last executing test programs: 10.155915892s ago: executing program 4 (id=1425): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000000904000005030015000921050000012205000905810320000000070905020310"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x242000, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)="8102") 7.47168837s ago: executing program 4 (id=1439): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x8, 0x7ffffe39}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000040)={r0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x6) setsockopt$sock_int(r3, 0x1, 0x800000000f, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x28) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x4, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x1, 0x6000, 0x1, 0x80800}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c000009903e80346986a93723594e0fbad6b6796346c376701cdafb9d1900190000c8010000000008001e00ff07000008001e00ff7f000008000500fd00010208000b000c000040"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000280)="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", 0xfa}, {&(0x7f0000000380)="f1f2d360ce37f9a0f7dcd220afcbb8c331cf9622e97d59cb82aa935c1f1c9afcea49c6a97fb4811f9d835b9f7fe1959566c738f4f525c0b25c4040af7ad8227194f61eda25c48a03d912eb390e550dae66a1ceb2701e84b7b4374a868d4bb83722c0076cbc7b39363961674348534ae8a50e7a4bfe3c0c9918498e101e2517d8074a75d5397e2661a7718e57cab533b4d493be914cc631d9d5d80b6eecfa9142aed0a5cd2dacff51611478641590da37b8b6ac9e281c63b2fa463193e5a57b9b0403e222bf384a", 0xc7}, {&(0x7f0000000480)="5f27a1b5613061870ec9f33f632219c482bc1d297f97815620e610ed822cf4210757ab3657883a09730156431ffdc8bc8784b5de40a19206d3f9edecde8dd54d5edf8cb61b17d181f549e939f0c67745cc7faf61e6ca596f3b91d553f534b52ce091d0bffc91d4d9ff71af1ebb886babae7a4d", 0x73}], 0x3) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r6, 0x0) 6.997716117s ago: executing program 4 (id=1441): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x4d, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000980)=0x4000) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x178e, &(0x7f0000000300)={0x0, 0x1443, 0x8, 0xfffffffe, 0xc}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2, 0x80805, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) 5.947423619s ago: executing program 4 (id=1447): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fcffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5.637974533s ago: executing program 0 (id=1449): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0xd931d3864d39dcdb) gettid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfb}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0x4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2000000000000008, 0x5, 0x3) fcntl$setlease(r2, 0x400, 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)="e502", 0x2) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 5.404632668s ago: executing program 0 (id=1450): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) gettid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0x4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2000000000000008, 0x5, 0x3) fcntl$setlease(r2, 0x400, 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)="e502", 0x2) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 5.074554112s ago: executing program 0 (id=1453): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0) rt_sigprocmask(0x1, &(0x7f0000000180)={[0xfffffc00]}, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000040)={r0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x6) setsockopt$sock_int(r3, 0x1, 0x800000000f, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x28) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x4, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x1, 0x6000, 0x1, 0x80800}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c000009903e80346986a93723594e0fbad6b6796346c376701cdafb9d1900190000c8010000000008001e00ff07000008001e00ff7f000008000500fd00010208000b000c000040"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000280)="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", 0xfa}, {&(0x7f0000000380)="f1f2d360ce37f9a0f7dcd220afcbb8c331cf9622e97d59cb82aa935c1f1c9afcea49c6a97fb4811f9d835b9f7fe1959566c738f4f525c0b25c4040af7ad8227194f61eda25c48a03d912eb390e550dae66a1ceb2701e84b7b4374a868d4bb83722c0076cbc7b39363961674348534ae8a50e7a4bfe3c0c9918498e101e2517d8074a75d5397e2661a7718e57cab533b4d493be914cc631d9d5d80b6eecfa9142aed0a5cd2dacff51611478641590da37b8b6ac9e281c63b2fa463193e5a57b9b0403e222bf384a", 0xc7}, {&(0x7f0000000480)="5f27a1b5613061870ec9f33f632219c482bc1d297f97815620e610ed822cf4210757ab3657883a09730156431ffdc8bc8784b5de40a19206d3f9edecde8dd54d5edf8cb61b17d181f549e939f0c67745cc7faf61e6ca596f3b91d553f534b52ce091d0bffc91d4d9ff71af1ebb886babae7a4d", 0x73}], 0x3) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r6, 0x0) 4.892005019s ago: executing program 3 (id=1454): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) socket$kcm(0xa, 0x922000000003, 0x11) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000200)={[{0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x64, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @random="2cc7dce97b85"}, 0x0, @random=0x6, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_HIDDEN_SSID={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) mount_setattr(r6, &(0x7f0000000000)='./file0/../file0/../file0\x00', 0x800, &(0x7f00000000c0)={0x1, 0x70, 0x100000}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/platform/devices/usbip-vudc.0/usbip_status\x00', 0x0, 0x0) read(r7, &(0x7f0000000200)=""/256, 0x100) 4.891574138s ago: executing program 0 (id=1455): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001400050000000000000000002d000000010000000500010008000000"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001800050000000000000000002d000000000000000101000005000100080000000800040001000000"], 0x2c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0xd) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = inotify_init() socket$nl_generic(0x10, 0x3, 0x10) inotify_add_watch(r2, &(0x7f0000000340)='.\x00', 0xa50003d1) close(0x3) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) setns(0xc9, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00') ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0x7fffffff, 0x1], [{0x0, 0xffffffff, 0x0, 0x1}, {0x2, 0x35}, {0xfff, 0x100000c}, {0xffffffff}, {0x0, 0x4}, {0x3, 0x200}, {0x0, 0xfffffffd}, {0xfffffff8, 0x2010000}, {0x0, 0x82}, {0x1010000, 0x6}, {0x1, 0xffffffff}, {0x3, 0x8}], 0xc}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) read(r3, &(0x7f0000000640)=""/4096, 0x1000) syz_fuse_handle_req(r3, &(0x7f0000001740)="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", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket(0x29, 0x2, 0x80000000) ioctl(r5, 0x89e2, &(0x7f0000000300)="0100000008000000") ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000180)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) epoll_create1(0x0) 4.104414526s ago: executing program 0 (id=1459): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) socket(0x10, 0x3, 0x0) r1 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x20000000, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000100)={0x1, 0x2}, 0x1) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x4, 0xfcd, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, &(0x7f0000000240)) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000280)={0x2e, 0x5, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x22, &(0x7f0000000200)=@new_dev={0x1, 0xeec}}}, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7200fbdbdf253900000008000300", @ANYRES32=r9, @ANYBLOB="2c005a8028000380240008"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d31ce0108dc556e597655ba11bacc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141fa4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb67c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff4da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3041969534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb75e83eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038433b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033b65ccd4e990cb2ba86ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02de325f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aebe4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f62cfb5800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe372, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) 4.088153427s ago: executing program 3 (id=1460): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0xd931d3864d39dcdb) gettid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfb}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0x4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2000000000000008, 0x5, 0x3) fcntl$setlease(r2, 0x400, 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)="e502", 0x2) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3.96787185s ago: executing program 4 (id=1461): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c3835a607cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531c9a5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ec7291fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31d7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440e06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d161cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad1aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a41fc93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2910659dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e12318d1526107a050f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10c932c20f13ef287b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df7072dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a3167e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239330f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c5940900000000000000773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49656b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38067f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a38541b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081b92a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c00", 0x2000, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201ab00c4b20710200e01015a7a0102030109021b00010000000009040000012e6d0a000905"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="0100000007000000060000000900000000000000", @ANYRES32, @ANYBLOB="000100000000000000000000000000000000000095c4397820eba301ae044e5658f153819b5e48ccf958a4d766be8983dc40d2aa4945", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000340)={0x3, r3, 0x5c0, 0xffffffff, 0xb, 0x40001f8, 0x1}) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='md0\x00', 0x3) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/block/md0/md/array_state\x00', 0x81ff, 0x8) r5 = socket$inet_sctp(0x2, 0x1, 0x84) socket$can_raw(0x1d, 0x3, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r6, r7, 0x0, 0x0, 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0xdbf, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002080)=@bpf_lsm={0x1d, 0xe, &(0x7f0000002180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @tail_call, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000002280)='GPL\x00', 0x6, 0x60, &(0x7f0000002500)=""/96, 0x40f00, 0x4e, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000002580)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000025c0)={0x3, 0x1, 0x9, 0x34e55005}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000002900)=[r6, r4, r6, 0xffffffffffffffff, r4, r4], &(0x7f0000002940)=[{0x1, 0x3, 0x6, 0xa}, {0x5, 0x5, 0x5, 0xa}, {0x0, 0x14, 0xb, 0xa}, {0x4, 0x3, 0x3, 0xb}, {0x0, 0x2, 0x10, 0x431d6abb5fcfb38}], 0x10, 0x101}, 0x94) sendto$inet(r5, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r5, 0xda90) accept4(r5, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./ram0\x00', 0x2, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/level\x00', 0x2, 0x0) write(r8, &(0x7f0000000600)='raid1\x00', 0x5) r9 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0) write(r9, &(0x7f0000000800)='1\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/block/md0/md/dev-ram0/slot\x00', 0x2, 0x28) openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/block/md0/md/array_state\x00', 0x2, 0x0) 3.605172361s ago: executing program 2 (id=1462): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_init() socket$nl_generic(0x10, 0x3, 0x10) close(0x3) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0x7fffffff, 0x1], [{0x0, 0xffffffff, 0x0, 0x1}, {0x2, 0x35}, {0xfff, 0x100000c}, {0xffffffff}, {0x0, 0x4}, {0x3, 0x200}, {0x0, 0xfffffffd}, {0xfffffff8, 0x2010000}, {0x0, 0x82}, {0x1010000, 0x6}, {0x1, 0xffffffff}, {0x3, 0x8}], 0xc}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 3.28023664s ago: executing program 2 (id=1463): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f0, 0x0, 0x98, 0x218, 0x0, 0x218, 0x358, 0x358, 0x358, 0x358, 0x358, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x1f}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0xff000000, 0x0, 'vlan1\x00', 'syzkaller1\x00', {}, {}, 0x0, 0x1}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x6}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private=0xa010101, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0xb8f7) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000180)=ANY=[@ANYRESDEC=r4, @ANYRESOCT, @ANYRES32], 0x1b0) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 3.227927902s ago: executing program 3 (id=1464): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800000000000000"], 0x44}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0xc, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r4, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x68346000) r6 = socket(0x11, 0x80a, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x40, 0x1040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x4}]}}}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@multicast, @remote, @void, {@arp={0x806, @generic={0x310, 0x16, 0x6, 0x0, 0x2, @random="ebfbd40c349a", "", @remote, "de214edbe9bd05ed"}}}}, 0x0) 2.367725129s ago: executing program 1 (id=1466): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x58) arch_prctl$ARCH_GET_CPUID(0x1011) socket$packet(0x11, 0x2, 0x300) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x10000000000, 0x4, 0x2000008, 0x11, 0xffffffffffffffff, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1b5) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) rmdir(&(0x7f0000000100)='./cgroup/../file0\x00') arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) arch_prctl$ARCH_GET_CPUID(0x1011) 2.278736517s ago: executing program 2 (id=1467): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) 2.153721615s ago: executing program 2 (id=1468): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_emit_ethernet(0x46, &(0x7f00000004c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast, {[@timestamp_addr={0x44, 0x14, 0x9, 0x1, 0x0, [{@broadcast}, {@private=0xa010102}]}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x1, r2, 0xf4}, 0xc) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x18000000000002a0, 0xfd3c, 0x26, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x2b, 0xa, 0x40) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) recvmmsg(r10, &(0x7f0000007a80)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000007bc0)=""/4087, 0xff7}], 0x2}, 0xfff}], 0x1, 0x10022, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="340000001100050000000001feffffff07000000", @ANYRES32=r2, @ANYBLOB="402000000000000014001a80100004800c000a80"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 1.999474131s ago: executing program 3 (id=1469): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001400050000000000000000002d000000010000000500010008000000"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001800050000000000000000002d000000000000000101000005000100080000000800040001000000"], 0x2c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0xd) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = inotify_init() socket$nl_generic(0x10, 0x3, 0x10) inotify_add_watch(r2, &(0x7f0000000340)='.\x00', 0xa50003d1) close(0x3) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) setns(0xc9, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00') ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0x7fffffff, 0x1], [{0x0, 0xffffffff, 0x0, 0x1}, {0x2, 0x35}, {0xfff, 0x100000c}, {0xffffffff}, {0x0, 0x4}, {0x3, 0x200}, {0x0, 0xfffffffd}, {0xfffffff8, 0x2010000}, {0x0, 0x82}, {0x1010000, 0x6}, {0x1, 0xffffffff}, {0x3, 0x8}], 0xc}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) read(r3, &(0x7f0000000640)=""/4096, 0x1000) syz_fuse_handle_req(r3, &(0x7f0000001740)="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", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket(0x29, 0x2, 0x80000000) ioctl(r5, 0x89e2, &(0x7f0000000300)="0100000008000000") ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000180)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) epoll_create1(0x0) 1.407809153s ago: executing program 2 (id=1470): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_emit_ethernet(0x46, &(0x7f00000004c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast, {[@timestamp_addr={0x44, 0x14, 0x9, 0x1, 0x0, [{@broadcast}, {@private=0xa010102}]}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x1, r2, 0xf4}, 0xc) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x18000000000002a0, 0xfd3c, 0x26, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x2b, 0xa, 0x40) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) recvmmsg(r10, &(0x7f0000007a80)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000007bc0)=""/4087, 0xff7}], 0x2}, 0xfff}], 0x1, 0x10022, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="340000001100050000000001feffffff07000000", @ANYRES32=r2, @ANYBLOB="402000000000000014001a80100004800c000a80"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 1.407308155s ago: executing program 0 (id=1471): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fcffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.2028119s ago: executing program 3 (id=1472): setns(0xc9, 0x0) r0 = socket(0x10, 0x3, 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000280)=0x60, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000340)=ANY=[], 0x28}}, 0x80) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x8) write(r1, &(0x7f0000000900)='1', 0x1) mount(0x0, &(0x7f0000000100)='local_sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='local_sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x2, 0xc5) write(r2, &(0x7f00000000c0)='o', 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='file net/sctp/* +p', 0x12) read$alg(r5, &(0x7f0000000340)=""/50, 0x32) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, &(0x7f0000000040)=0xff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="280000001c00010029bd7000fedbdf2507000000", @ANYRES32=r7, @ANYBLOB="80007f060a000200aaaaaaaaaa0c00001c5083053606f89fd3844833767ab83696a91c508656c722ec2122480eeb991a21d314c50734fcbdd89fc62498886753675b80e38dc24fcd8295f4b14575dbdf0e19f456fa960f861ef8912f151649e9b9317aeaf6af464e591575685e027215543b258ba771d7f8144a9611433136d28bd21969b25552265f1d1cf549ccbfefdc5b6cfee5d7bda31e78dde0144e018e82daed84b795101b4543c50b80cd77be822539808bece0418fc75ad1ec4c6a3238"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) semctl$IPC_SET(0x0, 0x0, 0x13, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0xee00, 0x0, 0x171, 0x2}, 0x457, 0xffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys/bus/pci/rescan\x00', 0x1, 0x0) 1.06345482s ago: executing program 1 (id=1473): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_init() socket$nl_generic(0x10, 0x3, 0x10) close(0x3) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0x7fffffff, 0x1], [{0x0, 0xffffffff, 0x0, 0x1}, {0x2, 0x35}, {0xfff, 0x100000c}, {0xffffffff}, {0x0, 0x4}, {0x3, 0x200}, {0x0, 0xfffffffd}, {0xfffffff8, 0x2010000}, {0x0, 0x82}, {0x1010000, 0x6}, {0x1, 0xffffffff}, {0x3, 0x8}], 0xc}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 966.770132ms ago: executing program 1 (id=1474): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0xd931d3864d39dcdb) gettid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfb}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0x4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2000000000000008, 0x5, 0x3) fcntl$setlease(r2, 0x400, 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)="e502", 0x2) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 881.149038ms ago: executing program 4 (id=1475): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x4d, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000980)=0x4000) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x178e, &(0x7f0000000300)={0x0, 0x1443, 0x8, 0xfffffffe, 0xc}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2, 0x80805, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x8000000000000001, 0x7d, 0x0, 0x800, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffffffffffffeff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 880.080606ms ago: executing program 3 (id=1476): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0) rt_sigprocmask(0x1, &(0x7f0000000180)={[0xfffffc00]}, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000040)={r0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x6) setsockopt$sock_int(r3, 0x1, 0x800000000f, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x28) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x4, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x1, 0x6000, 0x1, 0x80800}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c000009903e80346986a93723594e0fbad6b6796346c376701cdafb9d1900190000c8010000000008001e00ff07000008001e00ff7f000008000500fd00010208000b000c000040"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000280)="28806528ef3cc486483fdec2240926cbf7a17fc309d7b9bc74e61df1d7eb5c586991cef467fa6d1d46d7e341dc3bcc6f68781028af951e3d02ed0244e6d0571a1162393920cec9a28ffc8ced12cf0796e2e59790d97686fa7d9484bbe044875c5681e7d50a09f1c1e9933d2e4aa4227b909f58cbd4c9c1b82297b6d7d528f7488a717ba697c12a487fd6149b96acc5a569a9feb9276b25c02bcbce32921e1b7cb88517bbfc204a13033c540c092813db28a77e1d64315d4c27d7d4a775d405b65b83ae3fa5daf260d24b36e1f4981086c4e126bd932d74a0a32baa74d2a1002db0d671bb2bc2c0139156645f786e41403479364444e7d545c4c1", 0xfa}, {&(0x7f0000000380)="f1f2d360ce37f9a0f7dcd220afcbb8c331cf9622e97d59cb82aa935c1f1c9afcea49c6a97fb4811f9d835b9f7fe1959566c738f4f525c0b25c4040af7ad8227194f61eda25c48a03d912eb390e550dae66a1ceb2701e84b7b4374a868d4bb83722c0076cbc7b39363961674348534ae8a50e7a4bfe3c0c9918498e101e2517d8074a75d5397e2661a7718e57cab533b4d493be914cc631d9d5d80b6eecfa9142aed0a5cd2dacff51611478641590da37b8b6ac9e281c63b2fa463193e5a57b9b0403e222bf384a", 0xc7}, {&(0x7f0000000480)="5f27a1b5613061870ec9f33f632219c482bc1d297f97815620e610ed822cf4210757ab3657883a09730156431ffdc8bc8784b5de40a19206d3f9edecde8dd54d5edf8cb61b17d181f549e939f0c67745cc7faf61e6ca596f3b91d553f534b52ce091d0bffc91d4d9ff71af1ebb886babae7a4d", 0x73}], 0x3) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r6, 0x0) 494.619676ms ago: executing program 1 (id=1477): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_init() socket$nl_generic(0x10, 0x3, 0x10) close(0x3) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0x7fffffff, 0x1], [{0x0, 0xffffffff, 0x0, 0x1}, {0x2, 0x35}, {0xfff, 0x100000c}, {0xffffffff}, {0x0, 0x4}, {0x3, 0x200}, {0x0, 0xfffffffd}, {0xfffffff8, 0x2010000}, {0x0, 0x82}, {0x1010000, 0x6}, {0x1, 0xffffffff}, {0x3, 0x8}], 0xc}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 358.409376ms ago: executing program 1 (id=1478): mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769666900"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001200add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) 104.37157ms ago: executing program 1 (id=1479): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800000000000000"], 0x44}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0xc, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r4, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x68346000) r6 = socket(0x11, 0x80a, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x40, 0x1040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x4}]}}}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@multicast, @remote, @void, {@arp={0x806, @generic={0x310, 0x16, 0x6, 0x0, 0x2, @random="ebfbd40c349a", "", @remote, "de214edbe9bd05ed"}}}}, 0x0) 0s ago: executing program 2 (id=1480): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_emit_ethernet(0x46, &(0x7f00000004c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast, {[@timestamp_addr={0x44, 0x14, 0x9, 0x1, 0x0, [{@broadcast}, {@private=0xa010102}]}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x1, r2, 0xf4}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x18000000000002a0, 0xfd3c, 0x26, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x2b, 0xa, 0x40) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) recvmmsg(r10, &(0x7f0000007a80)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000007bc0)=""/4087, 0xff7}], 0x2}, 0xfff}], 0x1, 0x10022, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="340000001100050000000001feffffff07000000", @ANYRES32=r2, @ANYBLOB="402000000000000014001a80100004800c000a80"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) kernel console output (not intermixed with test programs): ystem permissive=1 [ 287.574910][ T5343] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 287.925336][ T5343] usb 2-1: Using ep0 maxpacket: 32 [ 288.026131][ T5343] usb 2-1: config 247 has an invalid interface number: 221 but max is 0 [ 288.502357][ T5343] usb 2-1: config 247 has no interface number 0 [ 288.512210][ T5343] usb 2-1: config 247 interface 221 has no altsetting 0 [ 288.523123][ T5343] usb 2-1: New USB device found, idVendor=05af, idProduct=0223, bcdDevice=70.55 [ 288.532591][ T5343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.549651][ T5343] usb 2-1: Product: syz [ 288.556000][ T5343] usb 2-1: Manufacturer: syz [ 288.561103][ T5343] usb 2-1: SerialNumber: syz [ 288.603855][ T5343] usbhid 2-1:247.221: couldn't find an input interrupt endpoint [ 289.039334][ T187] usb 2-1: USB disconnect, device number 18 [ 289.073582][ T8657] FAULT_INJECTION: forcing a failure. [ 289.073582][ T8657] name failslab, interval 1, probability 0, space 0, times 0 [ 289.208633][ T8658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8658 comm=syz.0.821 [ 289.251428][ T8657] CPU: 1 UID: 0 PID: 8657 Comm: syz.2.822 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.251458][ T8657] Tainted: [L]=SOFTLOCKUP [ 289.251465][ T8657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 289.251477][ T8657] Call Trace: [ 289.251483][ T8657] [ 289.251490][ T8657] dump_stack_lvl+0x100/0x190 [ 289.251518][ T8657] should_fail_ex.cold+0x5/0xa [ 289.251541][ T8657] should_failslab+0xc2/0x120 [ 289.251565][ T8657] __kmalloc_noprof+0xfc/0x820 [ 289.251586][ T8657] ? __pfx_dynamic_dname+0x10/0x10 [ 289.251612][ T8657] ? tomoyo_encode2+0xfb/0x3c0 [ 289.251635][ T8657] tomoyo_encode2+0xfb/0x3c0 [ 289.251662][ T8657] tomoyo_encode+0x29/0x50 [ 289.251679][ T8657] tomoyo_realpath_from_path+0x18c/0x690 [ 289.251703][ T8657] tomoyo_path_number_perm+0x23c/0x580 [ 289.251728][ T8657] ? tomoyo_path_number_perm+0x22e/0x580 [ 289.251754][ T8657] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 289.251805][ T8657] ? find_held_lock+0x2b/0x80 [ 289.251822][ T8657] ? __fget_files+0x215/0x3d0 [ 289.251839][ T8657] ? hook_file_ioctl_common+0x140/0x440 [ 289.251859][ T8657] ? __fget_files+0x215/0x3d0 [ 289.251881][ T8657] ? __fget_files+0x21f/0x3d0 [ 289.251903][ T8657] security_file_ioctl+0xd3/0x230 [ 289.251932][ T8657] __x64_sys_ioctl+0xb7/0x210 [ 289.251960][ T8657] do_syscall_64+0x115/0x870 [ 289.251981][ T8657] ? clear_bhb_loop+0x40/0x90 [ 289.252004][ T8657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.252022][ T8657] RIP: 0033:0x7f690119e0d9 [ 289.252037][ T8657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.252053][ T8657] RSP: 002b:00007f6902038028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 289.252072][ T8657] RAX: ffffffffffffffda RBX: 00007f6901425fa0 RCX: 00007f690119e0d9 [ 289.252083][ T8657] RDX: 0000200000000100 RSI: 0000000000008946 RDI: 0000000000000004 [ 289.252094][ T8657] RBP: 00007f6902038090 R08: 0000000000000000 R09: 0000000000000000 [ 289.252104][ T8657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.252115][ T8657] R13: 00007f6901426038 R14: 00007f6901425fa0 R15: 00007ffd459b66f8 [ 289.252140][ T8657] [ 289.515840][ T8657] ERROR: Out of memory at tomoyo_realpath_from_path. [ 289.606510][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.824'. [ 290.547164][ T8674] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.460560][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.831'. [ 292.243155][ T8694] libceph: resolve ' [ 292.243155][ T8694] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 292.243155][ T8694] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 292.375420][ T5715] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 292.416732][ T30] audit: type=1400 audit(1785949491.958:3109): avc: denied { ioctl } for pid=8693 comm="syz.2.833" path="socket:[20401]" dev="sockfs" ino=20401 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 292.417354][ T8694] netlink: 71 bytes leftover after parsing attributes in process `syz.2.833'. [ 292.525214][ T5715] usb 2-1: Using ep0 maxpacket: 32 [ 292.537378][ T5715] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 292.546749][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.558284][ T5715] usb 2-1: Product: syz [ 292.569790][ T5715] usb 2-1: Manufacturer: syz [ 292.577858][ T5715] usb 2-1: SerialNumber: syz [ 292.728704][ T8702] ieee802154 phy0 wpan0: encryption failed: -22 [ 293.547318][ T5715] usb 2-1: config 0 descriptor?? [ 293.803182][ T5715] airspy 2-1:0.0: usb_control_msg() failed -71 request 09 [ 293.837557][ T5715] airspy 2-1:0.0: Could not detect board [ 293.857590][ T5715] airspy 2-1:0.0: probe with driver airspy failed with error -71 [ 293.881696][ T5715] usb 2-1: USB disconnect, device number 19 [ 294.014460][ T8717] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 294.608628][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.835'. [ 294.657320][ T8722] FAULT_INJECTION: forcing a failure. [ 294.657320][ T8722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.670892][ T8722] CPU: 0 UID: 0 PID: 8722 Comm: syz.2.838 Tainted: G L syzkaller #0 PREEMPT(full) [ 294.670922][ T8722] Tainted: [L]=SOFTLOCKUP [ 294.670928][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 294.670939][ T8722] Call Trace: [ 294.670945][ T8722] [ 294.670952][ T8722] dump_stack_lvl+0x100/0x190 [ 294.670978][ T8722] should_fail_ex.cold+0x5/0xa [ 294.671001][ T8722] _copy_from_iter+0x1f4/0x1690 [ 294.671030][ T8722] ? __asan_memset+0x23/0x50 [ 294.671050][ T8722] ? __pfx__copy_from_iter+0x10/0x10 [ 294.671075][ T8722] ? __pfx___alloc_skb+0x10/0x10 [ 294.671107][ T8722] netlink_sendmsg+0x808/0xda0 [ 294.671131][ T8722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.671153][ T8722] ? selinux_socket_sendmsg+0x198/0x2f0 [ 294.671185][ T8722] ____sys_sendmsg+0xa4d/0xbe0 [ 294.671212][ T8722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.671233][ T8722] ? __pfx_____sys_sendmsg+0x10/0x10 [ 294.671272][ T8722] ___sys_sendmsg+0x190/0x1e0 [ 294.671292][ T8722] ? __pfx____sys_sendmsg+0x10/0x10 [ 294.671309][ T8722] ? __lock_acquire+0x49f/0x1a40 [ 294.671332][ T8722] ? get_pid_task+0x106/0x250 [ 294.671376][ T8722] __sys_sendmsg+0x160/0x210 [ 294.671399][ T8722] ? __pfx___sys_sendmsg+0x10/0x10 [ 294.671436][ T8722] do_syscall_64+0x115/0x870 [ 294.671463][ T8722] ? clear_bhb_loop+0x40/0x90 [ 294.671485][ T8722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.671503][ T8722] RIP: 0033:0x7f690119e0d9 [ 294.671518][ T8722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.671536][ T8722] RSP: 002b:00007f6902038028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.671555][ T8722] RAX: ffffffffffffffda RBX: 00007f6901425fa0 RCX: 00007f690119e0d9 [ 294.671567][ T8722] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 294.671577][ T8722] RBP: 00007f6902038090 R08: 0000000000000000 R09: 0000000000000000 [ 294.671587][ T8722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.671597][ T8722] R13: 00007f6901426038 R14: 00007f6901425fa0 R15: 00007ffd459b66f8 [ 294.671622][ T8722] [ 294.890388][ T5715] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 295.095198][ T5715] usb 5-1: Using ep0 maxpacket: 32 [ 295.139451][ T5715] usb 5-1: config 164 has an invalid descriptor of length 0, skipping remainder of the config [ 295.238779][ T5715] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 295.261825][ T5722] libceph: connect (1)[c::]:6789 error -101 [ 295.284870][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.320546][ T5722] libceph: mon0 (1)[c::]:6789 connect error [ 295.328926][ T5715] usb 5-1: Product: syz [ 295.341757][ T5715] usb 5-1: Manufacturer: syz [ 295.351677][ T8724] ceph: No mds server is up or the cluster is laggy [ 295.359649][ T5722] libceph: connect (1)[c::]:6789 error -101 [ 295.368976][ T5715] usb 5-1: SerialNumber: syz [ 295.386645][ T5722] libceph: mon0 (1)[c::]:6789 connect error [ 295.491071][ T8741] ieee802154 phy0 wpan0: encryption failed: -22 [ 295.671515][ T10] libceph: connect (1)[c::]:6789 error -101 [ 295.682829][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 295.985002][ T8740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.842'. [ 296.287500][ T5707] libceph: connect (1)[c::]:6789 error -97 [ 296.308909][ T5707] libceph: mon0 (1)[c::]:6789 connect error [ 296.383282][ T8749] ceph: No mds server is up or the cluster is laggy [ 297.229277][ T8763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.848'. [ 297.296938][ T5715] usb 5-1: USB disconnect, device number 18 [ 297.417759][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.847'. [ 297.650918][ T30] audit: type=1400 audit(1785949497.188:3110): avc: denied { sqpoll } for pid=8781 comm="syz.4.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 297.718236][ T8789] netlink: 'syz.2.854': attribute type 28 has an invalid length. [ 297.805122][ T8793] orangefs_devreq_write_iter: failed to copy head. [ 298.279567][ T8816] netlink: 'syz.2.861': attribute type 2 has an invalid length. [ 299.122280][ T30] audit: type=1400 audit(1785949498.658:3111): avc: denied { mount } for pid=8823 comm="syz.0.864" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 299.328080][ T8828] netlink: 'syz.0.867': attribute type 28 has an invalid length. [ 300.347066][ T8842] orangefs_devreq_write_iter: failed to copy head. [ 300.372114][ T30] audit: type=1400 audit(1785949499.908:3112): avc: denied { read write } for pid=8848 comm="syz.1.874" name="sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 300.445216][ T30] audit: type=1400 audit(1785949499.908:3113): avc: denied { open } for pid=8848 comm="syz.1.874" path="/dev/sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 300.495568][ T30] audit: type=1400 audit(1785949499.938:3114): avc: denied { ioctl } for pid=8848 comm="syz.1.874" path="/dev/sg0" dev="devtmpfs" ino=718 ioctlcmd=0x2283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 300.730439][ T8853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.872'. [ 302.139168][ T8884] netlink: 'syz.4.882': attribute type 10 has an invalid length. [ 302.232121][ T8884] syz_tun: entered promiscuous mode [ 302.404440][ T8884] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 302.480729][ T8878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.879'. [ 303.346332][ T8895] fuse: fd is not a fuse device [ 303.361054][ T12] bond0: (slave bond_slave_0): interface is now down [ 303.396242][ T12] bond0: (slave bond_slave_1): interface is now down [ 303.437738][ T12] bond0: (slave syz_tun): interface is now down [ 303.489061][ T12] bond0: now running without any active interface! [ 303.822088][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'. [ 303.873391][ T8902] netlink: 'syz.0.887': attribute type 2 has an invalid length. [ 303.881681][ T8898] orangefs_devreq_write_iter: failed to copy head. [ 303.931176][ T8901] netlink: 'syz.1.888': attribute type 3 has an invalid length. [ 303.954513][ T8901] netlink: 244 bytes leftover after parsing attributes in process `syz.1.888'. [ 304.204471][ T8914] netlink: 'syz.4.892': attribute type 3 has an invalid length. [ 304.221685][ T8914] netlink: 244 bytes leftover after parsing attributes in process `syz.4.892'. [ 304.501697][ T8920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.893'. [ 304.532548][ T8925] 9p: Bad value for 'rfdno' [ 304.687411][ T8929] No source specified [ 304.839755][ T30] audit: type=1400 audit(1785949504.378:3115): avc: denied { getopt } for pid=8932 comm="syz.1.899" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 304.920791][ T187] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 305.012397][ T8935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.900'. [ 305.296667][ T187] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.326871][ T187] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.343010][ T187] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 305.365175][ T187] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 305.378710][ T187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.415969][ T187] usb 4-1: config 0 descriptor?? [ 305.429229][ T8942] FAULT_INJECTION: forcing a failure. [ 305.429229][ T8942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.443440][ T8942] CPU: 1 UID: 0 PID: 8942 Comm: syz.2.902 Tainted: G L syzkaller #0 PREEMPT(full) [ 305.443470][ T8942] Tainted: [L]=SOFTLOCKUP [ 305.443476][ T8942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 305.443485][ T8942] Call Trace: [ 305.443491][ T8942] [ 305.443499][ T8942] dump_stack_lvl+0x100/0x190 [ 305.443525][ T8942] should_fail_ex.cold+0x5/0xa [ 305.443547][ T8942] _copy_from_user+0x2e/0xd0 [ 305.443571][ T8942] copy_msghdr_from_user+0x9f/0x4c0 [ 305.443589][ T8942] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 305.443617][ T8942] ___sys_sendmsg+0x106/0x1e0 [ 305.443637][ T8942] ? __pfx____sys_sendmsg+0x10/0x10 [ 305.443653][ T8942] ? __lock_acquire+0x49f/0x1a40 [ 305.443674][ T8942] ? get_pid_task+0x106/0x250 [ 305.443716][ T8942] __sys_sendmsg+0x160/0x210 [ 305.443740][ T8942] ? __pfx___sys_sendmsg+0x10/0x10 [ 305.443779][ T8942] do_syscall_64+0x115/0x870 [ 305.443801][ T8942] ? clear_bhb_loop+0x40/0x90 [ 305.443823][ T8942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.443841][ T8942] RIP: 0033:0x7f690119e0d9 [ 305.443856][ T8942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.443873][ T8942] RSP: 002b:00007f6902038028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.443891][ T8942] RAX: ffffffffffffffda RBX: 00007f6901425fa0 RCX: 00007f690119e0d9 [ 305.443902][ T8942] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 305.443912][ T8942] RBP: 00007f6902038090 R08: 0000000000000000 R09: 0000000000000000 [ 305.443921][ T8942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.443930][ T8942] R13: 00007f6901426038 R14: 00007f6901425fa0 R15: 00007ffd459b66f8 [ 305.443954][ T8942] [ 305.982711][ T30] audit: type=1400 audit(1785949505.518:3116): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 306.580838][ T187] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 306.614982][ T8948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=254 sclass=netlink_route_socket pid=8948 comm=syz.0.904 [ 306.638570][ T5750] usb 4-1: USB disconnect, device number 14 [ 307.077925][ T30] audit: type=1400 audit(1785949506.608:3117): avc: denied { view } for pid=8947 comm="syz.0.904" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 307.129516][ T8957] fido_id[8957]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 307.425015][ T5343] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 307.514893][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 307.574889][ T187] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 307.595035][ T5343] usb 5-1: Using ep0 maxpacket: 32 [ 307.609241][ T5343] usb 5-1: config 247 has an invalid interface number: 221 but max is 0 [ 307.643960][ T5343] usb 5-1: config 247 has no interface number 0 [ 307.664900][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 307.669990][ T5343] usb 5-1: config 247 interface 221 has no altsetting 0 [ 307.682693][ T10] usb 3-1: config 247 has an invalid interface number: 221 but max is 0 [ 307.711724][ T10] usb 3-1: config 247 has no interface number 0 [ 307.714901][ T5343] usb 5-1: New USB device found, idVendor=05af, idProduct=0223, bcdDevice=70.55 [ 307.732870][ T187] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 307.734851][ T5343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.748226][ T10] usb 3-1: config 247 interface 221 has no altsetting 0 [ 307.768149][ T8983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.911'. [ 307.784890][ T5343] usb 5-1: Product: syz [ 307.785008][ T187] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 307.789365][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.910'. [ 307.809490][ T5343] usb 5-1: Manufacturer: syz [ 307.814368][ T187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.816070][ T5343] usb 5-1: SerialNumber: syz [ 307.835265][ T10] usb 3-1: New USB device found, idVendor=05af, idProduct=0223, bcdDevice=70.55 [ 307.844778][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.866587][ T5343] usbhid 5-1:247.221: couldn't find an input interrupt endpoint [ 307.871556][ T10] usb 3-1: Product: syz [ 307.890214][ T10] usb 3-1: Manufacturer: syz [ 307.906193][ T10] usb 3-1: SerialNumber: syz [ 307.930962][ T10] usbhid 3-1:247.221: couldn't find an input interrupt endpoint [ 308.079631][ T30] audit: type=1400 audit(1785949507.618:3118): avc: denied { create } for pid=8971 comm="syz.1.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 308.149818][ T30] audit: type=1400 audit(1785949507.648:3119): avc: denied { connect } for pid=8971 comm="syz.1.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 308.185565][ T5343] usb 5-1: USB disconnect, device number 19 [ 308.254680][ T30] audit: type=1400 audit(1785949507.658:3120): avc: denied { getopt } for pid=8971 comm="syz.1.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 308.340791][ T5707] usb 3-1: USB disconnect, device number 6 [ 310.360780][ T187] usb 2-1: USB disconnect, device number 20 [ 310.507591][ T9018] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.839846][ T9021] netlink: 'syz.2.923': attribute type 10 has an invalid length. [ 311.122624][ T9021] syz_tun: entered promiscuous mode [ 311.374025][ T9021] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 311.519365][ T30] audit: type=1400 audit(1785949511.058:3121): avc: denied { write } for pid=9030 comm="syz.0.927" path="socket:[22559]" dev="sockfs" ino=22559 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 311.593497][ T9031] fuse: fd is not a fuse device [ 311.830909][ T9034] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 312.055013][ T9035] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 312.312403][ T9041] ieee802154 phy0 wpan0: encryption failed: -22 [ 313.058656][ T57] bond0: (slave bond_slave_0): interface is now down [ 313.145492][ T57] bond0: (slave bond_slave_1): interface is now down [ 313.201270][ T57] bond0: (slave syz_tun): interface is now down [ 313.330493][ T57] bond0: now running without any active interface! [ 313.422800][ T9053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.934'. [ 313.706309][ T187] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 313.888796][ T187] usb 3-1: Using ep0 maxpacket: 16 [ 313.896688][ T187] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.907058][ T9065] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 314.009689][ T187] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 314.052756][ T187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.086727][ T9071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.940'. [ 314.091904][ T187] usb 3-1: config 0 descriptor?? [ 314.577976][ T9086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.949'. [ 315.260140][ T30] audit: type=1400 audit(1785949514.798:3122): avc: denied { read write } for pid=9101 comm="syz.1.951" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 315.309827][ T30] audit: type=1400 audit(1785949514.798:3123): avc: denied { open } for pid=9101 comm="syz.1.951" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 315.354581][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.946'. [ 315.374586][ T5707] logitech-hidpp-device 0005:046D:B012.000A: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 315.393688][ T9097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.947'. [ 315.420095][ T9100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.950'. [ 315.456584][ T9105] fido_id[9105]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 315.798286][ T9114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9114 comm=syz.1.952 [ 316.339456][ T30] audit: type=1400 audit(1785949515.878:3124): avc: denied { append } for pid=9128 comm="syz.4.960" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 316.382039][ T30] audit: type=1400 audit(1785949515.898:3125): avc: denied { ioctl } for pid=9128 comm="syz.4.960" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 316.513536][ T5707] usb 3-1: USB disconnect, device number 7 [ 316.849125][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.947687][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.998638][ T9132] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 317.016974][ T9132] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 317.036242][ T9132] cramfs: wrong magic [ 317.278848][ T9136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.961'. [ 317.654737][ T30] audit: type=1400 audit(1785949516.888:3126): avc: denied { append } for pid=9135 comm="syz.2.962" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 318.083302][ T30] audit: type=1400 audit(1785949517.618:3127): avc: denied { create } for pid=9143 comm="syz.3.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 318.117421][ T9144] FAULT_INJECTION: forcing a failure. [ 318.117421][ T9144] name failslab, interval 1, probability 0, space 0, times 0 [ 318.169496][ T9144] CPU: 0 UID: 0 PID: 9144 Comm: syz.3.963 Tainted: G L syzkaller #0 PREEMPT(full) [ 318.169528][ T9144] Tainted: [L]=SOFTLOCKUP [ 318.169534][ T9144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 318.169545][ T9144] Call Trace: [ 318.169551][ T9144] [ 318.169559][ T9144] dump_stack_lvl+0x100/0x190 [ 318.169587][ T9144] should_fail_ex.cold+0x5/0xa [ 318.169611][ T9144] should_failslab+0xc2/0x120 [ 318.169632][ T9144] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 318.169656][ T9144] ? sidtab_sid2str_get+0x17a/0x670 [ 318.169682][ T9144] kmemdup_noprof+0x29/0x60 [ 318.169702][ T9144] sidtab_sid2str_get+0x17a/0x670 [ 318.169724][ T9144] security_sid_to_context_core+0x35a/0x6d0 [ 318.169753][ T9144] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 318.169777][ T9144] avc_audit_post_callback+0x109/0x910 [ 318.169800][ T9144] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 318.169821][ T9144] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 318.169841][ T9144] ? skb_put+0x138/0x180 [ 318.169873][ T9144] ? audit_log_n_string+0x2a3/0x5a0 [ 318.169899][ T9144] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 318.169917][ T9144] common_lsm_audit+0x23f/0x2b0 [ 318.169934][ T9144] ? __pfx_common_lsm_audit+0x10/0x10 [ 318.169952][ T9144] ? lockdep_hardirqs_on+0x78/0x100 [ 318.169975][ T9144] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 318.169999][ T9144] slow_avc_audit+0x186/0x210 [ 318.170020][ T9144] ? __pfx_slow_avc_audit+0x10/0x10 [ 318.170044][ T9144] ? avc_denied+0x14a/0x190 [ 318.170066][ T9144] ? avc_has_perm_noaudit+0x2fc/0x3b0 [ 318.170091][ T9144] avc_has_perm+0x1a6/0x1e0 [ 318.170114][ T9144] ? __pfx_avc_has_perm+0x10/0x10 [ 318.170144][ T9144] sock_has_perm+0x253/0x2f0 [ 318.170167][ T9144] ? __pfx_sock_has_perm+0x10/0x10 [ 318.170199][ T9144] ? get_pid_task+0xfc/0x250 [ 318.170215][ T9144] ? get_pid_task+0xfc/0x250 [ 318.170236][ T9144] security_socket_getsockopt+0x9b/0x230 [ 318.170263][ T9144] do_sock_getsockopt+0x1e3/0x6e0 [ 318.170289][ T9144] ? __lock_acquire+0x49f/0x1a40 [ 318.170315][ T9144] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 318.170342][ T9144] ? rcu_read_lock_any_held+0x6a/0xa0 [ 318.170366][ T9144] ? find_held_lock+0x2b/0x80 [ 318.170389][ T9144] ? __fget_files+0x21f/0x3d0 [ 318.170414][ T9144] __sys_getsockopt+0x148/0x260 [ 318.170450][ T9144] ? __x64_sys_getsockopt+0xbd/0x160 [ 318.170472][ T9144] __x64_sys_getsockopt+0xbd/0x160 [ 318.170491][ T9144] ? do_syscall_64+0x90/0x870 [ 318.170511][ T9144] ? lockdep_hardirqs_on+0x78/0x100 [ 318.170533][ T9144] do_syscall_64+0x115/0x870 [ 318.170554][ T9144] ? clear_bhb_loop+0x40/0x90 [ 318.170577][ T9144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.170596][ T9144] RIP: 0033:0x7fc96939e0d9 [ 318.170612][ T9144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.170629][ T9144] RSP: 002b:00007fc96a2fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 318.170647][ T9144] RAX: ffffffffffffffda RBX: 00007fc969625fa0 RCX: 00007fc96939e0d9 [ 318.170658][ T9144] RDX: 000000000000001b RSI: 000000000000011d RDI: 0000000000000003 [ 318.170669][ T9144] RBP: 00007fc96a2fb090 R08: 00002000000021c0 R09: 0000000000000000 [ 318.170680][ T9144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.170689][ T9144] R13: 00007fc969626038 R14: 00007fc969625fa0 R15: 00007ffee3310828 [ 318.170715][ T9144] [ 318.172178][ T30] audit: type=1400 audit(1785949517.658:3128): avc: denied { getopt } for pid=9143 comm="syz.3.963" ssid=148 tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 319.316788][ T9165] 0x000000000007-0x000000020000 : "" [ 319.366420][ T9165] ftl_cs: FTL header corrupt! [ 319.400938][ T9166] FAULT_INJECTION: forcing a failure. [ 319.400938][ T9166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.414272][ T9166] CPU: 0 UID: 0 PID: 9166 Comm: syz.1.971 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.414302][ T9166] Tainted: [L]=SOFTLOCKUP [ 319.414308][ T9166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 319.414319][ T9166] Call Trace: [ 319.414325][ T9166] [ 319.414332][ T9166] dump_stack_lvl+0x100/0x190 [ 319.414361][ T9166] should_fail_ex.cold+0x5/0xa [ 319.414385][ T9166] _copy_from_user+0x2e/0xd0 [ 319.414412][ T9166] copy_msghdr_from_user+0x9f/0x4c0 [ 319.414433][ T9166] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 319.414451][ T9166] ? do_raw_spin_unlock+0x145/0x1e0 [ 319.414482][ T9166] ? rcu_is_watching+0x12/0xc0 [ 319.414509][ T9166] ? trace_hrtimer_start+0x77/0x220 [ 319.414539][ T9166] ___sys_sendmsg+0x106/0x1e0 [ 319.414559][ T9166] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.414575][ T9166] ? __lock_acquire+0x49f/0x1a40 [ 319.414596][ T9166] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 319.414650][ T9166] __sys_sendmsg+0x160/0x210 [ 319.414674][ T9166] ? __pfx___sys_sendmsg+0x10/0x10 [ 319.414704][ T9166] ? trace_hardirqs_off+0x70/0x170 [ 319.414733][ T9166] do_syscall_64+0x115/0x870 [ 319.414755][ T9166] ? clear_bhb_loop+0x40/0x90 [ 319.414778][ T9166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.414797][ T9166] RIP: 0033:0x7fe24179e0d9 [ 319.414812][ T9166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.414827][ T9166] RSP: 002b:00007fe242696028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.414843][ T9166] RAX: ffffffffffffffda RBX: 00007fe241a26180 RCX: 00007fe24179e0d9 [ 319.414855][ T9166] RDX: 00000000200080c4 RSI: 0000200000000100 RDI: 000000000000000a [ 319.414865][ T9166] RBP: 00007fe242696090 R08: 0000000000000000 R09: 0000000000000000 [ 319.414875][ T9166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.414884][ T9166] R13: 00007fe241a26218 R14: 00007fe241a26180 R15: 00007ffe3be2bce8 [ 319.414905][ T9166] [ 319.901621][ T9172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9172 comm=syz.0.972 [ 320.217875][ T9175] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.404304][ T9187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.976'. [ 322.147586][ T9208] syz_tun: left promiscuous mode [ 322.706950][ T9213] fuse: Bad value for 'fd' [ 323.079529][ T9219] x_tables: duplicate underflow at hook 1 [ 323.126167][ T30] audit: type=1400 audit(1785949522.658:3129): avc: denied { setopt } for pid=9218 comm="syz.3.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 323.589669][ T9226] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.914588][ T9131] Set syz1 is full, maxelem 65536 reached [ 325.698436][ T30] audit: type=1400 audit(1785949525.238:3130): avc: denied { map } for pid=9235 comm="syz.4.991" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 325.735019][ T30] audit: type=1400 audit(1785949525.268:3131): avc: denied { setopt } for pid=9235 comm="syz.4.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 325.755397][ T30] audit: type=1400 audit(1785949525.278:3132): avc: denied { connect } for pid=9235 comm="syz.4.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 325.787861][ T9236] binder_alloc: binder_alloc_mmap_handler: 9235 200000ffe000-200001000000 already mapped failed -16 [ 326.116569][ T9244] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.036957][ T5707] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 327.175224][ T5707] usb 4-1: device descriptor read/64, error -71 [ 327.464904][ T5707] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 327.473631][ T9261] ieee802154 phy0 wpan0: encryption failed: -22 [ 328.244237][ T9264] netlink: 'syz.4.1001': attribute type 28 has an invalid length. [ 328.325048][ T5707] usb 4-1: device descriptor read/64, error -71 [ 328.446160][ T5707] usb usb4-port1: attempt power cycle [ 328.531922][ T9274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1004'. [ 328.835143][ T5707] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 329.210122][ T5707] usb 4-1: device descriptor read/8, error -71 [ 329.929687][ T30] audit: type=1400 audit(1785949528.938:3133): avc: denied { getopt } for pid=9277 comm="syz.2.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 329.968911][ T30] audit: type=1400 audit(1785949529.458:3134): avc: denied { mount } for pid=9277 comm="syz.2.1005" name="/" dev="ramfs" ino=22967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 330.074358][ T5614] Bluetooth: hci1: unexpected event for opcode 0x201c [ 330.717845][ T30] audit: type=1400 audit(1785949530.258:3135): avc: denied { setopt } for pid=9293 comm="syz.2.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 331.081028][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1011'. [ 331.523736][ T9303] netlink: 'syz.4.1012': attribute type 28 has an invalid length. [ 331.601930][ T9228] Set syz1 is full, maxelem 65536 reached [ 331.629737][ T30] audit: type=1400 audit(1785949531.168:3136): avc: denied { connect } for pid=9305 comm="syz.4.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 331.764537][ T9311] FAULT_INJECTION: forcing a failure. [ 331.764537][ T9311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.828124][ T9311] CPU: 1 UID: 0 PID: 9311 Comm: syz.2.1014 Tainted: G L syzkaller #0 PREEMPT(full) [ 331.828144][ T9311] Tainted: [L]=SOFTLOCKUP [ 331.828148][ T9311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 331.828154][ T9311] Call Trace: [ 331.828158][ T9311] [ 331.828163][ T9311] dump_stack_lvl+0x100/0x190 [ 331.828180][ T9311] should_fail_ex.cold+0x5/0xa [ 331.828195][ T9311] _copy_from_user+0x2e/0xd0 [ 331.828211][ T9311] copy_msghdr_from_user+0x9f/0x4c0 [ 331.828223][ T9311] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 331.828241][ T9311] ___sys_sendmsg+0x106/0x1e0 [ 331.828252][ T9311] ? __pfx____sys_sendmsg+0x10/0x10 [ 331.828262][ T9311] ? __lock_acquire+0x49f/0x1a40 [ 331.828276][ T9311] ? get_pid_task+0x106/0x250 [ 331.828300][ T9311] __sys_sendmsg+0x160/0x210 [ 331.828315][ T9311] ? __pfx___sys_sendmsg+0x10/0x10 [ 331.828338][ T9311] do_syscall_64+0x115/0x870 [ 331.828352][ T9311] ? clear_bhb_loop+0x40/0x90 [ 331.828365][ T9311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.828376][ T9311] RIP: 0033:0x7f690119e0d9 [ 331.828386][ T9311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.828396][ T9311] RSP: 002b:00007f6902038028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.828407][ T9311] RAX: ffffffffffffffda RBX: 00007f6901425fa0 RCX: 00007f690119e0d9 [ 331.828414][ T9311] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 331.828420][ T9311] RBP: 00007f6902038090 R08: 0000000000000000 R09: 0000000000000000 [ 331.828426][ T9311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.828432][ T9311] R13: 00007f6901426038 R14: 00007f6901425fa0 R15: 00007ffd459b66f8 [ 331.828446][ T9311] [ 332.345058][ T5750] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 332.549597][ T5750] usb 4-1: Using ep0 maxpacket: 32 [ 332.638474][ T5750] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.840809][ T5750] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 332.938521][ T5750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.030725][ T5750] usb 4-1: Product: syz [ 333.073853][ T5750] usb 4-1: Manufacturer: syz [ 333.124362][ T5750] usb 4-1: SerialNumber: syz [ 333.246421][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1020'. [ 333.326915][ T5750] usb 4-1: config 0 descriptor?? [ 333.348680][ T5750] cdc_ether 4-1:0.0: missing cdc header descriptor [ 333.368457][ T5750] usb 4-1: unsupported MDLM descriptors [ 333.698630][ T5750] usb 4-1: USB disconnect, device number 19 [ 334.436354][ T9347] netlink: 'syz.0.1025': attribute type 28 has an invalid length. [ 334.646854][ T9353] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1029'. [ 334.947861][ T9358] fuse: fd is not a fuse device [ 334.958124][ T9358] syz.0.1030 uses obsolete (PF_INET,SOCK_PACKET) [ 335.654417][ T9363] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1031'. [ 335.805216][ T9366] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1033'. [ 335.840638][ T9366] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1033'. [ 335.903526][ T9366] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1033'. [ 336.257412][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 336.459415][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 336.476071][ T10] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 336.486245][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.510119][ T10] usb 3-1: Product: syz [ 336.518568][ T10] usb 3-1: Manufacturer: syz [ 336.526294][ T10] usb 3-1: SerialNumber: syz [ 336.561206][ T10] usb 3-1: config 0 descriptor?? [ 336.587139][ T5750] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 336.765077][ T5750] usb 5-1: Using ep0 maxpacket: 32 [ 336.780738][ T5750] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 336.794639][ T10] airspy 3-1:0.0: usb_control_msg() failed -71 request 09 [ 336.812541][ T10] airspy 3-1:0.0: Could not detect board [ 336.829933][ T10] airspy 3-1:0.0: probe with driver airspy failed with error -71 [ 336.841256][ T5750] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.879843][ T5750] usb 5-1: Product: syz [ 336.892242][ T10] usb 3-1: USB disconnect, device number 8 [ 336.913697][ T5750] usb 5-1: Manufacturer: syz [ 336.929025][ T5750] usb 5-1: SerialNumber: syz [ 337.003705][ T5750] usb 5-1: config 0 descriptor?? [ 337.072933][ T30] audit: type=1400 audit(1785949536.608:3137): avc: denied { mount } for pid=9383 comm="syz.0.1039" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 337.279613][ T5750] airspy 5-1:0.0: usb_control_msg() failed -71 request 09 [ 337.313872][ T5750] airspy 5-1:0.0: Could not detect board [ 337.335450][ T5750] airspy 5-1:0.0: probe with driver airspy failed with error -71 [ 337.384748][ T5750] usb 5-1: USB disconnect, device number 20 [ 337.433131][ T9387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1040'. [ 337.649407][ T9392] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1042'. [ 339.165020][ T9415] FAULT_INJECTION: forcing a failure. [ 339.165020][ T9415] name failslab, interval 1, probability 0, space 0, times 0 [ 339.207238][ T9415] CPU: 0 UID: 0 PID: 9415 Comm: syz.1.1051 Tainted: G L syzkaller #0 PREEMPT(full) [ 339.207260][ T9415] Tainted: [L]=SOFTLOCKUP [ 339.207264][ T9415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 339.207270][ T9415] Call Trace: [ 339.207274][ T9415] [ 339.207278][ T9415] dump_stack_lvl+0x100/0x190 [ 339.207304][ T9415] should_fail_ex.cold+0x5/0xa [ 339.207319][ T9415] should_failslab+0xc2/0x120 [ 339.207334][ T9415] __kmalloc_noprof+0xfc/0x820 [ 339.207347][ T9415] ? afs_lookup_cell+0x4c1/0x1940 [ 339.207367][ T9415] afs_lookup_cell+0x4c1/0x1940 [ 339.207386][ T9415] ? __pfx_afs_lookup_cell+0x10/0x10 [ 339.207404][ T9415] ? find_held_lock+0x2b/0x80 [ 339.207413][ T9415] ? net_generic+0xea/0x2a0 [ 339.207427][ T9415] ? net_generic+0xea/0x2a0 [ 339.207444][ T9415] afs_proc_cells_write+0x2a3/0x3a0 [ 339.207463][ T9415] proc_simple_write+0x10e/0x1a0 [ 339.207484][ T9415] ? __pfx_proc_simple_write+0x10/0x10 [ 339.207506][ T9415] proc_reg_write+0x240/0x330 [ 339.207523][ T9415] vfs_write+0x2aa/0x1050 [ 339.207541][ T9415] ? __pfx_proc_reg_write+0x10/0x10 [ 339.207554][ T9415] ? __pfx_vfs_write+0x10/0x10 [ 339.207570][ T9415] ? __fget_files+0x215/0x3d0 [ 339.207584][ T9415] ? __fget_files+0x21f/0x3d0 [ 339.207599][ T9415] ksys_write+0x12a/0x250 [ 339.207608][ T9415] ? __pfx_ksys_write+0x10/0x10 [ 339.207622][ T9415] do_syscall_64+0x115/0x870 [ 339.207635][ T9415] ? clear_bhb_loop+0x40/0x90 [ 339.207648][ T9415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.207660][ T9415] RIP: 0033:0x7fe24179e0d9 [ 339.207670][ T9415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.207681][ T9415] RSP: 002b:00007fe2426d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 339.207692][ T9415] RAX: ffffffffffffffda RBX: 00007fe241a25fa0 RCX: 00007fe24179e0d9 [ 339.207698][ T9415] RDX: 000000000000000a RSI: 0000200000000040 RDI: 0000000000000003 [ 339.207705][ T9415] RBP: 00007fe2426d8090 R08: 0000000000000000 R09: 0000000000000000 [ 339.207717][ T9415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.207723][ T9415] R13: 00007fe241a26038 R14: 00007fe241a25fa0 R15: 00007ffe3be2bce8 [ 339.207737][ T9415] [ 339.469408][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1050'. [ 339.644569][ T9352] Set syz1 is full, maxelem 65536 reached [ 340.198971][ T9417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1052'. [ 340.209874][ T30] audit: type=1400 audit(1785949539.738:3138): avc: denied { cmd } for pid=9419 comm="syz.4.1053" path="socket:[23133]" dev="sockfs" ino=23133 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 340.261520][ T9425] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1053'. [ 340.408809][ T30] audit: type=1400 audit(1785949539.948:3139): avc: denied { read } for pid=9419 comm="syz.4.1053" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 340.447211][ T9431] kAFS: unparsable volume name [ 340.524266][ T30] audit: type=1400 audit(1785949539.998:3140): avc: denied { ioctl } for pid=9434 comm="syz.3.1058" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 340.633458][ T30] audit: type=1400 audit(1785949540.148:3141): avc: denied { bind } for pid=9441 comm="syz.0.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 340.778056][ T30] audit: type=1400 audit(1785949540.148:3142): avc: denied { listen } for pid=9441 comm="syz.0.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 340.856793][ T30] audit: type=1400 audit(1785949540.158:3143): avc: denied { accept } for pid=9441 comm="syz.0.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 340.930932][ T30] audit: type=1400 audit(1785949540.158:3144): avc: denied { write } for pid=9441 comm="syz.0.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 341.001432][ T30] audit: type=1400 audit(1785949540.228:3145): avc: denied { read } for pid=9441 comm="syz.0.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 341.393610][ T9446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1061'. [ 341.425215][ T30] audit: type=1400 audit(1785949540.958:3146): avc: denied { read } for pid=9448 comm="syz.1.1062" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 342.150647][ T9464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1067'. [ 342.731349][ T9475] FAULT_INJECTION: forcing a failure. [ 342.731349][ T9475] name failslab, interval 1, probability 0, space 0, times 0 [ 342.784574][ T9475] CPU: 0 UID: 0 PID: 9475 Comm: syz.3.1070 Tainted: G L syzkaller #0 PREEMPT(full) [ 342.784605][ T9475] Tainted: [L]=SOFTLOCKUP [ 342.784612][ T9475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 342.784622][ T9475] Call Trace: [ 342.784628][ T9475] [ 342.784635][ T9475] dump_stack_lvl+0x100/0x190 [ 342.784664][ T9475] should_fail_ex.cold+0x5/0xa [ 342.784687][ T9475] should_failslab+0xc2/0x120 [ 342.784711][ T9475] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 342.784739][ T9475] ? __alloc_skb+0x5b7/0x710 [ 342.784761][ T9475] ? __alloc_skb+0x140/0x710 [ 342.784787][ T9475] __alloc_skb+0x140/0x710 [ 342.784805][ T9475] ? __alloc_skb+0x5b7/0x710 [ 342.784823][ T9475] ? __pfx___alloc_skb+0x10/0x10 [ 342.784847][ T9475] netlink_alloc_large_skb+0x69/0x150 [ 342.784868][ T9475] netlink_sendmsg+0x680/0xda0 [ 342.784889][ T9475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.784907][ T9475] ? selinux_socket_sendmsg+0x198/0x2f0 [ 342.784925][ T9475] ____sys_sendmsg+0xa4d/0xbe0 [ 342.784942][ T9475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.784954][ T9475] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.784977][ T9475] ___sys_sendmsg+0x190/0x1e0 [ 342.784989][ T9475] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.784999][ T9475] ? __lock_acquire+0x49f/0x1a40 [ 342.785012][ T9475] ? get_pid_task+0x106/0x250 [ 342.785037][ T9475] __sys_sendmsg+0x160/0x210 [ 342.785052][ T9475] ? __pfx___sys_sendmsg+0x10/0x10 [ 342.785073][ T9475] do_syscall_64+0x115/0x870 [ 342.785086][ T9475] ? clear_bhb_loop+0x40/0x90 [ 342.785099][ T9475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.785110][ T9475] RIP: 0033:0x7fc96939e0d9 [ 342.785120][ T9475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.785130][ T9475] RSP: 002b:00007fc96a2fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.785142][ T9475] RAX: ffffffffffffffda RBX: 00007fc969625fa0 RCX: 00007fc96939e0d9 [ 342.785149][ T9475] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000005 [ 342.785155][ T9475] RBP: 00007fc96a2fb090 R08: 0000000000000000 R09: 0000000000000000 [ 342.785161][ T9475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.785167][ T9475] R13: 00007fc969626038 R14: 00007fc969625fa0 R15: 00007ffee3310828 [ 342.785181][ T9475] [ 343.229196][ T9468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1069'. [ 343.375673][ T5614] Bluetooth: hci3: unexpected event for opcode 0x6939 [ 343.594866][ T187] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 343.795037][ T187] usb 4-1: Using ep0 maxpacket: 16 [ 343.818513][ T187] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 343.834962][ T187] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 343.844051][ T187] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 343.854146][ T187] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 343.904936][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 343.973985][ T9490] ieee802154 phy0 wpan0: encryption failed: -22 [ 343.981947][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 343.981987][ T30] audit: type=1400 audit(1785949543.508:3153): avc: denied { append } for pid=9488 comm="syz.4.1076" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 344.294934][ T5750] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 344.491899][ T5750] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.597897][ T5750] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 344.742669][ T5750] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 344.814308][ T187] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 344.823339][ T187] usb 4-1: config 0 has no interface number 0 [ 344.831034][ T187] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 344.831874][ T5750] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 344.842571][ T187] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 344.866343][ T187] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 344.876365][ T187] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 344.890572][ T187] usb 4-1: config 0 interface 125 has no altsetting 0 [ 344.897762][ T187] usb 4-1: config 0 interface 125 has no altsetting 2 [ 344.907385][ T187] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 344.916804][ T187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.925033][ T187] usb 4-1: Product: syz [ 344.930719][ T187] usb 4-1: Manufacturer: syz [ 344.936727][ T187] usb 4-1: SerialNumber: syz [ 344.943814][ T5750] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 344.976383][ T187] usb 4-1: config 0 descriptor?? [ 344.984534][ T187] usb 4-1: selecting invalid altsetting 2 [ 345.044629][ T5750] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 345.055514][ T5750] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 345.073262][ T5750] usb 5-1: Product: syz [ 345.077786][ T5750] usb 5-1: Manufacturer: syz [ 345.084959][ T5750] usb 5-1: SerialNumber: syz [ 345.094511][ T5750] usb 5-1: config 0 descriptor?? [ 345.268703][ T9501] ieee802154 phy0 wpan0: encryption failed: -22 [ 345.795180][ T5750] radio-si470x 5-1:0.0: DeviceID=0x6f70 ChipID=0x2300 [ 345.862125][ C0] usb 4-1: async_complete: urb error -71 [ 345.867881][ C0] usb 4-1: async_complete: urb error -71 [ 345.899355][ T187] get_1284_register: usb error -71 [ 346.643022][ T187] usb 4-1: USB disconnect, device number 20 [ 346.897108][ T5750] radio-si470x 5-1:0.0: software version 111, hardware version 112 [ 347.416440][ T5750] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 347.444582][ T5750] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 347.471855][ T5750] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 347.503457][ T5750] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 347.685119][ T5722] usb 5-1: USB disconnect, device number 21 [ 348.646054][ T9520] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.272), cmd(3) [ 348.673681][ T30] audit: type=1400 audit(1785949548.208:3154): avc: denied { remount } for pid=9521 comm="syz.0.1082" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 350.191010][ T9537] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1090'. [ 350.272357][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1087'. [ 350.396326][ T5343] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 350.565217][ T5343] usb 2-1: Using ep0 maxpacket: 32 [ 350.590966][ T5343] usb 2-1: config 247 has an invalid interface number: 221 but max is 0 [ 350.623733][ T5343] usb 2-1: config 247 has no interface number 0 [ 350.642085][ T5343] usb 2-1: config 247 interface 221 has no altsetting 0 [ 350.657150][ T5343] usb 2-1: New USB device found, idVendor=05af, idProduct=0223, bcdDevice=70.55 [ 350.676279][ T5343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.714022][ T5343] usb 2-1: Product: syz [ 350.728410][ T5343] usb 2-1: Manufacturer: syz [ 350.738909][ T5343] usb 2-1: SerialNumber: syz [ 350.761926][ T5343] usbhid 2-1:247.221: couldn't find an input interrupt endpoint [ 350.813650][ T30] audit: type=1400 audit(1785949550.348:3155): avc: denied { create } for pid=9536 comm="syz.3.1090" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 350.839336][ T30] audit: type=1400 audit(1785949550.378:3156): avc: denied { write } for pid=9536 comm="syz.3.1090" name="file0" dev="tmpfs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 350.862818][ T30] audit: type=1400 audit(1785949550.378:3157): avc: denied { open } for pid=9536 comm="syz.3.1090" path="/189/file0" dev="tmpfs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 350.887609][ T30] audit: type=1400 audit(1785949550.378:3158): avc: denied { ioctl } for pid=9536 comm="syz.3.1090" path="/189/file0" dev="tmpfs" ino=1060 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 350.914015][ T9537] bond2: Removing last arp target with arp_interval on [ 350.924036][ T9537] bond2: entered promiscuous mode [ 350.929767][ T9537] bond2: entered allmulticast mode [ 350.935886][ T9537] 8021q: adding VLAN 0 to HW filter on device bond2 [ 350.973174][ T5343] usb 2-1: USB disconnect, device number 21 [ 351.017296][ T30] audit: type=1400 audit(1785949550.558:3159): avc: denied { unlink } for pid=5608 comm="syz-executor" name="file0" dev="tmpfs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 351.250766][ T9559] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.241169][ T9564] fuse: fd is not a fuse device [ 352.396474][ T9569] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.272), cmd(3) [ 352.595411][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 352.786013][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 352.977445][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 353.085843][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 353.168800][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 353.214435][ T10] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 353.252593][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.446358][ T9574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9574 comm=syz.0.1104 [ 353.481531][ T10] usb 2-1: Product: syz [ 353.488682][ T10] usb 2-1: Manufacturer: syz [ 353.494933][ T10] usb 2-1: SerialNumber: syz [ 353.498127][ T9571] netlink: 'syz.3.1102': attribute type 10 has an invalid length. [ 353.502433][ T9568] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 353.741675][ T9568] FAULT_INJECTION: forcing a failure. [ 353.741675][ T9568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.762801][ T9568] CPU: 0 UID: 0 PID: 9568 Comm: syz.1.1100 Tainted: G L syzkaller #0 PREEMPT(full) [ 353.762832][ T9568] Tainted: [L]=SOFTLOCKUP [ 353.762837][ T9568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 353.762847][ T9568] Call Trace: [ 353.762855][ T9568] [ 353.762863][ T9568] dump_stack_lvl+0x100/0x190 [ 353.762892][ T9568] should_fail_ex.cold+0x5/0xa [ 353.762913][ T9568] _copy_from_iter+0x1f4/0x1690 [ 353.762940][ T9568] ? __asan_memset+0x23/0x50 [ 353.762957][ T9568] ? __pfx__copy_from_iter+0x10/0x10 [ 353.762980][ T9568] ? __pfx___alloc_skb+0x10/0x10 [ 353.763010][ T9568] netlink_sendmsg+0x808/0xda0 [ 353.763032][ T9568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.763052][ T9568] ? selinux_socket_sendmsg+0x198/0x2f0 [ 353.763082][ T9568] ____sys_sendmsg+0xa4d/0xbe0 [ 353.763107][ T9568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.763125][ T9568] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.763160][ T9568] ___sys_sendmsg+0x190/0x1e0 [ 353.763178][ T9568] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.763192][ T9568] ? __lock_acquire+0x49f/0x1a40 [ 353.763212][ T9568] ? get_pid_task+0x106/0x250 [ 353.763249][ T9568] __sys_sendmsg+0x160/0x210 [ 353.763271][ T9568] ? __pfx___sys_sendmsg+0x10/0x10 [ 353.763302][ T9568] do_syscall_64+0x115/0x870 [ 353.763322][ T9568] ? clear_bhb_loop+0x40/0x90 [ 353.763341][ T9568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.763357][ T9568] RIP: 0033:0x7fe24179e0d9 [ 353.763383][ T9568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.763399][ T9568] RSP: 002b:00007fe2426d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.763424][ T9568] RAX: ffffffffffffffda RBX: 00007fe241a25fa0 RCX: 00007fe24179e0d9 [ 353.763434][ T9568] RDX: 0000000000008080 RSI: 0000200000000000 RDI: 0000000000000006 [ 353.763444][ T9568] RBP: 00007fe2426d8090 R08: 0000000000000000 R09: 0000000000000000 [ 353.763453][ T9568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.763462][ T9568] R13: 00007fe241a26038 R14: 00007fe241a25fa0 R15: 00007ffe3be2bce8 [ 353.763485][ T9568] [ 354.061039][ T5614] Bluetooth: hci0: command 0x0406 tx timeout [ 354.284903][ T5722] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 354.357249][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 354.390484][ T10] usb 2-1: MIDIStreaming interface descriptor not found [ 354.445804][ T5722] usb 3-1: Using ep0 maxpacket: 16 [ 354.465221][ T5722] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 354.487474][ T5722] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 354.515450][ T5722] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 354.537891][ T5722] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 354.557775][ T5722] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 354.590514][ T5722] usb 3-1: config 0 has no interface number 0 [ 354.601976][ T10] usb 2-1: USB disconnect, device number 22 [ 354.613445][ T5722] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 354.641444][ T5722] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 354.660802][ T5722] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 354.681597][ T5722] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 354.809560][ T5722] usb 3-1: config 0 interface 125 has no altsetting 0 [ 354.813201][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.819840][ T5722] usb 3-1: config 0 interface 125 has no altsetting 2 [ 354.859110][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1108'. [ 355.249582][ T30] audit: type=1400 audit(1785949554.528:3160): avc: denied { ioctl } for pid=9587 comm="syz.0.1109" path="socket:[23490]" dev="sockfs" ino=23490 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 355.584194][ T5722] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 355.596959][ T30] audit: type=1400 audit(1785949554.608:3161): avc: denied { connect } for pid=9587 comm="syz.0.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 355.626258][ T30] audit: type=1400 audit(1785949554.618:3162): avc: denied { write } for pid=9587 comm="syz.0.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 355.699517][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.764324][ T5722] usb 3-1: Product: syz [ 355.788664][ T5722] usb 3-1: Manufacturer: syz [ 355.800829][ T5722] usb 3-1: SerialNumber: syz [ 356.009942][ T30] audit: type=1400 audit(1785949555.428:3163): avc: denied { write } for pid=9602 comm="syz.3.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 356.012049][ T5722] usb 3-1: config 0 descriptor?? [ 356.048253][ T5722] usb 3-1: selecting invalid altsetting 2 [ 356.169176][ T30] audit: type=1400 audit(1785949555.708:3164): avc: denied { map } for pid=9602 comm="syz.3.1112" path="socket:[24293]" dev="sockfs" ino=24293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 356.285158][ T5616] Bluetooth: hci0: command 0x0406 tx timeout [ 356.423318][ T9611] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.272), cmd(3) [ 357.270313][ T9614] ieee802154 phy0 wpan0: encryption failed: -22 [ 357.315122][ C0] usb 3-1: async_complete: urb error -71 [ 357.320866][ C0] usb 3-1: async_complete: urb error -71 [ 357.500453][ T5722] get_1284_register: usb error -71 [ 357.829652][ T5722] usb 3-1: USB disconnect, device number 9 [ 358.084374][ T30] audit: type=1400 audit(1785949557.618:3165): avc: denied { bind } for pid=9620 comm="syz.1.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 358.348566][ T187] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 358.507398][ T187] usb 2-1: device descriptor read/64, error -71 [ 358.895025][ T187] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 359.156714][ T187] usb 2-1: device descriptor read/64, error -71 [ 359.258162][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1122'. [ 359.325870][ T187] usb usb2-port1: attempt power cycle [ 359.491401][ T9637] netlink: 'syz.3.1124': attribute type 4 has an invalid length. [ 359.665017][ T187] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 359.735747][ T187] usb 2-1: device descriptor read/8, error -71 [ 359.809085][ T9655] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.272), cmd(3) [ 360.844930][ T187] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 360.880054][ T187] usb 2-1: device descriptor read/8, error -71 [ 361.008292][ T187] usb usb2-port1: unable to enumerate USB device [ 361.523053][ T9641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1121'. [ 361.565105][ T187] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 361.574639][ T9671] FAULT_INJECTION: forcing a failure. [ 361.574639][ T9671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.613793][ T9671] CPU: 0 UID: 0 PID: 9671 Comm: syz.3.1130 Tainted: G L syzkaller #0 PREEMPT(full) [ 361.613812][ T9671] Tainted: [L]=SOFTLOCKUP [ 361.613816][ T9671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 361.613822][ T9671] Call Trace: [ 361.613826][ T9671] [ 361.613830][ T9671] dump_stack_lvl+0x100/0x190 [ 361.613848][ T9671] should_fail_ex.cold+0x5/0xa [ 361.613862][ T9671] _copy_from_user+0x2e/0xd0 [ 361.613878][ T9671] copy_msghdr_from_user+0x9f/0x4c0 [ 361.613890][ T9671] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 361.613907][ T9671] ___sys_sendmsg+0x106/0x1e0 [ 361.613919][ T9671] ? __pfx____sys_sendmsg+0x10/0x10 [ 361.613929][ T9671] ? __lock_acquire+0x49f/0x1a40 [ 361.613942][ T9671] ? get_pid_task+0x106/0x250 [ 361.613965][ T9671] __sys_sendmsg+0x160/0x210 [ 361.613981][ T9671] ? __pfx___sys_sendmsg+0x10/0x10 [ 361.614012][ T9671] do_syscall_64+0x115/0x870 [ 361.614032][ T9671] ? clear_bhb_loop+0x40/0x90 [ 361.614052][ T9671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.614069][ T9671] RIP: 0033:0x7fc96939e0d9 [ 361.614079][ T9671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.614089][ T9671] RSP: 002b:00007fc96a2fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.614100][ T9671] RAX: ffffffffffffffda RBX: 00007fc969625fa0 RCX: 00007fc96939e0d9 [ 361.614107][ T9671] RDX: 0000000024000014 RSI: 0000200000000200 RDI: 0000000000000003 [ 361.614113][ T9671] RBP: 00007fc96a2fb090 R08: 0000000000000000 R09: 0000000000000000 [ 361.614119][ T9671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.614125][ T9671] R13: 00007fc969626038 R14: 00007fc969625fa0 R15: 00007ffee3310828 [ 361.614139][ T9671] [ 361.893515][ T187] usb 5-1: Using ep0 maxpacket: 32 [ 361.925099][ T187] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 361.935143][ T187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.943326][ T187] usb 5-1: Product: syz [ 361.947920][ T187] usb 5-1: Manufacturer: syz [ 361.952500][ T187] usb 5-1: SerialNumber: syz [ 361.959409][ T187] usb 5-1: config 0 descriptor?? [ 362.170142][ T187] airspy 5-1:0.0: usb_control_msg() failed -71 request 09 [ 362.193819][ T187] airspy 5-1:0.0: Could not detect board [ 362.208172][ T187] airspy 5-1:0.0: probe with driver airspy failed with error -71 [ 362.230420][ T187] usb 5-1: USB disconnect, device number 22 [ 362.442866][ T9684] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 362.449635][ T9684] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 362.475247][ T9687] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1135'. [ 362.488423][ T9687] netlink: 'syz.2.1135': attribute type 12 has an invalid length. [ 362.504144][ T9687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1135'. [ 362.520591][ T9684] vhci_hcd vhci_hcd.0: Device attached [ 362.852929][ T187] usb 38-1: SetAddress Request (2) to port 0 [ 362.906593][ T187] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 363.177370][ T9685] vhci_hcd: connection reset by peer [ 363.392825][ T3297] vhci_hcd vhci_hcd.2: stop threads [ 363.441362][ T9693] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.272), cmd(3) [ 363.932060][ T9699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1139'. [ 363.983189][ T3297] vhci_hcd vhci_hcd.2: release socket [ 363.990047][ T3297] vhci_hcd vhci_hcd.2: disconnect device [ 364.001329][ T9698] ieee802154 phy0 wpan0: encryption failed: -22 [ 364.332894][ T9708] FAULT_INJECTION: forcing a failure. [ 364.332894][ T9708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.348750][ T9708] CPU: 0 UID: 0 PID: 9708 Comm: syz.4.1142 Tainted: G L syzkaller #0 PREEMPT(full) [ 364.348779][ T9708] Tainted: [L]=SOFTLOCKUP [ 364.348785][ T9708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 364.348794][ T9708] Call Trace: [ 364.348800][ T9708] [ 364.348807][ T9708] dump_stack_lvl+0x100/0x190 [ 364.348832][ T9708] should_fail_ex.cold+0x5/0xa [ 364.348853][ T9708] __kvm_read_guest_page+0x186/0x250 [ 364.348874][ T9708] kvm_fetch_guest_virt+0x128/0x1a0 [ 364.348896][ T9708] __do_insn_fetch_bytes+0x5e2/0x7b0 [ 364.348921][ T9708] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 364.348948][ T9708] ? emulator_get_segment+0x38d/0x440 [ 364.348968][ T9708] ? __pfx_emulator_get_segment+0x10/0x10 [ 364.348989][ T9708] x86_decode_insn+0x3ca/0x6da0 [ 364.349008][ T9708] ? __lock_acquire+0x49f/0x1a40 [ 364.349038][ T9708] ? __pfx_x86_decode_insn+0x10/0x10 [ 364.349057][ T9708] ? vmx_get_l2_tsc_offset+0x1d0/0x280 [ 364.349074][ T9708] ? init_decode_cache+0xd/0x2b0 [ 364.349090][ T9708] ? init_emulate_ctxt+0x43c/0x700 [ 364.349107][ T9708] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 364.349125][ T9708] ? vmx_get_l2_tsc_offset+0x1d0/0x280 [ 364.349143][ T9708] ? init_emulate_ctxt+0x43c/0x700 [ 364.349160][ T9708] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 364.349178][ T9708] x86_emulate_instruction+0x1052/0x1df0 [ 364.349206][ T9708] ? mmio_info_in_cache+0x17b/0x550 [ 364.349224][ T9708] kvm_mmu_page_fault+0xb9b/0x1ab0 [ 364.349255][ T9708] ? __pfx_kvm_mmu_page_fault+0x10/0x10 [ 364.349281][ T9708] ? __pfx_kvm_io_bus_write+0x10/0x10 [ 364.349319][ T9708] handle_ept_misconfig+0x11e/0x3f0 [ 364.349347][ T9708] vmx_handle_exit+0x1b1c/0x1ef0 [ 364.349378][ T9708] vcpu_run+0x35ab/0x5de0 [ 364.349415][ T9708] ? __pfx_vcpu_run+0x10/0x10 [ 364.349447][ T9708] ? complete_emulated_mmio+0x102/0x710 [ 364.349479][ T9708] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 364.349505][ T9708] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 364.349539][ T9708] kvm_vcpu_ioctl+0x730/0x1700 [ 364.349563][ T9708] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 364.349583][ T9708] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 364.349607][ T9708] ? do_vfs_ioctl+0x226/0x13e0 [ 364.349633][ T9708] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 364.349660][ T9708] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 364.349698][ T9708] ? __fget_files+0x215/0x3d0 [ 364.349722][ T9708] ? hook_file_ioctl_common+0x140/0x440 [ 364.349750][ T9708] ? selinux_file_ioctl+0x13b/0x290 [ 364.349777][ T9708] ? selinux_file_ioctl+0xb6/0x290 [ 364.349807][ T9708] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 364.349833][ T9708] __x64_sys_ioctl+0x18e/0x210 [ 364.349861][ T9708] do_syscall_64+0x115/0x870 [ 364.349883][ T9708] ? clear_bhb_loop+0x40/0x90 [ 364.349906][ T9708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.349924][ T9708] RIP: 0033:0x7f5475d9e0d9 [ 364.349940][ T9708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.349957][ T9708] RSP: 002b:00007f5476c79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 364.349975][ T9708] RAX: ffffffffffffffda RBX: 00007f5476025fa0 RCX: 00007f5475d9e0d9 [ 364.349986][ T9708] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 364.349996][ T9708] RBP: 00007f5476c79090 R08: 0000000000000000 R09: 0000000000000000 [ 364.350007][ T9708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.350018][ T9708] R13: 00007f5476026038 R14: 00007f5476025fa0 R15: 00007fff769caab8 [ 364.350042][ T9708] [ 365.052758][ T9712] netlink: 'syz.0.1144': attribute type 28 has an invalid length. [ 365.191932][ T9718] FAULT_INJECTION: forcing a failure. [ 365.191932][ T9718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.208566][ T9718] CPU: 0 UID: 0 PID: 9718 Comm: syz.1.1145 Tainted: G L syzkaller #0 PREEMPT(full) [ 365.208597][ T9718] Tainted: [L]=SOFTLOCKUP [ 365.208603][ T9718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 365.208613][ T9718] Call Trace: [ 365.208619][ T9718] [ 365.208626][ T9718] dump_stack_lvl+0x100/0x190 [ 365.208655][ T9718] should_fail_ex.cold+0x5/0xa [ 365.208677][ T9718] _copy_from_iter+0x1f4/0x1690 [ 365.208706][ T9718] ? __asan_memset+0x23/0x50 [ 365.208727][ T9718] ? __pfx__copy_from_iter+0x10/0x10 [ 365.208752][ T9718] ? __pfx___alloc_skb+0x10/0x10 [ 365.208783][ T9718] netlink_sendmsg+0x808/0xda0 [ 365.208808][ T9718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.208829][ T9718] ? selinux_socket_sendmsg+0x198/0x2f0 [ 365.208859][ T9718] ____sys_sendmsg+0xa4d/0xbe0 [ 365.208887][ T9718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.208908][ T9718] ? __pfx_____sys_sendmsg+0x10/0x10 [ 365.208946][ T9718] ___sys_sendmsg+0x190/0x1e0 [ 365.208966][ T9718] ? __pfx____sys_sendmsg+0x10/0x10 [ 365.208983][ T9718] ? __lock_acquire+0x49f/0x1a40 [ 365.209005][ T9718] ? get_pid_task+0x106/0x250 [ 365.209048][ T9718] __sys_sendmsg+0x160/0x210 [ 365.209073][ T9718] ? __pfx___sys_sendmsg+0x10/0x10 [ 365.209109][ T9718] do_syscall_64+0x115/0x870 [ 365.209132][ T9718] ? clear_bhb_loop+0x40/0x90 [ 365.209154][ T9718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.209172][ T9718] RIP: 0033:0x7fe24179e0d9 [ 365.209194][ T9718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.209211][ T9718] RSP: 002b:00007fe2426d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 365.209229][ T9718] RAX: ffffffffffffffda RBX: 00007fe241a25fa0 RCX: 00007fe24179e0d9 [ 365.209241][ T9718] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000004 [ 365.209251][ T9718] RBP: 00007fe2426d8090 R08: 0000000000000000 R09: 0000000000000000 [ 365.209261][ T9718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.209270][ T9718] R13: 00007fe241a26038 R14: 00007fe241a25fa0 R15: 00007ffe3be2bce8 [ 365.209292][ T9718] [ 366.619435][ T9740] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.272), cmd(3) [ 367.692998][ T9743] syzkaller0: entered promiscuous mode [ 367.698717][ T9743] syzkaller0: entered allmulticast mode [ 367.721588][ T9743] tipc: Enabled bearer , priority 0 [ 367.748264][ T9742] tipc: Resetting bearer [ 367.794727][ T9742] tipc: Disabling bearer [ 367.842871][ T9726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1150'. [ 368.045183][ T5707] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 368.126051][ T187] usb 38-1: device descriptor read/8, error -110 [ 368.165189][ T5750] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 368.344885][ T5707] usb 2-1: Using ep0 maxpacket: 16 [ 368.353405][ T5707] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.376708][ T5707] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.395014][ T5707] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 368.414230][ T5707] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 368.431282][ T5750] usb 4-1: Using ep0 maxpacket: 32 [ 368.437063][ T5707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.451582][ T5750] usb 4-1: config 247 has an invalid interface number: 221 but max is 0 [ 368.465265][ T5707] usb 2-1: config 0 descriptor?? [ 368.475466][ T5750] usb 4-1: config 247 has no interface number 0 [ 368.503662][ T5750] usb 4-1: config 247 interface 221 has no altsetting 0 [ 368.526915][ T5750] usb 4-1: New USB device found, idVendor=05af, idProduct=0223, bcdDevice=70.55 [ 368.537138][ T187] usb usb38-port1: attempt power cycle [ 368.539555][ T5750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.560099][ T5750] usb 4-1: Product: syz [ 368.568345][ T5750] usb 4-1: Manufacturer: syz [ 368.582354][ T5750] usb 4-1: SerialNumber: syz [ 368.609153][ T5750] usbhid 4-1:247.221: couldn't find an input interrupt endpoint [ 368.657490][ T9761] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 368.921605][ T5750] usb 4-1: USB disconnect, device number 21 [ 368.968467][ T5707] nintendo 0003:057E:2019.000B: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.1-1/input0 [ 369.038169][ T9770] xt_hashlimit: size too large, truncated to 1048576 [ 369.420317][ T187] usb usb38-port1: unable to enumerate USB device [ 369.489177][ T5707] nintendo 0003:057E:2019.000B: Failed to get joycon info; ret=-38 [ 369.527828][ T5707] nintendo 0003:057E:2019.000B: Failed to retrieve controller info; ret=-38 [ 369.647052][ T5707] nintendo 0003:057E:2019.000B: Failed to initialize controller; ret=-38 [ 369.700002][ T5707] nintendo 0003:057E:2019.000B: probe - fail = -38 [ 369.725643][ T5707] nintendo 0003:057E:2019.000B: probe with driver nintendo failed with error -38 [ 369.769754][ T5707] usb 2-1: USB disconnect, device number 27 [ 369.947139][ T9782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1163'. [ 370.419121][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1164'. [ 370.546379][ T9788] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.245671][ T9810] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9810 comm=syz.4.1170 [ 372.295466][ T5722] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 372.578143][ T5722] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.611935][ T5722] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.640841][ T5722] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 372.672323][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.713894][ T5722] usb 3-1: config 0 descriptor?? [ 372.742002][ T9817] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1173'. [ 373.754909][ T5750] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 373.881091][ T9803] netlink: 'syz.2.1169': attribute type 1 has an invalid length. [ 373.915188][ T5750] usb 5-1: Using ep0 maxpacket: 32 [ 373.928864][ T5750] usb 5-1: config 247 has an invalid interface number: 221 but max is 0 [ 373.969479][ T5750] usb 5-1: config 247 has no interface number 0 [ 373.999962][ T5750] usb 5-1: config 247 interface 221 has no altsetting 0 [ 374.011759][ T9803] bond1: entered promiscuous mode [ 374.032888][ T9833] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 374.078769][ T5750] usb 5-1: New USB device found, idVendor=05af, idProduct=0223, bcdDevice=70.55 [ 374.114441][ T5750] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.135902][ T9803] 8021q: adding VLAN 0 to HW filter on device bond1 [ 374.150702][ T5750] usb 5-1: Product: syz [ 374.167228][ T5750] usb 5-1: Manufacturer: syz [ 374.217738][ T9833] CIFS: Attempting to mount //1#7.0.0.1/Ë7Ì/Ðä…¯»—yshare [ 374.269736][ T5750] usb 5-1: SerialNumber: syz [ 374.320630][ T5750] usbhid 5-1:247.221: couldn't find an input interrupt endpoint [ 374.371480][ T9831] bond1: (slave veth3): making interface the new active one [ 374.398770][ T9831] veth3: entered promiscuous mode [ 374.421464][ T9831] bond1: (slave veth3): Enslaving as an active interface with an up link [ 374.617208][ T5707] usb 5-1: USB disconnect, device number 23 [ 375.308172][ T9845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1182'. [ 376.072269][ T9833] CIFS: VFS: Error connecting to socket. Aborting operation. [ 376.141779][ T9833] CIFS: VFS: cifs_mount failed w/return code = -4 [ 376.639033][ T5722] usbhid 3-1:0.0: can't add hid device: -71 [ 376.661057][ T5722] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 376.694934][ T5750] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 376.699502][ T5722] usb 3-1: USB disconnect, device number 10 [ 376.769553][ T9841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1181'. [ 376.875259][ T5750] usb 5-1: Using ep0 maxpacket: 16 [ 377.192206][ T5750] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 377.211716][ T5750] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 377.231346][ T5750] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 377.291901][ T5750] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 377.329805][ T5750] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 377.365585][ T5750] usb 5-1: config 0 has no interface number 0 [ 377.383391][ T5750] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 377.420912][ T5750] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 377.442536][ T5750] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 377.467475][ T5750] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 377.497406][ T5750] usb 5-1: config 0 interface 125 has no altsetting 0 [ 377.535984][ T5750] usb 5-1: config 0 interface 125 has no altsetting 2 [ 377.606272][ T5750] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 377.639925][ T5750] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.691682][ T5750] usb 5-1: Product: syz [ 377.699469][ T9878] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.723777][ T5750] usb 5-1: Manufacturer: syz [ 377.760270][ T5750] usb 5-1: SerialNumber: syz [ 377.839968][ T5750] usb 5-1: config 0 descriptor?? [ 377.918904][ T5750] usb 5-1: selecting invalid altsetting 2 [ 378.288068][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.295460][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.515043][ T5707] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 378.736659][ C1] usb 5-1: async_complete: urb error -71 [ 378.742410][ C1] usb 5-1: async_complete: urb error -71 [ 378.748202][ C1] usb 5-1: async_complete: urb error -71 [ 378.824526][ T5750] get_1284_register: usb error -71 [ 378.845138][ T5707] usb 4-1: Using ep0 maxpacket: 8 [ 378.851838][ T5750] usb 5-1: USB disconnect, device number 24 [ 378.866500][ T5707] usb 4-1: unable to get BOS descriptor or descriptor too short [ 378.882808][ T5707] usb 4-1: config 2 has an invalid interface number: 76 but max is 0 [ 378.894749][ T5707] usb 4-1: config 2 has no interface number 0 [ 378.901353][ T5707] usb 4-1: config 2 interface 76 has no altsetting 0 [ 378.912902][ T5707] usb 4-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 378.933813][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.963272][ T5707] usb 4-1: Product: syz [ 378.976112][ T5707] usb 4-1: Manufacturer: syz [ 378.990038][ T5707] usb 4-1: SerialNumber: syz [ 379.218685][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1190'. [ 379.736719][ T9906] loop6: detected capacity change from 0 to 2640 [ 379.765276][ T9906] Buffer I/O error on dev loop6, logical block 0, async page read [ 379.773736][ T9906] Buffer I/O error on dev loop6, logical block 0, async page read [ 379.782105][ T9906] Buffer I/O error on dev loop6, logical block 0, async page read [ 379.790523][ T9906] Buffer I/O error on dev loop6, logical block 0, async page read [ 379.798842][ T9906] Buffer I/O error on dev loop6, logical block 0, async page read [ 379.807896][ T9906] Buffer I/O error on dev loop6, logical block 0, async page read [ 379.816379][ T9906] Buffer I/O error on dev loop6, logical block 0, async page read [ 379.824656][ T9906] Buffer I/O error on dev loop6, logical block 0, async page read [ 379.832812][ T9906] ldm_validate_partition_table(): Disk read failed. [ 379.839727][ T9906] Buffer I/O error on dev loop6, logical block 0, async page read [ 379.848426][ T9906] Buffer I/O error on dev loop6, logical block 0, async page read [ 379.856500][ T9906] Dev loop6: unable to read RDB block 0 [ 379.863759][ T9906] loop6: unable to read partition table [ 379.872399][ T9906] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 379.935203][ T9906] audit: audit_lost=6 audit_rate_limit=0 audit_backlog_limit=64 [ 379.942982][ T9906] audit: out of memory in audit_log_start [ 381.291437][ T30] audit: type=1400 audit(1785949580.828:3166): avc: denied { mount } for pid=9902 comm="syz.4.1196" name="/" dev="rpc_pipefs" ino=25116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 381.729297][ T5707] go7007 4-1:2.76: Sensoray 2250 found [ 381.764479][ T30] audit: type=1400 audit(1785949581.298:3167): avc: denied { unmount } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 381.788715][ T5707] go7007 4-1:2.76: probe with driver go7007 failed with error -12 [ 381.867509][ T5707] usb 4-1: USB disconnect, device number 22 [ 382.544688][ T9932] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.810038][ T9930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1204'. [ 383.936969][ T9950] fuse: Bad value for 'fd' [ 384.325796][ T9956] loop5: detected capacity change from 0 to 7 [ 384.395400][ T9956] loop5: p1 < > p3 p4 [ 384.421210][ T9956] loop5: partition table partially beyond EOD, truncated [ 384.530705][ T9956] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 385.331261][ T5628] udevd[5628]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 385.343375][ T5609] udevd[5609]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 385.366252][ T5622] udevd[5622]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 385.680648][ T9978] FAULT_INJECTION: forcing a failure. [ 385.680648][ T9978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.695584][ T30] audit: type=1400 audit(1785949585.218:3168): avc: denied { create } for pid=9974 comm="syz.3.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 385.698882][ T9980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.765880][ T9978] CPU: 1 UID: 0 PID: 9978 Comm: syz.1.1216 Tainted: G L syzkaller #0 PREEMPT(full) [ 385.765910][ T9978] Tainted: [L]=SOFTLOCKUP [ 385.765916][ T9978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 385.765926][ T9978] Call Trace: [ 385.765931][ T9978] [ 385.765937][ T9978] dump_stack_lvl+0x100/0x190 [ 385.765964][ T9978] should_fail_ex.cold+0x5/0xa [ 385.765986][ T9978] _copy_from_iter+0x1f4/0x1690 [ 385.766014][ T9978] ? __asan_memset+0x23/0x50 [ 385.766032][ T9978] ? __pfx__copy_from_iter+0x10/0x10 [ 385.766057][ T9978] ? __pfx___alloc_skb+0x10/0x10 [ 385.766088][ T9978] netlink_sendmsg+0x808/0xda0 [ 385.766112][ T9978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.766133][ T9978] ? selinux_socket_sendmsg+0x198/0x2f0 [ 385.766162][ T9978] ____sys_sendmsg+0xa4d/0xbe0 [ 385.766188][ T9978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.766209][ T9978] ? __pfx_____sys_sendmsg+0x10/0x10 [ 385.766246][ T9978] ___sys_sendmsg+0x190/0x1e0 [ 385.766265][ T9978] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.766281][ T9978] ? __lock_acquire+0x49f/0x1a40 [ 385.766303][ T9978] ? get_pid_task+0x106/0x250 [ 385.766347][ T9978] __sys_sendmsg+0x160/0x210 [ 385.766370][ T9978] ? __pfx___sys_sendmsg+0x10/0x10 [ 385.766405][ T9978] do_syscall_64+0x115/0x870 [ 385.766428][ T9978] ? clear_bhb_loop+0x40/0x90 [ 385.766449][ T9978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.766467][ T9978] RIP: 0033:0x7fe24179e0d9 [ 385.766481][ T9978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.766503][ T9978] RSP: 002b:00007fe2426d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.766520][ T9978] RAX: ffffffffffffffda RBX: 00007fe241a25fa0 RCX: 00007fe24179e0d9 [ 385.766532][ T9978] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 385.766542][ T9978] RBP: 00007fe2426d8090 R08: 0000000000000000 R09: 0000000000000000 [ 385.766552][ T9978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.766562][ T9978] R13: 00007fe241a26038 R14: 00007fe241a25fa0 R15: 00007ffe3be2bce8 [ 385.766585][ T9978] [ 385.839013][ T9979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.102338][ T187] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 387.339711][ T187] usb 5-1: Using ep0 maxpacket: 16 [ 387.384040][ T187] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 387.423377][ T187] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 387.466758][ T187] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 387.594161][ T187] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 387.609349][ T187] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 387.619103][ T187] usb 5-1: config 0 has no interface number 0 [ 387.625484][ T187] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 387.665553][ T187] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 387.683411][ T187] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 387.716845][ T187] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 387.730037][T10003] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1222'. [ 387.773327][ T187] usb 5-1: config 0 interface 125 has no altsetting 0 [ 387.804708][ T187] usb 5-1: config 0 interface 125 has no altsetting 2 [ 387.864744][ T187] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 387.901728][ T187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.919458][ T187] usb 5-1: Product: syz [ 387.928795][ T187] usb 5-1: Manufacturer: syz [ 387.945839][ T187] usb 5-1: SerialNumber: syz [ 387.965861][ T187] usb 5-1: config 0 descriptor?? [ 387.986540][ T187] usb 5-1: selecting invalid altsetting 2 [ 387.993587][T10009] netlink: 'syz.3.1224': attribute type 3 has an invalid length. [ 388.017197][T10009] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1224'. [ 388.136380][T10016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1226'. [ 388.348918][ T24] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 388.635120][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 388.652363][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.683739][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 388.730079][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 388.776793][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 388.818690][ T24] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 388.858532][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.885253][ C0] usb 5-1: async_complete: urb error -71 [ 388.891028][ C0] usb 5-1: async_complete: urb error -71 [ 388.896729][ C0] usb 5-1: async_complete: urb error -71 [ 388.927108][ T187] get_1284_register: usb error -71 [ 388.947450][ T24] usb 2-1: config 0 descriptor?? [ 388.952881][ T187] usb 5-1: USB disconnect, device number 25 [ 389.037180][ T30] audit: type=1400 audit(1785949588.578:3169): avc: denied { nlmsg_read } for pid=10022 comm="syz.2.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 389.425651][ T24] nintendo 0003:057E:2019.000C: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.1-1/input0 [ 389.545055][ T5707] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 389.575288][ T24] nintendo 0003:057E:2019.000C: Failed to get joycon info; ret=-90 [ 389.591687][T10033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1230'. [ 389.615179][ T24] nintendo 0003:057E:2019.000C: Failed to retrieve controller info; ret=-90 [ 389.645018][ T24] nintendo 0003:057E:2019.000C: Failed to initialize controller; ret=-90 [ 389.668359][ T24] nintendo 0003:057E:2019.000C: probe - fail = -90 [ 389.694198][ T24] nintendo 0003:057E:2019.000C: probe with driver nintendo failed with error -90 [ 389.734871][ T5707] usb 3-1: Using ep0 maxpacket: 16 [ 389.747202][ T5707] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 389.766592][ T5707] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 389.779979][ T5707] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 389.802028][ T5707] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 389.815486][ T24] usb 2-1: USB disconnect, device number 28 [ 389.835042][ T5707] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 389.866118][ T5707] usb 3-1: config 0 has no interface number 0 [ 389.872406][ T5707] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 389.918189][ T5707] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 389.964469][ T5707] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 390.068975][T10045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10045 comm=syz.4.1233 [ 390.311445][ T5707] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 390.334863][ T5707] usb 3-1: config 0 interface 125 has no altsetting 0 [ 390.345314][ T5707] usb 3-1: config 0 interface 125 has no altsetting 2 [ 390.357536][ T5707] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 390.374844][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.392551][ T5707] usb 3-1: Product: syz [ 390.400144][ T5707] usb 3-1: Manufacturer: syz [ 390.430285][ T5707] usb 3-1: SerialNumber: syz [ 390.469274][ T5707] usb 3-1: config 0 descriptor?? [ 390.483247][ T5707] usb 3-1: selecting invalid altsetting 2 [ 390.553753][T10048] netlink: 'syz.3.1232': attribute type 28 has an invalid length. [ 390.625590][T10051] netlink: 'syz.1.1234': attribute type 10 has an invalid length. [ 390.658243][T10051] syz_tun: entered promiscuous mode [ 390.976303][ T30] audit: type=1400 audit(1785949590.508:3170): avc: denied { write } for pid=10057 comm="syz.3.1239" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 391.106124][ C1] usb 3-1: async_complete: urb error -71 [ 391.111894][ C1] usb 3-1: async_complete: urb error -71 [ 391.117645][ C1] usb 3-1: async_complete: urb error -71 [ 391.225098][ T187] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 391.383528][ T5707] get_1284_register: usb error -71 [ 391.499623][ T187] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=c4.36 [ 391.608383][ T187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.704017][ T5707] usb 3-1: USB disconnect, device number 11 [ 391.723586][ T187] usb 4-1: Product: syz [ 391.759242][ T187] usb 4-1: Manufacturer: syz [ 391.784703][ T187] usb 4-1: SerialNumber: syz [ 392.036573][ T30] audit: type=1400 audit(1785949591.578:3171): avc: denied { create } for pid=10057 comm="syz.3.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 392.143029][T10075] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1241'. [ 392.242742][ T30] audit: type=1400 audit(1785949591.778:3172): avc: denied { getopt } for pid=10078 comm="syz.1.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 392.359391][ T187] mdc800 4-1:39.0: probe fails -> wrong Number of Configuration [ 392.404609][ T187] usb 4-1: USB disconnect, device number 23 [ 392.919118][T10090] netlink: 'syz.4.1247': attribute type 28 has an invalid length. [ 393.384998][ T5715] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 393.515064][T10101] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10101 comm=syz.4.1249 [ 393.834852][ T5715] usb 4-1: Using ep0 maxpacket: 32 [ 393.867542][ T5715] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 393.898892][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.928882][ T5715] usb 4-1: Product: syz [ 393.943908][ T5715] usb 4-1: Manufacturer: syz [ 393.958472][ T5715] usb 4-1: SerialNumber: syz [ 393.988959][ T5715] usb 4-1: config 0 descriptor?? [ 394.262509][ T5715] airspy 4-1:0.0: usb_control_msg() failed -71 request 09 [ 394.275697][ T5715] airspy 4-1:0.0: Could not detect board [ 394.283110][ T5715] airspy 4-1:0.0: probe with driver airspy failed with error -71 [ 394.298686][ T5715] usb 4-1: USB disconnect, device number 24 [ 394.366526][ T187] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 394.427625][ T5707] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 394.489409][ T30] audit: type=1400 audit(1785949594.028:3173): avc: denied { bind } for pid=10111 comm="syz.4.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 394.538973][ T187] usb 3-1: Using ep0 maxpacket: 32 [ 394.548978][ T187] usb 3-1: config 247 has an invalid interface number: 221 but max is 0 [ 394.558495][ T187] usb 3-1: config 247 has no interface number 0 [ 394.566142][ T187] usb 3-1: config 247 interface 221 has no altsetting 0 [ 394.581214][ T187] usb 3-1: New USB device found, idVendor=05af, idProduct=0223, bcdDevice=70.55 [ 394.591126][ T187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.606659][ T187] usb 3-1: Product: syz [ 394.609679][ T5707] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.610902][ T187] usb 3-1: Manufacturer: syz [ 394.642579][ T5707] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 394.642735][ T187] usb 3-1: SerialNumber: syz [ 394.655370][ T5707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.678817][ T5707] usb 2-1: config 0 descriptor?? [ 394.699718][ T187] usbhid 3-1:247.221: couldn't find an input interrupt endpoint [ 394.802852][T10123] netlink: 'syz.0.1260': attribute type 28 has an invalid length. [ 394.938058][T10127] ieee802154 phy0 wpan0: encryption failed: -22 [ 394.969577][ T5707] usbhid 2-1:0.0: can't add hid device: -71 [ 395.050211][ T5707] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 395.256899][ T5707] usb 2-1: USB disconnect, device number 29 [ 395.709409][T10130] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1262'. [ 395.745529][T10130] team0 (unregistering): Port device team_slave_0 removed [ 395.767763][T10130] team0 (unregistering): Port device team_slave_1 removed [ 395.788314][ T24] usb 3-1: USB disconnect, device number 12 [ 395.987086][ T5707] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 396.110641][T10140] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10140 comm=syz.4.1263 [ 396.364066][ T5707] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.377949][ T5707] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 396.405391][ T5707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.421373][ T5707] usb 2-1: config 0 descriptor?? [ 396.669783][T10146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1265'. [ 396.834466][T10142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1264'. [ 396.934284][T10148] netlink: 'syz.2.1266': attribute type 3 has an invalid length. [ 396.950634][T10148] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1266'. [ 397.256149][ T5707] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 397.272012][ T5707] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 397.315100][ T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 397.347899][ T30] audit: type=1400 audit(1785949596.888:3174): avc: denied { read } for pid=4962 comm="acpid" name="mouse1" dev="devtmpfs" ino=3145 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 397.430477][ T30] audit: type=1400 audit(1785949596.888:3175): avc: denied { open } for pid=4962 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3145 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 397.503202][ T30] audit: type=1400 audit(1785949596.888:3176): avc: denied { ioctl } for pid=4962 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3145 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 397.506438][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 397.566204][ T24] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 397.574993][ T24] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 397.587553][ T24] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 397.607090][ T24] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 397.624806][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 397.629290][ T30] audit: type=1400 audit(1785949597.148:3177): avc: denied { ioctl } for pid=10105 comm="syz.1.1252" path="socket:[27684]" dev="sockfs" ino=27684 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 397.658889][ T24] usb 5-1: config 0 has no interface number 0 [ 397.676553][ T24] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 397.696133][ T24] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 397.714916][ T24] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 397.739858][ T24] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 397.764244][ T24] usb 5-1: config 0 interface 125 has no altsetting 0 [ 397.771979][ T24] usb 5-1: config 0 interface 125 has no altsetting 2 [ 397.784977][ T24] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 397.795288][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.803379][ T24] usb 5-1: Product: syz [ 397.810243][ T24] usb 5-1: Manufacturer: syz [ 397.816696][ T24] usb 5-1: SerialNumber: syz [ 397.833750][ T24] usb 5-1: config 0 descriptor?? [ 397.851866][ T24] usb 5-1: selecting invalid altsetting 2 [ 397.873901][T10168] fuse: fd is not a fuse device [ 398.048643][T10170] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1272'. [ 398.645597][ T5343] usb 2-1: USB disconnect, device number 30 [ 398.651589][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 398.663474][ T30] audit: type=1400 audit(1785949598.198:3178): avc: denied { create } for pid=10169 comm="syz.2.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 398.825389][T10170] netlink: 'syz.2.1272': attribute type 10 has an invalid length. [ 398.862006][ C1] usb 5-1: async_complete: urb error -71 [ 398.867787][ C1] usb 5-1: async_complete: urb error -71 [ 398.873532][ C1] usb 5-1: async_complete: urb error -71 [ 398.909816][ T24] get_1284_register: usb error -71 [ 398.931486][ T24] usb 5-1: USB disconnect, device number 26 [ 399.118880][T10181] ieee802154 phy0 wpan0: encryption failed: -22 [ 399.145844][ T30] audit: type=1400 audit(1785949598.658:3179): avc: denied { write } for pid=10176 comm="syz.3.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 400.015590][T10189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10189 comm=syz.0.1278 [ 401.658843][T10207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1276'. [ 402.307920][T10213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1286'. [ 402.467371][T10219] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 402.728640][T10226] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.393217][T10234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1291'. [ 403.773873][T10242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10242 comm=syz.2.1292 [ 404.715224][ T28] rcu_tasks_wait_gp: rcu_tasks grace period number 85 (since boot) is 1023 jiffies old. [ 405.839458][T10253] netlink: 'syz.4.1294': attribute type 3 has an invalid length. [ 405.902417][T10253] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1294'. [ 407.610269][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1303'. [ 408.113354][T10295] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10295 comm=syz.0.1307 [ 408.934956][ T5715] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 409.168057][ T5715] usb 2-1: Using ep0 maxpacket: 32 [ 409.209071][ T5715] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 409.240455][ T5715] usb 2-1: config 0 has no interface number 0 [ 409.261805][ T5715] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 409.294011][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.331403][ T5715] usb 2-1: Product: syz [ 409.388997][ T5715] usb 2-1: Manufacturer: syz [ 409.408229][ T5715] usb 2-1: SerialNumber: syz [ 409.430468][ T5715] usb 2-1: config 0 descriptor?? [ 409.455643][ T5715] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 409.693159][ T5715] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 409.755428][ T5715] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 410.277738][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 410.289141][ T5715] usb 2-1: USB disconnect, device number 31 [ 410.356542][ T5715] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 410.430920][ T5715] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 410.480287][ T5715] quatech2 2-1:0.51: device disconnected [ 410.779224][ T30] audit: type=1400 audit(1785949610.318:3180): avc: denied { create } for pid=10319 comm="syz.0.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 411.288617][T10316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1312'. [ 412.751061][T10345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10345 comm=syz.0.1319 [ 413.349575][T10338] netlink: 'syz.1.1318': attribute type 3 has an invalid length. [ 413.440827][T10338] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1318'. [ 413.675747][ T5750] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 413.686748][T10361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1325'. [ 413.974859][ T5750] usb 3-1: Using ep0 maxpacket: 32 [ 413.988000][ T5750] usb 3-1: config 247 has an invalid interface number: 221 but max is 0 [ 413.998036][ T5750] usb 3-1: config 247 has no interface number 0 [ 414.004391][ T5750] usb 3-1: config 247 interface 221 has no altsetting 0 [ 414.025312][ T5750] usb 3-1: New USB device found, idVendor=05af, idProduct=0223, bcdDevice=70.55 [ 414.044603][ T5750] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.071663][ T5750] usb 3-1: Product: syz [ 414.108223][ T5750] usb 3-1: Manufacturer: syz [ 414.121813][ T5750] usb 3-1: SerialNumber: syz [ 414.164702][ T5750] usbhid 3-1:247.221: couldn't find an input interrupt endpoint [ 414.379558][T10369] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1329'. [ 414.569428][T10375] loop6: detected capacity change from 0 to 2640 [ 414.581927][T10375] buffer_io_error: 6 callbacks suppressed [ 414.581947][T10375] Buffer I/O error on dev loop6, logical block 0, async page read [ 414.598500][T10375] Buffer I/O error on dev loop6, logical block 0, async page read [ 414.606854][T10375] Buffer I/O error on dev loop6, logical block 0, async page read [ 414.615127][T10375] Buffer I/O error on dev loop6, logical block 0, async page read [ 414.623147][T10375] Buffer I/O error on dev loop6, logical block 0, async page read [ 414.631471][T10375] Buffer I/O error on dev loop6, logical block 0, async page read [ 414.639717][T10375] Buffer I/O error on dev loop6, logical block 0, async page read [ 414.648177][T10375] Buffer I/O error on dev loop6, logical block 0, async page read [ 414.656137][T10375] ldm_validate_partition_table(): Disk read failed. [ 414.663285][T10375] Buffer I/O error on dev loop6, logical block 0, async page read [ 414.671448][T10375] Buffer I/O error on dev loop6, logical block 0, async page read [ 414.679811][T10375] Dev loop6: unable to read RDB block 0 [ 414.686377][T10375] loop6: unable to read partition table [ 414.693275][T10375] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 414.816758][T10375] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 414.827494][T10375] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 414.837940][T10375] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 414.848087][T10375] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 414.865489][T10375] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 414.875635][T10375] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 414.885664][T10375] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 414.895627][T10375] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 415.628701][T10377] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1332'. [ 415.713926][ T28] rcu_tasks_wait_gp: rcu_tasks grace period number 89 (since boot) is 1003 jiffies old. [ 415.757295][ T5714] usb 3-1: USB disconnect, device number 13 [ 416.134509][T10392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10392 comm=syz.0.1333 [ 417.146423][T10384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1335'. [ 418.167801][T10420] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1345'. [ 419.279179][T10443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10443 comm=syz.4.1351 [ 419.560794][T10431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1346'. [ 421.475751][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1355'. [ 421.694896][ T187] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 421.706082][T10471] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1358'. [ 421.885444][ T187] usb 2-1: Using ep0 maxpacket: 8 [ 421.918281][ T187] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 421.997925][ T187] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 422.104527][ T187] usb 2-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 422.248018][ T187] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 422.433735][ T187] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 422.471844][T10480] Set syz1 is full, maxelem 6117 reached [ 422.566771][ T187] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 422.690135][ T187] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 422.796179][ T187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.184904][ T187] usb 2-1: GET_CAPABILITIES returned 0 [ 423.197715][ T187] usbtmc 2-1:16.0: can't read capabilities [ 423.657224][T10499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10499 comm=syz.0.1365 [ 424.038522][T10501] ieee802154 phy0 wpan0: encryption failed: -22 [ 424.639238][ T5714] usb 2-1: USB disconnect, device number 32 [ 424.917720][T10509] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 425.584604][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1370'. [ 425.625200][ T24] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 425.651621][T10518] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1373'. [ 425.651659][T10517] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1372'. [ 425.759337][T10522] netlink: 'syz.4.1373': attribute type 10 has an invalid length. [ 425.786128][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 425.804441][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.838418][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 425.873586][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 425.903802][ T24] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 425.926269][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.952931][ T24] usb 2-1: config 0 descriptor?? [ 426.653985][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 426.662771][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 426.673853][ T24] usb 2-1: USB disconnect, device number 33 [ 426.773288][T10544] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10544 comm=syz.2.1377 [ 428.585134][ T187] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 428.784922][ T187] usb 3-1: Using ep0 maxpacket: 16 [ 428.807156][ T187] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 428.830932][ T187] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 428.866562][ T187] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 428.916705][ T187] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 428.935844][T10563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1384'. [ 429.000711][ T187] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 429.036222][ T187] usb 3-1: config 0 has no interface number 0 [ 429.059559][ T187] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 429.118679][ T187] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 429.121107][T10576] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1388'. [ 429.168219][ T187] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 429.195135][ T187] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 429.236294][ T187] usb 3-1: config 0 interface 125 has no altsetting 0 [ 429.258615][ T187] usb 3-1: config 0 interface 125 has no altsetting 2 [ 429.291933][ T187] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 429.310760][ T187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.324675][ T187] usb 3-1: Product: syz [ 429.332114][ T187] usb 3-1: Manufacturer: syz [ 429.346068][ T187] usb 3-1: SerialNumber: syz [ 429.367950][ T187] usb 3-1: config 0 descriptor?? [ 429.403009][ T187] usb 3-1: selecting invalid altsetting 2 [ 429.907628][T10585] Invalid logical block size (8193) [ 430.008815][T10592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10592 comm=syz.4.1392 [ 430.336396][ C0] usb 3-1: async_complete: urb error -71 [ 430.342170][ C0] usb 3-1: async_complete: urb error -71 [ 430.347914][ C0] usb 3-1: async_complete: urb error -71 [ 430.387188][ T187] get_1284_register: usb error -71 [ 430.487864][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1389'. [ 430.773047][ T187] usb 3-1: USB disconnect, device number 14 [ 431.995206][T10618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.495873][T10620] syzkaller0: entered promiscuous mode [ 432.502613][T10620] syzkaller0: entered allmulticast mode [ 433.002400][T10644] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 433.443112][T10648] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1401'. [ 433.679693][T10653] netlink: 'syz.4.1404': attribute type 28 has an invalid length. [ 433.691178][T10656] syzkaller0: entered promiscuous mode [ 433.703690][T10656] syzkaller0: entered allmulticast mode [ 433.829819][T10656] tipc: Started in network mode [ 433.850296][T10656] tipc: Node identity def3a6b1c9c8, cluster identity 4711 [ 433.879642][T10656] tipc: Enabled bearer , priority 0 [ 433.998013][T10654] tipc: Resetting bearer [ 434.101109][T10654] tipc: Disabling bearer [ 434.325034][T10674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10674 comm=syz.3.1403 [ 435.132476][T10682] kAFS: Invalid Command on /proc/fs/afs/cells file [ 435.226152][T10685] overlayfs: failed lookup in lower (newroot/245, name='file0', err=-40): overlapping layers [ 435.392853][T10688] syzkaller0: entered promiscuous mode [ 435.408603][T10688] syzkaller0: entered allmulticast mode [ 435.668093][T10696] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1418'. [ 436.392567][T10713] fuse: fd is not a fuse device [ 436.514905][T10717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10717 comm=syz.1.1422 [ 436.772895][T10716] netlink: 'syz.3.1423': attribute type 3 has an invalid length. [ 436.785307][T10716] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1423'. [ 436.911499][T10711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1420'. [ 437.221515][ T187] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 437.375114][ T187] usb 5-1: Using ep0 maxpacket: 16 [ 437.391091][ T187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.417379][ T187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 437.451095][ T187] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 437.511216][ T187] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 437.538068][ T187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.557305][ T187] usb 5-1: config 0 descriptor?? [ 437.598471][T10739] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1429'. [ 437.692243][ T5714] Process accounting resumed [ 438.800179][ T187] usbhid 5-1:0.0: can't add hid device: -71 [ 438.827833][ T187] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 438.870844][ T187] usb 5-1: USB disconnect, device number 27 [ 439.429224][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1435'. [ 439.461085][ T30] audit: type=1400 audit(1785949638.998:3181): avc: denied { bind } for pid=10771 comm="syz.1.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 439.683663][T10776] overlayfs: failed to resolve './file2': -2 [ 439.750079][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.763984][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.158250][T10821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1452'. [ 442.828432][T10827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1455'. [ 443.126580][T10841] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 443.441241][T10841] netlink: 'syz.1.1457': attribute type 1 has an invalid length. [ 443.680817][T10841] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.687956][ T187] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 443.877125][ T187] usb 5-1: Using ep0 maxpacket: 16 [ 443.893549][ T187] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x3D, changing to 0xD [ 443.944008][ T187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 198, changing to 11 [ 443.965614][ T187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 42683, setting to 1024 [ 443.980728][ T187] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 443.990689][ T187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.007587][T10864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1464'. [ 444.020371][ T187] usb 5-1: Product: syz [ 444.032168][ T187] usb 5-1: Manufacturer: syz [ 444.043430][ T187] usb 5-1: SerialNumber: syz [ 444.115927][T10866] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 444.504953][ T28] rcu_tasks_wait_gp: rcu_tasks grace period number 101 (since boot) is 1033 jiffies old. [ 444.518526][ T187] usb 5-1: config 0 descriptor?? [ 444.535547][T10852] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 444.536670][T10868] netlink: 'syz.3.1464': attribute type 10 has an invalid length. [ 444.545193][ T187] pegasus_notetaker 5-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 445.155432][T10882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1469'. [ 445.270703][T10852] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 445.284677][T10878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1468'. [ 445.530143][ T5707] usb 5-1: USB disconnect, device number 28 [ 446.537519][T10887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1470'. [ 446.749704][T10910] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1478'. [ 446.775432][T10902] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b5c7 [ 446.785890][T10902] memcg:ffff88802aea7380 [ 446.793201][T10902] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 446.809159][T10902] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 446.828965][T10902] raw: 0000000000000000 0000000000000000 00000001ffffffff ffff88802aea7380 [ 446.839665][T10902] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 446.857339][T10902] page_owner tracks the page as allocated [ 446.864705][T10902] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 10902, tgid 10901 (syz.3.1476), ts 446773815378, free_ts 446646571181 [ 446.868618][ T30] audit: type=1400 audit(1785949646.408:3182): avc: denied { read } for pid=4959 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 446.915651][T10902] post_alloc_hook+0xfd/0x120 [ 446.933148][T10902] get_page_from_freelist+0xf48/0x3530 [ 446.942491][T10902] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 446.950270][T10902] alloc_pages_mpol+0x1fb/0x540 [ 446.961199][T10902] folio_alloc_noprof+0x22/0x250 [ 446.972444][T10902] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 446.982656][T10902] filemap_alloc_folio_noprof+0x5e/0x80 [ 446.985800][ T30] audit: type=1400 audit(1785949646.408:3183): avc: denied { search } for pid=4959 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.011462][T10902] page_cache_ra_order+0x539/0xed0 [ 447.040744][T10902] filemap_fault+0x1943/0x3130 [ 447.048866][T10902] __do_fault+0x10b/0x440 [ 447.056852][T10902] do_fault+0x2db/0x1750 [ 447.064408][T10902] __handle_mm_fault+0x187d/0x2a00 [ 447.071400][T10902] handle_mm_fault+0x37b/0xa30 [ 447.080022][T10902] do_user_addr_fault+0x74c/0x12f0 [ 447.088268][T10902] exc_page_fault+0x6f/0xd0 [ 447.095392][T10902] asm_exc_page_fault+0x26/0x30 [ 447.104920][T10902] page last free pid 9002 tgid 9002 stack trace: [ 447.117796][T10902] __free_frozen_pages+0x79f/0x1090 [ 447.125280][T10902] tlb_remove_table_rcu+0x2cf/0x380 [ 447.133222][T10902] rcu_core+0x5a2/0x10d0 [ 447.133826][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1479'. [ 447.147380][T10902] handle_softirqs+0x1ea/0x9b0 [ 447.156782][ T30] audit: type=1400 audit(1785949646.408:3184): avc: denied { write search } for pid=4959 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.193870][T10902] do_softirq+0xac/0xe0 [ 447.203663][T10902] __local_bh_enable_ip+0xf8/0x120 [ 447.213090][T10902] __alloc_skb+0x5db/0x710 [ 447.227377][T10902] nsim_dev_trap_report_work+0x2af/0xd20 [ 447.235461][T10902] process_one_work+0xa23/0x1940 [ 447.243617][T10902] worker_thread+0x5ef/0xe50 [ 447.253542][T10902] kthread+0x370/0x450 [ 447.263114][T10902] ret_from_fork+0x72b/0xd50 [ 447.269486][T10902] ret_from_fork_asm+0x1a/0x30 [ 447.279250][T10902] ------------[ cut here ]------------ [ 447.284740][T10902] kernel BUG at mm/filemap.c:858! [ 447.294055][T10902] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 447.300474][T10902] CPU: 1 UID: 0 PID: 10902 Comm: syz.3.1476 Tainted: G L syzkaller #0 PREEMPT(full) [ 447.311397][T10902] Tainted: [L]=SOFTLOCKUP [ 447.315700][T10902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 447.325747][T10902] RIP: 0010:__filemap_add_folio+0xfc2/0x12a0 [ 447.331741][T10902] Code: 44 c1 ff 48 c7 c6 e0 a3 dd 8b 4c 89 ef e8 e6 ee 12 00 90 0f 0b e8 be 44 c1 ff 48 c7 c6 40 a4 dd 8b 4c 89 ef e8 cf ee 12 00 90 <0f> 0b e8 a7 44 c1 ff 48 c7 c6 c0 a4 dd 8b 4c 89 ef e8 b8 ee 12 00 [ 447.351424][T10902] RSP: 0018:ffffc90003b7f460 EFLAGS: 00010246 [ 447.357922][T10902] RAX: 0000000000080000 RBX: 0000000000112c00 RCX: ffffc9000d872000 [ 447.365873][T10902] RDX: 0000000000080000 RSI: ffffffff825c0f88 RDI: ffff88807f0baa04 [ 447.373825][T10902] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 447.381775][T10902] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000002 [ 447.389733][T10902] R13: ffffea0000ad71c0 R14: 0000000000000018 R15: 0000000000000000 [ 447.397695][T10902] FS: 00007fc96a2fb6c0(0000) GS:ffff888123ed8000(0000) knlGS:0000000000000000 [ 447.406611][T10902] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 447.413174][T10902] CR2: 0000200000008000 CR3: 00000000560ce000 CR4: 00000000003526f0 [ 447.421145][T10902] Call Trace: [ 447.424414][T10902] [ 447.427331][T10902] ? __pfx___filemap_add_folio+0x10/0x10 [ 447.433143][T10902] filemap_add_folio+0x1d3/0x630 [ 447.438086][T10902] ? __lock_acquire+0x49f/0x1a40 [ 447.443017][T10902] ? __pfx_filemap_add_folio+0x10/0x10 [ 447.448465][T10902] ? __pfx___css_rstat_updated+0x10/0x10 [ 447.454087][T10902] page_cache_ra_order+0x602/0xed0 [ 447.459206][T10902] filemap_fault+0x1943/0x3130 [ 447.463958][T10902] ? __pfx_filemap_fault+0x10/0x10 [ 447.469070][T10902] ? __pfx_filemap_map_pages+0x10/0x10 [ 447.474527][T10902] __do_fault+0x10b/0x440 [ 447.478839][T10902] ? find_held_lock+0x2b/0x80 [ 447.483498][T10902] do_fault+0x2db/0x1750 [ 447.487742][T10902] __handle_mm_fault+0x187d/0x2a00 [ 447.492862][T10902] ? mt_find+0x45e/0x8e0 [ 447.497092][T10902] ? __pfx___handle_mm_fault+0x10/0x10 [ 447.502536][T10902] ? __pfx_mt_find+0x10/0x10 [ 447.507121][T10902] ? find_vma+0xbf/0x140 [ 447.511345][T10902] ? __pfx_find_vma+0x10/0x10 [ 447.516013][T10902] handle_mm_fault+0x37b/0xa30 [ 447.520780][T10902] do_user_addr_fault+0x74c/0x12f0 [ 447.525883][T10902] exc_page_fault+0x6f/0xd0 [ 447.530368][T10902] asm_exc_page_fault+0x26/0x30 [ 447.535198][T10902] RIP: 0010:rep_movs_alternative+0x33/0xa0 [ 447.540998][T10902] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 9e 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 447.560588][T10902] RSP: 0018:ffffc90003b7fc38 EFLAGS: 00050246 [ 447.566725][T10902] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000008 [ 447.574677][T10902] RDX: 0000000000000001 RSI: ffffc90003b7fca8 RDI: 000020000002a2a0 [ 447.582625][T10902] RBP: 000020000002a2a0 R08: 0000000000000000 R09: fffff5200076ff95 [ 447.590585][T10902] R10: ffffc90003b7fcaf R11: 0000000000000000 R12: ffffc90003b7fca8 [ 447.598536][T10902] R13: 000020000002a2a8 R14: 00007ffffffff000 R15: 0000000000000000 [ 447.606496][T10902] _copy_to_user+0xa4/0xd0 [ 447.610901][T10902] msr_read+0x144/0x240 [ 447.615039][T10902] ? __pfx_msr_read+0x10/0x10 [ 447.619695][T10902] ? bpf_lsm_file_permission+0x9/0x10 [ 447.625057][T10902] ? security_file_permission+0x76/0x210 [ 447.630687][T10902] ? rw_verify_area+0xce/0x6d0 [ 447.635444][T10902] ? __pfx_msr_read+0x10/0x10 [ 447.640102][T10902] vfs_read+0x1e4/0xb40 [ 447.644258][T10902] ? __pfx_vfs_read+0x10/0x10 [ 447.648918][T10902] ? find_held_lock+0x2b/0x80 [ 447.653594][T10902] ? __fget_files+0x215/0x3d0 [ 447.658252][T10902] ? __fget_files+0x215/0x3d0 [ 447.662907][T10902] ? __fget_files+0x21f/0x3d0 [ 447.667580][T10902] ksys_read+0x12a/0x250 [ 447.671810][T10902] ? __pfx_ksys_read+0x10/0x10 [ 447.676586][T10902] do_syscall_64+0x115/0x870 [ 447.681162][T10902] ? clear_bhb_loop+0x40/0x90 [ 447.685824][T10902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.691719][T10902] RIP: 0033:0x7fc96939e0d9 [ 447.696116][T10902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.715704][T10902] RSP: 002b:00007fc96a2fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 447.724107][T10902] RAX: ffffffffffffffda RBX: 00007fc969625fa0 RCX: 00007fc96939e0d9 [ 447.732056][T10902] RDX: 0000000000018ff8 RSI: 0000200000019680 RDI: 0000000000000005 [ 447.740017][T10902] RBP: 00007fc969435024 R08: 0000000000000000 R09: 0000000000000000 [ 447.747969][T10902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.755920][T10902] R13: 00007fc969626038 R14: 00007fc969625fa0 R15: 00007ffee3310828 [ 447.763875][T10902] [ 447.767047][T10902] Modules linked in: [ 447.772932][T10902] ---[ end trace 0000000000000000 ]--- [ 447.784862][ T30] audit: type=1400 audit(1785949646.408:3185): avc: denied { add_name } for pid=4959 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.817296][ T30] audit: type=1400 audit(1785949646.408:3186): avc: denied { create } for pid=4959 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 447.821660][T10913] netlink: 'syz.1.1479': attribute type 10 has an invalid length. [ 447.838234][ T30] audit: type=1400 audit(1785949646.408:3187): avc: denied { append open } for pid=4959 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 447.838273][ T30] audit: type=1400 audit(1785949646.408:3188): avc: denied { getattr } for pid=4959 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 447.897768][T10902] RIP: 0010:__filemap_add_folio+0xfc2/0x12a0 [ 447.932265][T10902] Code: 44 c1 ff 48 c7 c6 e0 a3 dd 8b 4c 89 ef e8 e6 ee 12 00 90 0f 0b e8 be 44 c1 ff 48 c7 c6 40 a4 dd 8b 4c 89 ef e8 cf ee 12 00 90 <0f> 0b e8 a7 44 c1 ff 48 c7 c6 c0 a4 dd 8b 4c 89 ef e8 b8 ee 12 00 [ 448.014011][T10902] RSP: 0018:ffffc90003b7f460 EFLAGS: 00010246 [ 448.034883][T10902] RAX: 0000000000080000 RBX: 0000000000112c00 RCX: ffffc9000d872000 [ 448.066597][T10902] RDX: 0000000000080000 RSI: ffffffff825c0f88 RDI: ffff88807f0baa04 [ 448.076613][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1480'. [ 448.104543][T10902] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 448.135069][T10902] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000002 [ 448.148731][T10902] R13: ffffea0000ad71c0 R14: 0000000000000018 R15: 0000000000000000 [ 448.172128][T10902] FS: 00007fc96a2fb6c0(0000) GS:ffff888123ed8000(0000) knlGS:0000000000000000 [ 448.196559][T10902] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 448.221105][T10902] CR2: 00007fe8705ef2f8 CR3: 00000000560ce000 CR4: 00000000003526f0 [ 448.249328][T10902] Kernel panic - not syncing: Fatal exception [ 448.255660][T10902] Kernel Offset: disabled [ 448.259976][T10902] Rebooting in 86400 seconds..