last executing test programs: 2m32.393580969s ago: executing program 1 (id=664): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x80041) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x810c9365, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000280)=""/219) 2m32.326201453s ago: executing program 1 (id=665): r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000002, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r5 = accept$alg(r1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000140)={'veth1_to_bond\x00', {0x2, 0x4e22, @multicast1}}) fchdir(r1) mkdirat(r1, &(0x7f0000000340)='./file1\x00', 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}]}) 2m32.047382973s ago: executing program 1 (id=668): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000001fc0)={'team0\x00', &(0x7f0000001f80)=@ethtool_rxfh_indir={0x1}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r6, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000100000000000000000000000000000000005f0fd5d06c9dec998456b38b5ddf86f11cdd782a610d8032456a9d64fd9e9c6f16add5b6dce474b1c0771b1fb86f3779bcb2fcd885f3e5c0a4cc7290849ff5d0c5b27797e29c9838e0f5d967ca7e861ff7e37a29596c2924857eeaba84"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095f8ff0000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) mremap(&(0x7f0000fc4000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f0000fc5000/0x1000)=nil) 2m31.101217271s ago: executing program 1 (id=672): r0 = socket(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x0, 0x30, 0x8, {0x8, 0x22, "59a1b95388e8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$igmp(0x2, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000000)={@id={0x2, 0x0, @b}}) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@multicast, @local, @void, {@ipv4={0x500, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x29, 0x0, 0x64, 0x0, 0x1, 0x11, 0x6, @local, @multicast1}}}}}}, 0x0) 2m27.358546801s ago: executing program 1 (id=684): socket$unix(0x1, 0x5, 0x0) symlink(&(0x7f0000000280)='.\x02\x00', &(0x7f00000002c0)='.\x02\x00') socket$pppl2tp(0x18, 0x1, 0x1) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600}, 0x94) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000075c0)={@local, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd432, 0x40, 0x409, 0x0, 0xa, 0x1}) unshare(0x62020600) r3 = fsopen(0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x1400000c}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d65746100000000000e08000340000000040916ba010d654e4700010073797a30000000000900020073797a3200000000140000001100010000000000000000000100000a"], 0x94}}, 0x0) close(r4) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x17f) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 2m24.252949362s ago: executing program 1 (id=692): mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='vfat\x00', 0x208000, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) mlockall(0x2) r3 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) shmat(r3, &(0x7f0000776000/0x4000)=nil, 0x5000) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0xd2e0b81dc576e3cd}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x8, r7, 0x0, 0x7, 0x9a, &(0x7f0000000200)="f6d68dea478f3c94c2dad9ea064d9260c8901bea3995d2e464fcb68abf73354c4765eaec694a0a0fcdd8ef4051be294bd6b4be284f90c85d413a5f77ee07c931143e9d839c5dcba75205b8ba101a9a2fed17df8c3fd253beadf88f243032b5bca51d127a17bd53f792b99df322db24a35fb42dea6b9ee9f7eba573b962a128785db03cae3539260fe0f8ea12f57655c7e768e7c9bdcffe300432"}) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r8, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r9 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0x40045532, &(0x7f0000000040)) r10 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r11 = syz_open_dev$rtc(&(0x7f0000000380), 0x7f, 0x81) ioctl$RTC_ALM_READ(r11, 0x80247008, &(0x7f00000003c0)) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r10, 0xc0884123, &(0x7f0000000280)={0x0, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4ac10b67b1b99eeeaa18e15a525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f2674185", {0x800000000000004, 0x50000000000}}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r10, 0xc0884113, &(0x7f0000000080)={0x1, 0x0, 0xffff5f11, 0xfffd, 0xfffffffffffffffb, 0xb, 0xfffffffffffffffa, 0x1fe, 0x4a, 0x28, 0x4, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r8, 0x8010500c, &(0x7f0000000340)) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r2, 0x0, 0x1004000, 0x0, 0x0}) 2m9.163415176s ago: executing program 32 (id=692): mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='vfat\x00', 0x208000, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) mlockall(0x2) r3 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) shmat(r3, &(0x7f0000776000/0x4000)=nil, 0x5000) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0xd2e0b81dc576e3cd}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x8, r7, 0x0, 0x7, 0x9a, &(0x7f0000000200)="f6d68dea478f3c94c2dad9ea064d9260c8901bea3995d2e464fcb68abf73354c4765eaec694a0a0fcdd8ef4051be294bd6b4be284f90c85d413a5f77ee07c931143e9d839c5dcba75205b8ba101a9a2fed17df8c3fd253beadf88f243032b5bca51d127a17bd53f792b99df322db24a35fb42dea6b9ee9f7eba573b962a128785db03cae3539260fe0f8ea12f57655c7e768e7c9bdcffe300432"}) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r8, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r9 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0x40045532, &(0x7f0000000040)) r10 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r11 = syz_open_dev$rtc(&(0x7f0000000380), 0x7f, 0x81) ioctl$RTC_ALM_READ(r11, 0x80247008, &(0x7f00000003c0)) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r10, 0xc0884123, &(0x7f0000000280)={0x0, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4ac10b67b1b99eeeaa18e15a525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f2674185", {0x800000000000004, 0x50000000000}}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r10, 0xc0884113, &(0x7f0000000080)={0x1, 0x0, 0xffff5f11, 0xfffd, 0xfffffffffffffffb, 0xb, 0xfffffffffffffffa, 0x1fe, 0x4a, 0x28, 0x4, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r8, 0x8010500c, &(0x7f0000000340)) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r2, 0x0, 0x1004000, 0x0, 0x0}) 12.101448219s ago: executing program 4 (id=1097): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x13, 0x0, &(0x7f0000000580)="09000000ffffffffb79e08da88a8a5a186dd3c", 0x0, 0x1000fe2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 11.93350586s ago: executing program 4 (id=1098): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f00000030c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$usbfs(0x0, 0x201, 0x440) r1 = syz_open_dev$mouse(&(0x7f0000000d00), 0x0, 0x2042) mq_open(&(0x7f0000000340)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bL\x10\x00\x00\x00\x04\x00\x00\x00\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdc\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x1d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00'/336, 0x40, 0xa4, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd604dd30800200601fe800000000000000000000000000023fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80020000907800000c02"], 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c010000100001000000000000000000fc0200000000000000000000000000000a0101010000000000000000000000000004ecdf0000000300", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000640100fe00000000000000000000000000000000000000000000000000000000010000002000000000000000000000000000000000000000fcffffffff00000000000000000000000001000e5300000000000000800000000000000000000000000000000000000000020000000000000000000000020000734c000000000000004c001400736861312d6e656f6e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000008000"/244], 0x13c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000100)="f257a8ea7b4da7384ae8095c0106", 0xe, 0x8040, &(0x7f0000000200)={0x11, 0x17, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000180)={r4, 0x1, 0x6, @local}, 0x10) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = io_uring_setup(0x76fc, &(0x7f0000000340)={0x0, 0x3c3b, 0x1000, 0x5, 0x2d2}) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000140)=0x3) r7 = io_uring_setup(0x7627, &(0x7f00000002c0)={0x0, 0x653f, 0x10000, 0x1, 0x1c9, 0x0, r6}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x10, 0x4, 0xfffffffc, 0x3, 0x10a2, r1, 0xcaef, '\x00', r4, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x50) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001900010000000000fbdbff250a010900080012800400f88008001700", @ANYRES32, @ANYBLOB="82fa13082727ff09ff62da3eaa93d63e40c4763572ad8ce519c121e8f47cea68d068a83b8f0f8c072f71d67672cf40b763e24aaa64633ec91cebae87722bfba89257aed0559b81e64f9c281d006af0dfb5b98203a68fb2e3b4825d08826a744810bb38584d75b89228c97f665a2af9de79c4dce2e386"], 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0xffff, r8}, 0x38) io_uring_register$IORING_REGISTER_FILES(r7, 0x1e, &(0x7f0000000000)=[r6], 0x1) 11.887585342s ago: executing program 5 (id=1099): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023893) 10.392079469s ago: executing program 4 (id=1101): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="14007c00"/20], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000040)=0x45e) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0xd83, &(0x7f00000019c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x1e, 0x88}, 0x0) mkdir(0x0, 0xb4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r4, 0x1, 0x45, 0x0, &(0x7f0000000900)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x6000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 10.31547255s ago: executing program 5 (id=1102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000400)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 9.67555474s ago: executing program 0 (id=1104): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') syz_usb_connect(0x3, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002a69bbc104f959941760f010203010902240001040000000904330202020c070009050102100000fa000905820240"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf251f000000080001004e00000008000380", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x24008004}, 0x1400c004) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x3}, 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000052c0)=[{&(0x7f0000000200)=@in={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000003bc0)=[{&(0x7f0000000240)="c41a", 0x2}], 0x1, &(0x7f0000003c00)=ANY=[@ANYBLOB="1000"], 0x18, 0x40000}], 0x1, 0x4000000) sendmsg$key(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x14, 0x6, 0xf, 0x18, 0x0, 0x70bd29, 0x25dfdbfd, [@sadb_x_nat_t_port={0x1, 0xa4c354f1ece6b143, 0x4e22}, @sadb_x_sec_ctx={0xe, 0x18, 0x9, 0x0, 0x65, "e09924ba96dafdb50ae425369f245ba31edd23b0957617f3234bc1713b861fa64395ef75e59790ca90b6718f11cc093f97bec92e0def133241efdbe7dc0f9fbaf97820a660f3ab0493bd6b9c43afa3b2e85336e9cb5ed555d3bffe2e36a4bfc1d8a699e51b"}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e21, @loopback}}, @sadb_ident={0x2, 0xb, 0x2, 0x0, 0x9}]}, 0x21}}, 0x20000040) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, &(0x7f0000000380)={0x0, 0x0, 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) connect(r5, &(0x7f0000000080)=@can, 0x80) setitimer(0x1, &(0x7f0000005a40)={{0x5, 0x7}, {0xfffffffffffffff5, 0x2}}, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(r6) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="34de48f663194600"/18, @ANYRES32, @ANYBLOB="000000000000000014001a80100002800c0001800800210000000000"], 0x34}}, 0x0) r7 = getpid() syz_open_procfs(r7, &(0x7f0000000100)='status\x00') r8 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee00) tkill(r8, 0x12) 9.238188463s ago: executing program 5 (id=1107): llistxattr(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea800000000001090224000100000000090400000103000000092100000001220700090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000800000064150800392cdaab4a732b38292683b4845ba25169690aca6f49b232dfb793d83f6ec393cfa10251bce960e8134eace113e54d6352ee2f2e6448fed103f0220e50ef39d9d756b32c547756a927720d05e0df934aff6d8bca60f71c"], 0x0, 0x0, 0x0, 0x0}, 0x0) 8.046528364s ago: executing program 4 (id=1110): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) renameat2(r2, &(0x7f00000000c0)='./cgroup\x00', r2, 0x0, 0x4) r3 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13100}, &(0x7f0000000240), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, &(0x7f0000000440), 0x1) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000300), 0x402, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00', 0x5) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000280)={r4, 0x1, 0x1000000, 0x1000000000000}) fanotify_mark(0xffffffffffffffff, 0x105, 0x8971, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000180), 0x29, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) 6.707238306s ago: executing program 3 (id=1111): socket$inet_smc(0x2b, 0x1, 0x0) r0 = creat(&(0x7f00000004c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0xe7b, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x20000000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x7) madvise(&(0x7f0000d93000/0x3000)=nil, 0x3000, 0x13) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000440)) keyctl$get_persistent(0x16, 0x0, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x140400, 0x0) ioctl$FBIOGETCMAP(r7, 0x4604, &(0x7f0000000180)={0x2, 0x1, &(0x7f0000001080)=[0x0], &(0x7f0000000280), 0x0, 0x0}) ioperm(0x800000000003, 0xaf73, 0xfffffffffffffffb) syz_genetlink_get_family_id$tipc2(&(0x7f00000024c0), r0) 6.616569288s ago: executing program 0 (id=1112): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$usbfs(0x0, 0x201, 0x440) r1 = syz_open_dev$mouse(&(0x7f0000000d00), 0x0, 0x2042) mq_open(&(0x7f0000000340)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bL\x10\x00\x00\x00\x04\x00\x00\x00\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdc\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x1d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00'/336, 0x40, 0xa4, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd604dd30800200601fe800000000000000000000000000023fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80020000907800000c02"], 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c010000100001000000000000000000fc0200000000000000000000000000000a0101010000000000000000000000000004ecdf0000000300", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000640100fe00000000000000000000000000000000000000000000000000000000010000002000000000000000000000000000000000000000fcffffffff00000000000000000000000001000e5300000000000000800000000000000000000000000000000000000000020000000000000000000000020000734c000000000000004c001400736861312d6e656f6e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000008000"/244], 0x13c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000100)="f257a8ea7b4da7384ae8095c0106", 0xe, 0x8040, &(0x7f0000000200)={0x11, 0x17, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000180)={r4, 0x1, 0x6, @local}, 0x10) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = io_uring_setup(0x76fc, &(0x7f0000000340)={0x0, 0x3c3b, 0x1000, 0x5, 0x2d2}) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000140)=0x3) r7 = io_uring_setup(0x7627, &(0x7f00000002c0)={0x0, 0x653f, 0x10000, 0x1, 0x1c9, 0x0, r6}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x10, 0x4, 0xfffffffc, 0x3, 0x10a2, r1, 0xcaef, '\x00', r4, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x50) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001900010000000000fbdbff250a010900080012800400f88008001700", @ANYRES32, @ANYBLOB="82fa13082727ff09ff62da3eaa93d63e40c4763572ad8ce519c121e8f47cea68d068a83b8f0f8c072f71d67672cf40b763e24aaa64633ec91cebae87722bfba89257aed0559b81e64f9c281d006af0dfb5b98203a68fb2e3b4825d08826a744810bb38584d75b89228c97f665a2af9de79c4dce2e386"], 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0xffff, r8}, 0x38) io_uring_register$IORING_REGISTER_FILES(r7, 0x1e, &(0x7f0000000000)=[r6], 0x1) 5.733318779s ago: executing program 3 (id=1113): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023893) 5.31616169s ago: executing program 5 (id=1114): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB], 0x50) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2, 0x2, 0x0, 0x1, 0x0, [@private1]}]}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r4, 0x2000000009d) r5 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000fbff0000000c0000f7bc8ad4000200"], 0x0, 0x28}, 0x28) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a00000609000200"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r5, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084000000"], 0x48}}, 0x4084) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, &(0x7f0000000400)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000700)="9cc272d79287a35bfc0cfe207c8b0fefb3a30555e5153f5269f17033a43885430f18d1565f", &(0x7f0000000780)=""/26) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8081}, 0x20000800) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5.227030136s ago: executing program 3 (id=1115): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg$unix(r4, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000001fc0)={'team0\x00', &(0x7f0000001f80)=@ethtool_rxfh_indir={0x1}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r8, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000100000000000000000000000000000000005f0fd5d06c9dec998456b38b5ddf86f11cdd782a610d8032456a9d64fd9e9c6f16add5b6dce474b1c0771b1fb86f3779bcb2fcd885f3e5c0a4cc7290849ff5d0c5b27797e29c9838e0f5d967ca7e861ff7e37a29596c2924857eeaba84"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095f8ff0000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) mremap(&(0x7f0000fc4000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f0000fc5000/0x1000)=nil) 5.189782135s ago: executing program 0 (id=1116): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff2424852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff0e0b5a293e3877adc1660edbc9a0307a25720a70e419dc44febf7ddc73fd4a5a0b6c28667f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a5ee0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b417354335f8cf20d0d96ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e000000000000000000140000001100"], 0x80}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000010c0)=ANY=[@ANYBLOB="c92752ede134aaaaaaaaaaaa88a8290081003700080045a7001400610000402f"], 0x0) sendmsg$nl_generic(r0, 0x0, 0x400c000) recvmsg(0xffffffffffffffff, 0x0, 0x2000) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000001100)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000001280)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_STATUS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4040040) io_setup(0x1, &(0x7f0000000b80)) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c020020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00080500000005100000a2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.107017897s ago: executing program 4 (id=1119): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{&(0x7f0000000240)=[{0x7, 0xffffffffffffffff, 0x4, {0x7fffffffffffffff, 0x9}, 0xffffffff, 0x11c, 0x6d0}, {0x7, 0x1, 0x4, {0x7, 0x8000}, 0x5, 0x7f, 0x1}, {0x6, 0x304, 0x4, {0x2f0, 0x37}, 0xc, 0x1, 0x8}, {0xd087, 0x3, 0xad9, {0x8, 0x9}, 0x3, 0x8, 0x4}, {0x5, 0x8, 0x8000000000000001, {0xfcf6, 0xa09}, 0x4, 0x5, 0x5}, {0xd1, 0x1, 0x2, {0x3, 0x7}, 0x5, 0x5, 0x2360}, {0xffffffff, 0x700, 0x8, {0x80, 0x6}, 0x10000000000, 0xc2a3, 0x8}], 0x7, 0x40, 0x8, 0x1}, {&(0x7f0000000440)=[{0x9, 0x3}, {0x1d00000, 0x7}, {0x4, 0x1bb}, {0x1, 0x4}], 0x4, 0x10, 0x6, 0x7}, {&(0x7f0000000480)=[0x156, 0x5, 0x9], 0x3, 0x8, 0x4, 0x6}, {&(0x7f00000004c0)=[{0x2, 0x40, 0x7, 0x10, 0x2}, {0x7f, 0x2, 0x8, 0x8001, 0x1}, {0xd3, 0x94, 0xeb2d, 0xd1, 0x7fff}, {0x4, 0xfffffffffffffffc, 0xf, 0x1, 0x5}, {0xf5a9, 0x0, 0x4, 0x6, 0x1}], 0x5, 0x28, 0x9ef4, 0x9}, {&(0x7f0000000600)=[0x5, 0xced, 0x7fff, 0xffff], 0x4, 0x8, 0x4e, 0xff}}) sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x4140045e}, 0xc) prlimit64(0x0, 0x3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x1400, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0xf8) r5 = fanotify_init(0xf00, 0x1) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) syz_emit_ethernet(0x46, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37ffff4, 0x4012011, r4, 0x0) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) r7 = memfd_create(&(0x7f0000010800)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCu\n\xd8;\x0e%\x99\x9fk\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0&\x1dMTo\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}EY\x95&\x03\xf5U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xb1\xd8\xe1\xda\xcb\x14\xb8K\x12\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96au\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xeb\xa0wwG=\x7f\xd3\xc5S!\xff\xd2\xcaX\xcb%\xfdg\x9f\x1fC\xedY\xb6q*\xd8\x1f\x1a\xe7LX\x7fXX\xa5\x9b*&b\x85\xady\xfd\xf6\xe3,\x82d\xcd2;?\xb4\xdb\xd0O\xb6-7I1\"\xd8\x1e\xacPp\xf7PnB\xdb\x93\x8e\x1b\xad\xf5t\nq\x161X\xcc,\x89i\xc7\xb9\x03\\\x89 \xd2\xaa\xf96\xad\x93\xe6!\r\xbdjue\xb4\v\xc0\x04\xf0f1q\x16\xcfh\'\xbd\xae\xa7u\xb6\x82Q\xd5V&;\x86zOf\xccQ:>Nq\xf5)^\x10\xae\xad\xc8\xb8\xc0\xed|W{*\xce}v!x\xbf\xe1P\xd9\x9fXf\x84\xca\xac`\xca\xa7\xbc\x9f#\xd7{V\x1b\xa3\vp', 0x2) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000002c0)={0x12, 0x0, 0x0, 0x80}) socket$igmp6(0xa, 0x3, 0x2) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000840)={0x0, 0x0}) io_getevents(r1, 0x10, 0x3, &(0x7f00000007c0)=[{}, {}, {}], &(0x7f0000000880)={r8, r9+60000000}) 3.527676676s ago: executing program 3 (id=1121): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) accept$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x2000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x197, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000e56000/0x4000)=nil, 0x4000, 0x11) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xe000, &(0x7f0000000200)=[{&(0x7f0000000240)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a0006000140020203600e41b0000900ac00060311000000a4000500000080200004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d3a6823a45f28fcb1d", 0xd8}], 0x1}, 0x40) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) socketpair(0x21, 0x80000, 0x3, &(0x7f0000000000)) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x5, @pix_mp={0x8, 0x4000000, 0x55595659, 0x0, 0x3, [{0x1, 0x7}, {0x6}, {0x2, 0x6}, {0x101, 0x80007fff}, {0xffffff80, 0x9}, {0x2, 0x100003}, {0x6, 0xfff}, {0xa, 0x3ff}], 0xce, 0x1, 0x6, 0x3}}) statx(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x2000, 0x4, &(0x7f00000000c0)) 3.475090914s ago: executing program 0 (id=1122): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') syz_usb_connect(0x3, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002a69bbc104f959941760f010203010902240001040000000904330202020c070009050102100000fa000905820240"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf251f000000080001004e00000008000380", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x24008004}, 0x1400c004) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x3}, 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000052c0)=[{&(0x7f0000000200)=@in={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000003bc0)=[{&(0x7f0000000240)="c41a", 0x2}], 0x1, &(0x7f0000003c00)=ANY=[@ANYBLOB="1000"], 0x18, 0x40000}], 0x1, 0x4000000) sendmsg$key(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x14, 0x6, 0xf, 0x18, 0x0, 0x70bd29, 0x25dfdbfd, [@sadb_x_nat_t_port={0x1, 0xa4c354f1ece6b143, 0x4e22}, @sadb_x_sec_ctx={0xe, 0x18, 0x9, 0x0, 0x65, "e09924ba96dafdb50ae425369f245ba31edd23b0957617f3234bc1713b861fa64395ef75e59790ca90b6718f11cc093f97bec92e0def133241efdbe7dc0f9fbaf97820a660f3ab0493bd6b9c43afa3b2e85336e9cb5ed555d3bffe2e36a4bfc1d8a699e51b"}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e21, @loopback}}, @sadb_ident={0x2, 0xb, 0x2, 0x0, 0x9}]}, 0x21}}, 0x20000040) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, &(0x7f0000000380)={0x0, 0x0, 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) connect(r5, &(0x7f0000000080)=@can, 0x80) setitimer(0x1, &(0x7f0000005a40)={{0x5, 0x7}, {0xfffffffffffffff5, 0x2}}, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(r6) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="34de48f663194600"/18, @ANYRES32, @ANYBLOB="000000000000000014001a80100002800c0001800800210000000000"], 0x34}}, 0x0) r7 = getpid() syz_open_procfs(r7, &(0x7f0000000100)='status\x00') r8 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee00) tkill(r8, 0x12) 3.074309983s ago: executing program 3 (id=1123): unshare(0x28000600) fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000100"], 0x0, 0xfffffffb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000002280)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52763c4ebb257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f725616b694bb4a6e463c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633b72fad6265a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584a340a68e528329dffafc3612e325c1eb4a3ab2e156a9744480000000000000000000000000000000000000000000200", "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"}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="090000002ab83a4b6712865fe09ccfd98d0201000049f5ff0101f2679336c1af24cbc2f1d4436707d7058e1061a6b39e99132c814852ee1d3834ce3f5704d5d2031b7caa689bd505690000000047cf04c76d6920b590c9e83bf8c1870c9ed916eb2596b0b6f6504d55ec24f388cac02f1e797e540beb183626d1f82e26d7dbf0c25e81fe64ef0e129272f10e92ea3db0bda04d0c8af51926e110b3eb5da3f767ede73ebae41d86950403dd35f049c227ea4a3d76c0fb5c87ffdf6dc0734cc4b1de4f92c78e1fa477d705bce28e01"], 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4000000) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) connect$pppl2tp(r1, &(0x7f0000001140)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000340)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r4, 0x9}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="e2080004", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fddbdf250b00000024000380080003000600000008000200be11000008000100080000000800020001000000240003800800010003000000080002000600000008000300030000000800030017de0000"], 0x5c}, 0x1, 0x0, 0x0, 0x20004040}, 0x40000) socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000480)=@ethtool_rx_ntuple={0x35, {0xd, @tcp_ip4_spec={@multicast1, @multicast1, 0x4e22, 0x4e21, 0x7}, @ether_spec={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, 0x7}, 0x4, 0x1, 0x2, 0x8, 0xfffffffffffffffe}}}) 2.808261573s ago: executing program 5 (id=1124): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{&(0x7f0000000240)=[{0x6092624, 0x7, 0x101, {0x4, 0x6da4}, 0x5, 0x80}, {0x7, 0xffffffffffffffff, 0x4, {0x7fffffffffffffff, 0x9}, 0xffffffff, 0x11c, 0x6d0}, {0x7, 0x1, 0x4, {0x7, 0x8000}, 0x5, 0x7f, 0x1}, {0x6, 0x304, 0x4, {0x2f0, 0x37}, 0xc, 0x1, 0x8}, {0xd087, 0x3, 0xad9, {0x8, 0x9}, 0x3, 0x8, 0x4}, {0x5, 0x8, 0x8000000000000001, {0xfcf6, 0xa09}, 0x4, 0x5, 0x5}, {0xd1, 0x1, 0x2, {0x3, 0x7}, 0x5, 0x5, 0x2360}, {0xffffffff, 0x700, 0x8, {0x80, 0x6}, 0x10000000000, 0xc2a3, 0x8}], 0x8, 0x40, 0x8, 0x1}, {0x0, 0x0, 0x10, 0x6, 0x7}, {&(0x7f0000000480)=[0x156, 0x5, 0x9], 0x3, 0x8, 0x4, 0x6}, {&(0x7f00000004c0)=[{0x2, 0x40, 0x7, 0x10, 0x2}, {0x7f, 0x2, 0x8, 0x8001, 0x1}, {0xd3, 0x94, 0xeb2d, 0xd1, 0x7fff}, {0x4, 0xfffffffffffffffc, 0xf, 0x1, 0x5}, {0xf5a9, 0x0, 0x4, 0x6, 0x1}], 0x5, 0x28, 0x9ef4, 0x9}, {&(0x7f0000000600)=[0x5, 0xced, 0x7fff, 0xffff], 0x4, 0x8, 0x4e, 0xff}}) sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x4140045e}, 0xc) prlimit64(0x0, 0x3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x1400, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0xf8) r5 = fanotify_init(0xf00, 0x1) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) syz_emit_ethernet(0x46, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37ffff4, 0x4012011, r4, 0x0) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) r7 = memfd_create(&(0x7f0000010800)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCu\n\xd8;\x0e%\x99\x9fk\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0&\x1dMTo\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}EY\x95&\x03\xf5U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xb1\xd8\xe1\xda\xcb\x14\xb8K\x12\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96au\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xeb\xa0wwG=\x7f\xd3\xc5S!\xff\xd2\xcaX\xcb%\xfdg\x9f\x1fC\xedY\xb6q*\xd8\x1f\x1a\xe7LX\x7fXX\xa5\x9b*&b\x85\xady\xfd\xf6\xe3,\x82d\xcd2;?\xb4\xdb\xd0O\xb6-7I1\"\xd8\x1e\xacPp\xf7PnB\xdb\x93\x8e\x1b\xad\xf5t\nq\x161X\xcc,\x89i\xc7\xb9\x03\\\x89 \xd2\xaa\xf96\xad\x93\xe6!\r\xbdjue\xb4\v\xc0\x04\xf0f1q\x16\xcfh\'\xbd\xae\xa7u\xb6\x82Q\xd5V&;\x86zOf\xccQ:>Nq\xf5)^\x10\xae\xad\xc8\xb8\xc0\xed|W{*\xce}v!x\xbf\xe1P\xd9\x9fXf\x84\xca\xac`\xca\xa7\xbc\x9f#\xd7{V\x1b\xa3\vp', 0x2) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000002c0)={0x12, 0x0, 0x0, 0x80}) socket$igmp6(0xa, 0x3, 0x2) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000840)={0x0, 0x0}) io_getevents(r1, 0x10, 0x3, &(0x7f00000007c0)=[{}, {}, {}], &(0x7f0000000880)={r8, r9+60000000}) 2.73185151s ago: executing program 3 (id=1125): llistxattr(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea800000000001090224000100000000090400000103000000092100000001220700090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000800000064150800392cdaab4a732b38292683b4845ba25169690aca6f49b232dfb793d83f6ec393cfa10251bce960e8134eace113e54d6352ee2f2e6448fed103f0220e50ef39d9d756b32c547756a927720d05e0df934aff6d8bca60f71c"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.675221521s ago: executing program 2 (id=1126): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) socket(0x2b, 0x4, 0x4000000) socket$alg(0x26, 0x5, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x20000023893) 1.776443497s ago: executing program 2 (id=1127): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x104, 0x8080) syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 1.167020263s ago: executing program 4 (id=1128): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x1) syz_usb_connect$uac1(0x5, 0x7d, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x582, 0x7d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x3, 0x1, 0xf1, 0x40, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffc0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xb, 0x4, 0x2, 0x1, "2b601e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x3, 0x81, 0x4, {0x7, 0x25, 0x1, 0x4, 0xfe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7f, 0x8, 0xad, {0x7, 0x25, 0x1, 0x0, 0x0, 0x6}}}}}}}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x44d}}]}) 1.121660093s ago: executing program 2 (id=1129): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 1.075262585s ago: executing program 2 (id=1130): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) renameat2(r2, &(0x7f00000000c0)='./cgroup\x00', r2, &(0x7f0000000300)='./cgroup\x00', 0x4) r3 = syz_io_uring_setup(0x38, 0x0, &(0x7f0000000240), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, &(0x7f0000000440), 0x1) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000300), 0x402, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00', 0x5) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000280)={r4, 0x1, 0x1000000, 0x1000000000000}) fanotify_mark(0xffffffffffffffff, 0x105, 0x8971, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000180), 0x29, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) 1.024955732s ago: executing program 2 (id=1131): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg$unix(r4, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000001fc0)={'team0\x00', &(0x7f0000001f80)=@ethtool_rxfh_indir={0x1}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r8, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000100000000000000000000000000000000005f0fd5d06c9dec998456b38b5ddf86f11cdd782a610d8032456a9d64fd9e9c6f16add5b6dce474b1c0771b1fb86f3779bcb2fcd885f3e5c0a4cc7290849ff5d0c5b27797e29c9838e0f5d967ca7e861ff7e37a29596c2924857eeaba84"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095f8ff0000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) mremap(&(0x7f0000fc4000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f0000fc5000/0x1000)=nil) 1.008082988s ago: executing program 0 (id=1132): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2044480) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) fanotify_init(0x0, 0x8000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, 0x0) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x8, "3dacf5cc5998"}]}}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) splice(r0, 0x0, r1, 0x0, 0x8000f28, 0x5) 58.514105ms ago: executing program 2 (id=1133): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) socket(0x2b, 0x4, 0x4000000) socket$alg(0x26, 0x5, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023893) 51.535823ms ago: executing program 5 (id=1134): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x1) syz_usb_connect$uac1(0x5, 0x7d, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x582, 0x7d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x3, 0x1, 0xf1, 0x40, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffc0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xb, 0x4, 0x2, 0x1, "2b601e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x3, 0x81, 0x4, {0x7, 0x25, 0x1, 0x4, 0xfe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7f, 0x8, 0xad, {0x7, 0x25, 0x1, 0x0, 0x0, 0x6}}}}}}}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x44d}}]}) 0s ago: executing program 0 (id=1135): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB], 0x50) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2, 0x2, 0x0, 0x1, 0x0, [@private1]}]}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r4, 0x2000000009d) r5 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000fbff0000000c0000f7bc8ad4000200"], 0x0, 0x28}, 0x28) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a00000609000200"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r5, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084000000"], 0x48}}, 0x4084) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, &(0x7f0000000400)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000700)="9cc272d79287a35bfc0cfe207c8b0fefb3a30555e5153f5269f17033a43885430f18d1565f", &(0x7f0000000780)=""/26) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8081}, 0x20000800) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): dProduct=7500, bcdDevice=69.ee [ 309.299862][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.308292][ T5703] usb 4-1: Product: syz [ 309.312469][ T5703] usb 4-1: Manufacturer: syz [ 309.317104][ T5703] usb 4-1: SerialNumber: syz [ 309.323232][ T5703] usb 4-1: config 0 descriptor?? [ 309.331577][ T7517] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 309.341862][ T188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 309.351766][ T188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 309.361553][ T7517] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 309.374405][ T7517] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 309.387478][ T7517] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 309.397479][ T7517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.406737][ T188] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 309.416117][ T188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.431514][ T7517] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 309.439670][ T7517] usb 5-1: invalid MIDI out EP 0 [ 309.440980][ T5797] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 309.446593][ T188] usb 3-1: Product: syz [ 309.459479][ T5797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 309.471665][ T188] usb 3-1: Manufacturer: syz [ 309.471687][ T188] usb 3-1: SerialNumber: syz [ 309.481949][ T5797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 309.486767][ T188] usb 3-1: config 0 descriptor?? [ 309.492164][ T5797] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 309.511489][ T5797] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 309.522088][ T5797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.533414][ T5797] usb 1-1: config 0 descriptor?? [ 309.595899][ T8600] bridge_slave_0: left allmulticast mode [ 309.602581][ T8600] bridge_slave_0: left promiscuous mode [ 309.611500][ T8600] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.639823][ T8600] bridge_slave_1: left allmulticast mode [ 309.647371][ T8601] netlink: 28 bytes leftover after parsing attributes in process `syz.3.712'. [ 309.671421][ T8600] bridge_slave_1: left promiscuous mode [ 309.681262][ T8600] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.683405][ T188] usb 3-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 309.700807][ T7517] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 310.057251][ T8600] bond0: (slave bond_slave_0): Releasing backup interface [ 310.100405][ T7517] usb 5-1: USB disconnect, device number 24 [ 310.122626][ T8600] bond0: (slave bond_slave_1): Releasing backup interface [ 310.139113][ T8600] team0: Port device team_slave_0 removed [ 310.149385][ T8600] team0: Port device team_slave_1 removed [ 310.157621][ T8600] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 310.280126][ T188] usb 3-1: USB disconnect, device number 22 [ 310.349668][ T5797] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 310.540192][ T5703] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 310.551154][ T5703] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 310.904327][ T5797] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 311.063915][ T5797] usb 5-1: Using ep0 maxpacket: 16 [ 311.124334][ T5797] usb 5-1: unable to get BOS descriptor or descriptor too short [ 311.145612][ T5797] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 311.196127][ T5797] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 311.208860][ T5797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.218967][ T5797] usb 5-1: Product: syz [ 311.246354][ T5797] usb 5-1: Manufacturer: syz [ 311.257828][ T5796] usb 1-1: USB disconnect, device number 33 [ 311.265066][ T5797] usb 5-1: SerialNumber: syz [ 311.283115][ T5703] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 311.307772][ T5703] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 311.345222][ T5703] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 311.372676][ T5703] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 311.393362][ T5703] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 311.418452][ T5703] usb 4-1: USB disconnect, device number 32 [ 311.531598][ T5797] snd-ua101 5-1:1.0: invalid num_altsetting [ 311.560620][ T5797] usb 5-1: USB disconnect, device number 25 [ 311.676897][ T8635] binder: 8634:8635 ioctl c0306201 200000000440 returned -14 [ 311.717420][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.717590][ T5711] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 311.724388][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.948222][ T5703] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 312.146720][ T5703] usb 4-1: Using ep0 maxpacket: 16 [ 312.269576][ T5703] usb 4-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=ba.e9 [ 312.349315][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.429537][ T5703] usb 4-1: Product: syz [ 312.462206][ T5703] usb 4-1: Manufacturer: syz [ 312.496594][ T5703] usb 4-1: SerialNumber: syz [ 312.674011][ T5703] usb 4-1: config 0 descriptor?? [ 312.909397][ T5703] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected. [ 313.751754][ T8657] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 313.828558][ T5812] block nbd1: Possible stuck request ffff888028875080: control (read@0,4096B). Runtime 90 seconds [ 313.868822][ T8631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.904262][ T8631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.028914][ T5703] pwc: send_video_command error -71 [ 314.041301][ T5703] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 314.058224][ T5703] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 314.091650][ T5703] usb 4-1: USB disconnect, device number 33 [ 314.493723][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 314.493740][ T30] audit: type=1400 audit(1782903824.486:924): avc: denied { ioctl } for pid=8665 comm="syz-executor" path="socket:[21537]" dev="sockfs" ino=21537 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 314.494591][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 314.542018][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 314.550590][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 314.564442][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 314.573611][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 314.597313][ T5703] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 314.612501][ T30] audit: type=1400 audit(1782903824.606:925): avc: denied { mounton } for pid=8665 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 314.763897][ T5703] usb 5-1: device descriptor read/64, error -71 [ 315.034110][ T5703] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 315.134086][ T188] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 315.601572][ T5703] usb 5-1: device descriptor read/64, error -71 [ 316.114262][ T5703] usb usb5-port1: attempt power cycle [ 316.540683][ T188] usb 4-1: unable to get BOS descriptor or descriptor too short [ 316.603968][ T50] Bluetooth: hci5: command tx timeout [ 316.623858][ T188] usb 4-1: config 249 has 0 interfaces, different from the descriptor's value: 1 [ 316.664129][ T188] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 2.55 [ 316.680114][ T188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.713647][ T188] usb 4-1: Product: syz [ 316.726654][ T188] usb 4-1: Manufacturer: syz [ 316.739098][ T188] usb 4-1: SerialNumber: syz [ 316.773899][ T5739] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 316.788024][ T8699] FAULT_INJECTION: forcing a failure. [ 316.788024][ T8699] name failslab, interval 1, probability 0, space 0, times 0 [ 316.801197][ T8699] CPU: 0 UID: 0 PID: 8699 Comm: syz.4.737 Tainted: G L syzkaller #0 PREEMPT(full) [ 316.801215][ T8699] Tainted: [L]=SOFTLOCKUP [ 316.801219][ T8699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 316.801227][ T8699] Call Trace: [ 316.801231][ T8699] [ 316.801235][ T8699] dump_stack_lvl+0x100/0x190 [ 316.801253][ T8699] should_fail_ex.cold+0x5/0xa [ 316.801269][ T8699] should_failslab+0xc2/0x120 [ 316.801284][ T8699] __kmalloc_noprof+0xfc/0x820 [ 316.801297][ T8699] ? tomoyo_encode2+0xfb/0x3c0 [ 316.801317][ T8699] tomoyo_encode2+0xfb/0x3c0 [ 316.801335][ T8699] tomoyo_encode+0x29/0x50 [ 316.801351][ T8699] tomoyo_realpath_from_path+0x18c/0x690 [ 316.801371][ T8699] tomoyo_path_number_perm+0x23c/0x580 [ 316.801385][ T8699] ? tomoyo_path_number_perm+0x22e/0x580 [ 316.801400][ T8699] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 316.801434][ T8699] ? find_held_lock+0x2b/0x80 [ 316.801444][ T8699] ? __fget_files+0x215/0x3d0 [ 316.801454][ T8699] ? hook_file_ioctl_common+0x140/0x440 [ 316.801466][ T8699] ? __fget_files+0x215/0x3d0 [ 316.801479][ T8699] ? __fget_files+0x21f/0x3d0 [ 316.801492][ T8699] security_file_ioctl+0xd3/0x230 [ 316.801508][ T8699] __x64_sys_ioctl+0xb7/0x210 [ 316.801525][ T8699] do_syscall_64+0x115/0x870 [ 316.801541][ T8699] ? clear_bhb_loop+0x40/0x90 [ 316.801554][ T8699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.801565][ T8699] RIP: 0033:0x7f2950b9de59 [ 316.801575][ T8699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.801585][ T8699] RSP: 002b:00007f2951b2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 316.801595][ T8699] RAX: ffffffffffffffda RBX: 00007f2950e25fa0 RCX: 00007f2950b9de59 [ 316.801602][ T8699] RDX: 0000200000000080 RSI: 000000004010744d RDI: 0000000000000003 [ 316.801609][ T8699] RBP: 00007f2951b2a090 R08: 0000000000000000 R09: 0000000000000000 [ 316.801615][ T8699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.801621][ T8699] R13: 00007f2950e26038 R14: 00007f2950e25fa0 R15: 00007ffec0ffa688 [ 316.801635][ T8699] [ 316.801657][ T8699] ERROR: Out of memory at tomoyo_realpath_from_path. [ 317.105881][ T5739] usb 1-1: unable to get BOS descriptor or descriptor too short [ 317.115864][ T5739] usb 1-1: config 249 has 0 interfaces, different from the descriptor's value: 1 [ 317.129557][ T5739] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 2.55 [ 317.134680][ T30] audit: type=1400 audit(1782903827.136:926): avc: denied { view } for pid=8681 comm="syz.3.733" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 317.139876][ T5739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.167566][ T5739] usb 1-1: Product: syz [ 317.172382][ T5739] usb 1-1: Manufacturer: syz [ 317.177790][ T5739] usb 1-1: SerialNumber: syz [ 317.198180][ T8665] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.214296][ T8665] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.238525][ T8665] bridge_slave_0: entered allmulticast mode [ 317.258641][ T8665] bridge_slave_0: entered promiscuous mode [ 317.288631][ T8665] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.303102][ T8712] netlink: 'syz.2.740': attribute type 7 has an invalid length. [ 317.329723][ T8665] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.409619][ T8665] bridge_slave_1: entered allmulticast mode [ 317.455630][ T8665] bridge_slave_1: entered promiscuous mode [ 317.504360][ T188] usb 4-1: USB disconnect, device number 34 [ 317.590612][ T8665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.652026][ T8665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.777528][ T8665] team0: Port device team_slave_0 added [ 317.792203][ T8665] team0: Port device team_slave_1 added [ 317.810188][ T5739] usb 1-1: USB disconnect, device number 34 [ 317.848807][ T8665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.868378][ T8665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.931298][ T8665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.975494][ T8665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.031736][ T8665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.062288][ T8665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.670440][ T8732] netlink: 'syz.4.746': attribute type 6 has an invalid length. [ 318.677534][ T50] Bluetooth: hci5: command tx timeout [ 319.127574][ T8665] hsr_slave_0: entered promiscuous mode [ 319.142734][ T8665] hsr_slave_1: entered promiscuous mode [ 319.162237][ T8665] debugfs: 'hsr0' already exists in 'hsr' [ 319.185420][ T8665] Cannot create hsr debugfs directory [ 319.244971][ T5739] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 319.416501][ T5739] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.436115][ T5739] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 319.461819][ T5739] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 319.479799][ T5739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.499962][ T5739] usb 3-1: Product: syz [ 319.517131][ T5739] usb 3-1: Manufacturer: syz [ 319.529868][ T5739] usb 3-1: SerialNumber: syz [ 319.552867][ T5739] usb 3-1: config 0 descriptor?? [ 319.569576][ T8749] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 319.601658][ T8749] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 319.987961][ T8665] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 320.033138][ T8665] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 320.077504][ T8665] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 320.136465][ T8665] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 320.189472][ T8665] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 320.754241][ T50] Bluetooth: hci5: command tx timeout [ 321.229972][ T8665] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 321.240084][ T8665] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 321.292049][ T8665] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 321.567120][ T30] audit: type=1400 audit(1782903831.566:927): avc: denied { read } for pid=8754 comm="syz.3.751" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 321.972947][ T8665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.006909][ T8665] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.019245][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.026353][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.057215][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.064346][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.329813][ T5739] usb 3-1: USB disconnect, device number 23 [ 322.583997][ T188] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 322.765609][ T188] usb 5-1: unable to get BOS descriptor or descriptor too short [ 322.782256][ T188] usb 5-1: config 249 has 0 interfaces, different from the descriptor's value: 1 [ 322.820247][ T188] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 2.55 [ 322.830529][ T188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.834433][ T50] Bluetooth: hci5: command tx timeout [ 322.839699][ T188] usb 5-1: Product: syz [ 322.851298][ T188] usb 5-1: Manufacturer: syz [ 322.865228][ T8786] netlink: 76 bytes leftover after parsing attributes in process `syz.0.755'. [ 322.874813][ T188] usb 5-1: SerialNumber: syz [ 322.912698][ T8786] hsr0: entered promiscuous mode [ 322.943968][ T5739] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 322.995195][ T8665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.006022][ T8782] hsr0: left promiscuous mode [ 323.125725][ T5739] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 323.146820][ T5739] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 323.181760][ T5739] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 323.198731][ T5739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.225884][ T5739] usb 3-1: Product: syz [ 323.231532][ T5739] usb 3-1: Manufacturer: syz [ 323.243917][ T5739] usb 3-1: SerialNumber: syz [ 323.258476][ T5739] usb 3-1: config 0 descriptor?? [ 323.273233][ T5739] usb 3-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 323.356702][ T188] usb 5-1: USB disconnect, device number 29 [ 323.575893][ T8665] veth0_vlan: entered promiscuous mode [ 323.614336][ T8665] veth1_vlan: entered promiscuous mode [ 323.694620][ T8665] veth0_macvtap: entered promiscuous mode [ 323.702628][ T5739] usb 3-1: USB disconnect, device number 24 [ 323.729032][ T8665] veth1_macvtap: entered promiscuous mode [ 323.768769][ T8665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.800645][ T8665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.816329][ T7278] udevd[7278]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 323.837636][ T5821] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.850265][ T5821] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.879487][ T5821] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.908621][ T5821] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.052051][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.151073][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.222834][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.670565][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.710382][ T30] audit: type=1400 audit(1782903834.706:928): avc: denied { mounton } for pid=8665 comm="syz-executor" path="/root/syzkaller.JWrxAv/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 324.791096][ T30] audit: type=1400 audit(1782903834.746:929): avc: denied { mounton } for pid=8665 comm="syz-executor" path="/root/syzkaller.JWrxAv/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 324.836780][ T30] audit: type=1400 audit(1782903834.746:930): avc: denied { mounton } for pid=8665 comm="syz-executor" path="/root/syzkaller.JWrxAv/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=22503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 324.872309][ T30] audit: type=1400 audit(1782903834.766:931): avc: denied { mounton } for pid=8665 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 324.902276][ T30] audit: type=1400 audit(1782903834.766:932): avc: denied { mount } for pid=8665 comm="syz-executor" name="/" dev="gadgetfs" ino=7995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 324.925145][ T30] audit: type=1400 audit(1782903834.776:933): avc: denied { mount } for pid=8665 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 325.037073][ T5797] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 325.065906][ T30] audit: type=1400 audit(1782903834.776:934): avc: denied { mounton } for pid=8665 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 325.194020][ T5797] usb 3-1: Using ep0 maxpacket: 16 [ 325.203303][ T5797] usb 3-1: unable to get BOS descriptor or descriptor too short [ 325.212696][ T5797] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 325.220816][ T5797] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 325.220837][ T5797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.220849][ T5797] usb 3-1: Product: syz [ 325.220858][ T5797] usb 3-1: Manufacturer: syz [ 325.220867][ T5797] usb 3-1: SerialNumber: syz [ 325.286254][ T8829] netlink: 'syz.5.729': attribute type 6 has an invalid length. [ 325.507497][ T8831] netlink: 20 bytes leftover after parsing attributes in process `syz.4.764'. [ 325.617409][ T5739] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 325.617638][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 325.774032][ T5739] usb 4-1: device descriptor read/64, error -32 [ 325.948526][ T5797] snd-ua101 3-1:1.0: invalid num_altsetting [ 325.981926][ T5797] usb 3-1: USB disconnect, device number 25 [ 326.036444][ T5739] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 326.215520][ T50] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 326.226279][ T5739] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.239731][ T5739] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 326.251514][ T5739] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 326.261154][ T5739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.269473][ T5739] usb 4-1: Product: syz [ 326.277095][ T5739] usb 4-1: Manufacturer: syz [ 326.281735][ T5739] usb 4-1: SerialNumber: syz [ 326.289316][ T5739] usb 4-1: config 0 descriptor?? [ 326.423868][ T7517] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 326.454940][ T188] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 326.575412][ T7517] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.586422][ T7517] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.598503][ T7517] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 326.608381][ T7517] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.619585][ T7517] usb 6-1: config 0 descriptor?? [ 326.633903][ T188] usb 1-1: Using ep0 maxpacket: 8 [ 326.640754][ T188] usb 1-1: unable to get BOS descriptor or descriptor too short [ 326.649759][ T188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 326.661246][ T188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 326.671242][ T188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 326.685967][ T188] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 326.696838][ T188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 326.708251][ T188] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 44 [ 326.720720][ T188] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 326.730703][ T188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.739046][ T188] usb 1-1: Product: syz [ 326.743243][ T188] usb 1-1: Manufacturer: syz [ 326.744079][ T5797] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 326.747929][ T188] usb 1-1: SerialNumber: syz [ 326.765355][ T188] usb 1-1: config 0 descriptor?? [ 326.771297][ T8849] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 326.779063][ T8849] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 326.790695][ T188] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 326.907827][ T5797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.928815][ T5797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.939397][ T5797] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 326.948590][ T5797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.966280][ T5797] usb 3-1: config 0 descriptor?? [ 327.408886][ T5797] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x2 [ 327.447503][ T5797] pyra 0003:1E7D:2CF6.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 327.644599][ T7517] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x2 [ 328.044772][ T3105] usb 3-1: USB disconnect, device number 26 [ 328.134852][ T7517] pyra 0003:1E7D:2CF6.0010: hidraw1: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 328.152942][ T5739] usb 4-1: USB disconnect, device number 36 [ 328.166517][ T7517] usb 6-1: USB disconnect, device number 2 [ 328.273709][ T8858] fido_id[8858]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 328.305032][ T8857] fido_id[8857]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 328.484002][ T8861] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 329.081450][ T30] audit: type=1400 audit(1782903839.066:935): avc: denied { create } for pid=8864 comm="syz.5.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 329.129490][ T30] audit: type=1400 audit(1782903839.126:936): avc: denied { bind } for pid=8864 comm="syz.5.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 329.155771][ T30] audit: type=1400 audit(1782903839.156:937): avc: denied { bind } for pid=8864 comm="syz.5.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 329.235560][ T5796] usb 1-1: USB disconnect, device number 35 [ 329.430075][ T8876] netlink: 'syz.4.777': attribute type 6 has an invalid length. [ 330.059968][ T8885] binder_alloc: 8884: pid 8884 spamming oneway? 1 buffers allocated for a total size of 4096 [ 330.091754][ T8885] binder: 8884:8885 ioctl c4009420 200000001080 returned -22 [ 330.243831][ T5739] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 330.405638][ T5739] usb 3-1: unable to get BOS descriptor or descriptor too short [ 330.423593][ T5739] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 330.438572][ T5739] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 331.073515][ T5739] usb 3-1: config 63 has no interface number 0 [ 331.080238][ T5739] usb 3-1: config 63 interface 66 has no altsetting 0 [ 331.090705][ T5739] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 331.099979][ T5739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.108934][ T5739] usb 3-1: Product: syz [ 331.113185][ T5739] usb 3-1: Manufacturer: syz [ 331.119399][ T5739] usb 3-1: SerialNumber: syz [ 331.356825][ T5739] uvcvideo 3-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 331.376834][ T5739] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 331.404334][ T5739] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 331.433884][ T7517] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 331.443338][ T5739] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 331.471310][ T5739] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 331.481915][ T188] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 331.514194][ T5739] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 331.536374][ T5739] uvcvideo 3-1:63.66: No streaming interface found for terminal 29. [ 331.560446][ T5739] uvcvideo 3-1:63.66: Entity type for entity Output 32773 was not initialized! [ 331.615967][ T7517] usb 4-1: Using ep0 maxpacket: 16 [ 331.628008][ T7517] usb 4-1: config 4 has an invalid interface number: 51 but max is 0 [ 331.645119][ T5739] usb 3-1: USB disconnect, device number 27 [ 331.657370][ T188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.670211][ T7517] usb 4-1: config 4 has no interface number 0 [ 331.691160][ T7517] usb 4-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 331.701249][ T188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.731148][ T7517] usb 4-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 331.743252][ T188] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 331.764725][ T188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.775397][ T7517] usb 4-1: config 4 interface 51 has no altsetting 0 [ 331.796807][ T7517] usb 4-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 331.809709][ T188] usb 5-1: config 0 descriptor?? [ 331.818898][ T7517] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.845634][ T7517] usb 4-1: Product: syz [ 331.855631][ T7517] usb 4-1: Manufacturer: syz [ 331.868137][ T7517] usb 4-1: SerialNumber: syz [ 331.894690][ T8899] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 331.904053][ T8899] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 332.023867][ T5739] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 332.142499][ T8899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.784'. [ 332.194010][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 332.203998][ T5739] usb 3-1: Using ep0 maxpacket: 8 [ 332.228101][ T5739] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 332.244407][ T188] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x2 [ 332.273077][ T5739] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 332.300930][ T7517] cdc_eem 4-1:4.51: probe with driver cdc_eem failed with error -71 [ 332.309609][ T5739] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 332.321239][ T188] pyra 0003:1E7D:2CF6.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 332.338102][ T5739] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 332.351729][ T5739] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 332.363651][ T7517] usb 4-1: USB disconnect, device number 37 [ 332.402288][ T5739] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.628567][ T188] usb 5-1: USB disconnect, device number 30 [ 333.123175][ T5739] usb 3-1: GET_CAPABILITIES returned 0 [ 333.128832][ T5739] usbtmc 3-1:16.0: can't read capabilities [ 333.189789][ T30] audit: type=1400 audit(1782903843.186:938): avc: denied { getopt } for pid=8918 comm="syz.3.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 333.385664][ T30] audit: type=1400 audit(1782903843.386:939): avc: denied { append } for pid=8926 comm="syz.0.792" name="001" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 333.409401][ T8927] usb usb7: usbfs: process 8927 (syz.0.792) did not claim interface 0 before use [ 334.114472][ T50] Bluetooth: hci3: Malformed LE Event: 0x0d [ 334.637897][ T5797] usb 3-1: USB disconnect, device number 28 [ 336.409155][ T8949] binder: BINDER_SET_CONTEXT_MGR already set [ 336.473067][ T8949] binder: 8947:8949 ioctl 4018620d 200000004a80 returned -16 [ 336.860725][ T8954] binder_alloc: binder_alloc_mmap_handler: 8947 200000ffd000-200001000000 already mapped failed -16 [ 338.056698][ T30] audit: type=1400 audit(1782903847.956:940): avc: denied { watch } for pid=8961 comm="syz.5.802" path="/8" dev="tmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 338.079324][ T8949] syz.0.799 (8949): drop_caches: 2 [ 339.299045][ T30] audit: type=1400 audit(1782903849.296:941): avc: denied { read } for pid=8980 comm="syz.0.806" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 339.479226][ T30] audit: type=1400 audit(1782903849.336:942): avc: denied { open } for pid=8980 comm="syz.0.806" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 339.571439][ T30] audit: type=1400 audit(1782903849.356:943): avc: denied { ioctl } for pid=8980 comm="syz.0.806" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 339.748992][ T8992] input: syz0 as /devices/virtual/input/input33 [ 342.622957][ T9014] FAULT_INJECTION: forcing a failure. [ 342.622957][ T9014] name failslab, interval 1, probability 0, space 0, times 0 [ 342.703500][ T9014] CPU: 1 UID: 60928 PID: 9014 Comm: syz.5.811 Tainted: G L syzkaller #0 PREEMPT(full) [ 342.703518][ T9014] Tainted: [L]=SOFTLOCKUP [ 342.703521][ T9014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 342.703528][ T9014] Call Trace: [ 342.703531][ T9014] [ 342.703536][ T9014] dump_stack_lvl+0x100/0x190 [ 342.703554][ T9014] should_fail_ex.cold+0x5/0xa [ 342.703571][ T9014] should_failslab+0xc2/0x120 [ 342.703585][ T9014] __kmalloc_noprof+0xfc/0x820 [ 342.703597][ T9014] ? rcu_is_watching+0x12/0xc0 [ 342.703615][ T9014] ? tomoyo_realpath_from_path+0xb6/0x690 [ 342.703635][ T9014] tomoyo_realpath_from_path+0xb6/0x690 [ 342.703655][ T9014] tomoyo_mount_acl+0x1b6/0x8b0 [ 342.703670][ T9014] ? is_bpf_text_address+0x8a/0x1a0 [ 342.703685][ T9014] ? bpf_ksym_find+0x128/0x1c0 [ 342.703702][ T9014] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 342.703715][ T9014] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 342.703730][ T9014] ? kernel_text_address+0x8d/0x100 [ 342.703743][ T9014] ? unwind_get_return_address+0x59/0xa0 [ 342.703783][ T9014] ? tomoyo_domain+0xb2/0x150 [ 342.703799][ T9014] ? tomoyo_profile+0x47/0x60 [ 342.703815][ T9014] tomoyo_mount_permission+0x214/0x460 [ 342.703830][ T9014] ? tomoyo_mount_permission+0x1f6/0x460 [ 342.703846][ T9014] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 342.703869][ T9014] security_sb_mount+0xdd/0x270 [ 342.703885][ T9014] path_mount+0x158/0x23d0 [ 342.703901][ T9014] ? __pfx_path_mount+0x10/0x10 [ 342.703914][ T9014] ? lockdep_hardirqs_on+0x78/0x100 [ 342.703931][ T9014] ? putname+0xb1/0x110 [ 342.703942][ T9014] ? kmem_cache_free+0x127/0x6b0 [ 342.703957][ T9014] ? __x64_sys_mount+0x293/0x310 [ 342.703970][ T9014] __x64_sys_mount+0x293/0x310 [ 342.703984][ T9014] ? __pfx___x64_sys_mount+0x10/0x10 [ 342.704001][ T9014] do_syscall_64+0x115/0x870 [ 342.704016][ T9014] ? clear_bhb_loop+0x40/0x90 [ 342.704030][ T9014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.704041][ T9014] RIP: 0033:0x7efff2b9de59 [ 342.704050][ T9014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.704060][ T9014] RSP: 002b:00007efff39b8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 342.704071][ T9014] RAX: ffffffffffffffda RBX: 00007efff2e25fa0 RCX: 00007efff2b9de59 [ 342.704078][ T9014] RDX: 00002000000001c0 RSI: 0000200000000040 RDI: 0000000000000000 [ 342.704084][ T9014] RBP: 00007efff39b8090 R08: 0000200000000200 R09: 0000000000000000 [ 342.704090][ T9014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.704096][ T9014] R13: 00007efff2e26038 R14: 00007efff2e25fa0 R15: 00007fff9b4d8458 [ 342.704109][ T9014] [ 343.000982][ T9020] netlink: 'syz.2.817': attribute type 1 has an invalid length. [ 343.024783][ T9014] ERROR: Out of memory at tomoyo_realpath_from_path. [ 343.048252][ T9020] 8021q: adding VLAN 0 to HW filter on device bond1 [ 343.114170][ T5797] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 343.263921][ T7517] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 343.264123][ T5797] usb 4-1: Using ep0 maxpacket: 8 [ 343.288116][ T5797] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 343.311316][ T5797] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.323392][ T9031] Cannot find del_set index 0 as target [ 343.332993][ T5797] usb 4-1: config 0 has no interface number 0 [ 343.358881][ T5797] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 343.374153][ T5797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.385216][ T5797] usb 4-1: Product: syz [ 343.395290][ T5797] usb 4-1: Manufacturer: syz [ 343.413518][ T5797] usb 4-1: SerialNumber: syz [ 343.429163][ T5797] usb 4-1: config 0 descriptor?? [ 343.430641][ T7517] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 343.450633][ T5797] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 343.467239][ T7517] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 343.485064][ T9035] netlink: 12 bytes leftover after parsing attributes in process `syz.5.823'. [ 343.490651][ T7517] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 343.496421][ T5797] uvcvideo 4-1:0.31: No valid video chain found. [ 344.515928][ T10] block nbd1: Possible stuck request ffff888028875080: control (read@0,4096B). Runtime 120 seconds [ 344.537782][ T7517] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 344.547077][ T7517] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 344.553200][ T9040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.825'. [ 344.555266][ T7517] usb 5-1: Product: syz [ 344.555285][ T7517] usb 5-1: Manufacturer: syz [ 344.555299][ T7517] usb 5-1: SerialNumber: syz [ 344.577746][ T9040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.825'. [ 345.742344][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.818'. [ 346.928492][ T7517] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 347.450170][ T7517] usb 5-1: USB disconnect, device number 31 [ 347.459429][ T7517] usblp0: removed [ 348.080784][ T30] audit: type=1326 audit(1782903858.076:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9071 comm="syz.2.827" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745b79de59 code=0x7ffc0000 [ 348.112576][ T30] audit: type=1326 audit(1782903858.106:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9071 comm="syz.2.827" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745b79de59 code=0x7ffc0000 [ 348.142877][ T30] audit: type=1326 audit(1782903858.136:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9071 comm="syz.2.827" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f745b79de59 code=0x7ffc0000 [ 348.153830][ T7517] usb 4-1: USB disconnect, device number 38 [ 348.177009][ T30] audit: type=1326 audit(1782903858.136:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9071 comm="syz.2.827" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745b79de59 code=0x7ffc0000 [ 348.224246][ T9074] netlink: 140 bytes leftover after parsing attributes in process `syz.5.832'. [ 348.271404][ T30] audit: type=1326 audit(1782903858.136:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9071 comm="syz.2.827" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745b79de59 code=0x7ffc0000 [ 348.317916][ T30] audit: type=1326 audit(1782903858.136:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9071 comm="syz.2.827" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f745b75e68e code=0x7ffc0000 [ 348.346164][ T30] audit: type=1326 audit(1782903858.136:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9071 comm="syz.2.827" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f745b79daeb code=0x7ffc0000 [ 348.374620][ T5797] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 348.386790][ T30] audit: type=1326 audit(1782903858.136:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9071 comm="syz.2.827" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f745b79daeb code=0x7ffc0000 [ 348.417996][ T30] audit: type=1326 audit(1782903858.136:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9071 comm="syz.2.827" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f745b79daeb code=0x7ffc0000 [ 348.466703][ T30] audit: type=1326 audit(1782903858.136:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9071 comm="syz.2.827" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f745b79daeb code=0x7ffc0000 [ 348.536180][ T5797] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 348.553307][ T5797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 348.564993][ T5797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 348.575485][ T5797] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 348.590510][ T5797] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 348.600601][ T5797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.621439][ T5797] usb 3-1: config 0 descriptor?? [ 348.695435][ T9085] netlink: 12 bytes leftover after parsing attributes in process `syz.4.835'. [ 350.774922][ T5797] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 350.844437][ T9089] netlink: 12 bytes leftover after parsing attributes in process `syz.5.836'. [ 350.865421][ T5797] usb 3-1: USB disconnect, device number 29 [ 351.236384][ T9090] fido_id[9090]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 351.513031][ T9101] Invalid ELF header type: 3 != 1 [ 352.643879][ T7517] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 352.703889][ T5798] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 352.815749][ T7517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.845491][ T7517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.855366][ T7517] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 352.864464][ T7517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.899715][ T5798] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDA, changing to 0x8A [ 352.900642][ T7517] usb 1-1: config 0 descriptor?? [ 352.912217][ T5798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 48583, setting to 64 [ 352.924278][ T5739] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 352.929243][ T5798] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 352.953365][ T5798] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 352.965598][ T5798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.973916][ T5703] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 352.980672][ T5798] usb 5-1: config 0 descriptor?? [ 353.122507][ T5739] usb 6-1: Using ep0 maxpacket: 8 [ 353.129378][ T9108] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 353.136610][ T5703] usb 3-1: Using ep0 maxpacket: 8 [ 353.144143][ T5739] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 353.152487][ T5703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 353.165623][ T5739] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.176352][ T5703] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 353.191980][ T5739] usb 6-1: config 0 has no interface number 0 [ 353.198204][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.244984][ T5739] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 353.272260][ T5739] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.283117][ T5739] usb 6-1: Product: syz [ 353.288618][ T5739] usb 6-1: Manufacturer: syz [ 353.301590][ T5739] usb 6-1: SerialNumber: syz [ 353.365282][ T5703] usb 3-1: config 0 descriptor?? [ 353.398750][ T5739] usb 6-1: config 0 descriptor?? [ 353.546324][ T7517] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x2 [ 353.554572][ T5739] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 353.574700][ T5798] usbhid 5-1:0.0: can't add hid device: -71 [ 353.575575][ T5739] uvcvideo 6-1:0.31: No valid video chain found. [ 353.580806][ T5798] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 353.589902][ T7517] pyra 0003:1E7D:2CF6.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 353.616978][ T5798] usb 5-1: USB disconnect, device number 32 [ 353.664386][ T5703] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 353.710655][ T5703] usb 6-1: USB disconnect, device number 3 [ 353.779894][ T5606] usb 1-1: USB disconnect, device number 36 [ 353.891104][ T5797] usb 3-1: USB disconnect, device number 30 [ 354.044043][ T5798] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 354.153865][ T5796] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 354.194088][ T5798] usb 5-1: Using ep0 maxpacket: 8 [ 354.200458][ T5798] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 354.208908][ T5798] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.220072][ T5798] usb 5-1: config 0 has no interface number 0 [ 354.228705][ T5798] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 354.238103][ T5798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.247481][ T5798] usb 5-1: Product: syz [ 354.251744][ T5798] usb 5-1: Manufacturer: syz [ 354.257019][ T5798] usb 5-1: SerialNumber: syz [ 354.268639][ T5798] usb 5-1: config 0 descriptor?? [ 354.280212][ T5798] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 354.289060][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 354.289087][ T30] audit: type=1326 audit(1782903864.286:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.5.849" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff2b9de59 code=0x7ffc0000 [ 354.289268][ T5798] uvcvideo 5-1:0.31: No valid video chain found. [ 354.304416][ T30] audit: type=1326 audit(1782903864.286:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.5.849" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff2b9de59 code=0x7ffc0000 [ 354.359979][ T30] audit: type=1326 audit(1782903864.326:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.5.849" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7efff2b9de59 code=0x7ffc0000 [ 354.365986][ T5796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 354.404931][ T30] audit: type=1326 audit(1782903864.326:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.5.849" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff2b9de59 code=0x7ffc0000 [ 354.424767][ T5796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 354.443098][ T5796] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 354.455279][ T5796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.458481][ T9130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.850'. [ 354.463417][ T5796] usb 4-1: Product: syz [ 354.483057][ T30] audit: type=1326 audit(1782903864.326:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.5.849" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff2b9de59 code=0x7ffc0000 [ 354.514544][ T5796] usb 4-1: Manufacturer: syz [ 354.519339][ T5796] usb 4-1: SerialNumber: syz [ 354.564098][ T30] audit: type=1326 audit(1782903864.356:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.5.849" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efff2b5e68e code=0x7ffc0000 [ 354.655816][ T5796] usb 4-1: config 0 descriptor?? [ 354.657525][ T7517] usb 5-1: USB disconnect, device number 33 [ 354.664411][ T5796] usb 4-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 354.693971][ T5798] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 354.763527][ T9136] input: syz0 as /devices/virtual/input/input35 [ 354.834547][ T30] audit: type=1326 audit(1782903864.356:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.5.849" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efff2b9daeb code=0x7ffc0000 [ 354.985419][ T5798] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 355.047561][ T5798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 355.047628][ T30] audit: type=1326 audit(1782903864.356:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.5.849" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efff2b9daeb code=0x7ffc0000 [ 355.092701][ T30] audit: type=1326 audit(1782903864.366:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.5.849" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efff2b9daeb code=0x7ffc0000 [ 355.202714][ T30] audit: type=1326 audit(1782903864.366:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.5.849" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efff2b9daeb code=0x7ffc0000 [ 355.376900][ T5798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 355.387329][ T5798] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 355.407090][ T5798] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 355.416948][ T5798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.440228][ T5798] usb 6-1: config 0 descriptor?? [ 355.799802][ T188] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 355.809018][ T5618] Bluetooth: hci3: Malformed LE Event: 0x0d [ 355.984259][ T5796] usb 4-1: USB disconnect, device number 39 [ 355.997955][ T188] usb 5-1: unable to get BOS descriptor or descriptor too short [ 356.134828][ T188] usb 5-1: not running at top speed; connect to a high speed hub [ 356.148713][ T5798] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 356.188279][ T188] usb 5-1: string descriptor 0 read error: -22 [ 356.205520][ T188] usb 5-1: New USB device found, idVendor=04b4, idProduct=9320, bcdDevice= 0.40 [ 356.207958][ T7343] udevd[7343]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 356.235826][ T5798] usb 6-1: USB disconnect, device number 4 [ 356.263123][ T188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.306658][ T188] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 356.325030][ T188] usb 5-1: MIDIStreaming interface descriptor not found [ 356.333352][ T9150] fido_id[9150]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 357.511181][ T5618] Bluetooth: hci4: Malformed LE Event: 0x0d [ 358.923243][ T9166] netlink: 76 bytes leftover after parsing attributes in process `syz.5.860'. [ 358.955196][ T5796] usb 5-1: USB disconnect, device number 34 [ 359.125122][ T9173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.862'. [ 359.258782][ T9164] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 359.265389][ T9164] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 359.275132][ T9164] hsr0: entered promiscuous mode [ 359.314748][ T9163] hsr0: left promiscuous mode [ 359.414619][ T9184] input: syz0 as /devices/virtual/input/input37 [ 359.830702][ T9188] netlink: 'syz.4.866': attribute type 6 has an invalid length. [ 360.147388][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 360.147403][ T30] audit: type=1326 audit(1782903870.146:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9195 comm="syz.2.869" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745b79de59 code=0x7ffc0000 [ 360.234989][ T30] audit: type=1326 audit(1782903870.196:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9195 comm="syz.2.869" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745b79de59 code=0x7ffc0000 [ 360.297781][ T30] audit: type=1326 audit(1782903870.196:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9195 comm="syz.2.869" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f745b79de59 code=0x7ffc0000 [ 360.379691][ T30] audit: type=1326 audit(1782903870.196:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9195 comm="syz.2.869" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745b79de59 code=0x7ffc0000 [ 360.464153][ T7517] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 360.506520][ T30] audit: type=1326 audit(1782903870.206:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9195 comm="syz.2.869" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f745b75e68e code=0x7ffc0000 [ 360.974025][ T30] audit: type=1326 audit(1782903870.206:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9195 comm="syz.2.869" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f745b79daeb code=0x7ffc0000 [ 361.000423][ T30] audit: type=1326 audit(1782903870.206:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9195 comm="syz.2.869" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f745b79daeb code=0x7ffc0000 [ 361.027726][ T30] audit: type=1326 audit(1782903870.206:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9195 comm="syz.2.869" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f745b79daeb code=0x7ffc0000 [ 361.036773][ T5606] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 361.089579][ T7517] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 361.114922][ T7517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 361.140454][ T30] audit: type=1326 audit(1782903870.206:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9195 comm="syz.2.869" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f745b79daeb code=0x7ffc0000 [ 361.283365][ T7517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 361.330944][ T7517] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 361.351790][ T9207] netlink: 'syz.3.872': attribute type 6 has an invalid length. [ 361.436324][ T5606] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.444912][ T30] audit: type=1326 audit(1782903870.326:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9195 comm="syz.2.869" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f745b79daeb code=0x7ffc0000 [ 361.496108][ T7517] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 361.507237][ T5606] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 361.599915][ T7517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.630374][ T7517] usb 3-1: config 0 descriptor?? [ 361.641826][ T5606] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 361.677199][ T5606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.867786][ T5606] usb 5-1: config 0 descriptor?? [ 362.092915][ T7517] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 362.388344][ T5618] Bluetooth: hci4: Malformed LE Event: 0x0d [ 362.881729][ T9221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.876'. [ 362.900174][ T9220] kAFS: unable to lookup cell 'ÿ' [ 363.557895][ T5606] usb 5-1: USB disconnect, device number 35 [ 363.874184][ T7517] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 364.123833][ T7517] usb 1-1: Using ep0 maxpacket: 16 [ 364.157469][ T7517] usb 1-1: unable to get BOS descriptor or descriptor too short [ 364.166736][ T7517] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 364.184971][ T7517] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 364.198901][ T7517] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.223314][ T7517] usb 1-1: Product: syz [ 364.233875][ T7517] usb 1-1: Manufacturer: syz [ 364.243485][ T7517] usb 1-1: SerialNumber: syz [ 364.464075][ T5606] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 364.595239][ T7517] snd-ua101 1-1:1.0: invalid num_altsetting [ 364.615536][ T5796] usb 3-1: USB disconnect, device number 31 [ 364.641863][ T7517] usb 1-1: USB disconnect, device number 37 [ 364.749909][ T5606] usb 4-1: unable to get BOS descriptor or descriptor too short [ 364.782061][ T5606] usb 4-1: config 249 has 0 interfaces, different from the descriptor's value: 1 [ 364.785438][ T9242] netlink: 12 bytes leftover after parsing attributes in process `syz.5.884'. [ 364.800099][ T5606] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 2.55 [ 364.800131][ T5606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.800193][ T5606] usb 4-1: Product: syz [ 364.800208][ T5606] usb 4-1: Manufacturer: syz [ 364.800263][ T5606] usb 4-1: SerialNumber: syz [ 364.924809][ T9243] FAULT_INJECTION: forcing a failure. [ 364.924809][ T9243] name failslab, interval 1, probability 0, space 0, times 0 [ 364.938190][ T9243] CPU: 0 UID: 0 PID: 9243 Comm: syz.5.884 Tainted: G L syzkaller #0 PREEMPT(full) [ 364.938217][ T9243] Tainted: [L]=SOFTLOCKUP [ 364.938222][ T9243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 364.938231][ T9243] Call Trace: [ 364.938237][ T9243] [ 364.938242][ T9243] dump_stack_lvl+0x100/0x190 [ 364.938270][ T9243] should_fail_ex.cold+0x5/0xa [ 364.938293][ T9243] should_failslab+0xc2/0x120 [ 364.938313][ T9243] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 364.938335][ T9243] ? __alloc_skb+0x5b7/0x710 [ 364.938352][ T9243] ? __alloc_skb+0x140/0x710 [ 364.938372][ T9243] __alloc_skb+0x140/0x710 [ 364.938388][ T9243] ? __alloc_skb+0x5b7/0x710 [ 364.938404][ T9243] ? __pfx___alloc_skb+0x10/0x10 [ 364.938420][ T9243] ? __pfx_nf_tables_abort+0x10/0x10 [ 364.938447][ T9243] netlink_ack+0x117/0xb80 [ 364.938477][ T9243] nfnetlink_rcv_batch+0x1d52/0x2880 [ 364.938508][ T9243] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 364.938527][ T9243] ? find_held_lock+0x2b/0x80 [ 364.938555][ T9243] ? avc_has_perm_noaudit+0x145/0x3b0 [ 364.938598][ T9243] ? __nla_parse+0x40/0x60 [ 364.938636][ T9243] nfnetlink_rcv+0x3bd/0x440 [ 364.938655][ T9243] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 364.938680][ T9243] netlink_unicast+0x585/0x850 [ 364.938707][ T9243] ? __pfx_netlink_unicast+0x10/0x10 [ 364.938739][ T9243] netlink_sendmsg+0x8b0/0xda0 [ 364.938768][ T9243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.938796][ T9243] ? bpf_lsm_socket_sendmsg+0x4/0x10 [ 364.938825][ T9243] ____sys_sendmsg+0xa4d/0xbe0 [ 364.938847][ T9243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.938874][ T9243] ? __pfx_____sys_sendmsg+0x10/0x10 [ 364.938904][ T9243] ___sys_sendmsg+0x190/0x1e0 [ 364.938929][ T9243] ? __pfx____sys_sendmsg+0x10/0x10 [ 364.938951][ T9243] ? __lock_acquire+0x49f/0x1a40 [ 364.938997][ T9243] __sys_sendmsg+0x160/0x210 [ 364.939016][ T9243] ? __pfx___sys_sendmsg+0x10/0x10 [ 364.939039][ T9243] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 364.939070][ T9243] do_syscall_64+0x115/0x870 [ 364.939095][ T9243] ? clear_bhb_loop+0x40/0x90 [ 364.939115][ T9243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.939132][ T9243] RIP: 0033:0x7efff2b9de59 [ 364.939148][ T9243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.939165][ T9243] RSP: 002b:00007efff3997028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.939183][ T9243] RAX: ffffffffffffffda RBX: 00007efff2e26090 RCX: 00007efff2b9de59 [ 364.939195][ T9243] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 364.939206][ T9243] RBP: 00007efff3997090 R08: 0000000000000000 R09: 0000000000000000 [ 364.939217][ T9243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.939227][ T9243] R13: 00007efff2e26128 R14: 00007efff2e26090 R15: 00007fff9b4d8458 [ 364.939249][ T9243] [ 365.845647][ T5796] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 365.898992][ T5618] Bluetooth: hci3: Malformed LE Event: 0x0d [ 366.229410][ T5606] usb 4-1: USB disconnect, device number 40 [ 366.280983][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 366.280999][ T30] audit: type=1400 audit(1782903876.276:1094): avc: denied { create } for pid=9247 comm="syz.4.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 366.313227][ T5796] usb 5-1: unable to get BOS descriptor or descriptor too short [ 366.349935][ T5796] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 366.362976][ T5796] usb 5-1: can't read configurations, error -71 [ 366.464141][ T5739] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 366.630683][ T9265] efs: cannot read volume header [ 366.715665][ T5739] usb 3-1: Using ep0 maxpacket: 32 [ 366.770988][ T5739] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.833780][ T5739] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 367.003125][ T5739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.084313][ T7517] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 367.101837][ T5739] usb 3-1: Product: syz [ 367.142364][ T5739] usb 3-1: Manufacturer: syz [ 367.183519][ T5739] usb 3-1: SerialNumber: syz [ 367.328037][ T7517] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.391721][ T5739] usb 3-1: config 0 descriptor?? [ 367.408835][ T7517] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 367.482813][ T7517] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 367.583026][ T7517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.793252][ T7517] usb 1-1: config 0 descriptor?? [ 367.809144][ T5739] usb 3-1: USB disconnect, device number 32 [ 367.872272][ T9272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.892'. [ 369.159591][ T9280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.895'. [ 369.286076][ T9284] FAULT_INJECTION: forcing a failure. [ 369.286076][ T9284] name failslab, interval 1, probability 0, space 0, times 0 [ 369.301212][ T9284] CPU: 0 UID: 0 PID: 9284 Comm: syz.2.897 Tainted: G L syzkaller #0 PREEMPT(full) [ 369.301240][ T9284] Tainted: [L]=SOFTLOCKUP [ 369.301246][ T9284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 369.301256][ T9284] Call Trace: [ 369.301262][ T9284] [ 369.301269][ T9284] dump_stack_lvl+0x100/0x190 [ 369.301297][ T9284] should_fail_ex.cold+0x5/0xa [ 369.301320][ T9284] should_failslab+0xc2/0x120 [ 369.301343][ T9284] __kmalloc_noprof+0xfc/0x820 [ 369.301363][ T9284] ? __pfx_dynamic_dname+0x10/0x10 [ 369.301389][ T9284] ? tomoyo_encode2+0xfb/0x3c0 [ 369.301420][ T9284] tomoyo_encode2+0xfb/0x3c0 [ 369.301449][ T9284] tomoyo_encode+0x29/0x50 [ 369.301474][ T9284] tomoyo_realpath_from_path+0x18c/0x690 [ 369.301506][ T9284] tomoyo_path_number_perm+0x23c/0x580 [ 369.301529][ T9284] ? tomoyo_path_number_perm+0x22e/0x580 [ 369.301554][ T9284] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 369.301599][ T9284] ? find_held_lock+0x2b/0x80 [ 369.301617][ T9284] ? __fget_files+0x215/0x3d0 [ 369.301636][ T9284] ? hook_file_ioctl_common+0x140/0x440 [ 369.301655][ T9284] ? __fget_files+0x215/0x3d0 [ 369.301676][ T9284] ? __fget_files+0x21f/0x3d0 [ 369.301696][ T9284] security_file_ioctl+0xd3/0x230 [ 369.301721][ T9284] __x64_sys_ioctl+0xb7/0x210 [ 369.301755][ T9284] do_syscall_64+0x115/0x870 [ 369.301780][ T9284] ? clear_bhb_loop+0x40/0x90 [ 369.301800][ T9284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.301816][ T9284] RIP: 0033:0x7f745b79de59 [ 369.301827][ T9284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.301837][ T9284] RSP: 002b:00007f745c70f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 369.301849][ T9284] RAX: ffffffffffffffda RBX: 00007f745ba25fa0 RCX: 00007f745b79de59 [ 369.301856][ T9284] RDX: 00002000000017c0 RSI: 000000004188aec6 RDI: 0000000000000004 [ 369.301862][ T9284] RBP: 00007f745c70f090 R08: 0000000000000000 R09: 0000000000000000 [ 369.301868][ T9284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.301874][ T9284] R13: 00007f745ba26038 R14: 00007f745ba25fa0 R15: 00007fff9bc3b6b8 [ 369.301888][ T9284] [ 369.301904][ T9284] ERROR: Out of memory at tomoyo_realpath_from_path. [ 369.583841][ T188] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 369.763891][ T188] usb 6-1: Using ep0 maxpacket: 32 [ 369.846144][ T9292] comedi comedi1: pcl812: I/O port conflict (0x100,16) [ 370.318101][ T188] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 370.748155][ T9294] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 370.756121][ T9294] UDF-fs: Scanning with blocksize 512 failed [ 370.815271][ T188] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 370.833433][ T9294] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 370.843500][ T9294] UDF-fs: Scanning with blocksize 1024 failed [ 370.855324][ T9294] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 370.862862][ T9294] UDF-fs: Scanning with blocksize 2048 failed [ 370.872213][ T9294] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 370.879918][ T9294] UDF-fs: Scanning with blocksize 4096 failed [ 371.030271][ T188] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 371.042926][ T188] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 371.084710][ T5606] usb 1-1: USB disconnect, device number 38 [ 371.103089][ T188] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 371.113647][ T188] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.128270][ T188] usb 6-1: Product: syz [ 371.140952][ T188] usb 6-1: Manufacturer: syz [ 371.265827][ T188] usb 6-1: SerialNumber: syz [ 371.307721][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 371.345782][ T9302] kAFS: unable to lookup cell 'ÿ' [ 371.355506][ T188] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input40 [ 371.724803][ T188] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 371.781243][ T188] (id 0x00) [ 371.863923][ T188] rc_core: IR keymap rc-imon-pad not found [ 371.877788][ T188] Registered IR keymap rc-empty [ 371.888364][ T188] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 371.920164][ T188] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 371.969150][ T188] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 371.987789][ T188] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input41 [ 372.023908][ T7517] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 372.036252][ T188] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:5> initialized [ 372.198261][ T7517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.226016][ T9282] imon:vfd_write: invalid payload size [ 372.240785][ T7517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.273025][ T7517] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 372.282393][ T30] audit: type=1400 audit(1782903882.276:1095): avc: denied { write } for pid=9281 comm="syz.5.896" path="socket:[24744]" dev="sockfs" ino=24744 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 372.311490][ T7517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.336595][ T5796] usb 6-1: USB disconnect, device number 5 [ 372.357124][ T7517] usb 1-1: config 0 descriptor?? [ 372.785067][ T7517] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x2 [ 372.898623][ T7517] pyra 0003:1E7D:2CF6.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 373.405296][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.413962][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.427266][ T188] usb 1-1: USB disconnect, device number 39 [ 373.443839][ T5739] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 373.471378][ T9322] fido_id[9322]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 373.553971][ T7517] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 373.638270][ T5739] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.651915][ T5739] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.704583][ T7517] usb 3-1: device descriptor read/64, error -71 [ 373.787705][ T5739] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 373.818391][ T5739] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.915739][ T5739] usb 5-1: config 0 descriptor?? [ 374.046007][ T7517] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 374.083426][ T9331] netlink: 'syz.5.910': attribute type 6 has an invalid length. [ 374.414697][ T7517] usb 3-1: device descriptor read/64, error -71 [ 374.523823][ T9336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.911'. [ 374.545657][ T7517] usb usb3-port1: attempt power cycle [ 374.749461][ T5739] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x2 [ 374.953870][ T7517] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 375.023262][ T5739] pyra 0003:1E7D:2CF6.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 375.075183][ T5812] block nbd1: Possible stuck request ffff888028875080: control (read@0,4096B). Runtime 150 seconds [ 375.086268][ T7517] usb 3-1: device descriptor read/8, error -71 [ 375.394109][ T7517] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 375.458209][ T5739] usb 5-1: USB disconnect, device number 38 [ 375.558571][ T7517] usb 3-1: device descriptor read/8, error -71 [ 375.756824][ T7517] usb usb3-port1: unable to enumerate USB device [ 376.188005][ T9345] netlink: 'syz.0.914': attribute type 1 has an invalid length. [ 376.937027][ T9351] netlink: 20 bytes leftover after parsing attributes in process `syz.5.915'. [ 377.031332][ T9343] fido_id[9343]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 377.072425][ T9345] 8021q: adding VLAN 0 to HW filter on device bond3 [ 377.182782][ T9342] bond3: (slave geneve2): making interface the new active one [ 377.223338][ T9342] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 377.268576][ T5803] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.375716][ T5803] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.397626][ T5803] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.480738][ T9366] overlayfs: missing 'lowerdir' [ 378.443944][ T9374] netlink: 20 bytes leftover after parsing attributes in process `syz.3.921'. [ 378.703887][ T5739] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 378.815020][ T9381] FAULT_INJECTION: forcing a failure. [ 378.815020][ T9381] name failslab, interval 1, probability 0, space 0, times 0 [ 378.835895][ T9381] CPU: 1 UID: 0 PID: 9381 Comm: syz.3.924 Tainted: G L syzkaller #0 PREEMPT(full) [ 378.835925][ T9381] Tainted: [L]=SOFTLOCKUP [ 378.835932][ T9381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 378.835942][ T9381] Call Trace: [ 378.835948][ T9381] [ 378.835955][ T9381] dump_stack_lvl+0x100/0x190 [ 378.835985][ T9381] should_fail_ex.cold+0x5/0xa [ 378.836018][ T9381] should_failslab+0xc2/0x120 [ 378.836042][ T9381] __kmalloc_noprof+0xfc/0x820 [ 378.836063][ T9381] ? ovl_xattr_get+0xfc/0x190 [ 378.836080][ T9381] ? iter_file_splice_write+0x1d8/0x10b0 [ 378.836107][ T9381] iter_file_splice_write+0x1d8/0x10b0 [ 378.836130][ T9381] ? __pfx_ovl_other_xattr_get+0x10/0x10 [ 378.836149][ T9381] ? __pfx___vfs_getxattr+0x10/0x10 [ 378.836169][ T9381] ? bpf_lsm_capable+0x9/0x10 [ 378.836192][ T9381] ? __pfx_iter_file_splice_write+0x10/0x10 [ 378.836216][ T9381] ? __lock_acquire+0x49f/0x1a40 [ 378.836240][ T9381] ? file_remove_privs_flags+0x251/0x590 [ 378.836281][ T9381] backing_file_splice_write+0x27b/0x820 [ 378.836312][ T9381] ovl_splice_write+0x328/0x610 [ 378.836332][ T9381] ? __pfx_ovl_splice_write+0x10/0x10 [ 378.836353][ T9381] ? __pfx_ovl_file_end_write+0x10/0x10 [ 378.836380][ T9381] ? __pfx_ovl_splice_write+0x10/0x10 [ 378.836401][ T9381] direct_splice_actor+0x192/0x690 [ 378.836424][ T9381] splice_direct_to_actor+0x345/0xa30 [ 378.836447][ T9381] ? __pfx_direct_splice_actor+0x10/0x10 [ 378.836472][ T9381] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 378.836498][ T9381] do_splice_direct+0x174/0x240 [ 378.836520][ T9381] ? __pfx_do_splice_direct+0x10/0x10 [ 378.836538][ T9381] ? avc_policy_seqno+0x9/0x20 [ 378.836558][ T9381] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 378.836580][ T9381] ? rw_verify_area+0xce/0x6d0 [ 378.836604][ T9381] do_sendfile+0xadc/0xe20 [ 378.836633][ T9381] ? __pfx_do_sendfile+0x10/0x10 [ 378.836665][ T9381] __x64_sys_sendfile64+0x154/0x220 [ 378.836685][ T9381] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 378.836711][ T9381] do_syscall_64+0x115/0x870 [ 378.836733][ T9381] ? clear_bhb_loop+0x40/0x90 [ 378.836755][ T9381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.836771][ T9381] RIP: 0033:0x7fe97319de59 [ 378.836786][ T9381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.836802][ T9381] RSP: 002b:00007fe973fc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 378.836819][ T9381] RAX: ffffffffffffffda RBX: 00007fe973425fa0 RCX: 00007fe97319de59 [ 378.836831][ T9381] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 378.836841][ T9381] RBP: 00007fe973fc2090 R08: 0000000000000000 R09: 0000000000000000 [ 378.836851][ T9381] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000001 [ 378.836861][ T9381] R13: 00007fe973426038 R14: 00007fe973425fa0 R15: 00007ffccde91b18 [ 378.836885][ T9381] [ 378.865682][ T5739] usb 1-1: Using ep0 maxpacket: 16 [ 379.074090][ T5606] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 379.319936][ T5606] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.336645][ T5606] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.370441][ T5606] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 379.408052][ T5606] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.427660][ T5739] usb 1-1: unable to get BOS descriptor or descriptor too short [ 380.434581][ T5606] usb 3-1: config 0 descriptor?? [ 380.436378][ T5739] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 380.457855][ T5739] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 380.467812][ T5739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.476116][ T5739] usb 1-1: Product: syz [ 380.480920][ T5739] usb 1-1: Manufacturer: syz [ 380.485641][ T5739] usb 1-1: SerialNumber: syz [ 380.706242][ T5739] snd-ua101 1-1:1.0: invalid num_altsetting [ 381.014594][ T5739] usb 1-1: USB disconnect, device number 40 [ 381.043272][ T5606] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x2 [ 381.070149][ T5606] pyra 0003:1E7D:2CF6.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 381.120113][ T7517] usb 3-1: USB disconnect, device number 37 [ 381.180219][ T9393] fido_id[9393]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 382.215849][ T5797] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 382.725737][ T5797] usb 4-1: Using ep0 maxpacket: 8 [ 382.918620][ T5797] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 382.984415][ T5797] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.015970][ T5797] usb 4-1: config 0 has no interface number 0 [ 383.089017][ T5797] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 383.123283][ T5797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.165087][ T5797] usb 4-1: Product: syz [ 383.178621][ T5797] usb 4-1: Manufacturer: syz [ 383.191616][ T5797] usb 4-1: SerialNumber: syz [ 383.197012][ T5798] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 383.311266][ T5606] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 383.367803][ T5797] usb 4-1: config 0 descriptor?? [ 383.436256][ T5797] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 383.446846][ T5798] usb 3-1: Using ep0 maxpacket: 16 [ 383.495438][ T5797] uvcvideo 4-1:0.31: No valid video chain found. [ 383.525054][ T5798] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 383.534257][ T5606] usb 1-1: Using ep0 maxpacket: 16 [ 383.585521][ T5606] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 383.606714][ T5798] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 383.631464][ T5606] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 383.654266][ T5856] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 383.680966][ T5798] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 383.720989][ T5606] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 383.782194][ T5798] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 383.829298][ T5798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.845762][ T5798] usb 3-1: Product: syz [ 383.855443][ T5798] usb 3-1: Manufacturer: syz [ 383.863975][ T5798] usb 3-1: SerialNumber: syz [ 383.897988][ T5798] usb 3-1: 0:2 : does not exist [ 383.904925][ T5856] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 383.918645][ T5606] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 383.929745][ T5606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.946082][ T5856] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 383.966870][ T5606] usb 1-1: Product: syz [ 384.014379][ T5606] usb 1-1: Manufacturer: syz [ 384.020511][ T5606] usb 1-1: SerialNumber: syz [ 384.028210][ T5856] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 384.465924][ T5856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.483161][ T5856] usb 6-1: Product: syz [ 384.492226][ T5856] usb 6-1: Manufacturer: syz [ 384.775839][ T5856] usb 6-1: SerialNumber: syz [ 384.800833][ T5856] usb 6-1: config 0 descriptor?? [ 385.430089][ T5798] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 385.505280][ T5796] usb 4-1: USB disconnect, device number 41 [ 385.529533][ T9419] netlink: 132732 bytes leftover after parsing attributes in process `syz.4.935'. [ 385.540708][ T5606] usb 1-1: 0:2 : does not exist [ 385.561728][ T5798] usb 3-1: USB disconnect, device number 38 [ 385.824699][ T7517] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 386.169271][ T9429] input: syz0 as /devices/virtual/input/input42 [ 386.390085][ T5606] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 386.399837][ T7517] usb 5-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 386.478241][ T5606] usb 1-1: USB disconnect, device number 41 [ 386.485039][ T5856] usb 6-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 386.502444][ T30] audit: type=1400 audit(1782903896.456:1096): avc: denied { connect } for pid=9424 comm="syz.5.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 386.523997][ T7517] usb 5-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.555802][ T7517] usb 5-1: config 2 interface 0 has no altsetting 0 [ 386.571796][ T7517] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 386.634112][ T7517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.372219][ T5856] usb 6-1: USB disconnect, device number 6 [ 387.513855][ T7517] usbhid 5-1:2.0: can't add hid device: -71 [ 387.547327][ T7517] usbhid 5-1:2.0: probe with driver usbhid failed with error -71 [ 387.604710][ T7517] usb 5-1: USB disconnect, device number 39 [ 387.772616][ T30] audit: type=1400 audit(1782903897.766:1097): avc: denied { setopt } for pid=9424 comm="syz.5.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 387.820759][ T9432] syzkaller0: entered promiscuous mode [ 387.828750][ T9432] syzkaller0: entered allmulticast mode [ 387.939250][ T9449] overlayfs: failed to resolve './file0': -2 [ 388.175492][ T9453] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[9454] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[9453] [ 388.303928][ T5856] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 388.465629][ T5856] usb 3-1: Using ep0 maxpacket: 16 [ 388.485872][ T5856] usb 3-1: config 4 has an invalid interface number: 51 but max is 0 [ 388.504968][ T5856] usb 3-1: config 4 has no interface number 0 [ 388.533210][ T5856] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 388.557805][ T5856] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 388.591403][ T5856] usb 3-1: config 4 interface 51 has no altsetting 0 [ 388.609164][ T5856] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 388.623882][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.658693][ T5856] usb 3-1: Product: syz [ 388.667604][ T5856] usb 3-1: Manufacturer: syz [ 388.678141][ T5856] usb 3-1: SerialNumber: syz [ 388.711617][ T9451] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 388.731287][ T9451] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 389.474315][ T9443] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 389.540011][ T5856] cdc_eem 3-1:4.51: probe with driver cdc_eem failed with error -71 [ 389.685122][ T5856] usb 3-1: USB disconnect, device number 39 [ 389.977810][ T9475] netlink: 76 bytes leftover after parsing attributes in process `syz.0.946'. [ 392.497988][ T9475] hsr0: entered promiscuous mode [ 392.512826][ T9475] hsr0: left promiscuous mode [ 393.220394][ T9498] netlink: 'syz.2.952': attribute type 1 has an invalid length. [ 393.433708][ T188] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 393.968635][ T188] usb 6-1: Using ep0 maxpacket: 8 [ 394.122229][ T188] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 394.206807][ T188] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.275920][ T188] usb 6-1: config 0 has no interface number 0 [ 394.345883][ T9498] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 394.416419][ T9503] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 394.502904][ T188] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 394.567963][ T188] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.622720][ T188] usb 6-1: Product: syz [ 394.669296][ T188] usb 6-1: Manufacturer: syz [ 394.715150][ T188] usb 6-1: SerialNumber: syz [ 394.892208][ T188] usb 6-1: config 0 descriptor?? [ 395.010558][ T188] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 395.033303][ T188] uvcvideo 6-1:0.31: No valid video chain found. [ 395.309549][ T5606] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 395.864017][ T5606] usb 3-1: Using ep0 maxpacket: 32 [ 396.113224][ T5606] usb 3-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice= 0.40 [ 396.129289][ T9520] overlayfs: failed to resolve './file1': -2 [ 396.138950][ T5606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.159124][ T5606] usb 3-1: Product: syz [ 396.168523][ T5606] usb 3-1: Manufacturer: syz [ 396.179690][ T5606] usb 3-1: SerialNumber: syz [ 396.410918][ T5606] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 396.424973][ T5606] usb 3-1: unit 5 not found! [ 396.492563][ T5606] usb 3-1: USB disconnect, device number 40 [ 396.577201][ T7516] usb 6-1: USB disconnect, device number 7 [ 396.583087][ T188] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 396.943888][ T188] usb 1-1: Using ep0 maxpacket: 16 [ 396.954473][ T188] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 396.973675][ T188] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.996964][ T188] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 397.146111][ T9532] netlink: 20 bytes leftover after parsing attributes in process `syz.2.960'. [ 397.295470][ T188] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 397.313805][ T188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.327340][ T188] usb 1-1: Product: syz [ 397.339177][ T188] usb 1-1: Manufacturer: syz [ 397.357766][ T188] usb 1-1: SerialNumber: syz [ 397.387585][ T188] usb 1-1: 0:2 : does not exist [ 398.473834][ T5606] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 399.180001][ T5606] usb 6-1: Using ep0 maxpacket: 32 [ 399.260042][ T5606] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 65, changing to 7 [ 399.271328][ T5606] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 399.286308][ T5606] usb 6-1: New USB device found, idVendor=0763, idProduct=1033, bcdDevice= 0.40 [ 399.296125][ T5606] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.307396][ T5606] usb 6-1: Product: syz [ 399.311986][ T5606] usb 6-1: Manufacturer: syz [ 399.316709][ T5606] usb 6-1: SerialNumber: syz [ 399.322932][ T188] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 399.535490][ T188] usb 1-1: USB disconnect, device number 42 [ 400.148286][ T7300] udevd[7300]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 400.566774][ T5606] usb 6-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 400.594277][ T5606] usb 6-1: incorrect wMaxPacketSize 0x200 for BADD profile [ 400.604323][ T5798] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 400.791624][ T5798] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.948096][ T5798] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 400.958611][ T5606] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 400.973139][ T5798] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 400.990372][ T5606] usb 6-1: USB disconnect, device number 8 [ 400.998913][ T5798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.009986][ T5798] usb 1-1: Product: syz [ 401.017225][ T5798] usb 1-1: Manufacturer: syz [ 401.024768][ T5798] usb 1-1: SerialNumber: syz [ 401.037724][ T7300] udevd[7300]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 401.093278][ T5798] usb 1-1: config 0 descriptor?? [ 401.224024][ T5725] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 401.298502][ T9567] netlink: 132732 bytes leftover after parsing attributes in process `syz.4.969'. [ 401.399900][ T5725] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 401.488650][ T5725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.863854][ T5796] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 401.971515][ T5725] usb 4-1: config 0 descriptor?? [ 402.514907][ T5725] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 402.955238][ T5796] usb 5-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 403.264511][ T5796] usb 5-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.275380][ T5796] usb 5-1: config 2 interface 0 has no altsetting 0 [ 403.283654][ T5796] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 403.311241][ T5796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.325552][ T5725] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 403.325579][ T5725] [drm] Initialized udl on minor 2 [ 403.417794][ T5856] usb 1-1: USB disconnect, device number 43 [ 403.480034][ T5725] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 403.506711][ T30] audit: type=1400 audit(1782903913.506:1098): avc: denied { listen } for pid=9580 comm="syz.0.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 403.549979][ T5725] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 403.685199][ T5798] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 403.685423][ T188] usb 4-1: USB disconnect, device number 42 [ 403.717464][ T5798] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 403.749205][ T5796] elo 0003:04E7:0009.0019: unknown main item tag 0x0 [ 403.804914][ T5796] elo 0003:04E7:0009.0019: unknown main item tag 0x0 [ 403.812587][ T5796] elo 0003:04E7:0009.0019: item fetching failed at offset 4/5 [ 403.853636][ T5796] elo 0003:04E7:0009.0019: parse failed [ 403.861022][ T5796] elo 0003:04E7:0009.0019: probe with driver elo failed with error -22 [ 403.955183][ T5796] usb 5-1: USB disconnect, device number 40 [ 404.154312][ T7516] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 404.522669][ T9592] netlink: 20 bytes leftover after parsing attributes in process `syz.3.974'. [ 404.595229][ T7516] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 404.607296][ T7516] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 404.620555][ T7516] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 404.630495][ T7516] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.763890][ T5796] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 404.872099][ T7516] usb 1-1: usb_control_msg returned -32 [ 404.878619][ T7516] usbtmc 1-1:16.0: can't read capabilities [ 405.114141][ T5796] usb 6-1: Using ep0 maxpacket: 8 [ 405.119366][ T188] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 405.757468][ T10] block nbd1: Possible stuck request ffff888028875080: control (read@0,4096B). Runtime 180 seconds [ 405.934011][ T188] usb 3-1: Using ep0 maxpacket: 16 [ 405.947804][ T188] usb 3-1: config 4 has an invalid interface number: 51 but max is 0 [ 405.988102][ T188] usb 3-1: config 4 has no interface number 0 [ 405.999229][ T188] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 406.011064][ T188] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 406.022672][ T188] usb 3-1: config 4 interface 51 has no altsetting 0 [ 406.041553][ T188] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 406.094666][ T188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.102914][ T188] usb 3-1: Product: syz [ 406.111646][ T188] usb 3-1: Manufacturer: syz [ 406.118008][ T188] usb 3-1: SerialNumber: syz [ 406.187012][ T9596] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 406.201940][ T9596] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 406.234354][ T5796] usb 6-1: unable to get BOS descriptor or descriptor too short [ 406.413947][ T5856] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 406.422815][ T9596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.976'. [ 406.433263][ T5796] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 406.444356][ T5796] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 406.454556][ T5796] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 406.465843][ T5796] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 406.476497][ T5796] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 406.487536][ T5796] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 44 [ 406.499704][ T5796] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 406.517657][ T5796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.172386][ T5796] usb 6-1: Product: syz [ 407.177007][ T5796] usb 6-1: Manufacturer: syz [ 407.181629][ T5796] usb 6-1: SerialNumber: syz [ 407.191703][ T5796] usb 6-1: config 0 descriptor?? [ 407.197738][ T9591] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 407.205447][ T9591] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 407.216499][ T5796] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 407.219424][ T7516] usb 1-1: USB disconnect, device number 44 [ 407.301643][ T188] cdc_eem 3-1:4.51: probe with driver cdc_eem failed with error -71 [ 407.312768][ T5856] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 407.339069][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.379819][ T188] usb 3-1: USB disconnect, device number 41 [ 407.415975][ T5856] usb 5-1: Product: syz [ 407.449465][ T5856] usb 5-1: Manufacturer: syz [ 407.514417][ T5856] usb 5-1: SerialNumber: syz [ 407.775053][ T5856] usb 5-1: config 0 descriptor?? [ 407.808150][ T5856] usb 5-1: can't set config #0, error -71 [ 407.829756][ T5796] usb 6-1: USB disconnect, device number 9 [ 407.845295][ T5856] usb 5-1: USB disconnect, device number 41 [ 408.082804][ T9620] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 408.096363][ T30] audit: type=1400 audit(1782903918.096:1099): avc: denied { create } for pid=9623 comm="syz.2.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 408.151693][ T30] audit: type=1400 audit(1782903918.126:1100): avc: denied { sys_admin } for pid=9623 comm="syz.2.986" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 408.220928][ T9624] fuse: Bad value for 'fd' [ 408.239018][ T9630] netlink: 132732 bytes leftover after parsing attributes in process `syz.3.988'. [ 408.273950][ T5796] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 408.423941][ T5856] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 408.434597][ T5796] usb 6-1: Using ep0 maxpacket: 16 [ 408.446432][ T5796] usb 6-1: unable to get BOS descriptor or descriptor too short [ 408.462944][ T5796] usb 6-1: config 1 has an invalid interface number: 237 but max is 0 [ 408.475345][ T5796] usb 6-1: config 1 has no interface number 0 [ 408.492385][ T5796] usb 6-1: config 1 interface 237 has no altsetting 0 [ 408.501418][ T5796] usb 6-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=87.ed [ 408.515508][ T5796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.531186][ T5796] usb 6-1: Product: syz [ 408.540115][ T5796] usb 6-1: Manufacturer: syz [ 408.546402][ T5796] usb 6-1: SerialNumber: syz [ 408.597463][ T5856] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 408.608271][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.623930][ T5856] usb 1-1: Product: syz [ 408.629873][ T5856] usb 1-1: Manufacturer: syz [ 408.637740][ T5856] usb 1-1: SerialNumber: syz [ 408.649492][ T5856] usb 1-1: config 0 descriptor?? [ 409.000848][ T9638] netlink: 'syz.4.990': attribute type 10 has an invalid length. [ 409.020061][ T9637] netlink: 'syz.4.990': attribute type 10 has an invalid length. [ 409.055618][ T9638] team0: Device veth0_vlan failed to register rx_handler [ 409.073384][ T5856] usb 1-1: Firmware: major: 229, minor: 0, hardware type: ATUSB (0) [ 409.147853][ T9637] team0: Device veth0_vlan failed to register rx_handler [ 409.284403][ T9628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.314823][ T9628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.468064][ T5856] usb 1-1: failed to fetch extended address, random address set [ 411.620986][ T7516] usb 1-1: USB disconnect, device number 45 [ 411.734843][ T30] audit: type=1400 audit(1782903921.736:1101): avc: denied { ioctl } for pid=9661 comm="syz.0.994" path="socket:[25443]" dev="sockfs" ino=25443 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 411.988849][ T9672] netlink: 52 bytes leftover after parsing attributes in process `syz.2.998'. [ 412.016292][ T9674] netlink: 104 bytes leftover after parsing attributes in process `syz.0.999'. [ 412.171823][ T5796] ipaq 6-1:1.237: PocketPC PDA converter detected [ 412.196413][ T5796] ipaq 6-1:1.237: probe with driver ipaq failed with error -71 [ 412.219863][ T5796] usb 6-1: USB disconnect, device number 10 [ 413.932291][ T9733] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 414.050652][ T9739] IPv6: Can't replace route, no match found [ 414.713870][ T5798] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 415.988903][ T5798] usb 1-1: Using ep0 maxpacket: 8 [ 416.005688][ T5798] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 416.013877][ T5798] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.116976][ T5798] usb 1-1: config 0 has no interface number 0 [ 416.129410][ T5798] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 416.145175][ T5798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.153554][ T5798] usb 1-1: Product: syz [ 416.158432][ T5798] usb 1-1: Manufacturer: syz [ 416.163091][ T5798] usb 1-1: SerialNumber: syz [ 416.176640][ T5798] usb 1-1: config 0 descriptor?? [ 416.185831][ T5798] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 416.193084][ T5798] uvcvideo 1-1:0.31: No valid video chain found. [ 416.603570][ T9779] netlink: 'syz.5.1046': attribute type 6 has an invalid length. [ 417.212995][ T9783] overlayfs: failed to resolve './file1': -2 [ 417.837309][ T9785] x_tables: duplicate underflow at hook 4 [ 418.964133][ T5798] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 419.132949][ T5798] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 419.142740][ T5798] usb 4-1: can't read configurations, error -61 [ 419.274055][ T5798] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 419.351995][ T5739] usb 1-1: USB disconnect, device number 46 [ 419.459151][ T5798] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 419.504741][ T5798] usb 4-1: can't read configurations, error -61 [ 419.539887][ T9804] netlink: 132732 bytes leftover after parsing attributes in process `syz.0.1055'. [ 419.544519][ T5798] usb usb4-port1: attempt power cycle [ 419.924049][ T5798] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 419.950685][ T9814] x_tables: duplicate underflow at hook 4 [ 419.977327][ T5798] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 420.009289][ T30] audit: type=1400 audit(1782903930.006:1102): avc: denied { connect } for pid=9813 comm="syz.4.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 420.046440][ T5798] usb 4-1: can't read configurations, error -61 [ 420.130637][ T30] audit: type=1400 audit(1782903930.076:1103): avc: denied { write } for pid=9813 comm="syz.4.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 420.224113][ T5798] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 420.242983][ T30] audit: type=1400 audit(1782903930.236:1104): avc: denied { relabelfrom } for pid=9819 comm="syz.0.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 420.321501][ T5798] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 420.336756][ T30] audit: type=1400 audit(1782903930.246:1105): avc: denied { relabelto } for pid=9819 comm="syz.0.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 420.360685][ T5798] usb 4-1: can't read configurations, error -61 [ 420.396252][ T5798] usb usb4-port1: unable to enumerate USB device [ 420.854231][ T5798] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 421.657097][ T5798] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 422.006199][ T5798] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 422.015609][ T5798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.027291][ T5798] usb 1-1: config 0 descriptor?? [ 422.038855][ T5798] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 422.365768][ T9845] 9p: Bad value for 'rfdno' [ 422.386330][ T30] audit: type=1400 audit(1782903932.356:1106): avc: denied { mount } for pid=9842 comm="syz.3.1068" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 422.645744][ T30] audit: type=1800 audit(1782903932.646:1107): pid=9847 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1065" name="file0" dev="overlay" ino=1239 res=0 errno=0 [ 423.091573][ T30] audit: type=1400 audit(1782903933.086:1108): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 423.131608][ T5618] Bluetooth: hci5: Malformed LE Event: 0x0d [ 423.274181][ T30] audit: type=1400 audit(1782903933.216:1109): avc: denied { write } for pid=9852 comm="syz.3.1070" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 423.515309][ T30] audit: type=1400 audit(1782903933.216:1110): avc: denied { open } for pid=9852 comm="syz.3.1070" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 423.603902][ T3105] usb 1-1: USB disconnect, device number 47 [ 423.702991][ T30] audit: type=1400 audit(1782903933.226:1111): avc: denied { ioctl } for pid=9852 comm="syz.3.1070" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 423.792845][ T9861] netlink: 132732 bytes leftover after parsing attributes in process `syz.0.1071'. [ 423.876214][ T9864] x_tables: duplicate underflow at hook 4 [ 424.023936][ T5739] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 424.063996][ T188] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 424.532458][ T5739] usb 6-1: Using ep0 maxpacket: 8 [ 424.712799][ T9881] netlink: 'syz.3.1078': attribute type 7 has an invalid length. [ 424.893351][ T188] usb 1-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 424.971759][ T9884] netlink: 'syz.2.1079': attribute type 6 has an invalid length. [ 427.191784][ T188] usb 1-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.338452][ T188] usb 1-1: config 2 interface 0 has no altsetting 0 [ 427.427128][ T188] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 427.523097][ T188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.678571][ T5739] usb 6-1: unable to get BOS descriptor or descriptor too short [ 427.815541][ T5739] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 427.863309][ T188] usb 1-1: can't set config #2, error -71 [ 427.942923][ T5739] usb 6-1: can't read configurations, error -71 [ 428.061817][ T188] usb 1-1: USB disconnect, device number 48 [ 428.126186][ T9892] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1081'. [ 428.164536][ T9892] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 428.171040][ T9892] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 428.187742][ T9892] hsr0: entered promiscuous mode [ 428.205885][ T9891] hsr0: left promiscuous mode [ 428.365243][ T3105] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 428.464980][ T30] audit: type=1326 audit(1782903938.466:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.2.1090" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745b79de59 code=0x7ffc0000 [ 428.492554][ T5739] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 428.500817][ T30] audit: type=1326 audit(1782903938.466:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.2.1090" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745b79de59 code=0x7ffc0000 [ 428.525047][ T3105] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 428.528098][ T30] audit: type=1326 audit(1782903938.466:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.2.1090" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f745b79de59 code=0x7ffc0000 [ 428.566724][ T3105] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 428.567286][ T30] audit: type=1326 audit(1782903938.466:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.2.1090" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745b79de59 code=0x7ffc0000 [ 428.603948][ T3105] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.607367][ T188] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 428.620063][ T30] audit: type=1326 audit(1782903938.466:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.2.1090" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f745b79daeb code=0x7ffc0000 [ 428.621094][ T3105] usb 5-1: config 0 descriptor?? [ 428.648101][ T30] audit: type=1326 audit(1782903938.466:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.2.1090" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745b79de59 code=0x7ffc0000 [ 428.663966][ T3105] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 428.679668][ T30] audit: type=1326 audit(1782903938.466:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.2.1090" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f745b79daeb code=0x7ffc0000 [ 428.713537][ T30] audit: type=1326 audit(1782903938.466:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.2.1090" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745b79de59 code=0x7ffc0000 [ 428.740243][ T5739] usb 6-1: Using ep0 maxpacket: 8 [ 428.749896][ T5739] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 428.758144][ T5739] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.769584][ T5739] usb 6-1: config 0 has no interface number 0 [ 428.779094][ T30] audit: type=1326 audit(1782903938.466:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.2.1090" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f745b79daeb code=0x7ffc0000 [ 428.808990][ T30] audit: type=1326 audit(1782903938.466:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.2.1090" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745b79de59 code=0x7ffc0000 [ 428.852594][ T188] usb 1-1: Using ep0 maxpacket: 16 [ 428.860207][ T188] usb 1-1: unable to get BOS descriptor or descriptor too short [ 428.875455][ T5739] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 428.884869][ T5739] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.900000][ T5739] usb 6-1: Product: syz [ 428.907063][ T5739] usb 6-1: Manufacturer: syz [ 428.912105][ T5739] usb 6-1: SerialNumber: syz [ 428.917562][ T188] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 428.930736][ T188] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 428.940091][ T188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.959662][ T5739] usb 6-1: config 0 descriptor?? [ 428.965327][ T188] usb 1-1: Product: syz [ 428.969717][ T188] usb 1-1: Manufacturer: syz [ 429.002613][ T5739] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 429.010399][ T5739] uvcvideo 6-1:0.31: No valid video chain found. [ 429.016884][ T188] usb 1-1: SerialNumber: syz [ 429.557610][ T188] snd-ua101 1-1:1.0: invalid num_altsetting [ 429.574614][ T188] usb 1-1: USB disconnect, device number 49 [ 430.033301][ T5618] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 430.303823][ T5798] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 430.454059][ T5798] usb 1-1: Using ep0 maxpacket: 8 [ 430.464959][ T5798] usb 1-1: unable to get BOS descriptor or descriptor too short [ 430.475319][ T5798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 430.495531][ T5798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 430.542972][ T9966] 9p: Bad value for 'rfdno' [ 430.592173][ T5798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 430.643595][ T5798] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 430.655788][ T5798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 430.667644][ T5798] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 44 [ 430.690093][ T5798] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 430.700491][ T5798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.711681][ T5798] usb 1-1: Product: syz [ 430.724865][ T5798] usb 1-1: Manufacturer: syz [ 430.729757][ T5798] usb 1-1: SerialNumber: syz [ 430.739769][ T5798] usb 1-1: config 0 descriptor?? [ 430.749803][ T9945] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 430.758592][ T9945] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 430.771371][ T5798] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 431.186579][ T188] usb 5-1: USB disconnect, device number 42 [ 431.238161][ T5798] usb 6-1: USB disconnect, device number 12 [ 431.351902][ T9980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1095'. [ 431.975245][ T9987] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1098'. [ 431.986120][ T9987] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 431.992544][ T9987] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 432.270534][ T9991] hsr0: entered promiscuous mode [ 432.678287][ T9982] hsr0: left promiscuous mode [ 433.663637][ T5856] usb 1-1: USB disconnect, device number 50 [ 433.867078][T10006] netlink: 'syz.2.1105': attribute type 6 has an invalid length. [ 434.234406][ T5856] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 434.282454][T10013] 9p: Bad value for 'rfdno' [ 434.574273][ T3105] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 434.595057][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.601591][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.664165][ T5856] usb 1-1: Using ep0 maxpacket: 16 [ 434.670585][ T5856] usb 1-1: config 4 has an invalid interface number: 51 but max is 0 [ 434.678875][ T5856] usb 1-1: config 4 has no interface number 0 [ 434.685798][ T5856] usb 1-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 434.695916][ T5856] usb 1-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 434.707481][ T5856] usb 1-1: config 4 interface 51 has no altsetting 0 [ 434.719328][ T5856] usb 1-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 434.728625][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.738079][ T5856] usb 1-1: Product: syz [ 434.743488][ T3105] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.758750][ T5856] usb 1-1: Manufacturer: syz [ 434.764241][ T3105] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 434.773400][ T5856] usb 1-1: SerialNumber: syz [ 434.780885][ T3105] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.789970][T10004] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 434.797500][T10004] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 434.807539][ T3105] usb 6-1: config 0 descriptor?? [ 434.819208][ T3105] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 435.152238][T10004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1104'. [ 435.941884][ T5812] block nbd1: Possible stuck request ffff888028875080: control (read@0,4096B). Runtime 210 seconds [ 436.169873][ T5856] cdc_eem 1-1:4.51: probe with driver cdc_eem failed with error -71 [ 436.353381][ T5856] usb 1-1: USB disconnect, device number 51 [ 437.360963][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 437.361011][ T30] audit: type=1400 audit(1782903946.996:1131): avc: denied { read append } for pid=10029 comm="syz.3.1111" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 437.436994][T10035] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1112'. [ 437.481514][T10035] hsr0: entered promiscuous mode [ 437.658437][ T188] usb 6-1: USB disconnect, device number 13 [ 438.091753][T10032] hsr0: left promiscuous mode [ 438.602884][T10045] netlink: 132732 bytes leftover after parsing attributes in process `syz.0.1116'. [ 440.265513][T10063] netlink: 'syz.3.1121': attribute type 6 has an invalid length. [ 440.415143][ T188] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 440.471158][ T5618] Bluetooth: hci4: Malformed LE Event: 0x0d [ 440.584527][ T188] usb 1-1: Using ep0 maxpacket: 16 [ 440.599119][ T188] usb 1-1: config 4 has an invalid interface number: 51 but max is 0 [ 440.646935][ T188] usb 1-1: config 4 has no interface number 0 [ 440.689988][ T188] usb 1-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 440.815751][ T188] usb 1-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 440.838812][ T188] usb 1-1: config 4 interface 51 has no altsetting 0 [ 441.283532][ T188] usb 1-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 441.302414][ T188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.320970][ T5798] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 441.323088][ T188] usb 1-1: Product: syz [ 441.337637][ T188] usb 1-1: Manufacturer: syz [ 441.342444][ T188] usb 1-1: SerialNumber: syz [ 441.357973][T10060] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 441.365465][T10060] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 441.485372][ T5798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.514146][ T5798] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 441.596449][T10060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1122'. [ 441.616845][ T5798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.655062][ T5798] usb 4-1: config 0 descriptor?? [ 441.669239][ T30] audit: type=1326 audit(1782903951.656:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10083 comm="syz.2.1127" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745b79de59 code=0x7ffc0000 [ 441.702935][ T5798] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 441.766681][ T30] audit: type=1326 audit(1782903951.656:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10083 comm="syz.2.1127" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f745b75e68e code=0x7ffc0000 [ 441.826356][ T30] audit: type=1326 audit(1782903951.656:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10083 comm="syz.2.1127" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745b79de59 code=0x7ffc0000 [ 441.893266][ T30] audit: type=1326 audit(1782903951.656:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10083 comm="syz.2.1127" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745b79de59 code=0x7ffc0000 [ 441.935299][ T188] cdc_eem 1-1:4.51: probe with driver cdc_eem failed with error -71 [ 441.965783][ T188] usb 1-1: USB disconnect, device number 52 [ 441.986455][ T30] audit: type=1326 audit(1782903951.656:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10083 comm="syz.2.1127" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f745b79daeb code=0x7ffc0000 [ 442.047225][ T30] audit: type=1326 audit(1782903951.656:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10083 comm="syz.2.1127" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745b79de59 code=0x7ffc0000 [ 442.075875][ T30] audit: type=1326 audit(1782903951.656:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10083 comm="syz.2.1127" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745b79de59 code=0x7ffc0000 [ 442.105214][ T30] audit: type=1326 audit(1782903951.656:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10083 comm="syz.2.1127" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f745b79daeb code=0x7ffc0000 [ 442.134196][ T30] audit: type=1326 audit(1782903951.656:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10083 comm="syz.2.1127" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745b79de59 code=0x7ffc0000 [ 443.017549][ T5798] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 443.184225][ T5798] usb 5-1: Using ep0 maxpacket: 16 [ 443.374691][ T5798] usb 5-1: unable to get BOS descriptor or descriptor too short [ 443.396568][ T5798] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 443.439060][ T5798] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 443.450508][ T5798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.458848][ T5798] usb 5-1: Product: syz [ 443.463193][ T5798] usb 5-1: Manufacturer: syz [ 443.482257][ T5798] usb 5-1: SerialNumber: syz [ 443.554052][ T31] INFO: task syz.1.692:8498 blocked for more than 143 seconds. [ 443.562039][ T31] Tainted: G L syzkaller #0 [ 443.577749][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 443.989108][ T31] task:syz.1.692 state:D stack:28664 pid:8498 tgid:8497 ppid:5612 task_flags:0x400140 flags:0x00080002 [ 444.001130][ T31] Call Trace: [ 444.004465][ T31] [ 444.007422][ T31] __schedule+0x125c/0x6730 [ 444.011971][ T31] ? __pfx___schedule+0x10/0x10 [ 444.016920][ T31] ? find_held_lock+0x2b/0x80 [ 444.021691][ T31] ? schedule+0x225/0x2c0 [ 444.026132][ T31] schedule+0xdd/0x2c0 [ 444.030280][ T31] schedule_preempt_disabled+0x13/0x30 [ 444.035784][ T31] __mutex_lock+0xccc/0x1bd0 [ 444.040398][ T31] ? bdev_open+0xa2/0xe40 [ 444.044791][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 444.049846][ T31] ? bd_prepare_to_claim+0x1e0/0x280 [ 444.056095][ T31] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 444.193938][ T31] ? file_init_path+0x48e/0x670 [ 444.198890][ T31] ? bdev_open+0xa2/0xe40 [ 444.203238][ T31] bdev_open+0xa2/0xe40 [ 444.207513][ T31] ? iput+0x3a/0x40 [ 444.211361][ T31] bdev_file_open_by_dev+0x179/0x210 [ 444.216810][ T31] setup_bdev_super+0x385/0x730 [ 444.221750][ T31] get_tree_bdev_flags+0x363/0x620 [ 444.226969][ T31] ? __pfx_vfat_fill_super+0x10/0x10 [ 444.232301][ T31] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 444.238009][ T31] ? cap_capable+0x107/0x430 [ 444.242628][ T31] ? bpf_lsm_capable+0x9/0x10 [ 444.247443][ T31] ? security_capable+0x80/0x260 [ 444.311737][ T31] vfs_get_tree+0x92/0x320 [ 444.316284][ T31] path_mount+0x7d0/0x23d0 [ 444.320838][ T31] ? __pfx_path_mount+0x10/0x10 [ 444.327805][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 444.333328][ T31] ? putname+0xb1/0x110 [ 444.333368][ T5796] usb 4-1: USB disconnect, device number 47 [ 444.337568][ T31] ? kmem_cache_free+0x127/0x6b0 [ 444.337608][ T31] ? __x64_sys_mount+0x293/0x310 [ 444.337629][ T31] __x64_sys_mount+0x293/0x310 [ 444.337654][ T31] ? __pfx___x64_sys_mount+0x10/0x10 [ 444.337676][ T31] ? kcov_ioctl+0x17a/0x750 [ 444.337704][ T31] do_syscall_64+0x115/0x870 [ 444.337730][ T31] ? clear_bhb_loop+0x40/0x90 [ 444.337751][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.337769][ T31] RIP: 0033:0x7fa46859de59 [ 444.337785][ T31] RSP: 002b:00007fa4693e0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 444.337804][ T31] RAX: ffffffffffffffda RBX: 00007fa468825fa0 RCX: 00007fa46859de59 [ 444.337817][ T31] RDX: 0000200000000140 RSI: 0000200000000000 RDI: 00002000000000c0 [ 444.337829][ T31] RBP: 00007fa468633e6f R08: 0000000000000000 R09: 0000000000000000 [ 444.337841][ T31] R10: 0000000000208000 R11: 0000000000000246 R12: 0000000000000000 [ 444.337851][ T31] R13: 00007fa468826038 R14: 00007fa468825fa0 R15: 00007ffd449fe028 [ 444.337876][ T31] [ 444.337923][ T31] [ 444.337923][ T31] Showing all locks held in the system: [ 444.337934][ T31] 1 lock held by khungtaskd/31: [ 444.337944][ T31] #0: ffffffff8e9e60c0 ( [ 444.344037][ T5856] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 444.348781][ T31] rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 444.348834][ T31] 5 locks held by kworker/u8:3/48: [ 444.348873][ T31] 2 locks held by getty/5363: [ 444.382801][ T5798] snd-ua101 5-1:1.0: invalid num_altsetting [ 444.704768][ T5856] usb 6-1: Using ep0 maxpacket: 16 [ 444.727411][ T5856] usb 6-1: unable to get BOS descriptor or descriptor too short [ 444.742967][ T5856] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 444.766485][ T5856] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 444.783173][ T5856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.798664][ T5856] usb 6-1: Product: syz [ 444.817447][ T5798] usb 5-1: USB disconnect, device number 43 [ 444.831362][ T5856] usb 6-1: Manufacturer: syz [ 444.837559][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 444.940496][ T5856] usb 6-1: SerialNumber: syz [ 445.756051][ T31] #0: ffff888036faa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 445.766192][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 445.776464][ T31] 1 lock held by syz-executor/5591: [ 445.779546][ T5856] snd-ua101 6-1:1.0: invalid num_altsetting [ 445.781698][ T31] #0: ffff8880b843b520 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 445.798378][ T31] 1 lock held by syz-executor/5605: [ 445.804316][ T31] #0: ffffffff8e9f1b68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 445.814405][ T31] 3 locks held by kworker/1:7/5798: [ 445.819609][ T31] 6 locks held by kworker/u8:9/5803: [ 445.824934][ T31] 3 locks held by kworker/u8:11/5821: [ 445.830320][ T31] #0: ffff888036f86140 ((wq_completion)udp_tunnel_nic){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 445.841537][ T31] #1: ffffc90004c57d08 ((work_completion)(&utn->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 445.850384][ T5856] usb 6-1: USB disconnect, device number 14 [ 445.852677][ T31] #2: ffffffff9083eac0 (rtnl_mutex){+.+.}-{4:4}, at: udp_tunnel_nic_device_sync_work+0x27/0xa50 [ 445.869460][ T31] 3 locks held by kworker/1:8/5856: [ 445.874758][ T31] 2 locks held by udevd/7291: [ 445.879445][ T31] 2 locks held by udevd/7300: [ 445.884174][ T31] 1 lock held by udevd/7342: [ 445.888895][ T31] #0: ffff8880287ca350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 445.899822][ T31] 2 locks held by syz.1.692/8498: [ 445.905029][ T31] #0: ffff8880567fe0d8 (&type->s_umount_key#89/1){+.+.}-{4:4}, at: sget_fc+0x3c8/0x1d80 [ 445.915193][ T31] #1: ffff8880287ca350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 445.924705][ T31] 3 locks held by syz.0.1135/10111: [ 445.929926][ T31] #0: ffffffff90fbf9a8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 445.939874][ T31] #1: ffffffff9083eac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380 [ 445.949204][ T31] #2: ffffffff8e9f1b68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 445.959482][ T31] 2 locks held by syz.0.1135/10112: [ 445.964884][ T31] #0: ffffffff90fbf9a8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 445.974700][ T31] #1: ffffffff9083eac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380 [ 445.984039][ T31] 3 locks held by syz.0.1135/10113: [ 445.989247][ T31] #0: ffffffff908ed368 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 445.998620][ T31] #1: ffffffff908ed420 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 446.007867][ T31] #2: ffffffff9083eac0 (rtnl_mutex){+.+.}-{4:4}, at: nl802154_pre_doit+0x689/0xd10 [ 446.017661][ T31] [ 446.033927][ T31] ============================================= [ 446.033927][ T31] [ 446.050339][ T31] NMI backtrace for cpu 0 [ 446.050354][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 446.050377][ T31] Tainted: [L]=SOFTLOCKUP [ 446.050383][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 446.050394][ T31] Call Trace: [ 446.050399][ T31] [ 446.050406][ T31] dump_stack_lvl+0x100/0x190 [ 446.050435][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 446.050461][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 446.050486][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 446.050511][ T31] sys_info+0x141/0x190 [ 446.050529][ T31] watchdog+0xcb1/0x1030 [ 446.050555][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 446.050578][ T31] ? __pfx_watchdog+0x10/0x10 [ 446.050600][ T31] ? __kthread_parkme+0x18c/0x230 [ 446.050627][ T31] ? kthread+0x13a/0x450 [ 446.050642][ T31] ? __pfx_watchdog+0x10/0x10 [ 446.050661][ T31] kthread+0x370/0x450 [ 446.050678][ T31] ? __pfx_kthread+0x10/0x10 [ 446.050695][ T31] ret_from_fork+0x72b/0xd50 [ 446.050722][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 446.050748][ T31] ? __switch_to+0x800/0x10f0 [ 446.050767][ T31] ? __pfx_kthread+0x10/0x10 [ 446.050785][ T31] ret_from_fork_asm+0x1a/0x30 [ 446.050813][ T31] [ 446.050819][ T31] Sending NMI from CPU 0 to CPUs 1: [ 446.186354][ C1] NMI backtrace for cpu 1 [ 446.186371][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.186390][ C1] Tainted: [L]=SOFTLOCKUP [ 446.186394][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 446.186403][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 446.186427][ C1] Code: b6 a4 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 b9 2e 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 446.186440][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000246 [ 446.186456][ C1] RAX: 000000000252b96f RBX: ffff88801ead2540 RCX: ffffffff8b9ce2d5 [ 446.186466][ C1] RDX: 0000000000000000 RSI: ffffffff8e15d8c3 RDI: ffffffff8c3e9b80 [ 446.186475][ C1] RBP: ffffed1003d5a4a8 R08: 0000000000000001 R09: ffffed10170a678d [ 446.186484][ C1] R10: ffff8880b8533c6b R11: 0000000000000000 R12: 0000000000000000 [ 446.186492][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 446.186502][ C1] FS: 0000000000000000(0000) GS:ffff8881241e0000(0000) knlGS:0000000000000000 [ 446.186516][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 446.186525][ C1] CR2: 0000001b327f5ff8 CR3: 0000000073a97000 CR4: 00000000003526f0 [ 446.186534][ C1] Call Trace: [ 446.186539][ C1] [ 446.186544][ C1] default_idle+0x9/0x10 [ 446.186556][ C1] default_idle_call+0x6c/0xb0 [ 446.186569][ C1] do_idle+0x3a7/0x5b0 [ 446.186589][ C1] ? __pfx_do_idle+0x10/0x10 [ 446.186609][ C1] cpu_startup_entry+0x4f/0x60 [ 446.186628][ C1] start_secondary+0x21d/0x2d0 [ 446.186646][ C1] ? __pfx_start_secondary+0x10/0x10 [ 446.186665][ C1] common_startup_64+0x13e/0x158 [ 446.186690][ C1] [ 446.360332][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 446.367185][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 446.377861][ T31] Tainted: [L]=SOFTLOCKUP [ 446.382191][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 446.392229][ T31] Call Trace: [ 446.395494][ T31] [ 446.398410][ T31] dump_stack_lvl+0x100/0x190 [ 446.403078][ T31] vpanic+0x552/0x970 [ 446.407048][ T31] ? __pfx_vpanic+0x10/0x10 [ 446.411545][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 446.417694][ T31] panic+0xd1/0xe0 [ 446.421422][ T31] ? __pfx_panic+0x10/0x10 [ 446.425822][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 446.431960][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 446.438096][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 446.444234][ T31] ? watchdog.cold+0x1ec/0x234 [ 446.448990][ T31] ? watchdog+0xcc1/0x1030 [ 446.453402][ T31] watchdog.cold+0x1fd/0x234 [ 446.457980][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 446.463776][ T31] ? __pfx_watchdog+0x10/0x10 [ 446.468445][ T31] ? __kthread_parkme+0x18c/0x230 [ 446.473466][ T31] ? kthread+0x13a/0x450 [ 446.477690][ T31] ? __pfx_watchdog+0x10/0x10 [ 446.482363][ T31] kthread+0x370/0x450 [ 446.486429][ T31] ? __pfx_kthread+0x10/0x10 [ 446.491006][ T31] ret_from_fork+0x72b/0xd50 [ 446.495593][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 446.500706][ T31] ? __switch_to+0x800/0x10f0 [ 446.505367][ T31] ? __pfx_kthread+0x10/0x10 [ 446.510376][ T31] ret_from_fork_asm+0x1a/0x30 [ 446.515148][ T31] [ 446.518432][ T31] Kernel Offset: disabled [ 446.522734][ T31] Rebooting in 86400 seconds..