c30035d26fc17806038a716f6c6932177d059eb970299700a6a56a989f07acf2e182d056cf0886ec8a41b179b9c6aa0af7ab7a9a30fa05b975baba258ef4f6a8079d6166f669df226b3f792e12ed432c306036c4856f3c6efc78f75515fcdcb82ace55bf92e9c01d0333280edef5b9da7bdb413f3c0a4ea4f0ab6ddb56633972b6c715c8ecfffbb85cf83cb45f64637ba80b38160961dd13bcc83e0570d9c31235f31428e979abc2c637bc2971d74be5f2916d86e3ca88c41e311f4e2b8407f88f2b577a26f37857b9f2124828dd2e6e3e1839215794e1148d67ec955e5eddb9581cc59a77692b83c0c45ed5de0646b10e69890cb631f65f230d1cb44d384c37232abab68b21f130b2b705615285c1e3a76a63a1012b672d70a3bda949c1078afaab3cbc28f78cbf1d876c470f7ea8188894449d148afadebf6fd4d35e225e2ff459c244bc07eba1a79b27cda17e746e9b41f4145258d978b7ccf8dfb2e643db0151b240f9498dee17d4f8f0dc3d87f8ec4442f27fa78b27edcac6e32b2a6fde792980bb09372001a1016747b0869e3e63dafab43481459d1f356bd1dcea1a715ae6ede172940b224749ae7cd95837b8b9e42e1f89368633122debe46e680f604b7ed734f1d9c288732562278d1cc21bfec2c63ff1699986d1274d72aae6c1da0ca16f009fe43e463f4eb45d36ad053abd5ed3b667b2d68e83864c07f65a6e8d686a39ce0effee576d04170c197aaa0dc3a4f2e868eae3d649085d73175b34495440e07b0d7d8138b4af96698a8aef6eaf77dfacc8428a8c27077154689868db6ed5f67bfa325755714b46dcd171fd3aab785fa2a5496f385d472b132165c4376ed11463d5ca5edc03283c6448e5fec0e09f0a236a91493394816d98f7892f697bbc9b12fa059316689f447faad535668af3c4b0b50ff096bc5c26f53ba62ea6dcc441f11d13a3b1dc99637dbe1f174ad291aa7350ae02079b3e9fc379b51061860fa3c0094a548a663b3bc9d928438a3b8dbe133f407eb233e101b98ac68e78e2148ab33fec21f57f0ddcadd60d6169e644b879617df7fa0f7e542437fac03b2dd287bd3012749dc640afbedf413f601fd6f11d9997c30d888c524290217339391a1f19dbe0429cc95c51865146ca72618d62370fee920e9fa145f5c86844478a75115715f3c64a5185dc505baf497644f7e2acacf1927a638dff93141da82165652eeac3977a22f062a87d98e3496ba1d273158e3df7cf80c0d185265070f86b1c5b321af65067bb01c97c169fa1b7fdbf5aaf9cf4e353863c73a2a1080529c04d3880b8a1b09831e329c874af15cae8d0d99349f68c5a7dd478166401fb189b85d1a3bdde9d19dc932e7c0100aefda6c9012267957142542c1f67f44807bcb4bb48c84a5f411fb49b28b13f2905f253ddc8bf34848a412aeadfb897f07ebb50d3262a0d6d9f3e44bdfb2d7d6eb27a205cf211f4b64687cab1251d27eea18adff60ae3f75b1f3733ebb4e05e523c71fcff5a1082746613c417cefb6c1220d714d18e011b4e35d25d53ff7ba3cda302a65e2b7909eb824ad19e8dd3aac93cb2e17ec6f0ab9a48ff7f7a99190ebf2b6cc5584d96d4a66ec42b4dd6c0d9cd2c9eac824d80931075ac7f162a5c1015bf1f704bc92475a583776f2c5632157f7a0f8cf43a54e1f44a559ecc1844149f43b0a11fefddca28d90ddf5cf74b2e38e7839cfc34af5da8d29083b939c1fc63c2dcb8a5a83b350711329b492b2606306a29ba41dbfb28fbabdae198abca3c29af91b0786cfdd73bf6fe7bda9063586ed0e1b794cee5d3d83666da8e689dd8ae3b504dfa4777d90f753a7de38174e28ed03989c31cfb5c4840acc3067bff456a79dd189e0a4a23750d531834a43fa6edcb1e8687b399fda46ae521a0c4a408ce7c061ccc4aef7e13494450b17836766409d0d52e1c5b8c7e88488b805d6c15e92a5c88d29b5f876fa8d08bd2bd2a3a81f96487e5712977164337207cd32706a43f8e2c0fb95d6e251e154dc40cf2c4545d4a9482a3de183cefd4fd4c7cb1e15ff5bf076ea0e745736faee39e602d62bcc0a915d00ab275454bc97087da902e77a489560f12c3ec55785251543f5f126c5c2ef914d8c332856ecc3465c642c5a7e768e914f177f00b4f3116543a4dd2415370dee8f8259e88d327e2a4a305136d38b8b1912818dc6033b43a53a5cc9fd4c7d6d51e9e0455772951ceac608275908b76028ae68490ce8a94d9e26d70484c272d98606655aa6594c2ef40e6e468abe01efb4e46e81e87e595d000595b95878acdda42f7575d1e518d024bdef5a429de292dc73f1012d20553fab09e845bb7740a5393b592baa7a7dbbc3fb21c7c76f3f564e1f5f39ede2a084eee77403a277b545fba10d5aca3f77c694c40afc0675704a8c0fbadca9a86c1738b1f267b1e11d63dcd5f4c828d73ee297db86eed8e2886016367df59e30976174747b45d5b15510ba48fa5d36201f7697bb15075d18ccc7ac2384d68b5fddef98a97dbc140b7745c2368d36c3b61eefe2f994fec16f1f48fcdc6c34d7896b384d9efd13dfbf1d4b4e64086c1aff0b76e7314a13062b07f7c7e5ad40b67a9c59bf9d266b2dfba45b8dd860f803ca86c2c85aca99af7ded7a6055d3e91a0630f9c80a43f52388d98b3ca341ac154edbf23389e320ad0d8d7c822b9d167d259cf7183bfc184756268ed4ac39b59527ec95976afe4efd5948ca85eddd907c8fbbf10617e58094795797d177af39708c44ba81393800eb72e9721a9a98fe8f5e7472de283b613ca382c32c51c872b53e31241d0f83410a67a9aa8d92ce6bc2a5efec0e6a7f2f0e6f3b06b728cdff69d1a29f2eb6f4e589de94160c501fdcaf2784fbb766e76a5d21b214e1da05089588afb2a763c783ab6ffbee3fc0bae46dbea448d5f5cfc0badbf07c59a803b089842063a5e6a1e49e18548e3c6a92cdb3902410cadd3260e8c90a99354418c597a34dd2a613c980e9a48a35aa955771bd06ebec167d27febed67bcc09f2afcc665c745b34085b8ac8af03f29dbe3117af4082812c9043d06d1a6aef666260f489023277bd20535520fec64f3d4ce5469e3e758abc7e7f73116032ded0fb3873e9c8aea00f745e704ea6691c8c300987a7c9d944c026f2808988408d9180106ad3982e9930cd828dff2f365f471d62e5931a6ddc2e05453eb85b0ce2d5e6ce78e63051b3d72022368e4dc579161652bbd20a569186a2ca975d3f149fc709aada1c26ee19cfb262edefcd7c4e149ca6beb1019fd864a9cb8964b8d3c8c42498d3cbac913c145ce498a3433c06a2c79d91e120e5a4e8213c7795f3290ec726b7d8fdd306cbdbdfe48f89a580a6bcca2aa4257592d68c23cfdd8c50fa4c7c37cc1b27cbe6ded5ab6bf95dde2f78a876278755c184c1fa311c2b49e5fa5256962a4c06bab769c276a35a0b751232d503b3276f255be214e38b8140c55a54279e34f91124f14dd587181ef0feea9324a4d4427a1ab276aa436971f9182195bfddec1ed683cc1ccea3579f8e16f4c2a93e968d90609f36d53ce5c9d415ae1afb80d2f81d8fa005472c444298011582c0b3773af8923157cbccb0c6bfd5d596f0b54fc33816c4e7cabeb3a61a36b12f2a50082a388099cc41fb13af91629098afdd1f6bece225bcd7e7fad5e11e63616b92905b79bb88af96837be307de49f32f70b6f77393b0146bdd06b6563a19256ee703670072debe22b33a31b14bba7270c1c2c02cc5283a3a53a77b4d784f2a1d271c39d9dc04ccc4a57c26c55e4a7910ac26b10b76353ab89c15ba439e6436bcf963eddc2acb7246f4e78c13060e4776edd94adaad07f205de647535dafb04e98f0fe1f00d0117cafd85c6f57ccaf485d4713aaefe75f67f05de32210d1acf53e0e58b5f6914e8ad1283b4b9f8f66b351a332f8fc2e85c57388206c89a64db57e0c77136830a6c73b6af55a2cadfe67df93750f3974230cc1a3d0f6d18f261d6fa4cf79d115b850ecd3f3d3e5ac452bf4acadbc25729da99c47912cec7c1d7b602c2a2864ace53b22d26b320fdf139582a0b768bdb6f6fcfc8ca0a20dd576009822c98f1ca3536b7267463f57ac9d03f09c11f8dee8c9e7095a119ff2d89df1f277083d1cc9d8ce405dd1c341141135ea5fae7d66b081919b94e2f79f164fd40ae4e17d1f11b1d6be513bbad6cad2b6d74d251b0d2f697522b84613193accb01a181feb06d838425d5abe0d63027773cb5aa37ade6dbe6b336f6e39514f5636abd5bc70c23b070279b2118182b5f61558e2cec3616c2d76f506c8f39cc2bcb6ee8419244ebb4fd3fe2c9d2cc12ee8c798ce9e89627c0dfe38bc590548d5df49b524bb17bb60dfc84359c26279ebea23fb309138b592e2a38565ccd54231d6d8155c85b4c519e0f077f8e5d287ce2cd5888fad0323640058ff66fbeb44670b1fccf54f418bd232b2c808f79e006744825595564afc6a20ff57acc8e9aa6a9f4303723f9a027bace999435328c9fb639bc2e935d6607797564eedbce3a9782aca5ef0174936f0aae9c959c560dc3e4946e07a5b1bb921576fa629b69e5c6920c1260dbd2c49f91195a8c5d35acec062d9cd471beb3d8a7bde7cd40f969255a349e58ff7403a2a3a08c3f5dbc31ef9e061f917e673d316e691c3d4564a68c521c6ab96c0917019919dc46ec7f854803a2b948232c4f4cedbacba467ffadc727d80b896ee9e5a74f9bdd6952bb1d1f81e3c90c9ceabff1ac7cf25267bd33326e1293154e687c9041db3cbc1b16b64a8e5287c475582e24bdf537997646f79d583abe200a21633c92c3bc2f5c1279842cfebb3420588b5afdff45599ffc92d2685b426240e2760b4ba0cd34b7fae95ef9593f0b12f650d9f2449312a7040a5e676c3c7ed129a8345b2b928b920cbc3bd0dac6a1659d4002ceda67669fcd235523fe169a90977be0d8dc9d6ec690d4afa6d105d38069c1512e11befba65c6336cb25550d58437b51659bc3b4e9750aaa38b8ea9930d5ef1bcbbd59da5ed7ad96dceeb46db94068585eca5e2ff8f2d143b7bf813d0b1cec0da8eb4550a81e13320315544b46e389c2d1038077853e3fc53e549db5c10cc0b18e02c2c45cf7d00282ec9124d3991e6071d418137a7fd882a3b390c001847f4f67a12ba94b54d2e215fd3ad956ca43e321ede8016c4269e619c1b7a808a059341c865f81cfa09fd788c850f6e5ac1e99477234d18fb79b4184a81e4b85dc3ba425740729f20c2e06cc8abf07666f57eed909c4216fdf80ed2bcff5275f035ff839db12024a56433ceddd9a2ba57e5a732dfb6af6d08fc3a7ad49476bff405e2de0ce4769fd61378e93d71839cd20817", 0x1000, 0x2}, {&(0x7f0000003300)="3f86ace5ae4c6ca7a9f83241c8d56dea7fc0dd434e9ba6852f6206c9b922b4af65a1f64e27ddf492ce999dec9735fca206d0fdfbc7d26f377a296450a296f9fe9c60a0acc3180b8d0d160ee539a09dcad8d29d4bf64621a3220808ed76e18927e0f8c10da7cd98e115d8820fc3a9f0e7cfcc9288", 0x74, 0x2}]}, 0x8}, 0x1) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x20, &(0x7f0000000840)={&(0x7f0000000180)=""/231, 0xe7, 0x0, &(0x7f0000000740)=""/253, 0xfd}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010428bd7040010001000f00000008000300", @ANYRES32=r7, @ANYBLOB="0800390001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40818) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000002c0)=r8, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe80000a000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') bpf$MAP_CREATE(0x0, 0x0, 0xfd2f) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 3.827624106s ago: executing program 4 (id=4312): openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x208000, 0x0) 3.788673905s ago: executing program 5 (id=4313): r0 = socket(0xa, 0x3, 0xff) socket$tipc(0x1e, 0x5, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000280)=0xf2, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) shutdown(r1, 0x2) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1003, 0x3a, 0x1000, 0x3c, 0x7ff, 0xf83, 0x7}, 0x1c) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x14}], 0x18, 0x20000040}], 0x1, 0x8040) sendto$inet(r6, &(0x7f0000000c40)="168935fadd8bde2b2f3fbe4e0e1dbe089d8f21a8a28be921448ec64e4fd082b2386a1adc", 0x24, 0x20000001, 0x0, 0x0) recvmsg$can_bcm(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/102, 0x66}], 0x1}, 0x100) recvmmsg(r0, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}, 0xd}], 0x1, 0x40010022, 0x0) r7 = fspick(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r8 = open$dir(&(0x7f0000000740)='./file0\x00', 0x4800, 0x1) fsconfig$FSCONFIG_SET_PATH(r7, 0x3, &(0x7f00000006c0)='rfc4106(gcm(aes))\x00', &(0x7f0000000700)='./file0\x00', r8) r9 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f0000000280)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r9, 0xc03064b7, &(0x7f0000000200)={r10, r11, r12, 0x80000003, 0x1000a2a, 0xfffffffc, 0x4000, 0x200, 0x3, 0xc, 0x3000040, 0x6}) sendmsg$alg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="fda330de1b35a6610d49ba77061420d066bcdace99b42e7df0f125f20db8235ae9ceecc193d8f4649622fd7506c3f39bc5a9455161a234c8ab2e827cf82da73aa6a227e301be5c8b630536a95e464176be098f5162cd5c01759c2084b296431c5e255aec347af387db4b6c2dbdd91af17c0d7605210bb5ef9804b6ab7ceb6893d3870c7c0be075a6037ec642ce02", 0x8e}, {&(0x7f00000000c0)="01f43c6ae972814d0a5d87ba39fdc105321f8092e55eed6a4d325a57b1ca41dfb177286c54bd17fc31bc9bba739f39bbae5fed0f4fc6d40b377731b945a4900d3c1b3c7652a6242095af81a338b7dbe2168f66446640bf33dca5ced35d1a1be3c14bdc7ad9f2b182df61b51bd77dd4915ad531824841fa9a02739043996ccf243daf6935305ad431b946907ffb83eeb962bdf24c8b1ad131695fe4b234ad667c31dabd70307cd4de5b708a788adb04e32e0b654fa7b505435eef6996b3f5fcf4df5a1424e59f86cc6c5e390b23", 0xcd}, {&(0x7f0000000200)="832243f49f292e0d57e22d308514a8e5307528962315258aecdefbd7c310ad14cf5401109c50813083f68a22d4373bb2531e788fbc6c56bd8681f0aff9f3d587bd31b4a297cb1db8e4017f66e117077ebfc8a56d68b54a15bef0c2f34368e4108103c69da3d2e3552b8bbda964218c33", 0x70}, {&(0x7f00000002c0)="e79cd0b0e1a36ff7d5a457c3851bde7c3225a43d105cf1a61d03ad6629213a69f7cee79dcf6740f7001edea520d52937a64cd394", 0x34}, {&(0x7f0000000300)="e0d31469c4202c114c25b5719fb75379c9442000d02b7397735100bf2a5c7ccdb96a534a07232eb46737124f238441a7bd9ba8799ef236519d877c90ca0f8c9904268966e0ff281c71dfd78e577841cdf020e641f39f25be764acb47add087e4644d2cf4d4014a52bbf8231d191f3249efe654e0fd77d2f208018a87ac488861e4bfcb5ed6565a20b6a44465fcafb3ffefb7ca0fdeddda362037eb47d05bf320e037f06fb2de170f9481fe9941b9d969b416a9fe762cd6", 0xb7}, {&(0x7f00000003c0)="60f0919681ebad9c0d35e5f1868724d252926be70cd607a811f8f41440edc7", 0x1f}, {&(0x7f0000000400)}, {&(0x7f0000000440)="e63efaf2fb24c579584866a4a7f2476ee4acdf1bc4b39848a2cd4f55bc52eb02c298a8cb60bd5797fd968c6363d0c6e65c7154724d24737f1a219ceb897dd72e84330fe8b00d0d46af0ec6f824e0c00bfe71f1222e2c1db295f9ce78d182ff29107a1bb5c35c603d13cc777a2e13a97142b4dca45df73ad5599eba21d2285aecd110898cb665304f8ef3a7a49f786716176360d01bad37bf3d9e4612f44e837f17fc2493ba5d2f51", 0xa8}], 0x8, &(0x7f0000000580)=[@assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18, 0x117, 0x4, 0x7fffffff}, @assoc={0x18, 0x117, 0x4, 0x1ff}, @assoc={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x40, 0x117, 0x2, 0x2c, "03a536e036005a0434ab2da7989c069a392a51e3a6a2ff412035857a7d747dc270adbb49b5468797c123d3c3"}], 0xd0}, 0x8080) 3.683294951s ago: executing program 3 (id=4314): syz_emit_ethernet(0x82, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x4, 0x0, 0xfe, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x1, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3, 0xff}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x4, [{@multicast1=0xe0000006, 0x1}, {@dev, 0x2}, {@dev}, {@remote}, {@empty, 0x1}, {@multicast1, 0x4}, {@empty, 0xffffff08}]}]}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1}}, 0x20) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) syz_usb_connect$uac1(0x0, 0x8b, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000200000008cc1778194000010203010902790003010120020904000000010100000a240101000a00020102090401000001020000090401010101020000092402010b09080f0100000000000092a9eecb02c8000905010940000203080725010c00000009040200000102000009040201010102000009240201810103fa3909058209100009810507"], 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000440)=ANY=[@ANYBLOB="0500000000000000030000000000000003"]) 3.668442832s ago: executing program 4 (id=4315): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x7fffffffefffffde, 0x40) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000000c0)={0x1, 0x410, {0x4, 0x0, 0x3014, 0x2, 0x2, 0x410}}) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x6) 3.527618032s ago: executing program 4 (id=4316): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') getdents64(r2, &(0x7f0000000380)=""/52, 0x34) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r3, 0x4112, 0x0) 3.072871482s ago: executing program 5 (id=4317): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2b, 0x80801, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=[{0x20, 0x84, 0x8, "fe8000000000000002"}], 0x20}, 0x41) 3.006527343s ago: executing program 2 (id=4318): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) connect$unix(r0, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x100000001, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 2.665125852s ago: executing program 2 (id=4319): ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0x980901}) 2.605092328s ago: executing program 6 (id=4320): r0 = socket(0x1, 0x80802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x10000001}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r0], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) shutdown(r0, 0x0) 2.523815729s ago: executing program 2 (id=4321): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, &(0x7f0000000000)={0xffff, 0x6}, 0x1) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000)) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x40800, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$kcm(0x23, 0x5, 0x0) listen(r3, 0x8) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x9) sendfile(r4, r2, 0x0, 0x7ffff088) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimensat(r2, &(0x7f0000000040)='./file1/file0\x00', &(0x7f0000000200)={{}, {r5, r6/1000+10000}}, 0x100) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407d1ebe2d00000000000109022400010000000009040000010300000009210000fc0122070009058103"], 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f0000000880)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1000700000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd673c1eeda4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d06c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235eaa92143ce4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05be23dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6f89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00220700000001ab6c0463931861621bbbe285715f935893af80327ac69f5635c3c221d028248f60ff7e834a6152e6bd2283667959b6346526cd4d9ab269de67a2c75a26b8407ee9015b32e34f961297a6cdb9032252d3e530a77d0cae41368e8408c346a5b8"], 0x0}, 0x0) 2.352010411s ago: executing program 5 (id=4322): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000100)=0x570) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x7ff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_GET_GS(0x1e, r4, &(0x7f0000000180), 0x1004) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000140)={r6, 0x1, 0x6, @local}, 0x10) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\t', @ANYRES32=r0, @ANYRESOCT=r5, @ANYRES8=r1, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_usb_ep_write(r7, 0x81, 0x0, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x11, 0x6, @broadcast}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_settime(0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) 2.066626689s ago: executing program 3 (id=4323): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = msgget$private(0x0, 0x0) msgsnd(r1, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="010000ffffffffffffff9900000008000300", @ANYRES32=r4, @ANYBLOB="7c005a80"], 0x98}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b178afec", @ANYRES16=r3, @ANYBLOB="000129bd7000fddbdf25620000000c0099007f000000760000000600b300030000000600b300010000000600b300010000000600b400060e0000"], 0x40}, 0x1, 0x0, 0x0, 0x24008081}, 0x81) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r5, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x3, {}, {}, @result={0x1f00}}], 0x1c) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000002c0)=""/99) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000140)=0x5, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000206010200000000000000000000000605000100070000000900020073797a3000000000140007800500151e0100000008001340fffff80005000400000000000500040001000000050005000a000000"], 0x54}, 0x1, 0x0, 0x0, 0xc040}, 0x40800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 1.892642941s ago: executing program 3 (id=4324): syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902"], 0x0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0xb, 0x90, 0x2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1000, 0x1007, 0xc}, {0x6, 0x24, 0x1a, 0x1, 0x21}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x5, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x3, 0xe, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x2d, 0x93}}}}}}}]}}, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000a80)='.\x00', 0x89901) fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x81, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) epoll_create1(0x80000) pipe(&(0x7f00000000c0)) pipe(&(0x7f0000000300)) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900000000000800110000000000", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) 602.058539ms ago: executing program 2 (id=4325): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2000}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000027c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002780)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x2370}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x28, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x7fff}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x404c080}, 0x4008840) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) pread64(r7, 0x0, 0x0, 0x337a4002) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r8 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_access(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="7379737465794ea52e6ff3e96563745f723a6661696c6c6f675f743a7330202f7573722f7362696e2f6e74706420303030303030303030303030303030303030303900802548a2c1f395d1e76d352dd2cd47426b8da107e0b663068dd7091117d38fd28bb2ab76aed7d51ac302c3283e2c5468dcfe877c99a744016384e214c2f8481e7ea3a1c07012c90ba4a4978b956e"], 0x43) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc140000001100010000000000000000000100000acb1787350821a927da4a0b554d845fc3bc9e14d00a17e8d9701c8930c8d4d89d1335fbac76319eaf7ccb058541c5a9f20087931ff34f27f2ef596ca2bc93d954e489c5637d17f736a5509ff3dfac5148caea8a6c7fab83a815f2e20c7f6d3a8269f632f15719521ab7"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x1}}, 0x30) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x404c080}, 0x4008840) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000002800)={"7ce7e9aac5edace854a7429cd9891ad9", r10, 0x0, {0x3, 0x2}, {0x7, 0xffffc38b}, 0x1000, [0x3, 0x5, 0x0, 0x8000000000000001, 0x1, 0x7, 0xfffffffffffffa31, 0x3, 0xffffffffffffffff, 0x96fe, 0x101, 0x7, 0x7, 0xfffffffffffff001, 0xb, 0x6]}) 503.460326ms ago: executing program 3 (id=4326): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c40000000000000000000085"], 0x0}, 0x94) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x2800, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) 379.805984ms ago: executing program 3 (id=4327): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f00000000000010e20000000000000000001300", [0xfffffffffffffffe, 0x8]}}) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x400000000000004, 0x2ac, 0x0, 0x0, 0x15, 0x19, "8975301576b0cf0900245518580ce0c8bf604cca41f31c108938fcfa393edb69e0bcff0f0000000000000900000000000000d0f08e8ad896ba67a00973defa00", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000827cc7d24fdc26f2395d702020000e4b8fb1703e47463b969e4", "ca1bf5ff2b4a000000000000008218040000db00", [0xc, 0x2000000]}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='vxfs\x00', 0x1000080, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2, 0x3, 0x1000}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001600)={0x48, r9, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x8000) fchdir(r11) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) mkdirat$cgroup(r11, &(0x7f0000000100)='syz1\x00', 0x1ff) r12 = openat$cgroup_ro(r11, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000200)=0x1, 0x12) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) 315.169838ms ago: executing program 2 (id=4328): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x80047458, 0x0) 0s ago: executing program 4 (id=4329): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) connect$unix(r0, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x100000001, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) kernel console output (not intermixed with test programs): x2e/0xd0 [ 1235.701905][T22177] copy_msghdr_from_user+0x9f/0x4f0 [ 1235.701921][T22177] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1235.701937][T22177] ? __pfx__kstrtoull+0x10/0x10 [ 1235.701952][T22177] ___sys_sendmsg+0x106/0x1e0 [ 1235.701966][T22177] ? __pfx____sys_sendmsg+0x10/0x10 [ 1235.701986][T22177] ? find_held_lock+0x2b/0x80 [ 1235.702005][T22177] __sys_sendmmsg+0x205/0x430 [ 1235.702017][T22177] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1235.702032][T22177] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1235.702053][T22177] ? fput+0x79/0x100 [ 1235.702067][T22177] ? ksys_write+0x1ac/0x250 [ 1235.702078][T22177] ? __pfx_ksys_write+0x10/0x10 [ 1235.702092][T22177] __x64_sys_sendmmsg+0x9c/0x100 [ 1235.702102][T22177] ? lockdep_hardirqs_on+0x78/0x100 [ 1235.702117][T22177] do_syscall_64+0x10b/0xf80 [ 1235.702130][T22177] ? clear_bhb_loop+0x40/0x90 [ 1235.702143][T22177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.702154][T22177] RIP: 0033:0x7fe84ed9ce59 [ 1235.702164][T22177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1235.702175][T22177] RSP: 002b:00007fe84cfb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1235.702186][T22177] RAX: ffffffffffffffda RBX: 00007fe84f016180 RCX: 00007fe84ed9ce59 [ 1235.702193][T22177] RDX: 00000000000004ff RSI: 00002000000092c0 RDI: 0000000000000006 [ 1235.702200][T22177] RBP: 00007fe84cfb4090 R08: 0000000000000000 R09: 0000000000000000 [ 1235.702206][T22177] R10: 000000000000f401 R11: 0000000000000246 R12: 0000000000000001 [ 1235.702212][T22177] R13: 00007fe84f016218 R14: 00007fe84f016180 R15: 00007ffe6a00eae8 [ 1235.702226][T22177] [ 1235.918072][T16034] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1235.926761][T16034] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1235.946088][T16034] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1235.956381][T16034] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1235.976182][T16034] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1235.999739][T16034] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1236.008088][T16034] usb 5-1: Product: syz [ 1236.014445][T16034] usb 5-1: Manufacturer: syz [ 1236.031375][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1236.031391][ T30] audit: type=1400 audit(1778698997.578:1969): avc: denied { sys_module } for pid=22173 comm="syz.2.4011" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1236.061147][T16034] cdc_wdm 5-1:1.0: skipping garbage [ 1236.066429][T16034] cdc_wdm 5-1:1.0: skipping garbage [ 1236.073245][T16034] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1236.079261][T16034] cdc_wdm 5-1:1.0: Unknown control protocol [ 1236.112133][T22181] sit0: entered promiscuous mode [ 1236.117901][T22181] netlink: 'syz.3.4012': attribute type 1 has an invalid length. [ 1236.125752][T22181] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4012'. [ 1236.198526][ T30] audit: type=1400 audit(1778698997.728:1970): avc: denied { create } for pid=22182 comm="syz.2.4013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1236.232941][T22183] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4013'. [ 1236.276514][ T30] audit: type=1400 audit(1778698997.756:1971): avc: denied { create } for pid=22182 comm="syz.2.4013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1236.332450][ T30] audit: type=1400 audit(1778698997.756:1972): avc: denied { write } for pid=22182 comm="syz.2.4013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1236.519992][T22189] comedi comedi3: comedi_test: 7 microvolt, 2046 microsecond waveform attached [ 1236.587468][ T30] audit: type=1400 audit(1778698997.905:1973): avc: denied { getopt } for pid=22182 comm="syz.2.4013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1236.700260][T22190] netlink: 'syz.4.4007': attribute type 2 has an invalid length. [ 1236.708301][T22190] netlink: 'syz.4.4007': attribute type 2 has an invalid length. [ 1237.006772][ T30] audit: type=1400 audit(1778698997.905:1974): avc: denied { getopt } for pid=22186 comm="syz.3.4014" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1237.269468][ T30] audit: type=1400 audit(1778698997.971:1975): avc: denied { read write } for pid=22162 comm="syz.4.4007" name="cdc-wdm0" dev="devtmpfs" ino=8687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1237.575521][ T30] audit: type=1400 audit(1778698997.971:1976): avc: denied { open } for pid=22162 comm="syz.4.4007" path="/dev/cdc-wdm0" dev="devtmpfs" ino=8687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1237.663010][ T30] audit: type=1400 audit(1778698997.990:1977): avc: denied { ioctl } for pid=22162 comm="syz.4.4007" path="/dev/cdc-wdm0" dev="devtmpfs" ino=8687 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1237.783320][ T30] audit: type=1400 audit(1778698997.999:1978): avc: denied { create } for pid=22186 comm="syz.3.4014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1238.444854][T22200] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4015'. [ 1238.483705][T22200] vlan2: entered promiscuous mode [ 1238.488916][T22200] erspan0: entered promiscuous mode [ 1238.822334][T22203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4017'. [ 1238.840171][T18816] usb 5-1: USB disconnect, device number 94 [ 1238.869280][T22203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22203 comm=syz.2.4017 [ 1239.385737][T16034] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1239.579631][T16034] usb 7-1: Using ep0 maxpacket: 16 [ 1239.607341][T16034] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1239.625163][T16034] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1239.657104][T22221] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4024'. [ 1239.670116][T16034] usb 7-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f [ 1239.708587][T16034] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.732118][T16034] usb 7-1: Product: syz [ 1239.746636][T16034] usb 7-1: Manufacturer: syz [ 1239.759883][T16034] usb 7-1: SerialNumber: syz [ 1239.778206][T16034] usb 7-1: config 0 descriptor?? [ 1239.802701][T16034] kobil_sct 7-1:0.0: KOBIL USB smart card terminal converter detected [ 1239.827021][T16034] usb 7-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1239.921005][T22244] netlink: 'syz.2.4025': attribute type 2 has an invalid length. [ 1239.971322][T22244] netlink: 'syz.2.4025': attribute type 2 has an invalid length. [ 1240.011375][T22246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1240.045458][T22246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1240.096170][ T5802] usb 7-1: USB disconnect, device number 8 [ 1240.110514][ T5802] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1240.147031][ T5802] kobil_sct 7-1:0.0: device disconnected [ 1241.444669][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1241.444685][ T30] audit: type=1326 audit(1778699002.641:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22255 comm="syz.4.4030" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e1219ce59 code=0x0 [ 1241.684191][ T30] audit: type=1400 audit(1778699002.865:2001): avc: denied { write } for pid=22259 comm="syz.5.4031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1241.993174][ T5802] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1242.153614][ T5802] usb 6-1: Using ep0 maxpacket: 32 [ 1242.160002][ T5802] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1242.171151][ T5802] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1242.180924][ T5802] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1242.190323][ T5802] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.199656][ T5802] usb 6-1: config 0 descriptor?? [ 1242.208289][ T5802] hub 6-1:0.0: USB hub found [ 1242.421387][ T5802] hub 6-1:0.0: 1 port detected [ 1242.675058][T22229] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1242.961114][ T30] audit: type=1400 audit(1778699004.054:2002): avc: denied { listen } for pid=22265 comm="syz.4.4034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1242.991137][ T30] audit: type=1400 audit(1778699004.054:2003): avc: denied { create } for pid=22265 comm="syz.4.4034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1243.016253][ T30] audit: type=1400 audit(1778699004.054:2004): avc: denied { read } for pid=22269 comm="syz.6.4037" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1243.075766][ T30] audit: type=1400 audit(1778699004.054:2005): avc: denied { open } for pid=22269 comm="syz.6.4037" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1243.100471][ T5802] hub 6-1:0.0: activate --> -90 [ 1243.106536][ T30] audit: type=1400 audit(1778699004.091:2006): avc: denied { read append } for pid=22269 comm="syz.6.4037" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1243.110324][T22275] Invalid option length (1151) for dns_resolver key [ 1243.133844][ T30] audit: type=1400 audit(1778699004.091:2007): avc: denied { open } for pid=22269 comm="syz.6.4037" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1243.169971][ T30] audit: type=1400 audit(1778699004.138:2008): avc: denied { unlink } for pid=22274 comm="syz.2.4038" name="#10f" dev="tmpfs" ino=1148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1243.183512][T22275] netlink: 'syz.2.4038': attribute type 30 has an invalid length. [ 1243.196518][ T30] audit: type=1400 audit(1778699004.138:2009): avc: denied { mount } for pid=22274 comm="syz.2.4038" name="/" dev="overlay" ino=1143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1243.223770][T18816] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1243.232081][T22275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4038'. [ 1243.327308][T22281] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4039'. [ 1243.337019][T22281] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4039'. [ 1243.404848][T18816] usb 4-1: Using ep0 maxpacket: 16 [ 1243.415463][T18816] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1243.424176][T18816] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1243.434622][T18816] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1243.447756][T18816] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1243.457823][T18816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.480519][T18816] usb 4-1: Product: syz [ 1243.489471][T18816] usb 4-1: Manufacturer: syz [ 1243.500506][T18816] usb 4-1: SerialNumber: syz [ 1243.516841][T18816] usb 4-1: 0:2 : does not exist [ 1243.537557][T22262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4032'. [ 1243.559400][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.573259][ T5737] usb 6-1: USB disconnect, device number 20 [ 1243.677636][T22287] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 1243.809825][ T5802] usb 6-1-port1: config error [ 1244.723683][T18816] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1244.844757][T18816] usb 4-1: USB disconnect, device number 110 [ 1246.123212][T22131] udevd[22131]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1246.170473][ T1221] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1246.179350][ T1221] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1246.246205][T18452] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1246.260990][T22314] netlink: 'syz.3.4047': attribute type 2 has an invalid length. [ 1246.318260][T22314] netlink: 'syz.3.4047': attribute type 2 has an invalid length. [ 1246.417204][T18452] usb 3-1: Using ep0 maxpacket: 16 [ 1246.424877][T18452] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.435516][T18452] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1246.461554][T18452] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1246.572464][T18452] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.602813][T18452] usb 3-1: config 0 descriptor?? [ 1246.791500][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1246.791531][ T30] audit: type=1400 audit(1778699007.638:2026): avc: denied { write } for pid=22320 comm="syz.4.4050" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1246.874110][T18452] usb 3-1: USB disconnect, device number 116 [ 1246.909833][ T30] audit: type=1400 audit(1778699007.675:2027): avc: denied { map } for pid=22320 comm="syz.4.4050" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1247.417055][ T30] audit: type=1400 audit(1778699008.227:2028): avc: denied { write } for pid=22320 comm="syz.4.4050" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1247.599639][ T30] audit: type=1400 audit(1778699008.396:2029): avc: denied { write } for pid=22309 comm="syz.6.4046" name="hidraw0" dev="devtmpfs" ino=8708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1248.258549][T22336] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4053'. [ 1248.620406][T22332] serio: Serial port ttyprintk [ 1248.763122][T22341] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4054'. [ 1249.091915][ T30] audit: type=1400 audit(1778699009.799:2030): avc: denied { execute_no_trans } for pid=22351 comm="syz.5.4059" path="/144/file0" dev="tmpfs" ino=793 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1249.134879][ T30] audit: type=1400 audit(1778699009.818:2031): avc: denied { bind } for pid=22351 comm="syz.5.4059" lport=64 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1249.158639][ T30] audit: type=1400 audit(1778699009.818:2032): avc: denied { node_bind } for pid=22351 comm="syz.5.4059" saddr=ffff:ffff:6465:7244:3132:3800:: scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1249.184891][ T5802] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 1249.368473][ T5802] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1249.378239][ T5802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.388056][T16034] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1249.419350][ T5802] usb 5-1: config 0 descriptor?? [ 1249.533916][T22357] overlayfs: failed to resolve './file2': -2 [ 1249.551630][T22357] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4060'. [ 1249.582693][T16034] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1249.601180][T16034] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.617500][T16034] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 1249.651694][T16034] usb 6-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 1249.662488][T16034] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.692972][T16034] usb 6-1: Product: syz [ 1249.703194][T16034] usb 6-1: Manufacturer: syz [ 1249.710631][T16034] usb 6-1: SerialNumber: syz [ 1249.865218][T22360] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.4061'. [ 1249.919944][ T5802] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1249.922726][ T24] Process accounting resumed [ 1249.953503][ T30] audit: type=1400 audit(1778699010.595:2033): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1249.977183][ T5802] [drm:udl_init] *ERROR* Selecting channel failed [ 1250.001170][ T5802] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 1250.008616][ T5802] [drm] Initialized udl on minor 2 [ 1250.017875][ T5802] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1250.029324][ T5802] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1250.041189][ T5737] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1250.052567][ T5802] usb 5-1: USB disconnect, device number 95 [ 1250.063090][ T5737] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1250.247077][T16034] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1250.281687][T16034] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1250.361601][T22372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1250.397611][T22372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1250.601858][T22372] wg1 speed is unknown, defaulting to 1000 [ 1250.607935][T16734] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1250.677024][T22374] wg1 speed is unknown, defaulting to 1000 [ 1250.731193][T16034] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1250.830936][ T30] audit: type=1400 audit(1778699011.428:2034): avc: denied { write } for pid=22364 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1251.177325][T16034] usb 6-1: USB disconnect, device number 21 [ 1251.526023][T22130] udevd[22130]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1251.559320][ T5737] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1251.644311][T22389] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1251.653067][T22389] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1251.664623][T22389] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1251.683616][ T30] audit: type=1400 audit(1778699012.195:2035): avc: denied { firmware_load } for pid=22388 comm="syz.5.4066" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1251.767522][ T5737] usb 7-1: Using ep0 maxpacket: 32 [ 1251.778882][ T5737] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1251.790252][ T5737] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1251.811986][ T5737] usb 7-1: can't read configurations, error -71 [ 1252.473773][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1252.473791][ T30] audit: type=1400 audit(1778699012.953:2037): avc: denied { write } for pid=22396 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1253.020081][ T30] audit: type=1400 audit(1778699013.000:2038): avc: denied { write } for pid=22413 comm="syz.6.4070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1253.029960][T22417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6672 sclass=netlink_route_socket pid=22417 comm=syz.2.4069 [ 1253.039833][ T30] audit: type=1400 audit(1778699013.150:2039): avc: denied { write } for pid=22408 comm="syz.4.4068" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1253.157398][ T30] audit: type=1400 audit(1778699013.599:2040): avc: denied { write } for pid=22422 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1253.295035][ T30] audit: type=1400 audit(1778699013.730:2041): avc: denied { read append } for pid=22428 comm="syz.2.4073" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1253.649209][ T30] audit: type=1400 audit(1778699013.730:2042): avc: denied { open } for pid=22428 comm="syz.2.4073" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1253.673041][T22431] netlink: 2048 bytes leftover after parsing attributes in process `syz.5.4072'. [ 1253.684715][ T30] audit: type=1400 audit(1778699013.833:2043): avc: denied { create } for pid=22426 comm="syz.6.4071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1253.705016][T22431] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4072'. [ 1253.714701][ T30] audit: type=1400 audit(1778699013.833:2044): avc: denied { create } for pid=22426 comm="syz.6.4071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1253.736402][ T30] audit: type=1400 audit(1778699013.842:2045): avc: denied { ioctl } for pid=22426 comm="syz.6.4071" path="socket:[87200]" dev="sockfs" ino=87200 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1253.917211][T22432] SELinux: policydb magic number 0x20080522 does not match expected magic number 0xf97cff8c [ 1253.932862][T22432] SELinux: failed to load policy [ 1254.618640][T22438] qnx6: unable to set blocksize [ 1255.348240][ T24] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1255.501314][ T30] audit: type=1400 audit(1778699013.889:2046): avc: denied { connect } for pid=22428 comm="syz.2.4073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1255.576258][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1255.613410][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.653246][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1255.675611][ T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1255.712956][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.738999][ T24] usb 3-1: config 0 descriptor?? [ 1255.788902][T18816] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 1255.917068][T16734] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1255.950762][T18816] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.965704][T18816] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1255.976776][T18816] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1255.987365][T18816] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1256.002258][T18816] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1256.011566][T18816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.020236][T18816] usb 5-1: Product: syz [ 1256.029098][T18816] usb 5-1: Manufacturer: syz [ 1256.042924][T18816] usb 5-1: SerialNumber: syz [ 1256.063298][T18816] cdc_ncm 5-1:1.0: skipping garbage [ 1256.111720][T16734] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1256.123596][T16734] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1256.133145][T16734] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.144415][T16734] usb 6-1: config 0 descriptor?? [ 1256.153630][T16734] pwc: Askey VC010 type 2 USB webcam detected. [ 1256.587390][T16734] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1256.594978][T16734] pwc: recv_control_msg error -32 req 02 val 2700 [ 1256.602284][T16734] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1256.609327][T16734] pwc: recv_control_msg error -32 req 04 val 1000 [ 1256.617003][T16734] pwc: recv_control_msg error -32 req 04 val 1300 [ 1256.847760][T16734] pwc: recv_control_msg error -71 req 02 val 2000 [ 1256.868481][T16734] pwc: recv_control_msg error -71 req 02 val 2100 [ 1256.877732][T16734] pwc: recv_control_msg error -71 req 04 val 1500 [ 1256.958762][T22463] FAULT_INJECTION: forcing a failure. [ 1256.958762][T22463] name failslab, interval 1, probability 0, space 0, times 0 [ 1256.971495][T22463] CPU: 1 UID: 0 PID: 22463 Comm: syz.6.4080 Tainted: G L syzkaller #0 PREEMPT(full) [ 1256.971521][T22463] Tainted: [L]=SOFTLOCKUP [ 1256.971528][T22463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1256.971539][T22463] Call Trace: [ 1256.971546][T22463] [ 1256.971553][T22463] dump_stack_lvl+0x100/0x190 [ 1256.971590][T22463] should_fail_ex.cold+0x5/0xa [ 1256.971615][T22463] ? tomoyo_encode2+0xfb/0x3c0 [ 1256.971638][T22463] should_failslab+0xc2/0x120 [ 1256.971659][T22463] __kmalloc_noprof+0xe0/0x850 [ 1256.971684][T22463] ? d_absolute_path+0x136/0x1b0 [ 1256.971709][T22463] tomoyo_encode2+0xfb/0x3c0 [ 1256.971738][T22463] tomoyo_encode+0x29/0x50 [ 1256.971761][T22463] tomoyo_realpath_from_path+0x18c/0x690 [ 1256.971793][T22463] tomoyo_mount_acl+0x1b6/0x8b0 [ 1256.971819][T22463] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1256.971842][T22463] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 1256.971866][T22463] ? unwind_get_return_address+0x59/0xa0 [ 1256.971896][T22463] ? preempt_schedule_irq+0x7b/0x90 [ 1256.971941][T22463] ? tomoyo_domain+0xb2/0x150 [ 1256.971967][T22463] ? tomoyo_profile+0x47/0x60 [ 1256.971997][T22463] tomoyo_mount_permission+0x214/0x460 [ 1256.972019][T22463] ? tomoyo_mount_permission+0x1f6/0x460 [ 1256.972044][T22463] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1256.972083][T22463] security_sb_mount+0xdd/0x270 [ 1256.972106][T22463] path_mount+0x158/0x23d0 [ 1256.972137][T22463] ? __pfx_path_mount+0x10/0x10 [ 1256.972161][T22463] ? lockdep_hardirqs_on+0x78/0x100 [ 1256.972188][T22463] ? putname+0xb1/0x110 [ 1256.972210][T22463] ? kmem_cache_free+0x127/0x6c0 [ 1256.972244][T22463] ? __x64_sys_mount+0x293/0x310 [ 1256.972269][T22463] __x64_sys_mount+0x293/0x310 [ 1256.972296][T22463] ? __pfx___x64_sys_mount+0x10/0x10 [ 1256.972321][T22463] ? exit_to_user_mode_loop+0xe2/0x4f0 [ 1256.972347][T22463] ? rcu_is_watching+0x12/0xc0 [ 1256.972378][T22463] do_syscall_64+0x10b/0xf80 [ 1256.972402][T22463] ? clear_bhb_loop+0x40/0x90 [ 1256.972423][T22463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.972442][T22463] RIP: 0033:0x7fe84ed9ce59 [ 1256.972457][T22463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1256.972475][T22463] RSP: 002b:00007fe84cfb4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1256.972492][T22463] RAX: ffffffffffffffda RBX: 00007fe84f016180 RCX: 00007fe84ed9ce59 [ 1256.972504][T22463] RDX: 0000200000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 1256.972515][T22463] RBP: 00007fe84cfb4090 R08: 00002000000001c0 R09: 0000000000000000 [ 1256.972526][T22463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1256.972536][T22463] R13: 00007fe84f016218 R14: 00007fe84f016180 R15: 00007ffe6a00eae8 [ 1256.972561][T22463] [ 1256.972651][T22463] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1257.110514][T16734] pwc: recv_control_msg error -71 req 02 val 2500 [ 1257.264159][T16734] pwc: recv_control_msg error -71 req 02 val 2400 [ 1257.271048][T16734] pwc: recv_control_msg error -71 req 02 val 2600 [ 1257.278008][T16734] pwc: recv_control_msg error -71 req 02 val 2900 [ 1257.284944][T16734] pwc: recv_control_msg error -71 req 02 val 2800 [ 1257.292327][T16734] pwc: recv_control_msg error -71 req 04 val 1100 [ 1257.299578][T16734] pwc: recv_control_msg error -71 req 04 val 1200 [ 1257.309787][T16734] pwc: Registered as video103. [ 1257.326846][T22443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1257.339439][T22443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1257.353172][T22467] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4082'. [ 1257.354129][T22468] netlink: 'syz.3.4082': attribute type 4 has an invalid length. [ 1257.365003][T16734] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input92 [ 1257.407413][T18816] cdc_ncm 5-1:1.0: bind() failure [ 1257.408598][T16734] usb 6-1: USB disconnect, device number 22 [ 1257.426219][T22467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22467 comm=syz.3.4082 [ 1257.455714][T18816] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 1257.490612][T18816] usb 5-1: USB disconnect, device number 96 [ 1257.910714][T22482] FAULT_INJECTION: forcing a failure. [ 1257.910714][T22482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1257.928722][T22482] CPU: 0 UID: 0 PID: 22482 Comm: syz.5.4086 Tainted: G L syzkaller #0 PREEMPT(full) [ 1257.928752][T22482] Tainted: [L]=SOFTLOCKUP [ 1257.928758][T22482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1257.928768][T22482] Call Trace: [ 1257.928774][T22482] [ 1257.928781][T22482] dump_stack_lvl+0x100/0x190 [ 1257.928808][T22482] should_fail_ex.cold+0x5/0xa [ 1257.928833][T22482] strncpy_from_user+0x3b/0x2d0 [ 1257.928861][T22482] do_getname+0x78/0x390 [ 1257.928888][T22482] __x64_sys_linkat+0xe0/0x150 [ 1257.928913][T22482] do_syscall_64+0x10b/0xf80 [ 1257.928936][T22482] ? clear_bhb_loop+0x40/0x90 [ 1257.928957][T22482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.928974][T22482] RIP: 0033:0x7f9830d9ce59 [ 1257.928988][T22482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1257.929004][T22482] RSP: 002b:00007f9831c01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 1257.929021][T22482] RAX: ffffffffffffffda RBX: 00007f9831015fa0 RCX: 00007f9830d9ce59 [ 1257.929031][T22482] RDX: ffffffffffffff9c RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 1257.929042][T22482] RBP: 00007f9831c01090 R08: 0000000000001000 R09: 0000000000000000 [ 1257.929051][T22482] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 1257.929061][T22482] R13: 00007f9831016038 R14: 00007f9831015fa0 R15: 00007ffd670d33a8 [ 1257.929083][T22482] [ 1258.098191][T16734] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1258.106104][T16706] usb 3-1: USB disconnect, device number 118 [ 1258.215130][T22489] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4089'. [ 1258.242467][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1258.242484][ T30] audit: type=1400 audit(1778699018.353:2051): avc: denied { ioctl } for pid=22485 comm="syz.4.4088" path="socket:[87544]" dev="sockfs" ino=87544 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1258.300132][ T30] audit: type=1400 audit(1778699018.399:2052): avc: denied { write } for pid=22488 comm="syz.5.4089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1258.324919][T16734] usb 7-1: Using ep0 maxpacket: 16 [ 1258.340060][T16734] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1258.351038][T16734] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1258.360181][T16734] usb 7-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1258.369731][T16734] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.381464][T16734] usb 7-1: config 0 descriptor?? [ 1258.537842][ T30] audit: type=1400 audit(1778699018.624:2053): avc: denied { mount } for pid=22494 comm="syz.3.4091" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1258.563692][ T30] audit: type=1400 audit(1778699018.633:2054): avc: denied { map } for pid=22495 comm="syz.2.4090" path="socket:[86793]" dev="sockfs" ino=86793 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1258.657353][ T30] audit: type=1400 audit(1778699018.727:2055): avc: denied { connect } for pid=22494 comm="syz.3.4091" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1258.764392][T16034] usb 7-1: USB disconnect, device number 11 [ 1258.802460][T18816] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1258.894348][T22504] can0: slcan on ttyS3. [ 1259.021375][T18816] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 1259.225705][T18816] usb 6-1: config 0 has no interface number 0 [ 1259.232557][T18816] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1259.244753][T18816] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1259.256856][T18816] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1259.270348][T18816] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1259.290826][T18816] usb 6-1: Manufacturer: syz [ 1259.301895][T18816] usb 6-1: SerialNumber: syz [ 1259.313522][T18816] usb 6-1: config 0 descriptor?? [ 1259.326201][T16734] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1259.484436][T16734] usb 3-1: device descriptor read/64, error -71 [ 1259.509638][T22515] FAULT_INJECTION: forcing a failure. [ 1259.509638][T22515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1259.526185][T22515] CPU: 1 UID: 0 PID: 22515 Comm: syz.6.4094 Tainted: G L syzkaller #0 PREEMPT(full) [ 1259.526212][T22515] Tainted: [L]=SOFTLOCKUP [ 1259.526218][T22515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1259.526229][T22515] Call Trace: [ 1259.526235][T22515] [ 1259.526242][T22515] dump_stack_lvl+0x100/0x190 [ 1259.526272][T22515] should_fail_ex.cold+0x5/0xa [ 1259.526298][T22515] _copy_to_user+0x32/0xd0 [ 1259.526324][T22515] simple_read_from_buffer+0xcb/0x170 [ 1259.526348][T22515] proc_fail_nth_read+0x1af/0x230 [ 1259.526369][T22515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1259.526390][T22515] ? rw_verify_area+0xce/0x6d0 [ 1259.526407][T22515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1259.526426][T22515] vfs_read+0x1e4/0xb30 [ 1259.526449][T22515] ? __pfx_vfs_read+0x10/0x10 [ 1259.526467][T22515] ? __fget_files+0x215/0x3d0 [ 1259.526495][T22515] ? __fget_files+0x21f/0x3d0 [ 1259.526530][T22515] ksys_read+0x12a/0x250 [ 1259.526548][T22515] ? __pfx_ksys_read+0x10/0x10 [ 1259.526570][T22515] ? rcu_is_watching+0x12/0xc0 [ 1259.526600][T22515] do_syscall_64+0x10b/0xf80 [ 1259.526625][T22515] ? clear_bhb_loop+0x40/0x90 [ 1259.526647][T22515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.526665][T22515] RIP: 0033:0x7fe84ed5d68e [ 1259.526681][T22515] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1259.526697][T22515] RSP: 002b:00007fe84cff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1259.526715][T22515] RAX: ffffffffffffffda RBX: 00007fe84cff66c0 RCX: 00007fe84ed5d68e [ 1259.526726][T22515] RDX: 000000000000000f RSI: 00007fe84cff60a0 RDI: 0000000000000006 [ 1259.526737][T22515] RBP: 00007fe84cff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1259.526747][T22515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1259.526757][T22515] R13: 00007fe84f016038 R14: 00007fe84f015fa0 R15: 00007ffe6a00eae8 [ 1259.526780][T22515] [ 1259.733141][T22498] can0 (unregistered): slcan off ttyS3. [ 1259.760743][ T30] audit: type=1400 audit(1778699019.775:2056): avc: denied { write } for pid=22506 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1259.813994][T18816] usbtouchscreen 6-1:0.214: Failed to read FW rev: -32 [ 1259.821053][T18816] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -32 [ 1259.860265][T16734] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1259.979349][T22489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1260.008516][T16034] usb 6-1: USB disconnect, device number 23 [ 1260.026243][ T30] audit: type=1400 audit(1778699020.028:2057): avc: denied { write } for pid=22522 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1260.063590][T16734] usb 3-1: device descriptor read/64, error -71 [ 1260.170135][T18816] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1260.181612][T16734] usb usb3-port1: attempt power cycle [ 1260.304014][ T30] audit: type=1400 audit(1778699020.290:2058): avc: denied { write } for pid=22525 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1260.342268][T18816] usb 5-1: device descriptor read/64, error -71 [ 1260.381727][ T30] audit: type=1400 audit(1778699020.355:2059): avc: denied { write } for pid=22538 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1260.480317][ T24] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1260.544195][T16734] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1260.580576][T16734] usb 3-1: device descriptor read/8, error -71 [ 1260.608393][T18816] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1260.640433][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1260.650008][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1260.667132][ T30] audit: type=1400 audit(1778699020.627:2060): avc: denied { read write } for pid=22540 comm="syz.5.4098" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1260.690957][ T24] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1260.700069][ T24] usb 7-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1260.716363][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.728384][ T24] usb 7-1: config 0 descriptor?? [ 1260.765646][T22543] SELinux: Context system_u:object is not valid (left unmapped). [ 1260.768569][T18816] usb 5-1: device descriptor read/64, error -71 [ 1260.864892][T16734] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1260.886504][T16734] usb 3-1: device descriptor read/8, error -71 [ 1260.896968][T18816] usb usb5-port1: attempt power cycle [ 1261.015108][T16734] usb usb3-port1: unable to enumerate USB device [ 1261.260123][T18816] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1261.281899][T18816] usb 5-1: device descriptor read/8, error -71 [ 1261.538032][T18816] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1261.559900][T18816] usb 5-1: device descriptor read/8, error -71 [ 1261.682956][T18816] usb usb5-port1: unable to enumerate USB device [ 1261.726636][T22549] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4100'. [ 1262.150227][T22555] netlink: 'syz.2.4101': attribute type 10 has an invalid length. [ 1262.303464][T22555] team0: Port device ªªªªªª added [ 1263.492602][T18816] usb 7-1: USB disconnect, device number 12 [ 1263.662773][T22576] FAULT_INJECTION: forcing a failure. [ 1263.662773][T22576] name failslab, interval 1, probability 0, space 0, times 0 [ 1263.688777][T22576] CPU: 0 UID: 0 PID: 22576 Comm: syz.6.4107 Tainted: G L syzkaller #0 PREEMPT(full) [ 1263.688808][T22576] Tainted: [L]=SOFTLOCKUP [ 1263.688814][T22576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1263.688824][T22576] Call Trace: [ 1263.688831][T22576] [ 1263.688838][T22576] dump_stack_lvl+0x100/0x190 [ 1263.688866][T22576] should_fail_ex.cold+0x5/0xa [ 1263.688891][T22576] ? sock_kmalloc+0x111/0x170 [ 1263.688911][T22576] should_failslab+0xc2/0x120 [ 1263.688931][T22576] __kmalloc_noprof+0xe0/0x850 [ 1263.688962][T22576] sock_kmalloc+0x111/0x170 [ 1263.688986][T22576] af_alg_get_rsgl+0xe7/0x8f0 [ 1263.689019][T22576] skcipher_recvmsg+0x375/0x1060 [ 1263.689051][T22576] ? iovec_from_user+0x45/0x140 [ 1263.689078][T22576] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1263.689105][T22576] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1263.689131][T22576] sock_recvmsg+0x1a4/0x1f0 [ 1263.689155][T22576] ____sys_recvmsg+0x218/0x640 [ 1263.689185][T22576] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1263.689216][T22576] ? __lock_acquire+0x4a5/0x2630 [ 1263.689242][T22576] ___sys_recvmsg+0x16a/0x1a0 [ 1263.689263][T22576] ? __pfx____sys_recvmsg+0x10/0x10 [ 1263.689308][T22576] __sys_recvmsg+0x16d/0x220 [ 1263.689327][T22576] ? __pfx___sys_recvmsg+0x10/0x10 [ 1263.689356][T22576] ? rcu_is_watching+0x12/0xc0 [ 1263.689387][T22576] do_syscall_64+0x10b/0xf80 [ 1263.689411][T22576] ? clear_bhb_loop+0x40/0x90 [ 1263.689433][T22576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.689450][T22576] RIP: 0033:0x7fe84ed9ce59 [ 1263.689465][T22576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1263.689482][T22576] RSP: 002b:00007fe84cfd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1263.689498][T22576] RAX: ffffffffffffffda RBX: 00007fe84f016090 RCX: 00007fe84ed9ce59 [ 1263.689510][T22576] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 1263.689520][T22576] RBP: 00007fe84cfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1263.689530][T22576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1263.689540][T22576] R13: 00007fe84f016128 R14: 00007fe84f016090 R15: 00007ffe6a00eae8 [ 1263.689563][T22576] [ 1263.916959][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1263.916976][ T30] audit: type=1400 audit(1778699023.481:2072): avc: denied { accept } for pid=22578 comm="syz.4.4109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1263.942991][ T30] audit: type=1400 audit(1778699023.490:2073): avc: denied { write } for pid=22578 comm="syz.4.4109" name="mouse0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1263.975225][ T30] audit: type=1400 audit(1778699023.724:2074): avc: denied { read } for pid=22578 comm="syz.4.4109" name="event3" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1264.202047][T22586] qnx6: unable to read the first superblock [ 1264.208068][T22586] qnx6: unable to read the first superblock [ 1264.214012][T22586] qnx6: unable to read the first superblock [ 1264.348092][ T30] audit: type=1400 audit(1778699024.070:2075): avc: denied { setopt } for pid=22589 comm="syz.6.4112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1264.359032][ T24] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1264.383499][T22589] [U]  [ 1264.447478][T22593] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.4111'. [ 1264.489255][T16034] Process accounting resumed [ 1264.553043][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1264.575550][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1264.590910][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1264.608912][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1264.618267][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.628946][ T24] usb 5-1: Product: syz [ 1264.633266][ T24] usb 5-1: Manufacturer: syz [ 1264.638124][ T24] usb 5-1: SerialNumber: syz [ 1264.645930][ T24] usb 5-1: config 0 descriptor?? [ 1264.651641][T22581] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1264.728278][ T30] audit: type=1400 audit(1778699024.426:2076): avc: denied { write } for pid=22594 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1264.812192][ T30] audit: type=1400 audit(1778699024.510:2077): avc: denied { write } for pid=22606 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1264.876633][T22581] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1265.137410][T22614] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1265.144136][T22614] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1265.171173][T22614] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1265.198899][T22623] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1265.209471][ T30] audit: type=1400 audit(1778699024.875:2078): avc: denied { write } for pid=22609 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1265.347896][ T30] audit: type=1400 audit(1778699025.006:2079): avc: denied { write } for pid=22625 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1265.379566][ T30] audit: type=1400 audit(1778699025.006:2080): avc: denied { write } for pid=22626 comm="syz.5.4114" name="cgroup.procs" dev="cgroup" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 1265.426512][ T30] audit: type=1400 audit(1778699025.034:2081): avc: denied { setattr } for pid=22626 comm="syz.5.4114" name="cgroup.procs" dev="cgroup" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 1266.456366][T22661] wg1 speed is unknown, defaulting to 1000 [ 1266.934370][T16034] usb 5-1: USB disconnect, device number 101 [ 1267.168277][T22685] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4124'. [ 1267.181164][ T1221] Process accounting resumed [ 1268.546308][T22703] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4129'. [ 1268.569067][ T1221] Process accounting resumed [ 1268.730099][T16034] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 1268.914493][T16034] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1268.934124][T16034] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1268.961618][T16034] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1268.975397][ T1221] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1268.985964][T16034] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1269.019146][T16034] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1269.050046][T16034] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1269.087214][T16034] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1269.107280][T16034] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.137330][T16034] usb 4-1: config 0 descriptor?? [ 1269.150891][T22701] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1269.169400][ T1221] usb 6-1: config 0 has an invalid interface number: 244 but max is 0 [ 1269.185834][ T1221] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.198004][ T1221] usb 6-1: config 0 has no interface number 0 [ 1269.208171][ T1221] usb 6-1: config 0 interface 244 has no altsetting 0 [ 1269.223649][ T1221] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1269.233549][ T1221] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.264246][ T1221] usb 6-1: config 0 descriptor?? [ 1269.397260][T16034] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 111 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1269.485904][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1269.485933][ T30] audit: type=1400 audit(1778699028.880:2091): avc: denied { write } for pid=22720 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1269.661393][ T30] audit: type=1400 audit(1778699029.049:2092): avc: denied { read write } for pid=22700 comm="syz.3.4130" name="lp0" dev="devtmpfs" ino=8767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1269.686192][ C0] usblp0: nonzero read bulk status received: -71 [ 1269.698926][T22701] fuse: Unknown parameter '0x0000000000000007000000' [ 1269.717354][ T30] audit: type=1400 audit(1778699029.068:2093): avc: denied { open } for pid=22700 comm="syz.3.4130" path="/dev/usb/lp0" dev="devtmpfs" ino=8767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1269.778111][T22731] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4130'. [ 1269.799304][ T24] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1269.827698][T22734] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4134'. [ 1269.971020][ T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1269.988850][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1270.007081][ T30] audit: type=1400 audit(1778699029.367:2094): avc: denied { map } for pid=22737 comm="syz.6.4135" path="/proc/sys/net/ipv4/vs/drop_packet" dev="proc" ino=88131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 1270.016613][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1270.033081][ T30] audit: type=1400 audit(1778699029.367:2095): avc: denied { execute } for pid=22737 comm="syz.6.4135" path="/proc/sys/net/ipv4/vs/drop_packet" dev="proc" ino=88131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 1270.069814][ T30] audit: type=1400 audit(1778699029.367:2096): avc: denied { ioctl } for pid=22737 comm="syz.6.4135" path="socket:[88133]" dev="sockfs" ino=88133 ioctlcmd=0xf50e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1270.099219][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1270.138956][T22738] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4135'. [ 1270.148918][T22739] vlan2: entered allmulticast mode [ 1270.154624][T22739] bond0: entered allmulticast mode [ 1270.160043][T22739] bond_slave_0: entered allmulticast mode [ 1270.166027][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1270.176027][ T24] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1270.187037][ T24] usb 3-1: Manufacturer: syz [ 1270.191951][T22739] bond_slave_1: entered allmulticast mode [ 1270.205322][T22739] team0: entered allmulticast mode [ 1270.211305][ T24] usb 3-1: config 0 descriptor?? [ 1270.217216][T22739] team_slave_0: entered allmulticast mode [ 1270.223349][T22739] team_slave_1: entered allmulticast mode [ 1270.253522][ T114] smbdirect: ib_dev[syz1] removed [ 1270.273816][ T30] audit: type=1400 audit(1778699029.620:2097): avc: denied { bind } for pid=22743 comm="syz.4.4137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1270.309836][T22738] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1270.323751][T22738] bond_slave_0: left allmulticast mode [ 1270.332986][T22738] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1270.337592][ T30] audit: type=1400 audit(1778699029.676:2098): avc: denied { read } for pid=22746 comm="syz.4.4138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1270.364252][T22738] bond_slave_1: left allmulticast mode [ 1270.372496][T22738] bond0 (unregistering): (slave team0): Releasing backup interface [ 1270.381525][T22738] team0: left allmulticast mode [ 1270.386959][T22738] team_slave_0: left allmulticast mode [ 1270.392532][T22738] team_slave_1: left allmulticast mode [ 1270.401900][T22738] bond0 (unregistering): Released all slaves [ 1270.631238][T22753] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.4139'. [ 1270.641848][T18816] Process accounting resumed [ 1270.658667][T22724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1270.671554][T22724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1270.686929][ T24] appleir 0003:05AC:8243.0017: item fetching failed at offset 0/1 [ 1270.697153][ T24] appleir 0003:05AC:8243.0017: parse failed [ 1270.703229][ T24] appleir 0003:05AC:8243.0017: probe with driver appleir failed with error -22 [ 1271.098171][ T30] audit: type=1400 audit(1778699030.387:2099): avc: denied { write } for pid=22756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1271.226443][ T30] audit: type=1400 audit(1778699030.509:2100): avc: denied { write } for pid=22768 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1271.314654][T22724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1271.328584][T22724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1271.354634][T16034] usb 3-1: USB disconnect, device number 123 [ 1272.238118][T16034] usb 4-1: USB disconnect, device number 111 [ 1272.273234][T16034] usblp0: removed [ 1272.298965][ T1221] usb 6-1: string descriptor 0 read error: -71 [ 1272.326994][ T1221] hub 6-1:0.244: bad descriptor, ignoring hub [ 1272.347910][ T1221] hub 6-1:0.244: probe with driver hub failed with error -5 [ 1272.518536][ T1221] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1272.535661][T17547] usb 6-1: Failed to submit usb control message: -71 [ 1272.558118][T17547] usb 6-1: unable to send the bmi data to the device: -71 [ 1272.565304][T17547] usb 6-1: unable to get target info from device [ 1272.572842][T17547] usb 6-1: could not get target info (-71) [ 1272.579147][T17547] usb 6-1: could not probe fw (-71) [ 1272.641654][ T1221] usb 6-1: USB disconnect, device number 24 [ 1272.759379][T18816] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1272.918649][T18816] usb 7-1: device descriptor read/64, error -71 [ 1273.304360][T18816] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1273.484945][T18816] usb 7-1: device descriptor read/64, error -71 [ 1273.496108][T16034] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1273.615972][T18816] usb usb7-port1: attempt power cycle [ 1273.666594][T16034] usb 5-1: Using ep0 maxpacket: 8 [ 1273.688899][T16034] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1273.709575][T16034] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1273.729354][T16034] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1273.761367][T16034] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1273.784443][T16034] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1273.804484][T16034] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.998074][T18816] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1274.041424][T18816] usb 7-1: device descriptor read/8, error -71 [ 1274.067090][T16034] usb 5-1: GET_CAPABILITIES returned 0 [ 1274.079713][T16034] usbtmc 5-1:16.0: can't read capabilities [ 1274.318706][T18816] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1274.361882][T18816] usb 7-1: device descriptor read/8, error -71 [ 1274.362756][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1274.377832][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1274.387039][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1274.396123][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1274.405203][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1274.414277][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1274.863089][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1274.863108][ T30] audit: type=1400 audit(1778699033.522:2108): avc: denied { setopt } for pid=22850 comm="syz.5.4151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1274.888909][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1274.888980][ T30] audit: type=1400 audit(1778699033.541:2109): avc: denied { create } for pid=22850 comm="syz.5.4151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1274.897993][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1274.917471][ T30] audit: type=1400 audit(1778699033.541:2110): avc: denied { ioctl } for pid=22850 comm="syz.5.4151" path="socket:[89306]" dev="sockfs" ino=89306 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1274.926817][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1274.960425][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1274.969595][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1274.978745][ T1221] Process accounting resumed [ 1275.003752][T18816] usb usb7-port1: unable to enumerate USB device [ 1275.057432][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1275.066554][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1275.069088][ T30] audit: type=1400 audit(1778699034.083:2111): avc: denied { listen } for pid=22832 comm="syz.4.4149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1275.075626][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1275.104667][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1275.181810][ T5737] usb 5-1: USB disconnect, device number 102 [ 1275.581238][ T30] audit: type=1400 audit(1778699034.579:2112): avc: denied { write } for pid=22861 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1275.817026][ T30] audit: type=1400 audit(1778699034.804:2113): avc: denied { write } for pid=22891 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1275.896349][ T30] audit: type=1400 audit(1778699034.879:2114): avc: denied { bind } for pid=22893 comm="syz.2.4158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1275.944432][T22896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4158'. [ 1277.823652][ T30] audit: type=1400 audit(1778699036.638:2115): avc: denied { connect } for pid=22894 comm="syz.5.4160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1278.432084][ T30] audit: type=1400 audit(1778699037.246:2116): avc: denied { write } for pid=22921 comm="syz.4.4167" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1278.571770][ T1221] IPVS: starting estimator thread 0... [ 1278.775007][T22925] IPVS: using max 43 ests per chain, 103200 per kthread [ 1279.129743][T22932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4168'. [ 1279.461167][ T30] audit: type=1400 audit(1778699038.201:2117): avc: denied { bind } for pid=22935 comm="syz.3.4169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1279.655132][T22947] FAULT_INJECTION: forcing a failure. [ 1279.655132][T22947] name failslab, interval 1, probability 0, space 0, times 0 [ 1279.744017][T22947] CPU: 1 UID: 0 PID: 22947 Comm: syz.2.4173 Tainted: G L syzkaller #0 PREEMPT(full) [ 1279.744038][T22947] Tainted: [L]=SOFTLOCKUP [ 1279.744042][T22947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1279.744049][T22947] Call Trace: [ 1279.744052][T22947] [ 1279.744057][T22947] dump_stack_lvl+0x100/0x190 [ 1279.744075][T22947] should_fail_ex.cold+0x5/0xa [ 1279.744091][T22947] should_failslab+0xc2/0x120 [ 1279.744103][T22947] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1279.744119][T22947] ? sctp_add_bind_addr+0xae/0x3e0 [ 1279.744135][T22947] ? kasan_save_track+0x14/0x30 [ 1279.744147][T22947] sctp_add_bind_addr+0xae/0x3e0 [ 1279.744165][T22947] sctp_copy_one_addr.part.0+0xea/0x120 [ 1279.744184][T22947] sctp_bind_addr_copy+0x1b4/0x530 [ 1279.744203][T22947] sctp_connect_new_asoc+0x1c9/0x770 [ 1279.744217][T22947] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1279.744231][T22947] ? selinux_sctp_bind_connect+0x112/0x2a0 [ 1279.744249][T22947] sctp_sendmsg+0x171a/0x22b0 [ 1279.744266][T22947] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1279.744282][T22947] ? __pfx_sock_has_perm+0x10/0x10 [ 1279.744301][T22947] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1279.744315][T22947] inet_sendmsg+0x11c/0x140 [ 1279.744332][T22947] ____sys_sendmsg+0x98d/0xb70 [ 1279.744345][T22947] ? __pfx_inet_sendmsg+0x10/0x10 [ 1279.744363][T22947] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1279.744382][T22947] ___sys_sendmsg+0x190/0x1e0 [ 1279.744397][T22947] ? __pfx____sys_sendmsg+0x10/0x10 [ 1279.744426][T22947] __sys_sendmsg+0x170/0x220 [ 1279.744437][T22947] ? __pfx___sys_sendmsg+0x10/0x10 [ 1279.744453][T22947] ? rcu_is_watching+0x12/0xc0 [ 1279.744472][T22947] do_syscall_64+0x10b/0xf80 [ 1279.744488][T22947] ? clear_bhb_loop+0x40/0x90 [ 1279.744502][T22947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.744514][T22947] RIP: 0033:0x7fe0ced9ce59 [ 1279.744527][T22947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1279.744542][T22947] RSP: 002b:00007fe0cfc2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1279.744554][T22947] RAX: ffffffffffffffda RBX: 00007fe0cf015fa0 RCX: 00007fe0ced9ce59 [ 1279.744561][T22947] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1279.744567][T22947] RBP: 00007fe0cfc2f090 R08: 0000000000000000 R09: 0000000000000000 [ 1279.744574][T22947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1279.744580][T22947] R13: 00007fe0cf016038 R14: 00007fe0cf015fa0 R15: 00007ffeaf6d1068 [ 1279.744594][T22947] [ 1280.054066][T22952] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4172'. [ 1280.218068][T22954] FAULT_INJECTION: forcing a failure. [ 1280.218068][T22954] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1280.238556][T22954] CPU: 0 UID: 0 PID: 22954 Comm: syz.4.4175 Tainted: G L syzkaller #0 PREEMPT(full) [ 1280.238583][T22954] Tainted: [L]=SOFTLOCKUP [ 1280.238588][T22954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1280.238596][T22954] Call Trace: [ 1280.238600][T22954] [ 1280.238605][T22954] dump_stack_lvl+0x100/0x190 [ 1280.238622][T22954] should_fail_ex.cold+0x5/0xa [ 1280.238637][T22954] ? prepare_alloc_pages+0x16d/0x5f0 [ 1280.238651][T22954] should_fail_alloc_page+0xeb/0x140 [ 1280.238664][T22954] prepare_alloc_pages+0x1f0/0x5f0 [ 1280.238679][T22954] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1280.238701][T22954] ? stack_trace_save+0x8e/0xc0 [ 1280.238713][T22954] ? __pfx_stack_trace_save+0x10/0x10 [ 1280.238728][T22954] ? stack_depot_save_flags+0x27/0x9d0 [ 1280.238739][T22954] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1280.238758][T22954] ? __lock_acquire+0x4a5/0x2630 [ 1280.238775][T22954] ? __lock_acquire+0x4a5/0x2630 [ 1280.238789][T22954] ? __lock_acquire+0x4a5/0x2630 [ 1280.238802][T22954] ? css_rstat_updated+0x1ce/0x5a0 [ 1280.238817][T22954] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1280.238830][T22954] ? policy_nodemask+0xed/0x4f0 [ 1280.238844][T22954] alloc_pages_mpol+0x1fb/0x540 [ 1280.238856][T22954] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1280.238867][T22954] ? __lock_acquire+0x4a5/0x2630 [ 1280.238884][T22954] folio_alloc_mpol_noprof+0x36/0x260 [ 1280.238899][T22954] vma_alloc_folio_noprof+0xed/0x1d0 [ 1280.238912][T22954] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1280.238925][T22954] ? rcu_read_unlock+0x2d/0xb0 [ 1280.238941][T22954] ? rcu_read_unlock+0x2d/0xb0 [ 1280.238959][T22954] do_wp_page+0xd75/0x4350 [ 1280.238976][T22954] ? __pfx_do_wp_page+0x10/0x10 [ 1280.238990][T22954] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1280.239009][T22954] __handle_mm_fault+0x1ab6/0x2a00 [ 1280.239027][T22954] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1280.239044][T22954] ? __pfx___handle_mm_fault+0x10/0x10 [ 1280.239060][T22954] ? pte_offset_map_lock+0x174/0x320 [ 1280.239072][T22954] ? find_held_lock+0x2b/0x80 [ 1280.239087][T22954] ? follow_page_pte+0x4d0/0x13f0 [ 1280.239102][T22954] handle_mm_fault+0x36d/0xa20 [ 1280.239120][T22954] __get_user_pages+0x1178/0x32a0 [ 1280.239137][T22954] ? __pfx___get_user_pages+0x10/0x10 [ 1280.239149][T22954] ? __kernel_text_address+0xd/0x30 [ 1280.239164][T22954] ? unwind_get_return_address+0x59/0xa0 [ 1280.239180][T22954] ? arch_stack_walk+0xa6/0xf0 [ 1280.239198][T22954] __gup_longterm_locked+0x279/0x16f0 [ 1280.239214][T22954] ? __pfx___gup_longterm_locked+0x10/0x10 [ 1280.239229][T22954] ? find_held_lock+0x2b/0x80 [ 1280.239240][T22954] ? sanity_check_pinned_pages+0x4f2/0x8b0 [ 1280.239254][T22954] gup_fast_fallback+0x16dc/0x2790 [ 1280.239268][T22954] ? v4l2_ioctl+0x1bd/0x250 [ 1280.239292][T22954] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1280.239311][T22954] pin_user_pages_fast+0xa7/0xf0 [ 1280.239324][T22954] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 1280.239337][T22954] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 1280.239353][T22954] ? frame_vector_create+0x61/0x110 [ 1280.239367][T22954] get_vaddr_frames+0x89/0x190 [ 1280.239380][T22954] vb2_create_framevec+0x64/0xd0 [ 1280.239396][T22954] vb2_vmalloc_get_userptr+0x137/0x510 [ 1280.239408][T22954] ? bpf_ksym_find+0x128/0x1c0 [ 1280.239424][T22954] ? __pfx_vb2_vmalloc_get_userptr+0x10/0x10 [ 1280.239437][T22954] __prepare_userptr.constprop.0+0x3a7/0x1560 [ 1280.239458][T22954] ? __pfx___prepare_userptr.constprop.0+0x10/0x10 [ 1280.239503][T22954] ? __mutex_lock+0x26d/0x1b10 [ 1280.239519][T22954] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1280.239534][T22954] __buf_prepare+0x352/0x790 [ 1280.239550][T22954] ? ww_mutex_lock+0x130/0x160 [ 1280.239567][T22954] vb2_core_prepare_buf+0xa9/0x260 [ 1280.239578][T22954] vb2_prepare_buf+0x22f/0x300 [ 1280.239590][T22954] vb2_ioctl_prepare_buf+0x10a/0x150 [ 1280.239602][T22954] v4l_prepare_buf+0x93/0xc0 [ 1280.239614][T22954] __video_do_ioctl+0xb2a/0xdf0 [ 1280.239631][T22954] ? __might_fault+0xc5/0x140 [ 1280.239646][T22954] ? __pfx___video_do_ioctl+0x10/0x10 [ 1280.239665][T22954] video_usercopy+0x47d/0x1700 [ 1280.239681][T22954] ? __pfx___video_do_ioctl+0x10/0x10 [ 1280.239696][T22954] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1280.239712][T22954] ? __pfx_video_usercopy+0x10/0x10 [ 1280.239735][T22954] v4l2_ioctl+0x1bd/0x250 [ 1280.239750][T22954] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1280.239766][T22954] __x64_sys_ioctl+0x18e/0x210 [ 1280.239779][T22954] do_syscall_64+0x10b/0xf80 [ 1280.239794][T22954] ? clear_bhb_loop+0x40/0x90 [ 1280.239807][T22954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.239818][T22954] RIP: 0033:0x7f5e1219ce59 [ 1280.239828][T22954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1280.239838][T22954] RSP: 002b:00007f5e12f95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1280.239850][T22954] RAX: ffffffffffffffda RBX: 00007f5e12415fa0 RCX: 00007f5e1219ce59 [ 1280.239857][T22954] RDX: 0000200000000200 RSI: 00000000c058565d RDI: 0000000000000003 [ 1280.239863][T22954] RBP: 00007f5e12f95090 R08: 0000000000000000 R09: 0000000000000000 [ 1280.239869][T22954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1280.239875][T22954] R13: 00007f5e12416038 R14: 00007f5e12415fa0 R15: 00007ffef1d41208 [ 1280.239889][T22954] [ 1280.317044][ T5750] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1280.388359][T16034] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1280.562361][T16034] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1280.730054][ T5750] usb 4-1: Using ep0 maxpacket: 16 [ 1280.745631][T16034] usb 6-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 1280.779356][ T5750] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1280.807204][T16034] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.814843][ T5750] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1280.821435][T16734] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 1280.876822][T16034] usb 6-1: config 0 descriptor?? [ 1280.878152][ T5750] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1280.894766][T22950] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1280.908615][ T5750] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1280.919604][ T5750] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1280.930604][ T5750] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1280.938515][ T5750] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1280.949232][ T5750] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.982752][ T5750] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 1281.033056][T16734] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.045852][T16734] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1281.057429][T16734] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1281.075423][T16734] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1281.085579][T16734] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.133007][T16734] usb 7-1: Product: syz [ 1281.148151][T16734] usb 7-1: Manufacturer: syz [ 1281.158797][T16734] usb 7-1: SerialNumber: syz [ 1281.177611][T22959] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1281.270926][T16734] cdc_ncm 7-1:1.1: skipping garbage [ 1281.279393][ T5750] ums-sddr09 4-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 1281.303888][T16734] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 1281.310325][ T5750] usb 4-1: USB disconnect, device number 112 [ 1281.318347][T16734] cdc_ncm 7-1:1.1: bind() failure [ 1281.342912][T16034] hid (null): unknown global tag 0xd [ 1281.350621][T16034] hid (null): unknown global tag 0xe [ 1281.359457][T16034] hid (null): unknown global tag 0xc [ 1281.370906][T16034] hid (null): unknown global tag 0xc [ 1281.408941][T16034] asus 0003:0B05:1ABE.0018: unknown main item tag 0x0 [ 1281.418303][T16034] asus 0003:0B05:1ABE.0018: unknown main item tag 0x0 [ 1281.427170][T16034] asus 0003:0B05:1ABE.0018: unknown main item tag 0x0 [ 1281.445705][T16034] asus 0003:0B05:1ABE.0018: unknown main item tag 0x0 [ 1281.453936][T16734] usb 7-1: USB disconnect, device number 17 [ 1281.479144][T16034] asus 0003:0B05:1ABE.0018: unknown main item tag 0x0 [ 1281.486518][T16034] asus 0003:0B05:1ABE.0018: unknown main item tag 0x0 [ 1281.493705][T16034] asus 0003:0B05:1ABE.0018: reserved main item tag 0xd [ 1281.504319][T16034] asus 0003:0B05:1ABE.0018: unexpected long global item [ 1281.512967][T16034] asus 0003:0B05:1ABE.0018: Asus hid parse failed: -22 [ 1281.519848][T16034] asus 0003:0B05:1ABE.0018: probe with driver asus failed with error -22 [ 1281.581787][T16034] usb 6-1: USB disconnect, device number 25 [ 1281.723888][ T1221] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1281.888113][ T1221] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1281.960197][ T1221] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1281.976503][ T1221] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1281.986352][ T1221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.995390][ T1221] usb 5-1: Product: syz [ 1281.999878][ T1221] usb 5-1: Manufacturer: syz [ 1282.007453][ T1221] usb 5-1: SerialNumber: syz [ 1282.015005][ T1221] usb 5-1: config 0 descriptor?? [ 1282.030521][ T1221] usb 5-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 1282.072849][T22976] netlink: 220 bytes leftover after parsing attributes in process `syz.6.4183'. [ 1282.158738][ T30] audit: type=1400 audit(1778699040.737:2118): avc: denied { ioctl } for pid=22973 comm="syz.3.4182" path="/dev/sg0" dev="devtmpfs" ino=795 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1282.226885][T22978] netlink: 'syz.3.4182': attribute type 4 has an invalid length. [ 1282.235466][T22972] FAULT_INJECTION: forcing a failure. [ 1282.235466][T22972] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1282.299191][T22972] CPU: 0 UID: 0 PID: 22972 Comm: syz.2.4181 Tainted: G L syzkaller #0 PREEMPT(full) [ 1282.299219][T22972] Tainted: [L]=SOFTLOCKUP [ 1282.299226][T22972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1282.299236][T22972] Call Trace: [ 1282.299242][T22972] [ 1282.299249][T22972] dump_stack_lvl+0x100/0x190 [ 1282.299275][T22972] should_fail_ex.cold+0x5/0xa [ 1282.299297][T22972] ? prepare_alloc_pages+0x16d/0x5f0 [ 1282.299321][T22972] should_fail_alloc_page+0xeb/0x140 [ 1282.299344][T22972] prepare_alloc_pages+0x1f0/0x5f0 [ 1282.299366][T22972] ? ip_finish_output2+0x883/0x2400 [ 1282.299393][T22972] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1282.299422][T22972] ? ip_finish_output2+0x892/0x2400 [ 1282.299452][T22972] ? __pfx_ip_finish_output2+0x10/0x10 [ 1282.299488][T22972] ? __pfx_ip_dst_mtu_maybe_forward+0x10/0x10 [ 1282.299512][T22972] ? nf_nat_ipv4_out+0xb2/0x510 [ 1282.299530][T22972] ? find_held_lock+0x2b/0x80 [ 1282.299548][T22972] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1282.299577][T22972] ? __ip_finish_output.part.0+0x3ff/0x6f0 [ 1282.299605][T22972] ? ip_mc_output+0x2fd/0xd70 [ 1282.299636][T22972] ? __pfx_ip_finish_output+0x10/0x10 [ 1282.299660][T22972] ? __pfx_ip_make_skb+0x10/0x10 [ 1282.299684][T22972] ? ip_route_output_key_hash+0x14c/0x2b0 [ 1282.299703][T22972] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1282.299726][T22972] ? policy_nodemask+0xed/0x4f0 [ 1282.299747][T22972] alloc_pages_mpol+0x1fb/0x540 [ 1282.299766][T22972] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1282.299786][T22972] ? dst_release+0x9a/0x330 [ 1282.299812][T22972] folio_alloc_mpol_noprof+0x36/0x260 [ 1282.299837][T22972] vma_alloc_folio_noprof+0xed/0x1d0 [ 1282.299860][T22972] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1282.299882][T22972] ? rcu_read_unlock+0x2d/0xb0 [ 1282.299907][T22972] ? rcu_read_unlock+0x2d/0xb0 [ 1282.299936][T22972] do_wp_page+0xd75/0x4350 [ 1282.299965][T22972] ? __pfx_do_wp_page+0x10/0x10 [ 1282.299988][T22972] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1282.300021][T22972] __handle_mm_fault+0x1ab6/0x2a00 [ 1282.300048][T22972] ? mt_find+0x45e/0x8e0 [ 1282.300074][T22972] ? __pfx___handle_mm_fault+0x10/0x10 [ 1282.300096][T22972] ? __pfx_mt_find+0x10/0x10 [ 1282.300132][T22972] ? find_vma+0xbf/0x140 [ 1282.300149][T22972] ? __pfx_find_vma+0x10/0x10 [ 1282.300170][T22972] handle_mm_fault+0x36d/0xa20 [ 1282.300200][T22972] do_user_addr_fault+0x74c/0x12f0 [ 1282.300227][T22972] ? trace_page_fault_kernel+0x7a/0x200 [ 1282.300252][T22972] exc_page_fault+0x6f/0xd0 [ 1282.300275][T22972] asm_exc_page_fault+0x26/0x30 [ 1282.300293][T22972] RIP: 0010:__put_user_4+0xd/0x20 [ 1282.300314][T22972] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 c7 d7 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 1282.300331][T22972] RSP: 0018:ffffc9000509fcd0 EFLAGS: 00050202 [ 1282.300344][T22972] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000007ff8 [ 1282.300354][T22972] RDX: ffff88803029ca00 RSI: ffffffff82597ac1 RDI: ffffffff8c1c3800 [ 1282.300365][T22972] RBP: 0000000000000000 R08: 0000000000000001 R09: 00000000000001c8 [ 1282.300374][T22972] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000040000 [ 1282.300384][T22972] R13: 00000000000003ff R14: 0000000000000400 R15: 0000200000007fc0 [ 1282.300401][T22972] ? __might_fault+0x111/0x140 [ 1282.300428][T22972] __sys_sendmmsg+0x239/0x430 [ 1282.300449][T22972] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1282.300479][T22972] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1282.300514][T22972] ? fput+0x79/0x100 [ 1282.300539][T22972] ? ksys_write+0x1ac/0x250 [ 1282.300557][T22972] ? __pfx_ksys_write+0x10/0x10 [ 1282.300581][T22972] __x64_sys_sendmmsg+0x9c/0x100 [ 1282.300598][T22972] ? lockdep_hardirqs_on+0x78/0x100 [ 1282.300621][T22972] do_syscall_64+0x10b/0xf80 [ 1282.300644][T22972] ? clear_bhb_loop+0x40/0x90 [ 1282.300666][T22972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.300684][T22972] RIP: 0033:0x7fe0ced9ce59 [ 1282.300698][T22972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1282.300715][T22972] RSP: 002b:00007fe0cfc2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1282.300731][T22972] RAX: ffffffffffffffda RBX: 00007fe0cf015fa0 RCX: 00007fe0ced9ce59 [ 1282.300741][T22972] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 1282.300751][T22972] RBP: 00007fe0cfc2f090 R08: 0000000000000000 R09: 0000000000000000 [ 1282.300762][T22972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1282.300772][T22972] R13: 00007fe0cf016038 R14: 00007fe0cf015fa0 R15: 00007ffeaf6d1068 [ 1282.300796][T22972] [ 1282.951558][T22989] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4186'. [ 1283.055785][ T1221] usb 5-1: USB disconnect, device number 103 [ 1283.223351][ T30] audit: type=1400 audit(1778699041.738:2119): avc: denied { bind } for pid=22999 comm="syz.3.4190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1283.474665][T23013] binder_alloc: binder_alloc_mmap_handler: 23012 200000ffd000-200001000000 already mapped failed -16 [ 1283.490597][ T30] audit: type=1400 audit(1778699041.963:2120): avc: denied { append } for pid=23012 comm="syz.5.4193" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1283.523604][T23016] netlink: 'syz.6.4192': attribute type 9 has an invalid length. [ 1283.557125][T23016] nfs4: Unknown parameter '&&}' [ 1283.574841][ T30] audit: type=1400 audit(1778699042.047:2121): avc: denied { mounton } for pid=23009 comm="syz.6.4192" path="/69/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 1283.628490][T23014] binder_alloc: binder_alloc_mmap_handler: 23012 200000ffe000-200001000000 already mapped failed -16 [ 1283.642792][T23014] binder_alloc: binder_alloc_mmap_handler: 23012 200000ffe000-200001000000 already mapped failed -16 [ 1283.675419][T23010] netlink: 'syz.6.4192': attribute type 1 has an invalid length. [ 1283.677676][T23013] binder_alloc: binder_alloc_mmap_handler: 23012 200000ffd000-200001000000 already mapped failed -16 [ 1283.710011][T23014] binder_alloc: binder_alloc_mmap_handler: 23012 200000ffe000-200001000000 already mapped failed -16 [ 1283.721144][T23010] netlink: 'syz.6.4192': attribute type 4 has an invalid length. [ 1283.739632][T23010] netlink: 15334 bytes leftover after parsing attributes in process `syz.6.4192'. [ 1283.879919][ T30] audit: type=1400 audit(1778699042.347:2122): avc: denied { create } for pid=23023 comm="syz.5.4195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1283.918431][ T30] audit: type=1400 audit(1778699042.375:2123): avc: denied { getopt } for pid=23023 comm="syz.5.4195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1284.062121][T23026] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4196'. [ 1284.173414][ T30] audit: type=1400 audit(1778699042.627:2124): avc: denied { create } for pid=23025 comm="syz.5.4196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1284.320831][ T30] audit: type=1400 audit(1778699042.768:2125): avc: denied { unmount } for pid=21304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1284.464706][T23034] tc_dump_action: action bad kind [ 1284.481220][ T1221] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 1284.662629][ T1221] usb 6-1: Invalid ep0 maxpacket: 64 [ 1284.676534][ T30] audit: type=1400 audit(1778699043.095:2126): avc: denied { append } for pid=23039 comm="syz.3.4200" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1284.721520][ T30] audit: type=1400 audit(1778699043.123:2127): avc: denied { write } for pid=23041 comm="syz.2.4201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1284.812248][ T1221] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 1284.845684][ T24] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1285.068795][ T1221] usb 6-1: Invalid ep0 maxpacket: 64 [ 1285.077150][ T1221] usb usb6-port1: attempt power cycle [ 1285.082748][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1285.094694][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1285.104497][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1285.117494][T18816] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1285.125186][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1285.136206][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.163947][ T24] usb 7-1: config 0 descriptor?? [ 1285.194442][T23053] random: crng reseeded on system resumption [ 1285.538825][ T1221] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 1285.616933][ T1221] usb 6-1: Invalid ep0 maxpacket: 64 [ 1285.622507][T18816] usb 3-1: config 0 has no interfaces? [ 1285.628313][T18816] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1285.637831][T18816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.647642][T18816] usb 3-1: config 0 descriptor?? [ 1285.773962][ T1221] usb 6-1: new low-speed USB device number 29 using dummy_hcd [ 1285.795900][ T1221] usb 6-1: Invalid ep0 maxpacket: 64 [ 1285.801435][ T1221] usb usb6-port1: unable to enumerate USB device [ 1285.872621][T23048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1285.881351][T23048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1285.895297][T23048] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4204'. [ 1285.907548][ T1221] usb 3-1: USB disconnect, device number 124 [ 1285.957408][ T24] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1286.436409][ T1221] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1286.599595][ T1221] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1286.618931][ T1221] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1286.638171][ T1221] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.654730][ T1221] usb 4-1: config 0 descriptor?? [ 1286.670284][ T1221] smsusb:smsusb_probe: board id=8, interface number 0 [ 1286.695920][ T1221] smsusb:smsusb_probe: Device initialized with return code -19 [ 1286.912941][ T1221] usb 7-1: USB disconnect, device number 18 [ 1287.755531][T16034] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1288.007800][T16034] usb 3-1: Using ep0 maxpacket: 16 [ 1288.107844][T16034] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1288.135212][T16034] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.161643][T16034] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1288.176291][T16034] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1288.186447][T16034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.196208][T16034] usb 3-1: Product: syz [ 1288.201074][T16034] usb 3-1: Manufacturer: syz [ 1288.205760][T16034] usb 3-1: SerialNumber: syz [ 1288.225787][T16034] usb 3-1: 0:2 : does not exist [ 1288.444835][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1288.444852][ T30] audit: type=1400 audit(1778699046.614:2131): avc: denied { append } for pid=23082 comm="syz.5.4212" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1288.873242][T23088] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 1288.884137][T23088] audit: out of memory in audit_log_start [ 1288.965996][T16034] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1289.178587][T16034] usb 3-1: USB disconnect, device number 125 [ 1289.247506][T23092] wg1 speed is unknown, defaulting to 1000 [ 1289.449427][ T30] audit: type=1400 audit(1778699047.559:2132): avc: denied { ioctl } for pid=23099 comm="syz.4.4217" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1289.520879][ T5737] usb 4-1: USB disconnect, device number 113 [ 1289.889272][ T30] audit: type=1400 audit(1778699047.971:2133): avc: denied { read } for pid=23108 comm="syz.3.4219" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1289.952532][ T30] audit: type=1400 audit(1778699048.018:2134): avc: denied { open } for pid=23108 comm="syz.3.4219" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1289.952561][ T30] audit: type=1400 audit(1778699048.027:2135): avc: denied { ioctl } for pid=23108 comm="syz.3.4219" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1290.002128][ T30] audit: type=1400 audit(1778699048.074:2136): avc: denied { ioctl } for pid=23108 comm="syz.3.4219" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x940f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1290.162991][T23115] SELinux: failed to load policy [ 1290.533026][ T30] audit: type=1400 audit(1778699048.579:2137): avc: denied { name_bind } for pid=23122 comm="syz.2.4223" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1290.638329][ T30] audit: type=1400 audit(1778699048.673:2138): avc: denied { remount } for pid=23123 comm="syz.4.4224" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1291.037175][T23135] overlayfs: conflicting lowerdir path [ 1291.095794][T18816] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1291.269607][T18816] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1291.284453][T18816] usb 3-1: config 2 has an invalid interface number: 107 but max is 1 [ 1291.296294][T18816] usb 3-1: config 2 has an invalid interface number: 178 but max is 1 [ 1291.304870][T18816] usb 3-1: config 2 has no interface number 0 [ 1291.313135][T18816] usb 3-1: config 2 has no interface number 1 [ 1291.322532][T18816] usb 3-1: config 2 interface 107 has no altsetting 0 [ 1291.335834][T18816] usb 3-1: config 2 interface 178 has no altsetting 0 [ 1291.349034][T18816] usb 3-1: New USB device found, idVendor=04da, idProduct=250c, bcdDevice=27.9f [ 1291.364820][T18816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.377027][T18816] usb 3-1: Product: syz [ 1291.381214][T18816] usb 3-1: Manufacturer: syz [ 1291.385951][T18816] usb 3-1: SerialNumber: syz [ 1291.453837][T23144] wg1 speed is unknown, defaulting to 1000 [ 1291.624732][T18816] usb 3-1: unknown number of interfaces: 2 [ 1291.639955][T18816] usb 3-1: USB disconnect, device number 126 [ 1292.077351][T23159] netlink: 'syz.5.4235': attribute type 1 has an invalid length. [ 1292.132155][T18816] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1292.293711][T18816] usb 7-1: too many endpoints for config 0 interface 0 altsetting 5: 254, using maximum allowed: 30 [ 1292.328202][T18816] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1292.370508][T18816] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1292.393886][T18816] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1292.431592][T18816] usb 7-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1292.450496][T18816] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.468454][T23169] netlink: 'syz.3.4238': attribute type 1 has an invalid length. [ 1292.478731][T18816] usb 7-1: config 0 descriptor?? [ 1292.528704][T23172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4238'. [ 1292.542388][T23172] bond2 (unregistering): Released all slaves [ 1292.593738][ T5737] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1292.686635][T23174] overlayfs: conflicting options: userxattr,redirect_dir=on [ 1292.784322][ T5737] usb 3-1: Using ep0 maxpacket: 32 [ 1292.800787][ T5737] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1292.810099][ T5737] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1292.819283][ T5737] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1292.830374][ T5737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1292.840483][ T5737] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1292.850801][ T5737] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1292.877969][ T5737] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1292.892918][T23177] FAULT_INJECTION: forcing a failure. [ 1292.892918][T23177] name failslab, interval 1, probability 0, space 0, times 0 [ 1292.929394][ T5737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.955385][T23177] CPU: 0 UID: 0 PID: 23177 Comm: syz.3.4240 Tainted: G L syzkaller #0 PREEMPT(full) [ 1292.955415][T23177] Tainted: [L]=SOFTLOCKUP [ 1292.955421][T23177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1292.955431][T23177] Call Trace: [ 1292.955438][T23177] [ 1292.955444][T23177] dump_stack_lvl+0x100/0x190 [ 1292.955470][T23177] should_fail_ex.cold+0x5/0xa [ 1292.955496][T23177] should_failslab+0xc2/0x120 [ 1292.955517][T23177] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1292.955543][T23177] ? do_getname+0x35/0x390 [ 1292.955567][T23177] ? find_held_lock+0x2b/0x80 [ 1292.955584][T23177] ? ksys_write+0x190/0x250 [ 1292.955604][T23177] do_getname+0x35/0x390 [ 1292.955631][T23177] do_sys_openat2+0xc5/0x1e0 [ 1292.955655][T23177] ? __pfx_do_sys_openat2+0x10/0x10 [ 1292.955677][T23177] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1292.955707][T23177] ? __fget_files+0x21f/0x3d0 [ 1292.955732][T23177] __x64_sys_openat+0x12d/0x210 [ 1292.955757][T23177] ? __pfx___x64_sys_openat+0x10/0x10 [ 1292.955781][T23177] ? ksys_write+0x1ac/0x250 [ 1292.955803][T23177] ? rcu_is_watching+0x12/0xc0 [ 1292.955832][T23177] do_syscall_64+0x10b/0xf80 [ 1292.955855][T23177] ? clear_bhb_loop+0x40/0x90 [ 1292.955875][T23177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.955892][T23177] RIP: 0033:0x7f72cef9ce59 [ 1292.955908][T23177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1292.955923][T23177] RSP: 002b:00007f72cd1d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1292.955943][T23177] RAX: ffffffffffffffda RBX: 00007f72cf216090 RCX: 00007f72cef9ce59 [ 1292.955953][T23177] RDX: 000000000310500d RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 1292.955962][T23177] RBP: 00007f72cd1d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1292.955971][T23177] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1292.955980][T23177] R13: 00007f72cf216128 R14: 00007f72cf216090 R15: 00007ffdef0dc5d8 [ 1292.956002][T23177] [ 1292.960156][ T5737] usb 3-1: config 0 descriptor?? [ 1293.177690][T23179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1293.212070][T23179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1293.313553][T23180] qnx6: unable to read the first superblock [ 1293.319684][T23180] qnx6: unable to read the first superblock [ 1293.325584][T23180] qnx6: unable to read the first superblock [ 1293.381246][T18816] playstation 0003:054C:05C4.001A: unknown main item tag 0x0 [ 1293.388953][T18816] playstation 0003:054C:05C4.001A: unknown main item tag 0x0 [ 1293.399283][ T5737] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 127 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1293.440635][T18816] playstation 0003:054C:05C4.001A: unknown main item tag 0x0 [ 1293.456519][T18816] playstation 0003:054C:05C4.001A: unknown main item tag 0x0 [ 1293.459288][ T5737] usb 3-1: USB disconnect, device number 127 [ 1293.467987][T18816] playstation 0003:054C:05C4.001A: unknown main item tag 0x0 [ 1293.477737][T18816] playstation 0003:054C:05C4.001A: unknown main item tag 0x0 [ 1293.495969][T18816] playstation 0003:054C:05C4.001A: unknown main item tag 0x0 [ 1293.504445][T18816] playstation 0003:054C:05C4.001A: unknown main item tag 0x0 [ 1293.515755][T18816] playstation 0003:054C:05C4.001A: unknown main item tag 0x0 [ 1293.518094][T16734] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 1293.552534][ T5737] usblp0: removed [ 1293.670052][T18816] playstation 0003:054C:05C4.001A: hidraw0: USB HID v0.08 Device [HID 054c:05c4] on usb-dummy_hcd.6-1/input0 [ 1293.671993][T16734] hid-generic 0000:0000:0000.001B: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1293.794828][T18816] playstation 0003:054C:05C4.001A: Failed to retrieve feature with reportID 18: -71 [ 1293.835909][T18816] playstation 0003:054C:05C4.001A: Failed to retrieve DualShock4 pairing info: -71 [ 1293.848562][T23189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1293.867159][T18816] playstation 0003:054C:05C4.001A: Failed to get MAC address from DualShock4 [ 1293.884803][T18816] playstation 0003:054C:05C4.001A: Failed to create dualshock4. [ 1293.918864][T23189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1293.933679][T23189] batman_adv: batadv0: Interface deactivated: gretap1 [ 1293.943876][T23189] batman_adv: batadv0: Removing interface: gretap1 [ 1293.992844][T23192] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23192 comm=syz.6.4244 [ 1294.007358][ T5737] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1294.017455][T23192] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=57 sclass=netlink_audit_socket pid=23192 comm=syz.6.4244 [ 1294.027762][T18816] playstation 0003:054C:05C4.001A: probe with driver playstation failed with error -71 [ 1294.031435][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1294.031447][ T30] audit: type=1400 audit(1778699051.845:2143): avc: denied { mounton } for pid=23191 comm="syz.6.4244" path="/proc/248" dev="proc" ino=90057 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1294.132366][T18816] usb 7-1: USB disconnect, device number 19 [ 1294.184340][ T5737] usb 3-1: Using ep0 maxpacket: 32 [ 1294.200193][ T5737] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1294.221820][ T5737] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1294.252711][ T5737] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1294.363067][ T5737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1294.544076][ T5737] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1294.555256][ T5737] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1294.570212][ T5737] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1294.579937][ T5737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.628167][ T5737] usb 3-1: config 0 descriptor?? [ 1294.628887][T23189] Process accounting resumed [ 1294.716906][T23200] vti0: entered promiscuous mode [ 1294.730335][T23200] vti0: entered allmulticast mode [ 1294.835743][ T30] audit: type=1400 audit(1778699052.584:2144): avc: denied { accept } for pid=23201 comm="syz.3.4249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1294.878845][ T5737] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1294.890303][T23197] wg1 speed is unknown, defaulting to 1000 [ 1294.992819][T23208] NILFS (nullb0): couldn't find nilfs on the device [ 1295.092676][ T30] audit: type=1400 audit(1778699052.781:2145): avc: denied { read } for pid=23203 comm="syz.4.4248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1295.416390][ C1] usblp0: nonzero read bulk status received: -71 [ 1295.425657][ T1221] usb 3-1: USB disconnect, device number 2 [ 1295.431859][T23166] usblp0: error -71 reading from printer [ 1295.589262][ T30] audit: type=1400 audit(1778699053.277:2146): avc: denied { mounton } for pid=23210 comm="syz.3.4250" path="/229/file0" dev="tmpfs" ino=1250 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1296.138779][T23165] usblp0: removed [ 1296.354862][ T24] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 1296.536071][ T24] usb 5-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 1296.546702][ T24] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1296.558082][ T24] usb 5-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1296.572782][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1296.581946][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1296.590073][ T24] usb 5-1: SerialNumber: syz [ 1296.599354][ T24] cdc_acm 5-1:253.0: Zero length descriptor references [ 1296.607941][ T24] cdc_acm 5-1:253.0: probe with driver cdc_acm failed with error -22 [ 1296.616603][ T24] usb-storage 5-1:253.0: USB Mass Storage device detected [ 1296.628060][ T24] usb-storage 5-1:253.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1296.636490][ T1221] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1296.836697][ T1221] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1296.873117][ T1221] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1296.897526][T23222] netlink: 'syz.4.4252': attribute type 7 has an invalid length. [ 1296.899682][T23231] FAULT_INJECTION: forcing a failure. [ 1296.899682][T23231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1296.906006][ T1221] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1296.931432][T23231] CPU: 0 UID: 0 PID: 23231 Comm: syz.2.4254 Tainted: G L syzkaller #0 PREEMPT(full) [ 1296.931460][T23231] Tainted: [L]=SOFTLOCKUP [ 1296.931466][T23231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1296.931476][T23231] Call Trace: [ 1296.931481][T23231] [ 1296.931488][T23231] dump_stack_lvl+0x100/0x190 [ 1296.931515][T23231] should_fail_ex.cold+0x5/0xa [ 1296.931539][T23231] _copy_to_user+0x32/0xd0 [ 1296.931565][T23231] drm_ioctl+0x608/0xc60 [ 1296.931594][T23231] ? __pfx_drm_mode_getcrtc+0x10/0x10 [ 1296.931615][T23231] ? __pfx_drm_ioctl+0x10/0x10 [ 1296.931643][T23231] ? selinux_file_ioctl+0x13b/0x290 [ 1296.931667][T23231] ? selinux_file_ioctl+0xb6/0x290 [ 1296.931689][T23231] ? __pfx_drm_ioctl+0x10/0x10 [ 1296.931710][T23231] __x64_sys_ioctl+0x18e/0x210 [ 1296.931728][T23231] do_syscall_64+0x10b/0xf80 [ 1296.931747][T23231] ? clear_bhb_loop+0x40/0x90 [ 1296.931766][T23231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.931782][T23231] RIP: 0033:0x7fe0ced9ce59 [ 1296.931798][T23231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1296.931816][T23231] RSP: 002b:00007fe0cfc0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1296.931834][T23231] RAX: ffffffffffffffda RBX: 00007fe0cf016090 RCX: 00007fe0ced9ce59 [ 1296.931846][T23231] RDX: 0000200000000140 RSI: 00000000c06864a1 RDI: 0000000000000004 [ 1296.931858][T23231] RBP: 00007fe0cfc0e090 R08: 0000000000000000 R09: 0000000000000000 [ 1296.931868][T23231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1296.931878][T23231] R13: 00007fe0cf016128 R14: 00007fe0cf016090 R15: 00007ffeaf6d1068 [ 1296.931903][T23231] [ 1296.937112][ T24] usb 5-1: USB disconnect, device number 104 [ 1297.114902][ T1221] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 1297.129438][ T1221] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1297.138754][ T1221] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.146881][ T1221] usb 6-1: Product: syz [ 1297.151125][ T1221] usb 6-1: Manufacturer: syz [ 1297.161961][ T1221] usb 6-1: SerialNumber: syz [ 1297.230989][ T30] audit: type=1400 audit(1778699054.839:2147): avc: denied { write } for pid=23232 comm="syz.6.4255" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1297.232068][T23234] FAULT_INJECTION: forcing a failure. [ 1297.232068][T23234] name failslab, interval 1, probability 0, space 0, times 0 [ 1297.267932][T23234] CPU: 0 UID: 0 PID: 23234 Comm: syz.6.4255 Tainted: G L syzkaller #0 PREEMPT(full) [ 1297.267961][T23234] Tainted: [L]=SOFTLOCKUP [ 1297.267967][T23234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1297.267976][T23234] Call Trace: [ 1297.267982][T23234] [ 1297.267988][T23234] dump_stack_lvl+0x100/0x190 [ 1297.268013][T23234] should_fail_ex.cold+0x5/0xa [ 1297.268038][T23234] should_failslab+0xc2/0x120 [ 1297.268057][T23234] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1297.268077][T23234] ? __alloc_skb+0x140/0x710 [ 1297.268096][T23234] __alloc_skb+0x140/0x710 [ 1297.268110][T23234] ? __alloc_skb+0x5b7/0x710 [ 1297.268126][T23234] ? __pfx___alloc_skb+0x10/0x10 [ 1297.268142][T23234] ? crypto_create_tfm_node+0x16a/0x350 [ 1297.268153][T23234] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1297.268168][T23234] tls_strp_init+0x55/0x1b0 [ 1297.268179][T23234] tls_set_sw_offload+0x126c/0x1670 [ 1297.268199][T23234] tls_setsockopt+0x148b/0x1df0 [ 1297.268213][T23234] ? __pfx_tls_setsockopt+0x10/0x10 [ 1297.268229][T23234] ? selinux_socket_setsockopt+0x6a/0x80 [ 1297.268241][T23234] ? sock_common_setsockopt+0x2e/0xf0 [ 1297.268255][T23234] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1297.268269][T23234] do_sock_setsockopt+0xf3/0x1d0 [ 1297.268283][T23234] __sys_setsockopt+0x195/0x220 [ 1297.268302][T23234] __x64_sys_setsockopt+0xbd/0x160 [ 1297.268318][T23234] ? do_syscall_64+0x90/0xf80 [ 1297.268333][T23234] ? lockdep_hardirqs_on+0x78/0x100 [ 1297.268347][T23234] do_syscall_64+0x10b/0xf80 [ 1297.268361][T23234] ? clear_bhb_loop+0x40/0x90 [ 1297.268374][T23234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.268390][T23234] RIP: 0033:0x7fe84ed9ce59 [ 1297.268401][T23234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1297.268411][T23234] RSP: 002b:00007fe84cfd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1297.268422][T23234] RAX: ffffffffffffffda RBX: 00007fe84f016090 RCX: 00007fe84ed9ce59 [ 1297.268429][T23234] RDX: 0000000000000002 RSI: 000000000000011a RDI: 000000000000000b [ 1297.268436][T23234] RBP: 00007fe84cfd5090 R08: 0000000000000028 R09: 0000000000000000 [ 1297.268442][T23234] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 1297.268448][T23234] R13: 00007fe84f016128 R14: 00007fe84f016090 R15: 00007ffe6a00eae8 [ 1297.268462][T23234] [ 1297.748178][ T1221] usb 6-1: config 0 descriptor?? [ 1297.777570][ T1221] iguanair 6-1:0.0: probe with driver iguanair failed with error -12 [ 1297.895453][ T5737] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1298.023423][T23226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1298.038362][T23226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1298.053809][T23226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1298.094704][T23226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1298.501197][ T30] audit: type=1326 audit(1778699055.803:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23237 comm="syz.4.4257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1219ce59 code=0x7ffc0000 [ 1298.598434][ T24] usb 6-1: USB disconnect, device number 30 [ 1298.600655][ T30] audit: type=1326 audit(1778699055.803:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23237 comm="syz.4.4257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1219ce59 code=0x7ffc0000 [ 1298.703774][ T30] audit: type=1326 audit(1778699055.813:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23237 comm="syz.4.4257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5e1219ce59 code=0x7ffc0000 [ 1298.734193][ T30] audit: type=1326 audit(1778699056.243:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23237 comm="syz.4.4257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1219ce59 code=0x7ffc0000 [ 1298.761685][ T30] audit: type=1326 audit(1778699056.243:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23237 comm="syz.4.4257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1219ce59 code=0x7ffc0000 [ 1299.130740][T23256] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4260'. [ 1299.154212][ T5737] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 1299.163671][ T24] Process accounting resumed [ 1299.337479][ T5737] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.265051][ T5737] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1300.274010][ T5737] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1300.283459][ T5737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.295059][ T5737] usb 4-1: config 0 descriptor?? [ 1300.313363][ T5737] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1300.321670][ T5737] dvb-usb: bulk message failed: -22 (3/0) [ 1300.330265][ T5737] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1300.340199][ T5737] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1300.347909][ T5737] usb 4-1: media controller created [ 1300.358182][ T5737] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1300.373442][ T5737] dvb-usb: bulk message failed: -22 (6/0) [ 1300.379332][ T5737] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1300.400635][ T5737] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input95 [ 1300.415832][ T5737] dvb-usb: schedule remote query interval to 150 msecs. [ 1300.435398][ T5737] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1300.523417][T23272] macvtap1: entered allmulticast mode [ 1300.540109][T23272] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1300.562390][T23252] dvb-usb: bulk message failed: -22 (2/0) [ 1300.573735][ T30] audit: type=1400 audit(1778699057.956:2153): avc: denied { create } for pid=23276 comm="syz.5.4265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1300.615431][T23282] netlink: 'syz.5.4265': attribute type 1 has an invalid length. [ 1300.622855][T23272] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1300.632542][T23283] netlink: 'syz.3.4259': attribute type 1 has an invalid length. [ 1300.667581][ T5737] dvb-usb: bulk message failed: -22 (1/0) [ 1300.670296][T23272] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1300.683783][ T5737] dvb-usb: error while querying for an remote control event. [ 1300.694345][ T5802] usb 4-1: USB disconnect, device number 114 [ 1300.800760][ T5802] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1300.818500][ T30] audit: type=1400 audit(1778699058.199:2154): avc: denied { write } for pid=23259 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1300.930878][T23282] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1300.999892][ T30] audit: type=1400 audit(1778699058.367:2155): avc: denied { write } for pid=23297 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1301.062691][T23286] bond1: (slave veth5): Enslaving as an active interface with a down link [ 1301.077189][T23271] wg1 speed is unknown, defaulting to 1000 [ 1301.120598][T23289] bond1: (slave dummy0): making interface the new active one [ 1301.138688][T23289] dummy0: entered promiscuous mode [ 1301.157115][T23289] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1301.266681][T23294] bond1 (unregistering): (slave veth5): Releasing active interface [ 1301.413464][T23294] bond1 (unregistering): (slave dummy0): Releasing active interface [ 1301.446526][T23294] bond1 (unregistering): Released all slaves [ 1302.234975][ T30] audit: type=1400 audit(1778699059.490:2156): avc: denied { write } for pid=23305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1302.349362][T18816] hid_parser_main: 30 callbacks suppressed [ 1302.349382][T18816] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1302.408702][T18816] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1302.414849][T23338] netlink: 'syz.5.4273': attribute type 21 has an invalid length. [ 1302.426479][T23338] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4273'. [ 1302.458921][T23338] netlink: 'syz.5.4273': attribute type 4 has an invalid length. [ 1302.475330][ T30] audit: type=1400 audit(1778699059.752:2157): avc: denied { connect } for pid=23337 comm="syz.5.4273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1302.535822][T23338] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4273'. [ 1302.552901][T23344] netlink: 'syz.6.4274': attribute type 5 has an invalid length. [ 1302.613878][ T30] audit: type=1400 audit(1778699059.855:2158): avc: denied { write } for pid=23340 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1303.438010][ T1221] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1303.488210][T23375] netlink: 'syz.4.4284': attribute type 2 has an invalid length. [ 1303.610318][ T1221] usb 7-1: config 0 has no interfaces? [ 1303.616135][ T1221] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1303.634917][T23381] program syz.4.4287 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1303.636546][ T1221] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.675426][ T1221] usb 7-1: config 0 descriptor?? [ 1303.689756][T23383] wg1 speed is unknown, defaulting to 1000 [ 1303.912591][T23365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1303.939664][T23365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.965109][T23390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4289'. [ 1303.991003][T23365] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4280'. [ 1304.024538][ T5737] usb 7-1: USB disconnect, device number 20 [ 1304.700495][ T30] audit: type=1400 audit(1778699061.839:2159): avc: denied { write } for pid=23405 comm="syz.6.4295" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1304.891521][T23412] netlink: 'syz.3.4297': attribute type 2 has an invalid length. [ 1305.011950][T23416] netlink: 'syz.6.4295': attribute type 9 has an invalid length. [ 1305.020370][T23416] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4295'. [ 1305.409215][T23414] xt_hashlimit: max too large, truncated to 1048576 [ 1305.451220][T23418] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4298'. [ 1305.462029][T23414] xt_hashlimit: overflow, rate too high: 0 [ 1305.678276][T23427] fuse: Bad value for 'fd' [ 1306.830236][T23430] wg1 speed is unknown, defaulting to 1000 [ 1307.020106][T23460] netlink: 'syz.5.4308': attribute type 2 has an invalid length. [ 1307.054929][T23460] netlink: 'syz.5.4308': attribute type 2 has an invalid length. [ 1307.167086][ T30] audit: type=1400 audit(1778699064.141:2160): avc: denied { ioctl } for pid=23461 comm="syz.3.4311" path="socket:[90664]" dev="sockfs" ino=90664 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1307.189716][T23466] /dev/nullb0: Can't open blockdev [ 1307.206446][ T30] audit: type=1400 audit(1778699064.179:2161): avc: denied { name_connect } for pid=23461 comm="syz.3.4311" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1307.324083][ T30] audit: type=1400 audit(1778699064.291:2162): avc: denied { shutdown } for pid=23468 comm="syz.5.4313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1307.527699][ T30] audit: type=1400 audit(1778699064.478:2163): avc: denied { read } for pid=23468 comm="syz.5.4313" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1307.654918][ T24] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1307.883344][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 1307.905234][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1307.915605][ T24] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1307.945848][ T24] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1307.991197][ T24] usb 4-1: New USB device found, idVendor=17cc, idProduct=1978, bcdDevice= 0.40 [ 1308.019101][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.029797][ T24] usb 4-1: Product: syz [ 1308.034915][ T24] usb 4-1: Manufacturer: syz [ 1308.039650][ T24] usb 4-1: SerialNumber: syz [ 1308.085473][T23482] wg1 speed is unknown, defaulting to 1000 [ 1308.298408][ T24] usb 4-1: 0:2 : does not exist [ 1308.380200][ T24] usb 4-1: USB disconnect, device number 115 [ 1308.465010][T23280] udevd[23280]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1308.504575][T23482] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1308.684892][ T5802] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1308.735621][T23495] batadv_slave_1: entered promiscuous mode [ 1308.741644][T18816] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1308.823915][ T5802] usb 7-1: device descriptor read/64, error -71 [ 1308.909836][T18816] usb 3-1: Using ep0 maxpacket: 8 [ 1308.917667][T18816] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1308.928740][T18816] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1308.938889][T18816] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1308.949155][T18816] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1308.950407][T23497] netlink: 'syz.3.4323': attribute type 2 has an invalid length. [ 1308.966072][T18816] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1308.982046][T18816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.986258][T23497] netlink: 'syz.3.4323': attribute type 2 has an invalid length. [ 1308.999374][ T5737] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1309.122870][ T5802] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1309.187131][ T5737] usb 6-1: Using ep0 maxpacket: 16 [ 1309.195490][ T5737] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1309.207750][ T5737] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1309.210538][T18816] usb 3-1: GET_CAPABILITIES returned 0 [ 1309.222684][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1309.223148][ T5737] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1309.230169][T18816] usbtmc 3-1:16.0: can't read capabilities [ 1309.272105][ T5737] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.286886][ T5737] usb 6-1: config 0 descriptor?? [ 1309.294811][ T5802] usb 7-1: device descriptor read/64, error -71 [ 1309.337382][T16034] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1309.422435][ T5802] usb usb7-port1: attempt power cycle [ 1309.432510][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1309.441806][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1309.450861][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1309.459919][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1309.468999][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1309.478059][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1309.487130][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1309.496200][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1309.505423][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1309.517453][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1309.526557][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1309.535640][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1309.544712][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1309.553768][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1309.562831][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1309.575908][T16034] usb 4-1: config 0 has no interfaces? [ 1309.581437][T16034] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1309.590702][T16034] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.601851][T16034] usb 4-1: config 0 descriptor?? [ 1309.631896][T23491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1309.645354][T23491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1309.679779][T23491] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1309.786425][T16034] usb 3-1: USB disconnect, device number 3 [ 1309.806967][ T5802] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1309.826142][T23499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1309.835817][T23499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1309.840067][ T5802] usb 7-1: device descriptor read/8, error -71 [ 1309.851884][T23499] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4324'. [ 1309.863389][T18816] usb 4-1: USB disconnect, device number 116 [ 1310.107405][ T5802] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1310.127821][ T5802] usb 7-1: device descriptor read/8, error -71 [ 1310.256063][ T5802] usb usb7-port1: unable to enumerate USB device [ 1310.376889][T23503] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4325'. [ 1310.386695][T23503] netlink: 35 bytes leftover after parsing attributes in process `syz.2.4325'. [ 1310.395715][T23503] netlink: 'syz.2.4325': attribute type 5 has an invalid length. [ 1310.406573][T23503] netlink: 'syz.2.4325': attribute type 6 has an invalid length. [ 1310.415928][T23503] netlink: 35 bytes leftover after parsing attributes in process `syz.2.4325'. [ 1310.450192][T23505] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4325'. [ 1310.473555][T23505] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4325'. [ 1310.485548][T23505] netlink: 'syz.2.4325': attribute type 5 has an invalid length. [ 1310.494649][T23505] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4325'. [ 1310.649496][T23509] vxfs: unable to read disk superblock at 1 [ 1310.679732][T23509] vxfs: unable to read disk superblock at 8 [ 1310.690638][T23512] wg1 speed is unknown, defaulting to 1000 [ 1310.715081][T23509] vxfs: can't find superblock. [ 1310.802478][ T30] audit: type=1400 audit(1778699067.548:2164): avc: denied { setopt } for pid=23493 comm="syz.5.4322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1310.967316][T23516] [ 1310.969722][T23516] ====================================================== [ 1310.976715][T23516] WARNING: possible circular locking dependency detected [ 1310.983710][T23516] syzkaller #0 Tainted: G L [ 1310.989662][T23516] ------------------------------------------------------ [ 1310.996648][T23516] syz.3.4327/23516 is trying to acquire lock: [ 1311.002687][T23516] ffffffff8e9b18c0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_noprof+0x4c/0x6e0 [ 1311.012054][T23516] [ 1311.012054][T23516] but task is already holding lock: [ 1311.019388][T23516] ffff88801c6a6a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_setattr+0x88/0x130 [ 1311.029631][T23516] [ 1311.029631][T23516] which lock already depends on the new lock. [ 1311.029631][T23516] [ 1311.040018][T23516] [ 1311.040018][T23516] the existing dependency chain (in reverse order) is: [ 1311.049003][T23516] [ 1311.049003][T23516] -> #8 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1311.057486][T23516] down_read+0x99/0x450 [ 1311.062147][T23516] kernfs_iop_permission+0x6e/0xc0 [ 1311.067756][T23516] inode_permission+0x3f1/0x620 [ 1311.073125][T23516] cgroup_may_write+0xaa/0x120 [ 1311.078394][T23516] cgroup_attach_permissions+0x1b8/0x770 [ 1311.084525][T23516] __cgroup_procs_write+0x2d4/0x730 [ 1311.090229][T23516] cgroup_threads_write+0x23/0x50 [ 1311.095748][T23516] cgroup_file_write+0x1e6/0x8a0 [ 1311.101182][T23516] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1311.106978][T23516] vfs_write+0x6ac/0x1070 [ 1311.111800][T23516] ksys_write+0x12a/0x250 [ 1311.116621][T23516] do_syscall_64+0x10b/0xf80 [ 1311.121707][T23516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.128092][T23516] [ 1311.128092][T23516] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1311.135787][T23516] cpus_read_lock+0x42/0x170 [ 1311.140882][T23516] static_key_slow_inc+0x12/0x30 [ 1311.146314][T23516] fl_create+0x7fb/0xd10 [ 1311.151049][T23516] ipv6_flowlabel_opt+0x519/0x2d40 [ 1311.156653][T23516] do_ipv6_setsockopt+0x1b80/0x44b0 [ 1311.162347][T23516] ipv6_setsockopt+0xcb/0x170 [ 1311.167522][T23516] rawv6_setsockopt+0xee/0x5a0 [ 1311.172787][T23516] do_sock_setsockopt+0xf3/0x1d0 [ 1311.178238][T23516] __sys_setsockopt+0x195/0x220 [ 1311.183611][T23516] __x64_sys_setsockopt+0xbd/0x160 [ 1311.189300][T23516] do_syscall_64+0x10b/0xf80 [ 1311.194412][T23516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.200803][T23516] [ 1311.200803][T23516] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1311.208503][T23516] lock_sock_nested+0x41/0xf0 [ 1311.213686][T23516] inet_shutdown+0x67/0x410 [ 1311.218685][T23516] nbd_mark_nsock_dead+0xae/0x5c0 [ 1311.224208][T23516] sock_shutdown+0x16b/0x200 [ 1311.229294][T23516] nbd_config_put+0x1eb/0x750 [ 1311.234462][T23516] nbd_genl_connect+0xaf8/0x1a40 [ 1311.239892][T23516] genl_family_rcv_msg_doit+0x214/0x300 [ 1311.245947][T23516] genl_rcv_msg+0x560/0x800 [ 1311.250951][T23516] netlink_rcv_skb+0x159/0x420 [ 1311.256227][T23516] genl_rcv+0x28/0x40 [ 1311.260710][T23516] netlink_unicast+0x585/0x850 [ 1311.265994][T23516] netlink_sendmsg+0x8b0/0xda0 [ 1311.271271][T23516] ____sys_sendmsg+0x9e1/0xb70 [ 1311.276531][T23516] ___sys_sendmsg+0x190/0x1e0 [ 1311.281704][T23516] __sys_sendmsg+0x170/0x220 [ 1311.286803][T23516] do_syscall_64+0x10b/0xf80 [ 1311.291904][T23516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.298303][T23516] [ 1311.298303][T23516] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1311.305917][T23516] __mutex_lock+0x1a4/0x1b10 [ 1311.311005][T23516] nbd_queue_rq+0x428/0x1080 [ 1311.316097][T23516] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 1311.322152][T23516] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 1311.328978][T23516] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 1311.335464][T23516] blk_mq_run_hw_queue+0x23c/0x670 [ 1311.341074][T23516] blk_mq_dispatch_list+0x51d/0x1360 [ 1311.346863][T23516] blk_mq_flush_plug_list+0x130/0x600 [ 1311.352741][T23516] __blk_flush_plug+0x2c4/0x4b0 [ 1311.358091][T23516] __submit_bio+0x584/0x6c0 [ 1311.363093][T23516] submit_bio_noacct_nocheck+0x543/0xbf0 [ 1311.369238][T23516] submit_bio_noacct+0xd18/0x2000 [ 1311.374764][T23516] submit_bh_wbc+0x681/0x890 [ 1311.379865][T23516] block_read_full_folio+0x264/0x8e0 [ 1311.385677][T23516] filemap_read_folio+0xfc/0x3b0 [ 1311.391141][T23516] do_read_cache_folio+0x2d7/0x6b0 [ 1311.396761][T23516] read_part_sector+0xd1/0x370 [ 1311.402025][T23516] adfspart_check_ICS+0x91/0x7d0 [ 1311.407462][T23516] bdev_disk_changed+0x7a3/0x1250 [ 1311.412982][T23516] blkdev_get_whole+0x187/0x290 [ 1311.418326][T23516] bdev_open+0x2c7/0xe40 [ 1311.423082][T23516] blkdev_open+0x34e/0x4f0 [ 1311.427988][T23516] do_dentry_open+0x6d8/0x1660 [ 1311.433245][T23516] vfs_open+0x82/0x3f0 [ 1311.437807][T23516] path_openat+0x208c/0x31a0 [ 1311.442890][T23516] do_file_open+0x20e/0x430 [ 1311.447883][T23516] do_sys_openat2+0x10d/0x1e0 [ 1311.453052][T23516] __x64_sys_openat+0x12d/0x210 [ 1311.458396][T23516] do_syscall_64+0x10b/0xf80 [ 1311.463481][T23516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.469872][T23516] [ 1311.469872][T23516] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1311.477045][T23516] __mutex_lock+0x1a4/0x1b10 [ 1311.482154][T23516] nbd_queue_rq+0xba/0x1080 [ 1311.487167][T23516] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 1311.493203][T23516] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 1311.500030][T23516] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 1311.506597][T23516] blk_mq_run_hw_queue+0x23c/0x670 [ 1311.512206][T23516] blk_mq_dispatch_list+0x51d/0x1360 [ 1311.517983][T23516] blk_mq_flush_plug_list+0x130/0x600 [ 1311.523861][T23516] __blk_flush_plug+0x2c4/0x4b0 [ 1311.529231][T23516] __submit_bio+0x584/0x6c0 [ 1311.534252][T23516] submit_bio_noacct_nocheck+0x543/0xbf0 [ 1311.540386][T23516] submit_bio_noacct+0xd18/0x2000 [ 1311.545911][T23516] submit_bh_wbc+0x681/0x890 [ 1311.550994][T23516] block_read_full_folio+0x264/0x8e0 [ 1311.556772][T23516] filemap_read_folio+0xfc/0x3b0 [ 1311.562204][T23516] do_read_cache_folio+0x2d7/0x6b0 [ 1311.567815][T23516] read_part_sector+0xd1/0x370 [ 1311.573077][T23516] adfspart_check_ICS+0x91/0x7d0 [ 1311.578520][T23516] bdev_disk_changed+0x7a3/0x1250 [ 1311.584054][T23516] blkdev_get_whole+0x187/0x290 [ 1311.589410][T23516] bdev_open+0x2c7/0xe40 [ 1311.594148][T23516] blkdev_open+0x34e/0x4f0 [ 1311.599054][T23516] do_dentry_open+0x6d8/0x1660 [ 1311.604318][T23516] vfs_open+0x82/0x3f0 [ 1311.608882][T23516] path_openat+0x208c/0x31a0 [ 1311.613966][T23516] do_file_open+0x20e/0x430 [ 1311.618963][T23516] do_sys_openat2+0x10d/0x1e0 [ 1311.624152][T23516] __x64_sys_openat+0x12d/0x210 [ 1311.629498][T23516] do_syscall_64+0x10b/0xf80 [ 1311.634584][T23516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.640969][T23516] [ 1311.640969][T23516] -> #3 (set->srcu){.+.+}-{0:0}: [ 1311.648058][T23516] __synchronize_srcu+0xa2/0x300 [ 1311.653491][T23516] blk_mq_quiesce_queue+0x149/0x1c0 [ 1311.659184][T23516] elevator_switch+0x17b/0x7e0 [ 1311.664443][T23516] elevator_change+0x352/0x530 [ 1311.669700][T23516] elevator_set_default+0x29e/0x360 [ 1311.675393][T23516] blk_register_queue+0x48e/0x630 [ 1311.680913][T23516] __add_disk+0x73f/0xe40 [ 1311.685741][T23516] add_disk_fwnode+0x118/0x5c0 [ 1311.690997][T23516] nbd_dev_add+0x77a/0xb10 [ 1311.695904][T23516] nbd_init+0x291/0x2b0 [ 1311.700555][T23516] do_one_initcall+0x121/0x750 [ 1311.705814][T23516] kernel_init_freeable+0x6ea/0x7b0 [ 1311.711507][T23516] kernel_init+0x1f/0x1e0 [ 1311.716327][T23516] ret_from_fork+0x72b/0xd50 [ 1311.721409][T23516] ret_from_fork_asm+0x1a/0x30 [ 1311.726676][T23516] [ 1311.726676][T23516] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1311.734461][T23516] __mutex_lock+0x1a4/0x1b10 [ 1311.739549][T23516] elevator_change+0x1bc/0x530 [ 1311.744809][T23516] elevator_set_none+0x92/0xf0 [ 1311.750066][T23516] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 1311.756365][T23516] nbd_start_device+0x1a6/0xbd0 [ 1311.761707][T23516] nbd_genl_connect+0xff2/0x1a40 [ 1311.767143][T23516] genl_family_rcv_msg_doit+0x214/0x300 [ 1311.773184][T23516] genl_rcv_msg+0x560/0x800 [ 1311.778193][T23516] netlink_rcv_skb+0x159/0x420 [ 1311.783460][T23516] genl_rcv+0x28/0x40 [ 1311.787946][T23516] netlink_unicast+0x585/0x850 [ 1311.793212][T23516] netlink_sendmsg+0x8b0/0xda0 [ 1311.798484][T23516] ____sys_sendmsg+0x9e1/0xb70 [ 1311.803740][T23516] ___sys_sendmsg+0x190/0x1e0 [ 1311.808912][T23516] __sys_sendmsg+0x170/0x220 [ 1311.813991][T23516] do_syscall_64+0x10b/0xf80 [ 1311.819074][T23516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.825475][T23516] [ 1311.825475][T23516] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1311.834043][T23516] blk_alloc_queue+0x610/0x790 [ 1311.839326][T23516] blk_mq_alloc_queue+0x174/0x290 [ 1311.844840][T23516] __blk_mq_alloc_disk+0x29/0x120 [ 1311.850355][T23516] nbd_dev_add+0x492/0xb10 [ 1311.855268][T23516] nbd_init+0x291/0x2b0 [ 1311.859921][T23516] do_one_initcall+0x121/0x750 [ 1311.865180][T23516] kernel_init_freeable+0x6ea/0x7b0 [ 1311.870876][T23516] kernel_init+0x1f/0x1e0 [ 1311.875698][T23516] ret_from_fork+0x72b/0xd50 [ 1311.880780][T23516] ret_from_fork_asm+0x1a/0x30 [ 1311.886040][T23516] [ 1311.886040][T23516] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1311.893223][T23516] __lock_acquire+0x14b8/0x2630 [ 1311.898587][T23516] lock_acquire+0x1b1/0x370 [ 1311.903600][T23516] fs_reclaim_acquire+0xc4/0x100 [ 1311.909044][T23516] kmem_cache_alloc_noprof+0x4c/0x6e0 [ 1311.914913][T23516] __kernfs_iattrs+0x124/0x3e0 [ 1311.920175][T23516] __kernfs_setattr+0x4d/0x3c0 [ 1311.925441][T23516] kernfs_iop_setattr+0xda/0x130 [ 1311.930885][T23516] notify_change+0xb25/0x1330 [ 1311.936054][T23516] do_truncate+0x1df/0x240 [ 1311.940968][T23516] path_openat+0x2a55/0x31a0 [ 1311.946067][T23516] do_file_open+0x20e/0x430 [ 1311.951079][T23516] do_sys_openat2+0x10d/0x1e0 [ 1311.956261][T23516] __x64_sys_openat+0x12d/0x210 [ 1311.961613][T23516] do_syscall_64+0x10b/0xf80 [ 1311.966696][T23516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.973080][T23516] [ 1311.973080][T23516] other info that might help us debug this: [ 1311.973080][T23516] [ 1311.983277][T23516] Chain exists of: [ 1311.983277][T23516] fs_reclaim --> cpu_hotplug_lock --> &root->kernfs_iattr_rwsem [ 1311.983277][T23516] [ 1311.996804][T23516] Possible unsafe locking scenario: [ 1311.996804][T23516] [ 1312.004237][T23516] CPU0 CPU1 [ 1312.009666][T23516] ---- ---- [ 1312.015002][T23516] lock(&root->kernfs_iattr_rwsem); [ 1312.020258][T23516] lock(cpu_hotplug_lock); [ 1312.027267][T23516] lock(&root->kernfs_iattr_rwsem); [ 1312.035047][T23516] lock(fs_reclaim); [ 1312.039012][T23516] [ 1312.039012][T23516] *** DEADLOCK *** [ 1312.039012][T23516] [ 1312.047138][T23516] 3 locks held by syz.3.4327/23516: [ 1312.052304][T23516] #0: ffff888077f20410 (sb_writers#10){.+.+}-{0:0}, at: path_openat+0x2157/0x31a0 [ 1312.061613][T23516] #1: ffff888078630f98 (&sb->s_type->i_mutex_key#18){+.+.}-{4:4}, at: do_truncate+0x14e/0x240 [ 1312.071934][T23516] #2: ffff88801c6a6a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_setattr+0x88/0x130 [ 1312.082615][T23516] [ 1312.082615][T23516] stack backtrace: [ 1312.088478][T23516] CPU: 0 UID: 0 PID: 23516 Comm: syz.3.4327 Tainted: G L syzkaller #0 PREEMPT(full) [ 1312.088494][T23516] Tainted: [L]=SOFTLOCKUP [ 1312.088498][T23516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1312.088504][T23516] Call Trace: [ 1312.088509][T23516] [ 1312.088513][T23516] dump_stack_lvl+0x100/0x190 [ 1312.088527][T23516] print_circular_bug.cold+0x178/0x1c7 [ 1312.088545][T23516] check_noncircular+0x146/0x160 [ 1312.088560][T23516] __lock_acquire+0x14b8/0x2630 [ 1312.088574][T23516] ? find_held_lock+0x2b/0x80 [ 1312.088584][T23516] lock_acquire+0x1b1/0x370 [ 1312.088597][T23516] ? kmem_cache_alloc_noprof+0x4c/0x6e0 [ 1312.088613][T23516] ? __lock_acquire+0x4a5/0x2630 [ 1312.088627][T23516] fs_reclaim_acquire+0xc4/0x100 [ 1312.088639][T23516] ? kmem_cache_alloc_noprof+0x4c/0x6e0 [ 1312.088654][T23516] kmem_cache_alloc_noprof+0x4c/0x6e0 [ 1312.088669][T23516] ? __kernfs_iattrs+0x124/0x3e0 [ 1312.088682][T23516] __kernfs_iattrs+0x124/0x3e0 [ 1312.088693][T23516] ? __pfx___kernfs_iattrs+0x10/0x10 [ 1312.088705][T23516] ? inode_newsize_ok+0x13d/0x200 [ 1312.088718][T23516] __kernfs_setattr+0x4d/0x3c0 [ 1312.088730][T23516] kernfs_iop_setattr+0xda/0x130 [ 1312.088742][T23516] ? __pfx_kernfs_iop_setattr+0x10/0x10 [ 1312.088755][T23516] notify_change+0xb25/0x1330 [ 1312.088767][T23516] do_truncate+0x1df/0x240 [ 1312.088779][T23516] ? __pfx_do_truncate+0x10/0x10 [ 1312.088793][T23516] path_openat+0x2a55/0x31a0 [ 1312.088808][T23516] ? __pfx_path_openat+0x10/0x10 [ 1312.088823][T23516] do_file_open+0x20e/0x430 [ 1312.088837][T23516] ? __pfx_do_file_open+0x10/0x10 [ 1312.088854][T23516] ? alloc_fd+0x476/0x790 [ 1312.088867][T23516] ? do_getname+0x191/0x390 [ 1312.088882][T23516] do_sys_openat2+0x10d/0x1e0 [ 1312.088897][T23516] ? __pfx_do_sys_openat2+0x10/0x10 [ 1312.088914][T23516] __x64_sys_openat+0x12d/0x210 [ 1312.088929][T23516] ? __pfx___x64_sys_openat+0x10/0x10 [ 1312.088944][T23516] ? kmem_cache_free+0x127/0x6c0 [ 1312.088959][T23516] ? rcu_is_watching+0x12/0xc0 [ 1312.088975][T23516] do_syscall_64+0x10b/0xf80 [ 1312.088990][T23516] ? clear_bhb_loop+0x40/0x90 [ 1312.089002][T23516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.089013][T23516] RIP: 0033:0x7f72cef9ce59 [ 1312.089022][T23516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1312.089033][T23516] RSP: 002b:00007f72cd1b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1312.089043][T23516] RAX: ffffffffffffffda RBX: 00007f72cf216180 RCX: 00007f72cef9ce59 [ 1312.089050][T23516] RDX: 000000000000275a RSI: 0000200000000040 RDI: 000000000000000c [ 1312.089056][T23516] RBP: 00007f72cf032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1312.089063][T23516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1312.089068][T23516] R13: 00007f72cf216218 R14: 00007f72cf216180 R15: 00007ffdef0dc5d8 [ 1312.089078][T23516] [ 1312.455856][ T1221] usb 6-1: USB disconnect, device number 31 [ 1312.457409][T23509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4327'. [ 1312.472499][T23280] udevd[23280]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 1312.498500][T23494] batadv_slave_1: left promiscuous mode [ 1312.561174][T17458] block nbd0: Receive control failed (result -32) [ 1312.568042][T18142] block nbd0: Receive control failed (result -32)