last executing test programs: 11m55.058115918s ago: executing program 1 (id=1456): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x64, 0x100) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000440)) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x4002) ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, 0x0) 11m51.954360444s ago: executing program 1 (id=1464): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 11m51.678574846s ago: executing program 1 (id=1465): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000280)=@framed={{}, [@map_fd={0x18, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) 11m51.348662238s ago: executing program 1 (id=1466): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/config.gz\x00', 0x0, 0x0) close(0x3) 11m51.253109029s ago: executing program 1 (id=1467): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, 0x0}], 0x1, 0x2, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x20001, 0x18b) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r5, 0x4000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 11m50.249529529s ago: executing program 1 (id=1470): writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000280)="580000001400192340834b80040d8c56", 0x10}], 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="ac010000140008002cbd"], 0x1ac}], 0x1, 0x0, 0x0, 0x55c2499837e1ced9}, 0x24000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m34.950215133s ago: executing program 32 (id=1470): writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000280)="580000001400192340834b80040d8c56", 0x10}], 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="ac010000140008002cbd"], 0x1ac}], 0x1, 0x0, 0x0, 0x55c2499837e1ced9}, 0x24000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m55.783207302s ago: executing program 2 (id=2458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x2, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004040}, 0x4000) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2000000014000100000000000000000023000000", @ANYRES32=0x1, @ANYBLOB="aa0000000000000404cbd454485a7472650b372698ebeaa0e78ab5f9004dc9834562aab05eb7f15ea232f575a62c17"], 0x20}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000002f00090073cc72e16a"], 0x40}, 0x1, 0x0, 0x0, 0x2004e884}, 0x0) socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, 0x0, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r5, &(0x7f0000000200)={0x23, 0x1, 0xac, 0x1}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$FIONCLEX(r2, 0x5450) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x20, 0x8000, 0x4, 0x656, {{0x1a, 0x4, 0x3, 0x36, 0x68, 0x67, 0x0, 0xfe, 0x4, 0x0, @multicast2, @broadcast, {[@lsrr={0x83, 0x7, 0x6c, [@rand_addr=0x64010102]}, @cipso={0x86, 0x2c, 0xffffffffffffffff, [{0x7, 0xf, "0aff472bef551b9605bcba219a"}, {0x7, 0xf, "22d100a81070258194c720404e"}, {0x7, 0x8, "aeb2db2c2788"}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x12, 0x3, [{0x5, 0x2}, {0x1, 0xa, "6e9e64ffbf4a833e"}]}, @noop, @timestamp={0x44, 0x8, 0xbe, 0x0, 0xc, [0x8]}]}}}}}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="15ffffff5500000327bd7000ffdbdf2507000000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="01000400e0000002000000000000000000b1fc8613000000"], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r9, 0x80047456, 0x7fffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 4m54.466296654s ago: executing program 0 (id=2461): memfd_create(0x0, 0x6) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/kmsg\x00', 0xc00, 0x24) lseek(r3, 0x0, 0x2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4000054) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000000)=""/194, 0xc2}], 0x1, 0x17f, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r4, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000000700)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x6, @empty, 0x81e8}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x1}}], 0x18}}], 0x1, 0x40001) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000000)="472e1abfd4b0058799aba982e918d1c05de077216ca09e387bfbb2a90c1e8f37be1ded25a64ab5fa9ff2459c3ed1cd3881969ab382ddb92c3a93700ac949ef9a9371b4de5e4d7f3c932f45f4b68ec43f5660746a60c42a055fe8b819cf5bc78cef1d607f7756c00a2c822918e040436e08a7ed7038ee9a80777b0eb66fe090f9ab05b1eed9eb391b5e21f0377f20720cb5fc31d3af29f3cf1110b252e9cba56423cdde75230e62174260e9bf52c4f60b17cdedc0fec5ab08185bfe532d011b559ae98a6addaa60405d1f", 0xca}, {&(0x7f0000000100)="f63315a9e1090e3e42d96f2db01430f1c2dc8da6965afea68a447d22fde4bcef3399aa1f02d0d72d7af27e4913af02de306a791519cb639a912201236929c326a348e9fd62a29383f6bdce9890edf646b87f88e7efc73c004aa4a6eee97fee6e0ec3b6a7a7d7eb00698911a072e50b53c30c975a4bfe5343368503dbff3e2e3bd5f3a1216b9769d588d225d8cc2fb63fc03436", 0x93}, {&(0x7f0000000200)="b6bb1c715bea1bb501629a2d2c07d30b7307c8339415be72613d889d05a55b6ad3e48dff1f5090712cedce554fc331cec1fb743e0260acde0dbf5e6dad6fd847b4bebde1b1346170eed4db544e1e77a93d12a62c26667d82489ebe6f120c51fbc06176", 0x63}, {&(0x7f0000000280)="db571e3b24b1ae399bfe2e6e04b8f81d5f5038de1995bd504bac84f6d8c577a0b473ab43c5da2b7b", 0x28}, {&(0x7f00000002c0)="4fbe4e53109c512767ce85753880bed26492320568c72a0444f8ae284c6778c160a949", 0x23}, {&(0x7f0000000300)="9da157ddf965a23b52c587e27f1789b5ffa69fddeb994afd0b31aa2e541a9ffd243c50ba", 0x24}, {&(0x7f0000000340)="e5014278dd5d59ddc8eb53a12f3320fcc321f289960f4de92362ed2cf39f3acf3b2b6b1adb0f6cd0824f19cf108091164bf4d0575a55ec569dc4c220f1d1ec4af4f8b2bebcc2d2865b5bb1", 0x4b}], 0x7) 4m54.336629854s ago: executing program 2 (id=2463): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0xf809, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540), 0x0}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRES32=r7], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r7, @ANYBLOB="2f026d8c1bc8b4972fc69ccce2e728568564b452324e4cf079f1091bf9a1a25c4e195eb9273620db52e22cad116606e840762840a14557ffd51ac4de1879aca764e80590d88b98349765c8de2fe65f5cc4f463307509d276222076dd80f4319da868a56fe1f5081f1a263e2a19004bcc35"], 0x1c}}, 0x39db77225c63fa4c) 4m51.437694621s ago: executing program 2 (id=2469): r0 = syz_usb_connect$uac2(0x3, 0x9f, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000600)={0x0, 0x1b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m50.35431903s ago: executing program 0 (id=2473): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)='X\x00', 0xfdef}], 0x1) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000280)) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x704c3, 0xc4a48b7f26bf140b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net\x00') getdents64(r4, &(0x7f0000000040)=""/27, 0x1b) getdents(r4, &(0x7f00000005c0)=""/180, 0xb4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000400000008001200010000", @ANYRES32, @ANYBLOB="018000"/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="01000000010000000500"/28], 0x50) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000300), 0x42) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r5, &(0x7f0000003600)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f0000002600)="0810b841e7b8c5afc0bbe5f1230e1b8bad301dd4de3cac61856df1e3444083303ca13006b2fe5ee12dc16199c3109ecee03ca163ce34f8d9a13b4d000f43204c7d07393297be382e0694882890a8d59bbb94c37b1a57bb9ac552c63813199ff63b5ad0d448cd615a1790c81c8c7394956add6009b83951e2e668f0381b6d2ca79e890aacea24ab716ec77a9d14a03f228b0836971552d52fb595483f9e57a98dbf8f1b2af86315f96bb97ff704ac39b371fbf0cbf83efda3981c7fbf732cfb370f5c52d0f2708e984c8d6bc60b59ab867faa4e8516ca2ca8410b06859880b7f8e419213319e42901f93a01ba5e9b0fb4eb11beea0845dded4a1840ded5439fd43991a143787bc6929506a8847521d494ce671fb1ad2cda8ba856a01a07af82406397db4643c142d3912f610e3ae9e8508d48a9c0954f268fd346e787338be74716faf0ae4ff6fcc57ef2022966c24717dbd7f6c0100fd28c36e409710f1005eb56ce9f8decc88df27e820c45f27a312ed524689a61c0a16205270e6e1e7a62b7bf2cd0bbf8c975d98056927c5fe9cbb7c70e0cfc4d34c97c357adf1c725297de8f3ba8efcad842b9962dd726e160287b1af0b9791f8f5880a606987b4d3b85aafa7edf1f1033af5a290e3de6f1520caf1c9c2a696dc04e37750084b563c268eb0295f2b63e9f76e59a764a753e36d2bed3a3e199192c1629a876b91f5406c94c5757f32c1849b554835a4ac1b2f69a781255b859170315abbbb52667fd11b15280cd79ea86451e937e5667a7690caec45277aae3fdadefed9e9289b2040a25da405a14a163dfcb1499c4de313a6aa5ef58ce3cd86615a5bd8063e42638824df548f8abd5fdbd7158fa28c74eb29340418c87d4518c4aa9bbb4e01bcf559048116b768837cf599a439d52271db13fc7e0bff95e677a31f87b6e097e22253485864c8a8a275309cf8fcffbb2f3351149d3386010f1bc2c3359495e49639976f592597bf971b271723ee8963fb4e979e32433042ac943bba51d21a4ac5286317497b852333fbb42ef03ccbd3f220d0c50277a1dc0eb1a5498e29e1a6d4f2178ea43bac36fd9d816cfae4627362c4b4f3ed8a8aa27e59da6e102e1ef20561a5e7c1a2260dbcf2343ab56b7c13bbfe7b509966ba20093cfaf4717ce8011c54378c09ad51161b328db9a3906df705ff6a3df5f6ce19d8c1d2a72601b4149549ee43dab62b9701511b1c1ebf6530ff9480c171b5c68aa5901d84819af9a42cffe35d3a4d867cd1812cf1e3aea15ee56b93ee0d65915371d87f5e96e8a85da5ba89886dddbb0a7ad5d77f6766e7132e5e56c4c605d434b9a3726960573d96dc2033bfc9fa1d7eefcb9491eb2dc55a43cddcba4cab7c1155b3254d37865f6045e2f4c31a25004c02392b8942673b3210b3c51e83ca5c54e817485bf247eacdab175a5eae063230c8ac45d0d2e0f76404eaf49f40434733d8e69309775b5dfa38368d0fa385787c937194c000b111fd512a9260e98b64cc9498f727b21573b779e8250a00c2c5e583f324695e28e19f550fc1536943db7ab7bdf3e0543b0bffec465bff037b6600eb5d6d37ef6ba6503fc4a395c4f011b138718265d7ca11dba0d0bfa5e97e8d653309e206bc6701742abdcacf9261b834acbc602bcbdcc74c8f360df1821306db69afd520a823269b714c54e88dfab17880ec2023477d952976b673261955909184858a87e902d3b272056447c882676297a466305d292f725facc26dc10413ff8e4b4cd9871ca8d14b59df62cf19cae6b3b548b34032ff1d64640c1d734c730eca28b43148e20309f10c3be7823407314c9b6f7b7568d59d9dac5a5dc4d802ee5ef00dc6e800bf5948cfd4bf42e3d82500cf3bf6922afbd715c431ebdc6ebea8c858b7f7647df975e85aad2781a29ec497393cb2834fcfc6817c8e659f158ac918392afed4b6be6ec4914a39898e1de46ab5bb7d560e6dbbc1d5ac7537fb0ddea37cbc47d153edcdda2c21590ca39e96a22e0e6383a4781dd85239d47cf377d3673a6603cc39c3dd3be97403e8503cdfad3c470b225c47bbd55f903f9eb981c2c9ac084ee2bcbe94ce0777e4ebefd04621a21a0c22e2b700a265529e855f0f48f3c49659defe8814ddf38acfc3625785d7fda9e3b22f6a4e8bc4d24d307a1445cc9b24b01a27462d7bbb38c21357712cb23c9214987678ef3a24bbf5e1afa2f6fce13d5a993ac3295b6a5696f930f95891844d354d4770f54c3d82eee4532fda5e3c588e5ddd5d0c8aead2b5a638c3a6b000a4ba4f4f3b949d42a95b2db3d36770dd0a0fa38aa3c4a1861bceb8e65953bfab32a24a32b0e6a541a0fdcef20aa1660f85cc3e67fbced6544686009cb7a2679a946e5d450b57a5ff26221bc2892289d6976c8c6533cd1d99b5a318486e3f815b2aca4ed829a02397d8777f5e51182d0a642676d8bc777088e5553fb06aca344c11e008f4986f658dad61537955034003a8d6733456e1be6d34e5003d83ac0553e06226a64b075aebe51cd2ca4dc125bd2e5216d8badb9ae0bd6037f1f2a521fcce6c3dbf50bcd3eee15217b3e905b23cc48b277c28fae49e7c848849024a9b63118a83c8ad22c62dc827ab1d3087a3ee5dc441f618bc5f1b905208af39d39fa6ef98b14cfab17086f8560219378ddf6441fd9c42492ca0c93a3b8f34f52ff2e0487f7889283170fbe3d0a6bbc4a853bd722aa3099bf9a67a00f3d197170b7091f627e72a4f1183184022f4bf357ffb2f91f8ec56caf3a25316a7d4aa97105bb6992aac4c3bb549ac0f44c893118668bc5a0f80fd36fe417dc161f58d32bbdde887ca24d4847e5d2cfe1d403d9f1e36f093f333e6b2628b86d6aa04f20ff7315e673c7aeb422f43f841a1d88800eae67b67ac9bea8376f0ceefcd6d0fa9eafd7cc840ae5e94903b2b105c19c9b4cc513a3ba128fc442ec44bc3dd31e7fa0aa7cc48f76dee7cdb50373cf1d38792060f31ccf0790bed8b1650fd9b89f29318854dc20ff3bc4494812168d0cc2cf5067eb456f9bff76a667ca9591bad8345f9ca6188ea64152183515ccf1bdb322bf211204ae1aa4ba283abd792ed119004662c90f2bf62140ed8373968e546f1717547c91043f54436d9fc55dde66bb855f580afd9d13817fb58365bae446bb81207fd55c63cb55010dd4b557ab83b11f6c121ab5e944231e3ec4fe26b9063f02ea8bb63a4b63220936ad293a2feba07eff6b8cb6ee1384f4e6851b1b8e26c8e1489cdc8baf3a1aeb86fb909ab59ea46b792460135a674c58aa70ed9366f2bce27c6f561a33f196ac615191080400c8483f918731a3495b15bb9ac61bd274696eb4a1e50a2bc2bb4c03b48852c3d3f57339759ef93e3a6b41338770b6dc055d7b3c8d5a39fd8e8ae97df853e8190d2ced216f33d2094b910b44e456e0b60cf969908269efca0569d001611ddd15764ed7cc76532aaceaa576e78a173ff4dfa5217a8448a6544a57ad05df3c78b619480d5011c2751c190f005a750f4abd00f93463569d29d661381449c2160873d8950e804f845c54ec5dd9181d92f362163ffba4a8ea3c601adde3b9a5640e63d278b0baf3ab18b9be07142167312c6a7bdef87eb164ab45b47f342e0bb78699d9d03ae604056e3573fdd63f21bc84e63fd0bcd105e9000b6a3bbb3cc24d03b3bec5e8a05bf8d3bd803add92332073dd08dab92baf9ac665e2b5813e740730bb229568e1c98858d1da77de414238a26f4c540421a12b19c3fde2a3b13f756d8cad00fc2b1459de44e377d3ec2fa958aab5a978b23512ede49810d3f788a193b4d58b9a130d47f965a8ed368504d4ecfa4eef6e37bf9222323da97d284c99f0f89308d6a9cf6168a5900ea1f518f5ca8579e898743c5732111c90b567250ba005963459d1096e2bd017b4504a5e8e08c627fa552f93533277f8a68613d697c0c57b17865e6eb71533825acb662c3bf262d3ea8f043685b0580d0174b4e7c5109226013e5188ae01bfc63335b894c69bcd555af1b9bc60693a8b740baaf5796708975e3ccfecbbd3442e8879803be80609f2c1af7456964336df89708bbb6e505e7d86d925b86689dae9d69b065a9096578403de05be543792ebc5fedad1dded4114b7ce2982b486810f558d139ed3dc5f49907d6b822e8cd0da90d8247e37ae5972fde80a3a67b6363faecb6dbda474081d443f3cf81773bb21f5f0eb0e5698c0f0c129e4d6b9d05d9e7fdc04980276f6560f456303095ff630798c9a48010fd8b1660a08a80e607ea227d49abd05c1adffffc4dc3bf9383139e7b5b1673ca37e14ffc7cb83be001d1c6e8d102a168ba06a9d920ba6140c608a2f60aba3a5f20babe13ba0c7aba2ca670d5ceac33282108c5b6494eeb28563f7db7cf7cf9c3a736363db403d19b55597648d293de9db7e479202e5b9281bed2212421fe4494cd981a37ba31f6f4f023ef4abd8bce8d8cc3d76048b8963ab3d5a1e05a6bde0296f27beeae20b2d8aab90c1051f9656c32c11d189d31282bff1bdcb924f61a1869a243131d86456eb0c0ab8220c45f115b6332b2998a400cc99ebc1ec3f74ed60969d852609c451e84d33ff363323b1c6e414f5e3ca10f07ccd3f42301c7a058f24f6523b59bce24d436e0466bc43a1abc4812a193f1b95f3f98e751e5d3c51b997399a13d223345ee11e706db9865437f26e8337865da6f13dc69a96d9aa1b0e1fa94147626d0eba9c6f2c2478a16d2a6bf3435577f8fabdbe5a1c7581f563381944e52d6e031a839d174826db86d763616eb8936f937090adfc1d7863c0feae5796cdf1719dcf5b9d48ee786f5ad7ac1fc411a8b229cfc75d03b3a8939dcc7affcd7bc78d3a8b2372708fd6996d59ad7eca1878a6437467151f9b6cfb99fd5e5a8b4ea0758fe6c7ee7a364bce3768ab795cd4a5876ea78dcb967b43de7a954f923d0d50e1fe2ddbb66f87c746cf0b45e49a7b8ae45dfce4d41331da071011f3db9ce31e657f96718c23cc56ceef5664d8b473bebe8849b228d34728e5f3f1fa1dc2693553a6d1cc32a759e2dc01b059d6db78d60ce996f080d60e5b7c101e1428b498670d3f2e0390bca39f2fdc2011642feea44b6bcc05ea16fbc76d79b045dcd1fd4bfe8658785fe62fb73387b710371909c168673c4bbd84ccfa8d18295577613583162d938dad1c8a2ea2794c9e19f528d99785a930e6cca9991b144de35700ffb26f5ecc9a2e6b609d6bc520dd065a3210b640bfee1b4ded87a536a7cd11e2a659b5bff8caff79adc4aae4747ca6ed8d345a9eaad4e900bc55301883412d1cd878c4f6beaacbc0425400c653618c094198da45a96a35d4752d8527f97b6ca3845e9611e7a774961951705dd43e05ac25b731e83e882e57b61cb77075f18909e54b22147455bce0f5536ed608a82d49ec02d954736bb8f4939857ca6147f75c01819a5dd2e423800c427f2dd703291d976377febcfc42d2edbf19346b4407b76b47612db91073ee7cb80a0e2575c707eb3d6693795106d5058cf384404f49d12cdce59dc61d692df28680e24f1cc4fa98bce1bc1fd15448b264d8bd886c475a3c8a46a640469f13f1213a893eb8d79b5676aa691b8bfc4be0e293cffd3a22ec87a114d0c35c066374c90d7c99083cc97516ec254fa6c61df11184a993cc1274defed12af9481dd7792bb008c5a3053fc48aa294be1cad7e68d5f1cd40522f08d0cfd266681cdbc5ab0f9adfd57846851b2aa20a79fcc70f0314ea6ebb2ec9534d00"/4096, 0x1000}], 0x2) ioctl$SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setreuid(0x0, 0xee00) openat$cgroup_procs(r4, &(0x7f0000000340)='cgroup.threads\x00', 0x2, 0x0) 4m48.443758318s ago: executing program 0 (id=2476): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @private=0xa010101, 0x803, 0x3, 'lc\x00', 0x2, 0x7ff, 0x3e}, 0x2c) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x88b02, 0x0) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) close(0x3) write$P9_RSTATu(r5, &(0x7f0000000340)={0x230, 0x7d, 0x0, {{0x500, 0xef, 0x3, 0x0, {0x0, 0x0, 0x7}, 0xc0900000, 0x0, 0x0, 0x4, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00t\xe7\xc7\x05!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xee00}}, 0x230) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) mq_open(0x0, 0x8c2, 0x30, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r7}, 0x68) 4m47.038808031s ago: executing program 0 (id=2477): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x95, 0xd2, 0xd4, 0x8, 0xc72, 0xc, 0xeda1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x2, 0x0, 0x3, "", [{{0x9, 0x4, 0x63, 0x7, 0x0, 0xff, 0xba, 0x44, 0xa}}]}}]}}, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000040)="b8", 0x1) syz_open_dev$evdev(0x0, 0x0, 0x200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) 4m47.028868749s ago: executing program 2 (id=2478): socket(0x200000000000011, 0x2, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000680062ae00000000000006000400"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) close_range(r5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c010000430020006305d5a2ee2688c845632dbd7000ffdbdf250200"], 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="2000000069000b00000000000000000000000000000000000800010001000000588ee60c2ddeb98de4f2b070e96229e4712417ad69a465249c924ce65ed3406dd6ea3a0acdc67a7730396d3dfad9617f059707831f3ea34d0c6e573141dabfa608a25f9522c6d35a12e21b5b61eb28b99985ed8dc0b163937219a8d2313f7c5fd36de0152d714bce13b74f38e9e2cb331d511383f8671eb3aa24a6c2862178717e6474b83b411226af626dd0b5cf4dd1a8116e29a2e65bd448a08b41f3dd7f1dbd1390f66d"], 0x20}}, 0x4000000) 4m45.422352499s ago: executing program 2 (id=2480): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @private=0xa010101, 0x803, 0x3, 'lc\x00', 0x2, 0x7ff, 0x3e}, 0x2c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x88b02, 0x0) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x4004090) 4m42.508462007s ago: executing program 2 (id=2482): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x9, 0x1, 0x0, 0x0, @str='hash\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xbc}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, 0x0, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_usb_connect(0x3, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402001c60100000000010902450001010080fa0904"], 0x0) close(0x3) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) 4m38.718013173s ago: executing program 0 (id=2488): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @private=0xa010101, 0x803, 0x3, 'lc\x00', 0x2, 0x7ff, 0x3e}, 0x2c) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x88b02, 0x0) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) close(0x3) write$P9_RSTATu(r5, &(0x7f0000000340)={0x230, 0x7d, 0x0, {{0x500, 0xef, 0x3, 0x0, {0x0, 0x0, 0x7}, 0xc0900000, 0x0, 0x0, 0x4, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00t\xe7\xc7\x05!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xee00}}, 0x230) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) mq_open(0x0, 0x8c2, 0x30, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r7}, 0x68) 4m34.934850347s ago: executing program 0 (id=2490): socket(0x200000000000011, 0x2, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000680062ae00000000000006000400"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) close_range(r5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c010000430020006305d5a2ee2688c845632dbd7000ffdbdf250200"], 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="2000000069000b00000000000000000000000000000000000800010001000000588ee60c2ddeb98de4f2b070e96229e4712417ad69a465249c924ce65ed3406dd6ea3a0acdc67a7730396d3dfad9617f059707831f3ea34d0c6e573141dabfa608a25f9522c6d35a12e21b5b61eb28b99985ed8dc0b163937219a8d2313f7c5fd36de0152d714bce13b74f38e9e2cb331d511383f8671eb3aa24a6c2862178717e6474b83b411226af626dd0b5cf4dd1a8116e29a2e65bd448a08b41f3dd7f1dbd1390f66d"], 0x20}}, 0x4000000) 4m25.60215941s ago: executing program 33 (id=2482): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x9, 0x1, 0x0, 0x0, @str='hash\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xbc}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, 0x0, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_usb_connect(0x3, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402001c60100000000010902450001010080fa0904"], 0x0) close(0x3) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) 4m19.481315424s ago: executing program 34 (id=2490): socket(0x200000000000011, 0x2, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000680062ae00000000000006000400"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) close_range(r5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c010000430020006305d5a2ee2688c845632dbd7000ffdbdf250200"], 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="2000000069000b00000000000000000000000000000000000800010001000000588ee60c2ddeb98de4f2b070e96229e4712417ad69a465249c924ce65ed3406dd6ea3a0acdc67a7730396d3dfad9617f059707831f3ea34d0c6e573141dabfa608a25f9522c6d35a12e21b5b61eb28b99985ed8dc0b163937219a8d2313f7c5fd36de0152d714bce13b74f38e9e2cb331d511383f8671eb3aa24a6c2862178717e6474b83b411226af626dd0b5cf4dd1a8116e29a2e65bd448a08b41f3dd7f1dbd1390f66d"], 0x20}}, 0x4000000) 23.108323188s ago: executing program 3 (id=2911): r0 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x3}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e88827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614756b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e1a9010000668e8fd0e52ce0705ae511456c4d540796f9ae7d360fc4b4c3e39171d21b1bbadf8b456ff7f5b3b26509", 0xe1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r1, r1}, &(0x7f0000000540)=""/194, 0xc2, &(0x7f00000000c0)={0x0, &(0x7f0000000280)="708803449262ddb5bda92158536f78c390609a10de442b2c85a693afd7d8e5ffc37e1b3aebbdae8dc970f20781e971fc777714", 0x33}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) write$cgroup_netprio_ifpriomap(r2, &(0x7f00000001c0)=ANY=[], 0xfedd) syz_usb_connect(0x2, 0xb3, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc0201011124030101020000000000000000020000092403020101"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000000800)=[{&(0x7f0000000180)={&(0x7f0000000100)={0x0, &(0x7f0000000000)="956c12d1549a93e2aa15ac411273b4832ce6d264b12a58f030b54eb948793891aadecb2685d697038c0897265d73f40ecef2959f666d68228a6301c81620777a082420f121a118a8a452feaf04c4ead64669896ba0fd3a6be2227e534f85bf1b0a6681a02da2505407c6290b515c60d761fe4cee02823640b7360038c02cee90cb9ef92eb86f3695d7477c2e5981395bbab42c0f76a0c02a47fd99831eb62c78ec9f17d5392652f0881500e233b4ad53d234510a0851c8bf1054720c1deaebfe1a9f7efad80ef8b4b75d82c5b5f7b3649ab9095dbf117f3c7bd8a57a91d1", 0x0, 0xde}, &(0x7f0000000140)="1f4d721deb296e4aa14a261a8d6a94d0", 0x0, 0x10}, &(0x7f0000000280)="13aa5b51a751d778bb7536bd8cd0f2aba0056d7b05b359f7cf07fcc0185e7d966bc6e9098f7e081d3fa278de9c34a79fe5c2e7c098e62bfbe0c77a99a79d1c475999bd74e902b56c7da8e40f3f8a4b890085cbe5a6e66f998c3650478673a43383c9f55f5a381e277a905f0665f8be24bed5c9a8cc5225d40078988ddb27d03d698396640dd621da71260e990a51cc", 0x1, 0x8f}, {&(0x7f0000000440)={0x0, &(0x7f0000000340)="7cb87bc83a67e33318079ac5ccc9529dc61ab6a633b7d65f8353325c109fed1ba8c39a719677e4f930232439ad9d70a3a26fc263e009edbed2b5985b51cffc6d217f971889b2ccd9c85d518ca2744351159ca7b002f0fc9b8288bf176d5c4093cff41a233c3923e6dd26052ee5c9493395d5329872241b60d13167745a3408457a10b97704ed58eadfe12f44b2392039e63089ac557aabaf96e6cad35b78a32e2bd40d04191df6296542abb7215be12ba9e8c12c914e05949dd1404191afc3d32e852c8badcf6895f2ddb6fa80037b", 0x2, 0xcf}, &(0x7f0000000480)="627618aa46aec0ae71f6b5", 0x2, 0xb}, {&(0x7f0000000740)={&(0x7f0000000500)={0x0, &(0x7f00000004c0)="9bc54b38752c0374438afcfb8910622171437bd28384d3cf423a9eb7227a68808c243d2a9da2723ac3073435c0456e062cf3d3e0c505f460ff", 0x1, 0x39}, &(0x7f0000000640)="f74e45f87c1126bce3dd27d9a3a78390cf9ab95ccce450ca8865d4b49eaef19ac30d868ef56dc72c639e8b4fae20c5672f68e83a995df93ebf4dc9a9d0d74dd8e98cf51a2f300e7fad88598707e150835d233600502c3f8253e9bfa2fcd66e6eb852f2a4e83eee5632769b118bab1b7e92fb5bc5f927f7e37ac6164b16fd7c4fbb681c44f3ad3f88a8c2af93e0774fbba5f860e5452318b94d24fa91ba561e374dd5d611f79110f24f0a78f6645b072f521fa0b93f46cd29a2189089e2e3674d57b99c294b7afa4d0984512628", 0x1, 0xcd}, &(0x7f0000000780)="2fb8e0c032e10ac89badab72c846b7296a4368ce70efffa8ee0cb310ee3389f8db90623d98943b263e2c2aeac99c8992571934ffda8c82bdfa9f2a377be5aa055233012d09ecc1e4f474835a2efe9b0b6d0646de57e28c3067e8587ef7268e", 0x3, 0x5f}], 0x0) 19.786606045s ago: executing program 3 (id=2915): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000002c0)={0x0, 0x0, 0x3, "540147"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="000c0100000001"], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 17.292579312s ago: executing program 5 (id=2920): keyctl$dh_compute(0x15, &(0x7f0000000200), 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x40, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$I2C_FUNCS(r1, 0x705, &(0x7f00000000c0)=0x5) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x558, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x488, 0xffffffff, 0xffffffff, 0x488, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62, 0x0, 0x5}, 0x0, 0x358, 0x398, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f4, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'macvlan0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5b8) r5 = dup(r2) write$UHID_INPUT(r5, &(0x7f00000010c0)={0xb, {"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", 0x1000}}, 0x1006) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @local}}, 0x100, 0x6}, &(0x7f00000000c0)=0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r7 = socket$kcm(0x23, 0x5, 0x0) listen(r7, 0x800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r8, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) sendto$phonet(r8, 0x0, 0x0, 0x80, 0x0, 0x0) accept4(r7, 0x0, 0x0, 0x80000) read(r2, &(0x7f0000000480)=""/266, 0x10a) 15.629272069s ago: executing program 6 (id=2923): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0xfffffffffffffde4, &(0x7f00000002c0)=0xdc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e040235"], 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) getdents(r6, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0xb8}]}, &(0x7f0000000040)='GPL\x00', 0x2}, 0x94) rmdir(&(0x7f0000001640)='./my_configfs/target/core/rd_mcp_0\x00') mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 15.47961434s ago: executing program 3 (id=2924): write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="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", 0x14b) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf00d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00224c00000005200973a10185010a19031500250575089501b1020a16031500250575089501b10285020a5304150025057508950181020a5404150025057508950181020a550415002505750895018102c0"], 0x0}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x44, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xc1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 14.140408245s ago: executing program 5 (id=2926): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x80000000000003) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @private=0xa010101, 0x803, 0x3, 'lc\x00', 0x2, 0x7ff, 0x3e}, 0x2c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x88b02, 0x0) socket(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x4004090) 13.293696998s ago: executing program 4 (id=2928): socket$kcm(0x11, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000004}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x20, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800c080}, 0x4005) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x7) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mtdblock0\x00', 0x8000, 0x0) sendfile(r4, r5, 0x0, 0x110000) close(r4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) write(r6, &(0x7f0000000300)="5300000002000000", 0x8) 13.225398103s ago: executing program 5 (id=2929): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x3, 0x3}, 0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x10) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000780)={{0x8}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3123, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffff9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x7785, 0x8000000000, 0x5, 0x0, 0x0, 0x0, 0xdf, 0x808, 0xffffffffffffffff, 0x0, 0x800000000000, 0x80000000000, 0x0, 0x0, 0x9, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x84c2, 0x0, 0x1000, 0x0, 0x49, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x10004, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x2, 0x0, 0x0, 0x80000001]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0xc804, &(0x7f0000000500)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000240)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x1) 11.957690043s ago: executing program 7 (id=2930): memfd_create(0x0, 0x6) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/kmsg\x00', 0xc00, 0x24) lseek(r3, 0x0, 0x2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4000054) preadv(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x17f, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x6, @empty, 0x81e8}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x1}}], 0x18}}], 0x1, 0x40001) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="472e1abfd4b0058799aba982e918d1c05de077216ca09e387bfbb2a90c1e8f37be1ded25a64ab5fa9ff2459c3ed1cd3881969ab382ddb92c3a93700ac949ef9a9371b4de5e4d7f3c932f45f4b68ec43f5660746a60c42a055fe8b819cf5bc78cef1d607f7756c00a2c822918e040436e08a7ed7038ee9a80777b0eb66fe090f9ab05b1eed9eb391b5e21f0377f20720cb5fc31d3af29f3cf1110b252e9cba56423cdde75230e62174260e9bf52c4f60b17cdedc0fec5ab08185bfe532d011b559ae98a6addaa60405d1f", 0xca}, {&(0x7f0000000100)="f63315a9e1090e3e42d96f2db01430f1c2dc8da6965afea68a447d22fde4bcef3399aa1f02d0d72d7af27e4913af02de306a791519cb639a912201236929c326a348e9fd62a29383f6bdce9890edf646b87f88e7efc73c004aa4a6eee97fee6e0ec3b6a7a7d7eb00698911a072e50b53c30c975a4bfe5343368503dbff3e2e3bd5f3a1216b9769d588d225d8cc2fb63fc03436", 0x93}, {&(0x7f0000000200)="b6bb1c715bea1bb501629a2d2c07d30b7307c8339415be72613d889d05a55b6ad3e48dff1f5090712cedce554fc331cec1fb743e0260acde0dbf5e6dad6fd847b4bebde1b1346170eed4db544e1e77a93d12a62c26667d82489ebe6f120c51fbc06176", 0x63}, {&(0x7f0000000280)="db571e3b24b1ae399bfe2e6e04b8f81d5f5038de1995bd504bac84f6d8c577a0b473ab43c5da2b7b", 0x28}, {&(0x7f00000002c0)="4fbe4e53109c512767ce85753880bed26492320568c72a0444f8ae284c6778c160a949", 0x23}, {&(0x7f0000000300)="9da157ddf965a23b52c587e27f1789b5ffa69fddeb994afd0b31aa2e541a9ffd243c50ba", 0x24}, {&(0x7f0000000340)="e5014278dd5d59ddc8eb53a12f3320fcc321f289960f4de92362ed2cf39f3acf3b2b6b1adb0f6cd0824f19cf108091164bf4d0575a55ec569dc4c220f1d1ec4af4f8b2bebcc2d2865b5bb1", 0x4b}], 0x7) 11.83645113s ago: executing program 6 (id=2931): userfaultfd(0x801) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x23f5, 0xdd33, 0x1, 0xffffffffffffffff, 0x6}) ioctl$SG_BLKTRACESTART(r2, 0x1274, 0x0) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001100)=ANY=[@ANYBLOB="3c00000010001fff2cbd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c000000100003040000", @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 11.258340559s ago: executing program 3 (id=2932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x2, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004040}, 0x4000) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2000000014000100000000000000000023000000", @ANYRES32=0x1, @ANYBLOB="aa0000000000000404cbd454485a7472650b372698ebeaa0e78ab5f9004dc9834562aab05eb7f15ea232f575a62c17"], 0x20}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000002f00090073cc72e16a"], 0x40}, 0x1, 0x0, 0x0, 0x2004e884}, 0x0) socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, 0x0, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r5, &(0x7f0000000200)={0x23, 0x1, 0xac, 0x1}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$FIONCLEX(r2, 0x5450) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x20, 0x8000, 0x4, 0x656, {{0x2a, 0x4, 0x3, 0x36, 0xa8, 0x67, 0x0, 0xfe, 0x4, 0x0, @multicast2, @broadcast, {[@lsrr={0x83, 0x7, 0x6c, [@rand_addr=0x64010102]}, @cipso={0x86, 0x2c, 0xffffffffffffffff, [{0x7, 0xf, "0aff472bef551b9605bcba219a"}, {0x7, 0xf, "22d100a81070258194c720404e"}, {0x7, 0x8, "aeb2db2c2788"}]}, @ra={0x94, 0x4}, @cipso={0x86, 0xe, 0x3, [{0x5, 0x2}, {0x1, 0x6, "6e9e64ff"}]}, @noop, @timestamp_addr={0x44, 0x44, 0xcc, 0x1, 0x2, [{@empty, 0x8}, {@rand_addr=0x64010101, 0x2}, {@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@rand_addr=0x64010101, 0x9}, {@loopback, 0x3b}, {@rand_addr=0x64010101, 0x6}, {@broadcast, 0x7}]}, @timestamp={0x44, 0x8, 0xbe, 0x0, 0xc, [0x8]}]}}}}}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="15ffffff5500000327bd7000ffdbdf2507000000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="01000400e0000002000000000000000000b1fc8613000000"], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r9, 0x80047456, 0x7fffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 10.345679888s ago: executing program 7 (id=2933): memfd_create(0x0, 0x6) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/kmsg\x00', 0xc00, 0x24) lseek(r3, 0x0, 0x2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4000054) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000000)=""/194, 0xc2}], 0x1, 0x17f, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r4, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000000700)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x6, @empty, 0x81e8}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x1}}], 0x18}}], 0x1, 0x40001) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000000)="472e1abfd4b0058799aba982e918d1c05de077216ca09e387bfbb2a90c1e8f37be1ded25a64ab5fa9ff2459c3ed1cd3881969ab382ddb92c3a93700ac949ef9a9371b4de5e4d7f3c932f45f4b68ec43f5660746a60c42a055fe8b819cf5bc78cef1d607f7756c00a2c822918e040436e08a7ed7038ee9a80777b0eb66fe090f9ab05b1eed9eb391b5e21f0377f20720cb5fc31d3af29f3cf1110b252e9cba56423cdde75230e62174260e9bf52c4f60b17cdedc0fec5ab08185bfe532d011b559ae98a6addaa60405d1f", 0xca}, {&(0x7f0000000100)="f63315a9e1090e3e42d96f2db01430f1c2dc8da6965afea68a447d22fde4bcef3399aa1f02d0d72d7af27e4913af02de306a791519cb639a912201236929c326a348e9fd62a29383f6bdce9890edf646b87f88e7efc73c004aa4a6eee97fee6e0ec3b6a7a7d7eb00698911a072e50b53c30c975a4bfe5343368503dbff3e2e3bd5f3a1216b9769d588d225d8cc2fb63fc03436", 0x93}, {&(0x7f0000000200)="b6bb1c715bea1bb501629a2d2c07d30b7307c8339415be72613d889d05a55b6ad3e48dff1f5090712cedce554fc331cec1fb743e0260acde0dbf5e6dad6fd847b4bebde1b1346170eed4db544e1e77a93d12a62c26667d82489ebe6f120c51fbc06176", 0x63}, {&(0x7f0000000280)="db571e3b24b1ae399bfe2e6e04b8f81d5f5038de1995bd504bac84f6d8c577a0b473ab43c5da2b7b", 0x28}, {&(0x7f00000002c0)="4fbe4e53109c512767ce85753880bed26492320568c72a0444f8ae284c6778", 0x1f}, {&(0x7f0000000300)="9da157ddf965a23b52c587e27f1789b5ffa69fddeb994afd0b31aa2e541a9ffd243c50ba", 0x24}], 0x6) 10.280251362s ago: executing program 4 (id=2934): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_012={0x1, 0x1, 0x7, '8'}, @local=@item_4={0x3, 0x2, 0x1, "dae04070"}, @local=@item_012={0x2, 0x2, 0x3, '\fh'}, @main=@item_4={0x3, 0x0, 0x9, ')$Q)'}]}}, 0x0}, 0x0) 10.22589685s ago: executing program 5 (id=2935): syz_usb_disconnect(0xffffffffffffffff) write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="d6f5fbcf8c5f6b1eab996ddbb1a3fa9e7faef2c7e9b975084ebb6f5557284549957db0e43ddd82283e9404df9f48beef3bbdd77a64dd1807932d9fc1530c25d99c0108e15f903702feb5de78597f9aa52ffbbaa5b0228712aba726a32334d84e12920ffc0f4553e561dc7b6570bcaca912b5e63022bbf50cdbee9d0cc9586939fe7d49ccbde680e7e0cd18997741457262cdba41de28c9e3a6e1fe79bd5c5c2459f4f619fc95346792b3f20155bbaaa9a07248026b6159c403bea11fa2b5e85ba3e189f96d08063e2d3fc85078655058cd151e6e60ed04bd487becfe0ec08c6af41bd54fe99c4b94c18fa34940161469afcd05e1c1cd5a98ba5f28d768fcec333f2cb041afc799c8eea8f460e58de122899d699da77dcb9655b52b93be558a36c317426b69e9", 0x126) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf00d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb505920de0c1a003221010203010902120001000600000904"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000800)={0x20, 0x8, 0x6, "b148a929eb27"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00224c00000005200973a10185010a19031500250575089501b1020a16031500250575089501b10285020a5304150025057508950181020a5404150025057508950181020a550415002505750895018102c0"], 0x0}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x44, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xc1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.136265469s ago: executing program 7 (id=2936): socket$netlink(0x10, 0x3, 0x400000000000004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$userfaultfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$USERFAULTFD_IOC_NEW(r1, 0xaa00) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc02010111240201010200"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x39, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @random=0x3b, 0x4803, @void, @void, @val={0x3, 0x1, 0xe}, @void, @void, @val={0x5, 0x3, {0x7, 0xf3, 0xff}}, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0xda, 0x9d}}, @void, @void, @void, @void}}]}, 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x0) 9.039699409s ago: executing program 6 (id=2937): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="35874207", @ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYRES32=r1, @ANYBLOB="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", @ANYRES16=r1, @ANYRES16], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r8, 0x0, 0x0) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/sub_compatible_id\x00', 0x0, 0x0) read(r10, &(0x7f0000000700), 0x64) capset(&(0x7f0000000240)={0x20080522, r8}, &(0x7f0000000100)={0x200002, 0x6, 0x803, 0x9, 0x55ea}) 8.992626202s ago: executing program 3 (id=2938): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x121400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'erspan0\x00', 0x4400}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0xffffff07, &(0x7f0000000540), 0x2}, 0x3b61}], 0x4000048, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000d40)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="200e4a00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@map=r5, r4, 0x2f}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f088a847e089021416e0885a0400000000000081009fa79900", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) 8.005563665s ago: executing program 6 (id=2939): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="160000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000215c0000000c0a01030000000000000000070000010900020073797a31000000000900010073797a3000000000300003802c000080080003400000000220000b801c0001800a0001006c696d69740000000c0002800800044000000001140000001000010000000000000000000084000a"], 0xe0}}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setns(0xc9, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)='X\x00', 0xfdef}], 0x1) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000280)) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x704c3, 0xc4a48b7f26bf140b}}, 0x20}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net\x00') getdents64(r5, &(0x7f0000000040)=""/27, 0x1b) getdents(r5, &(0x7f00000005c0)=""/180, 0xb4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000400000008001200010000", @ANYRES32, @ANYBLOB="018000"/20, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="01000000010000000500"/28], 0x50) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000300), 0x42) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r6, &(0x7f0000003600)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f0000002600)="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"/4096, 0x1000}], 0x2) ioctl$SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setreuid(0x0, 0xee00) openat$cgroup_procs(r5, &(0x7f0000000340)='cgroup.threads\x00', 0x2, 0x0) 6.846865706s ago: executing program 4 (id=2940): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0xf809, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540), 0x0}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="54010000180001002bbd7000000000001d010300150004000100008000010000a67494fcd3a42289070000001e010600020100100071ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe16c93e15e556c2baed7f897fe841c155aab2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaaf"], 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRES32=r7], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="050000000000000000000f0000000800", @ANYRES32=r7, @ANYBLOB="2f026d8c1bc8b4972fc69ccce2e728568564b452324e4cf079f1091bf9a1a25c4e195eb9273620db52e22cad116606e840762840a14557ffd51ac4de1879aca764e80590d88b98349765c8de2fe65f5cc4f463307509d276222076dd80f4319da868a56fe1f5081f1a263e2a19004bcc354dfdaf20ec70"], 0x1c}}, 0x39db77225c63fa4c) 6.09061729s ago: executing program 7 (id=2941): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0xfffffffffffffde4, &(0x7f00000002c0)=0xdc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e040235"], 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) getdents(r6, &(0x7f0000000140)=""/117, 0x75) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) rmdir(&(0x7f0000001640)='./my_configfs/target/core/rd_mcp_0\x00') mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 5.895602184s ago: executing program 4 (id=2942): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12011001010000085707000a0000000000010902240001000000000904000702030002000921060005012218000905810300020000fe"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0xf, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x32, 0x62, 0x31, 0x33, 0x32, 0x61, 0x62, 0x32, 0x30, 0x39, 0x39, 0x37, 0x35, 0x622adb5809077277, 0x38, 0x37]}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccdd2b4f1e562233445566778899aabbccddeeff00001168b07846d524b29db701e5ddeeff8000", 0x44}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x64, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x36, 0x63, 0x37, 0x66, 0x34, 0x61, 0x53, 0x31, 0x37, 0x66, 0x32, 0x66, 0x64, 0x32, 0x34]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='7', 0x1) shmget$private(0x0, 0x1000, 0x78001900, &(0x7f0000ffe000/0x1000)=nil) add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @desc3}, &(0x7f0000000800)={0x0, "92e519a6d305e905204f5e46fc4083d981e1a4b851e8de84e99119e779d01efe5755bfb476c1be3901f241fffb6f7ec2e472b606a76ac8e56b9b182aefb78488", 0x13}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x31, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x32, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x18}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x53, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x32, 0x36, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="62202a3a2a20000011cd7094fe9edee58c80cfb6890000000000000000fac752165aeb78f6355035dddf7ce8faf9eec3cecc"], 0x8) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [{0x20, '}#:,/@'}, {0x20, 'keyring\x00'}, {0x20, '\x00'}, {0x20, '#@.!@'}, {0x20, '!]'}, {}], 0xa, "f39d2440da930bc6ddc2d0ef12e97aa4f8b09a2e01cca13e221ecbaf439046b68806e18367bd50f88e8cf98661352820b02387b7a6"}, 0x5c) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x30, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x51, 0x30, 0x37, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x34, 0x30, 0x61, 0x30, 0x31, 0x30, 0x62, 0x66, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddaeff00112233445566778899aabbccddeeff00112233445566778899b1bbccddeeff00112233445566778899aabbccddeeff", 0x41}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x2f}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x2b}, 0x48, r2) keyctl$unlink(0x9, r3, r2) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00221700f910487bea462d03b1f300"/29], 0x0}, 0x0) 5.803413848s ago: executing program 5 (id=2943): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000080)={0x60, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.052367717s ago: executing program 3 (id=2944): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="160000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000215c0000000c0a01030000000000000000070000010900020073797a31000000000900010073797a3000000000300003802c000080080003400000000220000b801c0001800a0001006c696d69740000000c0002800800044000000001140000001000010000000000000000000084000a"], 0xe0}}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)='X\x00', 0xfdef}], 0x1) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000280)) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x704c3, 0xc4a48b7f26bf140b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net\x00') getdents64(r4, &(0x7f0000000040)=""/27, 0x1b) getdents(r4, &(0x7f00000005c0)=""/180, 0xb4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000400000008001200010000", @ANYRES32, @ANYBLOB="018000"/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="01000000010000000500"/28], 0x50) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000300), 0x42) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r5, &(0x7f0000003600)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f0000002600)="0810b841e7b8c5afc0bbe5f1230e1b8bad301dd4de3cac61856df1e3444083303ca13006b2fe5ee12dc16199c3109ecee03ca163ce34f8d9a13b4d000f43204c7d07393297be382e0694882890a8d59bbb94c37b1a57bb9ac552c63813199ff63b5ad0d448cd615a1790c81c8c7394956add6009b83951e2e668f0381b6d2ca79e890aacea24ab716ec77a9d14a03f228b0836971552d52fb595483f9e57a98dbf8f1b2af86315f96bb97ff704ac39b371fbf0cbf83efda3981c7fbf732cfb370f5c52d0f2708e984c8d6bc60b59ab867faa4e8516ca2ca8410b06859880b7f8e419213319e42901f93a01ba5e9b0fb4eb11beea0845dded4a1840ded5439fd43991a143787bc6929506a8847521d494ce671fb1ad2cda8ba856a01a07af82406397db4643c142d3912f610e3ae9e8508d48a9c0954f268fd346e787338be74716faf0ae4ff6fcc57ef2022966c24717dbd7f6c0100fd28c36e409710f1005eb56ce9f8decc88df27e820c45f27a312ed524689a61c0a16205270e6e1e7a62b7bf2cd0bbf8c975d98056927c5fe9cbb7c70e0cfc4d34c97c357adf1c725297de8f3ba8efcad842b9962dd726e160287b1af0b9791f8f5880a606987b4d3b85aafa7edf1f1033af5a290e3de6f1520caf1c9c2a696dc04e37750084b563c268eb0295f2b63e9f76e59a764a753e36d2bed3a3e199192c1629a876b91f5406c94c5757f32c1849b554835a4ac1b2f69a781255b859170315abbbb52667fd11b15280cd79ea86451e937e5667a7690caec45277aae3fdadefed9e9289b2040a25da405a14a163dfcb1499c4de313a6aa5ef58ce3cd86615a5bd8063e42638824df548f8abd5fdbd7158fa28c74eb29340418c87d4518c4aa9bbb4e01bcf559048116b768837cf599a439d52271db13fc7e0bff95e677a31f87b6e097e22253485864c8a8a275309cf8fcffbb2f3351149d3386010f1bc2c3359495e49639976f592597bf971b271723ee8963fb4e979e32433042ac943bba51d21a4ac5286317497b852333fbb42ef03ccbd3f220d0c50277a1dc0eb1a5498e29e1a6d4f2178ea43bac36fd9d816cfae4627362c4b4f3ed8a8aa27e59da6e102e1ef20561a5e7c1a2260dbcf2343ab56b7c13bbfe7b509966ba20093cfaf4717ce8011c54378c09ad51161b328db9a3906df705ff6a3df5f6ce19d8c1d2a72601b4149549ee43dab62b9701511b1c1ebf6530ff9480c171b5c68aa5901d84819af9a42cffe35d3a4d867cd1812cf1e3aea15ee56b93ee0d65915371d87f5e96e8a85da5ba89886dddbb0a7ad5d77f6766e7132e5e56c4c605d434b9a3726960573d96dc2033bfc9fa1d7eefcb9491eb2dc55a43cddcba4cab7c1155b3254d37865f6045e2f4c31a25004c02392b8942673b3210b3c51e83ca5c54e817485bf247eacdab175a5eae063230c8ac45d0d2e0f76404eaf49f40434733d8e69309775b5dfa38368d0fa385787c937194c000b111fd512a9260e98b64cc9498f727b21573b779e8250a00c2c5e583f324695e28e19f550fc1536943db7ab7bdf3e0543b0bffec465bff037b6600eb5d6d37ef6ba6503fc4a395c4f011b138718265d7ca11dba0d0bfa5e97e8d653309e206bc6701742abdcacf9261b834acbc602bcbdcc74c8f360df1821306db69afd520a823269b714c54e88dfab17880ec2023477d952976b673261955909184858a87e902d3b272056447c882676297a466305d292f725facc26dc10413ff8e4b4cd9871ca8d14b59df62cf19cae6b3b548b34032ff1d64640c1d734c730eca28b43148e20309f10c3be7823407314c9b6f7b7568d59d9dac5a5dc4d802ee5ef00dc6e800bf5948cfd4bf42e3d82500cf3bf6922afbd715c431ebdc6ebea8c858b7f7647df975e85aad2781a29ec497393cb2834fcfc6817c8e659f158ac918392afed4b6be6ec4914a39898e1de46ab5bb7d560e6dbbc1d5ac7537fb0ddea37cbc47d153edcdda2c21590ca39e96a22e0e6383a4781dd85239d47cf377d3673a6603cc39c3dd3be97403e8503cdfad3c470b225c47bbd55f903f9eb981c2c9ac084ee2bcbe94ce0777e4ebefd04621a21a0c22e2b700a265529e855f0f48f3c49659defe8814ddf38acfc3625785d7fda9e3b22f6a4e8bc4d24d307a1445cc9b24b01a27462d7bbb38c21357712cb23c9214987678ef3a24bbf5e1afa2f6fce13d5a993ac3295b6a5696f930f95891844d354d4770f54c3d82eee4532fda5e3c588e5ddd5d0c8aead2b5a638c3a6b000a4ba4f4f3b949d42a95b2db3d36770dd0a0fa38aa3c4a1861bceb8e65953bfab32a24a32b0e6a541a0fdcef20aa1660f85cc3e67fbced6544686009cb7a2679a946e5d450b57a5ff26221bc2892289d6976c8c6533cd1d99b5a318486e3f815b2aca4ed829a02397d8777f5e51182d0a642676d8bc777088e5553fb06aca344c11e008f4986f658dad61537955034003a8d6733456e1be6d34e5003d83ac0553e06226a64b075aebe51cd2ca4dc125bd2e5216d8badb9ae0bd6037f1f2a521fcce6c3dbf50bcd3eee15217b3e905b23cc48b277c28fae49e7c848849024a9b63118a83c8ad22c62dc827ab1d3087a3ee5dc441f618bc5f1b905208af39d39fa6ef98b14cfab17086f8560219378ddf6441fd9c42492ca0c93a3b8f34f52ff2e0487f7889283170fbe3d0a6bbc4a853bd722aa3099bf9a67a00f3d197170b7091f627e72a4f1183184022f4bf357ffb2f91f8ec56caf3a25316a7d4aa97105bb6992aac4c3bb549ac0f44c893118668bc5a0f80fd36fe417dc161f58d32bbdde887ca24d4847e5d2cfe1d403d9f1e36f093f333e6b2628b86d6aa04f20ff7315e673c7aeb422f43f841a1d88800eae67b67ac9bea8376f0ceefcd6d0fa9eafd7cc840ae5e94903b2b105c19c9b4cc513a3ba128fc442ec44bc3dd31e7fa0aa7cc48f76dee7cdb50373cf1d38792060f31ccf0790bed8b1650fd9b89f29318854dc20ff3bc4494812168d0cc2cf5067eb456f9bff76a667ca9591bad8345f9ca6188ea64152183515ccf1bdb322bf211204ae1aa4ba283abd792ed119004662c90f2bf62140ed8373968e546f1717547c91043f54436d9fc55dde66bb855f580afd9d13817fb58365bae446bb81207fd55c63cb55010dd4b557ab83b11f6c121ab5e944231e3ec4fe26b9063f02ea8bb63a4b63220936ad293a2feba07eff6b8cb6ee1384f4e6851b1b8e26c8e1489cdc8baf3a1aeb86fb909ab59ea46b792460135a674c58aa70ed9366f2bce27c6f561a33f196ac615191080400c8483f918731a3495b15bb9ac61bd274696eb4a1e50a2bc2bb4c03b48852c3d3f57339759ef93e3a6b41338770b6dc055d7b3c8d5a39fd8e8ae97df853e8190d2ced216f33d2094b910b44e456e0b60cf969908269efca0569d001611ddd15764ed7cc76532aaceaa576e78a173ff4dfa5217a8448a6544a57ad05df3c78b619480d5011c2751c190f005a750f4abd00f93463569d29d661381449c2160873d8950e804f845c54ec5dd9181d92f362163ffba4a8ea3c601adde3b9a5640e63d278b0baf3ab18b9be07142167312c6a7bdef87eb164ab45b47f342e0bb78699d9d03ae604056e3573fdd63f21bc84e63fd0bcd105e9000b6a3bbb3cc24d03b3bec5e8a05bf8d3bd803add92332073dd08dab92baf9ac665e2b5813e740730bb229568e1c98858d1da77de414238a26f4c540421a12b19c3fde2a3b13f756d8cad00fc2b1459de44e377d3ec2fa958aab5a978b23512ede49810d3f788a193b4d58b9a130d47f965a8ed368504d4ecfa4eef6e37bf9222323da97d284c99f0f89308d6a9cf6168a5900ea1f518f5ca8579e898743c5732111c90b567250ba005963459d1096e2bd017b4504a5e8e08c627fa552f93533277f8a68613d697c0c57b17865e6eb71533825acb662c3bf262d3ea8f043685b0580d0174b4e7c5109226013e5188ae01bfc63335b894c69bcd555af1b9bc60693a8b740baaf5796708975e3ccfecbbd3442e8879803be80609f2c1af7456964336df89708bbb6e505e7d86d925b86689dae9d69b065a9096578403de05be543792ebc5fedad1dded4114b7ce2982b486810f558d139ed3dc5f49907d6b822e8cd0da90d8247e37ae5972fde80a3a67b6363faecb6dbda474081d443f3cf81773bb21f5f0eb0e5698c0f0c129e4d6b9d05d9e7fdc04980276f6560f456303095ff630798c9a48010fd8b1660a08a80e607ea227d49abd05c1adffffc4dc3bf9383139e7b5b1673ca37e14ffc7cb83be001d1c6e8d102a168ba06a9d920ba6140c608a2f60aba3a5f20babe13ba0c7aba2ca670d5ceac33282108c5b6494eeb28563f7db7cf7cf9c3a736363db403d19b55597648d293de9db7e479202e5b9281bed2212421fe4494cd981a37ba31f6f4f023ef4abd8bce8d8cc3d76048b8963ab3d5a1e05a6bde0296f27beeae20b2d8aab90c1051f9656c32c11d189d31282bff1bdcb924f61a1869a243131d86456eb0c0ab8220c45f115b6332b2998a400cc99ebc1ec3f74ed60969d852609c451e84d33ff363323b1c6e414f5e3ca10f07ccd3f42301c7a058f24f6523b59bce24d436e0466bc43a1abc4812a193f1b95f3f98e751e5d3c51b997399a13d223345ee11e706db9865437f26e8337865da6f13dc69a96d9aa1b0e1fa94147626d0eba9c6f2c2478a16d2a6bf3435577f8fabdbe5a1c7581f563381944e52d6e031a839d174826db86d763616eb8936f937090adfc1d7863c0feae5796cdf1719dcf5b9d48ee786f5ad7ac1fc411a8b229cfc75d03b3a8939dcc7affcd7bc78d3a8b2372708fd6996d59ad7eca1878a6437467151f9b6cfb99fd5e5a8b4ea0758fe6c7ee7a364bce3768ab795cd4a5876ea78dcb967b43de7a954f923d0d50e1fe2ddbb66f87c746cf0b45e49a7b8ae45dfce4d41331da071011f3db9ce31e657f96718c23cc56ceef5664d8b473bebe8849b228d34728e5f3f1fa1dc2693553a6d1cc32a759e2dc01b059d6db78d60ce996f080d60e5b7c101e1428b498670d3f2e0390bca39f2fdc2011642feea44b6bcc05ea16fbc76d79b045dcd1fd4bfe8658785fe62fb73387b710371909c168673c4bbd84ccfa8d18295577613583162d938dad1c8a2ea2794c9e19f528d99785a930e6cca9991b144de35700ffb26f5ecc9a2e6b609d6bc520dd065a3210b640bfee1b4ded87a536a7cd11e2a659b5bff8caff79adc4aae4747ca6ed8d345a9eaad4e900bc55301883412d1cd878c4f6beaacbc0425400c653618c094198da45a96a35d4752d8527f97b6ca3845e9611e7a774961951705dd43e05ac25b731e83e882e57b61cb77075f18909e54b22147455bce0f5536ed608a82d49ec02d954736bb8f4939857ca6147f75c01819a5dd2e423800c427f2dd703291d976377febcfc42d2edbf19346b4407b76b47612db91073ee7cb80a0e2575c707eb3d6693795106d5058cf384404f49d12cdce59dc61d692df28680e24f1cc4fa98bce1bc1fd15448b264d8bd886c475a3c8a46a640469f13f1213a893eb8d79b5676aa691b8bfc4be0e293cffd3a22ec87a114d0c35c066374c90d7c99083cc97516ec254fa6c61df11184a993cc1274defed12af9481dd7792bb008c5a3053fc48aa294be1cad7e68d5f1cd40522f08d0cfd266681cdbc5ab0f9adfd57846851b2aa20a79fcc70f0314ea6ebb2ec9534d00"/4096, 0x1000}], 0x2) ioctl$SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setreuid(0x0, 0xee00) openat$cgroup_procs(r4, &(0x7f0000000340)='cgroup.threads\x00', 0x2, 0x0) 3.847851419s ago: executing program 6 (id=2945): socket$kcm(0x11, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000004}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x20, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800c080}, 0x4005) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x7) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mtdblock0\x00', 0x8000, 0x0) sendfile(r4, r5, 0x0, 0x110000) close(r4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) write(r6, &(0x7f0000000300)="5300000002000000", 0x8) 3.049106783s ago: executing program 4 (id=2946): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='gadgetfs\x00', 0x10005, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) 2.891664259s ago: executing program 7 (id=2947): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='gadgetfs\x00', 0x10005, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000280)={0xffffe8d3, 0x1, 0x83, "ac9b94aaad0b79ae3a00000000000000dcfa577900", 0x31324d59}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004100), 0x0, 0x0) mkdir(&(0x7f0000000000)='./proc_mnt\x00', 0x1ff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0xe41, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r7, 0x4018f50b, &(0x7f0000000000)={0x0, 0x8, 0x9}) ioctl$KDDISABIO(r4, 0x4b37) mount(0x0, &(0x7f0000000100)='./proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000010c0), 0x806280, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2.769995895s ago: executing program 6 (id=2948): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x2, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004040}, 0x4000) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2000000014000100000000000000000023000000", @ANYRES32=0x1, @ANYBLOB="aa0000000000000404cbd454485a7472650b372698ebeaa0e78ab5f9004dc9834562aab05eb7f15ea232f575a62c17"], 0x20}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000002f00090073cc72e16a"], 0x40}, 0x1, 0x0, 0x0, 0x2004e884}, 0x0) socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, 0x0, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r5, &(0x7f0000000200)={0x23, 0x1, 0xac, 0x1}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$FIONCLEX(r2, 0x5450) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x20, 0x8000, 0x4, 0x656, {{0x2a, 0x4, 0x3, 0x36, 0xa8, 0x67, 0x0, 0xfe, 0x4, 0x0, @multicast2, @broadcast, {[@lsrr={0x83, 0x7, 0x6c, [@rand_addr=0x64010102]}, @cipso={0x86, 0x2c, 0xffffffffffffffff, [{0x7, 0xf, "0aff472bef551b9605bcba219a"}, {0x7, 0xf, "22d100a81070258194c720404e"}, {0x7, 0x8, "aeb2db2c2788"}]}, @ra={0x94, 0x4}, @cipso={0x86, 0xe, 0x3, [{0x5, 0x2}, {0x1, 0x6, "6e9e64ff"}]}, @noop, @timestamp_addr={0x44, 0x44, 0xcc, 0x1, 0x2, [{@empty, 0x8}, {@rand_addr=0x64010101, 0x2}, {@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@rand_addr=0x64010101, 0x9}, {@loopback, 0x3b}, {@rand_addr=0x64010101, 0x6}, {@broadcast, 0x7}]}, @timestamp={0x44, 0x8, 0xbe, 0x0, 0xc, [0x8]}]}}}}}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="15ffffff5500000327bd7000ffdbdf2507000000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="01000400e0000002000000000000000000b1fc8613000000"], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r9, 0x80047456, 0x7fffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 1.228588414s ago: executing program 4 (id=2949): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @private=0xa010101, 0x803, 0x3, 'lc\x00', 0x2, 0x7ff, 0x3e}, 0x2c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x4004090) close(0x3) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)={0x230, 0x7d, 0x0, {{0x500, 0xef, 0x3, 0x0, {0x0, 0x0, 0x7}, 0xc0900000, 0x0, 0x0, 0x4, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00t\xe7\xc7\x05!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xee00}}, 0x230) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0) mq_open(0x0, 0x8c2, 0x30, 0x0) 1.028017485s ago: executing program 5 (id=2950): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x6) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_rxfh_indir={0x39}}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22004094}, 0x8000051) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="24000000373aa400050000000000ef007f00252c932f0d4e698b829e77000000000000", @ANYRES32=r0, @ANYBLOB="06002626"], 0x24) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e20, 0xffffffff, @loopback, 0x2}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) setresuid(0x0, 0xee00, 0x0) 0s ago: executing program 7 (id=2951): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) (fail_nth: 2) kernel console output (not intermixed with test programs): /dev/sg0" dev="devtmpfs" ino=935 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1321.160573][ T30] audit: type=1400 audit(1791487917.168:16010): avc: denied { ioctl } for pid=16722 comm="syz.3.2816" path="socket:[60203]" dev="sockfs" ino=60203 ioctlcmd=0x6185 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1321.219621][ T30] audit: type=1326 audit(1791487917.228:16011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16717 comm="syz.5.2815" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035639e199 code=0x7ffc0000 [ 1321.219709][ T30] audit: type=1326 audit(1791487917.228:16012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16717 comm="syz.5.2815" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035639e199 code=0x7ffc0000 [ 1321.363972][T16727] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2815'. [ 1321.376703][T16730] netlink: 'syz.7.2817': attribute type 1 has an invalid length. [ 1321.382450][T15335] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 1321.382469][T15335] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 1321.446713][T15335] cxacru 4-1:1.0: probe with driver cxacru failed with error -71 [ 1321.464302][T15335] usb 4-1: USB disconnect, device number 42 [ 1321.484875][T16733] netlink: 'syz.7.2817': attribute type 10 has an invalid length. [ 1321.484896][T16733] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2817'. [ 1321.533018][T16730] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1321.536624][ T5790] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1321.658699][T16731] bond3: (slave veth7): Enslaving as an active interface with a down link [ 1321.695805][ T5790] usb 7-1: Using ep0 maxpacket: 16 [ 1321.698391][ T5790] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1321.701373][ T5790] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1321.701415][ T5790] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.718762][ T5790] usb 7-1: config 0 descriptor?? [ 1321.747304][T16736] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1322.295137][T15335] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1322.365622][ T5790] hid_parser_main: 590 callbacks suppressed [ 1322.365646][ T5790] hid-sensor-hub 0003:0C70:F00D.003C: unknown main item tag 0x0 [ 1322.365670][ T5790] hid-sensor-hub 0003:0C70:F00D.003C: unknown main item tag 0x0 [ 1322.365690][ T5790] hid-sensor-hub 0003:0C70:F00D.003C: unknown main item tag 0x0 [ 1322.365710][ T5790] hid-sensor-hub 0003:0C70:F00D.003C: unknown main item tag 0x0 [ 1322.365730][ T5790] hid-sensor-hub 0003:0C70:F00D.003C: unknown main item tag 0x0 [ 1322.365750][ T5790] hid-sensor-hub 0003:0C70:F00D.003C: unknown main item tag 0x0 [ 1322.365770][ T5790] hid-sensor-hub 0003:0C70:F00D.003C: unknown main item tag 0x0 [ 1322.365790][ T5790] hid-sensor-hub 0003:0C70:F00D.003C: unknown main item tag 0x0 [ 1322.365810][ T5790] hid-sensor-hub 0003:0C70:F00D.003C: unknown main item tag 0x0 [ 1322.365830][ T5790] hid-sensor-hub 0003:0C70:F00D.003C: unknown main item tag 0x0 [ 1322.377670][ T5790] hid-sensor-hub 0003:0C70:F00D.003C: collection stack underflow [ 1322.377693][ T5790] hid-sensor-hub 0003:0C70:F00D.003C: item 0 1 0 12 parsing failed [ 1322.378309][ T5790] hid-sensor-hub 0003:0C70:F00D.003C: parse failed [ 1322.378375][ T5790] hid-sensor-hub 0003:0C70:F00D.003C: probe with driver hid-sensor-hub failed with error -22 [ 1322.700693][T14629] Bluetooth: hci1: unexpected event for opcode 0x0035 [ 1322.755124][ T5790] aquacomputer_d5next 0003:0C70:F00D.003C: collection stack underflow [ 1322.755151][ T5790] aquacomputer_d5next 0003:0C70:F00D.003C: item 0 1 0 12 parsing failed [ 1322.755911][ T5790] aquacomputer_d5next 0003:0C70:F00D.003C: probe with driver aquacomputer_d5next failed with error -22 [ 1322.853307][T15335] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1322.853334][T15335] usb 8-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1322.871548][T15335] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1322.890054][T15335] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.890079][T15335] usb 8-1: Product: syz [ 1322.890092][T15335] usb 8-1: Manufacturer: syz [ 1322.890105][T15335] usb 8-1: SerialNumber: syz [ 1322.915302][ T5790] usb 7-1: USB disconnect, device number 25 [ 1323.274419][ T5701] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1323.362601][T15335] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1323.377849][T15335] usb 8-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1323.377878][T15335] usb 8-1: found format II with max.bitrate = 4, frame size=7372 [ 1323.378706][T15335] usb 8-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1323.435679][ T5701] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1323.439103][ T5701] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1323.439122][ T5701] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1323.441551][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.441575][ T5701] usb 5-1: Product: syz [ 1323.441589][ T5701] usb 5-1: Manufacturer: syz [ 1323.441604][ T5701] usb 5-1: SerialNumber: syz [ 1323.503296][ T5701] usb 5-1: config 0 descriptor?? [ 1323.509660][T16747] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1323.509735][T16747] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1323.549751][T15335] usb 8-1: USB disconnect, device number 32 [ 1323.614628][T15796] udevd[15796]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1323.741879][T16747] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1323.741948][T16747] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1325.067794][ T5701] Error reading MAC address [ 1325.906707][ T30] kauditd_printk_skb: 115 callbacks suppressed [ 1325.906725][ T30] audit: type=1400 audit(1791487921.918:16127): avc: denied { execute } for pid=16755 comm="syz.3.2825" name="file1" dev="tmpfs" ino=214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1326.182213][ T30] audit: type=1400 audit(1791487922.188:16128): avc: denied { create } for pid=16770 comm="syz.7.2826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1326.182635][ T30] audit: type=1400 audit(1791487922.188:16129): avc: denied { write } for pid=16770 comm="syz.7.2826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1326.182973][ T30] audit: type=1400 audit(1791487922.188:16130): avc: denied { create } for pid=16770 comm="syz.7.2826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1326.184038][ T30] audit: type=1400 audit(1791487922.188:16131): avc: denied { bind } for pid=16770 comm="syz.7.2826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1326.259857][ T30] audit: type=1400 audit(1791487922.258:16132): avc: denied { listen } for pid=16770 comm="syz.7.2826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1326.292879][ T30] audit: type=1400 audit(1791487922.298:16133): avc: denied { accept } for pid=16770 comm="syz.7.2826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1326.311022][ T30] audit: type=1400 audit(1791487922.308:16134): avc: denied { connect } for pid=16770 comm="syz.7.2826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1326.312534][ T30] audit: type=1400 audit(1791487922.308:16135): avc: denied { create } for pid=16770 comm="syz.7.2826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1326.315779][ T30] audit: type=1400 audit(1791487922.308:16136): avc: denied { write } for pid=16770 comm="syz.7.2826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1326.958537][ T5701] usb 5-1: USB disconnect, device number 22 [ 1326.994379][T13940] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1327.155754][T13940] usb 4-1: Using ep0 maxpacket: 8 [ 1327.157393][T13940] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1327.158524][T13940] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1327.158559][T13940] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1327.158582][T13940] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1327.158605][T13940] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1327.158640][T13940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.375592][T13940] usb 4-1: GET_CAPABILITIES returned 0 [ 1327.375633][T13940] usbtmc 4-1:16.0: can't read capabilities [ 1327.494333][ T5701] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1327.646423][ T5701] usb 5-1: Using ep0 maxpacket: 32 [ 1327.652725][ T5701] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1327.653794][ T5701] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1327.653832][ T5701] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1327.653855][ T5701] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1327.657092][ T5701] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1327.668567][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.668590][ T5701] usb 5-1: Product: syz [ 1327.668602][ T5701] usb 5-1: Manufacturer: syz [ 1327.668614][ T5701] usb 5-1: SerialNumber: syz [ 1327.682238][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1327.688660][ T5701] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input151 [ 1327.716990][T15335] usb 4-1: USB disconnect, device number 43 [ 1327.787096][T16788] netlink: 2 bytes leftover after parsing attributes in process `syz.7.2831'. [ 1327.905036][T13940] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1328.013523][T16778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.013738][T16778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.034339][ T5701] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1328.034352][ T5701] (id 0x00) [ 1328.184318][T13940] usb 7-1: Using ep0 maxpacket: 32 [ 1328.188342][T13940] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1328.189218][T13940] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1328.189258][T13940] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1328.189283][T13940] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1328.189316][T13940] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1328.189337][T13940] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1328.191361][T13940] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.191383][T13940] usb 7-1: Product: syz [ 1328.191398][T13940] usb 7-1: Manufacturer: syz [ 1328.191413][T13940] usb 7-1: SerialNumber: syz [ 1328.195898][T13940] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 1328.195938][T13940] imon 7-1:155.0: unable to initialize intf0, err -90 [ 1328.195946][T13940] imon:imon_probe: failed to initialize context! [ 1328.195954][T13940] imon 7-1:155.0: unable to register, err -19 [ 1328.334977][ T5701] rc_core: IR keymap rc-imon-pad not found [ 1328.334989][ T5701] Registered IR keymap rc-empty [ 1328.335022][ T5701] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1328.335033][ T5701] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1328.355132][ T5701] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 1328.366213][ T5701] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input152 [ 1328.384835][ T5701] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:23> initialized [ 1328.497996][T16794] FAULT_INJECTION: forcing a failure. [ 1328.497996][T16794] name failslab, interval 1, probability 0, space 0, times 0 [ 1328.498027][T16794] CPU: 0 UID: 0 PID: 16794 Comm: syz.3.2832 Tainted: G L syzkaller #0 PREEMPT(full) [ 1328.498051][T16794] Tainted: [L]=SOFTLOCKUP [ 1328.498058][T16794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1328.498069][T16794] Call Trace: [ 1328.498075][T16794] [ 1328.498083][T16794] dump_stack_lvl+0x100/0x190 [ 1328.498113][T16794] should_fail_ex.cold+0x5/0xa [ 1328.498139][T16794] should_failslab+0xc2/0x120 [ 1328.498164][T16794] __kmalloc_noprof+0xfc/0x840 [ 1328.498186][T16794] ? bpf_test_init.isra.0+0x88/0x100 [ 1328.498211][T16794] bpf_test_init.isra.0+0x88/0x100 [ 1328.498235][T16794] bpf_prog_test_run_skb+0x48e/0x3530 [ 1328.498262][T16794] ? lock_acquire+0x1d1/0x380 [ 1328.498283][T16794] ? __fget_files+0x34/0x3d0 [ 1328.498308][T16794] ? find_held_lock+0x2b/0x80 [ 1328.498334][T16794] ? __fget_files+0x121/0x3d0 [ 1328.498363][T16794] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1328.498393][T16794] ? fput+0x7c/0x100 [ 1328.498420][T16794] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1328.498442][T16794] __sys_bpf+0x2265/0x4a30 [ 1328.498475][T16794] ? __pfx___sys_bpf+0x10/0x10 [ 1328.498492][T16794] ? find_held_lock+0x2b/0x80 [ 1328.498516][T16794] ? get_pid_task+0xfc/0x250 [ 1328.498539][T16794] ? get_pid_task+0xfc/0x250 [ 1328.498566][T16794] ? find_held_lock+0x2b/0x80 [ 1328.498596][T16794] ? rcu_read_lock_any_held+0x6a/0x90 [ 1328.498622][T16794] ? find_held_lock+0x2b/0x80 [ 1328.498648][T16794] ? ksys_write+0x190/0x250 [ 1328.498668][T16794] ? ksys_write+0x190/0x250 [ 1328.498689][T16794] ? lock_acquire+0x1d1/0x380 [ 1328.498726][T16794] ? fput+0x7c/0x100 [ 1328.498749][T16794] ? ksys_write+0x1ac/0x250 [ 1328.498773][T16794] ? __x64_sys_bpf+0xce/0x140 [ 1328.498792][T16794] __x64_sys_bpf+0xce/0x140 [ 1328.498812][T16794] ? do_syscall_64+0xae/0x790 [ 1328.498835][T16794] do_syscall_64+0x123/0x790 [ 1328.498857][T16794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.498876][T16794] RIP: 0033:0x7f21f6b9e199 [ 1328.498893][T16794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1328.498911][T16794] RSP: 002b:00007f21f4df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1328.498930][T16794] RAX: ffffffffffffffda RBX: 00007f21f6e25fa0 RCX: 00007f21f6b9e199 [ 1328.498942][T16794] RDX: 0000000000000022 RSI: 00002000000000c0 RDI: 000000000000000a [ 1328.498954][T16794] RBP: 00007f21f4df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1328.498964][T16794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1328.498975][T16794] R13: 00007f21f6e26038 R14: 00007f21f6e25fa0 R15: 00007ffde475d7c8 [ 1328.499000][T16794] [ 1328.503459][T16785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.515993][T16785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.639179][T16778] imon:vfd_write: invalid payload size [ 1328.656089][T16778] imon:display_open: display port is already open [ 1328.660402][ T5701] usb 5-1: USB disconnect, device number 23 [ 1329.794481][ T5780] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1329.944345][ T5780] usb 8-1: Using ep0 maxpacket: 8 [ 1329.944810][ T5780] usb 8-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 1329.945647][ T5780] usb 8-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1329.945673][ T5780] usb 8-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1329.945696][ T5780] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1329.945714][ T5780] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.947080][ T5780] usb 8-1: config 0 descriptor?? [ 1330.030393][T16804] FAULT_INJECTION: forcing a failure. [ 1330.030393][T16804] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1330.030448][T16804] CPU: 0 UID: 0 PID: 16804 Comm: syz.5.2836 Tainted: G L syzkaller #0 PREEMPT(full) [ 1330.030475][T16804] Tainted: [L]=SOFTLOCKUP [ 1330.030482][T16804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1330.030493][T16804] Call Trace: [ 1330.030507][T16804] [ 1330.030515][T16804] dump_stack_lvl+0x100/0x190 [ 1330.030549][T16804] should_fail_ex.cold+0x5/0xa [ 1330.030580][T16804] get_futex_key+0x1d0/0x14f0 [ 1330.030610][T16804] ? __pfx_get_futex_key+0x10/0x10 [ 1330.030638][T16804] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 1330.030668][T16804] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 1330.030699][T16804] futex_wait_setup+0x91/0x540 [ 1330.030727][T16804] __futex_wait+0x19f/0x300 [ 1330.030750][T16804] ? __pfx___futex_wait+0x10/0x10 [ 1330.030768][T16804] ? __pfx_try_to_wake_up+0x10/0x10 [ 1330.030789][T16804] ? futex_hash+0x311/0x400 [ 1330.030817][T16804] ? __pfx_futex_wake_mark+0x10/0x10 [ 1330.030843][T16804] ? find_held_lock+0x2b/0x80 [ 1330.030872][T16804] ? futex_wake+0x4ea/0x5e0 [ 1330.030898][T16804] futex_wait+0xe6/0x370 [ 1330.030920][T16804] ? __pfx_futex_wait+0x10/0x10 [ 1330.030946][T16804] ? rcu_read_lock_any_held+0x6a/0x90 [ 1330.030977][T16804] ? find_held_lock+0x2b/0x80 [ 1330.031001][T16804] ? ksys_write+0x190/0x250 [ 1330.031022][T16804] ? ksys_write+0x190/0x250 [ 1330.031046][T16804] do_futex+0x265/0x440 [ 1330.031075][T16804] ? __pfx_do_futex+0x10/0x10 [ 1330.031103][T16804] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1330.031132][T16804] __x64_sys_futex+0x34f/0x4d0 [ 1330.031162][T16804] ? fput+0x7c/0x100 [ 1330.031189][T16804] ? __pfx___x64_sys_futex+0x10/0x10 [ 1330.031216][T16804] ? ksys_write+0x1ac/0x250 [ 1330.031237][T16804] ? __pfx_ksys_write+0x10/0x10 [ 1330.031267][T16804] do_syscall_64+0x123/0x790 [ 1330.031291][T16804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1330.031310][T16804] RIP: 0033:0x7f035639e199 [ 1330.031326][T16804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1330.031343][T16804] RSP: 002b:00007f03572080e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1330.031363][T16804] RAX: ffffffffffffffda RBX: 00007f0356625fa8 RCX: 00007f035639e199 [ 1330.031376][T16804] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0356625fa8 [ 1330.031388][T16804] RBP: 00007f0356625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1330.031399][T16804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1330.031411][T16804] R13: 00007f0356626038 R14: 00007ffe9ec0eda0 R15: 00007ffe9ec0ee88 [ 1330.031437][T16804] [ 1330.389276][T16801] FAULT_INJECTION: forcing a failure. [ 1330.389276][T16801] name failslab, interval 1, probability 0, space 0, times 0 [ 1330.389312][T16801] CPU: 0 UID: 0 PID: 16801 Comm: syz.7.2834 Tainted: G L syzkaller #0 PREEMPT(full) [ 1330.389344][T16801] Tainted: [L]=SOFTLOCKUP [ 1330.389353][T16801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1330.389367][T16801] Call Trace: [ 1330.389375][T16801] [ 1330.389387][T16801] dump_stack_lvl+0x100/0x190 [ 1330.389421][T16801] should_fail_ex.cold+0x5/0xa [ 1330.389451][T16801] should_failslab+0xc2/0x120 [ 1330.389480][T16801] __kmalloc_cache_noprof+0x91/0x6d0 [ 1330.389503][T16801] ? resv_map_alloc+0x7e/0x400 [ 1330.389534][T16801] resv_map_alloc+0x7e/0x400 [ 1330.389563][T16801] hugetlbfs_get_inode+0x385/0x700 [ 1330.389595][T16801] ? security_capable+0x80/0x260 [ 1330.389622][T16801] hugetlb_file_setup+0x3cc/0x5b0 [ 1330.389651][T16801] newseg+0xaf0/0xed0 [ 1330.389684][T16801] ? __pfx_newseg+0x10/0x10 [ 1330.389712][T16801] ? down_write+0x146/0x1f0 [ 1330.389739][T16801] ? ksys_write+0x190/0x250 [ 1330.389765][T16801] ipcget+0xee/0xf50 [ 1330.389799][T16801] ? __pfx_do_futex+0x10/0x10 [ 1330.389830][T16801] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1330.389854][T16801] ? __pfx_ipcget+0x10/0x10 [ 1330.389882][T16801] ? __x64_sys_futex+0x34f/0x4d0 [ 1330.389909][T16801] ? __x64_sys_futex+0x358/0x4d0 [ 1330.389942][T16801] __x64_sys_shmget+0x13b/0x1b0 [ 1330.389970][T16801] ? __pfx___x64_sys_shmget+0x10/0x10 [ 1330.390008][T16801] do_syscall_64+0x123/0x790 [ 1330.390034][T16801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1330.390054][T16801] RIP: 0033:0x7fb8c5f9e199 [ 1330.390072][T16801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1330.390090][T16801] RSP: 002b:00007fb8c6ef4028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 1330.390109][T16801] RAX: ffffffffffffffda RBX: 00007fb8c6225fa0 RCX: 00007fb8c5f9e199 [ 1330.390122][T16801] RDX: 0000000078001900 RSI: 0000000000001000 RDI: 0000000000000000 [ 1330.390134][T16801] RBP: 00007fb8c6035888 R08: 0000000000000000 R09: 0000000000000000 [ 1330.390146][T16801] R10: 0000200000ffe000 R11: 0000000000000246 R12: 0000000000000000 [ 1330.390158][T16801] R13: 00007fb8c6226038 R14: 00007fb8c6225fa0 R15: 00007fff00492128 [ 1330.390185][T16801] [ 1330.448119][T16809] FAULT_INJECTION: forcing a failure. [ 1330.448119][T16809] name failslab, interval 1, probability 0, space 0, times 0 [ 1330.448147][T16809] CPU: 1 UID: 0 PID: 16809 Comm: syz.4.2837 Tainted: G L syzkaller #0 PREEMPT(full) [ 1330.448170][T16809] Tainted: [L]=SOFTLOCKUP [ 1330.448175][T16809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1330.448185][T16809] Call Trace: [ 1330.448191][T16809] [ 1330.448197][T16809] dump_stack_lvl+0x100/0x190 [ 1330.448226][T16809] should_fail_ex.cold+0x5/0xa [ 1330.448249][T16809] should_failslab+0xc2/0x120 [ 1330.448271][T16809] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1330.448292][T16809] ? __alloc_skb+0x5b7/0x710 [ 1330.448312][T16809] ? __alloc_skb+0x140/0x710 [ 1330.448337][T16809] __alloc_skb+0x140/0x710 [ 1330.448357][T16809] ? __alloc_skb+0x5b7/0x710 [ 1330.448376][T16809] ? __pfx___alloc_skb+0x10/0x10 [ 1330.448404][T16809] alloc_skb_with_frags+0xdd/0x760 [ 1330.448426][T16809] ? find_held_lock+0x2b/0x80 [ 1330.448449][T16809] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 1330.448465][T16809] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 1330.448486][T16809] sock_alloc_send_pskb+0x801/0x980 [ 1330.448507][T16809] ? irqentry_exit+0x24d/0xa10 [ 1330.448525][T16809] ? lockdep_hardirqs_on+0x7d/0x110 [ 1330.448542][T16809] ? irqentry_exit+0x24d/0xa10 [ 1330.448562][T16809] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1330.448581][T16809] ? selinux_socket_getpeersec_dgram+0x1a4/0x380 [ 1330.448601][T16809] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 1330.448629][T16809] unix_dgram_sendmsg+0x3c7/0x1810 [ 1330.448653][T16809] ? lock_acquire+0x1d1/0x380 [ 1330.448675][T16809] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1330.448708][T16809] unix_seqpacket_sendmsg+0x12a/0x1d0 [ 1330.448732][T16809] ____sys_sendmsg+0xa4d/0xbe0 [ 1330.448749][T16809] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 1330.448774][T16809] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1330.448794][T16809] ? _kstrtoull+0x144/0x200 [ 1330.448816][T16809] ? __pfx__kstrtoull+0x10/0x10 [ 1330.448843][T16809] ___sys_sendmsg+0x190/0x1e0 [ 1330.448862][T16809] ? __pfx____sys_sendmsg+0x10/0x10 [ 1330.448889][T16809] ? __fget_files+0x34/0x3d0 [ 1330.448926][T16809] __sys_sendmmsg+0x20c/0x440 [ 1330.448951][T16809] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1330.448973][T16809] ? ksys_write+0x190/0x250 [ 1330.449007][T16809] ? fput+0x7c/0x100 [ 1330.449029][T16809] ? ksys_write+0x1ac/0x250 [ 1330.449046][T16809] ? __pfx_ksys_write+0x10/0x10 [ 1330.449071][T16809] __x64_sys_sendmmsg+0x9c/0x100 [ 1330.449097][T16809] ? lockdep_hardirqs_on+0x7d/0x110 [ 1330.449114][T16809] do_syscall_64+0x123/0x790 [ 1330.449134][T16809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1330.449150][T16809] RIP: 0033:0x7fd92059e199 [ 1330.449163][T16809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1330.449178][T16809] RSP: 002b:00007fd91e7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1330.449195][T16809] RAX: ffffffffffffffda RBX: 00007fd920826090 RCX: 00007fd92059e199 [ 1330.449205][T16809] RDX: 0000000004000079 RSI: 0000200000001c00 RDI: 0000000000000005 [ 1330.449215][T16809] RBP: 00007fd91e7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1330.449225][T16809] R10: 0000000000040844 R11: 0000000000000246 R12: 0000000000000001 [ 1330.449235][T16809] R13: 00007fd920826128 R14: 00007fd920826090 R15: 00007ffc03e92ee8 [ 1330.449257][T16809] [ 1330.806746][ T5780] usbhid 8-1:0.0: can't add hid device: -71 [ 1330.806847][ T5780] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1330.936987][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 1330.937004][ T30] audit: type=1400 audit(1791487926.948:16195): avc: denied { create } for pid=16817 comm="syz.5.2839" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1330.940252][ T30] audit: type=1400 audit(1791487926.948:16196): avc: denied { map } for pid=16817 comm="syz.5.2839" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=60396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1330.940492][ T30] audit: type=1400 audit(1791487926.948:16197): avc: denied { read write } for pid=16817 comm="syz.5.2839" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=60396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1331.009034][ T5780] usb 8-1: USB disconnect, device number 33 [ 1331.018004][ T30] audit: type=1400 audit(1791487927.028:16198): avc: denied { ioctl } for pid=16817 comm="syz.5.2839" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=60397 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1331.033426][ T30] audit: type=1400 audit(1791487927.038:16199): avc: denied { append } for pid=16817 comm="syz.5.2839" name="001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1331.073065][ T5701] usb 7-1: USB disconnect, device number 26 [ 1331.078524][ T30] audit: type=1400 audit(1791487927.088:16200): avc: denied { map } for pid=16817 comm="syz.5.2839" path="socket:[60403]" dev="sockfs" ino=60403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1331.079875][ T30] audit: type=1400 audit(1791487927.088:16201): avc: denied { cmd } for pid=16817 comm="iou-wrk-16818" path="socket:[60403]" dev="sockfs" ino=60403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1332.111108][ T30] audit: type=1400 audit(1791487927.738:16202): avc: denied { create } for pid=16820 comm="syz.3.2840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1332.111154][ T30] audit: type=1400 audit(1791487927.748:16203): avc: denied { setopt } for pid=16820 comm="syz.3.2840" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1332.178080][T16823] FAULT_INJECTION: forcing a failure. [ 1332.178080][T16823] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1332.178115][T16823] CPU: 0 UID: 0 PID: 16823 Comm: syz.5.2839 Tainted: G L syzkaller #0 PREEMPT(full) [ 1332.178142][T16823] Tainted: [L]=SOFTLOCKUP [ 1332.178149][T16823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1332.178161][T16823] Call Trace: [ 1332.178167][T16823] [ 1332.178175][T16823] dump_stack_lvl+0x100/0x190 [ 1332.178205][T16823] should_fail_ex.cold+0x5/0xa [ 1332.178232][T16823] get_futex_key+0x1d0/0x14f0 [ 1332.178263][T16823] ? __pfx_get_futex_key+0x10/0x10 [ 1332.178300][T16823] futex_wake+0xf4/0x5e0 [ 1332.178325][T16823] ? __pfx_futex_wake+0x10/0x10 [ 1332.178345][T16823] ? percpu_counter_add_batch+0xb9/0x230 [ 1332.178371][T16823] ? errseq_sample+0x51/0x70 [ 1332.178393][T16823] ? file_init_path+0x48e/0x670 [ 1332.178424][T16823] do_futex+0x2b2/0x440 [ 1332.178451][T16823] ? __pfx_do_futex+0x10/0x10 [ 1332.178478][T16823] ? fd_install+0x223/0x580 [ 1332.178507][T16823] __x64_sys_futex+0x34f/0x4d0 [ 1332.178533][T16823] ? __sys_socket+0xac/0x260 [ 1332.178555][T16823] ? __pfx___x64_sys_futex+0x10/0x10 [ 1332.178604][T16823] do_syscall_64+0x123/0x790 [ 1332.178630][T16823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1332.178648][T16823] RIP: 0033:0x7f035639e199 [ 1332.178662][T16823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1332.178677][T16823] RSP: 002b:00007f03543650e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1332.178688][T16823] RAX: ffffffffffffffda RBX: 00007f0356626188 RCX: 00007f035639e199 [ 1332.178695][T16823] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f035662618c [ 1332.178702][T16823] RBP: 00007f0356626180 R08: 0000000000000001 R09: 0000000000000000 [ 1332.178709][T16823] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000000 [ 1332.178715][T16823] R13: 00007f0356626218 R14: 00007ffe9ec0eda0 R15: 00007ffe9ec0ee88 [ 1332.178729][T16823] [ 1332.178758][ T30] audit: type=1400 audit(1791487928.188:16204): avc: denied { create } for pid=16817 comm="syz.5.2839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1332.405396][T15335] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1332.559992][T15335] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 1332.560807][T15335] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1332.566596][T15335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.566618][T15335] usb 5-1: Product: syz [ 1332.566631][T15335] usb 5-1: Manufacturer: syz [ 1332.566643][T15335] usb 5-1: SerialNumber: syz [ 1332.621345][T16832] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1332.709149][T16840] FAULT_INJECTION: forcing a failure. [ 1332.709149][T16840] name failslab, interval 1, probability 0, space 0, times 0 [ 1332.709180][T16840] CPU: 0 UID: 0 PID: 16840 Comm: syz.6.2842 Tainted: G L syzkaller #0 PREEMPT(full) [ 1332.709205][T16840] Tainted: [L]=SOFTLOCKUP [ 1332.709212][T16840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1332.709223][T16840] Call Trace: [ 1332.709230][T16840] [ 1332.709238][T16840] dump_stack_lvl+0x100/0x190 [ 1332.709270][T16840] should_fail_ex.cold+0x5/0xa [ 1332.709296][T16840] should_failslab+0xc2/0x120 [ 1332.709323][T16840] __kmalloc_noprof+0xfc/0x840 [ 1332.709344][T16840] ? rcu_is_watching+0x13/0xc0 [ 1332.709371][T16840] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1332.709403][T16840] tomoyo_realpath_from_path+0xb6/0x690 [ 1332.709433][T16840] tomoyo_path_number_perm+0x23c/0x580 [ 1332.709455][T16840] ? tomoyo_path_number_perm+0x22e/0x580 [ 1332.709481][T16840] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1332.709511][T16840] ? __lock_acquire+0x5c0/0x1f40 [ 1332.709541][T16840] ? __fget_files+0x34/0x3d0 [ 1332.709564][T16840] ? find_held_lock+0x2b/0x80 [ 1332.709588][T16840] ? hook_file_ioctl_common+0x140/0x440 [ 1332.709620][T16840] ? __fget_files+0x21f/0x3d0 [ 1332.709645][T16840] security_file_ioctl+0xd3/0x230 [ 1332.709668][T16840] __x64_sys_ioctl+0xb7/0x210 [ 1332.709692][T16840] do_syscall_64+0x123/0x790 [ 1332.709715][T16840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1332.709734][T16840] RIP: 0033:0x7f7d2c99e199 [ 1332.709748][T16840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1332.709764][T16840] RSP: 002b:00007f7d2abf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1332.709782][T16840] RAX: ffffffffffffffda RBX: 00007f7d2cc26180 RCX: 00007f7d2c99e199 [ 1332.709793][T16840] RDX: 0000200000002000 RSI: 00000000c138fd06 RDI: 000000000000000a [ 1332.709808][T16840] RBP: 00007f7d2abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1332.709818][T16840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1332.709828][T16840] R13: 00007f7d2cc26218 R14: 00007f7d2cc26180 R15: 00007ffcf89e5228 [ 1332.709852][T16840] [ 1332.799140][T15335] snd-usb-6fire 5-1:1.0: unknown device firmware state received from device: [ 1332.799173][T15335] 00 00 00 00 00 00 00 00 [ 1332.799224][T15335] snd-usb-6fire 5-1:1.0: probe with driver snd-usb-6fire failed with error -5 [ 1332.828277][T16840] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1333.018177][T16829] xt_hashlimit: size too large, truncated to 1048576 [ 1333.551889][T16847] xt_hashlimit: size too large, truncated to 1048576 [ 1333.836250][T15326] usb 5-1: USB disconnect, device number 24 [ 1334.897000][T15335] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1335.047615][T15335] usb 8-1: Using ep0 maxpacket: 32 [ 1335.048444][T15335] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1335.049380][T15335] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1335.049418][T15335] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1335.049442][T15335] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1335.049471][T15335] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1335.051257][T15335] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.051277][T15335] usb 8-1: Product: syz [ 1335.051292][T15335] usb 8-1: Manufacturer: syz [ 1335.051305][T15335] usb 8-1: SerialNumber: syz [ 1335.069722][ C1] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1335.090896][T15335] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/input/input153 [ 1336.346493][ T5790] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1336.386767][T16863] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1336.406584][T16850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1336.413328][T16850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1336.484509][T15335] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1336.484530][T15335] (id 0x00) [ 1336.507270][ T5790] usb 7-1: Using ep0 maxpacket: 16 [ 1336.507811][ T5790] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1336.508672][ T5790] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1336.508697][ T5790] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1336.508716][ T5790] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1336.508747][ T5790] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.514023][ T5790] usb 7-1: config 0 descriptor?? [ 1336.645802][T15335] rc_core: IR keymap rc-imon-pad not found [ 1336.645821][T15335] Registered IR keymap rc-empty [ 1336.645864][T15335] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1336.645874][T15335] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1336.705563][T15335] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0 [ 1336.709825][T15335] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0/input154 [ 1336.724095][T15335] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:34> initialized [ 1336.916787][T16850] imon:vfd_write: invalid payload size [ 1336.917312][T16850] imon:display_open: display port is already open [ 1336.918200][T15335] usb 8-1: USB disconnect, device number 34 [ 1337.008547][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1337.008565][ T30] audit: type=1400 audit(1791487933.018:16238): avc: denied { write } for pid=16873 comm="syz.3.2853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1337.008708][T16874] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2853'. [ 1337.174789][ T5790] usbhid 7-1:0.0: can't add hid device: -71 [ 1337.174877][ T5790] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1337.208017][ T5790] usb 7-1: USB disconnect, device number 27 [ 1337.438124][ T30] audit: type=1400 audit(1791487933.448:16239): avc: denied { read } for pid=11584 comm="syz-executor" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:groupadd_exec_t:s0" [ 1337.438289][ T30] audit: type=1400 audit(1791487933.448:16240): avc: denied { open } for pid=11584 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:groupadd_exec_t:s0" [ 1337.438468][ T30] audit: type=1400 audit(1791487933.448:16241): avc: denied { ioctl } for pid=11584 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:groupadd_exec_t:s0" [ 1337.544462][ T30] audit: type=1400 audit(1791487933.548:16242): avc: denied { read write } for pid=16877 comm="syz.5.2850" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1337.544512][ T30] audit: type=1400 audit(1791487933.548:16243): avc: denied { open } for pid=16877 comm="syz.5.2850" path="/dev/raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1337.544549][ T30] audit: type=1400 audit(1791487933.548:16244): avc: denied { ioctl } for pid=16877 comm="syz.5.2850" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1338.491914][ T30] audit: type=1400 audit(1791487933.678:16245): avc: denied { execmem } for pid=16879 comm="syz.3.2854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1338.491962][ T30] audit: type=1400 audit(1791487933.958:16246): avc: denied { read } for pid=16879 comm="syz.3.2854" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1338.491998][ T30] audit: type=1400 audit(1791487933.958:16247): avc: denied { open } for pid=16879 comm="syz.3.2854" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1338.576557][T15335] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1338.714669][T16884] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2856'. [ 1338.844771][T15335] usb 6-1: Using ep0 maxpacket: 16 [ 1338.847443][T15335] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1338.852222][T15335] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1338.852410][T15335] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.303695][T14629] Bluetooth: hci3: unexpected event for opcode 0x0035 [ 1339.363013][T15335] usb 6-1: config 0 descriptor?? [ 1339.421090][T16878] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1339.714404][T16878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1339.719024][T16878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1339.753983][T16878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1339.767949][T16878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1339.914432][ T5701] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1340.068780][T15335] hid_parser_main: 590 callbacks suppressed [ 1340.068804][T15335] hid-sensor-hub 0003:0C70:F00D.003D: unknown main item tag 0x0 [ 1340.068829][T15335] hid-sensor-hub 0003:0C70:F00D.003D: unknown main item tag 0x0 [ 1340.068849][T15335] hid-sensor-hub 0003:0C70:F00D.003D: unknown main item tag 0x0 [ 1340.068868][T15335] hid-sensor-hub 0003:0C70:F00D.003D: unknown main item tag 0x0 [ 1340.068888][T15335] hid-sensor-hub 0003:0C70:F00D.003D: unknown main item tag 0x0 [ 1340.068906][T15335] hid-sensor-hub 0003:0C70:F00D.003D: unknown main item tag 0x0 [ 1340.068925][T15335] hid-sensor-hub 0003:0C70:F00D.003D: unknown main item tag 0x0 [ 1340.068942][T15335] hid-sensor-hub 0003:0C70:F00D.003D: unknown main item tag 0x0 [ 1340.068961][T15335] hid-sensor-hub 0003:0C70:F00D.003D: unknown main item tag 0x0 [ 1340.068978][T15335] hid-sensor-hub 0003:0C70:F00D.003D: unknown main item tag 0x0 [ 1340.071102][T15335] hid-sensor-hub 0003:0C70:F00D.003D: collection stack underflow [ 1340.071126][T15335] hid-sensor-hub 0003:0C70:F00D.003D: item 0 1 0 12 parsing failed [ 1340.071843][T15335] hid-sensor-hub 0003:0C70:F00D.003D: parse failed [ 1340.071922][T15335] hid-sensor-hub 0003:0C70:F00D.003D: probe with driver hid-sensor-hub failed with error -22 [ 1340.074522][ T5701] usb 5-1: Using ep0 maxpacket: 32 [ 1340.074997][ T5701] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1340.075875][ T5701] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1340.075908][ T5701] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1340.075928][ T5701] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1340.075948][ T5701] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1340.075965][ T5701] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1340.077630][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.077648][ T5701] usb 5-1: Product: syz [ 1340.077661][ T5701] usb 5-1: Manufacturer: syz [ 1340.077673][ T5701] usb 5-1: SerialNumber: syz [ 1340.082448][ T5701] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 1340.082511][ T5701] imon 5-1:155.0: unable to initialize intf0, err -90 [ 1340.082523][ T5701] imon:imon_probe: failed to initialize context! [ 1340.082537][ T5701] imon 5-1:155.0: unable to register, err -19 [ 1340.084712][T15335] aquacomputer_d5next 0003:0C70:F00D.003D: collection stack underflow [ 1340.084732][T15335] aquacomputer_d5next 0003:0C70:F00D.003D: item 0 1 0 12 parsing failed [ 1340.085381][T15335] aquacomputer_d5next 0003:0C70:F00D.003D: probe with driver aquacomputer_d5next failed with error -22 [ 1340.425299][T14629] Bluetooth: hci0: unexpected event for opcode 0x0035 [ 1340.666620][ T5790] usb 6-1: USB disconnect, device number 98 [ 1340.673365][T16892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1340.673704][T16892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1342.033785][T16906] comedi: valid board names for 8255 driver are: [ 1342.033841][T16906] 8255 [ 1342.033849][T16906] comedi: valid board names for vmk80xx driver are: [ 1342.033878][T16906] vmk80xx [ 1342.033932][T16906] comedi: valid board names for usbduxsigma driver are: [ 1342.034001][T16906] usbduxsigma [ 1342.034009][T16906] comedi: valid board names for usbduxfast driver are: [ 1342.034019][T16906] usbduxfast [ 1342.034027][T16906] comedi: valid board names for usbdux driver are: [ 1342.034038][T16906] usbdux [ 1342.034044][T16906] comedi: valid board names for ni6501 driver are: [ 1342.034053][T16906] ni6501 [ 1342.034059][T16906] comedi: valid board names for dt9812 driver are: [ 1342.034068][T16906] dt9812 [ 1342.034075][T16906] comedi: valid board names for ni_labpc_cs driver are: [ 1342.034083][T16906] ni_labpc_cs [ 1342.034090][T16906] comedi: valid board names for ni_daq_700 driver are: [ 1342.034099][T16906] ni_daq_700 [ 1342.034106][T16906] comedi: valid board names for labpc_pci driver are: [ 1342.034114][T16906] labpc_pci [ 1342.034120][T16906] comedi: valid board names for adl_pci9118 driver are: [ 1342.034129][T16906] pci9118dg [ 1342.034136][T16906] pci9118hg [ 1342.034142][T16906] pci9118hr [ 1342.034149][T16906] comedi: valid board names for 8255_pci driver are: [ 1342.034157][T16906] 8255_pci [ 1342.034207][T16906] comedi: valid board names for s526 driver are: [ 1342.034235][T16906] s526 [ 1342.034483][T16906] comedi: valid board names for multiq3 driver are: [ 1342.034494][T16906] multiq3 [ 1342.034502][T16906] comedi: valid board names for pcmuio driver are: [ 1342.034511][T16906] pcmuio48 [ 1342.034518][T16906] pcmuio96 [ 1342.034525][T16906] comedi: valid board names for pcmmio driver are: [ 1342.034534][T16906] pcmmio [ 1342.034541][T16906] comedi: valid board names for pcmda12 driver are: [ 1342.034549][T16906] pcmda12 [ 1342.034555][T16906] comedi: valid board names for pcmad driver are: [ 1342.034562][T16906] pcmad12 [ 1342.034568][T16906] pcmad16 [ 1342.034574][T16906] comedi: valid board names for ni_labpc driver are: [ 1342.034581][T16906] lab-pc-1200 [ 1342.034587][T16906] lab-pc-1200ai [ 1342.034593][T16906] lab-pc+ [ 1342.034599][T16906] comedi: valid board names for atmio16 driver are: [ 1342.034606][T16906] atmio16 [ 1342.034612][T16906] atmio16d [ 1342.034618][T16906] comedi: valid board names for ni_at_ao driver are: [ 1342.034626][T16906] at-ao-6 [ 1342.034631][T16906] at-ao-10 [ 1342.034637][T16906] comedi: valid board names for ni_at_a2150 driver are: [ 1342.034645][T16906] ni_at_a2150 [ 1342.034651][T16906] comedi: valid board names for adq12b driver are: [ 1342.034658][T16906] adq12b [ 1342.034664][T16906] comedi: valid board names for mpc624 driver are: [ 1342.034671][T16906] mpc624 [ 1342.034677][T16906] comedi: valid board names for c6xdigio driver are: [ 1342.034684][T16906] c6xdigio [ 1342.034690][T16906] comedi: valid board names for aio_iiro_16 driver are: [ 1342.034698][T16906] aio_iiro_16 [ 1342.034704][T16906] comedi: valid board names for aio_aio12_8 driver are: [ 1342.034711][T16906] aio_aio12_8 [ 1342.034717][T16906] aio_ai12_8 [ 1342.034723][T16906] aio_ao12_4 [ 1342.034729][T16906] comedi: valid board names for fl512 driver are: [ 1342.034736][T16906] fl512 [ 1342.034742][T16906] comedi: valid board names for dmm32at driver are: [ 1342.034749][T16906] dmm32at [ 1342.034755][T16906] comedi: valid board names for dt282x driver are: [ 1342.034763][T16906] dt2821 [ 1342.034768][T16906] dt2821-f [ 1342.034774][T16906] dt2821-g [ 1342.034780][T16906] dt2823 [ 1342.034786][T16906] dt2824-pgh [ 1342.034792][T16906] dt2824-pgl [ 1342.034798][T16906] dt2825 [ 1342.034803][T16906] dt2827 [ 1342.034809][T16906] dt2828 [ 1342.034814][T16906] dt2829 [ 1342.034820][T16906] dt21-ez [ 1342.034826][T16906] dt23-ez [ 1342.034832][T16906] dt24-ez [ 1342.034837][T16906] dt24-ez-pgl [ 1342.034843][T16906] comedi: valid board names for dt2817 driver are: [ 1342.034850][T16906] dt2817 [ 1342.034857][T16906] comedi: valid board names for dt2815 driver are: [ 1342.034871][T16906] dt2815 [ 1342.034878][T16906] comedi: valid board names for dt2814 driver are: [ 1342.034887][T16906] dt2814 [ 1342.034893][T16906] comedi: valid board names for dt2811 driver are: [ 1342.034902][T16906] dt2811-pgh [ 1342.034909][T16906] dt2811-pgl [ 1342.034915][T16906] comedi: valid board names for dt2801 driver are: [ 1342.034924][T16906] dt2801 [ 1342.034931][T16906] comedi: valid board names for das6402 driver are: [ 1342.034939][T16906] das6402-12 [ 1342.034946][T16906] das6402-16 [ 1342.034953][T16906] comedi: valid board names for das1800 driver are: [ 1342.034962][T16906] das-1701st [ 1342.034969][T16906] das-1701st-da [ 1342.034975][T16906] das-1702st [ 1342.034981][T16906] das-1702st-da [ 1342.034987][T16906] das-1702hr [ 1342.034993][T16906] das-1702hr-da [ 1342.034999][T16906] das-1701ao [ 1342.035004][T16906] das-1702ao [ 1342.035010][T16906] das-1801st [ 1342.035016][T16906] das-1801st-da [ 1342.035022][T16906] das-1802st [ 1342.035028][T16906] das-1802st-da [ 1342.035034][T16906] das-1802hr [ 1342.035040][T16906] das-1802hr-da [ 1342.035047][T16906] das-1801hc [ 1342.035052][T16906] das-1802hc [ 1342.035058][T16906] das-1801ao [ 1342.035064][T16906] das-1802ao [ 1342.035070][T16906] comedi: valid board names for das800 driver are: [ 1342.035077][T16906] das-800 [ 1342.035082][T16906] cio-das800 [ 1342.035088][T16906] das-801 [ 1342.035094][T16906] cio-das801 [ 1342.035100][T16906] das-802 [ 1342.035105][T16906] cio-das802 [ 1342.035111][T16906] cio-das802/16 [ 1342.035117][T16906] comedi: valid board names for isa-das08 driver are: [ 1342.035124][T16906] isa-das08 [ 1342.035130][T16906] das08-pgm [ 1342.035136][T16906] das08-pgh [ 1342.035142][T16906] das08-pgl [ 1342.035147][T16906] das08-aoh [ 1342.035153][T16906] das08-aol [ 1342.035158][T16906] das08-aom [ 1342.035164][T16906] das08/jr-ao [ 1342.035170][T16906] das08jr-16-ao [ 1342.035176][T16906] pc104-das08 [ 1342.035182][T16906] das08jr/16 [ 1342.035188][T16906] comedi: valid board names for das16m1 driver are: [ 1342.035195][T16906] das16m1 [ 1342.035201][T16906] comedi: valid board names for dac02 driver are: [ 1342.035208][T16906] dac02 [ 1342.035214][T16906] comedi: valid board names for rti802 driver are: [ 1342.035221][T16906] rti802 [ 1342.035227][T16906] comedi: valid board names for rti800 driver are: [ 1342.035234][T16906] rti800 [ 1342.035239][T16906] rti815 [ 1342.035245][T16906] comedi: valid board names for pcm3724 driver are: [ 1342.035252][T16906] pcm3724 [ 1342.035258][T16906] comedi: valid board names for pcl818 driver are: [ 1342.035265][T16906] pcl818l [ 1342.035271][T16906] pcl818h [ 1342.035276][T16906] pcl818hd [ 1342.035282][T16906] pcl818hg [ 1342.035287][T16906] pcl818 [ 1342.035293][T16906] pcl718 [ 1342.035298][T16906] pcm3718 [ 1342.035304][T16906] comedi: valid board names for pcl816 driver are: [ 1342.035312][T16906] pcl816 [ 1342.035317][T16906] pcl814b [ 1342.035323][T16906] comedi: valid board names for pcl812 driver are: [ 1342.035330][T16906] pcl812 [ 1342.035336][T16906] pcl812pg [ 1342.035342][T16906] acl8112pg [ 1342.035347][T16906] acl8112dg [ 1342.035354][T16906] acl8112hg [ 1342.035360][T16906] a821pgl [ 1342.035365][T16906] a821pglnda [ 1342.035371][T16906] a821pgh [ 1342.035376][T16906] a822pgl [ 1342.035382][T16906] a822pgh [ 1342.035387][T16906] a823pgl [ 1342.035393][T16906] a823pgh [ 1342.035399][T16906] pcl813 [ 1342.035404][T16906] pcl813b [ 1342.035410][T16906] acl8113 [ 1342.035415][T16906] iso813 [ 1342.035421][T16906] acl8216 [ 1342.035426][T16906] a826pg [ 1342.035432][T16906] comedi: valid board names for pcl730 driver are: [ 1342.035440][T16906] pcl730 [ 1342.035446][T16906] iso730 [ 1342.035451][T16906] acl7130 [ 1342.035457][T16906] pcm3730 [ 1342.035463][T16906] pcl725 [ 1342.035519][T16906] p8r8dio [ 1342.035526][T16906] acl7225b [ 1342.035533][T16906] p16r16dio [ 1342.035540][T16906] pcl733 [ 1342.035546][T16906] pcl734 [ 1342.035553][T16906] opmm-1616-xt [ 1342.035560][T16906] pearl-mm-p [ 1342.035567][T16906] ir104-pbf [ 1342.035574][T16906] comedi: valid board names for pcl726 driver are: [ 1342.035583][T16906] pcl726 [ 1342.035589][T16906] pcl727 [ 1342.035596][T16906] pcl728 [ 1342.035602][T16906] acl6126 [ 1342.035609][T16906] acl6128 [ 1342.035616][T16906] comedi: valid board names for pcl724 driver are: [ 1342.035625][T16906] pcl724 [ 1342.035631][T16906] pcl722 [ 1342.035638][T16906] pcl731 [ 1342.035644][T16906] acl7122 [ 1342.035651][T16906] acl7124 [ 1342.035657][T16906] pet48dio [ 1342.035663][T16906] pcmio48 [ 1342.035670][T16906] onyx-mm-dio [ 1342.035676][T16906] comedi: valid board names for pcl711 driver are: [ 1342.035684][T16906] pcl711 [ 1342.035689][T16906] pcl711b [ 1342.035695][T16906] acl8112hg [ 1342.035701][T16906] acl8112dg [ 1342.035707][T16906] comedi: valid board names for amplc_pc263 driver are: [ 1342.035714][T16906] pc263 [ 1342.035720][T16906] comedi: valid board names for amplc_pc236 driver are: [ 1342.035728][T16906] pc36at [ 1342.035734][T16906] comedi: valid board names for amplc_dio200 driver are: [ 1342.035741][T16906] pc212e [ 1342.035747][T16906] pc214e [ 1342.035752][T16906] pc215e [ 1342.035758][T16906] pc218e [ 1342.035763][T16906] pc272e [ 1342.035769][T16906] comedi: valid board names for comedi_parport driver are: [ 1342.035777][T16906] comedi_parport [ 1342.035783][T16906] comedi: valid board names for comedi_test driver are: [ 1342.035791][T16906] comedi_test [ 1342.035796][T16906] comedi: valid board names for comedi_bond driver are: [ 1342.035804][T16906] comedi_bond [ 1342.173565][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 1342.173580][ T30] audit: type=1400 audit(1791487938.178:16312): avc: denied { create } for pid=16907 comm="syz.3.2860" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1342.184946][ T30] audit: type=1400 audit(1791487938.188:16313): avc: denied { read write } for pid=16907 comm="syz.3.2860" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1342.184987][ T30] audit: type=1400 audit(1791487938.188:16314): avc: denied { open } for pid=16907 comm="syz.3.2860" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1342.194805][ T30] audit: type=1400 audit(1791487938.198:16315): avc: denied { read } for pid=16907 comm="syz.3.2860" name="sg0" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1342.194845][ T30] audit: type=1400 audit(1791487938.198:16316): avc: denied { open } for pid=16907 comm="syz.3.2860" path="/dev/sg0" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1342.195496][ T30] audit: type=1400 audit(1791487938.198:16317): avc: denied { ioctl } for pid=16907 comm="syz.3.2860" path="/dev/sg0" dev="devtmpfs" ino=935 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1342.362561][T16913] netlink: 'syz.3.2860': attribute type 1 has an invalid length. [ 1342.407320][T16913] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1342.464357][ T5790] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1342.481364][T16915] netlink: 'syz.3.2860': attribute type 10 has an invalid length. [ 1342.481388][T16915] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2860'. [ 1342.483520][T16913] bond2: (slave veth5): Enslaving as an active interface with a down link [ 1342.624757][ T5790] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 1342.625670][ T5790] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1342.627528][ T5790] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.627547][ T5790] usb 8-1: Product: syz [ 1342.627559][ T5790] usb 8-1: Manufacturer: syz [ 1342.627571][ T5790] usb 8-1: SerialNumber: syz [ 1342.845715][ T5790] snd-usb-6fire 8-1:1.0: unknown device firmware state received from device: [ 1342.845734][ T5790] 00 00 00 00 00 00 00 00 [ 1342.845805][ T5790] snd-usb-6fire 8-1:1.0: probe with driver snd-usb-6fire failed with error -5 [ 1343.114683][ T30] audit: type=1400 audit(1791487939.108:16318): avc: denied { create } for pid=16909 comm="syz.7.2861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1343.114725][ T30] audit: type=1400 audit(1791487939.118:16319): avc: denied { setopt } for pid=16909 comm="syz.7.2861" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1343.124724][T16910] xt_hashlimit: size too large, truncated to 1048576 [ 1343.159531][ T30] audit: type=1400 audit(1791487939.168:16320): avc: denied { module_request } for pid=16909 comm="syz.7.2861" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1343.162952][T16919] xt_hashlimit: size too large, truncated to 1048576 [ 1343.327471][ T30] audit: type=1400 audit(1791487939.218:16321): avc: denied { setopt } for pid=16916 comm="syz.6.2862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1343.606946][ T5701] usb 5-1: USB disconnect, device number 25 [ 1343.666605][T16926] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2864'. [ 1345.731674][T15326] usb 8-1: USB disconnect, device number 35 [ 1346.130711][T16941] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1346.130728][T16941] CIFS mount error: No usable UNC path provided in device string! [ 1346.130728][T16941] [ 1346.130899][T16941] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1347.218962][T16953] CIFS mount error: No usable UNC path provided in device string! [ 1347.218962][T16953] [ 1347.218976][T16953] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1347.656851][T16954] FAULT_INJECTION: forcing a failure. [ 1347.656851][T16954] name failslab, interval 1, probability 0, space 0, times 0 [ 1347.656898][T16954] CPU: 0 UID: 0 PID: 16954 Comm: syz.5.2873 Tainted: G L syzkaller #0 PREEMPT(full) [ 1347.656922][T16954] Tainted: [L]=SOFTLOCKUP [ 1347.656928][T16954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1347.656937][T16954] Call Trace: [ 1347.656943][T16954] [ 1347.656948][T16954] dump_stack_lvl+0x100/0x190 [ 1347.656968][T16954] should_fail_ex.cold+0x5/0xa [ 1347.656985][T16954] should_failslab+0xc2/0x120 [ 1347.657002][T16954] __kmalloc_noprof+0xfc/0x840 [ 1347.657016][T16954] ? do_handle_open+0x62b/0xf20 [ 1347.657033][T16954] do_handle_open+0x62b/0xf20 [ 1347.657046][T16954] ? irqentry_exit+0x24d/0xa10 [ 1347.657059][T16954] ? __pfx_do_handle_open+0x10/0x10 [ 1347.657072][T16954] ? irqentry_exit+0x24d/0xa10 [ 1347.657092][T16954] ? do_syscall_64+0x123/0x790 [ 1347.657104][T16954] do_syscall_64+0x123/0x790 [ 1347.657117][T16954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.657129][T16954] RIP: 0033:0x7f035639e199 [ 1347.657139][T16954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1347.657149][T16954] RSP: 002b:00007f03571e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 1347.657161][T16954] RAX: ffffffffffffffda RBX: 00007f0356626090 RCX: 00007f035639e199 [ 1347.657168][T16954] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000004 [ 1347.657174][T16954] RBP: 00007f03571e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1347.657181][T16954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1347.657187][T16954] R13: 00007f0356626128 R14: 00007f0356626090 R15: 00007ffe9ec0ee88 [ 1347.657202][T16954] [ 1348.057097][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 1348.057117][ T30] audit: type=1400 audit(1791487943.658:16364): avc: denied { read } for pid=16951 comm="syz.5.2873" dev="nsfs" ino=4026532793 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1348.057153][ T30] audit: type=1400 audit(1791487943.658:16365): avc: denied { open } for pid=16951 comm="syz.5.2873" path="cgroup:[4026532793]" dev="nsfs" ino=4026532793 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1348.118907][ T30] audit: type=1400 audit(1791487944.118:16366): avc: denied { mount } for pid=16950 comm="syz.3.2872" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1348.118957][ T30] audit: type=1400 audit(1791487944.128:16367): avc: denied { remount } for pid=16950 comm="syz.3.2872" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1348.295877][ T30] audit: type=1400 audit(1791487944.258:16368): avc: denied { module_request } for pid=16950 comm="syz.3.2872" kmod="netdev-./mnt" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1348.296501][T15326] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1348.464417][ T30] audit: type=1400 audit(1791487944.458:16369): avc: denied { sys_module } for pid=16950 comm="syz.3.2872" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1348.587649][ T30] audit: type=1400 audit(1791487944.598:16370): avc: denied { unmount } for pid=15708 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1348.797772][T15326] usb 8-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1348.863576][T15326] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1348.863605][T15326] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1348.863628][T15326] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1348.863660][T15326] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.963104][T15326] usb 8-1: config 0 descriptor?? [ 1348.982067][T15326] hdpvr 8-1:0.0: Could not find bulk-in endpoint [ 1348.982129][T15326] hdpvr 8-1:0.0: probe with driver hdpvr failed with error -12 [ 1349.044616][ T5790] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1349.153273][T10905] usb 8-1: USB disconnect, device number 36 [ 1349.204812][ T5790] usb 4-1: Using ep0 maxpacket: 32 [ 1349.208297][ T5790] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1349.215665][ T5790] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1349.215707][ T5790] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1349.215730][ T5790] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1349.215754][ T5790] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1349.215775][ T5790] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1349.218130][ T5790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.218152][ T5790] usb 4-1: Product: syz [ 1349.218164][ T5790] usb 4-1: Manufacturer: syz [ 1349.218177][ T5790] usb 4-1: SerialNumber: syz [ 1349.267631][ T5790] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 1349.267700][ T5790] imon 4-1:155.0: unable to initialize intf0, err -90 [ 1349.267713][ T5790] imon:imon_probe: failed to initialize context! [ 1349.267723][ T5790] imon 4-1:155.0: unable to register, err -19 [ 1350.257920][ T30] audit: type=1400 audit(1791487945.828:16371): avc: denied { create } for pid=16964 comm="syz.7.2876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1350.257968][ T30] audit: type=1400 audit(1791487945.858:16372): avc: denied { setopt } for pid=16964 comm="syz.7.2876" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1350.348700][T16962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1350.349047][T16962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1350.443700][ T30] audit: type=1400 audit(1791487946.448:16373): avc: denied { write } for pid=16963 comm="syz.6.2867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1351.214624][ T5701] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1351.368763][ T5701] usb 6-1: Using ep0 maxpacket: 8 [ 1351.369340][ T5701] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1351.371725][ T5701] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.371739][ T5701] usb 6-1: Product: syz [ 1351.371748][ T5701] usb 6-1: Manufacturer: syz [ 1351.371756][ T5701] usb 6-1: SerialNumber: syz [ 1351.373154][ T5701] usb 6-1: config 0 descriptor?? [ 1351.586408][ T5701] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1352.154378][T15335] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1352.274008][ T4912] usb 4-1: USB disconnect, device number 44 [ 1352.369941][T15335] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1352.369983][T15335] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1352.378417][T15335] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1352.380132][T15335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.380152][T15335] usb 5-1: Product: syz [ 1352.380164][T15335] usb 5-1: Manufacturer: syz [ 1352.380177][T15335] usb 5-1: SerialNumber: syz [ 1352.635709][T15335] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1352.832137][T15335] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1352.832156][T15335] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 1353.208074][T14629] Bluetooth: hci1: unexpected event for opcode 0x0035 [ 1353.210054][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1353.210084][ T30] audit: type=1400 audit(1791487948.918:16394): avc: denied { mount } for pid=16996 comm="syz.3.2881" name="/" dev="configfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1353.210231][ T30] audit: type=1400 audit(1791487948.928:16395): avc: denied { search } for pid=16996 comm="syz.3.2881" name="/" dev="configfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1353.210390][ T30] audit: type=1400 audit(1791487948.928:16396): avc: denied { search } for pid=16996 comm="syz.3.2881" name="target" dev="configfs" ino=3127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1353.210546][ T30] audit: type=1400 audit(1791487948.928:16397): avc: denied { search } for pid=16996 comm="syz.3.2881" name="core" dev="configfs" ino=3128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1353.210675][ T30] audit: type=1400 audit(1791487948.928:16398): avc: denied { write search } for pid=16996 comm="syz.3.2881" name="core" dev="configfs" ino=3128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1353.210830][ T30] audit: type=1400 audit(1791487948.928:16399): avc: denied { add_name } for pid=16996 comm="syz.3.2881" name="rd_mcp_0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1353.211092][ T30] audit: type=1400 audit(1791487948.928:16400): avc: denied { create } for pid=16996 comm="syz.3.2881" name="rd_mcp_0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 1353.211252][ T30] audit: type=1400 audit(1791487948.948:16401): avc: denied { write } for pid=16996 comm="syz.3.2881" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1353.211394][ T30] audit: type=1400 audit(1791487948.958:16402): avc: denied { write } for pid=16996 comm="syz.3.2881" name="vlan0" dev="proc" ino=4026533149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1353.211536][ T30] audit: type=1400 audit(1791487948.988:16403): avc: denied { read } for pid=16996 comm="syz.3.2881" name="rd_mcp_0" dev="configfs" ino=61904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1353.219244][T15335] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1353.898927][ T5701] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1353.929665][ T5701] usb 6-1: USB disconnect, device number 99 [ 1353.980875][T15335] usb 5-1: USB disconnect, device number 26 [ 1354.105512][T15796] udevd[15796]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1355.237004][T17012] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2883'. [ 1356.264830][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1356.264881][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1356.541949][T17019] FAULT_INJECTION: forcing a failure. [ 1356.541949][T17019] name failslab, interval 1, probability 0, space 0, times 0 [ 1356.541973][T17019] CPU: 1 UID: 0 PID: 17019 Comm: syz.7.2887 Tainted: G L syzkaller #0 PREEMPT(full) [ 1356.541990][T17019] Tainted: [L]=SOFTLOCKUP [ 1356.541995][T17019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1356.542003][T17019] Call Trace: [ 1356.542007][T17019] [ 1356.542012][T17019] dump_stack_lvl+0x100/0x190 [ 1356.542034][T17019] should_fail_ex.cold+0x5/0xa [ 1356.542050][T17019] should_failslab+0xc2/0x120 [ 1356.542067][T17019] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 1356.542085][T17019] ? snd_pcm_hw_rule_add+0x3b3/0x510 [ 1356.542104][T17019] krealloc_node_align_noprof+0x321/0x3e0 [ 1356.542121][T17019] snd_pcm_hw_rule_add+0x3b3/0x510 [ 1356.542138][T17019] ? __pfx_snd_pcm_hw_rule_format+0x10/0x10 [ 1356.542155][T17019] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 1356.542173][T17019] ? mutex_init_lockdep+0xf1/0x120 [ 1356.542188][T17019] ? snd_pcm_attach_substream+0x287/0xd20 [ 1356.542205][T17019] snd_pcm_open_substream+0x54a/0x1850 [ 1356.542223][T17019] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 1356.542236][T17019] ? lockdep_init_map_type+0x5c/0x250 [ 1356.542250][T17019] ? lockdep_init_map_type+0x5c/0x250 [ 1356.542266][T17019] snd_pcm_oss_open+0x715/0x1380 [ 1356.542282][T17019] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1356.542294][T17019] ? __pfx_default_wake_function+0x10/0x10 [ 1356.542309][T17019] ? __lock_acquire+0x5c0/0x1f40 [ 1356.542326][T17019] ? do_raw_spin_lock+0x128/0x260 [ 1356.542342][T17019] ? soundcore_open+0x231/0x5a0 [ 1356.542359][T17019] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1356.542370][T17019] soundcore_open+0x2e3/0x5a0 [ 1356.542388][T17019] ? __pfx_soundcore_open+0x10/0x10 [ 1356.542404][T17019] chrdev_open+0x234/0x6a0 [ 1356.542420][T17019] ? __pfx_chrdev_open+0x10/0x10 [ 1356.542436][T17019] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1356.542451][T17019] do_dentry_open+0x6ab/0x14d0 [ 1356.542464][T17019] ? __pfx_chrdev_open+0x10/0x10 [ 1356.542483][T17019] vfs_open+0x82/0x3f0 [ 1356.542501][T17019] path_openat+0x19fa/0x2440 [ 1356.542519][T17019] ? __pfx_path_openat+0x10/0x10 [ 1356.542539][T17019] do_file_open+0x20e/0x430 [ 1356.542555][T17019] ? __pfx_do_file_open+0x10/0x10 [ 1356.542581][T17019] ? _raw_spin_unlock+0x28/0x50 [ 1356.542591][T17019] ? alloc_fd+0x471/0x7a0 [ 1356.542611][T17019] do_sys_openat2+0x10f/0x1e0 [ 1356.542628][T17019] ? __pfx_do_sys_openat2+0x10/0x10 [ 1356.542645][T17019] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1356.542669][T17019] __x64_sys_openat+0x12d/0x210 [ 1356.542688][T17019] ? __pfx___x64_sys_openat+0x10/0x10 [ 1356.542712][T17019] do_syscall_64+0x123/0x790 [ 1356.542727][T17019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.542740][T17019] RIP: 0033:0x7fb8c5f9e199 [ 1356.542751][T17019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1356.542761][T17019] RSP: 002b:00007fb8c6ef4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1356.542772][T17019] RAX: ffffffffffffffda RBX: 00007fb8c6225fa0 RCX: 00007fb8c5f9e199 [ 1356.542780][T17019] RDX: 0000000000000042 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1356.542787][T17019] RBP: 00007fb8c6035888 R08: 0000000000000000 R09: 0000000000000000 [ 1356.542793][T17019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1356.542800][T17019] R13: 00007fb8c6226038 R14: 00007fb8c6225fa0 R15: 00007fff00492128 [ 1356.542814][T17019] [ 1356.709423][ T5701] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1356.824389][T12205] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 1356.824547][T15335] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1356.857099][ T5701] usb 7-1: Using ep0 maxpacket: 8 [ 1356.857662][ T5701] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1356.858568][ T5701] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1356.858604][ T5701] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1356.858623][ T5701] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1356.858643][ T5701] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1356.858662][ T5701] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1356.858692][ T5701] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.978369][T15335] usb 6-1: Using ep0 maxpacket: 8 [ 1356.979179][T15335] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1356.980046][T12205] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1356.980657][T12205] usb 4-1: not running at top speed; connect to a high speed hub [ 1356.980678][T12205] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1356.980928][T15335] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1356.981011][T15335] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1356.981029][T15335] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1356.981047][T15335] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1356.981064][T15335] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1356.981093][T15335] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.983505][T12205] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.983524][T12205] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1356.983563][T12205] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1357.182088][T12205] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.182164][T12205] usb 4-1: Product: syz [ 1357.182177][T12205] usb 4-1: Manufacturer: syz [ 1357.182190][T12205] usb 4-1: SerialNumber: syz [ 1357.586051][ T5701] usb 7-1: GET_CAPABILITIES returned 0 [ 1357.586077][ T5701] usbtmc 7-1:16.0: can't read capabilities [ 1357.620376][T15335] usb 6-1: GET_CAPABILITIES returned 0 [ 1357.620418][T15335] usbtmc 6-1:16.0: can't read capabilities [ 1357.643854][T12205] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 1357.643870][T12205] usb 4-1: 1:1 : format type 5 is not supported yet [ 1357.652192][T12205] usb 4-1: 0:2 : does not exist [ 1357.711637][T12205] usb 4-1: USB disconnect, device number 45 [ 1357.846931][ T5790] usb 7-1: USB disconnect, device number 28 [ 1357.934640][T15335] usb 6-1: USB disconnect, device number 100 [ 1357.979049][T15796] udevd[15796]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1358.795381][T14629] Bluetooth: hci3: unexpected event for opcode 0x0035 [ 1358.831616][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1358.831647][ T30] audit: type=1400 audit(1791487954.638:16424): avc: denied { write } for pid=17032 comm="syz.7.2891" name="core" dev="configfs" ino=3128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1358.831800][ T30] audit: type=1400 audit(1791487954.658:16425): avc: denied { write } for pid=17032 comm="syz.7.2891" name="core" dev="configfs" ino=3128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1360.452882][ T30] audit: type=1400 audit(1791487956.458:16426): avc: denied { create } for pid=17036 comm="syz.5.2895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1360.481539][ T30] audit: type=1400 audit(1791487956.488:16427): avc: denied { ioctl } for pid=17036 comm="syz.5.2895" path="socket:[62077]" dev="sockfs" ino=62077 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1360.660015][ T30] audit: type=1400 audit(1791487956.668:16428): avc: denied { name_bind } for pid=17036 comm="syz.5.2895" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1360.660150][ T30] audit: type=1400 audit(1791487956.668:16429): avc: denied { node_bind } for pid=17036 comm="syz.5.2895" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1360.774980][T12205] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 1360.925708][T12205] usb 5-1: not running at top speed; connect to a high speed hub [ 1360.925739][T12205] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1360.927216][T12205] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1360.927230][T12205] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1360.927254][T12205] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.996240][T12205] uvcvideo 5-1:1.0: Found UVC 1.00 device (046d:0825) [ 1360.996302][T12205] uvcvideo 5-1:1.0: Failed to create links for entity 32769 [ 1360.996312][T12205] uvcvideo 5-1:1.0: Failed to register entities (-22). [ 1360.996321][T12205] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770. [ 1361.104773][T17002] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1361.213370][ T4912] usb 5-1: USB disconnect, device number 27 [ 1361.254432][T17002] usb 7-1: Using ep0 maxpacket: 16 [ 1361.255012][T17002] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1361.259505][T17002] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1361.259524][T17002] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1361.259537][T17002] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1361.259559][T17002] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.315838][T17002] usb 7-1: config 0 descriptor?? [ 1361.811561][T17063] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2899'. [ 1362.222750][T17066] FAULT_INJECTION: forcing a failure. [ 1362.222750][T17066] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1362.223328][T17066] CPU: 0 UID: 0 PID: 17066 Comm: syz.3.2900 Tainted: G L syzkaller #0 PREEMPT(full) [ 1362.223359][T17066] Tainted: [L]=SOFTLOCKUP [ 1362.223366][T17066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1362.223377][T17066] Call Trace: [ 1362.223384][T17066] [ 1362.223392][T17066] dump_stack_lvl+0x100/0x190 [ 1362.223422][T17066] should_fail_ex.cold+0x5/0xa [ 1362.223439][T17066] get_futex_key+0x1d0/0x14f0 [ 1362.223457][T17066] ? __pfx_get_futex_key+0x10/0x10 [ 1362.223473][T17066] ? lock_acquire+0x1d1/0x380 [ 1362.223490][T17066] ? __fget_files+0x34/0x3d0 [ 1362.223519][T17066] futex_wake+0xf4/0x5e0 [ 1362.223541][T17066] ? __pfx_futex_wake+0x10/0x10 [ 1362.223562][T17066] ? fput+0x7c/0x100 [ 1362.223579][T17066] ? __sys_sendto+0x2a8/0x4e0 [ 1362.223601][T17066] do_futex+0x2b2/0x440 [ 1362.223618][T17066] ? __pfx_do_futex+0x10/0x10 [ 1362.223643][T17066] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1362.223670][T17066] __x64_sys_futex+0x34f/0x4d0 [ 1362.223699][T17066] ? __pfx___x64_sys_futex+0x10/0x10 [ 1362.223723][T17066] do_syscall_64+0x123/0x790 [ 1362.223737][T17066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.223751][T17066] RIP: 0033:0x7f21f6b9e199 [ 1362.223768][T17066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1362.223786][T17066] RSP: 002b:00007f21f4df60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1362.223805][T17066] RAX: ffffffffffffffda RBX: 00007f21f6e25fa8 RCX: 00007f21f6b9e199 [ 1362.223816][T17066] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f21f6e25fac [ 1362.223826][T17066] RBP: 00007f21f6e25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 1362.223837][T17066] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1362.223848][T17066] R13: 00007f21f6e26038 R14: 00007ffde475d6e0 R15: 00007ffde475d7c8 [ 1362.223873][T17066] [ 1362.405194][T17002] usbhid 7-1:0.0: can't add hid device: -71 [ 1362.405284][T17002] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1362.456588][T17002] usb 7-1: USB disconnect, device number 29 [ 1363.728625][ T30] audit: type=1400 audit(1791487959.738:16430): avc: denied { create } for pid=17079 comm="syz.3.2905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1364.184726][ T30] audit: type=1400 audit(1791487960.198:16431): avc: denied { setopt } for pid=17079 comm="syz.3.2905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1364.191134][ T30] audit: type=1400 audit(1791487960.198:16432): avc: denied { ioctl } for pid=17079 comm="syz.3.2905" path="socket:[62115]" dev="sockfs" ino=62115 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1364.240897][ T30] audit: type=1400 audit(1791487960.248:16433): avc: denied { create } for pid=17079 comm="syz.3.2905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1364.271157][ T30] audit: type=1400 audit(1791487960.278:16434): avc: denied { getopt } for pid=17079 comm="syz.3.2905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1364.715005][T17002] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1364.865728][T17002] usb 6-1: Using ep0 maxpacket: 8 [ 1364.866307][T17002] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1364.867197][T17002] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1364.867225][T17002] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1364.867256][T17002] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.040597][T14629] Bluetooth: hci3: unexpected event for opcode 0x0035 [ 1365.055711][ T30] audit: type=1400 audit(1791487961.028:16435): avc: denied { write } for pid=17089 comm="syz.7.2909" name="core" dev="configfs" ino=3128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1365.055855][ T30] audit: type=1400 audit(1791487961.028:16436): avc: denied { write } for pid=17089 comm="syz.7.2909" name="core" dev="configfs" ino=3128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1366.047527][ T4912] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1366.191896][T17002] usb 6-1: config 0 descriptor?? [ 1366.284867][ T4912] usb 7-1: Using ep0 maxpacket: 16 [ 1366.285362][ T4912] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1366.286199][ T4912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1366.286224][ T4912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.291684][ T4912] usb 7-1: config 0 descriptor?? [ 1366.292861][T17092] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1366.433933][T17002] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1366.549786][T17092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1366.550203][T17092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1366.596042][T17092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1366.596463][T17092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1366.635287][ T5701] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 1366.657894][T12205] usb 6-1: USB disconnect, device number 101 [ 1366.786065][ T5701] usb 4-1: not running at top speed; connect to a high speed hub [ 1366.786096][ T5701] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1366.788374][ T5701] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1366.788398][ T5701] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1366.788435][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.858657][ T5701] uvcvideo 4-1:1.0: Found UVC 1.00 device (046d:0825) [ 1366.858746][ T5701] uvcvideo 4-1:1.0: Failed to create links for entity 32769 [ 1366.858761][ T5701] uvcvideo 4-1:1.0: Failed to register entities (-22). [ 1366.858782][ T5701] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 1366.941024][ T4912] hid_parser_main: 590 callbacks suppressed [ 1366.942119][ T4912] hid-sensor-hub 0003:0C70:F00D.003E: unknown main item tag 0x0 [ 1366.942162][ T4912] hid-sensor-hub 0003:0C70:F00D.003E: unknown main item tag 0x0 [ 1366.942778][ T4912] hid-sensor-hub 0003:0C70:F00D.003E: unknown main item tag 0x0 [ 1366.942801][ T4912] hid-sensor-hub 0003:0C70:F00D.003E: unknown main item tag 0x0 [ 1366.942822][ T4912] hid-sensor-hub 0003:0C70:F00D.003E: unknown main item tag 0x0 [ 1366.942842][ T4912] hid-sensor-hub 0003:0C70:F00D.003E: unknown main item tag 0x0 [ 1366.942862][ T4912] hid-sensor-hub 0003:0C70:F00D.003E: unknown main item tag 0x0 [ 1366.942882][ T4912] hid-sensor-hub 0003:0C70:F00D.003E: unknown main item tag 0x0 [ 1366.942901][ T4912] hid-sensor-hub 0003:0C70:F00D.003E: unknown main item tag 0x0 [ 1366.942921][ T4912] hid-sensor-hub 0003:0C70:F00D.003E: unknown main item tag 0x0 [ 1367.000866][ T4912] hid-sensor-hub 0003:0C70:F00D.003E: collection stack underflow [ 1367.000891][ T4912] hid-sensor-hub 0003:0C70:F00D.003E: item 0 1 0 12 parsing failed [ 1367.019310][ T4912] hid-sensor-hub 0003:0C70:F00D.003E: parse failed [ 1367.019384][ T4912] hid-sensor-hub 0003:0C70:F00D.003E: probe with driver hid-sensor-hub failed with error -22 [ 1367.087035][ T4912] aquacomputer_d5next 0003:0C70:F00D.003E: collection stack underflow [ 1367.087062][ T4912] aquacomputer_d5next 0003:0C70:F00D.003E: item 0 1 0 12 parsing failed [ 1367.092115][ T4912] aquacomputer_d5next 0003:0C70:F00D.003E: probe with driver aquacomputer_d5next failed with error -22 [ 1367.158614][ T4912] usb 7-1: USB disconnect, device number 30 [ 1367.180659][ T5780] usb 4-1: USB disconnect, device number 46 [ 1367.596035][T17104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2912'. [ 1368.414121][ T4912] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1368.414227][ T5780] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1368.564826][ T4912] usb 5-1: Using ep0 maxpacket: 32 [ 1368.593109][ T4912] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1368.822610][ T5780] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1368.822646][ T5780] usb 8-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1368.848114][ T4912] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1368.848143][ T4912] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1368.848157][ T4912] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1368.848171][ T4912] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1368.852092][ T5780] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1368.852747][ T4912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.852767][ T4912] usb 5-1: Product: syz [ 1368.852780][ T4912] usb 5-1: Manufacturer: syz [ 1368.852788][ T4912] usb 5-1: SerialNumber: syz [ 1368.939720][ T5780] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.939738][ T5780] usb 8-1: Product: syz [ 1368.939747][ T5780] usb 8-1: Manufacturer: syz [ 1368.939755][ T5780] usb 8-1: SerialNumber: syz [ 1368.989702][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1368.990567][ T30] audit: type=1400 audit(1791487964.998:16437): avc: denied { read } for pid=17115 comm="syz.5.2917" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1369.026553][ T30] audit: type=1400 audit(1791487965.038:16438): avc: denied { open } for pid=17115 comm="syz.5.2917" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1369.026579][T10905] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1369.033644][ T4912] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input155 [ 1369.063047][ T30] audit: type=1400 audit(1791487965.068:16439): avc: denied { read } for pid=4955 comm="acpid" name="mouse0" dev="devtmpfs" ino=5160 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1369.063339][ T30] audit: type=1400 audit(1791487965.068:16440): avc: denied { open } for pid=4955 comm="acpid" path="/dev/input/mouse0" dev="devtmpfs" ino=5160 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1369.226106][T10905] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1369.250317][T10905] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1369.250382][T10905] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1369.365496][T10905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.365553][T10905] usb 4-1: Product: syz [ 1369.365651][T10905] usb 4-1: Manufacturer: syz [ 1369.365667][T10905] usb 4-1: SerialNumber: syz [ 1369.499252][T10905] usb 4-1: config 0 descriptor?? [ 1369.514437][ T4912] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1369.514507][ T4912] (id 0x00) [ 1369.581369][ T5780] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1369.595242][ T5780] usb 8-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1369.595316][ T5780] usb 8-1: found format II with max.bitrate = 4, frame size=7372 [ 1369.623675][T17111] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1369.650721][T17111] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1370.058551][T17111] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1370.058607][T17111] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1370.168794][ T5780] usb 8-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 1370.217630][ T4912] rc_core: IR keymap rc-imon-pad not found [ 1370.217648][ T4912] Registered IR keymap rc-empty [ 1370.217702][ T4912] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1370.217745][ T4912] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1370.256931][ T4912] imon:send_packet: packet tx failed (-71) [ 1370.274529][ T4912] imon 5-1:155.0: remote input dev register failed [ 1370.274599][ T4912] imon 5-1:155.0: imon_init_intf0: rc device setup failed [ 1370.345700][ T4912] imon 5-1:155.0: unable to initialize intf0, err 0 [ 1370.345722][ T4912] imon:imon_probe: failed to initialize context! [ 1370.345735][ T4912] imon 5-1:155.0: unable to register, err -19 [ 1370.381645][ T4912] usb 5-1: USB disconnect, device number 28 [ 1370.596671][T10905] Error reading MAC address [ 1370.634307][T12207] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1370.670801][ T5780] usb 8-1: USB disconnect, device number 37 [ 1370.759862][T17130] xt_hashlimit: size too large, truncated to 1048576 [ 1370.808414][T12207] usb 7-1: Using ep0 maxpacket: 16 [ 1370.812735][T12207] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1370.833249][T15796] udevd[15796]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1370.835553][T12207] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1370.835579][T12207] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1370.835597][T12207] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1370.835628][T12207] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.851034][T12207] usb 7-1: config 0 descriptor?? [ 1370.887918][T17132] xt_hashlimit: size too large, truncated to 1048576 [ 1370.984748][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1370.984766][ T30] audit: type=1400 audit(1791487966.988:16442): avc: denied { create } for pid=17129 comm="syz.5.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1371.048005][ T30] audit: type=1400 audit(1791487967.058:16443): avc: denied { listen } for pid=17129 comm="syz.5.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1371.057201][ T30] audit: type=1400 audit(1791487967.068:16444): avc: denied { connect } for pid=17129 comm="syz.5.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1371.069030][ T30] audit: type=1400 audit(1791487967.068:16445): avc: denied { write } for pid=17129 comm="syz.5.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1371.167529][ T30] audit: type=1400 audit(1791487967.178:16446): avc: denied { name_bind } for pid=17134 comm="syz.7.2921" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1371.171808][ T30] audit: type=1400 audit(1791487967.178:16447): avc: denied { write } for pid=17110 comm="syz.3.2915" name="event0" dev="devtmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1371.173609][ T30] audit: type=1400 audit(1791487967.178:16448): avc: denied { open } for pid=17110 comm="syz.3.2915" path="/dev/input/event0" dev="devtmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1371.250579][ T30] audit: type=1400 audit(1791487967.258:16449): avc: denied { map_create } for pid=17134 comm="syz.7.2921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1371.250760][ T30] audit: type=1400 audit(1791487967.258:16450): avc: denied { map_read map_write } for pid=17134 comm="syz.7.2921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1371.252458][ T30] audit: type=1400 audit(1791487967.258:16451): avc: denied { accept } for pid=17129 comm="syz.5.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1371.549306][T12207] usbhid 7-1:0.0: can't add hid device: -71 [ 1371.549391][T12207] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1371.573583][T12207] usb 7-1: USB disconnect, device number 31 [ 1371.583747][T12205] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1371.635755][ T5780] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1371.746339][T12205] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1371.747383][T12205] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.754636][T12205] usb 8-1: config 0 descriptor?? [ 1371.759732][T12205] cp210x 8-1:0.0: cp210x converter detected [ 1371.804349][ T5780] usb 5-1: Using ep0 maxpacket: 16 [ 1371.806875][ T5780] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1371.807768][ T5780] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1371.807807][ T5780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.841106][ T5780] usb 5-1: config 0 descriptor?? [ 1371.856149][T17140] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1372.179704][T12205] cp210x 8-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1372.207583][T12205] usb 8-1: cp210x converter now attached to ttyUSB0 [ 1372.306952][ T5780] hid_parser_main: 590 callbacks suppressed [ 1372.306980][ T5780] hid-sensor-hub 0003:0C70:F00D.003F: unknown main item tag 0x0 [ 1372.307005][ T5780] hid-sensor-hub 0003:0C70:F00D.003F: unknown main item tag 0x0 [ 1372.307026][ T5780] hid-sensor-hub 0003:0C70:F00D.003F: unknown main item tag 0x0 [ 1372.307046][ T5780] hid-sensor-hub 0003:0C70:F00D.003F: unknown main item tag 0x0 [ 1372.307068][ T5780] hid-sensor-hub 0003:0C70:F00D.003F: unknown main item tag 0x0 [ 1372.307099][ T5780] hid-sensor-hub 0003:0C70:F00D.003F: unknown main item tag 0x0 [ 1372.307120][ T5780] hid-sensor-hub 0003:0C70:F00D.003F: unknown main item tag 0x0 [ 1372.307140][ T5780] hid-sensor-hub 0003:0C70:F00D.003F: unknown main item tag 0x0 [ 1372.307161][ T5780] hid-sensor-hub 0003:0C70:F00D.003F: unknown main item tag 0x0 [ 1372.307182][ T5780] hid-sensor-hub 0003:0C70:F00D.003F: unknown main item tag 0x0 [ 1372.371585][T12205] usb 4-1: USB disconnect, device number 47 [ 1372.410294][ T5780] hid-sensor-hub 0003:0C70:F00D.003F: collection stack underflow [ 1372.410319][ T5780] hid-sensor-hub 0003:0C70:F00D.003F: item 0 1 0 12 parsing failed [ 1372.410969][ T5780] hid-sensor-hub 0003:0C70:F00D.003F: parse failed [ 1372.411046][ T5780] hid-sensor-hub 0003:0C70:F00D.003F: probe with driver hid-sensor-hub failed with error -22 [ 1372.448087][ T5780] aquacomputer_d5next 0003:0C70:F00D.003F: collection stack underflow [ 1372.448114][ T5780] aquacomputer_d5next 0003:0C70:F00D.003F: item 0 1 0 12 parsing failed [ 1372.448849][ T5780] aquacomputer_d5next 0003:0C70:F00D.003F: probe with driver aquacomputer_d5next failed with error -22 [ 1372.497029][ T5780] usb 5-1: USB disconnect, device number 29 [ 1372.874124][T14629] Bluetooth: hci0: unexpected event for opcode 0x0035 [ 1373.064574][T12205] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1373.304666][T12205] usb 4-1: Using ep0 maxpacket: 16 [ 1373.305434][T12205] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1373.306577][T12205] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1373.306625][T12205] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.352890][T12205] usb 4-1: config 0 descriptor?? [ 1373.363632][T17146] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1373.917311][T12205] hid-sensor-hub 0003:0C70:F00D.0040: collection stack underflow [ 1373.917360][T12205] hid-sensor-hub 0003:0C70:F00D.0040: item 0 1 0 12 parsing failed [ 1373.919468][T12205] hid-sensor-hub 0003:0C70:F00D.0040: parse failed [ 1373.919553][T12205] hid-sensor-hub 0003:0C70:F00D.0040: probe with driver hid-sensor-hub failed with error -22 [ 1373.961962][T12205] aquacomputer_d5next 0003:0C70:F00D.0040: collection stack underflow [ 1373.963065][T12205] aquacomputer_d5next 0003:0C70:F00D.0040: item 0 1 0 12 parsing failed [ 1373.963842][T12205] aquacomputer_d5next 0003:0C70:F00D.0040: probe with driver aquacomputer_d5next failed with error -22 [ 1374.479581][ T5780] usb 4-1: USB disconnect, device number 48 [ 1374.518224][T12205] usb 8-1: USB disconnect, device number 38 [ 1374.539258][T12205] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1374.539495][T12205] cp210x 8-1:0.0: device disconnected [ 1374.886235][T17161] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2927'. [ 1376.839961][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1376.839974][ T30] audit: type=1400 audit(1791487972.848:16459): avc: denied { read write } for pid=17169 comm="syz.6.2931" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1377.279223][ T30] audit: type=1400 audit(1791487973.288:16460): avc: denied { read } for pid=17169 comm="syz.6.2931" name="sg0" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1377.283445][ T30] audit: type=1400 audit(1791487973.288:16461): avc: denied { open } for pid=17169 comm="syz.6.2931" path="/dev/sg0" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1377.283856][ T30] audit: type=1400 audit(1791487973.288:16462): avc: denied { ioctl } for pid=17169 comm="syz.6.2931" path="/dev/sg0" dev="devtmpfs" ino=935 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1377.697830][T17173] netlink: 'syz.6.2931': attribute type 1 has an invalid length. [ 1377.752903][ T30] audit: type=1400 audit(1791487973.758:16463): avc: denied { bind } for pid=17179 comm="syz.3.2932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1377.753397][ T30] audit: type=1400 audit(1791487973.758:16464): avc: denied { create } for pid=17179 comm="syz.3.2932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1377.753919][ T30] audit: type=1400 audit(1791487973.758:16465): avc: denied { write } for pid=17179 comm="syz.3.2932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1377.862424][T17185] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2931'. [ 1377.863599][T17173] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1377.978853][T17173] netlink: 'syz.6.2931': attribute type 10 has an invalid length. [ 1377.978876][T17173] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2931'. [ 1378.474517][ T5780] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1378.520367][T17177] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1378.562342][T17173] dummy0: entered promiscuous mode [ 1378.624357][ T5780] usb 5-1: Using ep0 maxpacket: 16 [ 1378.626012][ T5780] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1378.626907][ T5780] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1378.626931][ T5780] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1378.626948][ T5780] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1378.626981][ T5780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.632024][ T5780] usb 5-1: config 0 descriptor?? [ 1378.817835][T15335] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1379.904651][T15335] usb 6-1: Using ep0 maxpacket: 16 [ 1379.922615][T15335] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1379.939566][T15335] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1379.939611][T15335] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.972321][T15335] usb 6-1: config 0 descriptor?? [ 1379.973126][T17194] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1380.174352][T12207] usb 8-1: new full-speed USB device number 39 using dummy_hcd [ 1380.184331][T10905] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1380.196144][T17194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1380.196485][T17194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1380.330443][T12207] usb 8-1: not running at top speed; connect to a high speed hub [ 1380.330474][T12207] usb 8-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1380.332599][T12207] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1380.333551][T12207] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1380.333617][T12207] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.347202][T10905] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1380.368411][T10905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.388992][T10905] usb 4-1: config 0 descriptor?? [ 1380.408753][T10905] cp210x 4-1:0.0: cp210x converter detected [ 1380.425377][T12207] uvcvideo 8-1:1.0: Found UVC 1.00 device (046d:0825) [ 1380.425409][T12207] uvcvideo 8-1:1.0: No valid video chain found. [ 1380.431514][ T5780] usbhid 5-1:0.0: can't add hid device: -71 [ 1380.431580][ T5780] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1380.453912][ T5780] usb 5-1: USB disconnect, device number 30 [ 1380.630081][T12207] usb 8-1: USB disconnect, device number 39 [ 1380.689591][T15335] hid_parser_main: 1190 callbacks suppressed [ 1380.689615][T15335] hid-sensor-hub 0003:0C70:F00D.0041: unknown main item tag 0x0 [ 1380.689639][T15335] hid-sensor-hub 0003:0C70:F00D.0041: unknown main item tag 0x0 [ 1380.689660][T15335] hid-sensor-hub 0003:0C70:F00D.0041: unknown main item tag 0x0 [ 1380.689682][T15335] hid-sensor-hub 0003:0C70:F00D.0041: unknown main item tag 0x0 [ 1380.689703][T15335] hid-sensor-hub 0003:0C70:F00D.0041: unknown main item tag 0x0 [ 1380.689724][T15335] hid-sensor-hub 0003:0C70:F00D.0041: unknown main item tag 0x0 [ 1380.689745][T15335] hid-sensor-hub 0003:0C70:F00D.0041: unknown main item tag 0x0 [ 1380.689765][T15335] hid-sensor-hub 0003:0C70:F00D.0041: unknown main item tag 0x0 [ 1380.689786][T15335] hid-sensor-hub 0003:0C70:F00D.0041: unknown main item tag 0x0 [ 1380.689806][T15335] hid-sensor-hub 0003:0C70:F00D.0041: unknown main item tag 0x0 [ 1380.781358][T15335] hid-sensor-hub 0003:0C70:F00D.0041: collection stack underflow [ 1380.781390][T15335] hid-sensor-hub 0003:0C70:F00D.0041: item 0 1 0 12 parsing failed [ 1380.782072][T15335] hid-sensor-hub 0003:0C70:F00D.0041: parse failed [ 1380.782151][T15335] hid-sensor-hub 0003:0C70:F00D.0041: probe with driver hid-sensor-hub failed with error -22 [ 1380.820714][T10905] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1380.821593][T15335] aquacomputer_d5next 0003:0C70:F00D.0041: collection stack underflow [ 1380.821614][T15335] aquacomputer_d5next 0003:0C70:F00D.0041: item 0 1 0 12 parsing failed [ 1380.832887][T15335] aquacomputer_d5next 0003:0C70:F00D.0041: probe with driver aquacomputer_d5next failed with error -22 [ 1380.866297][T10905] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1380.900178][T10905] usb 6-1: USB disconnect, device number 102 [ 1381.609375][T17218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2940'. [ 1382.317433][T14629] Bluetooth: hci3: unexpected event for opcode 0x0035 [ 1382.616048][ T30] audit: type=1400 audit(1791487978.268:16466): avc: denied { write } for pid=17220 comm="syz.7.2941" name="core" dev="configfs" ino=3128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1382.616078][ T30] audit: type=1400 audit(1791487978.278:16467): avc: denied { write } for pid=17220 comm="syz.7.2941" name="core" dev="configfs" ino=3128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1382.664387][T12207] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1382.734339][T15335] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1382.766325][ T5701] usb 4-1: USB disconnect, device number 49 [ 1382.776332][ T5701] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1382.776568][ T5701] cp210x 4-1:0.0: device disconnected [ 1382.814341][T12207] usb 5-1: Using ep0 maxpacket: 8 [ 1382.820985][T12207] usb 5-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 1382.837303][T12207] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1382.837332][T12207] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1382.837354][T12207] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1382.837379][T12207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.851433][T12207] usb 5-1: config 0 descriptor?? [ 1382.885570][T15335] usb 6-1: Using ep0 maxpacket: 8 [ 1382.891940][T15335] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1382.906283][T17229] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2939'. [ 1382.912252][T15335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.912304][T15335] usb 6-1: Product: syz [ 1382.912319][T15335] usb 6-1: Manufacturer: syz [ 1382.912332][T15335] usb 6-1: SerialNumber: syz [ 1382.915323][T15335] usb 6-1: config 0 descriptor?? [ 1382.969895][T17231] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2944'. [ 1383.199199][T15335] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1383.280363][ T30] audit: type=1400 audit(1791487979.288:16468): avc: denied { create } for pid=17230 comm="syz.3.2944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1383.307083][ T30] audit: type=1400 audit(1791487979.298:16469): avc: denied { write } for pid=17230 comm="syz.3.2944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1383.342858][ T30] audit: type=1400 audit(1791487979.318:16470): avc: denied { read } for pid=17230 comm="syz.3.2944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1383.521514][ T30] audit: type=1400 audit(1791487979.488:16471): avc: denied { ioctl } for pid=17224 comm="syz.5.2943" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1383.583382][ T30] audit: type=1400 audit(1791487979.588:16472): avc: denied { map_create } for pid=17230 comm="syz.3.2944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1383.624033][ T30] audit: type=1400 audit(1791487979.628:16473): avc: denied { mounton } for pid=17222 comm="syz.4.2942" path="/568/proc" dev="tmpfs" ino=3153 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1383.648077][ T30] audit: type=1400 audit(1791487979.658:16474): avc: denied { mount } for pid=17222 comm="syz.4.2942" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1383.687911][T17223] FAULT_INJECTION: forcing a failure. [ 1383.687911][T17223] name failslab, interval 1, probability 0, space 0, times 0 [ 1383.687945][T17223] CPU: 0 UID: 0 PID: 17223 Comm: syz.4.2942 Tainted: G L syzkaller #0 PREEMPT(full) [ 1383.687974][T17223] Tainted: [L]=SOFTLOCKUP [ 1383.687981][T17223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1383.687993][T17223] Call Trace: [ 1383.688001][T17223] [ 1383.688009][T17223] dump_stack_lvl+0x100/0x190 [ 1383.688044][T17223] should_fail_ex.cold+0x5/0xa [ 1383.688062][T17223] should_failslab+0xc2/0x120 [ 1383.688089][T17223] __kmalloc_cache_noprof+0x91/0x6d0 [ 1383.688110][T17223] ? resv_map_alloc+0x7e/0x400 [ 1383.688139][T17223] resv_map_alloc+0x7e/0x400 [ 1383.688163][T17223] hugetlbfs_get_inode+0x385/0x700 [ 1383.688181][T17223] ? security_capable+0x80/0x260 [ 1383.688195][T17223] hugetlb_file_setup+0x3cc/0x5b0 [ 1383.688213][T17223] newseg+0xaf0/0xed0 [ 1383.688242][T17223] ? __pfx_newseg+0x10/0x10 [ 1383.688267][T17223] ? down_write+0x146/0x1f0 [ 1383.688291][T17223] ? ksys_write+0x190/0x250 [ 1383.688315][T17223] ipcget+0xee/0xf50 [ 1383.688333][T17223] ? __pfx_do_futex+0x10/0x10 [ 1383.688350][T17223] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1383.688370][T17223] ? __pfx_ipcget+0x10/0x10 [ 1383.688398][T17223] ? __x64_sys_futex+0x34f/0x4d0 [ 1383.688426][T17223] ? __x64_sys_futex+0x358/0x4d0 [ 1383.688454][T17223] __x64_sys_shmget+0x13b/0x1b0 [ 1383.688471][T17223] ? __pfx___x64_sys_shmget+0x10/0x10 [ 1383.688491][T17223] do_syscall_64+0x123/0x790 [ 1383.688508][T17223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.688528][T17223] RIP: 0033:0x7fd92059e199 [ 1383.688544][T17223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1383.688562][T17223] RSP: 002b:00007fd91e7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 1383.688580][T17223] RAX: ffffffffffffffda RBX: 00007fd920825fa0 RCX: 00007fd92059e199 [ 1383.688589][T17223] RDX: 0000000078001900 RSI: 0000000000001000 RDI: 0000000000000000 [ 1383.688596][T17223] RBP: 00007fd920635888 R08: 0000000000000000 R09: 0000000000000000 [ 1383.688603][T17223] R10: 0000200000ffe000 R11: 0000000000000246 R12: 0000000000000000 [ 1383.688609][T17223] R13: 00007fd920826038 R14: 00007fd920825fa0 R15: 00007ffc03e92ee8 [ 1383.688624][T17223] [ 1384.053337][ T30] audit: type=1400 audit(1791487980.058:16475): avc: denied { read } for pid=15050 comm="syz-executor" name="loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1384.090200][T12207] usbhid 5-1:0.0: can't add hid device: -71 [ 1384.090285][T12207] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1384.111648][T12207] usb 5-1: USB disconnect, device number 31 [ 1385.004143][T15335] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1385.028699][T15335] usb 6-1: USB disconnect, device number 103 [ 1387.876324][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 1387.876345][ T30] audit: type=1400 audit(1791487983.478:16519): avc: denied { create } for pid=17253 comm="syz.4.2949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1387.876387][ T30] audit: type=1400 audit(1791487983.508:16520): avc: denied { setopt } for pid=17253 comm="syz.4.2949" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1387.912296][ T30] audit: type=1400 audit(1791487983.898:16521): avc: denied { read } for pid=11584 comm="syz-executor" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:groupadd_exec_t:s0" [ 1387.912332][ T30] audit: type=1400 audit(1791487983.898:16522): avc: denied { open } for pid=11584 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:groupadd_exec_t:s0" [ 1387.912354][ T30] audit: type=1400 audit(1791487983.898:16523): avc: denied { ioctl } for pid=11584 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:groupadd_exec_t:s0" [ 1388.293342][ T30] audit: type=1400 audit(1791487984.288:16524): avc: denied { create } for pid=17259 comm="syz.5.2950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1388.293395][ T30] audit: type=1400 audit(1791487984.298:16525): avc: denied { setopt } for pid=17259 comm="syz.5.2950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1388.322572][T17257] syz.4.2949 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1388.322599][T17257] CPU: 1 UID: 0 PID: 17257 Comm: syz.4.2949 Tainted: G L syzkaller #0 PREEMPT(full) [ 1388.322615][T17257] Tainted: [L]=SOFTLOCKUP [ 1388.322619][T17257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1388.322626][T17257] Call Trace: [ 1388.322631][T17257] [ 1388.322636][T17257] dump_stack_lvl+0x100/0x190 [ 1388.322659][T17257] dump_header+0xfb/0x606 [ 1388.322673][T17257] oom_kill_process.cold+0xd/0x380 [ 1388.322687][T17257] out_of_memory+0x340/0x14f0 [ 1388.322707][T17257] ? __pfx_out_of_memory+0x10/0x10 [ 1388.322728][T17257] mem_cgroup_out_of_memory+0xc6/0x130 [ 1388.322743][T17257] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1388.322756][T17257] ? find_held_lock+0x2b/0x80 [ 1388.322776][T17257] ? do_raw_spin_unlock+0x145/0x1e0 [ 1388.322792][T17257] ? _raw_spin_unlock+0x28/0x50 [ 1388.322804][T17257] try_charge_memcg+0x783/0xf60 [ 1388.322831][T17257] ? __pfx_try_charge_memcg+0x10/0x10 [ 1388.322842][T17257] ? find_held_lock+0x2b/0x80 [ 1388.322858][T17257] ? rcu_read_unlock+0x17/0x60 [ 1388.322870][T17257] ? rcu_read_unlock+0x17/0x60 [ 1388.322881][T17257] ? find_held_lock+0x2b/0x80 [ 1388.322898][T17257] ? rcu_read_unlock+0x17/0x60 [ 1388.322912][T17257] charge_memcg+0x1ae/0x210 [ 1388.322924][T17257] __mem_cgroup_charge+0x2b/0x1c0 [ 1388.322938][T17257] shmem_alloc_and_add_folio+0x451/0xd40 [ 1388.322961][T17257] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1388.322980][T17257] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 1388.322993][T17257] ? __lock_acquire+0x5c0/0x1f40 [ 1388.323007][T17257] shmem_get_folio_gfp+0x75b/0x1980 [ 1388.323022][T17257] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1388.323033][T17257] ? inode_set_ctime_current+0x9c/0x850 [ 1388.323051][T17257] ? find_held_lock+0x2b/0x80 [ 1388.323070][T17257] ? timestamp_truncate+0x22e/0x2f0 [ 1388.323089][T17257] shmem_write_begin+0x1a4/0x420 [ 1388.323102][T17257] ? __pfx_shmem_write_begin+0x10/0x10 [ 1388.323113][T17257] ? inode_set_ctime_current+0x283/0x850 [ 1388.323131][T17257] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1388.323144][T17257] ? inode_maybe_inc_iversion+0x169/0x220 [ 1388.323161][T17257] generic_perform_write+0x292/0xa40 [ 1388.323177][T17257] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1388.323194][T17257] ? __pfx_generic_perform_write+0x10/0x10 [ 1388.323210][T17257] ? mnt_put_write_access_file+0x4e/0x100 [ 1388.323227][T17257] ? file_update_time_flags+0x38c/0x520 [ 1388.323241][T17257] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1388.323254][T17257] shmem_file_write_iter+0x10e/0x140 [ 1388.323268][T17257] __kernel_write_iter+0x2ac/0x930 [ 1388.323283][T17257] ? __pfx___kernel_write_iter+0x10/0x10 [ 1388.323297][T17257] ? __up_read+0x333/0x980 [ 1388.323313][T17257] ? dump_user_range+0x65e/0xad0 [ 1388.323330][T17257] dump_user_range+0x3f9/0xad0 [ 1388.323346][T17257] ? __pfx_dump_user_range+0x10/0x10 [ 1388.323364][T17257] ? __pfx_writenote+0x10/0x10 [ 1388.323378][T17257] ? elf_core_dump+0x1f25/0x3d20 [ 1388.323399][T17257] elf_core_dump+0x2d68/0x3d20 [ 1388.323422][T17257] ? __pfx_elf_core_dump+0x10/0x10 [ 1388.323436][T17257] ? kasan_save_stack+0x3f/0x50 [ 1388.323449][T17257] ? kasan_save_stack+0x30/0x50 [ 1388.323462][T17257] ? kasan_save_track+0x14/0x30 [ 1388.323476][T17257] ? __kasan_kmalloc+0xaa/0xb0 [ 1388.323490][T17257] ? vfs_coredump+0x21f6/0x54a0 [ 1388.323502][T17257] ? get_signal+0x1f2a/0x21e0 [ 1388.323514][T17257] ? arch_do_signal_or_restart+0x91/0x7e0 [ 1388.323535][T17257] ? 0xffffffffff600000 [ 1388.323561][T17257] ? lock_acquire+0x1d1/0x380 [ 1388.323573][T17257] ? get_signal+0x1f2a/0x21e0 [ 1388.323590][T17257] ? vfs_coredump+0x281a/0x54a0 [ 1388.323603][T17257] vfs_coredump+0x281a/0x54a0 [ 1388.323621][T17257] ? __pfx_vfs_coredump+0x10/0x10 [ 1388.323634][T17257] ? __lock_acquire+0x5c0/0x1f40 [ 1388.323651][T17257] ? __lock_acquire+0x5c0/0x1f40 [ 1388.323665][T17257] ? lock_acquire+0x1d1/0x380 [ 1388.323677][T17257] ? unwind_next_frame+0xbd/0x2090 [ 1388.323697][T17257] ? lock_acquire+0x1d1/0x380 [ 1388.323713][T17257] ? bpf_ksym_find+0x128/0x1c0 [ 1388.323725][T17257] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1388.323742][T17257] ? arch_stack_walk+0xa6/0xf0 [ 1388.323761][T17257] ? __sigqueue_free+0xbe/0x2a0 [ 1388.323777][T17257] ? stack_trace_save+0x8e/0xc0 [ 1388.323788][T17257] ? __pfx_stack_trace_save+0x10/0x10 [ 1388.323801][T17257] ? stack_depot_save_flags+0x27/0x9f0 [ 1388.323819][T17257] ? __lock_acquire+0x5c0/0x1f40 [ 1388.323856][T17257] ? proc_coredump_connector+0x2d3/0x4f0 [ 1388.323870][T17257] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1388.323887][T17257] ? rcu_is_watching+0x13/0xc0 [ 1388.323906][T17257] get_signal+0x1f2a/0x21e0 [ 1388.323925][T17257] ? __pfx_get_signal+0x10/0x10 [ 1388.323942][T17257] arch_do_signal_or_restart+0x91/0x7e0 [ 1388.323960][T17257] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1388.323986][T17257] irqentry_exit+0x402/0xa10 [ 1388.324001][T17257] asm_exc_page_fault+0x26/0x30 [ 1388.324013][T17257] RIP: 0033:0x7fd92059e1a1 [ 1388.324024][T17257] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1388.324034][T17257] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1388.324044][T17257] RAX: 0000000000000000 RBX: 00007fd920826090 RCX: 00007fd92059e199 [ 1388.324052][T17257] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1388.324059][T17257] RBP: 00007fd920635888 R08: 0000000000000000 R09: 0000000000000000 [ 1388.324065][T17257] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1388.324072][T17257] R13: 00007fd920826128 R14: 00007fd920826090 R15: 00007ffc03e92ee8 [ 1388.324087][T17257] [ 1388.324092][T17257] memory: usage 307200kB, limit 307200kB, failcnt 68242 [ 1388.324099][T17257] memory+swap: usage 431736kB, limit 9007199254740988kB, failcnt 0 [ 1388.324106][T17257] kmem: usage 6256kB, limit 9007199254740988kB, failcnt 0 [ 1388.324112][T17257] Memory cgroup stats for /syz4: [ 1388.324185][T17257] cache 307806208 [ 1388.324197][T17257] rss 360448 [ 1388.324201][T17257] rss_huge 0 [ 1388.324205][T17257] shmem 307781632 [ 1388.324209][T17257] mapped_file 199479296 [ 1388.324222][T17257] dirty 8192 [ 1388.324352][T17257] writeback 0 [ 1388.324357][T17257] workingset_refault_anon 6 [ 1388.324361][T17257] workingset_refault_file 11231 [ 1388.324366][T17257] swap 127524864 [ 1388.324370][T17257] swapcached 190898176 [ 1388.324374][T17257] pgpgin 2610866 [ 1388.324378][T17257] pgpgout 2536141 [ 1388.324382][T17257] pgfault 1075275 [ 1388.324386][T17257] pgmajfault 98 [ 1388.324389][T17257] inactive_anon 296280064 [ 1388.324394][T17257] active_anon 11857920 [ 1388.324403][T17257] inactive_file 8192 [ 1388.324407][T17257] active_file 4096 [ 1388.324411][T17257] unevictable 0 [ 1388.324415][T17257] hierarchical_memory_limit 314572800 [ 1388.324420][T17257] hierarchical_memsw_limit 9223372036854771712 [ 1388.324433][T17257] total_cache 307806208 [ 1388.324437][T17257] total_rss 360448 [ 1388.324441][T17257] total_rss_huge 0 [ 1388.324446][T17257] total_shmem 307781632 [ 1388.324450][T17257] total_mapped_file 199479296 [ 1388.324454][T17257] total_dirty 8192 [ 1388.324458][T17257] total_writeback 0 [ 1388.324462][T17257] total_workingset_refault_anon 6 [ 1388.324467][T17257] total_workingset_refault_file 11231 [ 1388.324472][T17257] total_swap 127524864 [ 1388.324476][T17257] total_swapcached 190898176 [ 1388.324480][T17257] total_pgpgin 2610866 [ 1388.324484][T17257] total_pgpgout 2536141 [ 1388.324489][T17257] total_pgfault 1075275 [ 1388.324493][T17257] total_pgmajfault 98 [ 1388.324497][T17257] total_inactive_anon 296280064 [ 1388.324501][T17257] total_active_anon 11857920 [ 1388.324506][T17257] total_inactive_file 8192 [ 1388.324510][T17257] total_active_file 4096 [ 1388.324514][T17257] total_unevictable 0 [ 1388.324519][T17257] anon_cost 10053 [ 1388.324523][T17257] file_cost 0 [ 1388.324527][T17257] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2871,pid=16980,uid=0 [ 1388.324581][T17257] Memory cgroup out of memory: Killed process 16980 (syz.4.2871) total-vm:151416kB, anon-rss:0kB, file-rss:0kB, shmem-rss:115856kB, UID:0 pgtables:248kB oom_score_adj:1000 [ 1493.224219][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1494.034828][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P17155/1:b..l P16980/1:b..l [ 1494.044049][ C1] rcu: (detected by 1, t=10583 jiffies, g=116169, q=646 ncpus=2) [ 1494.051850][ C1] task:syz.4.2871 state:R running task stack:20056 pid:16980 tgid:16980 ppid:5612 task_flags:0x400e40 flags:0x0008000b [ 1494.065339][ C1] Call Trace: [ 1494.068626][ C1] [ 1494.071556][ C1] __schedule+0x1259/0x6920 [ 1494.076102][ C1] ? __pfx___schedule+0x10/0x10 [ 1494.080945][ C1] ? irqentry_exit+0x24d/0xa10 [ 1494.085712][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 1494.091092][ C1] preempt_schedule_common+0x3c/0xb0 [ 1494.096374][ C1] preempt_schedule_thunk+0x16/0x40 [ 1494.101575][ C1] _raw_spin_unlock_irq+0x44/0x50 [ 1494.106594][ C1] shrink_lruvec+0x1253/0x2670 [ 1494.111374][ C1] ? __pfx_shrink_lruvec+0x10/0x10 [ 1494.116489][ C1] ? do_shrink_slab+0xb6c/0x1200 [ 1494.121424][ C1] ? do_shrink_slab+0xcde/0x1200 [ 1494.126367][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 1494.131280][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 1494.136202][ C1] ? __pfx___might_resched+0x10/0x10 [ 1494.141458][ C1] ? page_counter_calculate_protection+0x344/0x730 [ 1494.147934][ C1] ? shrink_node+0x7a0/0x4320 [ 1494.152591][ C1] shrink_node+0x7a0/0x4320 [ 1494.157065][ C1] ? post_alloc_hook+0xed/0x120 [ 1494.161922][ C1] ? __pfx_shrink_node+0x10/0x10 [ 1494.166869][ C1] ? queue_work_on+0x11b/0x1e0 [ 1494.171613][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 1494.176786][ C1] ? queue_work_on+0x141/0x1e0 [ 1494.181528][ C1] ? do_try_to_free_pages+0x33e/0x16d0 [ 1494.186959][ C1] do_try_to_free_pages+0x33e/0x16d0 [ 1494.192237][ C1] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 1494.197959][ C1] try_to_free_mem_cgroup_pages+0x2bf/0x840 [ 1494.203851][ C1] ? psi_group_change+0x457/0xa20 [ 1494.208881][ C1] ? __pfx_try_to_free_mem_cgroup_pages+0x10/0x10 [ 1494.215286][ C1] ? psi_memstall_enter+0x226/0x3b0 [ 1494.220472][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 1494.225655][ C1] ? psi_memstall_enter+0x226/0x3b0 [ 1494.230842][ C1] try_charge_memcg+0x50b/0xf60 [ 1494.235675][ C1] ? __pfx_try_charge_memcg+0x10/0x10 [ 1494.241030][ C1] ? find_held_lock+0x2b/0x80 [ 1494.245724][ C1] ? rcu_read_unlock+0x17/0x60 [ 1494.250483][ C1] ? rcu_read_unlock+0x17/0x60 [ 1494.255228][ C1] ? find_held_lock+0x2b/0x80 [ 1494.259895][ C1] ? rcu_read_unlock+0x17/0x60 [ 1494.264634][ C1] charge_memcg+0x1ae/0x210 [ 1494.269115][ C1] __mem_cgroup_charge+0x2b/0x1c0 [ 1494.274113][ C1] shmem_alloc_and_add_folio+0x451/0xd40 [ 1494.279726][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1494.285872][ C1] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 1494.291823][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 1494.296739][ C1] shmem_get_folio_gfp+0x75b/0x1980 [ 1494.301916][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1494.307517][ C1] ? inode_set_ctime_current+0x9c/0x850 [ 1494.313038][ C1] ? find_held_lock+0x2b/0x80 [ 1494.317693][ C1] ? timestamp_truncate+0x22e/0x2f0 [ 1494.322882][ C1] shmem_write_begin+0x1a4/0x420 [ 1494.327791][ C1] ? __pfx_shmem_write_begin+0x10/0x10 [ 1494.333219][ C1] ? inode_set_ctime_current+0x283/0x850 [ 1494.338827][ C1] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1494.345662][ C1] ? inode_maybe_inc_iversion+0x169/0x220 [ 1494.351371][ C1] generic_perform_write+0x292/0xa40 [ 1494.356633][ C1] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1494.362432][ C1] ? __pfx_generic_perform_write+0x10/0x10 [ 1494.368220][ C1] ? mnt_put_write_access_file+0x4e/0x100 [ 1494.373918][ C1] ? file_update_time_flags+0x38c/0x520 [ 1494.379448][ C1] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1494.385227][ C1] shmem_file_write_iter+0x10e/0x140 [ 1494.390496][ C1] __kernel_write_iter+0x2ac/0x930 [ 1494.395583][ C1] ? __pfx___kernel_write_iter+0x10/0x10 [ 1494.401188][ C1] ? __up_read+0x333/0x980 [ 1494.405580][ C1] ? dump_user_range+0x65e/0xad0 [ 1494.410494][ C1] dump_user_range+0x3f9/0xad0 [ 1494.415238][ C1] ? __pfx_dump_user_range+0x10/0x10 [ 1494.420511][ C1] ? __pfx_writenote+0x10/0x10 [ 1494.425258][ C1] ? elf_core_dump+0x1f25/0x3d20 [ 1494.430174][ C1] elf_core_dump+0x2d68/0x3d20 [ 1494.434931][ C1] ? __pfx_elf_core_dump+0x10/0x10 [ 1494.440032][ C1] ? kasan_save_stack+0x3f/0x50 [ 1494.444872][ C1] ? kasan_save_stack+0x30/0x50 [ 1494.449696][ C1] ? kasan_save_track+0x14/0x30 [ 1494.454522][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 1494.459277][ C1] ? vfs_coredump+0x21f6/0x54a0 [ 1494.464099][ C1] ? get_signal+0x1f2a/0x21e0 [ 1494.468760][ C1] ? arch_do_signal_or_restart+0x91/0x7e0 [ 1494.474466][ C1] ? 0xffffffffff600000 [ 1494.478607][ C1] ? lock_acquire+0x1d1/0x380 [ 1494.483255][ C1] ? get_signal+0x1f2a/0x21e0 [ 1494.487908][ C1] ? vfs_coredump+0x281a/0x54a0 [ 1494.492743][ C1] vfs_coredump+0x281a/0x54a0 [ 1494.497402][ C1] ? __pfx_vfs_coredump+0x10/0x10 [ 1494.502418][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 1494.507332][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 1494.512254][ C1] ? lock_acquire+0x1d1/0x380 [ 1494.516901][ C1] ? unwind_next_frame+0xbd/0x2090 [ 1494.521988][ C1] ? lock_acquire+0x1d1/0x380 [ 1494.526641][ C1] ? bpf_ksym_find+0x128/0x1c0 [ 1494.531401][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1494.537529][ C1] ? arch_stack_walk+0xa6/0xf0 [ 1494.542271][ C1] ? __sigqueue_free+0xbe/0x2a0 [ 1494.547102][ C1] ? stack_trace_save+0x8e/0xc0 [ 1494.551921][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1494.557265][ C1] ? stack_depot_save_flags+0x27/0x9f0 [ 1494.562705][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 1494.567653][ C1] ? proc_coredump_connector+0x2d3/0x4f0 [ 1494.573255][ C1] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1494.579211][ C1] ? rcu_is_watching+0x13/0xc0 [ 1494.583960][ C1] get_signal+0x1f2a/0x21e0 [ 1494.588451][ C1] ? __pfx_get_signal+0x10/0x10 [ 1494.593285][ C1] ? __pfx_force_sig_fault+0x10/0x10 [ 1494.598545][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 1494.604068][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1494.610205][ C1] irqentry_exit+0x402/0xa10 [ 1494.614771][ C1] asm_exc_page_fault+0x26/0x30 [ 1494.619593][ C1] RIP: 0033:0x7fd92059e199 [ 1494.623984][ C1] RSP: 002b:00007fd91e7f5fd8 EFLAGS: 00010246 [ 1494.630032][ C1] RAX: 0000000000000000 RBX: 00007fd920825fa0 RCX: 00007fd92059e199 [ 1494.638005][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1494.645973][ C1] RBP: 00007fd920635888 R08: 0000000000000000 R09: 0000000000000000 [ 1494.653919][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1494.661871][ C1] R13: 00007fd920826038 R14: 00007fd920825fa0 R15: 00007ffc03e92ee8 [ 1494.669859][ C1] [ 1494.672864][ C1] task:syz.5.2926 state:R running task stack:23080 pid:17155 tgid:17155 ppid:11584 task_flags:0x40064c flags:0x00080001 [ 1494.686315][ C1] Call Trace: [ 1494.689574][ C1] [ 1494.692481][ C1] __schedule+0x1259/0x6920 [ 1494.696965][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 1494.701891][ C1] ? __pfx___schedule+0x10/0x10 [ 1494.706711][ C1] ? rcu_is_watching+0x13/0xc0 [ 1494.711451][ C1] preempt_schedule_irq+0x4e/0x90 [ 1494.716464][ C1] irqentry_exit+0x205/0xa10 [ 1494.721287][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1494.727237][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x0/0x20 [ 1494.733976][ C1] Code: 0c 24 48 89 f2 48 89 fe bf 06 00 00 00 e9 a8 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 0c 24 40 0f b6 d6 40 0f b6 f7 bf 01 00 00 00 e9 [ 1494.753568][ C1] RSP: 0018:ffffc90003f8f280 EFLAGS: 00000246 [ 1494.759618][ C1] RAX: 0000000000000000 RBX: ffffea0002396580 RCX: 0000000000000000 [ 1494.767567][ C1] RDX: ffff888021384b00 RSI: 0000000000000000 RDI: 000000000000003f [ 1494.775509][ C1] RBP: ffffea00023965b4 R08: 0000000000000005 R09: 0000000000000000 [ 1494.783471][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 000000000000158b [ 1494.791518][ C1] R13: ffff88802affc580 R14: 0000000000000000 R15: dffffc0000000000 [ 1494.799481][ C1] find_lock_entries+0x295/0x1190 [ 1494.804497][ C1] ? __pfx_find_lock_entries+0x10/0x10 [ 1494.809933][ C1] ? __pfx___might_resched+0x10/0x10 [ 1494.815188][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 1494.821488][ C1] shmem_undo_range+0x212/0x1570 [ 1494.826399][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 1494.831751][ C1] ? lock_acquire+0x1d1/0x380 [ 1494.836413][ C1] ? is_bpf_text_address+0x25/0x1a0 [ 1494.841606][ C1] shmem_evict_inode+0x3b1/0xca0 [ 1494.846517][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1494.851944][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1494.858069][ C1] ? lock_acquire+0x1d1/0x380 [ 1494.862720][ C1] ? find_held_lock+0x2b/0x80 [ 1494.867370][ C1] ? evict+0x37e/0xad0 [ 1494.871496][ C1] ? evict+0x37e/0xad0 [ 1494.875538][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1494.880977][ C1] evict+0x3c2/0xad0 [ 1494.884854][ C1] ? fsnotify_grab_connector+0x4b/0x290 [ 1494.890480][ C1] ? __pfx_evict+0x10/0x10 [ 1494.894876][ C1] ? lock_acquire+0x1d1/0x380 [ 1494.899538][ C1] ? iput.part.0+0x981/0x1050 [ 1494.904189][ C1] iput.part.0+0x989/0x1050 [ 1494.908665][ C1] iput+0x35/0x40 [ 1494.912280][ C1] dentry_unlink_inode+0x284/0x470 [ 1494.917367][ C1] dentry_kill+0x25d/0xc20 [ 1494.921756][ C1] dput.part.0+0xd7/0x240 [ 1494.926059][ C1] dput+0x1f/0x30 [ 1494.929666][ C1] __fput+0x519/0xb50 [ 1494.933625][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1494.938796][ C1] task_work_run+0x150/0x240 [ 1494.943391][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1494.948479][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 1494.953665][ C1] do_exit+0x8da/0x2a50 [ 1494.957807][ C1] ? __pfx_do_exit+0x10/0x10 [ 1494.962371][ C1] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1494.968326][ C1] do_group_exit+0xd5/0x2a0 [ 1494.972817][ C1] get_signal+0x1ec7/0x21e0 [ 1494.977315][ C1] ? __pfx_get_signal+0x10/0x10 [ 1494.982162][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 1494.987687][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1494.993823][ C1] irqentry_exit+0x402/0xa10 [ 1494.998388][ C1] asm_exc_page_fault+0x26/0x30 [ 1495.003223][ C1] RIP: 0033:0x7f035639e1a1 [ 1495.007614][ C1] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1495.013654][ C1] RAX: 0000000000000000 RBX: 00007f0356626090 RCX: 00007f035639e199 [ 1495.021596][ C1] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1495.029541][ C1] RBP: 00007f0356435888 R08: 0000000000000000 R09: 0000000000000000 [ 1495.037485][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1495.045428][ C1] R13: 00007f0356626128 R14: 00007f0356626090 R15: 00007ffe9ec0ee88 [ 1495.053389][ C1] [ 1495.056407][ C1] rcu: rcu_preempt kthread starved for 10588 jiffies! g116169 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 1495.067512][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1495.077556][ C1] rcu: RCU grace-period kthread stack dump: [ 1495.083453][ C1] task:rcu_preempt state:R running task stack:27560 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1495.096914][ C1] Call Trace: [ 1495.100176][ C1] [ 1495.103086][ C1] __schedule+0x1259/0x6920 [ 1495.107569][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 1495.112500][ C1] ? __pfx___schedule+0x10/0x10 [ 1495.117335][ C1] ? find_held_lock+0x2b/0x80 [ 1495.122021][ C1] ? schedule+0x225/0x2c0 [ 1495.126352][ C1] schedule+0xdd/0x2c0 [ 1495.130419][ C1] schedule_timeout+0x127/0x280 [ 1495.135272][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1495.140656][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1495.145945][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1495.151748][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 1495.157206][ C1] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 1495.161975][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1495.167260][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1495.172204][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1495.177406][ C1] ? rcu_is_watching+0x13/0xc0 [ 1495.182174][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1495.187984][ C1] rcu_gp_kthread+0x17a/0x220 [ 1495.192671][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1495.197864][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1495.203670][ C1] ? __kthread_parkme+0x18f/0x230 [ 1495.208697][ C1] ? kthread+0x13a/0x450 [ 1495.212946][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1495.218140][ C1] kthread+0x373/0x450 [ 1495.222210][ C1] ? __pfx_kthread+0x10/0x10 [ 1495.226800][ C1] ret_from_fork+0x730/0xd60 [ 1495.231386][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1495.236491][ C1] ? __switch_to+0x800/0x10f0 [ 1495.241181][ C1] ? __pfx_kthread+0x10/0x10 [ 1495.245786][ C1] ret_from_fork_asm+0x1a/0x30 [ 1495.250675][ C1] [ 1495.253685][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1495.260001][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1495.270494][ C1] Tainted: [L]=SOFTLOCKUP [ 1495.274806][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1495.284856][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1495.290492][ C1] Code: e7 92 02 e9 53 50 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 c8 18 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1495.310093][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 00000242 [ 1495.316154][ C1] RAX: 000000000659bc15 RBX: ffff88801f68cb00 RCX: ffffffff8bd2f235 [ 1495.324122][ C1] RDX: 0000000000000001 RSI: ffffffff8e38f6ca RDI: ffffffff8c623a80 [ 1495.332084][ C1] RBP: ffffed1003ed1960 R08: 0000000000000001 R09: ffffed10170a67bd [ 1495.340046][ C1] R10: ffff8880b8533deb R11: 0000000000000001 R12: 0000000000000000 [ 1495.348007][ C1] R13: 0000000000000000 R14: 1ffff92000034fc4 R15: dffffc0000000000 [ 1495.355977][ C1] FS: 0000000000000000(0000) GS:ffff888123c4e000(0000) knlGS:0000000000000000 [ 1495.364986][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1495.371565][ C1] CR2: 0000200000077030 CR3: 0000000059c28000 CR4: 00000000003526f0 [ 1495.379532][ C1] Call Trace: [ 1495.382804][ C1] [ 1495.385727][ C1] default_idle+0x9/0x10 [ 1495.389973][ C1] default_idle_call+0x6c/0xb0 [ 1495.394731][ C1] do_idle+0x3ae/0x5b0 [ 1495.398804][ C1] ? __pfx_do_idle+0x10/0x10 [ 1495.403388][ C1] ? finish_task_switch.isra.0+0x149/0x10d0 [ 1495.409286][ C1] cpu_startup_entry+0x4f/0x60 [ 1495.414049][ C1] start_secondary+0x21d/0x2d0 [ 1495.418981][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1495.424267][ C1] common_startup_64+0x13e/0x158 [ 1495.429217][ C1] [ 1496.974644][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1496.974695][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1496.975963][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1496.976002][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1497.221261][ T32] oom_reaper: reaped process 16980 (syz.4.2871), now anon-rss:0kB, file-rss:0kB, shmem-rss:115104kB SYZFAIL: failed to send rpc fd=3 want=544 sent=0 n=-1 (errno 32: Broken pipe) [ 1497.975786][ T30] audit: type=1400 audit(1791488093.988:16526): avc: denied { write } for pid=5586 comm="syz-executor" path="pipe:[4886]" dev="pipefs" ino=4886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1499.997385][T13974] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.133070][T13974] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.278143][T13974] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.404499][T13974] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.546009][ T30] audit: type=1400 audit(1791488096.558:16527): avc: denied { read } for pid=5265 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1500.587289][ T30] audit: type=1400 audit(1791488096.598:16528): avc: denied { search } for pid=5265 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1500.590377][ T30] audit: type=1400 audit(1791488096.598:16529): avc: denied { search } for pid=5265 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1500.592104][ T30] audit: type=1400 audit(1791488096.598:16530): avc: denied { search } for pid=5265 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1500.592128][ T30] audit: type=1400 audit(1791488096.598:16531): avc: denied { read } for pid=5265 comm="dhcpcd" name="n48" dev="tmpfs" ino=8156 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1500.600641][ T30] audit: type=1400 audit(1791488096.608:16532): avc: denied { open } for pid=5265 comm="dhcpcd" path="/run/udev/data/n48" dev="tmpfs" ino=8156 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1500.600689][ T30] audit: type=1400 audit(1791488096.608:16533): avc: denied { getattr } for pid=5265 comm="dhcpcd" path="/run/udev/data/n48" dev="tmpfs" ino=8156 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1500.829878][T13974] bridge_slave_1: left allmulticast mode [ 1500.829897][T13974] bridge_slave_1: left promiscuous mode [ 1500.832239][T13974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.891061][ T30] audit: type=1400 audit(1791488096.898:16534): avc: denied { read } for pid=17271 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1500.891240][ T30] audit: type=1400 audit(1791488096.898:16535): avc: denied { read open } for pid=17271 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1500.962343][T13974] bridge_slave_0: left allmulticast mode [ 1500.962360][T13974] bridge_slave_0: left promiscuous mode [ 1500.962472][T13974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.559416][T13974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1501.564089][T13974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1501.588648][T13974] bond0 (unregistering): Released all slaves [ 1501.602707][T13974] bond1 (unregistering): (slave veth3): Releasing active interface [ 1501.603595][T13974] bond1 (unregistering): Released all slaves [ 1501.630533][ T5265] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1502.248484][T13974] hsr_slave_0: left promiscuous mode [ 1502.248831][T13974] hsr_slave_1: left promiscuous mode [ 1502.249248][T13974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1502.249260][T13974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1502.249783][T13974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1502.249796][T13974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1502.252257][T13974] veth1_macvtap: left promiscuous mode [ 1502.252278][T13974] veth0_macvtap: left promiscuous mode [ 1502.252320][T13974] veth1_vlan: left promiscuous mode [ 1502.252350][T13974] veth0_vlan: left promiscuous mode [ 1502.411559][T13974] team0 (unregistering): Port device team_slave_1 removed [ 1502.424870][T13974] team0 (unregistering): Port device team_slave_0 removed [ 1502.492990][ T5265] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1502.703956][T13974] IPVS: stop unused estimator thread 0... [ 1502.910305][T13974] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.920310][ T5265] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1502.976304][T13974] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.030509][T13974] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.112021][T13974] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.169854][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1503.169871][ T30] audit: type=1400 audit(1791488099.178:16549): avc: denied { write } for pid=17312 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1503.252145][ T30] audit: type=1400 audit(1791488099.248:16550): avc: denied { write } for pid=17323 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1503.328536][ T5265] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1503.426006][T13974] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.542258][T13974] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.596049][T13974] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.599564][ T30] audit: type=1400 audit(1791488099.608:16551): avc: denied { write } for pid=17327 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1503.669124][T13974] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.672395][ T30] audit: type=1400 audit(1791488099.678:16552): avc: denied { write } for pid=17338 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1503.746053][ T5265] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1503.927870][T13974] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.019562][T13974] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0