last executing test programs: 13.698186238s ago: executing program 1 (id=965): r0 = socket(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000001f00)=[{{&(0x7f0000000300)=@nl, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000440)=""/88, 0x58}, {&(0x7f00000004c0)=""/36, 0x24}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/46, 0x2e}, {&(0x7f0000000580)=""/191, 0xbf}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x6, &(0x7f00000016c0)=""/161, 0xa1}, 0x3}, {{&(0x7f0000001780)=@xdp, 0x80, &(0x7f0000001980)=[{&(0x7f0000001800)=""/154, 0x9a}, {&(0x7f00000018c0)=""/170, 0xaa}], 0x2, &(0x7f00000019c0)=""/222, 0xde}, 0x1}, {{&(0x7f0000001fc0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001640)=""/92, 0x5c}, {&(0x7f0000001bc0)=""/135, 0x87}, {&(0x7f0000001c80)=""/241, 0xf1}, {&(0x7f0000001d80)=""/8, 0x8}], 0x4, &(0x7f0000001e00)=""/243, 0xf3}, 0xa}], 0x3, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x168) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') chdir(&(0x7f00000001c0)='./file1\x00') r4 = creat(&(0x7f0000000000)='./file0\x00', 0x78) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c4601ff1f02060000000000000003000600ffffff7f9f01000038000000c5020000000400000400200002"], 0x78) 12.664496467s ago: executing program 2 (id=968): socket$alg(0x26, 0x5, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x41) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x1000000) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32, @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r5, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000000), &(0x7f0000000140)='%pI4 \x00'}, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in, @in6=@empty}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r6, 0x9, 0x1, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000240)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0]}, 0x40) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) 11.583106039s ago: executing program 1 (id=971): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) syz_open_dev$ttys(0xc, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000001c0)={0x80000000, "14e6498c270e00e2fff9cc808000000000000000040000002be8ffffffffffff"}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xfffffffffffffd91, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x0, 0x9, 0x0, 0xa, 0x80000006, 0x3fd}, 0x0, 0x0) 11.578570679s ago: executing program 2 (id=972): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x10, 0xfffffffc, 0x0, {{0x6, 0x4, 0x0, 0x3c, 0x18, 0x0, 0xfffc, 0xfb, 0x89, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xffffffff, {[@end]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f000000f840)=@deltfilter={0x2354, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0x9, 0x3}, {0x6, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x2324, 0x2, [@TCA_BASIC_ACT={0x398, 0x3, [@m_csum={0x148, 0x7, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x9ba, 0x0, 0x5, 0xc}, 0x51}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000000, 0x7fffffff, 0x8, 0xf59f1516, 0x9}, 0x5d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x54a4, 0x1c, 0x4, 0x6, 0x4}, 0xa}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3ff, 0xfd, 0x8, 0x3, 0x9}, 0x2f}}]}, {0xa9, 0x6, "942d8a768ad74f1037ff015636af6cf24c6fd7e38a89d78a98dfa51fc84771965508235fce6c48bee52662cb3c4cc81a10af030b1daa60f3903b7daad41191a3e2e0cc620cec9f397dbefe4ee0f3703a1dba3d96d63961192d23668b7cafc9411f1a4fb3a3d067871fde9c789b93f8dbf7c3b5e4c22525c81824ed48fcd3a013c919957ad740123d0e402e97645dbb4f075b426b7bf53703a941552f5ea752b37defc7ccc4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x7, 0x2}}}}, @m_ct={0x13c, 0x18, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @private=0xa010102}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_CT_PARMS={0x18, 0x1, {0xffffe47f, 0x10, 0x6, 0x2, 0x9}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010101}, @TCA_CT_LABELS={0x14, 0x7, "b8bedf312152e88146bc8047d6fa79bd"}]}, {0xb9, 0x6, "62d738238387d05bf4dbbcc557b5a07fe2141881f69b52623700a81f5fa6fa7b1baad7858b1be25217d0da3f0ddbb2ecd39de6ce8a7ab0857a58fd5751759fd2746550b6e4d38506e748924f802bbf0956e8b339eafa7f6647f5960f11887b4cd87231f43a660612602d21764a8518d5c56ae7097230235e19e347513388762a3391504dd673e36f6d4610042b6b18ed4681c1a5cdf42608205ec54fdd8b4ec5c85c0ff8bb9bb0464a8e08df50699136ff9a4d14b0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_vlan={0x110, 0x5, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x0, 0x0, 0x9}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x644}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0xf, 0x8, 0x9, 0x11bec165}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x100, 0x8, 0x22b6, 0x7}, 0x2}}]}, {0x5d, 0x6, "163dfcabe5c8aeb4f6ac7b873f9c90c8d33d4edc031049e95d0cca9f1a7e3b33a079464cd7c480da2f591bc4d88ac7be9ebc4c6ac733f05173749f2708dc9f41e20f545af2799f2a78a33100b26032bad0f8ff649e7366663e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BASIC_ACT={0x1f88, 0x3, [@m_mirred={0xec, 0xe, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x3cb2, 0xffffffffffffffff, 0xfffffff9, 0x7c69}, 0x7626fcca1576c82a}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x8, 0x0, 0x8001, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x6, 0x6, 0x0, 0x6}, 0x2}}]}, {0x5d, 0x6, "aa3a03cf7b8eb290b94db59c3f3fcb086a5c9a1fbcf087c7fe8faf3053a2d9b1a3fa880b12aa3a863dca933a5d7b910f5da29c8408a356dcf7564f6b56bbf15b9052ca747360a130655d0f97bfb4362c1d791f0051b9a53292"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_bpf={0x50, 0x14, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x80, 0x10000000, 0x333, 0xa0000000}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_pedit={0x1e48, 0x18, 0x0, 0x0, {{0xa}, {0x1e1c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x12c, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x4}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0x34, 0x5, 0x0, 0x1, [{0x4}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x2, 0x1, 0x3, 0x7d, 0xfffffffe}, 0x60, 0x7, [{0x6, 0x7, 0x8, 0x6, 0x8}, {0x8, 0x8, 0x80000000, 0x8, 0x10, 0x9}, {0x2, 0x4, 0x8001, 0x8, 0x5, 0x9}]}, [{0x915f, 0x100, 0x3, 0xb, 0x5, 0x3}, {0x5, 0x7fff, 0x6, 0x9, 0x1b1b49d4, 0x5}, {0x1, 0x8137, 0x81, 0x334, 0x3, 0x9}, {0xffff, 0x7ff, 0xc56, 0x5, 0x7, 0x28e}, {0x84, 0x1, 0x1, 0xd1fd, 0xb, 0x1000}, {0xffffffff, 0x101, 0x7, 0x400, 0x3, 0x6}, {0x9, 0x8, 0x1, 0x4, 0x1, 0x80000000}, {0x6, 0x8, 0x0, 0xe, 0x671123c8, 0xffffffff}, {0x5, 0x8, 0x9, 0x3, 0x2, 0xfffffe01}, {0x2bac, 0x4, 0x8, 0x8, 0x6, 0x6}, {0x10000, 0x5, 0x10, 0x8, 0x4, 0xfffffff8}, {0x200, 0x7ff, 0x81, 0x4, 0x3, 0x5e7}, {0x1, 0x2, 0x173, 0x21c, 0x4, 0x4}, {0x1, 0xff, 0x0, 0x4, 0x3dff, 0x1ff}, {0x1, 0x3, 0x5, 0x5, 0x7, 0x3}, {0x2, 0x9, 0x2, 0x8, 0x6}, {0x5, 0x6, 0x3, 0x9, 0x4, 0x8}, {0x3ff, 0x5, 0x71b, 0x1, 0x1, 0xffffff80}, {0xfffff5ba, 0x81, 0x1, 0x3, 0x6e20, 0xd}, {0x7, 0x2, 0x8b000, 0x1, 0x5, 0xffff7711}, {0x4, 0xff, 0x4, 0x2, 0x7f, 0xdb}, {0x4, 0x38, 0x2, 0x5d7, 0x8, 0x10}, {0x4, 0x9, 0x82, 0x1, 0x0, 0x1}, {0x1000, 0x8001, 0x3, 0x6, 0x362, 0xf7}, {0xf, 0x789, 0x5, 0x4, 0xbf, 0x4}, {0x72b, 0x3, 0x7, 0x101, 0xfe, 0x1}, {0x1, 0x4, 0x6, 0x1, 0x6, 0x4}, {0x7, 0x3, 0x569, 0x200, 0x1, 0x78e4}, {0x9, 0xf1fc, 0x5, 0x6, 0xfffffffe, 0x1}, {0x4, 0x134c, 0x800, 0x5, 0x4, 0x6}, {0x7f, 0x1, 0x6, 0x2, 0x400, 0x3e13}, {0x8000, 0x9, 0x7d5, 0x2, 0x1}, {0x2, 0x2, 0x7, 0x8, 0x3, 0x9}, {0x2, 0x3, 0x2f7, 0x5, 0x5, 0xf7e}, {0x9, 0x9, 0x7305, 0x0, 0x7, 0x9}, {0x8, 0x1, 0x8, 0x0, 0x6, 0x3}, {0x10000, 0x9, 0x80000001, 0x3, 0x1d3d, 0x10}, {0x7f, 0x800, 0x5, 0xc58f, 0x3ff, 0xf}, {0x6, 0xa318, 0xe, 0x7, 0x4, 0x7}, {0x200, 0x1, 0x0, 0x3, 0xbc35}, {0x9, 0x5, 0x4, 0x2, 0xf, 0x5}, {0x91, 0x8, 0x2, 0x57, 0xe028, 0x6}, {0x4, 0x1ff, 0x2ec, 0xd, 0x7, 0x2}, {0xd4a, 0x8, 0x8, 0x2, 0x8, 0x4}, {0x274d, 0x2, 0x968, 0x7c, 0x9, 0x80}, {0x10001, 0xa, 0x40, 0x45, 0xe, 0x1}, {0x5, 0xabba, 0xd, 0x2, 0x6, 0x5}, {0x6, 0x3, 0x9, 0xfffffffb, 0x10001}, {0x80, 0x5, 0x800, 0x5, 0x4, 0x6}, {0x80000001, 0x8, 0x3, 0x1, 0x280, 0x7}, {0xfff4, 0x6, 0x1d, 0x9, 0xffffffff, 0xcc6c}, {0x6, 0x6, 0x7, 0xa1, 0x40, 0xc0000000}, {0x7fffffff, 0x40, 0x9, 0x3, 0x10001, 0x7}, {0x80000000, 0xeb, 0x10001, 0x8, 0x3, 0x3}, {0x5, 0x4763, 0x10000, 0x400, 0x800, 0x9}, {0xfffff450, 0xa, 0x0, 0xd, 0x0, 0x5a219c22}, {0x4, 0x5, 0xfffffff9, 0x1000, 0x1}, {0xffff, 0xd, 0xe, 0x7, 0xe2440000, 0x80}, {0x8, 0xffffffff, 0x2, 0xa, 0x80c46, 0x1}, {0x8, 0x10000, 0x9bc, 0x3ff, 0x1, 0x9}, {0x5, 0x2, 0x9, 0x6, 0x6, 0x7}, {0x6, 0x8, 0x80000001, 0x2, 0x8, 0x237}, {0x0, 0xf3, 0x2, 0x6a, 0x12, 0xffffffff}, {0x0, 0x5, 0x7, 0x1, 0xffffff01, 0x8}, {0x2, 0x6, 0xe9cc0000, 0xfffffffe, 0x5297, 0x1}, {0x7, 0x1ff, 0x57fe, 0x3, 0x800, 0x8}, {0xe, 0x7, 0x80, 0x7, 0x9, 0x200}, {0x500000, 0x3f, 0x5, 0x4408, 0x8, 0x13}, {0x5, 0x8, 0xfffff001, 0x0, 0x9, 0x4}, {0xfff, 0x5, 0x974, 0x3d, 0x5, 0x7}, {0x7, 0x483, 0x4, 0x0, 0xf119, 0xfffffc01}, {0x0, 0x0, 0x80, 0x3ff, 0xea0, 0x5}, {0x6, 0x7, 0x6, 0x7, 0xfffffff8, 0x1}, {0x8, 0x100, 0x10, 0x3, 0x9, 0x400}, {0x5, 0xfffe0000, 0x880e4e1, 0x8, 0x101, 0x3}, {0x3ff, 0x0, 0x5, 0x2, 0x5, 0x7ff}, {0x35, 0x7, 0x2, 0x80, 0x80, 0x7}, {0x8000, 0x5, 0x5, 0x9, 0x3, 0x800}, {0xd4, 0x1, 0xffffffff, 0x100, 0x9, 0x5}, {0x1, 0x3, 0x4, 0x5, 0x8, 0x4}, {0x1, 0x9, 0x1, 0x48, 0x80, 0x3d}, {0x3ff, 0x162, 0x9, 0x3, 0x1ff, 0x100}, {0x2, 0x86, 0x1, 0x2, 0x7, 0x3}, {0x6, 0x1, 0x8, 0x8001, 0x6, 0x5}, {0x6, 0x1, 0x1, 0x2, 0x81, 0x80}, {0x100, 0xe, 0x5, 0x81, 0x7, 0x3ff}, {0x4, 0x127, 0x3, 0x1, 0xdd39, 0x4000000}, {0x1ff, 0x6, 0x800, 0xfffffffb, 0x7, 0x1ff}, {0x1, 0x80, 0x7, 0x5, 0x6, 0x8}, {0x3, 0x6, 0x5, 0x8001, 0x7fff, 0x47}, {0x7, 0x8001, 0x8, 0x9, 0x2, 0x8}, {0x0, 0x200, 0x4, 0x80, 0xffe00000, 0x8}, {0x0, 0x10000, 0x462b, 0x4, 0x10, 0x1}, {0x39, 0x50, 0xe, 0x8, 0xfffffff4, 0x3}, {0x24, 0x5, 0x7, 0x5, 0x2, 0xa36}, {0x5555, 0xff, 0xc0000, 0x6, 0xfffffff7, 0x7fffffff}, {0x4, 0x1, 0x7fff, 0x8, 0x0, 0x8}, {0xb, 0x3, 0x8000, 0x1, 0x0, 0x3}, {0xb1, 0x5028ec8f, 0x2, 0x2, 0x5, 0xff}, {0x0, 0x3, 0x4, 0x2, 0x6c, 0x2}, {0x1, 0xd, 0x5c2faec7, 0x6, 0x2, 0x572f}, {0x6, 0x1, 0x9, 0x9, 0x6, 0x722}, {0xdd, 0xee, 0x8, 0x3, 0x0, 0x2ef}, {0x7, 0x9, 0x8, 0x0, 0x5, 0xcb}, {0x676, 0x7f, 0x3, 0xe76, 0xd, 0x4}, {0x4, 0xc84, 0x7f7, 0x44e2, 0x200, 0x8}, {0x2, 0x7, 0x800, 0xc, 0x1000, 0x8}, {0x8, 0xfffffffc, 0x0, 0x9, 0xa, 0x50}, {0x1, 0x4, 0x7, 0x7, 0x2, 0x8}, {0x80, 0x40, 0x2, 0x6, 0x40, 0x6}, {0xf, 0x2, 0x8000, 0x30, 0xfffffff9, 0x7ff}, {0x6, 0xffffffff, 0x7, 0x1, 0x1, 0x50}, {0x8, 0xff, 0x6, 0x10, 0x0, 0x9}, {0x3, 0x2, 0x9, 0x5e838f4e, 0x2, 0x1ec}, {0x10000, 0xc, 0x5, 0x5fb9a1ff, 0xc8, 0x4}, {0x4, 0x2, 0x0, 0x3, 0xaaf, 0x9}, {0x10, 0x3, 0xa17, 0x5bb2, 0xe81, 0x2}, {0x8000, 0x7fffffff, 0x400, 0x3, 0xffff0000, 0x2}, {0x7fff, 0x6, 0x3ff, 0xe, 0x75, 0x3}, {0x7, 0x0, 0x5, 0xfffffffc, 0xb188, 0x3}, {0xf494, 0x5, 0x9, 0x5, 0x1}, {0x3, 0x1, 0x7, 0x10, 0x7, 0x1e6a}, {0x4, 0x7, 0x7fffffff, 0x81, 0x7ff, 0x4}, {0x5, 0x0, 0x3, 0x100, 0xfffffff7, 0x4}, {0xe3, 0x9, 0x6, 0xd9, 0x2, 0x400}, {0x10001, 0xa000, 0x9, 0xfffeffff, 0x100, 0xe3}, {0xb009, 0x61b, 0x0, 0x4, 0x1, 0xc7}, {0x34, 0x8000, 0x0, 0x4, 0x9, 0x1}], [{0x2}, {0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x2}, {0x6, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x5}, {0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {}, {0x3}, {0x3, 0x1}, {0x6}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x5}, {0x2, 0x1925ad28dfeceefc}, {0x3, 0x1}, {0x4}, {}, {0x4}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x1}, {0x7}, {0x3, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {0x4}, {0x1}, {0x5}, {0x3}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x2}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {}, {0x5}, {0x3}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0xe0, 0xa, 0x7, 0xfffffffb, 0x2311b9c7}, 0x71, 0x0, [{0x836f, 0x1, 0x4, 0xef8, 0x4, 0x5}, {0x2, 0xfdfa, 0x4, 0x80000001, 0x1000000, 0xffffff7f}]}, [{0xe, 0x100, 0x1, 0x4, 0x7, 0x33}, {0x7, 0xad, 0xfffff201, 0x800, 0x39, 0xfffffffb}, {0x7, 0x81, 0x6, 0x0, 0x10001, 0x8001}, {0xf, 0x3, 0x4, 0x1, 0x3, 0x17}, {0xc22d, 0x8, 0x259f4d72, 0x2, 0x0, 0x101}, {0x8, 0x0, 0x76, 0x10001, 0xa807}, {0x5, 0x0, 0x1c, 0x9, 0x2c9a, 0x8}, {0x0, 0x8, 0x4, 0x7fff, 0x0, 0x100}, {0x2, 0x0, 0x3, 0xffffffff, 0xfffffffa, 0x1}, {0x0, 0x3, 0x9, 0x7, 0xfffffffa}, {0xfffffff8, 0xfffffffc, 0x9, 0x80, 0x80000000, 0xff8d}, {0x22, 0x2, 0xf2, 0x0, 0x10000, 0x7}, {0x26c0, 0x100, 0x9, 0x547b, 0x7fffffff, 0x59}, {0x2, 0x6, 0x1, 0x6, 0x916f, 0x6}, {0x1, 0x9, 0xe3a, 0x6, 0x2, 0xfff}, {0x3, 0x3, 0x3, 0x80000001, 0x4, 0x5}, {0x7e, 0x1, 0x1, 0x8001, 0x8, 0x80}, {0x5, 0x6aa, 0x3, 0x80000000, 0x1, 0x62c9}, {0x9, 0x0, 0x6, 0x8, 0x5, 0x6}, {0xce7, 0x7, 0x1, 0x10, 0x0, 0x3}, {0x9, 0x7, 0x0, 0x5, 0x311b}, {0x0, 0x5, 0x7ff, 0x5, 0x7, 0x100}, {0x2, 0x0, 0xffffff71, 0x3, 0x7e, 0x4}, {0xa, 0x4, 0x4, 0x9, 0x5, 0x6e}, {0x0, 0x5, 0x0, 0x40, 0x4, 0xe504}, {0x4, 0x5, 0x80000001, 0x1, 0x15c, 0x5}, {0x3ff, 0x2, 0x8, 0xf, 0x4}, {0x7, 0x898c, 0x7fffffff, 0x8, 0x7}, {0x5, 0x0, 0x4a2, 0xfff, 0x7f, 0x17a960c2}, {0x8, 0x8, 0x7, 0x4, 0x401, 0x6d386fad}, {0x8, 0x29, 0x6, 0x8, 0x800, 0x2}, {0x5, 0xfffffff9, 0x3, 0x9, 0x3, 0x5}, {0x9, 0x6, 0x1874, 0xc, 0x8, 0x1}, {0x3, 0x1, 0x3ff, 0x2, 0x3, 0x6}, {0x1, 0x2, 0x3, 0xfffffff7, 0x200, 0x6}, {0xfffffffe, 0xb, 0x7, 0xf82d, 0xfb6, 0x6}, {0x3, 0x9, 0x6, 0xc6, 0xfffffffa, 0x1}, {0x5, 0x1, 0x34, 0x1000, 0x6, 0x7}, {0x5, 0x5, 0x8, 0x8, 0x2a5, 0xd}, {0xc, 0x2, 0x6, 0x1, 0x0, 0x9}, {0xb6b, 0xfa, 0x5, 0x6, 0x8, 0x8}, {0x3, 0x10, 0x2, 0x80000000, 0x9735, 0x2}, {0x1ff, 0x9, 0x8, 0x101, 0x10}, {0x40, 0x80000000, 0x130, 0x9, 0x62c800, 0x3}, {0x2b2, 0x7, 0x6, 0xec26, 0x1, 0x3}, {0x1, 0x100, 0x3ff, 0x7f, 0x0, 0x7}, {0x8000, 0x7, 0xab02, 0x4, 0x6, 0x1}, {0x8, 0x8001, 0x3140, 0xe, 0x100, 0x7}, {0xa27, 0x8, 0x1, 0xe, 0x5, 0x3}, {0x7, 0x3, 0x3, 0x1ff, 0x3, 0x1}, {0x0, 0xfff, 0xbbf, 0x2, 0xd416, 0x100}, {0x2, 0x81, 0x0, 0x10000, 0x81}, {0xaa90, 0x5, 0x401, 0x72c, 0x1, 0x5}, {0x9, 0x4, 0x8, 0x7, 0x71, 0x401}, {0x10000, 0x2, 0x3, 0xb, 0x1f73, 0x7fffffff}, {0x5, 0x3, 0x207, 0x4, 0x1000, 0x9}, {0x8, 0x9, 0x6, 0x9, 0x1ff, 0x7}, {0x5, 0xffff86c2, 0x4, 0x5, 0x0, 0x101}, {0xff, 0x7, 0x0, 0x8, 0x79a, 0x7ff}, {0x7, 0x4, 0x7, 0x1, 0xfff, 0x2}, {0x2, 0x7ff, 0x40, 0x7ff, 0xa8d, 0x3ff}, {0x6, 0x1, 0xfb, 0x4, 0x4, 0x66}, {0x7, 0x2, 0xf, 0x7, 0x6, 0x80000000}, {0xaf38, 0x3, 0x3, 0x7, 0xfff, 0x4}, {0x6, 0x200, 0x3, 0x4, 0x0, 0x1}, {0x1, 0x3, 0x3, 0x10, 0xd8d, 0x5c207cc1}, {0x0, 0x7ab, 0x6, 0x8, 0x7, 0x3}, {0x9947, 0x1, 0x1000, 0x9, 0xfffffffa, 0x9}, {0x7fffffff, 0xffffffff, 0xb83, 0x6, 0x0, 0x6}, {0x4, 0xff, 0x6, 0xfa, 0x6}, {0x800, 0x4, 0x45, 0x1, 0x7f, 0x9}, {0x0, 0x28, 0x4, 0xa59, 0x4, 0x40}, {0x4, 0x4, 0x74e6, 0xc, 0x8, 0x3a}, {0x6, 0xd, 0x6, 0x1ff, 0x5b24, 0x3}, {0xf1, 0x8, 0x7fff, 0x2, 0x2, 0x3}, {0x1, 0x5, 0x7fffffff, 0x8000, 0x0, 0x200}, {0x9, 0x5, 0xa372, 0xfff, 0x7fff, 0x297}, {0x1ff, 0x2, 0x6, 0x8, 0xfffffff9, 0x7d5ab19c}, {0xa5, 0x80000001, 0x3, 0x0, 0x9}, {0x1000000c, 0x4, 0x4, 0x5, 0x3, 0x4}, {0x1ff, 0x4, 0x4, 0x9, 0x6, 0xfffffff8}, {0x27, 0x9, 0x8000, 0xe, 0xfb8, 0x3}, {0x0, 0x9, 0xa6c3, 0x0, 0x4, 0x4}, {0x8900, 0x6, 0x1000, 0xe242, 0x8f, 0x7}, {0x3, 0x7, 0x3, 0x1ff, 0x5, 0x79}, {0x2, 0x6, 0x1000, 0x34e3, 0x5}, {0xffff8000, 0x5, 0x7, 0x80, 0x4, 0x1000}, {0x3ff, 0xffffffff, 0xe9f, 0x3ff, 0x101, 0xfffffff9}, {0x6, 0x6, 0x3, 0x6, 0x3, 0x7f}, {0xfffffff9, 0x3, 0xed, 0x3, 0x0, 0x3}, {0x9000000, 0x1, 0x6, 0x1, 0x7, 0xff}, {0x5, 0xae68, 0xfffffff7, 0xfffffff9, 0x6, 0x8d1}, {0x1, 0x1, 0x1, 0x2, 0x1, 0x4}, {0x7, 0x3f800, 0x6, 0x9, 0x2, 0x19}, {0x9, 0x4e6, 0x9, 0x0, 0x1, 0x2}, {0xed, 0x6, 0x4, 0x9, 0x4, 0x757}, {0x2, 0x8001, 0x6, 0x8, 0xec, 0xfffffff6}, {0x4, 0xa, 0x48, 0x10, 0x451, 0x4221}, {0xffff, 0x2, 0x10, 0xd50a, 0x1000, 0x7}, {0x6, 0x7, 0x0, 0x3ff, 0x7, 0x100}, {0x1, 0x7, 0x7, 0x1, 0xd12e, 0x6}, {0x10001, 0x7, 0x7, 0xffff, 0x4, 0x7b}, {0x401, 0x54, 0x1000, 0x3, 0x9c61, 0x2}, {0x422, 0x9, 0xd85, 0xa, 0x0, 0x4}, {0x9, 0xf, 0xc0c5, 0xda, 0x10, 0x10001}, {0x6, 0x64, 0x7b63, 0x6, 0x7, 0x80000000}, {0x401, 0x9, 0x0, 0x1000000, 0x8, 0x7}, {0x6, 0x2, 0x7, 0x71b, 0x3, 0x6}, {0x7, 0x0, 0x2, 0xc, 0x0, 0x9}, {0x94, 0x3ff, 0xf, 0xf, 0x8, 0x1}, {0x81, 0xfffffff9, 0x6, 0x4, 0x1ff, 0x400}, {0x9, 0x0, 0x3, 0x7, 0x7f, 0x10001}, {0x6, 0x1, 0x1ff, 0x7, 0x4}, {0x100, 0x4, 0xfffffffc, 0x7, 0x76, 0x81}, {0x8000, 0xc, 0x742, 0x200, 0x79, 0xc}, {0x8, 0x1, 0xfffffff9, 0x0, 0x0, 0xf}, {0x9, 0x1, 0x80000000, 0x352, 0xffff, 0x1}, {0x2, 0x9, 0x364f, 0x8, 0x1, 0x3}, {0x3, 0xe, 0x5dd, 0x1, 0x4f22, 0x4}, {0x0, 0x9423, 0x6, 0x271, 0x1, 0xad}, {0x5b1, 0x2, 0x5, 0x5, 0x864, 0x4f}, {0x3, 0x3, 0x81, 0xe2, 0x3, 0x3}, {0x9f01, 0x800, 0x200, 0xffff, 0xc, 0xd79}, {0x7fffffff, 0x2, 0x5, 0x4, 0x80000000, 0xb2d}, {0x1f6, 0x7ff, 0x4935, 0x7672, 0x10001, 0x1}, {0x10001, 0x81, 0xd, 0xfffffffa, 0xc}, {0x2, 0x4, 0x1, 0xfffffffa, 0x2, 0x4}, {0x8001, 0x81, 0x1000, 0x8, 0x2, 0x4}], [{0x1}, {}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x2}, {0x2, 0x1}, {0x4}, {0x2}, {}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {}, {0x7, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x5}, {0x5}, {0x4, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0xd3319f567be9e238, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x4}, {0x5}, {}, {0x5c403cc736f9a9, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {}, {}, {0x4}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x9ea4f1694a38a4}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x4, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x2354}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x41, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) openat(r0, &(0x7f0000000100)='./file0\x00', 0x4000, 0x80) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433", 0x40}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x85}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x10000}, 0xc050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000100001040000007c0000000000000000", @ANYRES32=0x0, @ANYBLOB="1022010000000000"], 0x20}}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$I2C_PEC(r1, 0x708, 0xffffffff) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000440)={0x0, 0xfd, 0x1, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) 11.52106471s ago: executing program 0 (id=973): request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmsg(0xffffffffffffffff, 0x0, 0x40020000) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001300)) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}}, 0x0) r1 = syz_clone(0xc200000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x179}}, './file0\x00'}) read$ublk_bdev(r4, &(0x7f00000003c0)=""/197, 0xc5) fchdir(r3) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r5, &(0x7f00000005c0)=""/4096, 0x1000) wait4(r1, 0x0, 0x40000000, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents(r6, &(0x7f00000002c0)=""/201, 0xc9) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=ANY=[], 0x2a, 0x0) add_key(0x0, &(0x7f0000000100), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 10.244760208s ago: executing program 2 (id=974): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10010, r2, 0xf3dc1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x6, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x10000}, 0xc) 10.038301502s ago: executing program 3 (id=975): getpid() r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0}], 0x1) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="61cc23d4941575be", 0x8}], 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) sendfile(r4, r5, 0x0, 0x201f00) sendto$packet(r1, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0}) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r9 = fcntl$dupfd(r8, 0x406, r8) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x12, r7}) 8.341533359s ago: executing program 0 (id=976): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) close(0x3) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, &(0x7f0000000700)={&(0x7f0000001000)={[{&(0x7f0000000280)="da076f05adb61b2b86ecd887c27bbe22dc16620e1701c78cb68a401584c02834df5a49566d19c5a9b2073fad1ac7ba43", 0x30, 0x2}, {&(0x7f0000000300)="955861ea471690fe6de1b6cd84b5", 0xe, 0x1}, {&(0x7f0000000340)="8865ff2b91bae43074b238a2ba97bf5e05597ac67441e632d383eb20af0dcb2ea33379", 0x23, 0x1}, {&(0x7f0000000480)="c1a9d08b260f906c529c3d5bdf57759aca4c63844bb88d887dfc1d5ffd521f9f2b941e2be63a3c9f0819be668bc15fcc", 0x30, 0x1}, {0x0, 0x0, 0x3}, {&(0x7f00000006c0)="8ad1d3f14f10d73fb6feba0f33ecc29deec95e3de951629bd151354ee487c6d39cdf438d0a200e099747", 0x2a, 0x1}]}, 0x6}, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f00000001c0)={0x30000, 0x2000, 0x8}) write(r1, &(0x7f0000000180)="74ca15d934d00b61bf8f9abd11bd23", 0xf) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x3) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x26) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PPPIOCBRIDGECHAN(r6, 0x40047435, &(0x7f0000000200)=0x1) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r7, 0x3a, 0x39, 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000000040)) 8.276456495s ago: executing program 1 (id=977): r0 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x3, 0x4000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000001c0)=""/82) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfffd, 0x200040e0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) kexec_load(0x3, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc5", 0x9e, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9", 0xdf, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a", 0x78, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041", 0x2e, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000240)=""/210) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x2, 0x566}}, './file0\x00'}) 8.013634791s ago: executing program 0 (id=978): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r3, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r2, 0x3b8c, &(0x7f0000001800)={0x30, r4, 0x0, 0x0, 0x2, 0x1ff, 0x2, 0x0}) chown(&(0x7f0000001140)='./cgroup.cpu/cgroup.procs\x00', 0xee00, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010102}, 0x10) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@generic={0x88, 0x2}]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x28, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast}, 0x0, 0x0, @default, @val={0x1, 0x4, [{0x24, 0x1}, {0x48, 0x1}, {0xc, 0x1}, {0x9}]}, @void}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44800}, 0x0) 7.984047592s ago: executing program 3 (id=979): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) 7.883811299s ago: executing program 3 (id=980): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0xc80) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x0, 0xfdfdffff, 0xffff7fff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpgrp(0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtclass={0x50, 0x28, 0x300, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xe, 0xfff1}, {0x5, 0xffe0}, {0x8, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x9}}, @TCA_RATE={0x6, 0x5, {0x7, 0xfc}}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}, @TCA_RATE={0x6, 0x5, {0xf9, 0x40}}]}, 0x50}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24045091}, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000340)={{0x2, 0x3, 0x401, 0x4, 'syz0\x00', 0x6}, 0x4, 0x4, 0x7, 0x0, 0x0, 0x7, 'syz1\x00', &(0x7f0000000080)}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x11, r6, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) 7.882417823s ago: executing program 4 (id=981): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r0, 0x0, 0x0, 0xa580, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @mcast2, 0xb}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c, &(0x7f0000002f00)=[{&(0x7f00000002c0)="0dae38d625058c9aaab867f255f0fd99b2df3c2964ce91a3e0d69d7dd9002b08c9723019fce1ef8b31b03026e8367762c61ca92c59c08fa70d947ec76374f5ab598ed28de0f15d02bd99ec45864961169c2b65afee41e8e85470bbb6d6171df9384151292c5993de151133997b041f485324f94a160892cdd1793f83c051bf9b7b2bd0505862bc04", 0x88}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="e0979c9507a7020881729e5641f65f7574fefa8664da9bae22e8120069185025e610cbd5fb0ff40185af1ad7e5d0921642b2282aa322db2cbd8db6fa937d7cb7f710646f81695af303154f24dbbb79dafd2cf89ebe3485552c9d0f90d0c56562d4bca7ee12b8dd19bf47ba062cef3f5e3ad23a92b05a006c37e131fefb7e43f13c9c4fb85028b0a631ceb209e669b66c859f5854be23da2d4ce83042d6847e421053769a6187bd81cd9f429c64852fd53f90f909d23486d594d0762bb6322c4bbdfdd54b93892eecf096f29a6535e4dba9", 0xd1}, {&(0x7f00000016c0)="b348dac238b44c31d55d0f381f36308ad6e8b7bb964f28df6940866bd524543f77fe310f5e8f88a65bd205a8988ac9aae4059b0be28074ec9e60544b71a3c05ebb6094c4d96728fb076c92c8b5ec21a78759460b57e73447b76f374c57fd8c6a2034c1e3ae4f5abc185f450af573c8bba95366923939f75c64854c83f4", 0x7d}, {&(0x7f0000001740)="222a1aea1bf9561771db2997053375b854fc9b36de8fa477de23516889c9a4dbeb1e6dad6f84c97d5ca91e311a28801401c15c44b5c3c9cc8da581130ef32e3c6c65197bc2a2ff9e8093fc83b38126a67843b3949757615b3351348c31318a08857080532968d833a675441080a3558476cdb3b4a26e949f9cf5e43b0554eb61de85cb804cff6d400766cd", 0x8b}, {&(0x7f0000001800)="ae63204af027cb65bcde045273c5fd0c45e5a7a589595f95", 0x18}, {&(0x7f0000001f00)="0b4b4bad49ae25736212efdec176a0595aea7715a2972f83c9003ff3ac95937e5cb6d951a2e11d48a3362561fb9714c91e480b75d82896c1c5fd3256cb1e29d2157aa77f793db429cf3f0a6510dc1b5d8c27ed01ab4b980a86c37c20b04c21f7572d1b9126313424339c5db950970dd0509d96ffb9d993f0abbd1ff1900d902f493778559e9feadf20f35c895bae4eeebf60e442522437dcee19d26bbd5d4a095d78247263b0a5c7591c9011c6da59fa6ef9afac20e4dafd99df32a7e8312198b30849d8209cc06289409ae46e0422e6d47ee3bb3605df7739eb95d36d901de0e621d7540d3c898f2bfd4ffe0854aabdd353bbb4add6d23e4e96d9580d3c405c4762c73c976ecda32873289cfcf980c9d24bdc45b61ce3ab48f6e3660a77a9cca417e84d6036215e70b996318e11ca785a057443ce552af70bdbeb7193d1f423023d7e3cffae114e7d5b4c5a36355faf3eea9efbbff03be5392ece920b6cae210525b1b7ab8f5033166844f00c4fad7643c9d0dcefe291c8e90c0385b55703a098068ab7a74133", 0x187}], 0x7}}], 0x2, 0x0) 7.847515392s ago: executing program 0 (id=982): unshare(0x42000000) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406e050d0100000004000109022400010000e000090400000003010000002100000001220000090581030000000000"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x1010000, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009006a7cd0ef8f29bd9579e4fcef61030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e61740014000000060a010402000000000000000100000014000000110001", @ANYBLOB="61ef7cc98b71b77d89dc282a1d7388463600a75bbf21cfae3d1c84798908b20132db0fa1fa63003758412a10c99b515aaf85f781217cc3e2fb636c40afe1ed47f925949d028983c96611472d7c646e562346edc53f09e1497b54b5885055ecd47341900b37b9e6d06048899447c86bc651c312679e298e3753a28c2a7f6e834ac37108333510a49286dbb664e862528a5a6eb21afaae6a991c73bb3d70513a05606985efd9ac59c43f29a227777f1ff359b39db3ccfbc1acbc91bf8e9e", @ANYRES32=r0, @ANYRESDEC=r1, @ANYRES32=r0, @ANYRESHEX=r1], 0xa4}}, 0x0) 7.129264164s ago: executing program 3 (id=983): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780"], 0x6c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8864000000000000) 7.122168443s ago: executing program 4 (id=984): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) close(0x3) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, &(0x7f0000000700)={&(0x7f0000001000)={[{&(0x7f0000000280)="da076f05adb61b2b86ecd887c27bbe22dc16620e1701c78cb68a401584c02834df5a49566d19c5a9b2073fad1ac7ba43", 0x30, 0x2}, {&(0x7f0000000300)="955861ea471690fe6de1b6cd84b5", 0xe, 0x1}, {&(0x7f0000000340)="8865ff2b91bae43074b238a2ba97bf5e05597ac67441e632d383eb20af0dcb2ea33379", 0x23, 0x1}, {&(0x7f0000000480)="c1a9d08b260f906c529c3d5bdf57759aca4c63844bb88d887dfc1d5ffd521f9f2b941e2be63a3c9f0819be668bc15fcc", 0x30, 0x1}, {0x0, 0x0, 0x3}, {&(0x7f00000006c0)="8ad1d3f14f10d73fb6feba0f33ecc29deec95e3de951629bd151354ee487c6d39cdf438d0a200e099747", 0x2a, 0x1}]}, 0x6}, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f00000001c0)={0x30000, 0x2000, 0x8}) write(r1, &(0x7f0000000180)="74ca15d934d00b61bf8f9abd11bd23", 0xf) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x3) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x26) socket$pppl2tp(0x18, 0x1, 0x1) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000500)=0x2) ioctl$EXT4_IOC_GETSTATE(r5, 0x40046629, &(0x7f0000000040)) 6.952233586s ago: executing program 4 (id=985): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) unshare(0x2000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000000a0601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x4c040) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000003ffffffffffff080045f400000000000000119078ac1414bbac14140f4e244e200008"], 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) 6.850750477s ago: executing program 4 (id=986): socket$igmp(0x2, 0x3, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d080201000000400000a118000a000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) unshare(0x2a020480) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_RANGEINFO(r4, 0x80106408, &(0x7f0000000280)={0x7, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xd01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003740)={r5, 0x0, 0x40, 0x1000, &(0x7f00000000c0)="7dd53cbd3194ca5fdf819f26407baee211bc663e897588e401f0e4a0fb45b71d7774162147dbec7f16b9ad3ac658833ca3a65d0cce88271044d28f364b55ad3b", &(0x7f0000002600)=""/4096, 0x5, 0x0, 0x1b, 0xde, &(0x7f0000003600)="16c66ad813ddc0658a773fd590c0c56a9103da2dff52ac06df05d1", &(0x7f0000003640)="229659ccd6f855f1bd40fd739fde0cf1ea3f2f73819162675a1ad240b49256c8b5ad664c93136c96f3edc592119ca3df9a80f378d8a74b6a002cad87c687c57201c01f48a4b96bc64e86aafbe22b123676a913d47292c8b81cb7f354a8bbe56b6801d91ea0f5a62faf0660d63f0f204da7c2eb0ff4276ef0f673fc3e0daa8a633c74a34e82949b401a6f5649f683612afb19668bedd2eec7ed2766b9f69557646f981aeb9342e4fbd9ee239c7e20caa8beb6b9a56f39c059b4723325cfee09e5c09269845ea686525461429559d4b3dcbb51aeda91ac9e4287b6403281f3", 0x4, 0x0, 0x3}, 0x50) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r6, &(0x7f0000000240)={0x23, 0x30, 0x0, 0x36}, 0x10) bind$phonet(0xffffffffffffffff, &(0x7f0000000100)={0x23, 0x30}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.038876726s ago: executing program 2 (id=987): kexec_load(0x3, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc5", 0x9e, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b", 0xe7, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a", 0x78, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {0x0}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea9", 0x96}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000004c40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000002880)={0x1f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x5, "87b192c0a4e063"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000003880)={{0x0, 0xffffffffffff8000, 0x2, 0xff, 0xe30, 0xf, 0xfffffffffffffffe, 0xc, 0x8, 0x7, 0x67, 0x4b71, 0x80, 0x4}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000003c40)={r3, r4, "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", "fd77fd8c9fce2333b12f7ba800ba49e5a07ed343ab0fddc8f0afdd960f31de4531e0f7ccb4f6fe9d86e716f9566669d362b22d30f0ba86d0efdc5c0986313f16822de03e9e216577c0b471eb517e3b7da484cd429ccd049737b05b4e6414c012908d2a300a8dd7120d6cf4fb2e8cf39a27aef7c5c02db454abce8f420653fd5c7fdda57bf69a6d0927c3141b94676258e1bdcd5a115b6250e41bdb924a3036dbefb5d089128bcd36ba077504c208757fa44b4437a918e6ed74dc6083b50887ff80f5cb94928006e264ae56006e5ac1ad8352d0e499c056312c565d734eb635c719ca20a639dab63626beffe9446013891b2f3299a300b45259623e8675e052f81189f4f08e789522b8879ab11e9f56d825d8ccd89dc44d4be17dbbc60d3543658cd15a85b301ff9edb28f10f2a8b9b235481d39981ab89b65f1a5b827ecae92bdae28c830124f9221e74ae807d1febf69f86fbc01ce7d0d8427d5132c3c8236d3a72b8821fa055ef41254a0dbe9f7aac68ac50bd1aec77e5cbbd76177fde58b016189275171e3152554e954fb238acda9b5731d381ff8325339e52b1c81452f369c926003c23c26d91e7093a33093e7995979d94d75394a8d1affb01ba5460a74d843eda040e9ccc0c8e962827415b1d731424aa9a42357c098e5f196f7cc703f7fe0ca5273d5bc7a733c9abf78d5e62fbb7d893937d94f9340ca22a339ecc5782617b6f404ae410c73bab0c4fae08fe12f297383e240217be23e0509d968d2157998ace3198e069ec5428908b0b4e95e87bd461b5e54b6c6f06140d9eadaf69db519d23bb125f0c9106098bd27d7ed3120a8f252509a07cfb73d67894f7a6e86e9c139a8f401b8107be2652ed0dadc4ec0db56491fd69469f1ebc593e9de5ab8d5f7805b4188afecce1b7cc7de8b1ba624349822f9eef212eb1571c81f24f2e087b96cff4e77743d9a58aa4300392f777370bc2cd40bbfa1ded356e4ff31ccf06bfc7a721af65a115c5aa298eaeef87564549fe07b963479a9bd09c7b249ddafb19901b44084c5c3f1eaaf381d2d5a8c0c4581e00898e3fe282c513dc2d694e17cb40ea1e60b34f01aa116533a91e70a3c7982588273858ed28be6015d7ae89f3de862ab8450766c514244eaa5f431074287e238e87ca0cc04ac77747c0d3676009210e3b6b1b712a6fef586db237ca990dea41247065b86ed08c7e6c2475905d07fa1e9ebb2b58039625f417ead0ccc13a74b15fdd8bfcfec284348831723a9647936865909c446f902de7e5dac0392c61f8f9b03ecfea182764359767148c9ceec74aa629c00d95dd31d53b6ce9eeb4033cb2b7c4bfb9c02bd84d6c5371cc6930b92b632330fc2067faf40ec9a0847c567de1939994305f8cdd2a07e75e059fe8ba601d390bb9962feb83d528ff39322cec111ac72e7ffa91cf7208d4c53e72e6c59542c3f62026ecbdf81d1aa6fee5b560183eb20984fefcaccbb993516bf4e1a19d3424f344e68350e6a270f4229d1888216cedc110f5242e94cb72623b0f81cda561e94f713f89f6be04a623ce1f389cb58bd0654f7ecd9a23f73909ba2b147d2b8c08802cf319dcdc2d74238782f53f3942a0d2ea7ce4e6c28ba50c28654b09a6493f4678512753103fd6c75ab56ba8484eb1fd0c4a849dcc9594439c8aca84b40c104a61f022b336b2163a27962c13ec5446a5bb816c55c6cde254578ac79ecbf2d345c677e77ec65b19175dda1e954a29cc6acf1addc13891f3752ee3f45c31fa1d98611217595b12b9a2c049e96beafe0c5a3a6aed4b6c75245607b5c8fce1f8910a07258535ff769acb3d757ea992d6fdbe140d5c5a0cec39eaacbeac5c82c7a4541f4aa9263a79a91aa7b03edfa956976c8ee0b620cb0a404bf03c2e33cc29b84a002e9f18af66a01b2300689fce2fef2831f3059dd2eb6df43a9a5f23bb153e2066fa8f32cdcc15aaac81c4390552c4606d54b27af2b3dcfd1665091ff87e4a0697fea0339122ceb68150e36f972e134c06c2189e9bd1123e2764d779e4b46923287c3add0b7ecd5fdcaa740ca82471c8b8317da11f5b28a6982e904bb1a77f9fa951a6606db19dae1692ff78fea87dd04489fc1b06f7cd53aea46e87fbdbc611d95f48c4a713522da28fdcee0c6fc907b189774cf0c227463fae10331114bf19f0179cc387d85f130a0bf17ab4a6b74bca33fdd2a253e766346e2fa90cb606f9de7c075169d68dbd66033b8def1b5bd5b3ab28d42e21d8aeba906b9ffce3615102bdcb3af6f30a797d1c283f4e9358384592fe1220832cde8d09c5fde291260f4f1db1febaed926cdaeffb77626e1ec31f63a65aec601d819f8d23616d2a460946f1a4981c62a8fe9b2fee2a8ce63f5afbbc2c34fe04840ac6021d89d0817d858b90b9d7a341f4e15d60018c04b51ab9a1f5165dd44587878af127a098b0a59ebcd20e59ce947eb0288d6ec98d517a691b8e3869ec12bec514619ba6c23deff5216cdd0c5bddbf2809194db6d5acd9d25b5dfd145a3c56efb76c1390fb1db92bf8d33dadff07fd4edc6cc2fd8758b97b9a5c6d6290692db69ed2aabd6d87ec7ec2b1b1c32ebc6b444152037ad3d920d514bb3e40e35c4bbba15b5f6d870db4bde8cb0483e7e7c498f7a3fb569d083d9cbbf00938b01b4a112e46190a38e09d5f5dcac7fe88ba4e6a540bb357d4df503b1dac78bdeaf4d73f2a864c7d3e07c33d0ec989e0d4967bc432dd6dccb70596d4e9fd1270a35dad983ac962ba54453140899bd4dc9b9e1fa70a2ea2ebb9c0aaae79912d8cc210362f7bbc84bca143d581b33028e42aeaf034084e2b2df25d1112f26f4d000daa91951632ad6648d7581168bcc1ca8bbbc93f16f8d133d4d68af6b83a0b78de6e1be68ce092326b3fcf014f963a0992279b33992c78bcb46de6725d75745d0828ad957d6db774a407f863cd41bdda142e1844489e4ba866ea573008bfcdb8bbfb1019e9afd9ff5599eaf9345c80e6533589ed4a7d4a6cdc511565465f17f5460e2e034708d70d6a5d222eb458b390110f2e541d20c1cdb0f02b68935b9d6a526f2182d884b5c00edad92eb725fde19477b13e4266143c989adc77e9379db702ad4436549d7c69af19579892b5380864add62bb56309b04eac7d76d287adf45fc77dacb1cf2c857de0d0facc2a8fe87a557d111f7733e62bc007f5e5598b1545486b8fc22cb098573966570497086963b5a82cc4045c394d873253ce95f0bfce10c58f423382a1b4515b15867211aebad24f79478d6c96e786f870f766f40f4e1aaf2624c1cc116c590ba2456ccf43f187d8d623ec3745c51f7114f105aaa9edd2f42ca6e4440de655e0799de6cc28967a2419323766afab2e6c46573270db22aa25415a5d0d4589967d0e39830d17fc435d0b6f0a055e6624d8bd8a21bb44fa3ec6cc27c8dd2e549c6fee1a451ecb26bdb462d5dcfe89992eafedeaf665e03edf325399a2d39c494d57c442edbb849fc7453cda50f31a72edb612889ceee823aebf0571ce6d4190ec0cdb419a8635afae31d2b864270064cd1beda645e87adc5294a7976bf472edeefe16be6e3a60abc10c9e6d2ff8679eed0e50551607abc6104de3f527bfb17e7ec8bbeea2718b5eedb8cfbde51f3b625f00d5a7b4fed4bff102cb35cb4a0edabd07aca1204a1ef93e4eb7744fefbf6e7d6cfe12926ddced821cee08d0537f1d1d30d9d0b2d03564b7110a24771718e4704c99b3a85faa96b161b0fac569d1ee7b30bcdd913b0302beddbe6ed319c2b36f09da83aee0163faad9db79267eaa665e87a5fe47fccf7312830e6b72704319accd78ade8fedac736d79e11aedb54228427e4496bdcb916c8cd7dd0e30eb0ee5fb29d245ae30193cdca8d44b15d5e78951b6a6b3b2cfff75203dd25329b1e32bc54a036de04d8a5d0310a566d2435da3dfcd312a3277cf18d90d60eaca78d0cca65e74d5c263d0df0f7613be999a881f586a0068d1f6c599d3b0246fed70d5efcf59b439c97d153db9a699fea6a9d1b3259cdff369c78293c02214269b175cee1b3ec062c36906665ce10e424e846f9d5d571961afcd09196aee1f36509a0074f71ff6ec0729e462a46533ea719cc6a3f86d30bc4571a7de62ba83e665c5158e7ec2822d1a08a1db1e401803be4861bbf124f4653f1d19d1881fcc7b06b43c9d77279aba9f1eaa1673e29f3af805699f9256a5e79119455eb4f09d6775e87828fcb7e16b946ff633b0a28dbdd2998476b6dec213171df45f0d939974910c4825052a58c2680273ebd1f2ba50261f0baa1aa6fe555aa2a95593306e755f7be638a2ae7c97884665c24e02a79e249f1da638ea7d509e0c604522cd2b22f040c9637080e3cf476421a18a2add0b44068f96ad73636c9d2477f85ae52cec6eace6a371f0013e7b078cabde49a8c36dc9f64cdf8715b418ce15173033b40dc8c873407262a879dc6c3e0df79a308b216881ed00b60a2df4cd08cfef904385de27b2b6a142d870998160b7fb161738875360f60938d486cef9ac96c6959506ffb530488be25e1b32fdf53ba0789cc1a308961fab0422c7bde56a1b37263a00ac764c7e593d913be24a746b79b49ce3f494c02b34ba81052bd49bd40fa78fbf5a0dd085146f19a0147b18a1ecc526015f4762209f551ed89f5f339c1cc8a9d15467a9c881a5858e32f71606cf844b5c2a919428b6e7453a6319a2e2aa2b10d889237518d01b301b80b7494cfe07183108d7ca1b1a2734a69f46d941ef6c8e06cd272244e0a0d153aa17717b08f04c0f3fbc50c670a32a33a64a2065a94f24734c4e869cab546cd827e99d248d53f25d9850e7dbba82cb8a70a1f601ce1c0a2e0bf7484136b4efc3ab1a0ac266898eea3fafead853814642382c2520ea0f4cb25fe4418c24d99ba7ffc56ff977d4d7e39b6f428daf9543fde84c176029bfaeed6ba37d8d3f91f039e1a2580e706b00ab9d731a44db89e9e6ad8a18e715fd9b02b91a233efdb6d79b0dcdafba2427bb4e07bbb9c1ba08c448cd3e4c90b1b9302cc59bd4d9583a1fade73965b78eac0391e6ce074c2f279d16978855cb076cebc134a2ba90e0a852e9aa595d538527d8f3720daa3be7922e4739850656d0877bb94d410ccf4572e9aca90322bb3499bca415c8c14cebef063bf6536d14ab77659b7b15f4f374fd4aa28a0c0c7e7850dd490269e4cf8728a4fae4883ecfe1b876f29e51b4685c9e4212ee9253803c9b274e248b9df5c4aa118cf8130255a79365fd9716535cd854bfc159c4d8037a82d2ba7c562111034a8da47614ec903d3bd2a0bc0ebfb4f0581f205a165a0f0a5a3ad055ed908e4339bff506fa6237aec3f0eed34029cb97b40a83780e4203fd2d3622561a102c77d24da684ba64665fb93ea"}) r5 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) socket$inet_icmp(0x2, 0x2, 0x1) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) ioctl$I2C_PEC(r6, 0x708, 0x6) r7 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba1282a0b372219d205e81f4a7091d1926aae1efd7e0054a863f3d5cfe6ced884e7cb51726b360fbb37b4fe035bbb095873048", 0x42}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 4.205088653s ago: executing program 2 (id=988): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, 0x0) r3 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000340)="bd510581750c28a2a1cebf84fd551cfa6eacba907d0529748ed1f98c6c5da08401758af99db09b47cbb43fc3831389b18a64e219c44887276294f4cfc77c6bf0280815273cd1b837dc1e13d85afb0f292aad449e07b7cf894fcd2d8597f3248e1e3442c05cfaebe4da62e13257a57bf1164921c6ff6bb14c245cfd7ca27f340b89d1a381f17687ad609adc32a9e96c51fb", 0x91, r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x70}}, 0x0) bind$bt_hci(r2, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x2, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x128043, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1) r8 = eventfd(0x5ef) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0xff00, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff000000000000000000000000000000000000000000000000000000a7838a1ebb7a1b0000000000000000000000000000000000fe"]}, 0x108) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f00000002c0)={0x1, 'ip6_vti0\x00', {}, 0x101}) ioctl$KVM_IOEVENTFD(r7, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0xfec00000, 0x0, r8}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 4.189803257s ago: executing program 1 (id=989): getpid() r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0}], 0x1) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="61cc23d4941575be", 0x8}], 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) sendfile(r4, r5, 0x0, 0x201f00) sendto$packet(r1, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0}) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r9 = fcntl$dupfd(r8, 0x406, r8) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x12, r7}) 3.946073468s ago: executing program 0 (id=990): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) listen(r0, 0x10040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_create(0x25e) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x80, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x20, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x4, 0x56}]}}}}}}}, 0x0) 3.034074759s ago: executing program 3 (id=991): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) 2.836259374s ago: executing program 1 (id=992): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) syz_clone(0x2190040, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300c0d7c37090d3de0000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f0300ff00010000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, 0x0) 2.695343709s ago: executing program 3 (id=993): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) listen(r0, 0x10040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_create(0x25e) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x80, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x20, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x4, 0x56}]}}}}}}}, 0x0) 2.691203281s ago: executing program 4 (id=994): socket$alg(0x26, 0x5, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x41) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x1000000) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32, @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r5, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000000), &(0x7f0000000140)='%pI4 \x00'}, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in, @in6=@empty}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r6, 0x9, 0x1, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000240)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0]}, 0x40) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) 1.011146116s ago: executing program 2 (id=995): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) close(0x3) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x21dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0x9, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 1.007687584s ago: executing program 1 (id=996): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000100)={0x8, 0x80008100008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r4, 0x1, {}, 0x1}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 23.937183ms ago: executing program 0 (id=997): r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000001c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000180)={r6, 0x9}, 0xc) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, &(0x7f0000000280)) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 4 (id=998): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xe8302, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0xc, 0x0, 0x0, 0x0, 0x7fff}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) unshare(0x8000000) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000240)={0x20003, 0x0, {[0x9, 0xc9, 0xf3, 0xc0, 0x7, 0xab, 0xd0f0, 0x2]}}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) kernel console output (not intermixed with test programs): 0): avc: denied { open } for pid=7748 comm="syz.1.510" path="/103/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 261.976634][ T7756] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 262.106128][ T7756] block device autoloading is deprecated and will be removed. [ 263.257386][ T30] audit: type=1400 audit(1780047083.598:631): avc: denied { bind } for pid=7752 comm="syz.0.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 263.568808][ T7765] sctp: [Deprecated]: syz.0.511 (pid 7765) Use of struct sctp_assoc_value in delayed_ack socket option. [ 263.568808][ T7765] Use struct sctp_sack_info instead [ 263.643867][ T5805] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 263.706546][ T30] audit: type=1400 audit(1780047084.048:632): avc: denied { search } for pid=7775 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.747460][ T7778] netlink: 24 bytes leftover after parsing attributes in process `syz.0.519'. [ 263.757463][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 263.766243][ T30] audit: type=1400 audit(1780047084.068:633): avc: denied { search } for pid=7775 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1773 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.800786][ T30] audit: type=1400 audit(1780047084.068:634): avc: denied { search } for pid=7775 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.803275][ T5805] usb 3-1: device descriptor read/64, error -71 [ 263.824792][ T30] audit: type=1400 audit(1780047084.068:635): avc: denied { search } for pid=7775 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1778 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.877155][ T30] audit: type=1400 audit(1780047084.088:636): avc: denied { getopt } for pid=7777 comm="syz.0.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 263.899963][ T30] audit: type=1400 audit(1780047084.088:637): avc: denied { read } for pid=7779 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1778 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.956781][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 263.965842][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 263.981055][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 264.009175][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 264.018702][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.035249][ T24] usb 4-1: Product: syz [ 264.063339][ T24] usb 4-1: Manufacturer: syz [ 264.088699][ T24] usb 4-1: SerialNumber: syz [ 264.117861][ T24] usb 4-1: config 0 descriptor?? [ 264.138577][ T24] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 264.159066][ T24] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 264.163200][ T5805] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 264.304279][ T5805] usb 3-1: device descriptor read/64, error -71 [ 264.413511][ T5805] usb usb3-port1: attempt power cycle [ 264.766603][ T24] em28xx 4-1:0.0: unknown em28xx chip ID (157) [ 264.798409][ T5805] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 265.011022][ T24] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 265.145925][ T5805] usb 3-1: device descriptor read/8, error -71 [ 265.151222][ T24] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 265.223361][ T24] em28xx 4-1:0.0: No AC97 audio processor [ 265.297165][ T24] usb 4-1: USB disconnect, device number 17 [ 265.321301][ T24] em28xx 4-1:0.0: Disconnecting em28xx [ 265.377748][ T24] em28xx 4-1:0.0: Freeing device [ 265.508925][ T7813] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 265.517574][ T5805] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 265.535224][ T7813] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 265.567237][ T5805] usb 3-1: device descriptor read/8, error -71 [ 265.727663][ T5805] usb usb3-port1: unable to enumerate USB device [ 266.059669][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 266.059685][ T30] audit: type=1400 audit(1780047086.398:654): avc: denied { write } for pid=7803 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.092008][ T7813] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 266.137958][ T7813] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 266.198831][ T7813] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 266.210826][ T7813] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 266.355032][ T7836] syzkaller0: entered promiscuous mode [ 266.367489][ T7836] syzkaller0: entered allmulticast mode [ 266.389566][ T30] audit: type=1400 audit(1780047086.728:655): avc: denied { write } for pid=7838 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.565889][ T5726] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 266.933947][ T5615] Bluetooth: hci1: command 0x0406 tx timeout [ 267.683153][ T5726] usb 5-1: Using ep0 maxpacket: 16 [ 267.901544][ T5726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.912829][ T5726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.922900][ T5726] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 267.935942][ T5726] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 267.945423][ T5726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.956820][ T5726] usb 5-1: config 0 descriptor?? [ 267.985195][ T7867] netlink: 'syz.2.535': attribute type 4 has an invalid length. [ 268.039297][ T30] audit: type=1400 audit(1780047088.378:656): avc: denied { write } for pid=7844 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.143542][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 268.203199][ T7875] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 268.213607][ T5615] Bluetooth: hci4: command 0x0406 tx timeout [ 268.397806][ T30] audit: type=1400 audit(1780047088.738:657): avc: denied { write } for pid=7877 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.467962][ T30] audit: type=1400 audit(1780047088.808:658): avc: denied { read } for pid=5277 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 268.541086][ T7837] xt_hashlimit: size too large, truncated to 1048576 [ 268.635886][ T7876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.529'. [ 268.720126][ T5726] microsoft 0003:045E:07DA.0008: global environment stack underflow [ 268.755165][ T5726] microsoft 0003:045E:07DA.0008: item 0 4 1 11 parsing failed [ 269.034204][ T5615] Bluetooth: hci1: command 0x0406 tx timeout [ 269.045817][ T5726] microsoft 0003:045E:07DA.0008: parse failed [ 269.075831][ T5726] microsoft 0003:045E:07DA.0008: probe with driver microsoft failed with error -22 [ 269.390442][ T5739] usb 5-1: USB disconnect, device number 9 [ 269.428423][ T30] audit: type=1400 audit(1780047089.768:659): avc: denied { write } for pid=7885 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.468297][ T7915] syzkaller0: entered promiscuous mode [ 269.481441][ T7915] syzkaller0: entered allmulticast mode [ 269.656571][ T30] audit: type=1400 audit(1780047089.998:660): avc: denied { write } for pid=7919 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.213249][ T5615] Bluetooth: hci3: command 0x0406 tx timeout [ 270.315593][ T5615] Bluetooth: hci4: command 0x0406 tx timeout [ 270.604748][ T5348] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 270.823151][ T5348] usb 5-1: Using ep0 maxpacket: 16 [ 271.176876][ T5348] usb 5-1: unable to get BOS descriptor or descriptor too short [ 271.214115][ T5348] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 271.271359][ T5348] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 271.283463][ T5348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.294186][ T7950] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 271.301906][ T5348] usb 5-1: Product: syz [ 271.306699][ T5348] usb 5-1: Manufacturer: syz [ 271.312564][ T5348] usb 5-1: SerialNumber: syz [ 271.398726][ T30] audit: type=1400 audit(1780047091.738:661): avc: denied { write } for pid=7924 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.477464][ T30] audit: type=1400 audit(1780047091.808:662): avc: denied { mount } for pid=7951 comm="syz.2.550" name="/" dev="hugetlbfs" ino=15228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 271.532458][ T30] audit: type=1400 audit(1780047091.818:663): avc: denied { mounton } for pid=7951 comm="syz.2.550" path="/file0" dev="hugetlbfs" ino=15229 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 271.586931][ T5348] snd-ua101 5-1:1.1: sample format descriptor not found [ 271.607546][ T5348] snd-ua101 5-1:1.0: invalid num_altsetting [ 271.963549][ T5348] usb 5-1: USB disconnect, device number 10 [ 271.979436][ T30] audit: type=1400 audit(1780047092.308:664): avc: denied { write } for pid=7960 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.034975][ T7968] syzkaller0: entered promiscuous mode [ 272.050400][ T7968] syzkaller0: entered allmulticast mode [ 275.526073][ T7997] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.560506][ T7999] overlay: Unknown parameter '/' [ 275.592361][ T7999] overlayfs: overlapping lowerdir path [ 275.600090][ T7997] syz_tun: entered allmulticast mode [ 276.455670][ T5627] Bluetooth: hci4: command 0x0406 tx timeout [ 277.015835][ T30] audit: type=1400 audit(1780047097.218:665): avc: denied { write } for pid=7970 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.345779][ T30] audit: type=1400 audit(1780047097.288:666): avc: denied { write } for pid=8018 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.403355][ T8013] input: syz1 as /devices/virtual/input/input11 [ 277.570972][ T8028] netlink: 24 bytes leftover after parsing attributes in process `syz.3.566'. [ 280.484104][ T5739] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 280.503187][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 280.513692][ T5746] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 280.543407][ T804] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 280.674276][ T5739] usb 3-1: Using ep0 maxpacket: 16 [ 280.681738][ T5739] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 280.695074][ T5739] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 280.708075][ T5739] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 280.718441][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 280.728665][ T5746] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.739619][ T5739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.747700][ T804] usb 5-1: Using ep0 maxpacket: 8 [ 280.752940][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.761034][ T5739] usb 3-1: Product: syz [ 280.765237][ T5746] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 280.778229][ T5739] usb 3-1: Manufacturer: syz [ 280.782930][ T24] usb 4-1: Product: syz [ 280.788106][ T5739] usb 3-1: SerialNumber: syz [ 280.792873][ T24] usb 4-1: Manufacturer: syz [ 280.797972][ T804] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 280.807108][ T5746] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 280.816865][ T5739] usb 3-1: config 0 descriptor?? [ 280.821836][ T24] usb 4-1: SerialNumber: syz [ 280.826548][ T804] usb 5-1: config 179 has no interface number 0 [ 280.834705][ T804] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 280.846041][ T5746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.858247][ T5739] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 280.869680][ T24] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 280.881993][ T5746] usb 2-1: config 0 descriptor?? [ 280.887175][ T804] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 280.906160][ T5739] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 280.931106][ T5710] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 280.940814][ T804] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 280.961085][ T804] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 280.978845][ T804] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 280.995110][ T804] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 281.009199][ T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.024604][ T8058] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 281.269555][ T8058] netlink: 20 bytes leftover after parsing attributes in process `syz.4.574'. [ 281.309411][ T5746] hid_parser_main: 27 callbacks suppressed [ 281.309434][ T5746] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 281.322783][ T5746] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 281.329860][ T5746] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 281.337068][ T5746] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 281.344132][ T5746] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 281.351035][ T5746] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 281.358261][ T5746] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 281.365174][ T5746] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 281.371974][ T5746] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 281.378840][ T5746] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 281.390039][ T5746] kye 0003:0458:0138.0009: hidraw0: USB HID v7f.fd Device [HID 0458:0138] on usb-dummy_hcd.1-1/input0 [ 281.461614][ T5739] em28xx 3-1:0.0: unknown em28xx chip ID (157) [ 281.534963][ T30] audit: type=1400 audit(1780047101.868:667): avc: denied { write } for pid=8056 comm="syz.1.573" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 281.652771][ T8058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.663021][ T8058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.672520][ T5739] em28xx 3-1:0.0: Config register raw data: 0x9d [ 281.693353][ T8070] netlink: 20 bytes leftover after parsing attributes in process `syz.0.578'. [ 281.875364][ T5739] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 281.903921][ T5739] em28xx 3-1:0.0: No AC97 audio processor [ 281.973341][ T5710] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 281.976616][ T5805] usb 5-1: USB disconnect, device number 11 [ 281.980375][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 281.994770][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 282.044329][ T5739] usb 3-1: USB disconnect, device number 18 [ 282.069928][ T5710] ath9k_htc: Failed to initialize the device [ 282.107734][ T5739] em28xx 3-1:0.0: Disconnecting em28xx [ 282.420432][ T5739] em28xx 3-1:0.0: Freeing device [ 282.440903][ T5710] usb 4-1: ath9k_htc: USB layer deinitialized [ 282.711798][ T5739] usb 4-1: USB disconnect, device number 18 [ 285.311619][ T5805] usb 2-1: USB disconnect, device number 6 [ 285.967004][ T30] audit: type=1400 audit(1780047105.948:668): avc: denied { write } for pid=8103 comm="syz.0.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 286.456563][ T8111] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 286.574105][ T30] audit: type=1400 audit(1780047106.908:669): avc: denied { relabelfrom } for pid=8115 comm="syz.0.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 286.656974][ T8119] netlink: 132 bytes leftover after parsing attributes in process `syz.2.592'. [ 286.706004][ T8119] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 286.714832][ T8119] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 286.774570][ T8119] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 286.920897][ T8127] fuse: Bad value for 'fd' [ 287.099410][ T5805] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 287.730738][ T30] audit: type=1400 audit(1780047106.918:670): avc: denied { relabelto } for pid=8115 comm="syz.0.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 287.762126][ T30] audit: type=1400 audit(1780047107.108:671): avc: denied { append } for pid=8117 comm="syz.2.592" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 287.785597][ T30] audit: type=1400 audit(1780047107.108:672): avc: denied { firmware_load } for pid=8117 comm="syz.2.592" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 287.809685][ T30] audit: type=1400 audit(1780047107.288:673): avc: denied { bind } for pid=8117 comm="syz.2.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 288.465239][ T8143] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=8143 comm=syz.2.595 [ 288.993155][ T5805] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 290.153136][ T5805] usb 5-1: Using ep0 maxpacket: 8 [ 290.194348][ T5805] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 290.216563][ T5805] usb 5-1: config 179 has no interface number 0 [ 290.233143][ T5805] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 290.244970][ T5805] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 291.207967][ T5805] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 291.226289][ T5805] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 291.248182][ T5805] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 291.966583][ T5805] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 291.976123][ T5805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.004334][ T5805] usb 5-1: can't set config #179, error -71 [ 292.032140][ T5805] usb 5-1: USB disconnect, device number 13 [ 293.293543][ T8179] ubi: mtd0 is already attached to ubi16 [ 293.314333][ T8182] syz_tun: entered allmulticast mode [ 293.358657][ T8179] netlink: 'syz.0.601': attribute type 10 has an invalid length. [ 293.376645][ T8179] netlink: 40 bytes leftover after parsing attributes in process `syz.0.601'. [ 293.468589][ T8179] bridge0: port 3(veth1_macvtap) entered blocking state [ 293.521143][ T8179] bridge0: port 3(veth1_macvtap) entered disabled state [ 293.529915][ T8179] veth1_macvtap: entered allmulticast mode [ 293.785078][ T8179] veth1_macvtap: left allmulticast mode [ 293.949632][ T8179] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 293.996014][ T8198] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 294.043769][ T804] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 294.916025][ T8199] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 295.086067][ T804] usb 4-1: Using ep0 maxpacket: 32 [ 295.118288][ T804] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 295.164040][ T804] usb 4-1: config 0 interface 0 has no altsetting 0 [ 295.215316][ T804] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 295.252473][ T8209] netlink: 24 bytes leftover after parsing attributes in process `syz.2.613'. [ 295.300216][ T804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.392823][ T804] usb 4-1: config 0 descriptor?? [ 295.738728][ T5710] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 295.989299][ T5710] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.070132][ T5710] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 296.174460][ T5710] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 296.285543][ T5710] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 296.379356][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.450999][ T5710] usb 5-1: Product: syz [ 296.479733][ T5710] usb 5-1: Manufacturer: syz [ 296.526287][ T5710] usb 5-1: SerialNumber: syz [ 297.150718][ T30] audit: type=1400 audit(1780047117.478:674): avc: denied { bind } for pid=8211 comm="syz.4.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 297.210291][ T8216] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 297.219588][ T30] audit: type=1400 audit(1780047117.478:675): avc: denied { name_bind } for pid=8211 comm="syz.4.614" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 297.241019][ T30] audit: type=1400 audit(1780047117.478:676): avc: denied { node_bind } for pid=8211 comm="syz.4.614" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 297.350025][ T804] usbhid 4-1:0.0: can't add hid device: -71 [ 297.483358][ T804] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 297.503607][ T5710] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -90 [ 298.494003][ T5710] usb 5-1: USB disconnect, device number 14 [ 298.505706][ T804] usb 4-1: USB disconnect, device number 19 [ 299.412552][ T8231] syz_tun: entered allmulticast mode [ 301.691263][ T8250] netlink: 'syz.3.622': attribute type 1 has an invalid length. [ 301.903285][ T5726] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 302.079056][ T8250] netlink: 96 bytes leftover after parsing attributes in process `syz.3.622'. [ 302.090812][ T8250] netlink: 658 bytes leftover after parsing attributes in process `syz.3.622'. [ 302.253182][ T5726] usb 1-1: Using ep0 maxpacket: 16 [ 302.266361][ T5726] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.286948][ T5726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 302.309535][ T5726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 302.320795][ T5726] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 302.331987][ T5726] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 302.349450][ T5726] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 302.358991][ T5726] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 302.378722][ T5726] usb 1-1: Manufacturer: syz [ 302.392653][ T5726] usb 1-1: config 0 descriptor?? [ 302.663263][ T5803] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 302.733181][ T5726] rc_core: IR keymap rc-hauppauge not found [ 302.783941][ T5726] Registered IR keymap rc-empty [ 302.798564][ T5726] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 302.833239][ T5726] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 302.846483][ T5803] usb 3-1: unable to get BOS descriptor or descriptor too short [ 302.864133][ T5726] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 302.884668][ T5726] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input12 [ 302.885231][ T5803] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 302.915122][ T5803] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 302.926460][ T5803] usb 3-1: config 63 has no interface number 0 [ 302.926537][ T5726] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 302.932756][ T5803] usb 3-1: config 63 interface 66 has no altsetting 0 [ 302.934692][ T5803] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 302.957684][ T5803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.969781][ T5803] usb 3-1: Product: syz [ 302.969802][ T5803] usb 3-1: Manufacturer: syz [ 302.969816][ T5803] usb 3-1: SerialNumber: syz [ 303.003334][ T5726] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 303.024162][ T5726] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 303.063195][ T5726] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 303.094371][ T5726] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 303.123208][ T5726] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 303.163167][ T5726] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 303.193511][ T5726] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 303.218641][ T5803] uvcvideo 3-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 303.233256][ T5726] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 303.246095][ T5803] uvcvideo 3-1:63.66: No valid video chain found. [ 303.273668][ T5803] usb 3-1: USB disconnect, device number 19 [ 303.279276][ T5726] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 303.365132][ T5726] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 303.375497][ T5726] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 303.405190][ T5726] usb 1-1: USB disconnect, device number 11 [ 303.478683][ T8262] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 303.823436][ T5805] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 304.044132][ T5805] usb 2-1: Using ep0 maxpacket: 32 [ 304.058161][ T5805] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 304.080857][ T5805] usb 2-1: config 0 has no interface number 0 [ 305.229946][ T5805] usb 2-1: config 0 interface 184 has no altsetting 0 [ 305.859648][ T5805] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 306.184939][ T5805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.193189][ T5805] usb 2-1: Product: syz [ 306.211755][ T5805] usb 2-1: Manufacturer: syz [ 306.241879][ T5805] usb 2-1: SerialNumber: syz [ 306.269198][ T5805] usb 2-1: config 0 descriptor?? [ 307.113137][ T8291] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 307.371222][ T30] audit: type=1400 audit(1780047127.708:677): avc: denied { read } for pid=8298 comm="syz.2.640" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 307.473829][ T30] audit: type=1400 audit(1780047127.708:678): avc: denied { open } for pid=8298 comm="syz.2.640" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 307.593187][ T30] audit: type=1400 audit(1780047127.738:679): avc: denied { ioctl } for pid=8298 comm="syz.2.640" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x6448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 307.710026][ T5805] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 307.771720][ T5805] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 307.911046][ T5805] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 307.951678][ T5805] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 307.994355][ T5805] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 308.055625][ T5805] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 308.122265][ T5805] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 308.208120][ T5805] usb 2-1: USB disconnect, device number 7 [ 308.268889][ T8310] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 309.593442][ T8332] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 311.500322][ T8338] syzkaller0: entered promiscuous mode [ 311.523262][ T8338] syzkaller0: entered allmulticast mode [ 311.772632][ T8340] syzkaller0: entered promiscuous mode [ 311.869913][ T8340] syzkaller0: entered allmulticast mode [ 313.147138][ T8353] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 313.164349][ T8353] syz_tun: entered allmulticast mode [ 313.924926][ T8363] mac80211_hwsim hwsim4 ªªªªª;: renamed from wlan0 (while UP) [ 314.276004][ T8370] ubi: mtd0 is already attached to ubi16 [ 314.764170][ T8359] netlink: 'syz.4.657': attribute type 10 has an invalid length. [ 314.771945][ T8359] netlink: 40 bytes leftover after parsing attributes in process `syz.4.657'. [ 314.916779][ T8359] bridge0: port 3(veth1_macvtap) entered blocking state [ 314.923884][ T8359] bridge0: port 3(veth1_macvtap) entered disabled state [ 314.930926][ T8359] veth1_macvtap: entered allmulticast mode [ 314.937796][ T8359] veth1_macvtap: left allmulticast mode [ 314.943697][ T8359] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 314.984580][ T8380] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 315.036496][ T8362] ubi: mtd0 is already attached to ubi16 [ 315.294614][ T8362] netlink: 'syz.0.659': attribute type 10 has an invalid length. [ 315.303963][ T8362] netlink: 40 bytes leftover after parsing attributes in process `syz.0.659'. [ 315.327452][ T8362] bridge0: port 3(veth1_macvtap) entered blocking state [ 315.344085][ T5710] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 315.720920][ T8362] bridge0: port 3(veth1_macvtap) entered disabled state [ 315.757300][ T8362] veth1_macvtap: entered allmulticast mode [ 315.781235][ T8362] veth1_macvtap: left allmulticast mode [ 315.796070][ T8362] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 315.853003][ T8397] syzkaller0: entered promiscuous mode [ 315.864775][ T8397] syzkaller0: entered allmulticast mode [ 315.903702][ T5710] usb 5-1: Using ep0 maxpacket: 32 [ 315.916089][ T5710] usb 5-1: config 8 has an invalid interface number: 8 but max is 0 [ 315.933927][ T5710] usb 5-1: config 8 has no interface number 0 [ 315.952075][ T5710] usb 5-1: config 8 interface 8 has no altsetting 0 [ 315.968064][ T5710] usb 5-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=e9.7b [ 315.978996][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.988388][ T5710] usb 5-1: Product: syz [ 316.014806][ T5710] usb 5-1: Manufacturer: syz [ 316.021080][ T5710] usb 5-1: SerialNumber: syz [ 316.874834][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.881669][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.186235][ T8411] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 317.349603][ T30] audit: type=1400 audit(1780047137.688:680): avc: denied { accept } for pid=8412 comm="syz.2.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 317.708264][ T8423] syzkaller0: entered promiscuous mode [ 317.715443][ T8423] syzkaller0: entered allmulticast mode [ 317.813411][ T8421] ubi: mtd0 is already attached to ubi16 [ 317.825407][ T8421] netlink: 'syz.0.671': attribute type 10 has an invalid length. [ 317.833365][ T8421] netlink: 40 bytes leftover after parsing attributes in process `syz.0.671'. [ 317.842833][ T8421] bridge0: port 3(veth1_macvtap) entered blocking state [ 317.850243][ T8421] bridge0: port 3(veth1_macvtap) entered disabled state [ 317.858005][ T8421] veth1_macvtap: entered allmulticast mode [ 317.874306][ T8421] veth1_macvtap: left allmulticast mode [ 317.880094][ T8421] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 318.145815][ T8425] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 318.170831][ T5710] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 318.222241][ T5710] usb 5-1: USB disconnect, device number 15 [ 318.404994][ T8436] netlink: 24 bytes leftover after parsing attributes in process `syz.2.676'. [ 318.458399][ T8437] capability: warning: `syz.2.676' uses deprecated v2 capabilities in a way that may be insecure [ 319.380085][ T8445] syzkaller0: entered promiscuous mode [ 319.421561][ T8445] syzkaller0: entered allmulticast mode [ 319.496526][ T30] audit: type=1400 audit(1780047139.838:681): avc: denied { set_context_mgr } for pid=8447 comm="syz.4.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 319.824784][ T8457] netlink: 40 bytes leftover after parsing attributes in process `syz.1.681'. [ 319.946406][ T5710] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 320.143111][ T5710] usb 4-1: Using ep0 maxpacket: 16 [ 320.156965][ T5710] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.177559][ T5710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 320.200299][ T5710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 320.239702][ T5710] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 320.282429][ T5710] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.300380][ T5710] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 320.309920][ T5710] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 320.313168][ T5805] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 320.320041][ T5710] usb 4-1: Manufacturer: syz [ 320.352233][ T5710] usb 4-1: config 0 descriptor?? [ 320.857171][ T5710] rc_core: IR keymap rc-hauppauge not found [ 320.873932][ T5710] Registered IR keymap rc-empty [ 320.883287][ T5805] usb 5-1: Using ep0 maxpacket: 32 [ 320.888836][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 320.892931][ T5805] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 320.908857][ T5805] usb 5-1: config 0 has no interface number 0 [ 320.917767][ T5805] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 320.920791][ T8471] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 320.934481][ T5805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.937506][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 320.964191][ T30] audit: type=1400 audit(1780047141.298:682): avc: denied { search } for pid=8470 comm="syz.2.686" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 320.987839][ T5710] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 321.002108][ T5710] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 [ 321.014745][ T30] audit: type=1400 audit(1780047141.298:683): avc: denied { search } for pid=8470 comm="syz.2.686" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 321.050869][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 321.062478][ T5805] usb 5-1: Product: syz [ 321.068319][ T5805] usb 5-1: Manufacturer: syz [ 321.076710][ T5805] usb 5-1: SerialNumber: syz [ 321.088492][ T5805] usb 5-1: config 0 descriptor?? [ 321.106949][ T8471] audit: audit_backlog=65 > audit_backlog_limit=64 [ 321.113805][ T8471] audit: audit_lost=72 audit_rate_limit=0 audit_backlog_limit=64 [ 321.121593][ T8471] audit: backlog limit exceeded [ 321.123228][ T30] audit: type=1400 audit(1780047141.298:684): avc: denied { search } for pid=8470 comm="syz.2.686" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 321.127527][ T8471] audit: audit_backlog=65 > audit_backlog_limit=64 [ 321.160235][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 321.163260][ T8471] audit: audit_lost=73 audit_rate_limit=0 audit_backlog_limit=64 [ 321.193223][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 321.213294][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 321.233750][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 321.263225][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 321.293202][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 321.323620][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 321.363731][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 321.374643][ T8475] ubi: mtd0 is already attached to ubi16 [ 321.413619][ T8475] netlink: 'syz.1.687': attribute type 10 has an invalid length. [ 321.421688][ T8475] netlink: 40 bytes leftover after parsing attributes in process `syz.1.687'. [ 321.442058][ T8475] bridge0: port 3(veth1_macvtap) entered blocking state [ 321.450037][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 321.459935][ T8475] bridge0: port 3(veth1_macvtap) entered disabled state [ 321.487002][ T8475] veth1_macvtap: entered allmulticast mode [ 321.490068][ T5710] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 321.573162][ T8475] veth1_macvtap: left allmulticast mode [ 321.578990][ T5710] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 321.600065][ T5710] usb 4-1: USB disconnect, device number 20 [ 321.608526][ T8475] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 321.783416][ T8456] netlink: 36 bytes leftover after parsing attributes in process `syz.4.682'. [ 321.837721][ T5805] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 321.880031][ T5805] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 321.907806][ T5805] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 322.034293][ T5805] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 322.047126][ T5805] usb 5-1: USB disconnect, device number 16 [ 322.996169][ T8493] syzkaller0: entered promiscuous mode [ 323.095231][ T8493] syzkaller0: entered allmulticast mode [ 324.983523][ T5805] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 325.225094][ T5805] usb 1-1: Invalid ep0 maxpacket: 32 [ 325.406958][ T5805] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 325.428211][ T8521] ubi: mtd0 is already attached to ubi16 [ 325.528996][ T8521] netlink: 'syz.4.701': attribute type 10 has an invalid length. [ 325.538099][ T8521] netlink: 40 bytes leftover after parsing attributes in process `syz.4.701'. [ 325.547214][ T8521] bridge0: port 3(veth1_macvtap) entered blocking state [ 325.554248][ T8521] bridge0: port 3(veth1_macvtap) entered disabled state [ 325.561350][ T8521] veth1_macvtap: entered allmulticast mode [ 325.569265][ T8521] veth1_macvtap: left allmulticast mode [ 325.575898][ T8521] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 325.674392][ T5805] usb 1-1: Invalid ep0 maxpacket: 32 [ 325.718147][ T5805] usb usb1-port1: attempt power cycle [ 326.133120][ T5805] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 326.277673][ T5805] usb 1-1: Invalid ep0 maxpacket: 32 [ 326.524274][ T5805] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 326.584150][ T5805] usb 1-1: Invalid ep0 maxpacket: 32 [ 326.607165][ T5805] usb usb1-port1: unable to enumerate USB device [ 326.701594][ T8534] syzkaller0: entered promiscuous mode [ 326.707366][ T8534] syzkaller0: entered allmulticast mode [ 327.053298][ T5805] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 327.617692][ T5805] usb 3-1: Using ep0 maxpacket: 16 [ 327.657394][ T5805] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.705264][ T5805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 327.809602][ T5805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 328.454969][ T5805] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 328.482075][ T5805] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 328.506114][ T5805] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 328.641182][ T5805] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 328.649278][ T5805] usb 3-1: Manufacturer: syz [ 328.657966][ T5805] usb 3-1: config 0 descriptor?? [ 328.909647][ T8551] netlink: 'syz.4.710': attribute type 1 has an invalid length. [ 328.918577][ T8551] netlink: 96 bytes leftover after parsing attributes in process `syz.4.710'. [ 328.927536][ T8551] netlink: 658 bytes leftover after parsing attributes in process `syz.4.710'. [ 329.163128][ T5805] rc_core: IR keymap rc-hauppauge not found [ 329.170922][ T5805] Registered IR keymap rc-empty [ 329.181397][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 329.587595][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 329.704064][ T5805] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 329.741215][ T5805] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input14 [ 330.130109][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 330.153160][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 330.164323][ T8575] overlayfs: failed to resolve './file0': -2 [ 330.173176][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 330.195474][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 330.259174][ T8565] ubi: mtd0 is already attached to ubi16 [ 330.296432][ T8565] netlink: 'syz.0.713': attribute type 10 has an invalid length. [ 330.337795][ T8565] netlink: 40 bytes leftover after parsing attributes in process `syz.0.713'. [ 330.369825][ T8565] bridge0: port 3(veth1_macvtap) entered blocking state [ 330.378064][ T8565] bridge0: port 3(veth1_macvtap) entered disabled state [ 330.386265][ T8565] veth1_macvtap: entered allmulticast mode [ 330.399739][ T8565] veth1_macvtap: left allmulticast mode [ 330.405524][ T8565] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 330.516076][ T8578] syzkaller0: entered promiscuous mode [ 330.556947][ T8578] syzkaller0: entered allmulticast mode [ 332.469313][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 332.633147][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 332.653296][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 332.683183][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 332.805817][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 332.973633][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 332.997952][ T5805] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 333.009319][ T5805] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 333.053482][ T5805] usb 3-1: USB disconnect, device number 20 [ 333.484155][ T30] kauditd_printk_skb: 129 callbacks suppressed [ 333.484170][ T30] audit: type=1400 audit(1780047153.828:813): avc: denied { bind } for pid=8594 comm="syz.1.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 334.073116][ T5805] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 334.089913][ T804] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 334.164183][ T8608] netlink: 'syz.4.726': attribute type 1 has an invalid length. [ 334.171873][ T8608] netlink: 96 bytes leftover after parsing attributes in process `syz.4.726'. [ 334.180995][ T8608] netlink: 658 bytes leftover after parsing attributes in process `syz.4.726'. [ 334.263199][ T804] usb 4-1: Using ep0 maxpacket: 8 [ 334.274617][ T5805] usb 3-1: config 0 has no interfaces? [ 334.278394][ T804] usb 4-1: New USB device found, idVendor=0499, idProduct=1042, bcdDevice= 0.40 [ 334.283439][ T5805] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 334.311954][ T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.322989][ T804] usb 4-1: Product: syz [ 334.330505][ T804] usb 4-1: Manufacturer: syz [ 334.338795][ T5805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.365974][ T804] usb 4-1: SerialNumber: syz [ 334.381078][ T5805] usb 3-1: config 0 descriptor?? [ 334.409109][ T5805] usb 3-1: can't set config #0, error -71 [ 334.528325][ T5805] usb 3-1: USB disconnect, device number 21 [ 335.850565][ T804] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 335.863707][ T8627] syzkaller0: entered promiscuous mode [ 335.871573][ T8627] syzkaller0: entered allmulticast mode [ 336.003271][ T804] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 336.049655][ T804] usb 4-1: USB disconnect, device number 21 [ 336.072059][ T5636] udevd[5636]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 336.755758][ T8638] netlink: 'syz.1.734': attribute type 3 has an invalid length. [ 336.755815][ T8638] netlink: 3 bytes leftover after parsing attributes in process `syz.1.734'. [ 338.209451][ T8654] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 338.277713][ T8654] SELinux: policydb magic number 0x30303030 does not match expected magic number 0xf97cff8c [ 338.288772][ T8654] SELinux: failed to load policy [ 338.700155][ T30] audit: type=1400 audit(1780047158.598:814): avc: denied { load_policy } for pid=8648 comm="syz.4.740" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 339.558380][ T8669] vivid-000: disconnect [ 339.682024][ T8674] netlink: 16 bytes leftover after parsing attributes in process `syz.4.745'. [ 339.704949][ T8676] syzkaller0: entered promiscuous mode [ 339.710656][ T8676] syzkaller0: entered allmulticast mode [ 340.034276][ T8686] FAULT_INJECTION: forcing a failure. [ 340.034276][ T8686] name failslab, interval 1, probability 0, space 0, times 0 [ 340.053232][ T8686] CPU: 1 UID: 0 PID: 8686 Comm: syz.0.750 Tainted: G L syzkaller #0 PREEMPT(full) [ 340.053263][ T8686] Tainted: [L]=SOFTLOCKUP [ 340.053270][ T8686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 340.053280][ T8686] Call Trace: [ 340.053287][ T8686] [ 340.053294][ T8686] dump_stack_lvl+0x100/0x190 [ 340.053321][ T8686] should_fail_ex.cold+0x5/0xa [ 340.053347][ T8686] ? tomoyo_encode2+0xfb/0x3c0 [ 340.053375][ T8686] should_failslab+0xc2/0x120 [ 340.053396][ T8686] __kmalloc_noprof+0xe0/0x850 [ 340.053429][ T8686] ? d_absolute_path+0x136/0x1b0 [ 340.053455][ T8686] tomoyo_encode2+0xfb/0x3c0 [ 340.053486][ T8686] tomoyo_encode+0x29/0x50 [ 340.053512][ T8686] tomoyo_realpath_from_path+0x18c/0x690 [ 340.053546][ T8686] tomoyo_path_number_perm+0x23c/0x580 [ 340.053569][ T8686] ? tomoyo_path_number_perm+0x22e/0x580 [ 340.053595][ T8686] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 340.053644][ T8686] ? find_held_lock+0x2b/0x80 [ 340.053661][ T8686] ? __fget_files+0x215/0x3d0 [ 340.053682][ T8686] ? hook_file_ioctl_common+0x149/0x410 [ 340.053702][ T8686] ? __fget_files+0x215/0x3d0 [ 340.053728][ T8686] ? __fget_files+0x21f/0x3d0 [ 340.053755][ T8686] security_file_ioctl+0xd3/0x230 [ 340.053783][ T8686] __x64_sys_ioctl+0xb7/0x210 [ 340.053807][ T8686] do_syscall_64+0x115/0x870 [ 340.053830][ T8686] ? clear_bhb_loop+0x40/0x90 [ 340.053853][ T8686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.053871][ T8686] RIP: 0033:0x7f36a699ce59 [ 340.053887][ T8686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.053904][ T8686] RSP: 002b:00007f36a78bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 340.053921][ T8686] RAX: ffffffffffffffda RBX: 00007f36a6c16090 RCX: 00007f36a699ce59 [ 340.053930][ T8686] RDX: 0000200000000bc0 RSI: 0000000040505330 RDI: 0000000000000004 [ 340.053940][ T8686] RBP: 00007f36a78bb090 R08: 0000000000000000 R09: 0000000000000000 [ 340.053950][ T8686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.053959][ T8686] R13: 00007f36a6c16128 R14: 00007f36a6c16090 R15: 00007fffa0d38148 [ 340.053983][ T8686] [ 340.054053][ T8686] ERROR: Out of memory at tomoyo_realpath_from_path. [ 340.309291][ T8667] vivid-000: reconnect [ 340.491708][ T30] audit: type=1400 audit(1780047160.828:815): avc: denied { read write } for pid=8690 comm="syz.0.751" name="mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 340.567324][ T30] audit: type=1400 audit(1780047160.838:816): avc: denied { open } for pid=8690 comm="syz.0.751" path="/dev/input/mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 341.531235][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.757'. [ 341.540896][ T8706] openvswitch: netlink: Missing key (keys=c0, expected=200000) [ 341.983284][ T30] audit: type=1400 audit(1780047162.238:817): avc: denied { write } for pid=8705 comm="syz.4.757" path="socket:[19644]" dev="sockfs" ino=19644 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 344.093595][ T5739] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 344.266464][ T5739] usb 2-1: Using ep0 maxpacket: 16 [ 344.283341][ T5739] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 344.301586][ T5739] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 344.316816][ T5739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.345631][ T5739] usb 2-1: Product: syz [ 344.359840][ T5739] usb 2-1: Manufacturer: syz [ 344.377146][ T5739] usb 2-1: SerialNumber: syz [ 344.399130][ T5739] usb 2-1: config 0 descriptor?? [ 344.727238][ T5739] hub 2-1:0.0: bad descriptor, ignoring hub [ 344.740533][ T5739] hub 2-1:0.0: probe with driver hub failed with error -5 [ 344.777029][ T5739] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 345.269274][ T8752] syzkaller0: entered promiscuous mode [ 345.284899][ T8752] syzkaller0: entered allmulticast mode [ 345.429545][ T5739] usb 2-1: USB disconnect, device number 8 [ 345.571077][ T5632] udevd[5632]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 346.976141][ T5739] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 347.182870][ T5739] usb 2-1: Using ep0 maxpacket: 8 [ 347.274352][ T5739] usb 2-1: unable to get BOS descriptor or descriptor too short [ 347.439357][ T5739] usb 2-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40 [ 347.580158][ T5739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.700495][ T5739] usb 2-1: Product: syz [ 347.772682][ T5739] usb 2-1: Manufacturer: syz [ 347.834467][ T5739] usb 2-1: SerialNumber: syz [ 348.092317][ T5739] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 348.282058][ T5739] usb 2-1: USB disconnect, device number 9 [ 348.936167][ T8790] syzkaller0: entered promiscuous mode [ 348.941780][ T8790] syzkaller0: entered allmulticast mode [ 349.082671][ T8793] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004 [ 349.090494][ T30] audit: type=1400 audit(1780047169.418:818): avc: denied { setattr } for pid=8792 comm="syz.0.780" name="SCTP" dev="sockfs" ino=19926 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 349.424846][ T30] audit: type=1400 audit(1780047169.758:819): avc: denied { read } for pid=8792 comm="syz.0.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 349.527026][ T30] audit: type=1400 audit(1780047169.868:820): avc: denied { setopt } for pid=8792 comm="syz.0.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 351.472686][ T30] audit: type=1400 audit(1780047171.798:821): avc: denied { ioctl } for pid=8814 comm="syz.4.786" path="/dev/ptp0" dev="devtmpfs" ino=1266 ioctlcmd=0x3d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 352.064658][ T8826] fuse: Unknown parameter 'group[id' [ 352.495900][ T8834] netlink: 36 bytes leftover after parsing attributes in process `syz.0.785'. [ 352.919553][ T30] audit: type=1400 audit(1780047173.258:822): avc: denied { create } for pid=8844 comm="syz.1.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 352.948463][ T8845] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 353.027671][ T30] audit: type=1400 audit(1780047173.368:823): avc: denied { setopt } for pid=8844 comm="syz.1.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 353.955057][ T8854] netlink: 132 bytes leftover after parsing attributes in process `syz.3.793'. [ 353.991238][ T8854] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 353.999913][ T8854] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 354.009268][ T8854] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 354.643541][ T5803] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 354.962756][ T5803] usb 1-1: unable to get BOS descriptor or descriptor too short [ 354.986938][ T5803] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 355.009399][ T8857] syzkaller0: entered promiscuous mode [ 355.017986][ T5803] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 355.030270][ T8857] syzkaller0: entered allmulticast mode [ 355.044642][ T5803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.067065][ T5803] usb 1-1: Product: syz [ 355.086890][ T5803] usb 1-1: Manufacturer: syz [ 355.101430][ T5803] usb 1-1: SerialNumber: syz [ 357.113241][ T5803] usb 1-1: 1:1 : sample bitwidth 62 in over sample bytes 4 [ 357.137777][ T5803] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 357.155810][ T5803] usb 1-1: failed to enable PITCH for EP 0x1 [ 357.166509][ T5803] usb 1-1: unit 2 not found! [ 357.171470][ T5803] usb 1-1: unit 0 not found! [ 357.399560][ T5803] usb 1-1: USB disconnect, device number 16 [ 357.635610][ T5615] Bluetooth: hci3: unexpected event for opcode 0x0c38 [ 359.278443][ T8897] loop2: detected capacity change from 0 to 7 [ 359.288905][ T8897] Buffer I/O error on dev loop2, logical block 0, async page read [ 359.297440][ T8897] Buffer I/O error on dev loop2, logical block 0, async page read [ 359.305772][ T8897] Buffer I/O error on dev loop2, logical block 0, async page read [ 359.314104][ T8897] Buffer I/O error on dev loop2, logical block 0, async page read [ 359.331646][ T8897] Buffer I/O error on dev loop2, logical block 0, async page read [ 359.340303][ T8897] Buffer I/O error on dev loop2, logical block 0, async page read [ 359.348716][ T8897] Buffer I/O error on dev loop2, logical block 0, async page read [ 359.356884][ T8897] ldm_validate_partition_table(): Disk read failed. [ 359.363795][ T8897] Buffer I/O error on dev loop2, logical block 0, async page read [ 359.372130][ T8897] Buffer I/O error on dev loop2, logical block 0, async page read [ 359.380491][ T8897] Buffer I/O error on dev loop2, logical block 0, async page read [ 359.389064][ T8897] Dev loop2: unable to read RDB block 0 [ 359.397022][ T8897] loop2: unable to read partition table [ 359.403445][ T8897] loop2: partition table beyond EOD, truncated [ 359.409706][ T8897] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 360.067013][ T30] audit: type=1400 audit(1780047180.408:824): avc: denied { ioctl } for pid=8899 comm="syz.2.800" path="socket:[20188]" dev="sockfs" ino=20188 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 360.122613][ T30] audit: type=1400 audit(1780047180.458:825): avc: denied { ioctl } for pid=8899 comm="syz.2.800" path="socket:[20190]" dev="sockfs" ino=20190 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 361.282635][ T8911] netlink: 132 bytes leftover after parsing attributes in process `syz.1.801'. [ 361.331422][ T8912] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 361.340210][ T8912] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 361.348836][ T8912] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 362.385176][ T8930] netlink: 56 bytes leftover after parsing attributes in process `syz.4.806'. [ 362.409794][ T8930] netlink: 92 bytes leftover after parsing attributes in process `syz.4.806'. [ 364.449182][ T8955] syzkaller0: entered promiscuous mode [ 364.482118][ T8955] syzkaller0: entered allmulticast mode [ 365.996060][ T8968] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 366.002755][ T8968] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 366.032019][ T8968] vhci_hcd vhci_hcd.0: Device attached [ 366.217325][ T8971] vhci_hcd: connection closed [ 366.224285][ T6701] vhci_hcd vhci_hcd.3: stop threads [ 366.273748][ T5805] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 366.284373][ T6701] vhci_hcd vhci_hcd.3: release socket [ 366.301625][ T6701] vhci_hcd vhci_hcd.3: disconnect device [ 366.768428][ T8991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.631782][ T30] audit: type=1400 audit(1780047187.018:826): avc: denied { append } for pid=8987 comm="syz.0.817" name="sg0" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 369.987814][ T9003] syzkaller0: entered promiscuous mode [ 370.003329][ T9003] syzkaller0: entered allmulticast mode [ 371.269322][ T9017] netlink: 132 bytes leftover after parsing attributes in process `syz.0.825'. [ 371.298521][ T9017] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 371.484832][ T9017] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 371.493568][ T9017] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 372.203299][ T5805] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 373.700220][ T9044] siw: device registration error -23 [ 373.707783][ T9044] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 374.707974][ T30] audit: type=1400 audit(1780047195.048:827): avc: denied { connect } for pid=9055 comm="syz.2.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 374.766481][ T30] audit: type=1400 audit(1780047195.068:828): avc: denied { bind } for pid=9055 comm="syz.2.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 375.227924][ T30] audit: type=1400 audit(1780047195.568:829): avc: denied { connect } for pid=9064 comm="syz.4.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 375.251276][ T9065] 9p: Bad value for 'rfdno' [ 375.339512][ T30] audit: type=1400 audit(1780047195.568:830): avc: denied { block_suspend } for pid=9064 comm="syz.4.836" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 375.373222][ T30] audit: type=1400 audit(1780047195.588:831): avc: denied { mounton } for pid=9064 comm="syz.4.836" path="/174/file0" dev="tmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 376.247906][ T30] audit: type=1400 audit(1780047196.588:832): avc: denied { map } for pid=9077 comm="syz.3.837" path="socket:[21659]" dev="sockfs" ino=21659 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 376.344787][ T9073] syzkaller0: entered promiscuous mode [ 376.363690][ T30] audit: type=1400 audit(1780047196.588:833): avc: denied { accept } for pid=9077 comm="syz.3.837" path="socket:[21659]" dev="sockfs" ino=21659 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 376.394338][ T9073] syzkaller0: entered allmulticast mode [ 378.449971][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.465480][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.064675][ T5739] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 379.173111][ T5627] Bluetooth: hci4: command 0x0406 tx timeout [ 379.497521][ T9100] ubi: mtd0 is already attached to ubi16 [ 379.512754][ T9100] netlink: 'syz.2.842': attribute type 10 has an invalid length. [ 379.520869][ T9100] netlink: 40 bytes leftover after parsing attributes in process `syz.2.842'. [ 379.616096][ T5739] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.628433][ T5739] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x77, changing to 0x7 [ 379.643922][ T5739] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 379.768895][ T5739] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 379.846235][ T5739] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 379.869612][ T5739] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 379.886066][ T5739] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 379.937407][ T5739] usb 1-1: Manufacturer: syz [ 380.052371][ T5739] usb 1-1: config 0 descriptor?? [ 380.518663][ T9108] xt_CT: You must specify a L4 protocol and not use inversions on it [ 381.919975][ T5710] usb 1-1: USB disconnect, device number 17 [ 382.303205][ T5710] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 382.465620][ T5710] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 382.479268][ T5710] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 382.489625][ T5710] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 382.499032][ T5710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.540411][ T9119] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 382.559788][ T5710] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 382.952673][ T9120] netlink: 72 bytes leftover after parsing attributes in process `syz.0.847'. [ 382.961751][ T9120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.847'. [ 382.980676][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.847'. [ 384.110357][ T9091] netlink: 132 bytes leftover after parsing attributes in process `syz.4.840'. [ 384.125434][ T9100] bridge0: port 3(veth1_macvtap) entered blocking state [ 384.140686][ T9092] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 384.157815][ T9100] bridge0: port 3(veth1_macvtap) entered disabled state [ 384.184989][ T9100] veth1_macvtap: entered allmulticast mode [ 384.193253][ T9092] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 384.215377][ T9100] veth1_macvtap: left allmulticast mode [ 384.235730][ T9092] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 384.245244][ T9100] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 386.065569][ T30] audit: type=1400 audit(1780047206.098:834): avc: denied { open } for pid=9138 comm="syz.4.850" path="/dev/ptyqd" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 387.020712][ T5710] usb 1-1: USB disconnect, device number 18 [ 387.083199][ T9140] nvme_fabrics: missing parameter 'transport=%s' [ 387.142860][ T9140] nvme_fabrics: missing parameter 'nqn=%s' [ 388.374734][ T9178] syzkaller0: entered promiscuous mode [ 388.396112][ T9178] syzkaller0: entered allmulticast mode [ 388.812837][ T9185] netlink: 132 bytes leftover after parsing attributes in process `syz.3.860'. [ 388.844671][ T9185] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 388.854797][ T9185] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 388.863414][ T9185] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 389.166075][ T9182] ubi: mtd0 is already attached to ubi16 [ 389.175096][ T9182] netlink: 'syz.4.859': attribute type 10 has an invalid length. [ 389.183353][ T9182] netlink: 40 bytes leftover after parsing attributes in process `syz.4.859'. [ 389.194966][ T9182] bridge0: port 3(veth1_macvtap) entered blocking state [ 389.202647][ T9182] bridge0: port 3(veth1_macvtap) entered disabled state [ 389.210289][ T9182] veth1_macvtap: entered allmulticast mode [ 389.226535][ T9182] veth1_macvtap: left allmulticast mode [ 389.234620][ T9182] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 393.491551][ T9209] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 393.603160][ T5739] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 394.343141][ T5739] usb 5-1: Using ep0 maxpacket: 8 [ 394.362233][ T5739] usb 5-1: unable to get BOS descriptor or descriptor too short [ 394.485659][ T5739] usb 5-1: config 1 has an invalid interface number: 8 but max is 0 [ 394.517590][ T5739] usb 5-1: config 1 has no interface number 0 [ 394.587772][ T5739] usb 5-1: config 1 interface 8 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 394.610182][ T9225] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.629931][ T9225] bridge_slave_0 (unregistering): left allmulticast mode [ 394.637143][ T9225] bridge_slave_0 (unregistering): left promiscuous mode [ 394.644179][ T9225] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.658615][ T5739] usb 5-1: config 1 interface 8 altsetting 7 has an endpoint descriptor with address 0x11, changing to 0x1 [ 394.687130][ T9223] syzkaller0: entered promiscuous mode [ 394.700389][ T9223] syzkaller0: entered allmulticast mode [ 394.708787][ T5739] usb 5-1: config 1 interface 8 altsetting 7 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 394.833160][ T5739] usb 5-1: config 1 interface 8 altsetting 7 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 394.856096][ T5739] usb 5-1: config 1 interface 8 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.871352][ T5739] usb 5-1: config 1 interface 8 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.644627][ T5739] usb 5-1: config 1 interface 8 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 395.675673][ T5739] usb 5-1: config 1 interface 8 has no altsetting 0 [ 395.704764][ T5739] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=44.07 [ 395.714920][ T5739] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.733588][ T5739] usb 5-1: Product: syz [ 395.740385][ T5739] usb 5-1: Manufacturer: syz [ 395.825272][ T5739] usb 5-1: SerialNumber: syz [ 395.977720][ T9235] netlink: 36 bytes leftover after parsing attributes in process `syz.3.873'. [ 396.321958][ T5739] cxacru 5-1:1.8: submit of read urb for cm 0x90 failed (-90) [ 396.335883][ T5739] cxacru 5-1:1.8: usbatm_usb_probe: invalid endpoint 02! [ 396.347961][ T5739] cxacru 5-1:1.8: probe with driver cxacru failed with error -22 [ 396.377867][ T5739] usb 5-1: USB disconnect, device number 17 [ 396.645509][ T9235] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.652917][ T9235] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.853670][ T9242] FAULT_INJECTION: forcing a failure. [ 396.853670][ T9242] name failslab, interval 1, probability 0, space 0, times 0 [ 396.888681][ T9242] CPU: 1 UID: 0 PID: 9242 Comm: syz.3.875 Tainted: G L syzkaller #0 PREEMPT(full) [ 396.888711][ T9242] Tainted: [L]=SOFTLOCKUP [ 396.888716][ T9242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 396.888726][ T9242] Call Trace: [ 396.888732][ T9242] [ 396.888738][ T9242] dump_stack_lvl+0x100/0x190 [ 396.888764][ T9242] should_fail_ex.cold+0x5/0xa [ 396.888788][ T9242] ? tomoyo_encode2+0xfb/0x3c0 [ 396.888815][ T9242] should_failslab+0xc2/0x120 [ 396.888834][ T9242] __kmalloc_noprof+0xe0/0x850 [ 396.888859][ T9242] ? d_absolute_path+0x136/0x1b0 [ 396.888879][ T9242] tomoyo_encode2+0xfb/0x3c0 [ 396.888903][ T9242] tomoyo_encode+0x29/0x50 [ 396.888927][ T9242] tomoyo_realpath_from_path+0x18c/0x690 [ 396.888958][ T9242] tomoyo_path_number_perm+0x23c/0x580 [ 396.888978][ T9242] ? tomoyo_path_number_perm+0x22e/0x580 [ 396.889001][ T9242] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 396.889049][ T9242] ? find_held_lock+0x2b/0x80 [ 396.889065][ T9242] ? __fget_files+0x215/0x3d0 [ 396.889084][ T9242] ? hook_file_ioctl_common+0x149/0x410 [ 396.889100][ T9242] ? __fget_files+0x215/0x3d0 [ 396.889125][ T9242] ? __fget_files+0x21f/0x3d0 [ 396.889149][ T9242] security_file_ioctl+0xd3/0x230 [ 396.889173][ T9242] __x64_sys_ioctl+0xb7/0x210 [ 396.889193][ T9242] do_syscall_64+0x115/0x870 [ 396.889215][ T9242] ? clear_bhb_loop+0x40/0x90 [ 396.889243][ T9242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.889260][ T9242] RIP: 0033:0x7ffa0819ce59 [ 396.889276][ T9242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.889292][ T9242] RSP: 002b:00007ffa090bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.889311][ T9242] RAX: ffffffffffffffda RBX: 00007ffa08415fa0 RCX: 00007ffa0819ce59 [ 396.889322][ T9242] RDX: 0000200000000000 RSI: 0000000080045515 RDI: 0000000000000003 [ 396.889332][ T9242] RBP: 00007ffa090bd090 R08: 0000000000000000 R09: 0000000000000000 [ 396.889342][ T9242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.889352][ T9242] R13: 00007ffa08416038 R14: 00007ffa08415fa0 R15: 00007fff5ccc1f58 [ 396.889376][ T9242] [ 396.889392][ T9242] ERROR: Out of memory at tomoyo_realpath_from_path. [ 397.035067][ T9244] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 397.126737][ T9242] usb usb8: usbfs: process 9242 (syz.3.875) did not claim interface 0 before use [ 397.183312][ T5710] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 397.429044][ T5710] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 397.482360][ T5710] usb 3-1: config 0 has no interface number 0 [ 397.562196][ T5710] usb 3-1: config 0 interface 41 has no altsetting 0 [ 397.642074][ T5710] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 397.717590][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.812481][ T5710] usb 3-1: Product: syz [ 397.850429][ T9250] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 397.863507][ T5710] usb 3-1: Manufacturer: syz [ 397.884710][ T5710] usb 3-1: SerialNumber: syz [ 398.071766][ T5710] usb 3-1: config 0 descriptor?? [ 398.130440][ T9258] netlink: 44 bytes leftover after parsing attributes in process `syz.0.882'. [ 398.142580][ T9259] netlink: 44 bytes leftover after parsing attributes in process `syz.0.882'. [ 398.523473][ T804] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 398.596939][ T9263] fuse: Bad value for 'rootmode' [ 399.897492][ T5710] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 399.918911][ T5710] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 399.933152][ T804] usb 2-1: Using ep0 maxpacket: 8 [ 399.947557][ T804] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db59, bcdDevice=e9.9b [ 399.967616][ T5710] usb 3-1: USB disconnect, device number 22 [ 399.978087][ T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.008857][ T804] usb 2-1: Product: syz [ 400.022047][ T804] usb 2-1: Manufacturer: syz [ 400.035845][ T804] usb 2-1: SerialNumber: syz [ 400.062508][ T804] usb 2-1: config 0 descriptor?? [ 400.076196][ T9276] syzkaller0: entered promiscuous mode [ 400.090717][ T804] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 2' in warm state. [ 400.096209][ T9276] syzkaller0: entered allmulticast mode [ 400.110148][ T804] dvb-usb: bulk message failed: -22 (2/0) [ 400.132907][ T804] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 400.150366][ T30] audit: type=1400 audit(1780047220.488:835): avc: denied { write } for pid=9277 comm="syz.0.888" path="socket:[20841]" dev="sockfs" ino=20841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 400.153375][ T804] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 2) [ 400.369354][ T804] usb 2-1: media controller created [ 400.409216][ T804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 401.429879][ T804] cxusb: set interface failed [ 401.491584][ T804] dvb-usb: bulk message failed: -22 (1/0) [ 401.630925][ T9293] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 401.645113][ T804] DVB: Unable to find symbol mt352_attach() [ 401.657546][ T804] dvb-usb: bulk message failed: -22 (5/0) [ 401.686108][ T804] zl10353_read_register: readreg error (reg=127, ret==-121) [ 401.696636][ T9296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 401.712138][ T804] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 2' [ 401.843855][ T9298] ubi: mtd0 is already attached to ubi16 [ 401.862199][ T9298] netlink: 'syz.1.890': attribute type 10 has an invalid length. [ 401.870194][ T9298] netlink: 40 bytes leftover after parsing attributes in process `syz.1.890'. [ 401.879894][ T9298] bridge0: port 3(veth1_macvtap) entered blocking state [ 401.887174][ T9298] bridge0: port 3(veth1_macvtap) entered disabled state [ 401.895038][ T9298] veth1_macvtap: entered allmulticast mode [ 401.917278][ T9298] veth1_macvtap: left allmulticast mode [ 401.925035][ T9298] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 402.197690][ T804] rc_core: IR keymap rc-dvico-mce not found [ 402.221959][ T804] Registered IR keymap rc-empty [ 402.245033][ T804] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 402.377209][ T804] input: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input16 [ 402.397798][ T804] dvb-usb: schedule remote query interval to 100 msecs. [ 402.407469][ T804] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully initialized and connected. [ 403.426974][ T5710] dvb-usb: bulk message failed: -22 (1/0) [ 403.485450][ T804] usb 2-1: USB disconnect, device number 10 [ 403.527250][ T9315] dlm: no locking on control device [ 403.635242][ T9306] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 403.644033][ T9306] IPv6: NLM_F_CREATE should be set when creating new route [ 403.833499][ T5746] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 403.833873][ T5726] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 403.897946][ T9316] 9p: Bad value for 'rfdno' [ 403.908397][ T804] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully deinitialized and disconnected. [ 404.044734][ T5726] usb 1-1: config 255 has an invalid interface number: 91 but max is 0 [ 404.066403][ T5726] usb 1-1: config 255 has an invalid interface descriptor of length 2, skipping [ 404.083196][ T5746] usb 4-1: Using ep0 maxpacket: 16 [ 404.084659][ T5726] usb 1-1: config 255 has an invalid descriptor of length 172, skipping remainder of the config [ 404.096730][ T5746] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.129250][ T5746] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 404.160270][ T5746] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 404.169863][ T9316] evm: overlay not supported [ 404.185853][ T5746] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 404.187118][ T5726] usb 1-1: config 255 has no interface number 0 [ 404.222292][ T5726] usb 1-1: config 255 interface 91 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 404.224169][ T5746] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 404.267536][ T5726] usb 1-1: config 255 interface 91 has no altsetting 0 [ 404.277132][ T5726] usb 1-1: New USB device found, idVendor=0582, idProduct=001d, bcdDevice=26.41 [ 404.290002][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.298297][ T5726] usb 1-1: Product: syz [ 404.302654][ T5726] usb 1-1: Manufacturer: syz [ 404.307573][ T5726] usb 1-1: SerialNumber: syz [ 404.400152][ T5746] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 404.433725][ T5746] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 404.469446][ T5746] usb 4-1: Manufacturer: syz [ 404.537915][ T5746] usb 4-1: config 0 descriptor?? [ 405.028070][ T9307] netlink: 24 bytes leftover after parsing attributes in process `syz.0.896'. [ 406.713081][ T5746] rc_core: IR keymap rc-hauppauge not found [ 406.756508][ T5746] Registered IR keymap rc-empty [ 406.783777][ T5746] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 406.818809][ T5726] usb 1-1: USB disconnect, device number 19 [ 406.834010][ T5746] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 406.861354][ T9339] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 406.880028][ T9337] netlink: 40 bytes leftover after parsing attributes in process `syz.4.901'. [ 406.895312][ T5746] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 406.948666][ T5746] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input17 [ 406.956254][ T30] audit: type=1400 audit(1780047227.298:836): avc: denied { getopt } for pid=9335 comm="syz.4.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 407.013816][ T5746] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 407.163323][ T5746] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 407.183606][ T5746] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 407.223571][ T5746] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 407.254026][ T5746] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 407.273152][ T5746] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 407.281944][ T30] audit: type=1400 audit(1780047227.328:837): avc: denied { execute } for pid=9335 comm="syz.4.901" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=21002 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 407.321757][ T5746] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 407.353912][ T5746] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 407.383677][ T5746] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 407.413399][ T5746] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 407.488271][ T5746] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 407.548564][ T5746] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 407.634297][ T5726] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 407.816900][ T5746] usb 4-1: USB disconnect, device number 22 [ 409.631142][ T5726] usb 5-1: unable to get BOS descriptor or descriptor too short [ 409.684320][ T9359] Bluetooth: MGMT ver 1.23 [ 410.591566][ T5726] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 410.599342][ T5726] usb 5-1: can't read configurations, error -71 [ 411.345220][ T9370] FAULT_INJECTION: forcing a failure. [ 411.345220][ T9370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.367599][ T9370] CPU: 0 UID: 0 PID: 9370 Comm: syz.1.911 Tainted: G L syzkaller #0 PREEMPT(full) [ 411.367628][ T9370] Tainted: [L]=SOFTLOCKUP [ 411.367633][ T9370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 411.367640][ T9370] Call Trace: [ 411.367644][ T9370] [ 411.367648][ T9370] dump_stack_lvl+0x100/0x190 [ 411.367666][ T9370] should_fail_ex.cold+0x5/0xa [ 411.367681][ T9370] _copy_from_user+0x2e/0xd0 [ 411.367696][ T9370] move_addr_to_kernel+0x65/0x170 [ 411.367720][ T9370] __sys_connect+0xb5/0x170 [ 411.367734][ T9370] ? __pfx___sys_connect+0x10/0x10 [ 411.367748][ T9370] ? __fget_files+0x21f/0x3d0 [ 411.367766][ T9370] ? __pfx_ksys_write+0x10/0x10 [ 411.367781][ T9370] __x64_sys_connect+0x72/0xb0 [ 411.367794][ T9370] ? lockdep_hardirqs_on+0x78/0x100 [ 411.367808][ T9370] do_syscall_64+0x115/0x870 [ 411.367821][ T9370] ? clear_bhb_loop+0x40/0x90 [ 411.367834][ T9370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.367845][ T9370] RIP: 0033:0x7f5cb699ce59 [ 411.367856][ T9370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.367866][ T9370] RSP: 002b:00007f5cb7801028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 411.367877][ T9370] RAX: ffffffffffffffda RBX: 00007f5cb6c15fa0 RCX: 00007f5cb699ce59 [ 411.367884][ T9370] RDX: 0000000000000032 RSI: 0000200000000040 RDI: 0000000000000003 [ 411.367890][ T9370] RBP: 00007f5cb7801090 R08: 0000000000000000 R09: 0000000000000000 [ 411.367896][ T9370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.367902][ T9370] R13: 00007f5cb6c16038 R14: 00007f5cb6c15fa0 R15: 00007ffc31c62618 [ 411.367915][ T9370] [ 412.110740][ T5718] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 412.967742][ T5718] usb 2-1: Using ep0 maxpacket: 32 [ 412.986394][ T5718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.001925][ T5718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.013341][ T5718] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 413.022569][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.061749][ T5718] usb 2-1: config 0 descriptor?? [ 413.088113][ T5718] hub 2-1:0.0: USB hub found [ 413.286948][ T5718] hub 2-1:0.0: 1 port detected [ 413.373124][ T5739] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 413.507116][ T5739] usb 4-1: device descriptor read/64, error -71 [ 413.753344][ T5739] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 414.153420][ T5739] usb 4-1: device descriptor read/64, error -71 [ 414.409335][ T5718] hub 2-1:0.0: activate --> -90 [ 414.528539][ T5739] usb usb4-port1: attempt power cycle [ 414.635035][ T30] audit: type=1400 audit(1780047234.978:838): avc: denied { mount } for pid=9399 comm="syz.0.919" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 414.700920][ T5710] usb 2-1: USB disconnect, device number 11 [ 414.767889][ T30] audit: type=1400 audit(1780047234.998:839): avc: denied { mounton } for pid=9399 comm="syz.0.919" path="/191/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 414.933928][ T5739] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 415.015350][ T5739] usb 4-1: device descriptor read/8, error -71 [ 415.313249][ T5739] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 415.405946][ T5739] usb 4-1: device descriptor read/8, error -71 [ 415.554158][ T9408] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 415.586404][ T5739] usb usb4-port1: unable to enumerate USB device [ 415.590691][ T9408] syz_tun: entered allmulticast mode [ 415.601305][ T30] audit: type=1400 audit(1780047235.938:840): avc: denied { unmount } for pid=5619 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 415.763109][ T5746] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 415.893205][ T5746] usb 5-1: device descriptor read/64, error -71 [ 416.012295][ T30] audit: type=1326 audit(1780047236.348:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9383 comm="syz.3.915" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0819ce59 code=0x7fc00000 [ 416.087044][ T9424] FAULT_INJECTION: forcing a failure. [ 416.087044][ T9424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.100436][ T9424] CPU: 0 UID: 0 PID: 9424 Comm: syz.3.926 Tainted: G L syzkaller #0 PREEMPT(full) [ 416.100466][ T9424] Tainted: [L]=SOFTLOCKUP [ 416.100471][ T9424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 416.100480][ T9424] Call Trace: [ 416.100486][ T9424] [ 416.100492][ T9424] dump_stack_lvl+0x100/0x190 [ 416.100518][ T9424] should_fail_ex.cold+0x5/0xa [ 416.100542][ T9424] _copy_from_user+0x2e/0xd0 [ 416.100566][ T9424] copy_msghdr_from_user+0x9f/0x4f0 [ 416.100589][ T9424] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 416.100623][ T9424] ___sys_sendmsg+0x106/0x1e0 [ 416.100647][ T9424] ? __pfx____sys_sendmsg+0x10/0x10 [ 416.100699][ T9424] __sys_sendmsg+0x170/0x220 [ 416.100728][ T9424] ? __pfx___sys_sendmsg+0x10/0x10 [ 416.100766][ T9424] ? rcu_is_watching+0x12/0xc0 [ 416.100797][ T9424] do_syscall_64+0x115/0x870 [ 416.100820][ T9424] ? clear_bhb_loop+0x40/0x90 [ 416.100842][ T9424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.100861][ T9424] RIP: 0033:0x7ffa0819ce59 [ 416.100876][ T9424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.100893][ T9424] RSP: 002b:00007ffa090bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.100910][ T9424] RAX: ffffffffffffffda RBX: 00007ffa08415fa0 RCX: 00007ffa0819ce59 [ 416.100921][ T9424] RDX: 0000000000000080 RSI: 0000200000000040 RDI: 0000000000000003 [ 416.100932][ T9424] RBP: 00007ffa090bd090 R08: 0000000000000000 R09: 0000000000000000 [ 416.100942][ T9424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.100953][ T9424] R13: 00007ffa08416038 R14: 00007ffa08415fa0 R15: 00007fff5ccc1f58 [ 416.100978][ T9424] [ 416.134210][ T5746] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 416.135923][ T5725] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 416.263118][ T5746] usb 5-1: device descriptor read/64, error -71 [ 416.265189][ T5718] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 416.403843][ T5746] usb usb5-port1: attempt power cycle [ 416.753216][ T5746] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 416.787122][ T5746] usb 5-1: device descriptor read/8, error -71 [ 416.966044][ T5725] usb 3-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 416.978080][ T5718] usb 2-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 416.990316][ T5725] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 417.001511][ T5718] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 417.011612][ T5725] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 417.023242][ T5718] usb 2-1: config 0 interface 0 has no altsetting 0 [ 417.031747][ T5725] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 417.041585][ T5725] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 417.050895][ T5725] usb 3-1: Manufacturer: syz [ 417.056344][ T5718] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 417.066124][ T5725] usb 3-1: SerialNumber: syz [ 417.070846][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 417.080977][ T5718] usb 2-1: Product: syz [ 417.085516][ T5718] usb 2-1: Manufacturer: syz [ 417.090312][ T5718] usb 2-1: SerialNumber: syz [ 417.098471][ T9419] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 417.120956][ T5718] usb 2-1: config 0 descriptor?? [ 417.141027][ T5718] usb 2-1: selecting invalid altsetting 0 [ 417.239320][ T5746] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 417.267697][ T5746] usb 5-1: device descriptor read/8, error -71 [ 417.469935][ T30] audit: type=1400 audit(1780047237.728:842): avc: denied { write } for pid=9418 comm="syz.2.925" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 417.659644][ T5746] usb usb5-port1: unable to enumerate USB device [ 417.696340][ T5725] yealink 3-1:36.0: invalid payload size 1024, expected 16 [ 417.704268][ T30] audit: type=1400 audit(1780047238.008:843): avc: denied { listen } for pid=9418 comm="syz.2.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 417.725755][ T5725] input: Yealink usb-p1k as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:36.0/input/input18 [ 417.745832][ T30] audit: type=1400 audit(1780047238.038:844): avc: denied { map } for pid=9418 comm="syz.2.925" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 417.780597][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 417.787669][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 417.794715][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 417.801729][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 417.808677][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 417.815590][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 417.822502][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 417.829501][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 417.836470][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 417.843222][ C0] yealink 3-1:36.0: unexpected response 0 [ 417.850397][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 417.857349][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 417.864102][ C0] yealink 3-1:36.0: unexpected response 0 [ 417.870024][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 417.876971][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 417.883729][ C0] yealink 3-1:36.0: unexpected response 0 [ 417.889772][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 417.896747][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 417.903518][ C0] yealink 3-1:36.0: unexpected response 0 [ 417.913171][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 417.920140][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 417.926902][ C0] yealink 3-1:36.0: unexpected response 0 [ 417.932815][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 417.939760][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 417.946532][ C0] yealink 3-1:36.0: unexpected response 0 [ 417.952438][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 417.959410][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 417.966162][ C0] yealink 3-1:36.0: unexpected response 0 [ 417.972045][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 417.978994][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 417.985752][ C0] yealink 3-1:36.0: unexpected response 0 [ 417.991622][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 417.998544][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.005308][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.013160][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.020105][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.026857][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.032729][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.039652][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.046397][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.052280][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.059208][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.065955][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.071848][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.078787][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.085535][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.091419][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.098327][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.105090][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.113154][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.120100][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.126858][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.132753][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.139712][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.146471][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.152374][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.159321][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.166070][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.171964][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.178908][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.185659][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.191518][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.198452][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.205194][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.213278][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.220225][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.226988][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.232861][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.239788][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.246538][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.252413][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.259344][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.266090][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.271958][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.278893][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.285649][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.291520][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.298456][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.305214][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.313147][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.320061][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.326813][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.332709][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.339620][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.346376][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.352245][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.359200][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.365947][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.371827][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.378756][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.385506][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.391401][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.398313][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.405075][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.410954][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.418276][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.425031][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.430907][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.437830][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.444587][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.450475][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.457402][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.464159][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.470040][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.476970][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.483713][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.489614][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.496548][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.503304][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.509197][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.517046][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.523798][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.529702][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.536618][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.543373][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.549268][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.556183][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.562934][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.568830][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.575728][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.582483][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.588369][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.595294][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.602033][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.607903][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.614860][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.621613][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.629198][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.636169][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.642940][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.648848][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.655776][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.662519][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.668410][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.675329][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.682079][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.687973][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.695024][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.701765][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.707662][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.714689][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.721443][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.727942][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.734938][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.741680][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.747569][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.754487][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.761228][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.767287][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.775128][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.781881][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.787761][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.794711][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.801483][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.808877][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.815833][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.822579][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.828607][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.835534][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.842450][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.849471][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.856412][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.863172][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.869080][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.876014][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.882761][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.888631][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.895570][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.902328][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.908238][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.915153][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.921896][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.928099][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.935119][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.941885][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.947812][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.954769][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.961522][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.967407][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.974320][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 418.981063][ C0] yealink 3-1:36.0: unexpected response 0 [ 418.986989][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 418.993981][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 419.000737][ C0] yealink 3-1:36.0: unexpected response 0 [ 419.006619][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 419.013530][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 419.020273][ C0] yealink 3-1:36.0: unexpected response 0 [ 419.028495][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 419.035452][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 419.042197][ C0] yealink 3-1:36.0: unexpected response 0 [ 419.048073][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 419.055006][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 419.061776][ C0] yealink 3-1:36.0: unexpected response 0 [ 419.067869][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 419.074861][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 419.081720][ C0] yealink 3-1:36.0: unexpected response 0 [ 419.087742][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 419.091427][ T30] audit: type=1400 audit(1780047238.038:845): avc: denied { execute } for pid=9418 comm="syz.2.925" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 419.094696][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 419.094718][ C0] yealink 3-1:36.0: unexpected response 0 [ 419.094907][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 419.137601][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 419.144357][ C0] yealink 3-1:36.0: unexpected response 0 [ 419.150318][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 419.157284][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 419.164082][ C0] yealink 3-1:36.0: unexpected response 0 [ 419.170520][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 419.177904][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 419.184689][ C0] yealink 3-1:36.0: unexpected response 0 [ 419.190974][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 419.198243][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 419.204994][ C0] yealink 3-1:36.0: unexpected response 0 [ 419.211188][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 419.218468][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 419.225231][ C0] yealink 3-1:36.0: unexpected response 0 [ 419.231375][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 419.238726][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 419.245477][ C0] yealink 3-1:36.0: unexpected response 0 [ 419.251747][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 419.259098][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 419.265853][ C0] yealink 3-1:36.0: unexpected response 0 [ 419.272175][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 419.279547][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 419.286306][ C0] yealink 3-1:36.0: unexpected response 0 [ 419.292662][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 419.299939][ T5725] usb 3-1: USB disconnect, device number 23 [ 419.306036][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 419.306062][ C0] yealink 3-1:36.0: unexpected response 0 [ 419.306078][ C0] yealink 3-1:36.0: urb_irq_callback - usb_submit_urb failed -19 [ 419.448870][ T5348] usb 2-1: USB disconnect, device number 12 [ 419.770925][ T9445] lo speed is unknown, defaulting to 1000 [ 419.779248][ T9445] lo speed is unknown, defaulting to 1000 [ 420.108062][ T9445] lo speed is unknown, defaulting to 1000 [ 420.117315][ T9445] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 420.131563][ T9445] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 420.148523][ T9445] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 420.162606][ T9445] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 420.182167][ T9445] lo speed is unknown, defaulting to 1000 [ 420.190046][ T9445] lo speed is unknown, defaulting to 1000 [ 420.198017][ T9445] lo speed is unknown, defaulting to 1000 [ 420.204498][ T9445] lo speed is unknown, defaulting to 1000 [ 420.210893][ T9445] lo speed is unknown, defaulting to 1000 [ 420.249459][ T9444] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 420.464311][ T9450] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 420.601980][ T9447] ubi: mtd0 is already attached to ubi16 [ 420.645698][ T9447] netlink: 'syz.2.930': attribute type 10 has an invalid length. [ 420.653815][ T9447] netlink: 40 bytes leftover after parsing attributes in process `syz.2.930'. [ 420.664560][ T9447] bridge0: port 1(veth1_macvtap) entered blocking state [ 420.676912][ T9447] bridge0: port 1(veth1_macvtap) entered disabled state [ 420.688762][ T9447] veth1_macvtap: entered allmulticast mode [ 420.710431][ T9447] veth1_macvtap: left allmulticast mode [ 420.717755][ T9447] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 420.963116][ T5348] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 421.251924][ T9461] netlink: 132 bytes leftover after parsing attributes in process `syz.1.936'. [ 421.452935][ T9467] syzkaller0: entered promiscuous mode [ 421.458465][ T9467] syzkaller0: entered allmulticast mode [ 421.903159][ T5348] usb 5-1: Using ep0 maxpacket: 16 [ 422.258255][ T9462] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 422.266867][ T9462] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 422.283321][ T30] audit: type=1400 audit(1780047242.618:846): avc: denied { firmware_load } for pid=9456 comm="syz.1.936" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 422.598459][ T9474] nvme_fabrics: missing parameter 'transport=%s' [ 422.703382][ T9462] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 422.746856][ T9474] nvme_fabrics: missing parameter 'nqn=%s' [ 423.262002][ T5348] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.272262][ T5348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 423.283284][ T5348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 423.293052][ T5348] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 423.302916][ T5348] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 423.317462][ T5348] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 423.332069][ T5348] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 423.356094][ T5348] usb 5-1: Manufacturer: syz [ 423.450588][ T5348] usb 5-1: config 0 descriptor?? [ 423.911527][ T5348] usb 5-1: can't set config #0, error -71 [ 424.143733][ T5348] usb 5-1: USB disconnect, device number 24 [ 424.200208][ T9492] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 424.464289][ T9493] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 427.752912][ T9517] nvme_fabrics: missing parameter 'transport=%s' [ 428.747334][ T9517] nvme_fabrics: missing parameter 'nqn=%s' [ 428.763553][ T9527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.951'. [ 428.937568][ T9527] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 429.281593][ T9528] ubi: mtd0 is already attached to ubi16 [ 429.294429][ T9528] netlink: 'syz.1.949': attribute type 10 has an invalid length. [ 429.302358][ T9528] netlink: 40 bytes leftover after parsing attributes in process `syz.1.949'. [ 429.312112][ T9528] bridge0: port 3(veth1_macvtap) entered blocking state [ 429.319571][ T9528] bridge0: port 3(veth1_macvtap) entered disabled state [ 429.327399][ T9528] veth1_macvtap: entered allmulticast mode [ 429.342231][ T9528] veth1_macvtap: left allmulticast mode [ 429.349714][ T9528] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 429.369081][ T5718] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 429.783432][ T5718] usb 1-1: Using ep0 maxpacket: 16 [ 429.795216][ T5718] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.805672][ T5718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 429.844488][ T5718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 429.880490][ T5718] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 429.923185][ T5718] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 429.971841][ T5718] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 429.989284][ T5718] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 430.018786][ T5718] usb 1-1: Manufacturer: syz [ 430.043336][ T5718] usb 1-1: config 0 descriptor?? [ 430.463135][ T5718] rc_core: IR keymap rc-hauppauge not found [ 430.469144][ T5718] Registered IR keymap rc-empty [ 430.491542][ T5718] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 430.533157][ T5718] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 430.562614][ T9549] FAULT_INJECTION: forcing a failure. [ 430.562614][ T9549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.588213][ T5718] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 430.609772][ T9549] CPU: 0 UID: 0 PID: 9549 Comm: syz.2.954 Tainted: G L syzkaller #0 PREEMPT(full) [ 430.609792][ T9549] Tainted: [L]=SOFTLOCKUP [ 430.609796][ T9549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 430.609802][ T9549] Call Trace: [ 430.609806][ T9549] [ 430.609811][ T9549] dump_stack_lvl+0x100/0x190 [ 430.609830][ T9549] should_fail_ex.cold+0x5/0xa [ 430.609846][ T9549] _copy_to_user+0x32/0xd0 [ 430.609862][ T9549] simple_read_from_buffer+0xcb/0x170 [ 430.609878][ T9549] proc_fail_nth_read+0x1af/0x230 [ 430.609892][ T9549] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 430.609910][ T9549] ? rw_verify_area+0xce/0x6d0 [ 430.609921][ T9549] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 430.609933][ T9549] vfs_read+0x1e4/0xb30 [ 430.609947][ T9549] ? __pfx_vfs_read+0x10/0x10 [ 430.609959][ T9549] ? __fget_files+0x215/0x3d0 [ 430.609977][ T9549] ? __fget_files+0x21f/0x3d0 [ 430.609995][ T9549] ksys_read+0x12a/0x250 [ 430.610007][ T9549] ? __pfx_ksys_read+0x10/0x10 [ 430.610020][ T9549] ? rcu_is_watching+0x12/0xc0 [ 430.610039][ T9549] do_syscall_64+0x115/0x870 [ 430.610054][ T9549] ? clear_bhb_loop+0x40/0x90 [ 430.610067][ T9549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.610079][ T9549] RIP: 0033:0x7fe426f5d68e [ 430.610089][ T9549] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 430.610100][ T9549] RSP: 002b:00007fe427f33fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 430.610112][ T9549] RAX: ffffffffffffffda RBX: 00007fe427f346c0 RCX: 00007fe426f5d68e [ 430.610120][ T9549] RDX: 000000000000000f RSI: 00007fe427f340a0 RDI: 0000000000000006 [ 430.610126][ T9549] RBP: 00007fe427f34090 R08: 0000000000000000 R09: 0000000000000000 [ 430.610132][ T9549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.610139][ T9549] R13: 00007fe427216038 R14: 00007fe427215fa0 R15: 00007ffd06951078 [ 430.610153][ T9549] [ 430.927356][ T5718] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input19 [ 430.986774][ T5718] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 431.013395][ T5718] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 431.033137][ T5718] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 431.047973][ T30] audit: type=1400 audit(1780047251.388:847): avc: denied { module_load } for pid=9550 comm="syz.3.960" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 431.054639][ T9554] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 431.072971][ T9551] kernel read not supported for file /policy (pid: 9551 comm: syz.3.960) [ 431.103583][ T5718] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 431.207352][ T9557] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 431.417483][ T5718] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 431.503192][ T5718] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 431.533924][ T5718] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 431.590607][ T5718] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 431.715643][ T5718] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 431.808336][ T5718] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 432.223533][ T5718] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 432.357442][ T5718] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 432.587270][ T5718] usb 1-1: USB disconnect, device number 20 [ 435.101636][ T30] audit: type=1400 audit(1780047255.358:848): avc: denied { search } for pid=9585 comm="syz.0.973" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 435.276669][ T30] audit: type=1400 audit(1780047255.398:849): avc: denied { search } for pid=9585 comm="syz.0.973" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 435.701208][ T9580] ubi: mtd0 is already attached to ubi16 [ 436.864969][ T9580] netlink: 'syz.4.969': attribute type 10 has an invalid length. [ 436.914817][ T9580] netlink: 40 bytes leftover after parsing attributes in process `syz.4.969'. [ 436.955853][ T9603] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 437.073320][ T9580] bridge0: port 3(veth1_macvtap) entered blocking state [ 437.144711][ T9580] bridge0: port 3(veth1_macvtap) entered disabled state [ 437.191689][ T9580] veth1_macvtap: entered allmulticast mode [ 437.207623][ T9580] veth1_macvtap: left allmulticast mode [ 437.220743][ T9580] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 437.312418][ T9612] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 437.496842][ T5739] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 438.113099][ T5739] usb 2-1: Using ep0 maxpacket: 16 [ 438.126739][ T5739] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.155191][ T5739] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 438.187751][ T5739] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 438.198267][ T5739] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 438.210041][ T5739] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 438.225837][ T5739] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 438.228846][ T9621] lo speed is unknown, defaulting to 1000 [ 438.235526][ T5739] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 438.262713][ T5739] usb 2-1: Manufacturer: syz [ 438.280621][ T5739] usb 2-1: config 0 descriptor?? [ 438.403153][ T5718] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 438.554504][ T5718] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.582522][ T9631] netlink: 132 bytes leftover after parsing attributes in process `syz.4.986'. [ 438.622908][ T9631] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 438.631279][ T9631] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 438.639840][ T9631] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 439.823888][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.834402][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.196310][ T5718] usb 1-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 440.753157][ T9640] netlink: 32 bytes leftover after parsing attributes in process `syz.3.983'. [ 440.860722][ T9641] netlink: 32 bytes leftover after parsing attributes in process `syz.3.983'. [ 441.041066][ T5718] usb 1-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 441.049395][ T5718] usb 1-1: Product: syz [ 441.172305][ T5739] rc_core: IR keymap rc-hauppauge not found [ 441.191246][ T5739] Registered IR keymap rc-empty [ 441.191597][ T5718] usb 1-1: config 0 descriptor?? [ 441.203972][ T5739] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 441.273444][ T5739] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 441.384214][ T5739] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 441.503384][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 441.553531][ T9649] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 441.756990][ T5739] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input20 [ 441.856951][ T5739] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 441.921340][ T24] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 441.986742][ T5739] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 442.074344][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.158134][ T5739] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 442.192581][ T5718] usb 1-1: can't set config #0, error -71 [ 442.219694][ T24] usb 3-1: Product: syz [ 442.221726][ T5718] usb 1-1: USB disconnect, device number 21 [ 442.246790][ T24] usb 3-1: Manufacturer: syz [ 442.264965][ T5739] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 442.282094][ T24] usb 3-1: SerialNumber: syz [ 442.463280][ T5739] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 442.483469][ T5739] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 442.513143][ T5739] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 442.533185][ T5739] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 442.553136][ T5739] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 442.583135][ T5739] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 442.626847][ T5739] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 442.638619][ T5739] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 442.658698][ T5739] usb 2-1: USB disconnect, device number 13 [ 443.592212][ T9660] ubi: mtd0 is already attached to ubi16 [ 443.602746][ T9660] netlink: 'syz.1.992': attribute type 10 has an invalid length. [ 443.610710][ T9660] netlink: 40 bytes leftover after parsing attributes in process `syz.1.992'. [ 443.620916][ T9660] bridge0: port 3(veth1_macvtap) entered blocking state [ 443.628402][ T9660] bridge0: port 3(veth1_macvtap) entered disabled state [ 443.636851][ T9660] veth1_macvtap: entered allmulticast mode [ 443.663375][ T9660] veth1_macvtap: left allmulticast mode [ 443.672190][ T9660] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 444.112080][ T24] rtl8150 3-1:1.0: couldn't reset the device [ 444.120355][ T24] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 444.133459][ T24] usb 3-1: USB disconnect, device number 24 [ 445.712075][ T30] audit: type=1400 audit(1780047265.838:850): avc: denied { write } for pid=9672 comm="syz.1.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 446.701128][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 452.063019][ C1] sched: DL replenish lagged too much [ 501.285050][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.464698][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.734787][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 585.142955][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 585.149934][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9669/1:b..l P9663/1:b..l P1349/1:b..l P635/1:b..l P5833/1:b..l P76/1:b..l P5746/1:b..l P4982/1:b..l [ 585.166052][ C1] rcu: (detected by 1, t=10504 jiffies, g=43545, q=1345 ncpus=2) [ 585.173855][ C1] task:udevd state:R running task stack:24552 pid:4982 tgid:4982 ppid:1 task_flags:0x400140 flags:0x00080000 [ 585.188454][ C1] Call Trace: [ 585.191741][ C1] [ 585.194673][ C1] __schedule+0x1295/0x67a0 [ 585.199195][ C1] ? __pfx___schedule+0x10/0x10 [ 585.204045][ C1] ? mark_held_locks+0x40/0x70 [ 585.208808][ C1] preempt_schedule_irq+0x50/0x90 [ 585.213834][ C1] irqentry_exit+0x205/0x970 [ 585.218517][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 585.224523][ C1] RIP: 0010:unwind_next_frame+0x167b/0x2090 [ 585.230428][ C1] Code: 00 0f 84 42 f9 ff ff 4c 89 e7 e8 e0 b0 be 00 e9 35 f9 ff ff 48 b8 00 00 00 00 00 fc ff df 48 8b 14 24 48 c1 ea 03 80 3c 02 00 <0f> 85 29 06 00 00 49 8d 7d 08 49 8b 5d 38 48 b8 00 00 00 00 00 fc [ 585.250053][ C1] RSP: 0018:ffffc9000414f598 EFLAGS: 00000246 [ 585.256216][ C1] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff91864302 [ 585.264195][ C1] RDX: 1ffff92000829ec8 RSI: ffffc9000414fd60 RDI: ffffc9000414f648 [ 585.272193][ C1] RBP: 1ffff92000829fb2 R08: 0000000000000001 R09: 0000000000000007 [ 585.280177][ C1] R10: 0000000000000200 R11: 0000000000018acc R12: ffffc9000414f658 [ 585.288150][ C1] R13: ffffc9000414f608 R14: ffffc9000414fd88 R15: ffffc9000414f63c [ 585.296135][ C1] ? unwind_next_frame+0x1561/0x2090 [ 585.301427][ C1] ? vfs_fstatat+0x77/0xe0 [ 585.305850][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 585.312000][ C1] arch_stack_walk+0x94/0xf0 [ 585.316594][ C1] ? __do_sys_newfstatat+0x9d/0x120 [ 585.321807][ C1] stack_trace_save+0x8e/0xc0 [ 585.326486][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 585.331879][ C1] ? __lock_acquire+0x4a5/0x2630 [ 585.336817][ C1] ? __lock_acquire+0x4a5/0x2630 [ 585.341754][ C1] save_stack+0x162/0x1e0 [ 585.346098][ C1] ? __pfx_save_stack+0x10/0x10 [ 585.350941][ C1] ? __free_frozen_pages+0x794/0x10a0 [ 585.356310][ C1] ? qlist_free_all+0x47/0xf0 [ 585.360986][ C1] ? kasan_quarantine_reduce+0x1a0/0x1f0 [ 585.366617][ C1] ? __kasan_kmalloc+0x8a/0xb0 [ 585.371381][ C1] ? __kmalloc_noprof+0x301/0x850 [ 585.376406][ C1] ? tomoyo_realpath_from_path+0xb6/0x690 [ 585.382128][ C1] ? tomoyo_path_perm+0x276/0x460 [ 585.387149][ C1] ? security_inode_getattr+0x116/0x280 [ 585.392693][ C1] ? vfs_statx+0x11f/0x3f0 [ 585.397110][ C1] ? vfs_fstatat+0x77/0xe0 [ 585.401531][ C1] ? page_ext_put+0x3e/0xd0 [ 585.406034][ C1] __reset_page_owner+0x84/0x190 [ 585.410968][ C1] __free_frozen_pages+0x794/0x10a0 [ 585.416166][ C1] ? __free_slab+0xd0/0x220 [ 585.420668][ C1] ? tomoyo_realpath_from_path+0xb6/0x690 [ 585.426389][ C1] qlist_free_all+0x47/0xf0 [ 585.430900][ C1] kasan_quarantine_reduce+0x1a0/0x1f0 [ 585.436367][ C1] __kasan_kmalloc+0x8a/0xb0 [ 585.440955][ C1] __kmalloc_noprof+0x301/0x850 [ 585.445811][ C1] tomoyo_realpath_from_path+0xb6/0x690 [ 585.451365][ C1] tomoyo_path_perm+0x276/0x460 [ 585.456215][ C1] ? tomoyo_path_perm+0x262/0x460 [ 585.461270][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 585.466669][ C1] ? find_held_lock+0x2b/0x80 [ 585.471354][ C1] ? __might_fault+0xc5/0x140 [ 585.476030][ C1] ? __might_fault+0xc5/0x140 [ 585.480709][ C1] security_inode_getattr+0x116/0x280 [ 585.486088][ C1] vfs_statx+0x11f/0x3f0 [ 585.490333][ C1] ? __pfx_vfs_statx+0x10/0x10 [ 585.495099][ C1] ? do_getname+0x191/0x390 [ 585.499605][ C1] vfs_fstatat+0x77/0xe0 [ 585.503860][ C1] __do_sys_newfstatat+0x9d/0x120 [ 585.508885][ C1] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 585.514533][ C1] ? rcu_is_watching+0x12/0xc0 [ 585.519301][ C1] do_syscall_64+0x115/0x870 [ 585.523887][ C1] ? clear_bhb_loop+0x40/0x90 [ 585.528561][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.534447][ C1] RIP: 0033:0x7f9e76711b0a [ 585.538856][ C1] RSP: 002b:00007ffd0db90f88 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 585.547263][ C1] RAX: ffffffffffffffda RBX: 000055a1a295c400 RCX: 00007f9e76711b0a [ 585.555227][ C1] RDX: 00007ffd0db90f90 RSI: 000055a1a294a296 RDI: 00000000ffffff9c [ 585.563192][ C1] RBP: 000055a1cbfb6668 R08: 000000001c5c60c1 R09: 0000000000000001 [ 585.571159][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.579148][ C1] R13: 00007ffd0db90f90 R14: 0000000000000000 R15: 0000000000000000 [ 585.587127][ C1] [ 585.590147][ C1] task:kworker/1:7 state:R running task stack:22424 pid:5746 tgid:5746 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 585.603725][ C1] Workqueue: events_power_efficient gc_worker [ 585.609811][ C1] Call Trace: [ 585.613079][ C1] [ 585.616005][ C1] __schedule+0x1295/0x67a0 [ 585.620505][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 585.625712][ C1] ? __virt_addr_valid+0x22a/0x430 [ 585.630834][ C1] ? __pfx___schedule+0x10/0x10 [ 585.635685][ C1] ? mark_held_locks+0x40/0x70 [ 585.640472][ C1] preempt_schedule_irq+0x50/0x90 [ 585.645517][ C1] irqentry_exit+0x205/0x970 [ 585.650110][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 585.656087][ C1] RIP: 0010:gc_worker+0x2bb/0x1630 [ 585.661203][ C1] Code: 00 00 48 c7 c7 c8 b7 d7 90 e8 f1 c0 36 f8 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 ef db 5a f8 58 48 85 db 0f 85 97 0f 00 00 00 e1 5a f8 8b 1d 9a f7 29 07 89 dd 31 ff 83 e5 01 89 ee e8 9c [ 585.680807][ C1] RSP: 0018:ffffc90003e1fb40 EFLAGS: 00000293 [ 585.686875][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff89adcab6 [ 585.694846][ C1] RDX: ffff88802c4d2540 RSI: ffffffff89adcac5 RDI: ffff88802c4d2540 [ 585.702810][ C1] RBP: 0000000000014183 R08: 0000000000000007 R09: 0000000000000000 [ 585.710773][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 585.718738][ C1] R13: 0000000000040000 R14: 000000000000a0c2 R15: 0000000000001899 [ 585.726729][ C1] ? gc_worker+0xd56/0x1630 [ 585.731246][ C1] ? gc_worker+0xd65/0x1630 [ 585.735765][ C1] ? __pfx_gc_worker+0x10/0x10 [ 585.740533][ C1] ? rcu_is_watching+0x12/0xc0 [ 585.745312][ C1] process_one_work+0xa0e/0x1980 [ 585.750267][ C1] ? __pfx_process_one_work+0x10/0x10 [ 585.755641][ C1] ? __pfx_gc_worker+0x10/0x10 [ 585.760409][ C1] worker_thread+0x5ef/0xe50 [ 585.765002][ C1] ? __pfx_worker_thread+0x10/0x10 [ 585.770110][ C1] ? kthread+0x13a/0x450 [ 585.774347][ C1] ? __pfx_worker_thread+0x10/0x10 [ 585.779451][ C1] kthread+0x370/0x450 [ 585.783522][ C1] ? __pfx_kthread+0x10/0x10 [ 585.788110][ C1] ret_from_fork+0x72b/0xd50 [ 585.792698][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 585.797806][ C1] ? __switch_to+0x800/0x1100 [ 585.802482][ C1] ? __pfx_kthread+0x10/0x10 [ 585.807073][ C1] ret_from_fork_asm+0x1a/0x30 [ 585.811848][ C1] [ 585.814855][ C1] task:kworker/u8:4 state:R running task stack:23432 pid:76 tgid:76 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 585.828426][ C1] Workqueue: krds_cp_wq#3/3 rds_connect_worker [ 585.834613][ C1] Call Trace: [ 585.837882][ C1] [ 585.840812][ C1] __schedule+0x1295/0x67a0 [ 585.845323][ C1] ? arch_stack_walk+0x88/0xf0 [ 585.850090][ C1] ? __pfx___schedule+0x10/0x10 [ 585.854958][ C1] ? mark_held_locks+0x40/0x70 [ 585.859720][ C1] preempt_schedule_irq+0x50/0x90 [ 585.864755][ C1] irqentry_exit+0x205/0x970 [ 585.869346][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 585.875341][ C1] RIP: 0010:__nr_to_section+0xa2/0x100 [ 585.880792][ C1] Code: 4a 8d 6c e5 00 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 80 3c 02 00 75 57 48 8b 6d 00 48 85 ed 74 2a e8 be 3b 86 ff <83> e3 7f e8 b6 3b 86 ff 48 c1 e3 05 48 01 dd 5b 48 89 e8 5d 41 5c [ 585.900397][ C1] RSP: 0018:ffffc9000245f728 EFLAGS: 00000293 [ 585.906464][ C1] RAX: 0000000000000000 RBX: 000000000000000a RCX: ffffffff828264fe [ 585.914448][ C1] RDX: ffff88801df20000 RSI: ffffffff82826562 RDI: ffff88801df20000 [ 585.922414][ C1] RBP: ffff88813ff27000 R08: 0000000000000006 R09: 0000000000001000 [ 585.930379][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 585.938355][ C1] R13: 0000006f706a25c9 R14: 0000000000000003 R15: ffffea000144b600 [ 585.946342][ C1] ? __nr_to_section+0x3e/0x100 [ 585.951198][ C1] ? __nr_to_section+0xa2/0x100 [ 585.956050][ C1] ? __nr_to_section+0xa2/0x100 [ 585.960896][ C1] lookup_page_ext+0x46/0x100 [ 585.965572][ C1] page_ext_get+0x58/0x1a0 [ 585.970007][ C1] __reset_page_owner+0x2b/0x190 [ 585.974949][ C1] __free_frozen_pages+0x794/0x10a0 [ 585.980153][ C1] ? lsm_blob_alloc+0x68/0x90 [ 585.984828][ C1] qlist_free_all+0x47/0xf0 [ 585.989348][ C1] kasan_quarantine_reduce+0x1a0/0x1f0 [ 585.994822][ C1] __kasan_slab_alloc+0x69/0x90 [ 585.999671][ C1] __kmalloc_noprof+0x2b9/0x850 [ 586.004530][ C1] lsm_blob_alloc+0x68/0x90 [ 586.009030][ C1] security_sk_alloc+0x2d/0x290 [ 586.013880][ C1] sk_prot_alloc+0x1d1/0x2a0 [ 586.018499][ C1] sk_alloc+0x36/0xe80 [ 586.022583][ C1] inet6_create+0x385/0x12b0 [ 586.027184][ C1] ? inet6_create+0x7f/0x12b0 [ 586.031881][ C1] __sock_create+0x339/0x860 [ 586.036533][ C1] rds_tcp_conn_path_connect+0x621/0xaa0 [ 586.042174][ C1] ? __lock_acquire+0x4a5/0x2630 [ 586.047115][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 586.053271][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 586.059074][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 586.064736][ C1] rds_connect_worker+0x1b4/0x2d0 [ 586.069767][ C1] process_one_work+0xa0e/0x1980 [ 586.074721][ C1] ? __pfx_process_one_work+0x10/0x10 [ 586.080103][ C1] ? __pfx_rds_connect_worker+0x10/0x10 [ 586.085652][ C1] worker_thread+0x5ef/0xe50 [ 586.090254][ C1] ? kthread+0x13a/0x450 [ 586.094512][ C1] ? __pfx_worker_thread+0x10/0x10 [ 586.099708][ C1] kthread+0x370/0x450 [ 586.103771][ C1] ? __pfx_kthread+0x10/0x10 [ 586.108363][ C1] ret_from_fork+0x72b/0xd50 [ 586.112950][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 586.118052][ C1] ? __switch_to+0x800/0x1100 [ 586.122750][ C1] ? __pfx_kthread+0x10/0x10 [ 586.127359][ C1] ret_from_fork_asm+0x1a/0x30 [ 586.132139][ C1] [ 586.135150][ C1] task:kworker/u8:9 state:R running task stack:22344 pid:5833 tgid:5833 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 586.148719][ C1] Workqueue: iou_exit io_ring_exit_work [ 586.154271][ C1] Call Trace: [ 586.157542][ C1] [ 586.160475][ C1] __schedule+0x1295/0x67a0 [ 586.164977][ C1] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 586.170880][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 586.176083][ C1] ? __pfx___schedule+0x10/0x10 [ 586.180934][ C1] ? mark_held_locks+0x40/0x70 [ 586.185700][ C1] preempt_schedule_irq+0x50/0x90 [ 586.190723][ C1] irqentry_exit+0x205/0x970 [ 586.195316][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 586.201293][ C1] RIP: 0010:lock_acquire+0x5e/0x370 [ 586.206495][ C1] Code: 05 7b 24 25 12 83 f8 07 0f 87 d9 02 00 00 48 0f a3 05 86 89 f2 0e 0f 82 a4 02 00 00 8b 35 0e bd f2 0e 85 f6 0f 85 bf 00 00 00 <48> 8b 44 24 30 65 48 2b 05 1d 24 25 12 0f 85 ed 02 00 00 48 83 c4 [ 586.226197][ C1] RSP: 0018:ffffc9000412f560 EFLAGS: 00000206 [ 586.232264][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000003 [ 586.240229][ C1] RDX: 0000000000000000 RSI: ffffffff8dee9983 RDI: ffffffff8c1c4480 [ 586.248198][ C1] RBP: ffffffff8e7e5620 R08: 0000000093383356 R09: 0000000000000007 [ 586.256165][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 586.264131][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 586.272112][ C1] ? unwind_next_frame+0x3be/0x2090 [ 586.277316][ C1] ? unwind_next_frame+0x3be/0x2090 [ 586.282515][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 586.288664][ C1] unwind_next_frame+0xd1/0x2090 [ 586.293602][ C1] ? unwind_next_frame+0xbd/0x2090 [ 586.298711][ C1] ? kasan_save_stack+0x30/0x50 [ 586.303557][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 586.309713][ C1] arch_stack_walk+0x94/0xf0 [ 586.314309][ C1] ? kasan_save_stack+0x30/0x50 [ 586.319153][ C1] ? __io_req_caches_free+0x1a6/0x220 [ 586.324526][ C1] stack_trace_save+0x8e/0xc0 [ 586.329197][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 586.334563][ C1] ? __lock_acquire+0x4a5/0x2630 [ 586.339498][ C1] ? kasan_save_stack+0x3f/0x50 [ 586.344338][ C1] ? kasan_save_stack+0x30/0x50 [ 586.349177][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 586.354548][ C1] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 586.360615][ C1] kasan_save_stack+0x30/0x50 [ 586.365289][ C1] ? kasan_save_stack+0x30/0x50 [ 586.370167][ C1] kasan_save_track+0x14/0x30 [ 586.374836][ C1] __kasan_kmalloc+0xaa/0xb0 [ 586.379425][ C1] kmem_cache_free+0x41e/0x6c0 [ 586.384188][ C1] ? __io_req_caches_free+0x43/0x220 [ 586.389484][ C1] __io_req_caches_free+0x1a6/0x220 [ 586.394701][ C1] io_req_caches_free+0x20/0x40 [ 586.399553][ C1] io_ring_exit_work+0x418/0xd40 [ 586.404491][ C1] ? __pfx_io_ring_exit_work+0x10/0x10 [ 586.409961][ C1] ? rcu_is_watching+0x12/0xc0 [ 586.414730][ C1] process_one_work+0xa0e/0x1980 [ 586.419677][ C1] ? __pfx_process_one_work+0x10/0x10 [ 586.425053][ C1] ? __pfx_io_ring_exit_work+0x10/0x10 [ 586.430515][ C1] worker_thread+0x5ef/0xe50 [ 586.435108][ C1] ? __pfx_worker_thread+0x10/0x10 [ 586.440216][ C1] ? kthread+0x13a/0x450 [ 586.444453][ C1] ? __pfx_worker_thread+0x10/0x10 [ 586.449556][ C1] kthread+0x370/0x450 [ 586.453619][ C1] ? __pfx_kthread+0x10/0x10 [ 586.458206][ C1] ret_from_fork+0x72b/0xd50 [ 586.462796][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 586.467902][ C1] ? __switch_to+0x800/0x1100 [ 586.472580][ C1] ? __pfx_kthread+0x10/0x10 [ 586.477167][ C1] ret_from_fork_asm+0x1a/0x30 [ 586.481954][ C1] [ 586.484982][ C1] task:kworker/u8:6 state:R running task stack:21920 pid:635 tgid:635 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 586.498557][ C1] Workqueue: krds_cp_wq#3/1 rds_connect_worker [ 586.504725][ C1] Call Trace: [ 586.508017][ C1] [ 586.510942][ C1] __schedule+0x1295/0x67a0 [ 586.515446][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 586.520389][ C1] ? arch_stack_walk+0x94/0xf0 [ 586.525161][ C1] ? __pfx___schedule+0x10/0x10 [ 586.530012][ C1] ? mark_held_locks+0x40/0x70 [ 586.534783][ C1] preempt_schedule_irq+0x50/0x90 [ 586.539809][ C1] irqentry_exit+0x205/0x970 [ 586.544404][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 586.550378][ C1] RIP: 0010:lock_acquire+0x5e/0x370 [ 586.555577][ C1] Code: 05 7b 24 25 12 83 f8 07 0f 87 d9 02 00 00 48 0f a3 05 86 89 f2 0e 0f 82 a4 02 00 00 8b 35 0e bd f2 0e 85 f6 0f 85 bf 00 00 00 <48> 8b 44 24 30 65 48 2b 05 1d 24 25 12 0f 85 ed 02 00 00 48 83 c4 [ 586.575206][ C1] RSP: 0018:ffffc90003b2f4b8 EFLAGS: 00000206 [ 586.581272][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000004 [ 586.589234][ C1] RDX: 0000000000000000 RSI: ffffffff8dee9983 RDI: ffffffff8c1c4480 [ 586.597198][ C1] RBP: ffffffff8e7e5620 R08: 000000008e9695aa R09: 0000000000000007 [ 586.605162][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 586.613144][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 586.621123][ C1] ? unwind_next_frame+0x3be/0x2090 [ 586.626347][ C1] ? unwind_next_frame+0x3be/0x2090 [ 586.631551][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 586.637705][ C1] unwind_next_frame+0xd1/0x2090 [ 586.642644][ C1] ? unwind_next_frame+0xbd/0x2090 [ 586.647756][ C1] ? rds_tcp_conn_path_connect+0x621/0xaa0 [ 586.653576][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 586.659727][ C1] arch_stack_walk+0x94/0xf0 [ 586.664325][ C1] ? rds_tcp_conn_path_connect+0x621/0xaa0 [ 586.670138][ C1] stack_trace_save+0x8e/0xc0 [ 586.674809][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 586.680180][ C1] ? __lock_acquire+0x4a5/0x2630 [ 586.685116][ C1] ? __lock_acquire+0x4a5/0x2630 [ 586.690060][ C1] save_stack+0x162/0x1e0 [ 586.694405][ C1] ? __pfx_save_stack+0x10/0x10 [ 586.699261][ C1] ? __free_frozen_pages+0x794/0x10a0 [ 586.704637][ C1] ? qlist_free_all+0x47/0xf0 [ 586.709315][ C1] ? kasan_quarantine_reduce+0x1a0/0x1f0 [ 586.714948][ C1] ? __kasan_slab_alloc+0x69/0x90 [ 586.719968][ C1] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 586.725602][ C1] ? security_inode_alloc+0x3b/0x2c0 [ 586.730891][ C1] ? inode_init_always_gfp+0xc77/0xfb0 [ 586.736375][ C1] ? alloc_inode+0x8e/0x250 [ 586.740868][ C1] ? sock_alloc+0x44/0x280 [ 586.745283][ C1] ? __sock_create+0xc2/0x860 [ 586.749955][ C1] ? rds_tcp_conn_path_connect+0x621/0xaa0 [ 586.755793][ C1] ? page_ext_put+0x3e/0xd0 [ 586.760298][ C1] __reset_page_owner+0x84/0x190 [ 586.765233][ C1] __free_frozen_pages+0x794/0x10a0 [ 586.770441][ C1] qlist_free_all+0x47/0xf0 [ 586.774952][ C1] kasan_quarantine_reduce+0x1a0/0x1f0 [ 586.780414][ C1] __kasan_slab_alloc+0x69/0x90 [ 586.785259][ C1] kmem_cache_alloc_noprof+0x241/0x6e0 [ 586.790719][ C1] ? security_inode_alloc+0x3b/0x2c0 [ 586.796006][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 586.801381][ C1] security_inode_alloc+0x3b/0x2c0 [ 586.806495][ C1] inode_init_always_gfp+0xc77/0xfb0 [ 586.811783][ C1] alloc_inode+0x8e/0x250 [ 586.816109][ C1] sock_alloc+0x44/0x280 [ 586.820350][ C1] ? security_socket_create+0x7f/0x250 [ 586.825807][ C1] __sock_create+0xc2/0x860 [ 586.830313][ C1] rds_tcp_conn_path_connect+0x621/0xaa0 [ 586.835951][ C1] ? __lock_acquire+0x4a5/0x2630 [ 586.840891][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 586.847045][ C1] ? try_to_wake_up+0x15f/0x1900 [ 586.852003][ C1] rds_connect_worker+0x1b4/0x2d0 [ 586.857030][ C1] process_one_work+0xa0e/0x1980 [ 586.861978][ C1] ? __pfx_process_one_work+0x10/0x10 [ 586.867356][ C1] ? __pfx_rds_connect_worker+0x10/0x10 [ 586.872905][ C1] worker_thread+0x5ef/0xe50 [ 586.877506][ C1] ? __pfx_worker_thread+0x10/0x10 [ 586.882629][ C1] ? kthread+0x13a/0x450 [ 586.886883][ C1] ? __pfx_worker_thread+0x10/0x10 [ 586.892004][ C1] kthread+0x370/0x450 [ 586.896078][ C1] ? __pfx_kthread+0x10/0x10 [ 586.900671][ C1] ret_from_fork+0x72b/0xd50 [ 586.905274][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 586.910387][ C1] ? __switch_to+0x800/0x1100 [ 586.915066][ C1] ? __pfx_kthread+0x10/0x10 [ 586.919669][ C1] ret_from_fork_asm+0x1a/0x30 [ 586.924446][ C1] [ 586.927456][ C1] task:kworker/u8:8 state:R running task stack:24136 pid:1349 tgid:1349 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 586.941038][ C1] Workqueue: krds_cp_wq#3/2 rds_connect_worker [ 586.947205][ C1] Call Trace: [ 586.950477][ C1] [ 586.953403][ C1] __schedule+0x1295/0x67a0 [ 586.957929][ C1] ? __pfx___schedule+0x10/0x10 [ 586.962792][ C1] ? mark_held_locks+0x40/0x70 [ 586.967566][ C1] preempt_schedule_irq+0x50/0x90 [ 586.972593][ C1] irqentry_exit+0x205/0x970 [ 586.977188][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 586.983163][ C1] RIP: 0010:__orc_find+0xae/0xf0 [ 586.988102][ C1] Code: 63 13 48 01 da 49 39 d5 73 af 4c 8d 63 fc 49 39 ec 73 b2 4d 29 f7 49 c1 ff 02 4b 8d 14 7f 48 8d 04 50 48 83 c4 08 5b 5d 41 5c <41> 5d 41 5e 41 5f e9 17 b6 d4 09 48 83 c4 08 31 c0 5b 5d 41 5c 41 [ 587.007730][ C1] RSP: 0018:ffffc90005be7440 EFLAGS: 00000286 [ 587.013796][ C1] RAX: ffffffff921dbb3a RBX: 0000000000000001 RCX: dffffc0000000000 [ 587.021763][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff915f3568 [ 587.029729][ C1] RBP: ffffc90005be7518 R08: ffffffff921dbb40 R09: 0000000000000007 [ 587.037697][ C1] R10: 0000000000000200 R11: 000000000009d4bf R12: ffffc90005be7520 [ 587.045751][ C1] R13: ffffffff8ad4bf4f R14: ffffffff915f3568 R15: 0000000000000000 [ 587.053720][ C1] ? rds_tcp_tune+0x29f/0x920 [ 587.058413][ C1] ? rds_tcp_tune+0x29f/0x920 [ 587.063087][ C1] unwind_next_frame+0x2ec/0x2090 [ 587.068113][ C1] ? rds_tcp_tune+0x2a0/0x920 [ 587.072791][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 587.078946][ C1] arch_stack_walk+0x94/0xf0 [ 587.083553][ C1] ? rds_tcp_tune+0x2a0/0x920 [ 587.088327][ C1] stack_trace_save+0x8e/0xc0 [ 587.093006][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 587.098372][ C1] ? __lock_acquire+0x4a5/0x2630 [ 587.103305][ C1] ? __lock_acquire+0x4a5/0x2630 [ 587.108240][ C1] save_stack+0x162/0x1e0 [ 587.112566][ C1] ? __pfx_save_stack+0x10/0x10 [ 587.117409][ C1] ? __free_frozen_pages+0x794/0x10a0 [ 587.122782][ C1] ? qlist_free_all+0x47/0xf0 [ 587.127464][ C1] ? kasan_quarantine_reduce+0x1a0/0x1f0 [ 587.133097][ C1] ? __kasan_slab_alloc+0x69/0x90 [ 587.138119][ C1] ? __kmalloc_cache_noprof+0x243/0x6f0 [ 587.143660][ C1] ? ref_tracker_alloc+0x190/0x590 [ 587.148772][ C1] ? sk_net_refcnt_upgrade+0x1b4/0x360 [ 587.154228][ C1] ? rds_tcp_tune+0x2a0/0x920 [ 587.158907][ C1] ? page_ext_put+0x3e/0xd0 [ 587.163409][ C1] __reset_page_owner+0x84/0x190 [ 587.168365][ C1] __free_frozen_pages+0x794/0x10a0 [ 587.173563][ C1] ? __free_slab+0xd0/0x220 [ 587.178071][ C1] qlist_free_all+0x47/0xf0 [ 587.182576][ C1] kasan_quarantine_reduce+0x1a0/0x1f0 [ 587.188041][ C1] __kasan_slab_alloc+0x69/0x90 [ 587.192888][ C1] __kmalloc_cache_noprof+0x243/0x6f0 [ 587.198257][ C1] ? ref_tracker_alloc+0x190/0x590 [ 587.203373][ C1] ref_tracker_alloc+0x190/0x590 [ 587.208313][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 587.213802][ C1] ? rds_tcp_tune+0xcd/0x920 [ 587.218399][ C1] sk_net_refcnt_upgrade+0x1b4/0x360 [ 587.223710][ C1] rds_tcp_tune+0x2a0/0x920 [ 587.228214][ C1] ? __pfx_rds_tcp_tune+0x10/0x10 [ 587.233253][ C1] ? __sock_create+0xa3/0x860 [ 587.237932][ C1] rds_tcp_conn_path_connect+0x338/0xaa0 [ 587.243571][ C1] ? __lock_acquire+0x4a5/0x2630 [ 587.248507][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 587.254657][ C1] ? try_to_wake_up+0x15f/0x1900 [ 587.259610][ C1] rds_connect_worker+0x1b4/0x2d0 [ 587.264651][ C1] process_one_work+0xa0e/0x1980 [ 587.269599][ C1] ? __pfx_process_one_work+0x10/0x10 [ 587.274977][ C1] ? __pfx_rds_connect_worker+0x10/0x10 [ 587.280521][ C1] worker_thread+0x5ef/0xe50 [ 587.285119][ C1] ? kthread+0x13a/0x450 [ 587.289355][ C1] ? __pfx_worker_thread+0x10/0x10 [ 587.294460][ C1] kthread+0x370/0x450 [ 587.298526][ C1] ? __pfx_kthread+0x10/0x10 [ 587.303114][ C1] ret_from_fork+0x72b/0xd50 [ 587.307705][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 587.312821][ C1] ? __switch_to+0x800/0x1100 [ 587.317499][ C1] ? __pfx_kthread+0x10/0x10 [ 587.322087][ C1] ret_from_fork_asm+0x1a/0x30 [ 587.326866][ C1] [ 587.329884][ C1] task:syz.3.993 state:R running task stack:25448 pid:9663 tgid:9661 ppid:5620 task_flags:0x400140 flags:0x00080002 [ 587.343375][ C1] Call Trace: [ 587.346647][ C1] [ 587.349571][ C1] __schedule+0x1295/0x67a0 [ 587.354074][ C1] ? rcu_is_watching+0x12/0xc0 [ 587.358873][ C1] ? __pfx___schedule+0x10/0x10 [ 587.363724][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 587.369098][ C1] preempt_schedule_common+0x42/0xc0 [ 587.374381][ C1] preempt_schedule_thunk+0x16/0x30 [ 587.379588][ C1] _raw_spin_unlock_irqrestore+0x61/0x80 [ 587.385217][ C1] folios_put_refs+0x4df/0xa90 [ 587.390023][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 587.395315][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 587.401649][ C1] shmem_undo_range+0x5e5/0x1570 [ 587.406590][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 587.411983][ C1] ? __pfx_unmap_mapping_range_tree+0x10/0x10 [ 587.418063][ C1] ? __pfx_unmap_mapping_pages+0x10/0x10 [ 587.423690][ C1] ? shmem_fallocate+0xb18/0x1060 [ 587.428719][ C1] shmem_fallocate+0xb58/0x1060 [ 587.433566][ C1] ? irqentry_exit+0x24d/0x970 [ 587.438338][ C1] ? __pfx_shmem_fallocate+0x10/0x10 [ 587.443640][ C1] ? irqentry_exit+0x24d/0x970 [ 587.448429][ C1] ? __pfx_shmem_fallocate+0x10/0x10 [ 587.453707][ C1] vfs_fallocate+0x576/0x10d0 [ 587.458393][ C1] ? __pfx_vfs_fallocate+0x10/0x10 [ 587.463500][ C1] ? madvise_vma_behavior+0x1258/0x2240 [ 587.469044][ C1] ? madvise_vma_behavior+0x1258/0x2240 [ 587.474601][ C1] madvise_vma_behavior+0x909/0x2240 [ 587.479887][ C1] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 587.485608][ C1] ? irqentry_exit+0x24d/0x970 [ 587.490381][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 587.495588][ C1] ? irqentry_exit+0x24d/0x970 [ 587.500357][ C1] ? trace_reschedule_exit.constprop.0+0x6b/0x220 [ 587.506782][ C1] ? madvise_walk_vmas+0x142/0xa90 [ 587.511898][ C1] madvise_walk_vmas+0x2fe/0xa90 [ 587.516841][ C1] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 587.522308][ C1] madvise_do_behavior+0x1ea/0x510 [ 587.527416][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 587.532617][ C1] ? __pfx_madvise_do_behavior+0x10/0x10 [ 587.538254][ C1] ? down_read+0x13b/0x450 [ 587.542683][ C1] do_madvise+0x195/0x240 [ 587.547029][ C1] ? __pfx_do_madvise+0x10/0x10 [ 587.551874][ C1] ? __schedule+0x12a7/0x67a0 [ 587.556545][ C1] ? __pfx___schedule+0x10/0x10 [ 587.561413][ C1] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 587.567576][ C1] __x64_sys_madvise+0xa9/0x110 [ 587.572469][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 587.577689][ C1] do_syscall_64+0x115/0x870 [ 587.582294][ C1] ? clear_bhb_loop+0x40/0x90 [ 587.586974][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.592866][ C1] RIP: 0033:0x7ffa0819ce59 [ 587.597308][ C1] RSP: 002b:00007ffa0909c028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 587.605718][ C1] RAX: ffffffffffffffda RBX: 00007ffa08416090 RCX: 00007ffa0819ce59 [ 587.613685][ C1] RDX: 0000000000000009 RSI: 0000000000600002 RDI: 0000200000000000 [ 587.621652][ C1] RBP: 00007ffa08232d6f R08: 0000000000000000 R09: 0000000000000000 [ 587.629618][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.637588][ C1] R13: 00007ffa08416128 R14: 00007ffa08416090 R15: 00007fff5ccc1f58 [ 587.645570][ C1] [ 587.648589][ C1] task:syz.2.995 state:R running task stack:27432 pid:9669 tgid:9668 ppid:5625 task_flags:0x40044c flags:0x00080002 [ 587.662086][ C1] Call Trace: [ 587.665371][ C1] [ 587.668306][ C1] __schedule+0x1295/0x67a0 [ 587.672819][ C1] ? irqentry_exit+0x24d/0x970 [ 587.677604][ C1] ? mark_held_locks+0x40/0x70 [ 587.682390][ C1] ? __pfx___schedule+0x10/0x10 [ 587.687249][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 587.692627][ C1] preempt_schedule_common+0x42/0xc0 [ 587.697914][ C1] preempt_schedule_thunk+0x16/0x30 [ 587.703120][ C1] _raw_spin_unlock+0x3e/0x50 [ 587.707799][ C1] __zap_vma_range+0x16f7/0x4a30 [ 587.712757][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 587.718049][ C1] ? find_held_lock+0x2b/0x80 [ 587.722726][ C1] unmap_vmas+0x299/0x5f0 [ 587.727057][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 587.731907][ C1] ? mas_next_slot+0x10a3/0x1960 [ 587.736861][ C1] exit_mmap+0x1ef/0xa10 [ 587.741104][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 587.745863][ C1] ? rcu_is_watching+0x12/0xc0 [ 587.750634][ C1] ? uprobe_clear_state+0x5f/0x260 [ 587.755747][ C1] ? uprobe_clear_state+0x5f/0x260 [ 587.760875][ C1] ? __lock_acquire+0x4a5/0x2630 [ 587.765824][ C1] ? arch_uprobe_clear_state+0x107/0x150 [ 587.771468][ C1] __mmput+0x12a/0x410 [ 587.775542][ C1] mmput+0x67/0x80 [ 587.779263][ C1] do_exit+0x8b2/0x2af0 [ 587.783417][ C1] ? __pfx_do_exit+0x10/0x10 [ 587.788000][ C1] ? do_raw_spin_lock+0x128/0x260 [ 587.793025][ C1] ? find_held_lock+0x2b/0x80 [ 587.797693][ C1] ? get_signal+0x7e5/0x2210 [ 587.802289][ C1] do_group_exit+0xd5/0x2a0 [ 587.806794][ C1] get_signal+0x20ff/0x2210 [ 587.811298][ C1] ? __down_common+0x6b3/0x8a0 [ 587.816071][ C1] ? ieee80211_set_beacon_cntdwn+0x210/0x500 [ 587.822061][ C1] ? __pfx_get_signal+0x10/0x10 [ 587.826921][ C1] ? down_interruptible+0x66/0xa0 [ 587.831952][ C1] ? rcu_is_watching+0x12/0xc0 [ 587.836731][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 587.842279][ C1] ? down_interruptible+0x66/0xa0 [ 587.847319][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 587.853482][ C1] ? __pfx_raw_ioctl+0x10/0x10 [ 587.858247][ C1] ? rcu_is_watching+0x12/0xc0 [ 587.863014][ C1] exit_to_user_mode_loop+0x98/0x670 [ 587.868298][ C1] ? rcu_is_watching+0x12/0xc0 [ 587.873076][ C1] do_syscall_64+0x666/0x870 [ 587.877678][ C1] ? clear_bhb_loop+0x40/0x90 [ 587.882352][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.888239][ C1] RIP: 0033:0x7fe426f9caeb [ 587.892654][ C1] RSP: 002b:00007fe427f31f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 587.901064][ C1] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007fe426f9caeb [ 587.909041][ C1] RDX: 00007fe427f32fd0 RSI: 0000000080085502 RDI: 0000000000000003 [ 587.917026][ C1] RBP: 00007fe427f32fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 587.925004][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 587.932995][ C1] R13: 0000000800000000 R14: 0000000000000005 R15: 00007fe42705125f [ 587.940979][ C1] [ 587.943996][ C1] rcu: rcu_preempt kthread starved for 10172 jiffies! g43545 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 587.955188][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 587.965151][ C1] rcu: RCU grace-period kthread stack dump: [ 587.971031][ C1] task:rcu_preempt state:R running task stack:26584 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 587.984521][ C1] Call Trace: [ 587.987817][ C1] [ 587.990744][ C1] __schedule+0x1295/0x67a0 [ 587.995265][ C1] ? __pfx___schedule+0x10/0x10 [ 588.000113][ C1] ? find_held_lock+0x2b/0x80 [ 588.004788][ C1] ? schedule+0x2bf/0x390 [ 588.009121][ C1] schedule+0xdd/0x390 [ 588.013190][ C1] schedule_timeout+0x127/0x280 [ 588.018037][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 588.023409][ C1] ? __pfx_process_timeout+0x10/0x10 [ 588.028697][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 588.034527][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 588.040011][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 588.044787][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 588.050082][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 588.055031][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 588.060243][ C1] rcu_gp_kthread+0x179/0x230 [ 588.064921][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 588.070115][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 588.075924][ C1] ? __kthread_parkme+0x18c/0x230 [ 588.080963][ C1] ? kthread+0x13a/0x450 [ 588.085202][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 588.090398][ C1] kthread+0x370/0x450 [ 588.094467][ C1] ? __pfx_kthread+0x10/0x10 [ 588.099056][ C1] ret_from_fork+0x72b/0xd50 [ 588.103648][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 588.108759][ C1] ? __switch_to+0x800/0x1100 [ 588.113434][ C1] ? __pfx_kthread+0x10/0x10 [ 588.118021][ C1] ret_from_fork_asm+0x1a/0x30 [ 588.122794][ C1] [ 588.125806][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 588.132126][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 588.142623][ C1] Tainted: [L]=SOFTLOCKUP [ 588.146940][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 588.156988][ C1] RIP: 0010:__orc_find+0x3d/0xf0 [ 588.161939][ C1] Code: 53 48 83 ec 08 85 d2 0f 84 99 00 00 00 49 89 fe 48 89 f0 49 39 fc 72 7b 48 b9 00 00 00 00 00 fc ff df 49 89 ff 48 89 fd eb 0c <48> 8d 6b 04 49 89 df 49 39 ec 72 4e 4c 89 e2 48 29 ea 48 89 d6 48 [ 588.181548][ C1] RSP: 0018:ffffc90000a07fa8 EFLAGS: 00000206 [ 588.187618][ C1] RAX: ffffffff9229f410 RBX: ffffffff91675b74 RCX: dffffc0000000000 [ 588.195587][ C1] RDX: ffffffff8b8923e1 RSI: 0000000000000000 RDI: ffffffff91675b4c [ 588.203556][ C1] RBP: ffffffff91675b70 R08: ffffffff9229f458 R09: 0000000000000007 [ 588.211538][ C1] R10: 0000000000000200 R11: 00000000000a8923 R12: ffffffff91675b78 [ 588.219512][ C1] R13: ffffffff8b8923f2 R14: ffffffff91675b4c R15: ffffffff91675b6c [ 588.227486][ C1] FS: 0000000000000000(0000) GS:ffff888124486000(0000) knlGS:0000000000000000 [ 588.236413][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 588.242998][ C1] CR2: 000055557d20f4e8 CR3: 0000000035837000 CR4: 00000000003526f0 [ 588.250974][ C1] Call Trace: [ 588.254250][ C1] [ 588.257091][ C1] ? sysvec_apic_timer_interrupt+0xa2/0xc0 [ 588.262901][ C1] unwind_next_frame+0x2ec/0x2090 [ 588.267927][ C1] ? sysvec_apic_timer_interrupt+0xa3/0xc0 [ 588.273736][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 588.279890][ C1] arch_stack_walk+0x94/0xf0 [ 588.284485][ C1] ? sysvec_apic_timer_interrupt+0xa3/0xc0 [ 588.290297][ C1] stack_trace_save+0x8e/0xc0 [ 588.294971][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 588.300338][ C1] ? stack_trace_save+0x8e/0xc0 [ 588.305188][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 588.310552][ C1] ? common_startup_64+0x13e/0x148 [ 588.315667][ C1] ? stack_depot_save_flags+0x27/0x9d0 [ 588.321128][ C1] kasan_save_stack+0x30/0x50 [ 588.325800][ C1] ? kasan_save_stack+0x30/0x50 [ 588.330644][ C1] ? kasan_save_track+0x14/0x30 [ 588.335490][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 588.340508][ C1] ? kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 588.346584][ C1] ? kmalloc_reserve+0x148/0x350 [ 588.351520][ C1] ? __alloc_skb+0x185/0x710 [ 588.356109][ C1] ? synproxy_send_client_synack_ipv6+0x19f/0x7a0 [ 588.362521][ C1] ? nft_synproxy_do_eval+0x938/0xd50 [ 588.367896][ C1] ? nft_do_chain+0x2e5/0x1990 [ 588.372666][ C1] ? nft_do_chain_inet+0xf3/0x400 [ 588.377693][ C1] ? nf_hook_slow+0xbf/0x220 [ 588.382281][ C1] ? nf_hook.constprop.0+0x2a6/0x750 [ 588.387569][ C1] ? ip6_input+0xe0/0x2f0 [ 588.391898][ C1] ? ipv6_rcv+0x263/0x3d0 [ 588.396232][ C1] ? __netif_receive_skb_one_core+0x12d/0x1e0 [ 588.402301][ C1] ? __netif_receive_skb+0x1f/0x120 [ 588.407496][ C1] ? process_backlog+0x37a/0x1580 [ 588.412520][ C1] ? __napi_poll.constprop.0+0xaf/0x450 [ 588.418064][ C1] ? net_rx_action+0xa40/0xf20 [ 588.422833][ C1] ? handle_softirqs+0x1ea/0xa00 [ 588.427785][ C1] ? __irq_exit_rcu+0x162/0x210 [ 588.432635][ C1] ? irq_exit_rcu+0x9/0x30 [ 588.437051][ C1] ? sysvec_apic_timer_interrupt+0xa3/0xc0 [ 588.442885][ C1] kasan_save_track+0x14/0x30 [ 588.447555][ C1] __kasan_slab_alloc+0x89/0x90 [ 588.452402][ C1] kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 588.458296][ C1] ? kmalloc_reserve+0x148/0x350 [ 588.463235][ C1] ? __kasan_slab_alloc+0x60/0x90 [ 588.468349][ C1] kmalloc_reserve+0x148/0x350 [ 588.473121][ C1] __alloc_skb+0x185/0x710 [ 588.477535][ C1] ? __alloc_skb+0x5b7/0x710 [ 588.482124][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 588.487064][ C1] ? rcu_is_watching+0x12/0xc0 [ 588.491829][ C1] synproxy_send_client_synack_ipv6+0x19f/0x7a0 [ 588.498078][ C1] ? debug_mutex_add_waiter+0x90/0x220 [ 588.503541][ C1] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 588.510307][ C1] ? net_generic+0xea/0x2a0 [ 588.514825][ C1] nft_synproxy_do_eval+0x938/0xd50 [ 588.520034][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 588.525759][ C1] ? find_held_lock+0x2b/0x80 [ 588.530460][ C1] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 588.535922][ C1] nft_do_chain+0x2e5/0x1990 [ 588.540512][ C1] ? ip6t_do_table+0xbed/0x1c90 [ 588.545796][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 588.551088][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 588.556118][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 588.562026][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 588.567234][ C1] nft_do_chain_inet+0xf3/0x400 [ 588.572085][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 588.577551][ C1] ? nf_nat_ipv6_local_in+0x4b5/0x6c0 [ 588.582925][ C1] ? lock_acquire+0x1b1/0x370 [ 588.587623][ C1] nf_hook_slow+0xbf/0x220 [ 588.592042][ C1] nf_hook.constprop.0+0x2a6/0x750 [ 588.597156][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 588.602531][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 588.608176][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 588.613583][ C1] ip6_input+0xe0/0x2f0 [ 588.617741][ C1] ? __pfx_ip6_input+0x10/0x10 [ 588.622508][ C1] ipv6_rcv+0x263/0x3d0 [ 588.626665][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 588.631338][ C1] __netif_receive_skb_one_core+0x12d/0x1e0 [ 588.637231][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 588.643647][ C1] ? lock_acquire+0x1b1/0x370 [ 588.648323][ C1] ? process_backlog+0x32a/0x1580 [ 588.653373][ C1] ? process_backlog+0x32a/0x1580 [ 588.658393][ C1] __netif_receive_skb+0x1f/0x120 [ 588.663423][ C1] process_backlog+0x37a/0x1580 [ 588.668279][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 588.673653][ C1] net_rx_action+0xa40/0xf20 [ 588.678251][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 588.683363][ C1] ? hrtimer_bases_first+0x120/0x210 [ 588.688673][ C1] ? __pfx_clockevents_program_event+0x10/0x10 [ 588.694864][ C1] ? rcu_is_watching+0x12/0xc0 [ 588.699641][ C1] handle_softirqs+0x1ea/0xa00 [ 588.704410][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 588.709699][ C1] ? _raw_spin_unlock+0x28/0x50 [ 588.714558][ C1] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 588.720197][ C1] __irq_exit_rcu+0x162/0x210 [ 588.724883][ C1] irq_exit_rcu+0x9/0x30 [ 588.729129][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 588.734765][ C1] [ 588.737689][ C1] [ 588.740613][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 588.746592][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 588.752255][ C1] Code: f5 92 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 51 22 00 fb f4 fc 43 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 588.771862][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246 [ 588.777942][ C1] RAX: 000000000476bb21 RBX: ffff88801e2b2540 RCX: ffffffff8b894285 [ 588.785913][ C1] RDX: 0000000000000000 RSI: ffffffff8df0eee6 RDI: ffffffff8c1c4480 [ 588.793893][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a67b5 [ 588.801864][ C1] R10: ffff8880b8533dab R11: 0000000000000000 R12: 0000000000000001 [ 588.809835][ C1] R13: ffffed1003c564a8 R14: 0000000000000001 R15: ffffffff90d70550 [ 588.817814][ C1] ? ct_kernel_exit+0x125/0x180 [ 588.822681][ C1] default_idle+0x9/0x10 [ 588.826933][ C1] default_idle_call+0x6c/0xb0 [ 588.831697][ C1] do_idle+0x464/0x590 [ 588.835780][ C1] ? __pfx_do_idle+0x10/0x10 [ 588.840380][ C1] ? finish_task_switch.isra.0+0x152/0x1010 [ 588.846289][ C1] cpu_startup_entry+0x4f/0x60 [ 588.851049][ C1] start_secondary+0x21d/0x2d0 [ 588.855809][ C1] ? __pfx_start_secondary+0x10/0x10 [ 588.861096][ C1] common_startup_64+0x13e/0x148 [ 588.866053][ C1]