last executing test programs: 20m30.714902706s ago: executing program 2 (id=533): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000021c40)=[{&(0x7f0000021700)="a868fb7bbacedd7c54ca71bab45b920878c64803ed3352940a0e9b31b5294df701773930c8d461b822a3ad075725b68f3d891833a409a439733ea20c70bfd3cbcd9d97226b32811c78751fce83a3e94d83e101f3106653ea01c5b00f5e157451df95390b76fa6eb0439c8de72509e56f4cfc3873ce0b903585e39455ad4e0fe0f928a3aa2eff30a56032eab85443bddb4e19097ea301f6c74dd8554311e54f01eb98218cf6a48c98e627add91dfa56acd923dbd9edb53a20037ef8ecd696e56a8833d35b9b8651e52577eab5f5061bba18e7", 0xd2}, {&(0x7f0000021800)="7683fc2e326d3ebe8a5f8c0a002c82b4fca6f792245ed770da1a16c42175a2062ea38e16231ac4abd0e8c2ab9b9930e0881a7ab55014565ebf9840dd9f2c64765a7e972901c7e266a421809886fca550ea5ea7b7e5d3ff0bc38518588b4facc6c548b1599bbc61bb61a1f9ddf37833a2915af3cc0829765f868037", 0x7b}, {&(0x7f00000218c0)="778a3ae4f7a2e22c6129bd5704558723f7914431", 0x14}, {0x0}, {0x0}], 0x5, 0x5, 0x1b) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0x1e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x3, &(0x7f0000021e00)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x114, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r2 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') lseek(r2, 0xff, 0x0) getdents64(r2, 0xffffffffffffffff, 0x18) r3 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000004000), &(0x7f0000004040)=0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000021d40)={0x0, @in6={{0xa, 0x4e24, 0x2390, @mcast1, 0xe04}}, 0x7, 0x3}, 0x90) clock_gettime(0x0, &(0x7f0000021600)={0x0, 0x0}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x400000001, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x4e22, 0xfffffffe, @empty}, r7}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000780), r7}}, 0x18) recvmmsg(r3, &(0x7f00000213c0)=[{{0x0, 0x0, 0x0}, 0x2}, {{&(0x7f0000001980)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000003b00), 0x0, &(0x7f0000003b80)=""/62, 0x3e}, 0xac}, {{0x0, 0x0, &(0x7f0000004080), 0x0, &(0x7f00000040c0)=""/119, 0x77}, 0x9}, {{&(0x7f0000004140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, 0x0, 0x0, &(0x7f00000042c0)=""/249, 0xf9}, 0x9}, {{&(0x7f00000043c0)=@rc={0x1f, @none}, 0x80, 0x0, 0x0, &(0x7f00000046c0)=""/91, 0x5b}, 0x2}, {{&(0x7f0000021cc0)=@ax25={{0x3, @null}, [@rose, @default, @netrom, @netrom, @bcast, @rose, @rose, @rose]}, 0x80, &(0x7f0000004840)=[{0x0}], 0x1, &(0x7f0000004880)=""/252, 0xfc}, 0xff}, {{&(0x7f0000020f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000021340)}, 0x400}], 0x7, 0x40, &(0x7f0000021640)={r4, r5+60000000}) semget$private(0x0, 0x1, 0x8) 20m28.789437595s ago: executing program 2 (id=542): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r4}, 0x38) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x800, 0x2, 0xffeffc03}, &(0x7f0000000340), &(0x7f0000000000)) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f0000003000), 0x201, 0x0) 20m26.519785953s ago: executing program 2 (id=543): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) socket$nl_route(0x10, 0x3, 0x0) getpriority(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e20, @local}, 0x114, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x3, 0x2}) 20m23.72190895s ago: executing program 2 (id=546): socket$inet6(0xa, 0x11, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) chown(&(0x7f00000079c0)='.\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) syz_emit_ethernet(0x0, 0x0, 0x0) 20m21.344532135s ago: executing program 2 (id=550): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) 20m9.417065097s ago: executing program 2 (id=569): openat$comedi(0xffffffffffffff9c, 0x0, 0x181001, 0x0) syz_emit_ethernet(0x42, &(0x7f0000001a40)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa3f86dd20010700000c11ff20018000000000000000000000000001ff0200000000000000004dc900000001ffff0e22000c9078a17c549c"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x10, 0x0, 0x0, 0x4, 0xdf, 0x0, 0xa6, 0x2, 0x8}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x3, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x0, 0x0, 0x0, 0x4}]}) r2 = socket(0x2, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r4 = socket(0x9, 0x1, 0x80000000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf36}], 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4084004}, 0x10000) write(r4, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000280)="12f0dda7f17f60b7c78be42301125e6cb51c467f", 0x14, 0x800, &(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000064f1f440cf1065807991010203010902240001000000000904ff00022047380009050602000200000009058202"], 0x0) 19m53.941735434s ago: executing program 32 (id=569): openat$comedi(0xffffffffffffff9c, 0x0, 0x181001, 0x0) syz_emit_ethernet(0x42, &(0x7f0000001a40)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa3f86dd20010700000c11ff20018000000000000000000000000001ff0200000000000000004dc900000001ffff0e22000c9078a17c549c"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x10, 0x0, 0x0, 0x4, 0xdf, 0x0, 0xa6, 0x2, 0x8}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x3, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x0, 0x0, 0x0, 0x4}]}) r2 = socket(0x2, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r4 = socket(0x9, 0x1, 0x80000000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf36}], 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4084004}, 0x10000) write(r4, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000280)="12f0dda7f17f60b7c78be42301125e6cb51c467f", 0x14, 0x800, &(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000064f1f440cf1065807991010203010902240001000000000904ff00022047380009050602000200000009058202"], 0x0) 5m41.40432056s ago: executing program 1 (id=3092): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) connect$inet6(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$kcm(0xa, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r7, 0x101, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003"], 0x34}}, 0x84) close(r3) bind$vsock_stream(r2, 0x0, 0x0) listen(r2, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (fail_nth: 2) connect$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "7817765dc5914c3d", "c0a9b92b592a8e91a6934cb6b7b18f7a7a6eaa9cbd8ef3b0fbc326100136e976", "58a190f0", "2a1e833e7af32011"}, 0x38) 5m40.48295767s ago: executing program 1 (id=3093): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, 0x0, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}}, 0x0) 5m40.315214432s ago: executing program 1 (id=3095): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x24000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f80)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000), 0xe, 0x20c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f0000000100), &(0x7f0000003800)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) r5 = gettid() tkill(r5, 0x12) 5m38.771611277s ago: executing program 1 (id=3101): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000007, 0x12, r0, 0x10000000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1d0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000300)='./file0/file0/file0\x00', 0x1) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) gettid() getpid() 5m37.079696309s ago: executing program 1 (id=3103): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x44014, &(0x7f0000000180)={0x11, 0xd, r3, 0x1, 0x7, 0x6, @broadcast}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="880000001c000b07000000000000002502000000", @ANYRES32=r6, @ANYBLOB="8000200514000100fe88000000000000000000000000000108000f0001"], 0x88}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x4) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x28, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x38}}, 0x44080) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@bridge_delneigh={0x30, 0x1c, 0xcafe28741a3524c9, 0x70bd3b, 0x25dfdbfb, {0x7, 0x0, 0x0, r12, 0x80, 0x1e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, @NDA_FLAGS_EXT={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x10, 0x7, 0x9, 0x26, {{0x24, 0x4, 0x2, 0x7, 0x90, 0x65, 0x0, 0x28, 0x4, 0x0, @remote, @multicast2, {[@generic={0x83, 0xf, "5443360200a0d2aeab2d54cf73"}, @cipso={0x86, 0x2e, 0x3, [{0x6, 0xf, "0f9a7c6016336550b01c992b56"}, {0x2, 0xe, "e0e4da696bd2da9db4da32d7"}, {0x2, 0xb, "3ea1f76523f776d64c"}]}, @timestamp_addr={0x44, 0x24, 0xcd, 0x1, 0x1, [{@broadcast, 0x3ec5899c}, {@broadcast, 0x3}, {@remote, 0xfffffbff}, {@private=0xa010101, 0x7}]}, @ssrr={0x89, 0x1b, 0x49, [@loopback, @rand_addr=0x64010100, @multicast1, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000009c0)={0x244, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x55}, 0x891) r16 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r16, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 5m35.698711372s ago: executing program 1 (id=3108): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000180)=0x28) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000300)={0x1, @vbi={0x4, 0x80, 0x0, 0x43353039, [0x5, 0x1], [0x0, 0x3], 0x1}}) accept4$tipc(0xffffffffffffffff, &(0x7f0000000440)=@name, &(0x7f0000000480)=0x10, 0x80800) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x5c}}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'dh\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) 5m35.417886667s ago: executing program 33 (id=3108): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000180)=0x28) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000300)={0x1, @vbi={0x4, 0x80, 0x0, 0x43353039, [0x5, 0x1], [0x0, 0x3], 0x1}}) accept4$tipc(0xffffffffffffffff, &(0x7f0000000440)=@name, &(0x7f0000000480)=0x10, 0x80800) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x5c}}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'dh\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) 15.412031808s ago: executing program 3 (id=4318): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd704004001000"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x0) 14.786760309s ago: executing program 3 (id=4321): r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000002640)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x8, @remote}, 0x9) socket(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r5, 0x4004551e, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r5, 0x8004550f, &(0x7f0000000240)=0x3f) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r6, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x4, [@null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0xff}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}]}, 0x44}}, 0x0) 12.977622267s ago: executing program 3 (id=4324): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x1000000, 0x0, 0x0) 11.377186227s ago: executing program 3 (id=4329): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000003424203"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200f3ff0082c2000000080045000024000000000005007800000000e00000014e3317c100140d78c2fc000000000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x18, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000935d0c2d77dc4feecec86a3e9d3e68d3633cd8d5ab56b10720e5395c50459473e17aae11be0a6315be15b434b616c6d710c55da4812fedec84126d5a6d9a140a64d2b37f13175c4a613aa718605b7b312bda3b0283cdb05823b261e8e7c6b9b3"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x9, &(0x7f0000000340)) r2 = socket$xdp(0x2c, 0x3, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r1, @ANYRES8, @ANYRESDEC, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES64, @ANYRESHEX=r2], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_cmd={0xe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2e, [0x0, 0xfffffffc]}}) pipe(&(0x7f00000000c0)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x6, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) syz_clone(0x80002111, 0x0, 0xffffffffffffff59, 0x0, 0x0, 0x0) 10.334926852s ago: executing program 0 (id=4332): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd704004001000"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x0) 10.071498453s ago: executing program 0 (id=4334): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) r4 = io_uring_setup(0x1e2b, &(0x7f0000004bc0)={0x0, 0xb07b, 0x42, 0x2, 0x3b8}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f0000004c40)=[@ioring_restriction_sqe_op={0x1, 0x54}], 0x1) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x37}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r5, 0xfffffd63, &(0x7f00000002c0)={0x0, 0x41, 0x0, &(0x7f00000003c0)=""/166, 0xab}}, 0x10) r6 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0x8101, 0x0, 0x0, 0x24f}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f00000001c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}}) io_uring_enter(r6, 0x47b9, 0x3bf6, 0x7, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x1e) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 9.207762369s ago: executing program 6 (id=4335): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYRES16=r0], 0x11) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.987086049s ago: executing program 4 (id=4336): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/113, 0x71}], 0x1) r2 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="22387b9e12d473eee6740631cb812aa6300782dd7d8bf4bff7509012d5e3706bd63bc05463583727e21289397c0e475284913acd06e40948cf92071c085cf394e46ee88936a1efa26bb7da947442a3072ba8ca3cbff0e6c1976e2a5ef2ec3f1421a63e11ed95944ab8290e67437cc505e0a05d92b08982b18c1fb364eacb45b87c89fad03f247a56b465a31d674fe8b1d675bea2361fad542a15ddf1b0540b293c7a80d4fef1d6480d8a87"], 0x8) r3 = syz_open_dev$video4linux(&(0x7f0000000140), 0x0, 0x20240) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x1}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f00000000c0)=0x32) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) 8.918926154s ago: executing program 6 (id=4338): syz_open_dev$vim2m(&(0x7f0000000100), 0x7ff, 0x2) r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x23, 0x2, 0x0, "9611e6edffc88885163200000000000000040000000000000000010183df4800", 0x33424752}) chdir(&(0x7f00000001c0)='./file0\x00') r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20202, 0x0) add_key(&(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000540)="dfc0d736ed5a292e689e6529e54d1e4ff6fe159dbb8f149d5effdc5498c1e30632b1baee28ab1bcaac74ef96694e12a4e26e30cec2671e24939a85adcab654c348264ac32cc565da45c8f52b116009921ec667f50292e9933b36a5c5", 0x5c, 0xfffffffffffffffa) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="273eebfecb7c0e923301b61c42cb1d11f41d00bdab2a3d983b065a56", 0x1c}, {&(0x7f0000000140)="10eba9fdb4cbab48929e1af15100"/28, 0x1c}], 0x2) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES64=r2], 0xa) 7.013647364s ago: executing program 6 (id=4340): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4010) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = syz_io_uring_setup(0x110, &(0x7f00000001c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000380)=0x1ff, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 6.866584129s ago: executing program 0 (id=4341): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYRES16=r1], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, 0x0, 0x1) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xa080, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 6.85480974s ago: executing program 4 (id=4342): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) (fail_nth: 3) 6.363563218s ago: executing program 0 (id=4344): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc000, 0x0, 0x81, 0x4) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x80000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000540), 0x0, 0x0, 0x0, 0x0, r2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40041, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xb9) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000e00)={0x4ff1, 0x0, r2}) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(0x0, 0x10000, 0x4000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r4 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_IOEVENTFD(r6, 0x40a0ae49, &(0x7f0000000080)={0x5, 0x0, 0x0, r5}) 5.699627693s ago: executing program 4 (id=4345): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) mq_unlink(&(0x7f0000000180)='\x00') recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x40, r6, 0x709, 0x0, 0x3, {0x2e}, [{@pci={{0x8}, {0x11}}, {0xd}}]}, 0x40}}, 0x0) r7 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x500}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000000)="0900bf65653f47f4020000008bd458d1e7cbdaf300000f34e7e4165f081ae36850f6d15c3e681411f7a496c0da04003c242f5bedaf6bec340dee49474362b24cb800edc500", 0x0, 0x48) ioctl$UFFDIO_ZEROPAGE(r8, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x39011}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000e00)={{0x12, 0x1, 0x300, 0xa, 0x2a, 0xa8, 0x10, 0x1a0a, 0x102, 0x4cd7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x2, 0x80, 0x4, [{{0x9, 0x4, 0xa2, 0xe1, 0x0, 0xfb, 0xb4, 0x24, 0x2}}]}}]}}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x4, 0x7c, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x1, 0x1, 0x2, 0xe8, 0x10, [{{0x9, 0x4, 0x0, 0x43, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x7, 0x24, 0x6, 0x0, 0x0, "c1c3"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0xfffffffb, 0x2, 0x1, 0xf}, [@country_functional={0xc, 0x24, 0x7, 0x9c, 0x3, [0x5, 0x1, 0x5]}, @mdlm={0x15, 0x24, 0x12, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0xcb, 0x6, 0x3}, @obex={0x5, 0x24, 0x15, 0x4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x600, 0x4, 0x74, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x9, 0xfb, 0x8}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x3, 0x10, 0xe, 0x20, 0x7}, 0x3a, &(0x7f00000000c0)={0x5, 0xf, 0x3a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0x7, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x1, 0x3, 0x80}, @ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x3, 0x8700, 0xc50, [0x0, 0x3f00, 0x3ff0, 0x7e0f, 0xc030, 0x3f00]}]}, 0x6, [{0x6a, &(0x7f0000000100)=@string={0x6a, 0x3, "5aa55a56647ddbb6dbb9a0741b510e5eae6e0a59caabb95db4fa5bf64f5d7246dd6f57026d9ee34da2132e1c8039b7026dc3c464df6cd76ebf7921b6c81e103729abc2471d17fe83c29b6f000dfbe6346b4c91cf57a808994f41b7525e7958a920f9417e850d1b7d"}}, {0x45, &(0x7f0000000180)=@string={0x45, 0x3, "929115aa65c049583733ff2feba773dc606541a1121bb89c37f9efb85b30506155c33b535c6b207aee3835becc74782117b9e1f8bf0cbc3ec68425431795a541e202b3"}}, {0x35, &(0x7f0000000200)=@string={0x35, 0x3, "80752379783d72e594e163184a89ee587bf765c93e143116b3e2b16f969b00797397957ab7297d53a638bfdd27ddffa98af652"}}, {0x2c, &(0x7f0000000240)=@string={0x2c, 0x3, "ec255b17affcf3a8a873ada52284081b660d5c248c89ef686b1537a2ee15789916e499b9eb5a515bd466"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xf4ff}}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)) init_module(&(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0xf, 0x4, 0x7, 0x4, 0x3, 0x2, 0x6, 0x3, 0x1b0, 0x40, 0x399, 0x4, 0x6, 0x38, 0x4, 0xff04, 0x2, 0x4}, [{0x60000002, 0x5, 0x8000, 0x6cec, 0x2, 0x800000, 0x8, 0x8}, {0x2, 0x0, 0x7fffffffffffffff, 0xdf, 0xfffffffffffffff8, 0x8, 0x10, 0x3}, {0x60000000, 0x400, 0x600000000000000, 0x6, 0x7, 0x0, 0x2, 0x6}, {0x6, 0x61a6, 0x6, 0x1, 0x1, 0x3, 0x9, 0x10000}], "f11ed1"}, 0x123, &(0x7f0000000580)='{-\x00') 4.774947799s ago: executing program 3 (id=4347): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000000)={0x8000000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bfde, 0xe1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x6}]}}}]}, 0x3c}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r7, 0x0, 0x31, &(0x7f0000000100), 0x4) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "1d00"}, @local=@item_012={0x0, 0x2, 0x9}, @global=@item_012={0x0, 0x1, 0x1}]}}, 0x0}, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1223, 0x3f07, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x80, 0x1, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x6, 0xf1, 0x1, {0x22, 0xf72}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x93, 0x4, 0xf9}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x6, 0xe8}}]}}}]}}]}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0x7, 0x4) syz_usb_connect(0x3, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x5b, 0x19, 0x33, 0x10, 0x182d, 0x21c, 0x3fac, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf4, 0x0, 0x0, 0xf2, 0xdf, 0x22, 0x7, [@uac_as]}}]}}]}}, 0x0) 4.479761158s ago: executing program 6 (id=4348): socket$inet_sctp(0x2, 0x1, 0x84) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000680)={0x1, 0x0, &(0x7f0000000640)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000006c0)={&(0x7f0000000300), &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0xa, 0x4, 0x0, 0x0, r2}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0x1003, 0x1, {0x9, @sdr={0x34325241, 0x3}}, 0xfffffffd}) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x664080, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000002c0)={0x14, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="02", 0x1}, {&(0x7f0000000300)="0816049bf3154cb98693d2f4c268896ede1d96cdba17e26e2aa3f280e55bc6df244fc1208a511289071122437fbcf0db8d8eb2b09e84e74e263ba0c87436245d2840ecfd43039e70811d4fed10e8de29e1e944f19db430b4f24bc7e8c854e301039f5f149761d477176a1251295f5e421bf4264d63e84f0ec73e609f2f7de72e583bdcb8b11ee86a7696f24fcf4412d265c5b60d7b15120c0712cbfcbeb4260b86e6f2c7b2eb36c8000284534c2e713fc6b53b97c34c613a6805740ff075eb913425705796123a7ad18c371a04336c93bf4defda62aa1a9b621a939a8d060f38b0f7152b", 0xe4}, {&(0x7f0000000540)="1e05a085a73eb8e82fbde989ad25199d67e9861cdb04dddb0291ab6085a3fe276f261c9c350075547e20a6de23f8d35e5ee4e8b54f018fcd02433171c7d4dd372932ee46d0cd810d9cadc074fe560f82f9b752acb96fcb2d88874e4c8a1fed80d8eefcc655ad5f0ef85c5b580f482b66233fac6c407935e8090000002c02351ba7194ee85543340600f58d21ee7006e5970c1531919b612b5aa735474878ca1583fbd31ad0e8179e7542a4ba8cc945d70c8496a9e11bc0abf106dde997028d3af8a31a102053e54a5a5e2f77cde1d484e07cf94336d9bd76b0cd591d06317da6272d780000000000180000da10f990aac1fd", 0xff45}], 0x3}}], 0x1, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x1004, 0x2, {0x0}, 0x10000003}) 4.262139779s ago: executing program 5 (id=4349): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) chown(&(0x7f00000079c0)='.\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r3 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) ioctl$EVIOCSCLOCKID(r3, 0x40084504, &(0x7f0000ffcffc)) 3.322775576s ago: executing program 5 (id=4350): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@o_path={0x0}, 0x18) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0xffff8000, 0x0) write$FUSE_INIT(r3, &(0x7f0000000580)={0x50, 0x0, r4, {0x7, 0x28, 0xffff, 0x200800, 0xff, 0x0, 0x1e0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x200, 0x0, {0x5, 0x0, 0x7, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0xa000, 0x10000, 0x0, r6, 0x734}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000006680)="8e503ba12553ae35664093744598ff2ed98313cfeff69bbb1f3ba451bc98d27cf439225d75522ac543a153ac5284bf131a87e53d0b20f8dddcb2af841def3e560070344be18fcee4983553ba856738012b512e3dc760fb581a17e5622e0e22e22546476d6cc6d6d94d828a2fa22ec77a1cf082f5ca88f1f8976e8b6c3a7a537f8f50b432bf4df69c912bfcc539a65851f86b23f24e714e0643429ec1198ea1647316538a3ce23fad21e19e087c0dedc7aa6d5e4b0dcbfcbe22c857f5a848aef15126b9ecc810249cbbc82c8b6ba49e46b71cb79f6ef9449d0838b9130946398941a4c64f6e2d84118b60ed4ccfed8a26446032fecf87434e71b7989253f64feb6d2e1013673a9600b1915174e55ad78d1d666fb75c24142e44ceca89a18ca66b4b5e66ba953ca42fb6a36d4a3612a2948393f67a7d1d0957a8553c73855fd007abbb6c3d4bbc943f3b102bb2ea6f40e714516a3de91acc6e1468e9e7b66ee57815da23054153d9d5fca6bdb26ed8f7754d88154d46df2f2e4964ee5d7f47e9218d6877c3b232c945cddeef70b24e5c6c434fa30fd0a2ad1c348c3658494f7cfdfb6bb56b43f1d9b2d049c1166161c3232ada01f3c789b2d6958cdd9f044a654f8397d64cb928f4d57f0c4e9739afbf3afbf0e9f84d56a1aba6db7538d98404b7cdfa97f8770a6df4a13145c1d0cfb7ec0349b5639d9180eada54b2f8c12472fb379901e6d514fbfd6d41d2dd77eb42608a784fc016ae48fb126776b10be5c03f62ec90987e766d20d821a17c03e0d867f4aa3f4902fb803e8261833aa9397e107e6c100daa3d8b792bf4b5081ef56670762b5ae3f528836029ca332f44fcc5cf3750f39091985032afa8dd2e80b69cbffc29aa13fcdc0ff811a108794b4154ecaf70e58a9f70a573cf9d1040e23f5a04a873a583e4ab0fa5f77d620c60f0a45cdc789b849e9e8746528846bbbf8251a84f2aa97ccc3e49f4c9b6abf0248344e86a71486eba9e62ff5920bb80ceccc5813f068da0d5aa208c440b7889118d2f4e8baf22a84544f232d6a3a1aedf31d5fc22f0ece56ac611b1363ff35e5071342a0257d3f146dc3ea1cc795d2f06afeb1d6995e50eb2d2d21dc6c4377a2626dd9486446517d03a4a03c43ef2e255a92b775c198bfe92c21375599235aac33c69190bbbfaad76860d0c9e70ad53273460c370b06bdf94ee8bfc31c48609ff6de0d39f873ec11e8c2835f17b3f18891c8ae335a7074fb5a5c794007a327fbb2622e71d62e43f50a00cc59b7eeb3f8ceed5d87fa5eb62a7a8c74ec90b1096a0b24606bf14b1f13f78ea4ab522304c7ca1d7b8ae47b5859f6a0d9baf3b6ffd29a4fb6782732febcfa51446aa87691ac81bf891717fbf8e4deaccac63477d3bc7b8ed52e9b6ca3fd39eefee6a337c2ad76df9739e2fbff34bf36027be0cfbebfe5b2fd168d75b2fd64479e2faf85654c013955e04044a9b7bf8b3d42da91962796bfe6eb53fe29e36a7a7512a155c712ae561d885703cb26d72e6f1df3976cc665960f871f3110309ffb6b5a79e54057a7a286c62c11e973ef671e86051686f77992f985d729740f38fecf83e03a1fef542cd6b4cee48546f67873a9c682c4afe4a5beccfc64085c622c5a0b5a1f6355f938d16925cabe61426a837c48fd6ad790afe54448fb296a03322f3427e132e8c0623bd311af8a619c2d91415e851744941700f09a2d8471def9dbc448c6aefb4c664f8902c872cc7de9d26e8b300b55b1d08a80257095efef35d9b497487607a22bc95c68f39aeeae243e76ccd40dd1b7ccad6eb39b35d91d239b2b005c8bb6e50037ffb1253276e20384398a5e97ad705fcffd04c720539ddf80cf4e929e82e3fec3d7542e0b7495733eb5da29f6dff5a34ec88a71881f660a5bc9481e755fd3c5683e95ed97cc91ab0edf49afda477aea42bc436b364747d973d61be806e1e63b6982e42814a13c5adb3bd767ec724d2d654afb106198fba6b4c798f4b82f329c2b8055ac4d247da971e32eb4cb971c9ac99d18c0a216d48dd7dffd372e0cad9ce6f05b06e47842c2f53b7c987139c6ddac3446fdb163342f8ca8f5401db91d324a6b710f28dece5839d37760c2515d6ad815a746cd7ccd3a438a5d3f28ca331f6874dedbab107c64127a7590a2813c1287ca977807827d52df80a9c19bc7ef335791da1be53c89f6de8ee1f02f26069b786f22bfd23cd8366e3ca02c0b296d0966d7f8fdbc0ef06895c547224f1a01c92d5f43f81b35539469d1fd9cd76dbf8cdd21b479a6474578863c9906ce6b12d0dbf5a458dafc042fcabe64aeebeb70c0da9300ed22e5d2851c5e77b20f9da1cd26cd810e0b8f1ba17d7c819e8a8ad86aa5bc4eb64748b75ab4a85f05bb1dc542234ac175eced1fe8f3fbd86f1c7349a360f5af0244818df303dce6842ea7afa722be19cf162d671256e5659c77c5569d827b28dc44b7dbb7d9433bc9eff26edbff36cf796b8afb285393f2dab6bb9a3ed40dd065ba8a8ab62cb575e696b97a2853b1700835ae429b983a5bb88972e367f5996a21e9a3b00e943e15c1163fdee023e1cf6e8dc42655cb175590fb6b8c46148b37957c5026aa94e96cbb71bcf9e7899c489edd9b34ca2d3d0dbd29f135cb158652ded6c959820b26a5fb6e8f3a6cfb80bcfa52c36ae0a3868914bda36b5ac09d2ae6cfccff9859550cfc5c6c3b30cddf6a2130c0c563445ae10634f38c65a47aeb8c72a0f25a6747a6787e703e1723303dd6d5bd4303240cb6d4659ee32d80b92859327e882ec84d9bb2a6976d9c6fa450d5598c6af1c92fc4ed7614e3192a06e62e704278424e2e5d521ec4f2cbd87d9b8a65405e807f6247e3f9228e8a5c44e31c9de9247d1b8248ce71d34663cbfcce728c9f08628629fca3f334566118aeb86470886147d714d2dce240408fac3c971b851dd33cb7997e238a2362195ba4f0e83d5c1c5039328817f258d6645bcbc20512398a7a34e2288585b4dc626c6867f3af5a0f573492cdb04e5613bd95bcfe6a61541c3912b4e841b34db2820ed5aca226dcba496f9586b83ab44ed3b9f34cfd2397f36dc4f9811815b975a208b6cd163031296b289b7d202036bca9c4e862f6b1d6356c3c54d47de63e0d0b38e7b9e41e1b25d94fbd03853f786fcf2325020355469e52dd2cfc879e2758382f609173cb2c01775030d1d536af97f5bd0a4b71ad9bf3e5becfccd7dce72fa8882733d2c32cab1338ce67f301be74b1c51dbacff9bdc22868f3f16531cb86b7597aff03040a821c4f7cae2b5b92db792f327dce81e79ac83d4ca15aa248ddc2fad518ebd360c5ac8ff3636e15e8ff61501b1e5c6338847ff43c0d3ed38c87aa623c318c8facffb72fbad8bf4effdd2013dc60ad91f1f5a791905b572321ce0956ffded80e2152b0672875fe71923de673ce343a665d327560c5267223b6fa636ef188b94d4a42884721b4f2d51f90ff3e5145aab164fb56982648a7215601d23017b749c01b684082e250330d109af89bf5d20ca788fbd95fd8d1c128aad3306c4e1bd1c054def7b7ea1948e3c95826078991d234808f55c2314706c8177d7674b2378792afe66b2d65484b481b0e52d8b60e0980163fcf2fffa2cd81f4dbf57afd76fd4e71ec8a6604a697fcaf57e65bba50489f6f0c5b4c046a14303eac05700550ee10fa29d8f68a9eb02fa504b640865f7e2c21f1451ed7d75c90a4734ba64327bc3597b5aff23d0a8f1229f0539720bece2b980f85e11c5ecbf3a560e5dedc40e1260349ccbc647d4d9763b17a45fe1b63e5d16e1a49d55c0011e3ab898b64a6618682bd7bb7e8ed18dafa1b462f20f6aaf2d7c4777a6fb73aa7a1720d67a644f4f4b0bc3ff965e696fd3513979f2e72289dec447af56b240380cfa2a9ce38a808e961d26b6ee6810c75778e9d23a93b3f79b3b293f138f23ef2596b60ecd4afc2036debb7e14f61774d84c1325ee7b8f95dc80c12b001e32e894516473a82aa2c24b5ff7f8c3374e245f1b3ff2a8cf0cc33ecd4b9b7528c34cf54d77756ed3e1b74a0e66c9c1dd8e53c123872c084f70e8a04efe8a8c3527ba75f4d9ced8469229ad7453a1376cae90b155638696103216a07b02e93e3924c4a98d159ce8633b2c8bda44ef28f37ba5edf1e80184c9ac2c8b0db77096dbf2f866536ac4f5ee9eed4bb8dfe0dad4361e901450ba499c119aa1af2a1a7c527b09562a47d8260bd7647e29ee422432f063a84d195e9c843e6f6fa684dd044bd09b8cb3e7a976df68049f09caba37b69a595cea61667f2631e561be743309568b4c37fdaed8ebc628889bc3bf9c5a63bc74e9358a9c2228f51370eb483ee39e682cd4f56f15a16217904c6189ef50044e04f244da23d1c9f41a5209f4f485df4ad8d1922203d365eb11102d48c93c09b700e177aef00f8bf729c0406b89de32490fca998bd34f80c99be60601d4de10e9a86a5a22652eb9df948daa66529b6445cdde70ad125d06e41a3469216233a8b9eeb928f2d041eded321d518f0435ca377e90ae49e95793aabccf299c1f1a82ddec49b2b8732aecd1610d5f09cc5e509d4065c5cfb4edc55f6a15fbaf4dea24439ea95b63bae312ed90e47787000810f22ab9b6aa0622ab969fa30b724b24d82447d6a357468b2d1ec61a80ae680ff7b8b894158218b0e63f99103879f3c1dae33aedec60a1e755755604e33a6698cd0e378b0a0b04017278411f33eade9c4c0e3b7d0d6e62fdc3ebf5559310e0a2913d5aff1ce1bead51578b3879c0e25d96a7a150ba655c97875d864c3a6d5b595ff9dd9698857b3b0bab2d087bbf7f80f5a7225cdebf794ede16a61ca73201f311f87ef9cececb8fd07b2bf384a22a8ae988a5e91e6355e26ac923e78004968bf7f4ae3b319e61a422a43841831a51e2c41df8a118da5239c87b4b0aceb32854413d53e0228090babc167ed6600041390ce04e96c94c65c51fdc00e617e4ed870fe9ed2bbef84c1e1f3f796b2867b0f383b6e01ba2b82ecfced722ac5a7c092716d18b9b41674c342a1a6a7ef961893d451648cce5d0ccb4c180e0493a53f5453de43a6535c486acbfb9f480f3255f998831b684a468a88840e1e7e8a310ef296ce89bef65b7e54265c88bff204e48963cea9945608260e5de37b949acacc938e8e2de9fff925022c010f94a0cd6c7bf16d4e3132034a8a3301f1c1950b9a31ee8227b17cbf460db666f6207a59783064115eac2d4f29f9483ebcd34e8792809d5c25a380b2137bbcd7cda502f4a41a043f7d626e922adec9b4c6478ac0df9842bd4e8912deb2ad2026461510ca392383ee9a7ad0388ae499951a4283db39ca57ed9bebf43dcaa6caa391169077a189641fda3151d8e3a3a0b525dcafa2d9d7b2a01468e658c10c27a8ba74b487a968b05031a3d53b59139068b28ca87c5bfd9db867c0e9b9abd91142c96dbf8883e1a89db8d96c9f0a8999a4f9d6b07f32d6f8bb2ea6d2eaa8a531edf85f25aef35c84eb4bf3f46ab4213602be20cad885d404ef47fafc7793247247848f1c3a06ea31c23d0cbffa07aa5981714dc85736e95cd4d60ed1f25351b1c723e4f042f55f02d24a089862df124c75cc4f618853914439c1406a393a0f1ec0f2346f4cbd6beb17713149d67b9bf1854c814bd8ba3a199218e6eac655db998c955df382c8dee2b4d30c750a63a08e9a88009840e96a331bde3767bce177fc5c44528cb673e862e24c2dc2399be1435cd20916e9e060f8bef39d4b47f335dde4493e0e44b0f619822a35e69b7c5d93dc69575ff71ced7c858e43dbee46f4e50846288cbc8fecbb9291d455a015fdd6e1412aec0e6104d0377074b8e160ec7d813bbc6d3b8e6b0256bce8d255d7a592b408cdf6e63164c99d94f00a693e06c2ecba9dc6d36c6a35697c1647f942df4c805c18344b8e5ac885689068f864c395e8c970702e40cf6c683d10455c7ad75fc035ae260f359c2d8c91305406c6f56ec535be445601c75ffdde1758904787f29a558d0f3bd04bfa08f1612a7ee8a7acf129ed5eb854bba757d34afa354098ed8b4e3a599db4b7611a665fcbbb182a0774cb026a00714d8b91c7fb8691b629b6a93f92da2f3701348885dcefe5a548c90101e50dbaf3f4907611623f7616bcea943bd3feedecf3b3681b4d04a938ac83d9f18a21991a90dc17005e7c56d2e09a0f4ad9f3c676e7da478e96122046d0a167f7e1a28d97d514aa68d24dac8501a1a35ddb6f3703311b26bfa3319361ff5e4d38cd55a04ef1b4fb417a3b638cde7f8569531a22c0fa12ad3a55dfe3c2642205fe1ba0c82d36f8815ec52f6381fe789fcf89efb305498a9b1f0ffafe01bcc5581f5b5d195bba77797085ab1837fd081cf5f086da2a16b6a7f8ca9efbc4c9cf771961b70626120e3715b16b222932291e4ee2449591b1807d56a53d4d86f25011704e7d5efcb799ab130ec2aacd54afd3c43c8acda1c5874ce23234b090c4eaa8ddaedf979b1218a5b9dfb36b8196ce05924dcdc7f50d96b95d0c288551a0498ff23f56c7ccdfb8966480477849c7471bea99cb0af35dbcaa5e781b5ddecf3cde51d78067aed9ca267550dfae119a3d83710ecb92fe80841837b41a40d262f5fad16c20203d1cc3455ca63ebdf0f5dbb7a498b4629dcb87333f2d58726871e6b5adf60faa0f8c9cb4718005e5e199457330da1a11cd0d7e78f617b6805fff8fa45c2cb56e1e17904773e165d2a39470ce1616418e7e15481c798afed92efad9c2babcc3e3346f8022ce30b3e1db015a2b9f5dbd4560ee9776c77eb9cff5cf2af28ebf1085650e29bd8dac01b814e6c285bf964da2eb1a442aeb671589a02c29d58208829c9501c355644ac28c38835f4025dcdabfd3852b1a16e45e9c032e97f7f2f0f612739c6569f44731692e3f3b97ba5bcd0b7f2dea1ee6303b5f92514c022e54aa4c587eff74a5d509c17785686c613bf6b778e3624ff3653674e6daab3f788ec9cf879f06957a673a20fdccf721ced05a0d23e074de82614f775a84dfcd31c621cf0369e28791ab742b62f271218fa1bc8681e9d41b4a93b05cc693013d54d367b1e6e1a7e74b43b44b920192ed8fbb63b89f393e5ffab584d7c201d1b99b7bc6907033109986a4fe7bb79e803315c4df94ed471cba889e148645fd1748374015ea8c696ff64bf6d23bce7e5efa7c7e6215ceefa938cd88aa0374da4ee1e10cbfa96d5283b4a0867f4d76b8492fc618e2bca34ba9bc2ff3368756080a78a1ece2f0d1d1cc30cb721677de3c4cd6da378697c40419bc1f2184b86b8e40abd627aab9c308d8fd2db8daf8b43225003ea9124c11dfcbd1b6ea959a86623e360b40c381d991892c1fa6c0c81bb4d03d8d3656cedd1e48539192fc8bd1474ce961159816dcdc76e95ed9d9893e91a0ca670cd1152cb014310facf952fa9fd0d30900196b604c10596c1a31c1e70416824c207656426b09ef9b558496ae87fc7449bfdba0d5628e9af6397385ddadc986424fde545c07664fb6ef2756ed9e443e39257eef2179fb9e4a9e84062f9b6048125151e2e7fad2560df277323b5e22ab2731dc802d6f372d2a335b5da7e5a86508329b3dceb56f0d4f9f6f9e48507af3ec99fc172c237e67ece3d51198a033a9c66f3243ef694893af85421ff6f93ecb95eacceba5fdc1a76810e999a40733b46433328b24ee17b718b135b74dd535202c7966de2de5a26412e600971704bb90007e42d3e6a3acd33e7358da6b32883c9ad30c2abb1cdef7452e211734c6fb6d199a397bea8aa3cf1f014929941c34ba06096e70d852fc420effc7924ec29c03bea29f289c82338f0115e00de549007456d5867253a5b9bb4493bcff815a3100fc45a0de0aad7b0b5c641ed1be3e8f07fb3b1a8a496ecfd3dff5abf0d8f5854621faeb4a9920d8c52b7a0338d49fd21d99c24e1943de3ba2668aea7bc95bcf21e2bf0b2d5f899f33d0cec31b60df4ef5a23e1b173cc89390c8bc3ee96e38de06f6016a2b0eafe86af9dc59bead4f5f948a81b1008a95e3ab39f8009bdb4f268f3002245e73ee2ff50cf1cd37e867cbe44ad370b9336e0dddcffb6dd8f2f79155235300bce6385e544105e6d278d345870216e61100337a871ab51b2cde74fe976e1f8b77a90bb8b51eefe7e4201db41915f482edbe1f8ae268314d5af95ffdeb94aba3f4e316990792d281a123d7febbba7f6abaed7ccfc0c567d4bd1c2d9ca217535167c9a09f1ad0ecaa99cc08338fead5deef7fab77d2082d893b91c27f8ea4e48e052a2a31c8e3f9510c4ce94ef16053bcc25eafa324e5a1d045a3de8f7d731e58ec9130427552323bcfde47f6b55b5634e8cb190fe183af132f12d72ef5e4d98508b57106ccb647ab505369c728958a0789c67ee80acc4bbf41b97fa56d8701c3ec5ead411aed16882dfb026c50c28b5fcc442c432837a82f8bfd47650b83aa71b909be61ea77cc029a0c615f8e390874995d19e224c38349c64bc166f50c54332d1a3eff0071d7a0b11a901c56a847b93ab5bd0bfad8f965cbfb53c2184c588fb7dbc5c693a3ade89b303e801a650b79c1ea957aabed937998b5df77ff29fd43515e8a5ffe441e323fefa45a2775237e1c749897d448f1f3ef60c7755d1a1441b96a136a86d341471d57c68c859813656658266c40b8bb8bafded8ed0d940f8c5954923eb43ad5afb58eb452d6430990bc924afb97191f31cd1a1f58e30b0c243f9636245c459280d16da1df1a30ff63de677554d6b252487455e8aff91370c4a0ba9f341384cf8483d18b9d3f2fc51b07ba8a5fa795d7925189ca344f0fddb8bf55e35013f6fab3806b3c4d17499ec1ae819d4f3aa6b6a570c2ea68558fa33373394584dbf11d41f7059b55f186bd54bdc30dea390872737bf0312f4c68dc963d28d5b218eca6314e23b7381cfbcd01c325d9a3869f1176eb82c183b37d65c8500a48e9bbb1c465e27bfb668a16100e5384d9116aa35f3b00b4ee3bc84700ab17283d4db6b420e6140d14d09b51ad020fc8e505d2c820ac307d45b211213c18487ce12dff233a5caf87cd94a77d0eba69d61452f41c1f82cbe32b567a39a4615a6d2155cc73c3b90dc55daf33c8d9eba3eb0e182c79dede1293dd30840ebf048df8a93e38d0136e856d94ea105cd04323406dc429b5551538625109105d88b1ac480d0fb1e9d1977099707f9f9534b683d855c4d3c30a29c6678a3221e0dea7772f8859f572420708da9a030ddf973cf9f221404117b05efb76bb08ecf34aa9b36b0418c74f90a07e8e5c91e1d7c8a8ea596c0de9b10c222e9588c2bbc77d860b7197b42b42a1ab834ce24fccbbe20f2579ec6dbd4efb9aa1a3d2e062de594d289273e98342440045a0c134e400003b50d4243826b029ecd177cf3d2cf3d164ddc58f88a970a0bbdc7f0d60271cab0df2dde79d1b929cd3028effccbe94c05008f4261297024e4f72604d52db9da7b0e5f2f4f59ebe77b319c54aaab9581a8355b75594eb6dc0fc25e91052c89764256ca464f9f6e45bc34d6e5aa28e1fd93997b58f21feff551aa3ecb5375c19ee4543f7339418c11b9ea18fe2637a9bc9744cc9fcb21a7643eb87683694732154bd1eec746f1c57bac65cf18a83267ea437f7993644c510ac44307703ea28b20e52644dbaabbe9ee1e23a38b29b91cf9077fecdb98ff4e4749c9d6ad2901c5a891c07a8b0c26ad1f8126e6db537df7fff65486afeb85eda80e2a04d09d46720330700267cbcf205b5c00076c01d9db0a64d5426864d14cce1781098afdc28f9f5948ab7791627baf78c3e9df2c0ed9ce50b083bc7a34ee0087f4efde579e2dea313e4e20580c5e63d5ef4509c05a9dc38ced91340bbb9cf948bb03ea5e60c666a1a5c4acd385d0c1a01797b9b3183f4afbc925dd2641d21410b4b1af2f21f8cca330fbc08834e1e8210fdcf332f70f08b48a2655cf017ec8a19640f2f263c54876d6f4ad2193be944667f6498baa32225d2b5b82abd3f2fc64033f1db9adff6b1c788555d5ffa1a35d4a691802447b163ba9a615d6c958036528bbab84230d676145054828d530f0e3af417ad0480eaf2004b9002b644bcd8f0ecf860c31766ace95769ab4fd01f297c595b45e6c7b1c9f662044f43fc82b6244e5d08b1e556599096c034600e20ff000d996b6ba3a6700116127b9468c9567ad920ddcf7ccf9c0a74f49984e24a7aaa2321ee58583c1bdba668cb98c319f682ffc5957015ba1799930d4b676bd3bc76037f6bc2d9ddcb47efebd366a90dc7e67076ebc25e2ef2929a89faee06aa04538a3ae7b196dfecd33725ce9f859c5df4713b220ecd18b1613ba76aebbe8f9f93eeaea9e88e46e7ed24c4efbd86fcd57a4f9fc76152175782871ab211a18ae303be8e9459aab930597d17875c5f5f24d9b16bd8dc4e25f6a7a1de05763da11ee7e26e1e32ee0a5ab2de5d069d03a6ea95a33abc1025d59800fccfff1f0e0f7335e2778b8731cbae94828dbe70507c5369f36d457e98d6042e342cbffde2ee74e05cf0f8aa7185de485e5050294472cd8c7ae03977b62cb287a9d6e4d66650dbc4d89e58ad4f7c24d46573acf85f633d1af73cf655788b431bf22315bdae78d9f6f9cfe32330cbf77bb0195a60244d4bcd0ea35b94bcdf7255ff58f1fb11a09a06747337c95f332a0ade622d49ce0f2943517fb4da8049f3c1b53cb68475c2eb52551d40cbeaf5e79a748c5314bb531b4fc28494b65ee8513427e1fd3cc990fe4ef5ead14b65f1c3e9e0598edf42e2862e2eb180b3e674fc3005859ac56ad17022a8f48b49dcc97e991cfece1d52b7ca82e711944a877567ca0da0663276480d69fa4be56f425bb84dc9177d3e3ed45fb737ce026b8df38336f9efedb89a8650f9fb73918d300c909e9f9189458e1930f09b05433980e79a2eacd0dda32852bdb1a417e4ba62b83d0e17ac8d39834f41c8cd49517013ec658c4e10b38d0788df96764d13ce074271b51041671240549d18540271c8898a5c9e4be4895881235d59666a1f0f3b3cd098786afd6ab4781b73275232b488fb3d9eff77e71f8448a95c653fc80d069c15aa2a80d5799e6c45eb27ea8d6675f28f7aa7cfe3cef877c91ecf3e576e942a20312ffb48a64a91876ec5d1ad2f6a68946e73db4785894736106906731793c3482365d4151051c8d5f16dcb0348628e3aba4087ea8c9ce24bb93190fa12916f529c8eed6dfd3f5bc24d09b1ad377699de3f687b392ec921d81e35dc27bd14be4d004e713c3d07cf600255d45fdfb326b4327c9507c6f69d01236eb9383133dbaa787ba37de14a12e850ec60381a9ffab939ce16cb9b490685343048c0933bc280e809fc8114096ae2d303bbcbbc941b70b5d1d03f59f0b534fa195cbcf34e57d2aaee9c1dcddb5eafd8399fd1d53bfdb48a6f6d3153bb903ce411800f7220bdcfa312ac603672c163a0896b85409859b817cd304e73f278634fab0b1dbe226d7e4f93f220180c3434c7c22ac3143e06702f9a21e66a46d4980bd20d9b0c62846362d0a1151584a28a87902dd0f35187850d501c68900", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x8, {0xffffffffffffffff, 0x1, 0x16, 0x0, 0x7ff, 0x0, {0x2, 0x80000a418, 0x3, 0x6, 0x800000000003, 0x100000000000008, 0x80000000, 0x0, 0x6, 0x6000, 0x80000000, r5, r6, 0x0, 0x4c}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.400483873s ago: executing program 5 (id=4351): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) shutdown(r5, 0x1) 2.398555257s ago: executing program 4 (id=4352): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x7) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c8001e001a000100030208000700090004000500060c04000600020001000200056044c92599bb1add3a614b10d1c68e2a3d42e77b6cde06bc1dbfa9cf7159ea1501995833ecbaa49662190d2156c75c63c854679d8612f8fd1428e103e13719"], 0x23) 1.368980879s ago: executing program 5 (id=4353): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) sendmmsg$unix(r2, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000500)=[{{&(0x7f0000000180)=@generic, 0x80, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000a40)=""/209, 0xd1}, {&(0x7f0000000cc0)=""/253, 0xfd}, {0x0}, {0x0}, {&(0x7f0000000e40)=""/168, 0xa8}], 0x5}, 0xd0000}], 0x2, 0x0, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sync_file_range(r0, 0xffffffffffffa525, 0x7, 0x3) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r7 = socket(0x29, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d003507000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.368413936s ago: executing program 4 (id=4354): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYRES16=r1], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, 0x0, 0x1) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xa080, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 1.28785869s ago: executing program 0 (id=4355): socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, 0x0, {0xa}, {0x9, 0xffff}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4040011) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x81, 0xffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000600)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0x0, 0x7, 0x2, 0x0, 0x2, 0x5, 0x4, 0x3, 0xe98, r2}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x4}, 0xffffffffffffff12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) 1.243128017s ago: executing program 4 (id=4356): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000080)=0x6, 0x4) syz_usb_connect(0x2, 0xfffffffffffffe5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xfb, 0x8a, 0x54, 0x8, 0xb48, 0x1006, 0xb77d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0xf5, 0xa0, 0x9b, [{{0x9, 0x4, 0x46, 0x0, 0x0, 0xd6, 0x2c, 0x3e, 0x4}}]}}]}}, 0x0) 1.194327549s ago: executing program 3 (id=4357): syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffdfff"], 0x0) r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="fb01"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 1.023209318s ago: executing program 6 (id=4358): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4010) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = syz_io_uring_setup(0x110, &(0x7f00000001c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000380)=0x1ff, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 201.803689ms ago: executing program 5 (id=4359): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000000)=0x2) syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x14c0348, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000034c0)={0x2020}, 0xcac) 200.420397ms ago: executing program 6 (id=4360): mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='ext4\x00', 0x8000, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffd0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="8040deff000001000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x1000000, 0x0, 0x0) 86.790821ms ago: executing program 0 (id=4361): preadv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x8031, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x1000, 0x0, {}, {0xffffffffffffffff}, 0x4}) syz_open_procfs(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x200000000004, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d17855027dcd7407221bc", 0x0, 0x1200002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x7, 0x0, 0xfffffffe, 0x3, 0xfffffffd, 0xfefffffc}) setpriority(0x2, 0x0, 0x3b) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 0s ago: executing program 5 (id=4362): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40806, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)}], 0x1}, 0x8000) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x5d032, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, &(0x7f0000000080)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0x1) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000091401002dbd7012bb3376215efafeff3e4fa883"], 0x18}}, 0xc050) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xfffffffffffffeec, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f0000000340)="d4"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)="a1"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='fdinfo\x00') fchdir(r5) mkdir(&(0x7f0000000140)='./file0\x00', 0x12) syz_fuse_handle_req(r4, &(0x7f0000006680)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180), 0x0}) kernel console output (not intermixed with test programs): 4149][T20275] [ 1339.344209][T20275] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1339.600039][ T50] Bluetooth: hci3: command tx timeout acpid: input device has been disconnected, fd 3 [ 1339.756868][T20163] hsr_slave_0: entered promiscuous mode [ 1339.766419][T20163] hsr_slave_1: entered promiscuous mode [ 1339.773493][T20163] debugfs: 'hsr0' already exists in 'hsr' [ 1339.779270][T20163] Cannot create hsr debugfs directory [ 1339.843031][T20283] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3673'. [ 1340.067708][ T30] audit: type=1400 audit(1754575117.730:1357): avc: denied { bind } for pid=20289 comm="syz.4.3677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1340.162853][T20297] ptrace attach of "./syz-executor exec"[18194] was attempted by "./syz-executor exec"[20297] [ 1342.069743][ T50] Bluetooth: hci3: command tx timeout [ 1343.306375][ T48] hsr_slave_0: left promiscuous mode [ 1343.316115][ T48] hsr_slave_1: left promiscuous mode [ 1343.376602][ T48] veth1_macvtap: left promiscuous mode [ 1343.386119][ T48] veth0_macvtap: left promiscuous mode [ 1343.394076][ T48] veth1_vlan: left promiscuous mode [ 1343.405133][ T48] veth0_vlan: left promiscuous mode [ 1343.919964][T17536] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 1344.089148][T17536] usb 4-1: not running at top speed; connect to a high speed hub [ 1344.109968][T17536] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1344.127310][T17536] usb 4-1: config 1 has an invalid descriptor of length 198, skipping remainder of the config [ 1344.137667][T17536] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1344.163588][T17536] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 1344.183206][T17536] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1344.247904][T17536] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1344.267262][T20314] FAULT_INJECTION: forcing a failure. [ 1344.267262][T20314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1344.267803][T17536] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.299256][T20314] CPU: 0 UID: 0 PID: 20314 Comm: syz.4.3683 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1344.299281][T20314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1344.299290][T20314] Call Trace: [ 1344.299295][T20314] [ 1344.299302][T20314] dump_stack_lvl+0x16c/0x1f0 [ 1344.299331][T20314] should_fail_ex+0x512/0x640 [ 1344.299349][T20314] _copy_from_iter+0x29f/0x16f0 [ 1344.299373][T20314] ? __pfx__copy_from_iter+0x10/0x10 [ 1344.299391][T20314] ? rcu_is_watching+0x12/0xc0 [ 1344.299411][T20314] ? trace_kmalloc+0x2b/0xd0 [ 1344.299428][T20314] ? __kmalloc_noprof+0x242/0x510 [ 1344.299450][T20314] kernfs_fop_write_iter+0x19a/0x510 [ 1344.299470][T20314] vfs_write+0x6c4/0x1150 [ 1344.299487][T20314] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1344.299505][T20314] ? __pfx___mutex_lock+0x10/0x10 [ 1344.299519][T20314] ? __pfx_vfs_write+0x10/0x10 [ 1344.299551][T20314] ksys_write+0x12a/0x250 [ 1344.299566][T20314] ? __pfx_ksys_write+0x10/0x10 [ 1344.299608][T20314] do_syscall_64+0xcd/0x4c0 [ 1344.299625][T20314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1344.299641][T20314] RIP: 0033:0x7f95a2d8ebe9 [ 1344.299654][T20314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1344.299669][T20314] RSP: 002b:00007f95a3b8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1344.299684][T20314] RAX: ffffffffffffffda RBX: 00007f95a2fb5fa0 RCX: 00007f95a2d8ebe9 [ 1344.299695][T20314] RDX: 0000000000000006 RSI: 0000200000000300 RDI: 0000000000000004 [ 1344.299704][T20314] RBP: 00007f95a3b8f090 R08: 0000000000000000 R09: 0000000000000000 [ 1344.299713][T20314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1344.299722][T20314] R13: 00007f95a2fb6038 R14: 00007f95a2fb5fa0 R15: 00007ffc232b89a8 [ 1344.299745][T20314] [ 1344.304539][T17536] usb 4-1: Product: syz [ 1344.500373][T17536] usb 4-1: Manufacturer: syz [ 1344.506167][T17536] usb 4-1: SerialNumber: syz [ 1344.516238][T20304] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1344.570160][ T5912] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1344.742580][ T5912] usb 7-1: Using ep0 maxpacket: 32 [ 1344.776163][ T5912] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1344.799976][ T5912] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1344.822434][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.831042][ T5912] usb 7-1: Product: syz [ 1344.845694][ T5912] usb 7-1: Manufacturer: syz [ 1344.854402][ T5912] usb 7-1: SerialNumber: syz [ 1344.881756][ T5912] usb 7-1: config 0 descriptor?? [ 1344.896256][ T5912] usb 7-1: bad CDC descriptors [ 1344.908993][ T5912] usb 7-1: unsupported MDLM descriptors [ 1345.276639][T20324] syz.4.3685 (20324): drop_caches: 2 [ 1345.292421][ T5912] usb 7-1: USB disconnect, device number 9 [ 1345.310150][ T30] audit: type=1400 audit(1754575122.970:1358): avc: denied { read } for pid=20315 comm="syz.6.3684" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1345.350031][T20324] syz.4.3685 (20324): drop_caches: 2 [ 1345.360579][ T30] audit: type=1400 audit(1754575122.970:1359): avc: denied { open } for pid=20315 comm="syz.6.3684" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1345.387468][T17536] usb 4-1: 0:2 : does not exist [ 1345.402990][T17536] usb 4-1: USB disconnect, device number 55 [ 1346.099526][ T48] IPVS: stop unused estimator thread 0... [ 1346.893585][T20163] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1346.987948][T20163] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1347.003448][T20357] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3693'. [ 1347.030131][T20163] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1347.060992][T20355] FAULT_INJECTION: forcing a failure. [ 1347.060992][T20355] name failslab, interval 1, probability 0, space 0, times 0 [ 1347.101067][T20163] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1347.112149][T20355] CPU: 0 UID: 0 PID: 20355 Comm: syz.3.3692 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1347.112173][T20355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1347.112184][T20355] Call Trace: [ 1347.112191][T20355] [ 1347.112198][T20355] dump_stack_lvl+0x16c/0x1f0 [ 1347.112226][T20355] should_fail_ex+0x512/0x640 [ 1347.112241][T20355] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1347.112262][T20355] should_failslab+0xc2/0x120 [ 1347.112282][T20355] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1347.112300][T20355] ? __alloc_skb+0x2b2/0x380 [ 1347.112329][T20355] __alloc_skb+0x2b2/0x380 [ 1347.112352][T20355] ? __pfx___alloc_skb+0x10/0x10 [ 1347.112379][T20355] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1347.112411][T20355] netlink_alloc_large_skb+0x69/0x130 [ 1347.112438][T20355] netlink_sendmsg+0x6a1/0xdd0 [ 1347.112458][T20355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1347.112483][T20355] ____sys_sendmsg+0xa98/0xc70 [ 1347.112503][T20355] ? copy_msghdr_from_user+0x10a/0x160 [ 1347.112529][T20355] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1347.112560][T20355] ___sys_sendmsg+0x134/0x1d0 [ 1347.112587][T20355] ? __pfx____sys_sendmsg+0x10/0x10 [ 1347.112630][T20355] ? __mutex_unlock_slowpath+0x100/0x800 [ 1347.112664][T20355] __sys_sendmsg+0x16d/0x220 [ 1347.112690][T20355] ? __pfx___sys_sendmsg+0x10/0x10 [ 1347.112731][T20355] do_syscall_64+0xcd/0x4c0 [ 1347.112750][T20355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.112767][T20355] RIP: 0033:0x7f77bbf8ebe9 [ 1347.112782][T20355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1347.112799][T20355] RSP: 002b:00007f77bce8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1347.112816][T20355] RAX: ffffffffffffffda RBX: 00007f77bc1b5fa0 RCX: 00007f77bbf8ebe9 [ 1347.112828][T20355] RDX: 0000000000008090 RSI: 0000200000001540 RDI: 0000000000000003 [ 1347.112839][T20355] RBP: 00007f77bce8b090 R08: 0000000000000000 R09: 0000000000000000 [ 1347.112849][T20355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1347.112859][T20355] R13: 00007f77bc1b6038 R14: 00007f77bc1b5fa0 R15: 00007fffa06755b8 [ 1347.112892][T20355] [ 1348.124776][T20163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1348.382781][T20163] 8021q: adding VLAN 0 to HW filter on device team0 [ 1348.398712][T17351] bridge0: port 1(bridge_slave_0) entered blocking state [ 1348.405815][T17351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1348.625963][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1348.633075][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1349.245757][T20163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1350.488379][T20163] veth0_vlan: entered promiscuous mode [ 1350.556765][T20163] veth1_vlan: entered promiscuous mode [ 1350.618270][T20416] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3704'. [ 1350.702349][T20163] veth0_macvtap: entered promiscuous mode [ 1350.730373][T20163] veth1_macvtap: entered promiscuous mode [ 1350.774885][T20163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1350.833960][T20163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1350.874541][ T6230] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.007144][ T6230] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.016655][ T6230] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.031125][ T6230] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.555070][T17345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1351.563649][T17345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1351.615812][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1351.627703][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1351.826545][T20429] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3637'. [ 1351.846033][T20430] ptrace attach of "./syz-executor exec"[17718] was attempted by "./syz-executor exec"[20430] [ 1352.609895][ T840] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1352.801867][ T840] usb 7-1: Using ep0 maxpacket: 16 [ 1353.047203][T20461] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3715'. [ 1353.174174][ T840] usb 7-1: config 0 has an invalid interface number: 244 but max is 0 [ 1353.243568][ T840] usb 7-1: config 0 has no interface number 0 [ 1353.261245][ T840] usb 7-1: New USB device found, idVendor=182d, idProduct=021c, bcdDevice=3f.ac [ 1353.275500][ T840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.285826][ T840] usb 7-1: config 0 descriptor?? [ 1353.297944][ T30] audit: type=1326 audit(1754575130.980:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20463 comm="syz.3.3717" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77bbf8ebe9 code=0x0 [ 1356.143871][T20493] syz.5.3723 (20493): drop_caches: 2 [ 1356.149848][T20493] syz.5.3723 (20493): drop_caches: 2 [ 1356.474704][T20498] FAULT_INJECTION: forcing a failure. [ 1356.474704][T20498] name failslab, interval 1, probability 0, space 0, times 0 [ 1356.487496][T20498] CPU: 0 UID: 0 PID: 20498 Comm: syz.3.3724 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1356.487527][T20498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1356.487538][T20498] Call Trace: [ 1356.487545][T20498] [ 1356.487552][T20498] dump_stack_lvl+0x16c/0x1f0 [ 1356.487587][T20498] should_fail_ex+0x512/0x640 [ 1356.487604][T20498] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1356.487625][T20498] should_failslab+0xc2/0x120 [ 1356.487647][T20498] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1356.487667][T20498] ? getname_flags.part.0+0x4c/0x550 [ 1356.487697][T20498] getname_flags.part.0+0x4c/0x550 [ 1356.487726][T20498] getname_flags+0x93/0xf0 [ 1356.487745][T20498] do_sys_openat2+0xb8/0x1d0 [ 1356.487770][T20498] ? __pfx_do_sys_openat2+0x10/0x10 [ 1356.487798][T20498] ? __pfx___schedule+0x10/0x10 [ 1356.487825][T20498] __x64_sys_openat+0x174/0x210 [ 1356.487850][T20498] ? __pfx___x64_sys_openat+0x10/0x10 [ 1356.487885][T20498] do_syscall_64+0xcd/0x4c0 [ 1356.487904][T20498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.487922][T20498] RIP: 0033:0x7f77bbf8d550 [ 1356.487937][T20498] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1356.487954][T20498] RSP: 002b:00007f77bce48b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1356.487972][T20498] RAX: ffffffffffffffda RBX: 0000000000141102 RCX: 00007f77bbf8d550 [ 1356.487983][T20498] RDX: 0000000000141102 RSI: 00007f77bce48c10 RDI: 00000000ffffff9c [ 1356.487996][T20498] RBP: 00007f77bce48c10 R08: 0000000000000000 R09: 0000000000000000 [ 1356.488007][T20498] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 1356.488018][T20498] R13: 00007f77bc1b6218 R14: 00007f77bc1b6180 R15: 00007fffa06755b8 [ 1356.488043][T20498] [ 1356.718845][ T840] usb 7-1: string descriptor 0 read error: -71 [ 1356.726490][T20488] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1356.734327][ T840] sisusb 7-1:0.244: Invalid USB2VGA device [ 1356.740318][ T840] sisusb 7-1:0.244: probe with driver sisusb failed with error -22 [ 1356.749518][ T840] usb 7-1: USB disconnect, device number 10 [ 1356.779052][T20502] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input47 [ 1356.873446][ T30] audit: type=1326 audit(1754575134.560:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20499 comm="syz.0.3725" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf5078ebe9 code=0x0 [ 1357.577275][T20516] FAULT_INJECTION: forcing a failure. [ 1357.577275][T20516] name failslab, interval 1, probability 0, space 0, times 0 [ 1357.591241][T20516] CPU: 0 UID: 0 PID: 20516 Comm: syz.3.3729 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1357.591258][T20516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1357.591264][T20516] Call Trace: [ 1357.591269][T20516] [ 1357.591273][T20516] dump_stack_lvl+0x16c/0x1f0 [ 1357.591295][T20516] should_fail_ex+0x512/0x640 [ 1357.591305][T20516] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1357.591319][T20516] should_failslab+0xc2/0x120 [ 1357.591332][T20516] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1357.591343][T20516] ? __alloc_skb+0x2b2/0x380 [ 1357.591361][T20516] __alloc_skb+0x2b2/0x380 [ 1357.591376][T20516] ? __pfx___alloc_skb+0x10/0x10 [ 1357.591392][T20516] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1357.591413][T20516] netlink_alloc_large_skb+0x69/0x130 [ 1357.591430][T20516] netlink_sendmsg+0x6a1/0xdd0 [ 1357.591443][T20516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1357.591458][T20516] ____sys_sendmsg+0xa98/0xc70 [ 1357.591471][T20516] ? copy_msghdr_from_user+0x10a/0x160 [ 1357.591486][T20516] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1357.591504][T20516] ___sys_sendmsg+0x134/0x1d0 [ 1357.591521][T20516] ? __pfx____sys_sendmsg+0x10/0x10 [ 1357.591549][T20516] ? __mutex_unlock_slowpath+0x100/0x800 [ 1357.591570][T20516] __sys_sendmsg+0x16d/0x220 [ 1357.591586][T20516] ? __pfx___sys_sendmsg+0x10/0x10 [ 1357.591616][T20516] do_syscall_64+0xcd/0x4c0 [ 1357.591628][T20516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.591639][T20516] RIP: 0033:0x7f77bbf8ebe9 [ 1357.591648][T20516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1357.591658][T20516] RSP: 002b:00007f77bce8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1357.591671][T20516] RAX: ffffffffffffffda RBX: 00007f77bc1b5fa0 RCX: 00007f77bbf8ebe9 [ 1357.591678][T20516] RDX: 000000000000c800 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1357.591684][T20516] RBP: 00007f77bce8b090 R08: 0000000000000000 R09: 0000000000000000 [ 1357.591690][T20516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1357.591696][T20516] R13: 00007f77bc1b6038 R14: 00007f77bc1b5fa0 R15: 00007fffa06755b8 [ 1357.591710][T20516] [ 1357.819789][ T50] Bluetooth: hci2: command 0x0401 tx timeout [ 1358.293664][T20523] FAULT_INJECTION: forcing a failure. [ 1358.293664][T20523] name failslab, interval 1, probability 0, space 0, times 0 [ 1358.308082][T20523] CPU: 0 UID: 0 PID: 20523 Comm: syz.3.3732 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1358.308110][T20523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1358.308121][T20523] Call Trace: [ 1358.308127][T20523] [ 1358.308135][T20523] dump_stack_lvl+0x16c/0x1f0 [ 1358.308165][T20523] should_fail_ex+0x512/0x640 [ 1358.308181][T20523] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1358.308202][T20523] should_failslab+0xc2/0x120 [ 1358.308223][T20523] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1358.308241][T20523] ? __alloc_skb+0x2b2/0x380 [ 1358.308268][T20523] __alloc_skb+0x2b2/0x380 [ 1358.308291][T20523] ? __pfx___alloc_skb+0x10/0x10 [ 1358.308314][T20523] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 1358.308348][T20523] pfkey_sendmsg+0x16e/0x850 [ 1358.308370][T20523] ____sys_sendmsg+0xa98/0xc70 [ 1358.308391][T20523] ? copy_msghdr_from_user+0x10a/0x160 [ 1358.308417][T20523] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1358.308447][T20523] ___sys_sendmsg+0x134/0x1d0 [ 1358.308475][T20523] ? __pfx____sys_sendmsg+0x10/0x10 [ 1358.308522][T20523] ? __mutex_unlock_slowpath+0x100/0x800 [ 1358.308564][T20523] __sys_sendmsg+0x16d/0x220 [ 1358.308590][T20523] ? __pfx___sys_sendmsg+0x10/0x10 [ 1358.308631][T20523] do_syscall_64+0xcd/0x4c0 [ 1358.308650][T20523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.308667][T20523] RIP: 0033:0x7f77bbf8ebe9 [ 1358.308681][T20523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1358.308698][T20523] RSP: 002b:00007f77bce8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1358.308716][T20523] RAX: ffffffffffffffda RBX: 00007f77bc1b5fa0 RCX: 00007f77bbf8ebe9 [ 1358.308727][T20523] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1358.308737][T20523] RBP: 00007f77bce8b090 R08: 0000000000000000 R09: 0000000000000000 [ 1358.308748][T20523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1358.308758][T20523] R13: 00007f77bc1b6038 R14: 00007f77bc1b5fa0 R15: 00007fffa06755b8 [ 1358.308782][T20523] [ 1358.551213][ T30] audit: type=1326 audit(1754575136.240:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20520 comm="syz.4.3730" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f95a2d8ebe9 code=0x0 [ 1359.090968][T20536] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3731'. [ 1359.398535][ T30] audit: type=1400 audit(1754575137.060:1363): avc: denied { accept } for pid=20529 comm="syz.3.3734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1360.351516][ T30] audit: type=1400 audit(1754575137.830:1364): avc: denied { ioctl } for pid=20529 comm="syz.3.3734" path="socket:[89627]" dev="sockfs" ino=89627 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1360.472655][T20549] ptrace attach of "./syz-executor exec"[18194] was attempted by "./syz-executor exec"[20549] [ 1361.191148][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.201011][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.501561][ T30] audit: type=1400 audit(1754575140.180:1365): avc: denied { ioctl } for pid=20570 comm="syz.6.3743" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x6404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1362.526142][ C0] vkms_vblank_simulate: vblank timer overrun [ 1362.929258][ T50] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 1362.957610][T20584] ptrace attach of "./syz-executor exec"[17511] was attempted by "./syz-executor exec"[20584] [ 1363.188054][T20585] FAULT_INJECTION: forcing a failure. [ 1363.188054][T20585] name failslab, interval 1, probability 0, space 0, times 0 [ 1363.243764][T20585] CPU: 1 UID: 0 PID: 20585 Comm: syz.3.3748 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1363.243781][T20585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1363.243788][T20585] Call Trace: [ 1363.243792][T20585] [ 1363.243797][T20585] dump_stack_lvl+0x16c/0x1f0 [ 1363.243818][T20585] should_fail_ex+0x512/0x640 [ 1363.243828][T20585] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1363.243842][T20585] should_failslab+0xc2/0x120 [ 1363.243855][T20585] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1363.243866][T20585] ? __alloc_skb+0x2b2/0x380 [ 1363.243884][T20585] __alloc_skb+0x2b2/0x380 [ 1363.243898][T20585] ? __pfx___alloc_skb+0x10/0x10 [ 1363.243915][T20585] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1363.243936][T20585] netlink_alloc_large_skb+0x69/0x130 [ 1363.243954][T20585] netlink_sendmsg+0x6a1/0xdd0 [ 1363.243966][T20585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1363.243981][T20585] ____sys_sendmsg+0xa98/0xc70 [ 1363.243994][T20585] ? copy_msghdr_from_user+0x10a/0x160 [ 1363.244010][T20585] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1363.244028][T20585] ___sys_sendmsg+0x134/0x1d0 [ 1363.244044][T20585] ? __pfx____sys_sendmsg+0x10/0x10 [ 1363.244071][T20585] ? __mutex_unlock_slowpath+0x100/0x800 [ 1363.244093][T20585] __sys_sendmsg+0x16d/0x220 [ 1363.244109][T20585] ? __pfx___sys_sendmsg+0x10/0x10 [ 1363.244133][T20585] do_syscall_64+0xcd/0x4c0 [ 1363.244144][T20585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.244156][T20585] RIP: 0033:0x7f77bbf8ebe9 [ 1363.244165][T20585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1363.244175][T20585] RSP: 002b:00007f77bce8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1363.244186][T20585] RAX: ffffffffffffffda RBX: 00007f77bc1b5fa0 RCX: 00007f77bbf8ebe9 [ 1363.244193][T20585] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 1363.244200][T20585] RBP: 00007f77bce8b090 R08: 0000000000000000 R09: 0000000000000000 [ 1363.244206][T20585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1363.244212][T20585] R13: 00007f77bc1b6038 R14: 00007f77bc1b5fa0 R15: 00007fffa06755b8 [ 1363.244226][T20585] [ 1363.574256][T20590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3750'. [ 1363.689916][T20593] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3751'. acpid: input device has been disconnected, fd 3 [ 1365.362304][T20629] ptrace attach of "./syz-executor exec"[18194] was attempted by "./syz-executor exec"[20629] [ 1365.774574][ T30] audit: type=1400 audit(1754575143.460:1366): avc: denied { read } for pid=20642 comm="syz.0.3766" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1365.830015][ T1207] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1365.835492][ T30] audit: type=1400 audit(1754575143.460:1367): avc: denied { open } for pid=20642 comm="syz.0.3766" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1365.945865][T20649] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3770'. [ 1366.002944][ T1207] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1366.017535][ T1207] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice= 0.00 [ 1366.028175][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.043788][ T1207] usb 4-1: config 0 descriptor?? [ 1366.063379][T20658] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3772'. [ 1366.268557][ T5930] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1367.027273][ T5930] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1367.036139][ T5930] usb 6-1: config 0 has no interface number 0 [ 1367.126617][ T5930] usb 6-1: too many endpoints for config 0 interface 2 altsetting 0: 129, using maximum allowed: 30 [ 1367.202856][T20666] 9pnet_fd: Insufficient options for proto=fd [ 1367.218367][ T5930] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1367.244478][ T5930] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1367.255054][ T5930] usb 6-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1367.281162][T20668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1367.290154][T20668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1367.322609][T20666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=20666 comm=syz.3.3765 [ 1367.438641][ T5930] usb 6-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 1367.448370][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.473952][ T5930] usb 6-1: config 0 descriptor?? [ 1367.660943][ T1207] apple 0003:05AC:0291.0009: hidraw0: USB HID vff.fd Device [HID 05ac:0291] on usb-dummy_hcd.3-1/input0 [ 1367.719666][ T5912] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1367.912733][ T5930] wacom 0003:056A:0084.000A: unknown main item tag 0x0 [ 1367.956524][ T5930] wacom 0003:056A:0084.000A: unknown main item tag 0x0 [ 1367.986552][ T5930] wacom 0003:056A:0084.000A: hidraw1: USB HID vff.ea Device [HID 056a:0084] on usb-dummy_hcd.5-1/input2 [ 1367.999820][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 1368.006668][ T5912] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 1368.018518][ T5912] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1368.055598][ T5912] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1368.094345][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1368.135644][T20646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.150061][ T5912] usb 1-1: SerialNumber: syz [ 1368.192313][T20682] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1368.202278][T20646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.202345][T20682] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1368.316106][T20646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.410020][T20646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.424153][ T5930] usb 6-1: USB disconnect, device number 30 [ 1368.468325][ T5912] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 1368.503038][ T5912] usb 1-1: USB disconnect, device number 60 [ 1368.961867][ T5891] usb 4-1: USB disconnect, device number 56 [ 1368.989509][T20693] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3781'. [ 1370.665425][T20720] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1371.119531][T20723] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3790'. [ 1371.133339][T20723] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3790'. [ 1372.094418][ T1207] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 1372.268044][ T1207] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 1372.280741][ T1207] usb 4-1: config 0 has no interface number 0 [ 1372.294028][ T1207] usb 4-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9 [ 1372.305989][ T1207] usb 4-1: config 0 interface 49 altsetting 0 endpoint 0x9 has invalid maxpacket 99, setting to 64 [ 1372.327117][ T1207] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1372.336383][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.345129][ T1207] usb 4-1: Product: syz [ 1372.349354][ T1207] usb 4-1: Manufacturer: syz [ 1372.354849][ T1207] usb 4-1: SerialNumber: syz [ 1372.937976][ T1207] usb 4-1: config 0 descriptor?? [ 1372.944839][T20728] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1373.059747][T17536] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1373.208410][ T1207] qcserial 4-1:0.49: Qualcomm USB modem converter detected [ 1373.230105][T17536] usb 6-1: Using ep0 maxpacket: 16 [ 1373.241886][T17536] usb 6-1: config 0 has an invalid interface number: 244 but max is 0 [ 1373.305959][ T1207] usb 4-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 1373.330200][T17536] usb 6-1: config 0 has no interface number 0 [ 1373.336337][T17536] usb 6-1: New USB device found, idVendor=182d, idProduct=021c, bcdDevice=3f.ac [ 1373.398798][ T1207] usb 4-1: USB disconnect, device number 57 [ 1373.406064][T20765] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3801'. [ 1373.408056][T17536] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.430964][ T1207] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 1373.431727][T20765] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3801'. [ 1373.451889][ T1207] qcserial 4-1:0.49: device disconnected [ 1373.633310][T17536] usb 6-1: config 0 descriptor?? [ 1373.869812][ T5912] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1373.917204][ T30] audit: type=1326 audit(1754575151.600:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20768 comm="syz.3.3803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bbf8ebe9 code=0x7ffc0000 [ 1374.155184][ T5912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1374.165718][ T5912] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1374.194607][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.679735][ T5912] usb 7-1: config 0 descriptor?? [ 1374.690075][ T30] audit: type=1326 audit(1754575151.600:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20768 comm="syz.3.3803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bbf8ebe9 code=0x7ffc0000 [ 1374.715304][ T30] audit: type=1326 audit(1754575151.600:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20768 comm="syz.3.3803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f77bbf8ebe9 code=0x7ffc0000 [ 1374.801659][ T30] audit: type=1326 audit(1754575151.600:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20768 comm="syz.3.3803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bbf8ebe9 code=0x7ffc0000 [ 1374.840990][ T30] audit: type=1326 audit(1754575151.600:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20768 comm="syz.3.3803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bbf8ebe9 code=0x7ffc0000 [ 1374.914015][ T30] audit: type=1326 audit(1754575151.600:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20768 comm="syz.3.3803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f77bbf8ebe9 code=0x7ffc0000 [ 1374.991865][ T30] audit: type=1326 audit(1754575151.600:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20768 comm="syz.3.3803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bbf8ebe9 code=0x7ffc0000 [ 1375.018431][ T30] audit: type=1326 audit(1754575151.600:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20768 comm="syz.3.3803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bbf8ebe9 code=0x7ffc0000 [ 1375.121418][ T30] audit: type=1326 audit(1754575151.630:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20768 comm="syz.3.3803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f77bbf8ebe9 code=0x7ffc0000 [ 1375.238269][ T5912] lenovo 0003:17EF:6047.000B: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.6-1/input0 [ 1375.253951][ T30] audit: type=1326 audit(1754575151.670:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20768 comm="syz.3.3803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bbf8ebe9 code=0x7ffc0000 [ 1375.321158][T17536] usb 6-1: string descriptor 0 read error: -71 [ 1375.338580][T17536] sisusb 6-1:0.244: Invalid USB2VGA device [ 1375.352862][T17536] sisusb 6-1:0.244: probe with driver sisusb failed with error -22 [ 1375.481182][ T5912] lenovo 0003:17EF:6047.000B: Failed to switch F7/9/11 mode: -71 [ 1375.490159][ T5912] lenovo 0003:17EF:6047.000B: Failed to switch middle button: -71 [ 1375.502582][T17536] usb 6-1: USB disconnect, device number 31 [ 1375.517015][ T5912] lenovo 0003:17EF:6047.000B: Fn-lock setting failed: -71 [ 1375.533308][ T5912] lenovo 0003:17EF:6047.000B: Sensitivity setting failed: -71 [ 1376.033873][ T5912] usb 7-1: USB disconnect, device number 11 [ 1376.089772][ T10] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1376.279693][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1376.359689][ T10] usb 5-1: config 2 has an invalid interface number: 157 but max is 0 [ 1376.389856][ T10] usb 5-1: config 2 has no interface number 0 [ 1376.412905][ T10] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 1376.426667][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.462872][ T10] usb 5-1: Product: syz [ 1376.467064][ T10] usb 5-1: Manufacturer: syz [ 1376.472082][ T10] usb 5-1: SerialNumber: syz [ 1376.481679][ T10] imon 5-1:2.157: unable to register, err -19 [ 1376.649816][T17536] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1376.829869][T17536] usb 4-1: Using ep0 maxpacket: 8 [ 1376.900100][T20829] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3812'. [ 1377.137875][T17536] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1377.165330][T17536] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1377.178048][T17536] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1377.218209][T20777] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1377.226072][T17536] usb 4-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 1377.236399][T17536] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.264959][ T10] usb 5-1: USB disconnect, device number 52 [ 1377.277069][T17536] usb 4-1: config 0 descriptor?? [ 1377.452262][ T50] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 1378.052335][T20843] syz.6.3815 (20843): drop_caches: 2 [ 1378.060096][T20843] syz.6.3815 (20843): drop_caches: 2 [ 1378.129131][T17536] cypress 0003:04B4:0001.000C: hidraw0: USB HID v0.00 Device [HID 04b4:0001] on usb-dummy_hcd.3-1/input0 [ 1378.336575][ T5930] usb 4-1: USB disconnect, device number 58 [ 1380.341997][T20877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3825'. [ 1381.955899][T20904] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3829'. [ 1381.976881][T20903] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3831'. [ 1383.023710][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1383.023721][ T30] audit: type=1400 audit(1754575160.710:1393): avc: denied { read } for pid=20917 comm="syz.4.3837" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1383.118672][ T30] audit: type=1400 audit(1754575160.710:1394): avc: denied { open } for pid=20917 comm="syz.4.3837" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1383.148269][ T30] audit: type=1400 audit(1754575160.740:1395): avc: denied { connect } for pid=20917 comm="syz.4.3837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1383.264193][T20927] (unnamed net_device) (uninitialized): (slave veth1_to_batadv): Device is not bonding slave [ 1383.276765][T20927] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1_to_batadv) [ 1383.799698][ T5930] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1383.941144][ T5930] usb 6-1: device descriptor read/64, error -71 [ 1384.029712][ T5912] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1384.148411][T17536] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1384.217663][ T5912] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1384.228150][ T5912] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1384.250111][ T5912] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1384.269345][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1384.269819][ T5930] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1384.285174][ T5912] usb 4-1: SerialNumber: syz [ 1384.289939][T17536] usb 5-1: device descriptor read/64, error -71 [ 1384.431623][ T5930] usb 6-1: device descriptor read/64, error -71 [ 1384.514915][ T5912] usb 4-1: 0:2 : does not exist [ 1384.519928][ T5912] usb 4-1: unit 5 not found! [ 1384.529761][T17536] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1384.533704][ T5912] usb 4-1: USB disconnect, device number 59 [ 1384.561406][ T5930] usb usb6-port1: attempt power cycle [ 1384.699946][T17536] usb 5-1: device descriptor read/64, error -71 [ 1384.820231][T17536] usb usb5-port1: attempt power cycle [ 1384.919743][ T5930] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1385.025646][ T5930] usb 6-1: device descriptor read/8, error -71 [ 1385.160509][T17536] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1385.181703][T17536] usb 5-1: device descriptor read/8, error -71 [ 1385.333348][T20956] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3846'. [ 1385.533953][ T5930] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1385.570622][ T5930] usb 6-1: device descriptor read/8, error -71 [ 1385.761773][T17536] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1385.769764][ T5930] usb usb6-port1: unable to enumerate USB device [ 1385.862833][T17536] usb 5-1: device descriptor read/8, error -71 [ 1385.961223][T20965] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3848'. [ 1386.100071][T17536] usb usb5-port1: unable to enumerate USB device [ 1386.246155][ T30] audit: type=1400 audit(1754575163.930:1396): avc: denied { rename } for pid=20972 comm="syz.5.3852" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1388.043952][ T30] audit: type=1400 audit(1754575165.730:1397): avc: denied { execute } for pid=20998 comm="syz.4.3860" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1388.372121][T21006] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1388.962083][T21009] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3862'. [ 1388.971111][T21009] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1389.292371][ T5930] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1389.788766][ T30] audit: type=1400 audit(1754575167.090:1398): avc: denied { setattr } for pid=21019 comm="syz.4.3865" name="" dev="pipefs" ino=92086 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1390.689185][ T5930] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 1390.697446][ T5930] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1390.709710][ T840] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1390.718272][ T5930] usb 6-1: config 0 has no interface number 0 [ 1390.726050][ T5930] usb 6-1: config 0 interface 255 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1390.745858][ T5930] usb 6-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 1390.755269][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.764928][ T5930] usb 6-1: Product: syz [ 1390.769124][ T5930] usb 6-1: Manufacturer: syz [ 1390.773821][ T5930] usb 6-1: SerialNumber: syz [ 1390.783495][ T5930] usb 6-1: config 0 descriptor?? [ 1390.802498][ T5930] vmk80xx 6-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 1390.869820][ T840] usb 5-1: Using ep0 maxpacket: 16 [ 1390.903024][ T840] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1390.947115][ T840] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1390.974795][ T840] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1390.992242][ T840] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1391.028206][ T840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.036986][ T840] usb 5-1: Product: syz [ 1391.042643][ T840] usb 5-1: Manufacturer: syz [ 1391.047347][ T840] usb 5-1: SerialNumber: syz [ 1391.469427][T21051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3871'. [ 1392.159032][ T5930] usb 6-1: USB disconnect, device number 36 [ 1392.296707][ T840] usb 5-1: 0:2 : does not exist [ 1392.448891][T21059] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3872'. [ 1393.019428][T21051] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1393.029013][T21051] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1393.038744][T21051] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1393.400051][T21067] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3874'. [ 1393.440109][T21067] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3874'. [ 1393.541103][T21072] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3877'. [ 1393.556140][T21072] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1393.689802][ T54] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1393.859867][ T54] usb 1-1: Using ep0 maxpacket: 16 [ 1393.909802][ T30] audit: type=1400 audit(1754575171.510:1399): avc: denied { associate } for pid=21034 comm="syz.4.3869" name="cpu.stat" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1393.913386][T21075] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3879'. [ 1393.940663][T21075] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1393.970999][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1393.978114][ T840] usb 5-1: USB disconnect, device number 57 [ 1393.999704][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1394.023152][ T54] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1394.357952][ T54] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1394.379147][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.416613][ T54] usb 1-1: config 0 descriptor?? [ 1394.631474][ T50] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 1394.913452][T21071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.968547][T21071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1395.354059][ T54] usbhid 1-1:0.0: can't add hid device: -71 [ 1395.365351][ T54] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1396.141406][ T54] usb 1-1: USB disconnect, device number 61 [ 1397.756159][ T30] audit: type=1400 audit(1754575175.050:1400): avc: denied { execute_no_trans } for pid=21117 comm="syz.5.3890" path=2F6D656D66643A5B0BDB58AE5B1AA9202864656C6574656429 dev="hugetlbfs" ino=93325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1397.789431][T21121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1397.798901][T21121] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1398.091034][ T30] audit: type=1400 audit(1754575175.170:1401): avc: denied { bind } for pid=21117 comm="syz.5.3890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1398.337428][ T30] audit: type=1400 audit(1754575175.180:1402): avc: denied { name_bind } for pid=21117 comm="syz.5.3890" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1398.414684][ T30] audit: type=1400 audit(1754575175.180:1403): avc: denied { node_bind } for pid=21117 comm="syz.5.3890" saddr=172.30.0.6 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1399.067502][T21139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3895'. [ 1399.403045][T21140] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3894'. [ 1399.412133][T21140] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1399.940189][T21156] FAULT_INJECTION: forcing a failure. [ 1399.940189][T21156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1399.979686][T21156] CPU: 1 UID: 0 PID: 21156 Comm: syz.4.3897 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1399.979705][T21156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1399.979711][T21156] Call Trace: [ 1399.979716][T21156] [ 1399.979723][T21156] dump_stack_lvl+0x16c/0x1f0 [ 1399.979745][T21156] should_fail_ex+0x512/0x640 [ 1399.979758][T21156] _copy_from_user+0x2e/0xd0 [ 1399.979771][T21156] copy_msghdr_from_user+0x98/0x160 [ 1399.979789][T21156] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1399.979809][T21156] ? __lock_acquire+0x62e/0x1ce0 [ 1399.979829][T21156] ___sys_recvmsg+0xdb/0x1a0 [ 1399.979846][T21156] ? __pfx____sys_recvmsg+0x10/0x10 [ 1399.979863][T21156] ? find_held_lock+0x2b/0x80 [ 1399.979885][T21156] do_recvmmsg+0x2fe/0x750 [ 1399.979903][T21156] ? __pfx_do_recvmmsg+0x10/0x10 [ 1399.979919][T21156] ? ksys_write+0x190/0x250 [ 1399.979933][T21156] ? __mutex_unlock_slowpath+0x163/0x800 [ 1399.979955][T21156] ? __fget_files+0x20e/0x3c0 [ 1399.979971][T21156] __x64_sys_recvmmsg+0x22a/0x280 [ 1399.979989][T21156] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1399.980010][T21156] do_syscall_64+0xcd/0x4c0 [ 1399.980022][T21156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1399.980033][T21156] RIP: 0033:0x7f95a2d8ebe9 [ 1399.980042][T21156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1399.980053][T21156] RSP: 002b:00007f95a3b4d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1399.980063][T21156] RAX: ffffffffffffffda RBX: 00007f95a2fb6180 RCX: 00007f95a2d8ebe9 [ 1399.980070][T21156] RDX: 0000000000000005 RSI: 0000200000001980 RDI: 0000000000000003 [ 1399.980077][T21156] RBP: 00007f95a3b4d090 R08: 0000000000000000 R09: 0000000000000000 [ 1399.980083][T21156] R10: 0000000040000102 R11: 0000000000000246 R12: 0000000000000001 [ 1399.980089][T21156] R13: 00007f95a2fb6218 R14: 00007f95a2fb6180 R15: 00007ffc232b89a8 [ 1399.980103][T21156] [ 1401.207642][T21181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3904'. [ 1401.479297][ T30] audit: type=1400 audit(1754575179.080:1404): avc: denied { write } for pid=21159 comm="syz.0.3900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1401.480024][T21189] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1402.070170][ T5930] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1402.471189][ T5930] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 1402.552901][ T5930] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1402.571781][ T5930] usb 4-1: config 0 has no interface number 0 [ 1402.581166][ T5930] usb 4-1: config 0 interface 255 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1402.597977][ T5930] usb 4-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 1402.789977][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.825674][ T5930] usb 4-1: Product: syz [ 1402.876088][T21207] FAULT_INJECTION: forcing a failure. [ 1402.876088][T21207] name failslab, interval 1, probability 0, space 0, times 0 [ 1402.899110][ T5930] usb 4-1: Manufacturer: syz [ 1402.920769][T21207] CPU: 0 UID: 0 PID: 21207 Comm: syz.0.3911 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1402.920823][T21207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1402.920831][T21207] Call Trace: [ 1402.920837][T21207] [ 1402.920841][T21207] dump_stack_lvl+0x16c/0x1f0 [ 1402.920863][T21207] should_fail_ex+0x512/0x640 [ 1402.920874][T21207] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1402.920888][T21207] should_failslab+0xc2/0x120 [ 1402.920901][T21207] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1402.920913][T21207] ? __alloc_skb+0x2b2/0x380 [ 1402.920941][T21207] __alloc_skb+0x2b2/0x380 [ 1402.920964][T21207] ? __pfx___alloc_skb+0x10/0x10 [ 1402.920988][T21207] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1402.921019][T21207] netlink_alloc_large_skb+0x69/0x130 [ 1402.921045][T21207] netlink_sendmsg+0x6a1/0xdd0 [ 1402.921059][T21207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1402.921074][T21207] ____sys_sendmsg+0xa98/0xc70 [ 1402.921087][T21207] ? copy_msghdr_from_user+0x10a/0x160 [ 1402.921104][T21207] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1402.921122][T21207] ___sys_sendmsg+0x134/0x1d0 [ 1402.921146][T21207] ? __pfx____sys_sendmsg+0x10/0x10 [ 1402.921223][T21207] ? __mutex_unlock_slowpath+0x100/0x800 [ 1402.921245][T21207] __sys_sendmsg+0x16d/0x220 [ 1402.921261][T21207] ? __pfx___sys_sendmsg+0x10/0x10 [ 1402.921286][T21207] do_syscall_64+0xcd/0x4c0 [ 1402.921298][T21207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1402.921310][T21207] RIP: 0033:0x7faf5078ebe9 [ 1402.921319][T21207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1402.921333][T21207] RSP: 002b:00007faf5162c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1402.921350][T21207] RAX: ffffffffffffffda RBX: 00007faf509b5fa0 RCX: 00007faf5078ebe9 [ 1402.921361][T21207] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1402.921371][T21207] RBP: 00007faf5162c090 R08: 0000000000000000 R09: 0000000000000000 [ 1402.921381][T21207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1402.921390][T21207] R13: 00007faf509b6038 R14: 00007faf509b5fa0 R15: 00007ffcc5b9abd8 [ 1402.921408][T21207] [ 1403.148978][ T5930] usb 4-1: SerialNumber: syz [ 1403.201718][ T5930] usb 4-1: config 0 descriptor?? [ 1403.332983][ T5930] vmk80xx 4-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 1403.481300][ T5912] usb 4-1: USB disconnect, device number 60 [ 1403.606688][T21215] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3913'. [ 1406.149766][T21244] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3921'. [ 1406.340009][ T54] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 1406.658966][ T54] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1406.827024][T21249] block nbd5: shutting down sockets [ 1406.836387][ T54] usb 7-1: can't read configurations, error -61 [ 1406.836387][ T30] audit: type=1326 audit(1754575184.520:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21257 comm="syz.0.3925" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf5078ebe9 code=0x0 [ 1406.884999][T21256] block nbd3: shutting down sockets [ 1407.049677][ T54] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 1407.202249][ T54] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1407.519414][ T54] usb 7-1: can't read configurations, error -61 [ 1407.576494][ T54] usb usb7-port1: attempt power cycle [ 1407.950327][ T54] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 1407.991891][ T54] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1407.999694][ T54] usb 7-1: can't read configurations, error -61 [ 1408.149656][ T54] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 1408.732415][ T54] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1408.742598][ T54] usb 7-1: can't read configurations, error -61 [ 1408.749169][ T54] usb usb7-port1: unable to enumerate USB device [ 1408.753611][T21282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3931'. [ 1409.208571][T21293] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3935'. [ 1409.311931][T21279] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3932'. [ 1409.394960][T21294] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21294 comm=syz.6.3935 [ 1409.734620][T21297] FAULT_INJECTION: forcing a failure. [ 1409.734620][T21297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1409.832483][T21297] CPU: 1 UID: 0 PID: 21297 Comm: syz.0.3936 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1409.832512][T21297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1409.832522][T21297] Call Trace: [ 1409.832529][T21297] [ 1409.832537][T21297] dump_stack_lvl+0x16c/0x1f0 [ 1409.832570][T21297] should_fail_ex+0x512/0x640 [ 1409.832591][T21297] _copy_from_user+0x2e/0xd0 [ 1409.832611][T21297] iommufd_vfio_ioctl+0x285/0xe90 [ 1409.832635][T21297] ? __pfx_iommufd_vfio_ioctl+0x10/0x10 [ 1409.832671][T21297] ? do_vfs_ioctl+0x128/0x14f0 [ 1409.832702][T21297] iommufd_fops_ioctl+0x45b/0x540 [ 1409.832730][T21297] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1409.832758][T21297] ? hook_file_ioctl_common+0x145/0x410 [ 1409.832791][T21297] ? selinux_file_ioctl+0x180/0x270 [ 1409.832812][T21297] ? selinux_file_ioctl+0xb4/0x270 [ 1409.832835][T21297] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1409.832862][T21297] __x64_sys_ioctl+0x18e/0x210 [ 1409.832889][T21297] do_syscall_64+0xcd/0x4c0 [ 1409.832907][T21297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1409.832925][T21297] RIP: 0033:0x7faf5078ebe9 [ 1409.832939][T21297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1409.832956][T21297] RSP: 002b:00007faf5162c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1409.832973][T21297] RAX: ffffffffffffffda RBX: 00007faf509b5fa0 RCX: 00007faf5078ebe9 [ 1409.832985][T21297] RDX: 0000200000000440 RSI: 0000000000003b72 RDI: 0000000000000003 [ 1409.832996][T21297] RBP: 00007faf5162c090 R08: 0000000000000000 R09: 0000000000000000 [ 1409.833007][T21297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1409.833017][T21297] R13: 00007faf509b6038 R14: 00007faf509b5fa0 R15: 00007ffcc5b9abd8 [ 1409.833041][T21297] [ 1410.202614][T21295] block nbd3: shutting down sockets [ 1410.255733][ T30] audit: type=1400 audit(1754575187.940:1406): avc: denied { bind } for pid=21305 comm="syz.4.3940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1410.381752][T21308] FAULT_INJECTION: forcing a failure. [ 1410.381752][T21308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1410.510531][T21308] CPU: 0 UID: 0 PID: 21308 Comm: syz.6.3939 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1410.510561][T21308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1410.510572][T21308] Call Trace: [ 1410.510579][T21308] [ 1410.510587][T21308] dump_stack_lvl+0x16c/0x1f0 [ 1410.510620][T21308] should_fail_ex+0x512/0x640 [ 1410.510641][T21308] _copy_from_user+0x2e/0xd0 [ 1410.510663][T21308] move_addr_to_kernel+0x65/0x170 [ 1410.510687][T21308] __sys_bind+0x11b/0x260 [ 1410.510710][T21308] ? __pfx___sys_bind+0x10/0x10 [ 1410.510729][T21308] ? __fget_files+0x20e/0x3c0 [ 1410.510759][T21308] ? __pfx_ksys_write+0x10/0x10 [ 1410.510783][T21308] __x64_sys_bind+0x72/0xb0 [ 1410.510803][T21308] ? lockdep_hardirqs_on+0x7c/0x110 [ 1410.510829][T21308] do_syscall_64+0xcd/0x4c0 [ 1410.510848][T21308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.510866][T21308] RIP: 0033:0x7f1cf518ebe9 [ 1410.510883][T21308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1410.510900][T21308] RSP: 002b:00007f1cf33d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1410.510918][T21308] RAX: ffffffffffffffda RBX: 00007f1cf53b6090 RCX: 00007f1cf518ebe9 [ 1410.510930][T21308] RDX: 000000000000000c RSI: 0000200000000200 RDI: 0000000000000003 [ 1410.510941][T21308] RBP: 00007f1cf33d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1410.510952][T21308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1410.510962][T21308] R13: 00007f1cf53b6128 R14: 00007f1cf53b6090 R15: 00007ffc65d2f768 [ 1410.510986][T21308] [ 1411.010111][ T5930] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1411.349297][T21323] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3943'. [ 1411.533281][ T5930] usb 7-1: Using ep0 maxpacket: 8 [ 1411.593329][ T5930] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1411.633819][ T5930] usb 7-1: config 179 has no interface number 0 [ 1411.670869][ T5930] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1411.818363][ T5930] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1411.830399][ T5930] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1411.842198][ T5930] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1411.858941][ T5930] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1411.885020][ T5930] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1412.304485][ T5930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.315759][T21317] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1412.359410][T21336] syz.4.3947 (21336): drop_caches: 2 [ 1412.365419][T21336] syz.4.3947 (21336): drop_caches: 2 [ 1412.708261][T21343] random: crng reseeded on system resumption [ 1412.745610][ T30] audit: type=1400 audit(1754575190.390:1407): avc: denied { append } for pid=21341 comm="syz.3.3949" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1413.530562][T21317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1413.538980][ T30] audit: type=1400 audit(1754575190.390:1408): avc: denied { open } for pid=21341 comm="syz.3.3949" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1413.620203][T21317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1413.839847][T21352] FAULT_INJECTION: forcing a failure. [ 1413.839847][T21352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1413.853563][T21352] CPU: 0 UID: 0 PID: 21352 Comm: syz.3.3953 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1413.853589][T21352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1413.853599][T21352] Call Trace: [ 1413.853605][T21352] [ 1413.853611][T21352] dump_stack_lvl+0x16c/0x1f0 [ 1413.853640][T21352] should_fail_ex+0x512/0x640 [ 1413.853661][T21352] _copy_to_user+0x32/0xd0 [ 1413.853683][T21352] simple_read_from_buffer+0xcb/0x170 [ 1413.853705][T21352] proc_fail_nth_read+0x197/0x240 [ 1413.853727][T21352] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1413.853750][T21352] ? rw_verify_area+0xcf/0x6c0 [ 1413.853777][T21352] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1413.853799][T21352] vfs_read+0x1e1/0xc60 [ 1413.853821][T21352] ? __pfx___mutex_lock+0x10/0x10 [ 1413.853839][T21352] ? __pfx_vfs_read+0x10/0x10 [ 1413.853865][T21352] ? __fget_files+0x20e/0x3c0 [ 1413.853891][T21352] ksys_read+0x12a/0x250 [ 1413.853910][T21352] ? __pfx_ksys_read+0x10/0x10 [ 1413.853936][T21352] do_syscall_64+0xcd/0x4c0 [ 1413.853955][T21352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1413.853974][T21352] RIP: 0033:0x7f77bbf8d5fc [ 1413.853988][T21352] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1413.854005][T21352] RSP: 002b:00007f77bce8b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1413.854022][T21352] RAX: ffffffffffffffda RBX: 00007f77bc1b5fa0 RCX: 00007f77bbf8d5fc [ 1413.854033][T21352] RDX: 000000000000000f RSI: 00007f77bce8b0a0 RDI: 0000000000000006 [ 1413.854043][T21352] RBP: 00007f77bce8b090 R08: 0000000000000000 R09: 0000000000000000 [ 1413.854053][T21352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1413.854064][T21352] R13: 00007f77bc1b6038 R14: 00007f77bc1b5fa0 R15: 00007fffa06755b8 [ 1413.854088][T21352] [ 1414.050292][ T840] usb 7-1: USB disconnect, device number 16 [ 1414.057284][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1415.050393][T21359] block nbd3: shutting down sockets [ 1415.238834][T21371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3957'. [ 1417.265185][T21409] block nbd6: shutting down sockets [ 1417.551609][T21413] syz.4.3970 (21413): drop_caches: 2 [ 1417.557487][T21413] syz.4.3970 (21413): drop_caches: 2 [ 1417.957614][T21420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3971'. [ 1418.212469][T21424] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3972'. [ 1420.339390][T21457] 9pnet_fd: Insufficient options for proto=fd [ 1420.658422][T21456] block nbd0: shutting down sockets [ 1420.977140][T21477] netlink: 'syz.4.3986': attribute type 10 has an invalid length. [ 1421.152877][T17536] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1421.348194][ T10] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1421.396917][T21477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1421.405252][T21471] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3984'. [ 1421.416687][T21477] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1421.499662][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1421.501636][T21476] bond0: entered promiscuous mode [ 1421.516145][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1421.524903][T21476] bond_slave_0: entered promiscuous mode [ 1421.535680][T21476] bond_slave_1: entered promiscuous mode [ 1421.542355][T21476] batadv0: entered promiscuous mode [ 1421.602685][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1421.662066][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1421.680122][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.697761][ T10] usb 1-1: config 0 descriptor?? [ 1421.702759][T17536] usb 4-1: Using ep0 maxpacket: 32 [ 1421.718434][T17536] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1421.750203][T17536] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 1421.762010][T17536] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1421.773840][T17536] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.787210][T17536] usb 4-1: Product: syz [ 1421.795784][T17536] usb 4-1: Manufacturer: syz [ 1421.804114][T21481] overlayfs: missing 'lowerdir' [ 1421.830790][T17536] usb 4-1: SerialNumber: syz [ 1422.621690][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.628092][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.756238][T17536] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1423.773746][T17536] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 1423.786630][T17536] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1424.127159][T17536] usb 4-1: USB disconnect, device number 61 [ 1424.715549][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 1424.746006][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1424.797238][ T10] usb 1-1: USB disconnect, device number 62 [ 1425.017361][T21515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3995'. [ 1425.027900][T21515] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3995'. [ 1425.315969][T21517] overlayfs: missing 'lowerdir' [ 1425.495028][ T30] audit: type=1400 audit(1754575203.160:1409): avc: denied { remount } for pid=21522 comm="syz.5.3999" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1425.526221][T21524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3997'. [ 1426.382074][T21532] FAULT_INJECTION: forcing a failure. [ 1426.382074][T21532] name failslab, interval 1, probability 0, space 0, times 0 [ 1426.394785][T21532] CPU: 1 UID: 0 PID: 21532 Comm: syz.6.4001 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1426.394810][T21532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1426.394820][T21532] Call Trace: [ 1426.394827][T21532] [ 1426.394834][T21532] dump_stack_lvl+0x16c/0x1f0 [ 1426.394866][T21532] should_fail_ex+0x512/0x640 [ 1426.394882][T21532] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1426.394913][T21532] should_failslab+0xc2/0x120 [ 1426.394935][T21532] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1426.394962][T21532] ? copy_mount_options+0x55/0x190 [ 1426.394987][T21532] ? _copy_from_user+0x59/0xd0 [ 1426.395009][T21532] copy_mount_options+0x55/0x190 [ 1426.395037][T21532] __x64_sys_mount+0x1ac/0x310 [ 1426.395066][T21532] ? __pfx___x64_sys_mount+0x10/0x10 [ 1426.395098][T21532] do_syscall_64+0xcd/0x4c0 [ 1426.395117][T21532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1426.395135][T21532] RIP: 0033:0x7f1cf518ebe9 [ 1426.395150][T21532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1426.395168][T21532] RSP: 002b:00007f1cf33d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1426.395185][T21532] RAX: ffffffffffffffda RBX: 00007f1cf53b6090 RCX: 00007f1cf518ebe9 [ 1426.395197][T21532] RDX: 0000200000000000 RSI: 00002000000020c0 RDI: 0000000000000000 [ 1426.395208][T21532] RBP: 00007f1cf33d5090 R08: 0000200000000040 R09: 0000000000000000 [ 1426.395219][T21532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1426.395229][T21532] R13: 00007f1cf53b6128 R14: 00007f1cf53b6090 R15: 00007ffc65d2f768 [ 1426.395254][T21532] [ 1426.667776][T21533] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1426.939683][ T10] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1427.113647][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1427.161565][ T10] usb 4-1: too many configurations: 250, using maximum allowed: 8 [ 1427.213553][ T10] usb 4-1: config index 0 descriptor too short (expected 63250, got 18) [ 1427.250084][ T10] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 1427.485232][T21547] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4002'. [ 1427.706704][ T10] usb 4-1: can't read configurations, error -22 [ 1428.168706][ T30] audit: type=1400 audit(1754575205.840:1410): avc: denied { read } for pid=21554 comm="syz.6.4005" name="usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1428.209653][ T10] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1428.229191][T17536] libceph: connect (1)[c::]:6789 error -101 [ 1428.237425][T17536] libceph: mon0 (1)[c::]:6789 connect error [ 1428.251535][ T30] audit: type=1400 audit(1754575205.840:1411): avc: denied { open } for pid=21554 comm="syz.6.4005" path="/dev/usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1428.295908][ T30] audit: type=1400 audit(1754575205.850:1412): avc: denied { ioctl } for pid=21554 comm="syz.6.4005" path="/dev/usbmon2" dev="devtmpfs" ino=722 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1428.381265][T21555] ceph: No mds server is up or the cluster is laggy [ 1428.544868][ T5930] libceph: connect (1)[c::]:6789 error -101 [ 1428.558641][ T5930] libceph: mon0 (1)[c::]:6789 connect error [ 1429.120307][ T5930] libceph: connect (1)[c::]:6789 error -101 [ 1429.126499][ T5930] libceph: mon0 (1)[c::]:6789 connect error [ 1430.784509][T21583] random: crng reseeded on system resumption [ 1436.964354][T21630] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1438.500197][ T30] audit: type=1326 audit(1754575216.190:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21631 comm="syz.0.4024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5078ebe9 code=0x7ffc0000 [ 1438.625058][ T30] audit: type=1326 audit(1754575216.190:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21631 comm="syz.0.4024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5078ebe9 code=0x7ffc0000 [ 1438.648598][ C1] vkms_vblank_simulate: vblank timer overrun [ 1438.675882][ T30] audit: type=1400 audit(1754575216.340:1415): avc: denied { listen } for pid=21648 comm="syz.3.4029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1439.033487][ T30] audit: type=1400 audit(1754575216.350:1416): avc: denied { getopt } for pid=21648 comm="syz.3.4029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1439.319322][T21662] overlayfs: missing 'lowerdir' [ 1439.413838][T21664] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1440.062189][ T30] audit: type=1400 audit(1754575217.600:1417): avc: denied { unmount } for pid=17511 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1441.228275][T17536] libceph: connect (1)[c::]:6789 error -101 [ 1441.239969][T17536] libceph: mon0 (1)[c::]:6789 connect error [ 1441.418398][T21686] ceph: No mds server is up or the cluster is laggy [ 1444.467129][T21727] overlayfs: missing 'workdir' [ 1444.964272][T21739] syz.4.4048 (21739): drop_caches: 2 [ 1444.982824][T21739] syz.4.4048 (21739): drop_caches: 2 [ 1445.008878][T21737] netlink: 136 bytes leftover after parsing attributes in process `syz.5.4052'. [ 1445.124153][ T5852] Bluetooth: hci2: command 0x0401 tx timeout [ 1445.202307][ T5980] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1445.449660][ T5980] usb 7-1: Using ep0 maxpacket: 32 [ 1446.132514][T21735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1446.216640][T21735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1447.729499][T21770] FAULT_INJECTION: forcing a failure. [ 1447.729499][T21770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1447.769740][T21770] CPU: 1 UID: 0 PID: 21770 Comm: syz.5.4063 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1447.769768][T21770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1447.769779][T21770] Call Trace: [ 1447.769788][T21770] [ 1447.769795][T21770] dump_stack_lvl+0x16c/0x1f0 [ 1447.769828][T21770] should_fail_ex+0x512/0x640 [ 1447.769848][T21770] _copy_from_user+0x2e/0xd0 [ 1447.769869][T21770] copy_msghdr_from_user+0x98/0x160 [ 1447.769895][T21770] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1447.769927][T21770] ? __lock_acquire+0x62e/0x1ce0 [ 1447.769960][T21770] ___sys_recvmsg+0xdb/0x1a0 [ 1447.769986][T21770] ? __pfx____sys_recvmsg+0x10/0x10 [ 1447.770015][T21770] ? find_held_lock+0x2b/0x80 [ 1447.770058][T21770] do_recvmmsg+0x2fe/0x750 [ 1447.770088][T21770] ? __pfx_do_recvmmsg+0x10/0x10 [ 1447.770112][T21770] ? ksys_write+0x190/0x250 [ 1447.770135][T21770] ? __mutex_unlock_slowpath+0x163/0x800 [ 1447.770172][T21770] ? __fget_files+0x20e/0x3c0 [ 1447.770198][T21770] __x64_sys_recvmmsg+0x22a/0x280 [ 1447.770224][T21770] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1447.770259][T21770] do_syscall_64+0xcd/0x4c0 [ 1447.770277][T21770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1447.770294][T21770] RIP: 0033:0x7f68ed78ebe9 [ 1447.770310][T21770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1447.770327][T21770] RSP: 002b:00007f68ee62e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1447.770344][T21770] RAX: ffffffffffffffda RBX: 00007f68ed9b5fa0 RCX: 00007f68ed78ebe9 [ 1447.770356][T21770] RDX: 0000000000000005 RSI: 0000200000001980 RDI: 0000000000000003 [ 1447.770367][T21770] RBP: 00007f68ee62e090 R08: 0000000000000000 R09: 0000000000000000 [ 1447.770377][T21770] R10: 0000000040000102 R11: 0000000000000246 R12: 0000000000000001 [ 1447.770388][T21770] R13: 00007f68ed9b6038 R14: 00007f68ed9b5fa0 R15: 00007fff717a1b58 [ 1447.770412][T21770] [ 1447.962242][ C1] vkms_vblank_simulate: vblank timer overrun [ 1448.051251][T21772] netlink: 'syz.3.4064': attribute type 4 has an invalid length. [ 1448.145584][ T5980] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1448.154085][ T5980] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1448.162858][ T5980] usb 7-1: can't read configurations, error -71 [ 1448.186546][T21773] netlink: 'syz.3.4064': attribute type 4 has an invalid length. [ 1448.224535][T21772] netlink: 'syz.3.4064': attribute type 4 has an invalid length. [ 1448.571369][ T30] audit: type=1400 audit(1754575226.260:1418): avc: denied { write } for pid=21783 comm="syz.3.4069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1448.579133][T21786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4069'. [ 1448.663330][T21792] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input51 [ 1449.715073][ T30] audit: type=1326 audit(1754575227.380:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21805 comm="syz.3.4075" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77bbf8ebe9 code=0x0 [ 1449.771826][T21810] comedi comedi0: comedi_config --init_data is deprecated [ 1449.853262][T21816] overlayfs: missing 'workdir' [ 1449.969663][ T5980] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 1450.272053][ T5980] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1450.283292][ T5980] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1450.292787][ T5980] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1450.302482][ T5980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.311129][ T5980] usb 5-1: Product: ᐉ [ 1450.318169][ T5980] usb 5-1: Manufacturer: ⇎굗猆ꜭ鶦⋼퇢閭甊䪊퉓泗ⴀ鎡磓塎熎㞚贩)컋씆에麟鵭뺿ჺ⷇ꋨퟷ:㔝䓽眎琇㒅⡤䖗鷁珥行꜖橳籏⨸푺徜奵ᜡ陳졳꤁᚞䱏￴ᅹһ㞹읜锊䒗Ὁﶛ隮렕⽎㠮䶉㍭䰈๋麈꣥곴巄ઁᇘ쀘님邃䥞⼙춖 [ 1450.346518][ C1] vkms_vblank_simulate: vblank timer overrun [ 1450.442957][ T5980] usb 5-1: SerialNumber: 뱀滢젘ō蹌◫ⓓ䷂඘磯㫐⏒贄ꗁ჎뤑⨘됀㜲ꞑ絁䀪෹ᔉ瞌㳩⛛蠖厼ꡚ堓䉢뷴䧉筫䆹ֻ没ⲳ㝴꼃릊ᕤ톀省綫盤骞㩘Ϗ㌜ [ 1450.466023][T21808] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1451.234478][T21808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1451.252333][T21833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4082'. [ 1451.262308][T21808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1451.281170][T21808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1451.289993][T21808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1451.319917][ T5980] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 58 if 0 alt 4 proto 2 vid 0x0525 pid 0xA4A8 [ 1451.350097][ T5980] usb 5-1: USB disconnect, device number 58 [ 1451.360423][T21833] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1451.377535][ T5980] usblp0: removed [ 1452.652747][T21857] FAULT_INJECTION: forcing a failure. [ 1452.652747][T21857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1452.712533][T21857] CPU: 0 UID: 0 PID: 21857 Comm: syz.4.4088 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1452.712561][T21857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1452.712572][T21857] Call Trace: [ 1452.712578][T21857] [ 1452.712585][T21857] dump_stack_lvl+0x16c/0x1f0 [ 1452.712619][T21857] should_fail_ex+0x512/0x640 [ 1452.712640][T21857] _copy_from_user+0x2e/0xd0 [ 1452.712661][T21857] map_update_elem+0x74a/0x930 [ 1452.712685][T21857] ? __pfx_map_update_elem+0x10/0x10 [ 1452.712705][T21857] ? selinux_bpf+0xee/0x130 [ 1452.712736][T21857] __sys_bpf+0x161a/0x4de0 [ 1452.712762][T21857] ? __pfx___sys_bpf+0x10/0x10 [ 1452.712785][T21857] ? ksys_write+0x190/0x250 [ 1452.712807][T21857] ? __mutex_unlock_slowpath+0x163/0x800 [ 1452.712851][T21857] ? fput+0x9b/0xd0 [ 1452.712872][T21857] ? ksys_write+0x1ac/0x250 [ 1452.712886][T21857] ? __pfx_ksys_write+0x10/0x10 [ 1452.712908][T21857] __x64_sys_bpf+0x78/0xc0 [ 1452.712931][T21857] ? lockdep_hardirqs_on+0x7c/0x110 [ 1452.712957][T21857] do_syscall_64+0xcd/0x4c0 [ 1452.712975][T21857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.712993][T21857] RIP: 0033:0x7f95a2d8ebe9 [ 1452.713007][T21857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1452.713025][T21857] RSP: 002b:00007f95a3b8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1452.713042][T21857] RAX: ffffffffffffffda RBX: 00007f95a2fb5fa0 RCX: 00007f95a2d8ebe9 [ 1452.713054][T21857] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000002 [ 1452.713065][T21857] RBP: 00007f95a3b8f090 R08: 0000000000000000 R09: 0000000000000000 [ 1452.713076][T21857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1452.713086][T21857] R13: 00007f95a2fb6038 R14: 00007f95a2fb5fa0 R15: 00007ffc232b89a8 [ 1452.713111][T21857] [ 1452.964376][T21861] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4089'. [ 1453.051254][ T30] audit: type=1400 audit(1754575230.650:1420): avc: denied { ioctl } for pid=21860 comm="syz.6.4089" path="socket:[98502]" dev="sockfs" ino=98502 ioctlcmd=0x940f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1453.108401][T21872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1453.149259][T21872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1453.652931][T21882] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1453.715077][ T5912] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1454.327807][ T5912] usb 7-1: device descriptor read/all, error -71 [ 1455.229805][ T5912] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1455.354728][ T30] audit: type=1400 audit(1754575233.020:1421): avc: denied { write } for pid=21889 comm="syz.3.4098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1455.384027][T21909] FAULT_INJECTION: forcing a failure. [ 1455.384027][T21909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1455.440137][T21909] CPU: 0 UID: 0 PID: 21909 Comm: syz.4.4103 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1455.440165][T21909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1455.440175][T21909] Call Trace: [ 1455.440181][T21909] [ 1455.440188][T21909] dump_stack_lvl+0x16c/0x1f0 [ 1455.440221][T21909] should_fail_ex+0x512/0x640 [ 1455.440242][T21909] _copy_to_user+0x32/0xd0 [ 1455.440263][T21909] simple_read_from_buffer+0xcb/0x170 [ 1455.440283][T21909] proc_fail_nth_read+0x197/0x240 [ 1455.440303][T21909] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1455.440324][T21909] ? rw_verify_area+0xcf/0x6c0 [ 1455.440350][T21909] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1455.440370][T21909] vfs_read+0x1e1/0xc60 [ 1455.440390][T21909] ? __pfx___mutex_lock+0x10/0x10 [ 1455.440407][T21909] ? __pfx_vfs_read+0x10/0x10 [ 1455.440431][T21909] ? __fget_files+0x20e/0x3c0 [ 1455.440455][T21909] ksys_read+0x12a/0x250 [ 1455.440477][T21909] ? __pfx_ksys_read+0x10/0x10 [ 1455.440502][T21909] do_syscall_64+0xcd/0x4c0 [ 1455.440520][T21909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.440538][T21909] RIP: 0033:0x7f95a2d8d5fc [ 1455.440552][T21909] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1455.440569][T21909] RSP: 002b:00007f95a3b8f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1455.440585][T21909] RAX: ffffffffffffffda RBX: 00007f95a2fb5fa0 RCX: 00007f95a2d8d5fc [ 1455.440597][T21909] RDX: 000000000000000f RSI: 00007f95a3b8f0a0 RDI: 0000000000000005 [ 1455.440607][T21909] RBP: 00007f95a3b8f090 R08: 0000000000000000 R09: 0000000000000000 [ 1455.440617][T21909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1455.440627][T21909] R13: 00007f95a2fb6038 R14: 00007f95a2fb5fa0 R15: 00007ffc232b89a8 [ 1455.440651][T21909] [ 1455.630146][ C0] vkms_vblank_simulate: vblank timer overrun [ 1455.769641][ T5912] usb 7-1: Using ep0 maxpacket: 8 [ 1455.785154][ T5912] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1455.799165][ T5912] usb 7-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1455.809746][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.817752][ T5912] usb 7-1: Product: syz [ 1455.822692][ T5912] usb 7-1: Manufacturer: syz [ 1455.827268][ T5912] usb 7-1: SerialNumber: syz [ 1455.836467][ T5912] usb 7-1: config 0 descriptor?? [ 1455.852521][ T5912] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1455.878905][ T5912] usb 7-1: selecting invalid altsetting 1 [ 1456.119074][ T5912] gspca_stk014: reg_r err -71 [ 1456.124202][ T5912] stk014 7-1:0.0: probe with driver stk014 failed with error -71 [ 1456.135754][ T5912] usb 7-1: USB disconnect, device number 20 [ 1456.238908][T21925] ptrace attach of "./syz-executor exec"[17920] was attempted by "./syz-executor exec"[21925] [ 1456.739343][ T30] audit: type=1400 audit(1754575234.420:1422): avc: denied { create } for pid=21927 comm="syz.3.4111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1456.803562][ T30] audit: type=1400 audit(1754575234.430:1423): avc: denied { bind } for pid=21927 comm="syz.3.4111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1457.321781][T21935] netlink: 'syz.0.4112': attribute type 10 has an invalid length. acpid: input device has been disconnected, fd 3 [ 1457.493628][T21933] loop7: detected capacity change from 0 to 16384 [ 1457.769872][ T30] audit: type=1400 audit(1754575235.460:1424): avc: denied { relabelfrom } for pid=21946 comm="syz.6.4116" name="" dev="pipefs" ino=98813 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1457.845717][T21951] fuse: Unknown parameter '0x000000000000000b' [ 1458.023239][ T30] audit: type=1400 audit(1754575235.710:1425): avc: denied { relabelfrom } for pid=21955 comm="syz.5.4120" name="UNIX" dev="sockfs" ino=97605 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1458.029693][T21956] SELinux: Context system_u:object_r:auditd_etc_t:s0 is not valid (left unmapped). [ 1458.149764][T21951] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4116'. [ 1458.213886][ T30] audit: type=1400 audit(1754575235.900:1426): avc: denied { relabelto } for pid=21955 comm="syz.5.4120" name="UNIX" dev="sockfs" ino=97605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_dgram_socket permissive=1 trawcon="system_u:object_r:auditd_etc_t:s0" [ 1458.653008][T21966] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1459.465670][T21979] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1460.675501][ T30] audit: type=1400 audit(1754575238.360:1427): avc: denied { create } for pid=21977 comm="syz.3.4125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 1460.910707][ T30] audit: type=1400 audit(1754575238.510:1428): avc: denied { ioctl } for pid=21977 comm="syz.3.4125" path="socket:[97650]" dev="sockfs" ino=97650 ioctlcmd=0x6615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1462.843492][T22011] ieee802154 phy0 wpan0: encryption failed: -22 [ 1464.175528][ T30] audit: type=1400 audit(1754575241.860:1429): avc: denied { append } for pid=22027 comm="syz.4.4139" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1466.484691][T22044] FAULT_INJECTION: forcing a failure. [ 1466.484691][T22044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1466.516686][T22044] CPU: 1 UID: 0 PID: 22044 Comm: syz.5.4144 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1466.516712][T22044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1466.516722][T22044] Call Trace: [ 1466.516728][T22044] [ 1466.516735][T22044] dump_stack_lvl+0x16c/0x1f0 [ 1466.516764][T22044] should_fail_ex+0x512/0x640 [ 1466.516783][T22044] _copy_to_user+0x32/0xd0 [ 1466.516805][T22044] simple_read_from_buffer+0xcb/0x170 [ 1466.516825][T22044] proc_fail_nth_read+0x197/0x240 [ 1466.516846][T22044] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1466.516868][T22044] ? rw_verify_area+0xcf/0x6c0 [ 1466.516893][T22044] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1466.516913][T22044] vfs_read+0x1e1/0xc60 [ 1466.516941][T22044] ? __pfx___mutex_lock+0x10/0x10 [ 1466.516957][T22044] ? __pfx_vfs_read+0x10/0x10 [ 1466.516982][T22044] ? __fget_files+0x20e/0x3c0 [ 1466.517008][T22044] ksys_read+0x12a/0x250 [ 1466.517027][T22044] ? __pfx_ksys_read+0x10/0x10 [ 1466.517052][T22044] do_syscall_64+0xcd/0x4c0 [ 1466.517071][T22044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1466.517089][T22044] RIP: 0033:0x7f68ed78d5fc [ 1466.517104][T22044] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1466.517121][T22044] RSP: 002b:00007f68ee62e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1466.517138][T22044] RAX: ffffffffffffffda RBX: 00007f68ed9b5fa0 RCX: 00007f68ed78d5fc [ 1466.517149][T22044] RDX: 000000000000000f RSI: 00007f68ee62e0a0 RDI: 0000000000000005 [ 1466.517159][T22044] RBP: 00007f68ee62e090 R08: 0000000000000000 R09: 0000000000000000 [ 1466.517170][T22044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1466.517180][T22044] R13: 00007f68ed9b6038 R14: 00007f68ed9b5fa0 R15: 00007fff717a1b58 [ 1466.517203][T22044] [ 1466.700255][ C1] vkms_vblank_simulate: vblank timer overrun [ 1467.478825][T22067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4149'. [ 1468.661118][ T5912] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 1468.804743][T22097] ptrace attach of "./syz-executor exec"[18194] was attempted by "./syz-executor exec"[22097] [ 1469.495233][T22088] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4154'. [ 1469.520186][ T5912] usb 5-1: device descriptor read/64, error -71 [ 1469.808500][ T30] audit: type=1400 audit(1754575247.490:1430): avc: denied { name_connect } for pid=22113 comm="syz.5.4162" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1469.980600][T22116] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1469.998789][ T5912] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 1471.214213][ T5912] usb 5-1: device descriptor read/64, error -71 [ 1471.349847][ T5912] usb usb5-port1: attempt power cycle [ 1473.194954][T22138] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1473.258894][ T840] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 1473.266515][ T5912] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1473.311932][ T5912] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1473.400051][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.466416][ T5912] usb 5-1: config 0 descriptor?? [ 1473.608869][ T5912] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1474.711128][ T5912] usb 5-1: USB disconnect, device number 61 [ 1474.959482][ T30] audit: type=1400 audit(1754575252.610:1431): avc: denied { mount } for pid=22156 comm="syz.6.4174" name="/" dev="configfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1475.031668][ T30] audit: type=1400 audit(1754575252.610:1432): avc: denied { search } for pid=22156 comm="syz.6.4174" name="/" dev="configfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1475.185668][T22169] syz.5.4172 (22169): drop_caches: 2 [ 1475.216404][ T30] audit: type=1400 audit(1754575252.610:1433): avc: denied { search } for pid=22156 comm="syz.6.4174" name="/" dev="configfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1475.244916][T22169] syz.5.4172 (22169): drop_caches: 2 [ 1475.283516][ T30] audit: type=1400 audit(1754575252.610:1434): avc: denied { mounton } for pid=22156 comm="syz.6.4174" path="/" dev="configfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1475.313780][ T30] audit: type=1400 audit(1754575252.610:1435): avc: denied { read open } for pid=22156 comm="syz.6.4174" path="/" dev="configfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1475.337616][ T30] audit: type=1400 audit(1754575252.820:1436): avc: denied { unmount } for pid=18194 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1475.514494][T22185] FAULT_INJECTION: forcing a failure. [ 1475.514494][T22185] name failslab, interval 1, probability 0, space 0, times 0 [ 1475.549621][T22185] CPU: 0 UID: 0 PID: 22185 Comm: syz.6.4182 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1475.549648][T22185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1475.549664][T22185] Call Trace: [ 1475.549670][T22185] [ 1475.549677][T22185] dump_stack_lvl+0x16c/0x1f0 [ 1475.549700][T22185] should_fail_ex+0x512/0x640 [ 1475.549711][T22185] ? fs_reclaim_acquire+0xae/0x150 [ 1475.549730][T22185] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1475.549745][T22185] should_failslab+0xc2/0x120 [ 1475.549759][T22185] __kmalloc_noprof+0xd2/0x510 [ 1475.549774][T22185] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1475.549790][T22185] ? tomoyo_profile+0x47/0x60 [ 1475.549807][T22185] tomoyo_path_number_perm+0x245/0x580 [ 1475.549819][T22185] ? tomoyo_path_number_perm+0x237/0x580 [ 1475.549833][T22185] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1475.549846][T22185] ? find_held_lock+0x2b/0x80 [ 1475.549871][T22185] ? find_held_lock+0x2b/0x80 [ 1475.549884][T22185] ? hook_file_ioctl_common+0x145/0x410 [ 1475.549903][T22185] ? __fget_files+0x20e/0x3c0 [ 1475.549918][T22185] security_file_ioctl+0x9b/0x240 [ 1475.549933][T22185] __x64_sys_ioctl+0xb7/0x210 [ 1475.549951][T22185] do_syscall_64+0xcd/0x4c0 [ 1475.549962][T22185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1475.549974][T22185] RIP: 0033:0x7f1cf518ebe9 [ 1475.549983][T22185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1475.549994][T22185] RSP: 002b:00007f1cf33f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1475.550005][T22185] RAX: ffffffffffffffda RBX: 00007f1cf53b5fa0 RCX: 00007f1cf518ebe9 [ 1475.550012][T22185] RDX: 0000200000000480 RSI: 000000004048aecb RDI: 0000000000000005 [ 1475.550018][T22185] RBP: 00007f1cf33f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1475.550025][T22185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1475.550031][T22185] R13: 00007f1cf53b6038 R14: 00007f1cf53b5fa0 R15: 00007ffc65d2f768 [ 1475.550045][T22185] [ 1475.550062][T22185] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1476.568600][T22192] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1476.860107][T22193] random: crng reseeded on system resumption [ 1477.902034][T22204] FAULT_INJECTION: forcing a failure. [ 1477.902034][T22204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1477.915314][T22204] CPU: 1 UID: 0 PID: 22204 Comm: syz.6.4190 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1477.915330][T22204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1477.915336][T22204] Call Trace: [ 1477.915341][T22204] [ 1477.915345][T22204] dump_stack_lvl+0x16c/0x1f0 [ 1477.915366][T22204] should_fail_ex+0x512/0x640 [ 1477.915378][T22204] _copy_from_user+0x2e/0xd0 [ 1477.915391][T22204] copy_msghdr_from_user+0x98/0x160 [ 1477.915408][T22204] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1477.915431][T22204] ___sys_sendmsg+0xfe/0x1d0 [ 1477.915448][T22204] ? __pfx____sys_sendmsg+0x10/0x10 [ 1477.915476][T22204] ? __mutex_unlock_slowpath+0x100/0x800 [ 1477.915497][T22204] __sys_sendmsg+0x16d/0x220 [ 1477.915514][T22204] ? __pfx___sys_sendmsg+0x10/0x10 [ 1477.915538][T22204] do_syscall_64+0xcd/0x4c0 [ 1477.915550][T22204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.915561][T22204] RIP: 0033:0x7f1cf518ebe9 [ 1477.915571][T22204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1477.915581][T22204] RSP: 002b:00007f1cf33f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1477.915609][T22204] RAX: ffffffffffffffda RBX: 00007f1cf53b5fa0 RCX: 00007f1cf518ebe9 [ 1477.915616][T22204] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 1477.915622][T22204] RBP: 00007f1cf33f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1477.915629][T22204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1477.915635][T22204] R13: 00007f1cf53b6038 R14: 00007f1cf53b5fa0 R15: 00007ffc65d2f768 [ 1477.915648][T22204] [ 1479.041628][T22223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4192'. [ 1479.699776][ T840] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1480.480318][ T30] audit: type=1400 audit(1754575258.150:1437): avc: denied { write } for pid=22238 comm="syz.3.4197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1480.902608][ T840] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1480.935559][ T840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.958945][ T840] usb 6-1: can't set config #1, error -71 [ 1480.979638][ T840] usb 6-1: USB disconnect, device number 37 [ 1483.484931][T22272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1483.503770][T22272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1483.719692][ T1207] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1483.961146][ T1207] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1483.971157][ T1207] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1483.981553][ T1207] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1484.088313][T22280] overlayfs: failed to resolve './file0': -2 [ 1484.221263][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.227843][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.268972][ T30] audit: type=1400 audit(1754575261.930:1438): avc: denied { bind } for pid=22277 comm="syz.4.4208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1484.454349][ T1207] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1484.464191][ T1207] usb 6-1: Product: syz [ 1484.468475][ T1207] usb 6-1: Manufacturer: syz [ 1484.473205][ T1207] usb 6-1: SerialNumber: syz [ 1484.506618][ T1207] usb 6-1: config 0 descriptor?? [ 1484.536044][ T1207] usb 6-1: selecting invalid altsetting 0 [ 1485.888596][T22292] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4212'. [ 1485.919187][ T1207] usb 6-1: USB disconnect, device number 38 [ 1486.072437][ T30] audit: type=1400 audit(1754575263.760:1439): avc: denied { create } for pid=22293 comm="syz.0.4211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1486.804482][T22292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4212'. [ 1487.440112][T22319] fuse: Bad value for 'user_id' [ 1487.445317][T22319] fuse: Bad value for 'user_id' [ 1487.907750][T22320] random: crng reseeded on system resumption [ 1488.691909][T22332] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1489.002599][T22338] sctp: [Deprecated]: syz.6.4224 (pid 22338) Use of int in max_burst socket option deprecated. [ 1489.002599][T22338] Use struct sctp_assoc_value instead [ 1489.243922][T22338] sctp: [Deprecated]: syz.6.4224 (pid 22338) Use of int in max_burst socket option deprecated. [ 1489.243922][T22338] Use struct sctp_assoc_value instead [ 1489.339504][T22338] sctp: [Deprecated]: syz.6.4224 (pid 22338) Use of int in max_burst socket option deprecated. [ 1489.339504][T22338] Use struct sctp_assoc_value instead [ 1489.461168][T22338] sctp: [Deprecated]: syz.6.4224 (pid 22338) Use of int in max_burst socket option deprecated. [ 1489.461168][T22338] Use struct sctp_assoc_value instead [ 1489.568662][T22338] sctp: [Deprecated]: syz.6.4224 (pid 22338) Use of int in max_burst socket option deprecated. [ 1489.568662][T22338] Use struct sctp_assoc_value instead [ 1489.589730][ T5930] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1489.590163][T22338] sctp: [Deprecated]: syz.6.4224 (pid 22338) Use of int in max_burst socket option deprecated. [ 1489.590163][T22338] Use struct sctp_assoc_value instead [ 1489.709760][T22338] sctp: [Deprecated]: syz.6.4224 (pid 22338) Use of int in max_burst socket option deprecated. [ 1489.709760][T22338] Use struct sctp_assoc_value instead [ 1489.761369][ T5930] usb 6-1: Using ep0 maxpacket: 32 [ 1489.772921][ T5930] usb 6-1: config 0 has an invalid interface number: 169 but max is 0 [ 1489.783815][ T5930] usb 6-1: config 0 has no interface number 0 [ 1489.789991][ T5930] usb 6-1: config 0 interface 169 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1489.802054][ T5930] usb 6-1: config 0 interface 169 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1489.812994][ T5930] usb 6-1: config 0 interface 169 has no altsetting 0 [ 1489.824044][ T5930] usb 6-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=33.49 [ 1489.833640][T22338] sctp: [Deprecated]: syz.6.4224 (pid 22338) Use of int in max_burst socket option deprecated. [ 1489.833640][T22338] Use struct sctp_assoc_value instead [ 1489.856226][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.868634][ T5930] usb 6-1: Product: syz [ 1489.876027][ T5930] usb 6-1: Manufacturer: syz [ 1489.979703][ T5930] usb 6-1: SerialNumber: syz [ 1489.989694][ T5930] usb 6-1: config 0 descriptor?? [ 1490.006596][ T5930] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1490.086207][ T5930] snd-usb-audio 6-1:0.169: probe with driver snd-usb-audio failed with error -12 [ 1491.380560][ T5891] usb 6-1: USB disconnect, device number 39 [ 1492.545527][T22396] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1492.701138][T22397] FAULT_INJECTION: forcing a failure. [ 1492.701138][T22397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1492.894998][T22397] CPU: 1 UID: 0 PID: 22397 Comm: syz.0.4239 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1492.895025][T22397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1492.895036][T22397] Call Trace: [ 1492.895043][T22397] [ 1492.895050][T22397] dump_stack_lvl+0x16c/0x1f0 [ 1492.895084][T22397] should_fail_ex+0x512/0x640 [ 1492.895105][T22397] _copy_from_iter+0x29f/0x16f0 [ 1492.895128][T22397] ? __alloc_skb+0x200/0x380 [ 1492.895153][T22397] ? __pfx__copy_from_iter+0x10/0x10 [ 1492.895175][T22397] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1492.895212][T22397] netlink_sendmsg+0x829/0xdd0 [ 1492.895233][T22397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1492.895260][T22397] sock_write_iter+0x4fc/0x5b0 [ 1492.895282][T22397] ? __pfx_sock_write_iter+0x10/0x10 [ 1492.895301][T22397] ? rcu_is_watching+0x12/0xc0 [ 1492.895334][T22397] ? do_iter_readv_writev+0x30b/0x950 [ 1492.895362][T22397] ? do_iter_readv_writev+0x5b0/0x950 [ 1492.895392][T22397] do_iter_readv_writev+0x657/0x950 [ 1492.895422][T22397] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1492.895450][T22397] ? selinux_file_permission+0x126/0x660 [ 1492.895481][T22397] ? bpf_lsm_file_permission+0x9/0x10 [ 1492.895503][T22397] ? security_file_permission+0x71/0x210 [ 1492.895528][T22397] ? rw_verify_area+0xcf/0x6c0 [ 1492.895557][T22397] vfs_writev+0x35f/0xde0 [ 1492.895577][T22397] ? __lock_acquire+0x62e/0x1ce0 [ 1492.895606][T22397] ? __pfx_vfs_writev+0x10/0x10 [ 1492.895640][T22397] ? __fget_files+0x20e/0x3c0 [ 1492.895668][T22397] ? do_writev+0x28c/0x340 [ 1492.895682][T22397] do_writev+0x28c/0x340 [ 1492.895699][T22397] ? __pfx_do_writev+0x10/0x10 [ 1492.895722][T22397] do_syscall_64+0xcd/0x4c0 [ 1492.895742][T22397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1492.895760][T22397] RIP: 0033:0x7faf5078ebe9 [ 1492.895775][T22397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1492.895792][T22397] RSP: 002b:00007faf5160b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1492.895809][T22397] RAX: ffffffffffffffda RBX: 00007faf509b6090 RCX: 00007faf5078ebe9 [ 1492.895821][T22397] RDX: 0000000000000001 RSI: 0000200000019440 RDI: 0000000000000008 [ 1492.895832][T22397] RBP: 00007faf5160b090 R08: 0000000000000000 R09: 0000000000000000 [ 1492.895842][T22397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1492.895852][T22397] R13: 00007faf509b6128 R14: 00007faf509b6090 R15: 00007ffcc5b9abd8 [ 1492.895876][T22397] [ 1493.832815][ T30] audit: type=1400 audit(1754575271.460:1440): avc: denied { getopt } for pid=22422 comm="syz.0.4246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1493.996469][T22429] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1494.937529][T22433] random: crng reseeded on system resumption [ 1496.254206][ T5930] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1496.750954][ T5930] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1496.858723][ T5930] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1496.951704][ T5930] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1496.980019][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1497.021434][T22457] syzkaller1: entered promiscuous mode [ 1497.029880][ T5930] usb 6-1: Product: syz [ 1497.029932][T22457] syzkaller1: entered allmulticast mode [ 1497.037249][ T5930] usb 6-1: Manufacturer: syz [ 1497.057839][ T5930] usb 6-1: SerialNumber: syz [ 1497.067994][ T30] audit: type=1400 audit(1754575274.750:1441): avc: denied { audit_write } for pid=22452 comm="syz.0.4254" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1497.132350][ T5930] usb 6-1: config 0 descriptor?? [ 1497.301815][ T5930] usb 6-1: selecting invalid altsetting 0 [ 1497.511713][ T5930] usb 6-1: USB disconnect, device number 40 [ 1497.923284][T22468] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1498.788668][T22477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4258'. [ 1499.408969][ T30] audit: type=1400 audit(1754575277.090:1442): avc: denied { write } for pid=22486 comm="syz.3.4260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1501.273615][T22514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1503.768600][T22536] FAULT_INJECTION: forcing a failure. [ 1503.768600][T22536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1503.781774][T22536] CPU: 1 UID: 0 PID: 22536 Comm: syz.6.4273 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1503.781800][T22536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1503.781811][T22536] Call Trace: [ 1503.781819][T22536] [ 1503.781827][T22536] dump_stack_lvl+0x16c/0x1f0 [ 1503.781859][T22536] should_fail_ex+0x512/0x640 [ 1503.781880][T22536] _copy_from_user+0x2e/0xd0 [ 1503.781901][T22536] move_addr_to_kernel+0x65/0x170 [ 1503.781926][T22536] __sys_connect+0xb1/0x160 [ 1503.781949][T22536] ? __pfx___sys_connect+0x10/0x10 [ 1503.781970][T22536] ? rcu_is_watching+0x12/0xc0 [ 1503.782009][T22536] __x64_sys_connect+0x72/0xb0 [ 1503.782031][T22536] ? lockdep_hardirqs_on+0x7c/0x110 [ 1503.782057][T22536] do_syscall_64+0xcd/0x4c0 [ 1503.782076][T22536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1503.782094][T22536] RIP: 0033:0x7f1cf518ebe9 [ 1503.782110][T22536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1503.782127][T22536] RSP: 002b:00007f1cf33b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1503.782145][T22536] RAX: ffffffffffffffda RBX: 00007f1cf53b6180 RCX: 00007f1cf518ebe9 [ 1503.782157][T22536] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000006 [ 1503.782168][T22536] RBP: 00007f1cf33b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1503.782178][T22536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1503.782189][T22536] R13: 00007f1cf53b6218 R14: 00007f1cf53b6180 R15: 00007ffc65d2f768 [ 1503.782213][T22536] [ 1503.959822][T22535] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4274'. [ 1503.982961][T22535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4274'. [ 1504.164637][T22538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4275'. [ 1504.202937][T22538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4275'. [ 1504.837501][T22538] trusted_key: encrypted_key: master key parameter 'default-AHP_9&`ѐ' is invalid [ 1506.997513][ T5891] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 1507.011368][T22576] random: crng reseeded on system resumption [ 1507.140955][T22577] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode [ 1507.598713][T22584] ubi0: attaching mtd0 [ 1507.611273][T22584] ubi0: scanning is finished [ 1507.615889][T22584] ubi0: empty MTD device detected [ 1507.632254][T22583] netlink: 136 bytes leftover after parsing attributes in process `syz.4.4288'. [ 1507.702584][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1507.729702][ T5891] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1507.740046][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.763071][ T5891] usb 1-1: config 0 descriptor?? [ 1507.944173][T22584] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1507.953015][T22584] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1507.965866][T22584] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1508.027665][ T50] Bluetooth: hci4: unexpected event for opcode 0x355f [ 1508.040293][T22584] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1508.142719][T22584] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1508.171714][T22584] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1508.219963][T22584] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3392341031 [ 1508.310378][T22584] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1508.324106][T22593] ubi0: background thread "ubi_bgt0d" started, PID 22593 [ 1508.332028][ T5891] nintendo 0003:057E:200E.000D: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.0-1/input0 [ 1508.491830][T22602] netlink: 'syz.4.4291': attribute type 33 has an invalid length. [ 1508.499732][T22602] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4291'. [ 1508.629988][T22601] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 1508.636521][T22601] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1508.645434][T22601] vhci_hcd vhci_hcd.0: Device attached [ 1508.727425][T22564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1508.814293][T22564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1508.831973][ T5891] nintendo 0003:057E:200E.000D: Failed charging grip handshake [ 1508.857089][ T10] vhci_hcd: vhci_device speed not set [ 1508.878373][T22564] program syz.0.4283 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1508.888163][ T5891] nintendo 0003:057E:200E.000D: Failed to initialize controller; ret=-110 [ 1508.930010][ T5891] nintendo 0003:057E:200E.000D: probe - fail = -110 [ 1508.949595][ T10] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 1509.011774][T22603] vhci_hcd: connection reset by peer [ 1509.022445][ T6230] vhci_hcd: stop threads [ 1509.026697][ T6230] vhci_hcd: release socket [ 1509.034025][ T6230] vhci_hcd: disconnect device [ 1509.053579][ T5891] nintendo 0003:057E:200E.000D: probe with driver nintendo failed with error -110 [ 1509.089415][ T5891] usb 1-1: USB disconnect, device number 64 [ 1509.341346][T22617] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4294'. [ 1510.263533][T22633] random: crng reseeded on system resumption [ 1510.825791][T22640] /dev/nullb0: Can't lookup blockdev [ 1510.834880][T22625] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4295'. [ 1511.121042][T22648] random: crng reseeded on system resumption [ 1511.127492][T17536] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1512.082012][ T50] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1512.101887][ T50] Bluetooth: hci4: Injecting HCI hardware error event [ 1512.111140][ T5852] Bluetooth: hci4: hardware error 0x00 [ 1512.225167][T22656] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4307'. [ 1512.239633][T17536] usb 5-1: Using ep0 maxpacket: 16 [ 1512.248854][T17536] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1512.259953][T17536] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1512.272076][T17536] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 1512.292984][T17536] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.331259][T17536] usb 5-1: config 0 descriptor?? [ 1512.583661][T17536] corsair 0003:1B1C:1B34.000E: unknown main item tag 0x0 [ 1513.085356][T17536] corsair 0003:1B1C:1B34.000E: unknown main item tag 0x0 [ 1513.121913][T17536] corsair 0003:1B1C:1B34.000E: unknown main item tag 0x0 [ 1513.156069][T17536] corsair 0003:1B1C:1B34.000E: unknown main item tag 0x0 [ 1513.193785][T17536] corsair 0003:1B1C:1B34.000E: unknown main item tag 0x0 [ 1513.225935][T17536] corsair 0003:1B1C:1B34.000E: hidraw0: USB HID v0.05 Device [HID 1b1c:1b34] on usb-dummy_hcd.4-1/input0 [ 1513.717412][T17536] usb 5-1: USB disconnect, device number 62 [ 1513.838180][T22678] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4311'. [ 1513.898429][T22678] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4311'. [ 1513.918852][ T30] audit: type=1400 audit(1754575291.600:1443): avc: denied { validate_trans } for pid=22650 comm="syz.0.4306" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1514.071431][ T10] vhci_hcd: vhci_device speed not set [ 1514.168644][ T5852] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1514.178801][ T30] audit: type=1326 audit(1754575291.860:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22687 comm="syz.6.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf518ebe9 code=0x7ffc0000 [ 1514.269798][ T30] audit: type=1326 audit(1754575291.860:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22687 comm="syz.6.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf518ebe9 code=0x7ffc0000 [ 1514.297335][ T30] audit: type=1326 audit(1754575291.890:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22687 comm="syz.6.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1cf518ebe9 code=0x7ffc0000 [ 1514.322187][T22697] /dev/nullb0: Can't lookup blockdev [ 1514.337471][ T30] audit: type=1326 audit(1754575291.890:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22687 comm="syz.6.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf518ebe9 code=0x7ffc0000 [ 1514.362811][ T30] audit: type=1326 audit(1754575291.890:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22687 comm="syz.6.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf518ebe9 code=0x7ffc0000 [ 1514.405271][ T30] audit: type=1326 audit(1754575291.900:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22687 comm="syz.6.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1cf518ebe9 code=0x7ffc0000 [ 1514.446801][ T30] audit: type=1326 audit(1754575291.900:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22687 comm="syz.6.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf518ebe9 code=0x7ffc0000 [ 1514.470818][ T30] audit: type=1326 audit(1754575291.900:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22687 comm="syz.6.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf518ebe9 code=0x7ffc0000 [ 1514.529895][ T30] audit: type=1326 audit(1754575291.900:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22687 comm="syz.6.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1cf518ebe9 code=0x7ffc0000 [ 1514.772613][T22706] pim6reg: entered allmulticast mode [ 1514.937744][T22707] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4318'. [ 1514.946975][ T5859] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1515.181597][ T5859] usb 5-1: Using ep0 maxpacket: 32 [ 1515.323624][T22713] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1515.784687][T22700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1515.793571][T22700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1516.002998][T22718] geneve2: entered promiscuous mode [ 1516.008407][T22718] geneve2: entered allmulticast mode [ 1517.868252][ T5859] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1517.877260][ T5859] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1517.890649][ T5859] usb 5-1: can't read configurations, error -71 [ 1518.167519][T22740] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1518.960537][ T10] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1519.479729][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1519.487009][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1519.510056][T22749] netlink: 'syz.6.4328': attribute type 5 has an invalid length. [ 1519.547213][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1519.547231][ T30] audit: type=1400 audit(1754575297.210:1472): avc: denied { ioctl } for pid=22741 comm="syz.6.4328" path="socket:[102039]" dev="sockfs" ino=102039 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1519.562969][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1519.629013][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.648550][T22749] block nbd0: server does not support multiple connections per device. [ 1519.856483][T22749] block nbd0: shutting down sockets [ 1519.891302][ T10] usb 4-1: config 0 descriptor?? [ 1519.901436][ T10] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1520.936258][ T5852] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 1522.481985][ T5852] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1522.707244][ T5980] usb 4-1: USB disconnect, device number 64 [ 1522.899744][T22767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1523.132887][ T30] audit: type=1326 audit(1754575300.820:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22743 comm="syz.3.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bbf8ebe9 code=0x7ffc0000 [ 1523.281109][ T30] audit: type=1326 audit(1754575300.820:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22743 comm="syz.3.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bbf8ebe9 code=0x7ffc0000 [ 1523.283667][T22799] FAULT_INJECTION: forcing a failure. [ 1523.283667][T22799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1523.310038][ T30] audit: type=1326 audit(1754575300.820:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22743 comm="syz.3.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f77bbf8ebe9 code=0x7ffc0000 [ 1523.380343][ T30] audit: type=1326 audit(1754575300.820:1476): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22743 comm="syz.3.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bbf8ebe9 code=0x7ffc0000 [ 1523.411807][ T30] audit: type=1326 audit(1754575300.840:1477): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22743 comm="syz.3.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bbf8ebe9 code=0x7ffc0000 [ 1523.436186][T22799] CPU: 1 UID: 0 PID: 22799 Comm: syz.4.4342 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1523.436205][T22799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1523.436211][T22799] Call Trace: [ 1523.436215][T22799] [ 1523.436221][T22799] dump_stack_lvl+0x16c/0x1f0 [ 1523.436243][T22799] should_fail_ex+0x512/0x640 [ 1523.436256][T22799] _copy_from_user+0x2e/0xd0 [ 1523.436269][T22799] hci_sock_ioctl+0x6e0/0x7d0 [ 1523.436299][T22799] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 1523.436317][T22799] sock_do_ioctl+0x118/0x280 [ 1523.436330][T22799] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1523.436345][T22799] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1523.436363][T22799] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1523.436381][T22799] sock_ioctl+0x227/0x6b0 [ 1523.436394][T22799] ? __pfx_sock_ioctl+0x10/0x10 [ 1523.436406][T22799] ? hook_file_ioctl_common+0x145/0x410 [ 1523.436426][T22799] ? selinux_file_ioctl+0x180/0x270 [ 1523.436439][T22799] ? selinux_file_ioctl+0xb4/0x270 [ 1523.436453][T22799] ? __pfx_sock_ioctl+0x10/0x10 [ 1523.436466][T22799] __x64_sys_ioctl+0x18e/0x210 [ 1523.436483][T22799] do_syscall_64+0xcd/0x4c0 [ 1523.436495][T22799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.436506][T22799] RIP: 0033:0x7f95a2d8ebe9 [ 1523.436515][T22799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1523.436526][T22799] RSP: 002b:00007f95a3b8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1523.436539][T22799] RAX: ffffffffffffffda RBX: 00007f95a2fb5fa0 RCX: 00007f95a2d8ebe9 [ 1523.436547][T22799] RDX: 0000200000000080 RSI: 00000000400448e7 RDI: 0000000000000004 [ 1523.436554][T22799] RBP: 00007f95a3b8f090 R08: 0000000000000000 R09: 0000000000000000 [ 1523.436560][T22799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1523.436566][T22799] R13: 00007f95a2fb6038 R14: 00007f95a2fb5fa0 R15: 00007ffc232b89a8 [ 1523.436579][T22799] [ 1523.437287][ T30] audit: type=1326 audit(1754575300.860:1478): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22743 comm="syz.3.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f77bbf8ebe9 code=0x7ffc0000 [ 1523.760118][ T30] audit: type=1326 audit(1754575300.860:1479): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22743 comm="syz.3.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bbf8ebe9 code=0x7ffc0000 [ 1523.788715][ T30] audit: type=1326 audit(1754575300.860:1480): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22743 comm="syz.3.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f77bbf8ebe9 code=0x7ffc0000 [ 1524.252649][ T30] audit: type=1326 audit(1754575300.890:1481): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22743 comm="syz.3.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bbf8ebe9 code=0x7ffc0000 [ 1524.957537][T22813] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1525.239708][T17536] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1525.989888][T17536] usb 5-1: Using ep0 maxpacket: 16 [ 1526.007884][T17536] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1526.019731][ T5859] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1526.479446][T17536] usb 5-1: config 3 has an invalid interface number: 162 but max is 0 [ 1526.551699][T17536] usb 5-1: config 3 has no interface number 0 [ 1526.769731][ T5859] usb 4-1: Using ep0 maxpacket: 32 [ 1526.796416][T22823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1526.806812][T22823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1527.391535][T17536] usb 5-1: config 3 interface 162 has no altsetting 0 [ 1527.419375][T17536] usb 5-1: string descriptor 0 read error: -71 [ 1527.426343][T17536] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=4c.d7 [ 1527.643138][T17536] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.768514][ T5852] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1528.537548][T17536] usb 5-1: can't set config #3, error -71 [ 1528.622541][T17536] usb 5-1: USB disconnect, device number 65 [ 1528.777576][ T5859] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1528.845578][ T5859] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1528.874995][ T5859] usb 4-1: can't read configurations, error -71 [ 1529.270008][T17536] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 1529.321202][ T5859] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1529.444264][T17536] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1529.456660][T17536] usb 5-1: can't read configurations, error -71 [ 1529.469736][ T5859] usb 4-1: device descriptor read/64, error -71 [ 1529.610754][ T5859] usb usb4-port1: attempt power cycle [ 1529.797639][T22863] /dev/nullb0: Can't lookup blockdev [ 1529.931083][ T5930] ------------[ cut here ]------------ [ 1529.936919][ T5930] refcount_t: underflow; use-after-free. [ 1529.952373][ T5930] WARNING: CPU: 1 PID: 5930 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 1529.961845][ T5930] Modules linked in: [ 1529.966047][ T5930] CPU: 1 UID: 0 PID: 5930 Comm: kworker/1:3 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1529.978082][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1529.988441][ T5930] Workqueue: md_misc mddev_delayed_delete [ 1529.994592][ T5930] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 1530.000952][ T5930] Code: ff 89 de e8 a8 f0 d8 fc 84 db 0f 85 66 ff ff ff e8 bb f5 d8 fc c6 05 3c c2 b0 0b 01 90 48 c7 c7 00 80 15 8c e8 47 94 97 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 98 f5 d8 fc 0f b6 1d 17 c2 b0 0b 31 [ 1530.020873][ T5930] RSP: 0018:ffffc9000401fc10 EFLAGS: 00010286 [ 1530.026981][ T5930] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a3358 [ 1530.034981][ T5930] RDX: ffff888030798000 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 1530.042996][ T5930] RBP: ffff888033dec130 R08: 0000000000000001 R09: 0000000000000000 [ 1530.043760][ T5859] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1530.051001][ T5930] R10: 0000000000000001 R11: 00000000000044c8 R12: ffff888033dec134 [ 1530.051039][ T5930] R13: dffffc0000000000 R14: ffff888033dec130 R15: ffffc9000401fd10 [ 1530.051052][ T5930] FS: 0000000000000000(0000) GS:ffff8881247c4000(0000) knlGS:0000000000000000 [ 1530.051069][ T5930] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1530.051082][ T5930] CR2: 0000001b30504ff8 CR3: 0000000030540000 CR4: 00000000003526f0 [ 1530.051096][ T5930] Call Trace: [ 1530.051103][ T5930] [ 1530.051112][ T5930] kobject_put+0x230/0x5a0 [ 1530.051137][ T5930] process_one_work+0x9cc/0x1b70 [ 1530.051166][ T5930] ? __pfx_disk_events_workfn+0x10/0x10 [ 1530.051240][ T5930] ? __pfx_process_one_work+0x10/0x10 [ 1530.089952][ T5859] usb 4-1: device descriptor read/8, error -71 [ 1530.090709][ T5930] ? assign_work+0x1a0/0x250 [ 1530.135797][ T5930] worker_thread+0x6c8/0xf10 [ 1530.140448][ T5930] ? __kthread_parkme+0x19e/0x250 [ 1530.145505][ T5930] ? __pfx_worker_thread+0x10/0x10 [ 1530.150682][ T5930] kthread+0x3c5/0x780 [ 1530.154749][ T5930] ? __pfx_kthread+0x10/0x10 [ 1530.159361][ T5930] ? rcu_is_watching+0x12/0xc0 [ 1530.164316][ T5930] ? __pfx_kthread+0x10/0x10 [ 1530.168908][ T5930] ret_from_fork+0x5d4/0x6f0 [ 1530.173527][ T5930] ? __pfx_kthread+0x10/0x10 [ 1530.178144][ T5930] ret_from_fork_asm+0x1a/0x30 [ 1530.182981][ T5930] [ 1530.186297][ T5930] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1530.193573][ T5930] CPU: 1 UID: 0 PID: 5930 Comm: kworker/1:3 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1530.205285][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1530.215339][ T5930] Workqueue: md_misc mddev_delayed_delete [ 1530.221074][ T5930] Call Trace: [ 1530.224349][ T5930] [ 1530.227275][ T5930] dump_stack_lvl+0x3d/0x1f0 [ 1530.231871][ T5930] vpanic+0x6e8/0x7a0 [ 1530.235849][ T5930] ? __pfx_vpanic+0x10/0x10 [ 1530.240346][ T5930] ? refcount_warn_saturate+0x14a/0x210 [ 1530.245886][ T5930] panic+0xca/0xd0 [ 1530.249607][ T5930] ? __pfx_panic+0x10/0x10 [ 1530.254021][ T5930] ? check_panic_on_warn+0x1f/0xb0 [ 1530.259113][ T5930] check_panic_on_warn+0xab/0xb0 [ 1530.264028][ T5930] __warn+0xf6/0x3c0 [ 1530.267897][ T5930] ? preempt_schedule_notrace+0x62/0xe0 [ 1530.273426][ T5930] ? refcount_warn_saturate+0x14a/0x210 [ 1530.278951][ T5930] report_bug+0x3c3/0x580 [ 1530.283265][ T5930] ? refcount_warn_saturate+0x14a/0x210 [ 1530.288790][ T5930] handle_bug+0x184/0x210 [ 1530.293099][ T5930] exc_invalid_op+0x17/0x50 [ 1530.297581][ T5930] asm_exc_invalid_op+0x1a/0x20 [ 1530.302498][ T5930] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 1530.308634][ T5930] Code: ff 89 de e8 a8 f0 d8 fc 84 db 0f 85 66 ff ff ff e8 bb f5 d8 fc c6 05 3c c2 b0 0b 01 90 48 c7 c7 00 80 15 8c e8 47 94 97 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 98 f5 d8 fc 0f b6 1d 17 c2 b0 0b 31 [ 1530.328222][ T5930] RSP: 0018:ffffc9000401fc10 EFLAGS: 00010286 [ 1530.334273][ T5930] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a3358 [ 1530.342226][ T5930] RDX: ffff888030798000 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 1530.350173][ T5930] RBP: ffff888033dec130 R08: 0000000000000001 R09: 0000000000000000 [ 1530.358122][ T5930] R10: 0000000000000001 R11: 00000000000044c8 R12: ffff888033dec134 [ 1530.366070][ T5930] R13: dffffc0000000000 R14: ffff888033dec130 R15: ffffc9000401fd10 [ 1530.374026][ T5930] ? __warn_printk+0x198/0x350 [ 1530.378782][ T5930] ? __warn_printk+0x1a5/0x350 [ 1530.383536][ T5930] kobject_put+0x230/0x5a0 [ 1530.387944][ T5930] process_one_work+0x9cc/0x1b70 [ 1530.392879][ T5930] ? __pfx_disk_events_workfn+0x10/0x10 [ 1530.398411][ T5930] ? __pfx_process_one_work+0x10/0x10 [ 1530.403766][ T5930] ? assign_work+0x1a0/0x250 [ 1530.408336][ T5930] worker_thread+0x6c8/0xf10 [ 1530.412910][ T5930] ? __kthread_parkme+0x19e/0x250 [ 1530.417918][ T5930] ? __pfx_worker_thread+0x10/0x10 [ 1530.423008][ T5930] kthread+0x3c5/0x780 [ 1530.427056][ T5930] ? __pfx_kthread+0x10/0x10 [ 1530.431623][ T5930] ? rcu_is_watching+0x12/0xc0 [ 1530.436376][ T5930] ? __pfx_kthread+0x10/0x10 [ 1530.440944][ T5930] ret_from_fork+0x5d4/0x6f0 [ 1530.445512][ T5930] ? __pfx_kthread+0x10/0x10 [ 1530.450083][ T5930] ret_from_fork_asm+0x1a/0x30 [ 1530.454838][ T5930] [ 1530.458017][ T5930] Kernel Offset: disabled [ 1530.462314][ T5930] Rebooting in 86400 seconds..