last executing test programs: 12m47.432988905s ago: executing program 2 (id=4303): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB="00000000010000000700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r0, r0]}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0d000000875a0000040000000300000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000073e3a07cd789dc8f5200ea750bc82186f97ba94c0960d8c36c7ec656f6b216342e165d6760d7fdf7b6791fd0cda5cf2fcd26a0337bb073d51772a5fcb02c21b520237806b23df1d348d05d78a7c3adc1768f448a55e5a905f70fcb053866927c24"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r1}, 0x27) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) socket(0x2, 0x6, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0xfffffffffffffffb}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1a, 0x3, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r2], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @tracing=0x1c, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x3]}}) r7 = dup(r2) read$FUSE(r7, &(0x7f0000003c40)={0x2020}, 0xffffff0a) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x180, 0x64, 0xf31, 0xfffffff8, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xb, 0x2}, {0x0, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x59}, @TCA_RATE={0x6, 0x5, {0x4}}, @TCA_RATE={0x6, 0x5, {0x9, 0x5f}}, @TCA_RATE={0x6, 0x5, {0x29, 0x1}}, @filter_kind_options=@f_matchall={{0xd}, {0x124, 0x2, [@TCA_MATCHALL_ACT={0x110, 0x2, [@m_nat={0x10c, 0xe, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xc, 0xe, 0x3, 0x7, 0xd7}, @broadcast, @multicast2, 0xffffff00}}]}, {0xbb, 0x6, "8dc54328540d384b28c887396e532834c769b3a36a4f9311ee7c1b932c30c67b4cc31b48508d7502191c10992586a06196856e4360de44e17cde8e1451c043994f3409fe7bd052a246f168f1b34fb32e6e11f1df5390d9bea88c0ef1c1cb42e3eb8a5ac5f8001b9b67cb3230606c6b313d713bf71d90dda1052cdeec4e6f63d9d6c710f1343517e428154f4913907af2abad991ae37829cb870753b06f08fce30104850e0e4dfff6b6616106af135b53accc600a36ec22"}, {0xc}, {0xc, 0x8, {0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0x7}}]}}, @TCA_CHAIN={0x8, 0xb, 0xd2f}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000840}, 0x48800) 12m43.947094561s ago: executing program 2 (id=4314): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r0, 0x2a, 0xfffffffffffffffc}, 0xf) 12m43.911655642s ago: executing program 2 (id=4315): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = msgget$private(0x0, 0x180) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/17) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="2001010000009ce812fe8ea45e1f727dc89a4c16a26047234e1886f5a12fe4efa95b956dd068a832d8481a88a2d9946dfca61e7e013a4391e525bc337673eeda29fbfc698066f2a3772bfb56c8b25f86be807a29261f3216823684bfd429f3de2057002db04509565b8b8751cc3b2cd4fe87582a8493264f2f45fdbf52f5a25a8bd9b963fb609168663205e83485a733aec6e944299583a407611cc8d4daacfd8006fa57d690cb33e94ef8808d0be5da23ad9a68c91e2da668dc796c201379256b9c56e6a873d32dbc683e97fe1a913817d78454c89aafa86c97986f13a82c5c31730a3c39b910692f98fbb3690a7b1194"], 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000bce) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000080)={0x20, 0x3, 0x1d, {0x1d, 0x5, "01bd37a845aa2a8e4dc073ffcbd0c79411a7a5eb14ca0301e10112"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}, &(0x7f0000000100)={0x0, 0x22, 0xd, {[@main=@item_4={0x3, 0x0, 0xa, "df8e2ccd"}, @local=@item_012={0x0, 0x2, 0x1}, @main=@item_012={0x1, 0x0, 0xb, "cf"}, @main=@item_012={0x1, 0x0, 0xc, "fc"}, @main=@item_012={0x2, 0x0, 0x0, "de8a"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x775}}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000500)={0x60, 0x14, 0xcd, "73ca2674a5c336f62ee5982df6e627a8591244c8785b9efc6a0e240876126f5ce7e24e4656d5ba9e7d2bef17921504374d33eb7e22f0efb593ecb281639aadc8692126893bcbed6f848203b74619407b936d5c0e2b63e9cacd96f4d0f77781c6b1a70e5cf9201a5ffed007889bbe95f528c95c0499ef862fb2f4b58fb1312c50a0549492be5b44ad116dcf20f71a17867c2d6a317e25b2c870b49705018793e2b9a5ebcad465f834bf831ca1687f280a38ec953b1f31c39b7d7db39336a0a60410a621edcd9bffcd49723a12bb"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xb3}, &(0x7f0000000980)={0x20, 0x1, 0xde, "9dfd713d27957842075a47da02add662446f0e4ed95de8ba49b50b9e55f86ac20fb4c1586bdbb64279d1fea10c3a5732816b5baf87ed3cb948bdcc906778070b05966287e66f409d468a1d6d9ec1479baa73d1494f1688d25a53ef31111e7fcb41b81d84fc28121d908485d77ee7997b9c805238816e16bcb07c6c96ba7cfe30795cabbcdf3786fbf1b4a98221428c20383670d6e923d924ebbcf955f3db294d7b47b9c599c022a2ff7fdbbe3e38770d5c5033b4899e208db183aa638b469dbde330475cf93619046283266b876c00ab3521cc09f08226cb5395c4955c92"}, &(0x7f0000000300)={0x20, 0x3, 0x1, 0x2}}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) 12m39.858503166s ago: executing program 2 (id=4328): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400002}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r6 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(0x0) close(r6) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r8 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000440)={'pcl812\x00', [0x2efd, 0x5, 0x1, 0x2, 0x0, 0xfffffffe, 0x1, 0x6, 0x80000000, 0x1, 0xc, 0x1, 0x4, 0x6, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x832, 0x30000, 0x9, 0x209, 0x800, 0xe2df, 0x2, 0x1, 0x9, 0x4, 0x4, 0x5, 0x70f]}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x200040c1}, 0x8004) r9 = fcntl$getown(r0, 0x9) capset(&(0x7f0000000180)={0x20080522, r9}, &(0x7f0000000300)={0x7f, 0x1, 0x1, 0xfffffff8, 0x113d}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket(0x9, 0x5, 0x206) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f0000000160001000000000000000000ac1414aa000000000000000000000000fe800000000000000000000000000013000200"/63, @ANYRES32=0x0, @ANYRES32=r2, @ANYRES8=r2, @ANYRES8=r7], 0xf0}, 0x1, 0x0, 0x0, 0x6008015}, 0x0) 12m38.903060452s ago: executing program 2 (id=4333): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x1, 0x40, 0x20}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f0000000140)=""/83, &(0x7f0000000080), &(0x7f0000000080), 0x6, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x3, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x1, 0x1, 0x1, 0xb, 0xe66671e826497fac, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0xfe, 0x5, 0x9, 0xed2, 0xdac}], &(0x7f0000000040)='GPL\x00', 0xffff, 0x8c, &(0x7f0000000080)=""/140, 0x41100, 0x2, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0xc, 0x0, 0x7f}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f00000002c0)=[r1], &(0x7f0000000300)=[{0x3, 0x1, 0xc, 0x2}, {0x4, 0x1, 0x2, 0xa}, {0x4, 0x5, 0xc, 0x1}, {0x5, 0x3, 0x4, 0x5}, {0x0, 0x1, 0x1, 0x5}], 0x10, 0x4}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r3) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x0, @empty}}}, &(0x7f0000000000)=0x9c) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@cgroup=r3, 0x5, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000eddbdf251b0000002000018008000100", @ANYRES32=r8, @ANYBLOB="140002"], 0x34}}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x8, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=r9, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@ifindex=r8, 0xffffffffffffffff, 0x11, 0x202c, r2, @void, @void, @value=r9, @void, r4}, 0x20) 12m38.031714489s ago: executing program 2 (id=4338): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010ac054182000000200001090224000100000000090400000103000000092100000001220500090581030000000000dcfdc3aed67480c84275dd313b94f43542347497c9d5d7e59680d465197c675c2db1516b2f7cbc21b20efb61f8639d58f8943ffce64bdc5b8dc9124483e2c8aec2f49d1b58233687ec4f9289d69b128697816b2479c2e263a543d26a060cd6c39b6962955d5b9ac63146d55e677a76db6f747bda6413092ed1e5f2a8eb2f78a130f1236cd6f0eebd01467a35a8de2fbf5f685906b4f94d1c3f1b5dd0caae0709793c1a5c0532f4851eec53791ad3449ad97b9c506866e27dba8133aa74401cb5b69b7a63168c"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = msgget$private(0x0, 0x180) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/17) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="2001010000009ce812fe8ea45e1f727dc89a4c16a26047234e1886f5a12fe4efa95b956dd068a832d8481a88a2d9946dfca61e7e013a4391e525bc337673eeda29fbfc698066f2a3772bfb56c8b25f86be807a29261f3216823684bfd429f3de2057002db04509565b8b8751cc3b2cd4fe87582a8493264f2f45fdbf52f5a25a8bd9b963fb609168663205e83485a733aec6e944299583a407611cc8d4daacfd8006fa57d690cb33e94ef8808d0be5da23ad9a68c91e2da668dc796c201379256b9c56e6a873d32dbc683e97fe1a913817d78454c89aafa86c97986f13a82c5c31730a3c39b910692f98fbb3690a7b1194"], 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000bce) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000080)={0x20, 0x3, 0x1d, {0x1d, 0x5, "01bd37a845aa2a8e4dc073ffcbd0c79411a7a5eb14ca0301e10112"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}, &(0x7f0000000100)={0x0, 0x22, 0xd, {[@main=@item_4={0x3, 0x0, 0xa, "df8e2ccd"}, @local=@item_012={0x0, 0x2, 0x1}, @main=@item_012={0x1, 0x0, 0xb, "cf"}, @main=@item_012={0x1, 0x0, 0xc, "fc"}, @main=@item_012={0x2, 0x0, 0x0, "de8a"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x775}}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000500)={0x60, 0x14, 0xcd, "73ca2674a5c336f62ee5982df6e627a8591244c8785b9efc6a0e240876126f5ce7e24e4656d5ba9e7d2bef17921504374d33eb7e22f0efb593ecb281639aadc8692126893bcbed6f848203b74619407b936d5c0e2b63e9cacd96f4d0f77781c6b1a70e5cf9201a5ffed007889bbe95f528c95c0499ef862fb2f4b58fb1312c50a0549492be5b44ad116dcf20f71a17867c2d6a317e25b2c870b49705018793e2b9a5ebcad465f834bf831ca1687f280a38ec953b1f31c39b7d7db39336a0a60410a621edcd9bffcd49723a12bb"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xb3}, &(0x7f0000000980)={0x20, 0x1, 0xde, "9dfd713d27957842075a47da02add662446f0e4ed95de8ba49b50b9e55f86ac20fb4c1586bdbb64279d1fea10c3a5732816b5baf87ed3cb948bdcc906778070b05966287e66f409d468a1d6d9ec1479baa73d1494f1688d25a53ef31111e7fcb41b81d84fc28121d908485d77ee7997b9c805238816e16bcb07c6c96ba7cfe30795cabbcdf3786fbf1b4a98221428c20383670d6e923d924ebbcf955f3db294d7b47b9c599c022a2ff7fdbbe3e38770d5c5033b4899e208db183aa638b469dbde330475cf93619046283266b876c00ab3521cc09f08226cb5395c4955c92"}, &(0x7f0000000300)={0x20, 0x3, 0x1, 0x2}}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) 12m22.387965955s ago: executing program 32 (id=4338): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = msgget$private(0x0, 0x180) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/17) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="2001010000009ce812fe8ea45e1f727dc89a4c16a26047234e1886f5a12fe4efa95b956dd068a832d8481a88a2d9946dfca61e7e013a4391e525bc337673eeda29fbfc698066f2a3772bfb56c8b25f86be807a29261f3216823684bfd429f3de2057002db04509565b8b8751cc3b2cd4fe87582a8493264f2f45fdbf52f5a25a8bd9b963fb609168663205e83485a733aec6e944299583a407611cc8d4daacfd8006fa57d690cb33e94ef8808d0be5da23ad9a68c91e2da668dc796c201379256b9c56e6a873d32dbc683e97fe1a913817d78454c89aafa86c97986f13a82c5c31730a3c39b910692f98fbb3690a7b1194"], 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000bce) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000080)={0x20, 0x3, 0x1d, {0x1d, 0x5, "01bd37a845aa2a8e4dc073ffcbd0c79411a7a5eb14ca0301e10112"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}, &(0x7f0000000100)={0x0, 0x22, 0xd, {[@main=@item_4={0x3, 0x0, 0xa, "df8e2ccd"}, @local=@item_012={0x0, 0x2, 0x1}, @main=@item_012={0x1, 0x0, 0xb, "cf"}, @main=@item_012={0x1, 0x0, 0xc, "fc"}, @main=@item_012={0x2, 0x0, 0x0, "de8a"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x775}}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000500)={0x60, 0x14, 0xcd, "73ca2674a5c336f62ee5982df6e627a8591244c8785b9efc6a0e240876126f5ce7e24e4656d5ba9e7d2bef17921504374d33eb7e22f0efb593ecb281639aadc8692126893bcbed6f848203b74619407b936d5c0e2b63e9cacd96f4d0f77781c6b1a70e5cf9201a5ffed007889bbe95f528c95c0499ef862fb2f4b58fb1312c50a0549492be5b44ad116dcf20f71a17867c2d6a317e25b2c870b49705018793e2b9a5ebcad465f834bf831ca1687f280a38ec953b1f31c39b7d7db39336a0a60410a621edcd9bffcd49723a12bb"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xb3}, &(0x7f0000000980)={0x20, 0x1, 0xde, "9dfd713d27957842075a47da02add662446f0e4ed95de8ba49b50b9e55f86ac20fb4c1586bdbb64279d1fea10c3a5732816b5baf87ed3cb948bdcc906778070b05966287e66f409d468a1d6d9ec1479baa73d1494f1688d25a53ef31111e7fcb41b81d84fc28121d908485d77ee7997b9c805238816e16bcb07c6c96ba7cfe30795cabbcdf3786fbf1b4a98221428c20383670d6e923d924ebbcf955f3db294d7b47b9c599c022a2ff7fdbbe3e38770d5c5033b4899e208db183aa638b469dbde330475cf93619046283266b876c00ab3521cc09f08226cb5395c4955c92"}, &(0x7f0000000300)={0x20, 0x3, 0x1, 0x2}}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) 12.358314152s ago: executing program 5 (id=6911): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x84, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000040)={0xd, 0xfffffff9, 0x4, 0x2}) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000100)={0xf1e5b317, 0x800000, 0x0, 0xfffffffc, 0x40001000}) connect$pppoe(r1, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x50}, 0x1, 0x0, 0x0, 0x20004004}, 0xa0) r4 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r4, 0x0, 0x8810) 9.39772635s ago: executing program 0 (id=6920): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000540)=[{0x3, 0x1, 0x7, 0x2}, {0x4, 0x3, 0x8, 0x7}]}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) 9.200146795s ago: executing program 0 (id=6923): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) ptrace$setsig(0x4203, r0, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x7}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x4, 0x5, 0x864}) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xcc, 0x1, 0x7, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x10001}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x71e3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x400}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4c27f747}]}, 0xcc}, 0x1, 0x0, 0x0, 0x48051}, 0x4041) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_buf(r3, 0x0, 0x2e, &(0x7f0000000300)="291f726df326fa1e0cf4ffa4daf718067d5bad9125048949724f7cf6ee65f46fae2d059ae41a91f952c941c21f68032b67fa0901a89ed1f95cb6b277aa0d9919b0bb75ec416e7259635e3ff15ef9bde6aaa7774c071021ddc8f059c9537f098601b99a50e75dcf6ce804320716f33b7b5293e2cc35dc5756212c5a2d986f8a6d32313e571ad595a684c2a5998f26e87b74ccc87cf361d5bcdf4da662935b4898ef8fad156b4af4f243ac367a6d711d87dbbf7c13d0bf04e613b0666005c9423eb7e2ffe7de075012cfa487d30f603ac1caf6ac7ea8f72cf5e489a476af542752bf286b5cc5086489eb42867d7e", 0xed) setitimer(0x1, &(0x7f0000000400)={{0x77359400}}, &(0x7f0000000440)) rt_tgsigqueueinfo(r0, r0, 0x30, &(0x7f0000000480)={0x36, 0x10, 0x7}) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000500)) pselect6(0x40, &(0x7f0000000540)={0x9, 0x4, 0x137, 0x7, 0x8000000000000001, 0xfffffffffffffffa, 0x100000001, 0x800}, &(0x7f0000000580)={0x9, 0x7fffffff, 0x0, 0x7, 0x6, 0xffffffffffffffff}, &(0x7f00000005c0)={0x2, 0x3a, 0x9, 0x7, 0xffff, 0x3ff, 0x3cd5cbfb, 0x6}, &(0x7f0000000600)={0x77359400}, &(0x7f0000000680)={&(0x7f0000000640)={[0x8001]}, 0x8}) socket$can_raw(0x1d, 0x3, 0x1) futimesat(r2, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={{0x0, 0x2710}, {0x0, 0xea60}}) r4 = socket$kcm(0x29, 0x0, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000740), 0x2000, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, &(0x7f0000000780)=0x1, 0x4) r6 = syz_usb_connect(0x2, 0xa95, &(0x7f00000007c0)={{0x12, 0x1, 0x310, 0xbe, 0xcb, 0x90, 0x20, 0x8087, 0x716, 0xa68d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa83, 0x2, 0x2, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x6a, 0x9, 0x9, 0xc1, 0x6b, 0x87, 0x7, [@generic={0x42, 0x6, "8709a0b4aa5c7f060c2b1170745d2ecfb0def96b71589c4b9bc338e6c0e8adf1aab225c47a1f83515fcbc310c48d75fe4aa3da4c2e810ef1daf734e30b760eb8"}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "932f8e"}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x3, 0xa34, 0x7}, {0x6, 0x24, 0x1a, 0x7, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0xfffe, 0xf08c, 0x80, 0x0, 0x8, 0x3}, @mdlm_detail={0xf1, 0x24, 0x13, 0x51, "80ba96bb3205e20a7169d4ab022c34d6ebb41de61784a26afd835b56a05a61a2ed82f1ff8bb87fd9c073b002a37c8d03baebdccb60be86ca4ca62c8ce451ecca26dc7f8c66dd56288b1fbbda20d51ae77c68fe6640c992c8bbffc6e7c89bc5276c2eb95d3cc521851a1b4ede9814be38ce5f059db4bd461e2ee265a132018ba72774cfe2dbd82d8d7294ecfa6b5f0eaad3e87b5529429609a804c814a101bb6e0134ecab3d51cde2825a4cd8f8e36abc0d4a4cbda29e7675f773b8e9b7f13d1d0652da07fe200bb8f3bbe09d0e34d24ea0dc2ed90f30bf32e7337f87cbd3dd55a595e0a197f8dea3cbd84b4cd6"}, @mdlm={0x15, 0x24, 0x12, 0x3fc8}, @obex={0x5, 0x24, 0x15, 0xad}]}], [{{0x9, 0x5, 0x4, 0x10, 0x0, 0x4, 0x2, 0x7, [@generic={0x6f, 0x23, "24517f379fa8e7e9949886ed50dac4af7d75967cd8ed84e26fe0510ff48fdc51d882fc6b4919f11028e8a4a54c34499ffa013e1e80a51d4b526872fe296bd2599b8d36fa4da71e3e4b8c8b3ba1b6d75e294326f5e620b174d6785822749a2c4da69da34a7036ea08b2a7e97601"}, @generic={0x70, 0x21, "616eae71038337f0d62bc70a252706ea50e8d537e5e4e345b1af1c8a7a04437dd49be9fb0d456f42442c2cdc6bac5250ff7e7d589e624dbc24137deb77737e3a88a399da09808d6f993c9f67bfd0196d2491e5a44c46f260a60460a3b15c8554a1167c2598050627866d844cd4d0"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0xf, 0x0, 0x6}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x3, 0xf7, 0x2}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0xa, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xcd}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x3, 0x4, 0xce, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x2}, @generic={0xd2, 0xe, "98227a820fcc7e3da14ac9e199b1ca80336420af592a097530f3f659c4a500f1cf749e0439172a61571591c8a956d9c271eda687a607b4f49493b09ef47f3f08aeedee740803c11472d32a27ea4b46e2f72002485ef8f6df34ab3478bd1787189d70fd49efe1e9644efb1760c1213cc064ea20da4edcad19adfddad881c6465d6b5f7eb0e4064dc6feb1ceb3d08822e98e709976595218e89ef5720037a09191164fe0892e057fda3a24fa5bffbdcf242fa52a1dd8f2a6d8507fad0af157ce49e0ba970e66943e08edd3244c805e9bec"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x2, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xa7, 0x8}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x4, 0x2, 0x8}}, {{0x9, 0x5, 0x81bcf9679511e753, 0x0, 0x20, 0x80, 0x4, 0x19, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x4}, @generic={0xff, 0x6, "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"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x6, 0x81, 0x7, [@generic={0xae, 0x0, "4a489fbdceaa8125d2cbb421e50ee80b5b51ec2d22845a3b841ef3dda89832b60c2d0a9d004ef8d23574d436d1e7cead960c7310c9d6625c8d1b78ffa1a75eaae9edcb9f04ab04663c4d46126a954b914e9557741f91ef9af8d20e56c6472feb767da2985324dd1770052266b8c2ec688b5cf5e15642fa6afd8b1361048ab48f00bfe10de6d7d7e24592d839a77d80cd9501c12594ac9bdcad0e79f20a0bae4750feed242560bf11dee1f563"}]}}]}}, {{0x9, 0x4, 0xa4, 0x3, 0x10, 0xff, 0x5d, 0x1, 0x41, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x7}}], [{{0x9, 0x5, 0x5, 0x0, 0x10, 0xce, 0x8, 0x58, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x100}]}}, {{0x9, 0x5, 0xb, 0x4, 0x20, 0x80, 0x5, 0xba, [@generic={0x43, 0x4, "8d9f6afcc3f626f46ac8b8e9a6bd6e33474872843ebfc23bda8205f94fce0987b462c05e1705627e404058f47f268910017a24a511e90261051c2cf87d8ae7672f"}, @generic={0xc6, 0x10, "b4a9061c510b03ea9eb34a38b2427684c763799c9377dd553ec71120e9bae89688885613bccc6c0f05b52c3178c7c150c00ffe9df184e217e5b68b019f86c60a95c10aac28ee27e16382e8862becba750faea3f79ad100a561aab72a09a362470173c40a602b15aaa306fd19dfb87a2f96af400edca5573257dff93dd09723e83ed898b67403cbcc721bdca9199f2c29e938d68b468c4b10aa5cad22693df4a40050da1208ae27536ac87c092b3ba8e1827598fef6aaa3050c32dea40a10009ba1e51118"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0x0, 0x1, 0xb1}}, {{0x9, 0x5, 0xf, 0x10, 0x19f, 0x4, 0x4, 0x9, [@generic={0x61, 0x23, "b63426ee0b52e370e9bf0de8145d5374f98510a441b4b79b552d98e95b90f4337143de5cd017136cf27a788a32569c515d93f465a473067faf5d0ff64d0d3a8137874ec1414cbf7bf2eea991a57c61773affec7b28439fcca8433e6ba8ecfb"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0x7, 0x7, 0x4}}, {{0x9, 0x5, 0xc90a6e080ee66b9e, 0x0, 0x10, 0x8, 0x7, 0x2}}, {{0x9, 0x5, 0x80, 0x4, 0x400, 0x8, 0x6, 0x5, [@generic={0x2e, 0x6, "04f64feba5e03f6388f339591e290474b6ba917b07c37fc69b11c55672cdfc83ed1999406f3ff29a18708a16"}]}}, {{0x9, 0x5, 0xd, 0x12, 0x240, 0x7, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x5}, @generic={0xe9, 0xc, "e9b298ccef5d4a3bb97edb7cd98f4e8294cfe87b5b95fb4ffce22480a2ed02b7409e889252abe0000ab3a43120166ce0da14ce76cad1660ab1ec91fd2601317552a33050597c18a3adb8c457b36a2006ad0136c6b2191fba58342c8e7dcd38f0a0325085cb7a8cae740a25aa59f22d80da2ae88fa9159686fa39d5ef0e1264acf755ecd9d51e8a470dde36e4757b9baa006f9a65509f04e3f08cbb3d0327a2608bf0ce22f5d1e7d2963a94a7f0a9b0d3e7519dfe180d2d49c6bba9ad33979a684b9d1fd432a6740a6aed9d20d8835b98a9bcbb7b4bc519945c7067aa69e6f1f7eddfa7202f857a"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0x5, 0xff, 0x8, [@generic={0x5a, 0x6, "e6755c8a26d07c24abe0e9322a44e765487d760bde399f85481f8db0113a774ccc166d6d75c4769ea58e51e9c9c08c457e69e1da602572b87f890260de857a59b6f664e795828c217090859528304e890a06716441f69b6a"}, @generic={0x71, 0xc, "8a07ba27278111c7183a07a063b4b74fd654a4bada1764b8ecb5622f3d784097fb0ef51f7b4259ecc3a010939dd050446d2b00ee423f9c9f556d3870f8437edf32be28882394674b225d6acd53d912c5c2e0e321a5fa0d32f4503c15116775106ccae6f4f95d94ba74b7386196e8e9"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x400, 0x9, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x3}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x0, 0x6, 0x7}}, {{0x9, 0x5, 0x5, 0x8, 0x20, 0x5, 0x7, 0x2, [@generic={0xcf, 0xb, "6272e96cac490371a409ded88d9b404cbc523065761c818e36e60fdd414858afbad3bda71844ba4595d4cdbcb72fb98951e1351ff7674ec13a9f42c87160994fcb9bd605664ec958f583ba6474d8012408f2b6be10c56c9c86c04b18225e5ad9a960e1d7d0d275f2fd3305f242bb0d0a34a423c87b4a75ea0176887518c13be1d233b345bbc517987a5e65c17d452bf0ce06c92d32acf53b3e54cfb052651c1f2dfe7c7cb8d546a69cf635e8310e5d780151a35473af4d6c4b95f1778610765ad04a3baa7baefe2f3345284b95"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x10, 0x2, 0x2, 0x3}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x40, 0x40, 0x9}}, {{0x9, 0x5, 0x8a, 0x1, 0x40, 0xfd, 0x2, 0x1, [@generic={0x4d, 0x10, "2658784cf9010e7bd2da52379d9290defb0960bf215746d33c9455382d58f61bdcec0c668afb76f9a67f8ec1d5d81af7c07318d65c7a7bb1bf624a53d24986dbeb71781bdf71352aa94d0a"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0xc, 0x6, 0x9}}]}}]}}]}}, &(0x7f00000013c0)={0xa, &(0x7f0000001280)={0xa, 0x6, 0x110, 0x6, 0x9, 0x3, 0x20, 0x4}, 0x29, &(0x7f00000012c0)={0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x56, 0x6, 0xc, 0x0, 0x0, [0xf, 0xcf, 0xf, 0x30, 0xff00cf, 0xc000]}]}, 0x1, [{0xb8, &(0x7f0000001300)=@string={0xb8, 0x3, "8e58080e344a5dc0457b4c7285d478850f46769dac07d88f8175a09fcde76bd07139f4d62e79423c646350cb91d53cd34ae342f993598322b634ed4234809bc665545ed613b470e089f41743d8598ec659b9af8e6d1b0285571b5c1625d749f0d98ef2de09b297cf408c9c2bf940afa91991609ab7cbfe760ac1895086e606a40c8840796cc38d6d61e3f60387081911c45da21fa8586ba2223f69c390905c442c6cfcd23f2af90637a9ec32b533116850f2ac5c7827"}}]}) fsetxattr$security_capability(r2, &(0x7f0000001400), &(0x7f0000001440)=@v3={0x3000000, [{0x6, 0x7}, {0xebd, 0x40000000}], r1}, 0x18, 0x1) socket(0x8, 0x80002, 0xe200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000001480)={0x0, 0x0}) rt_tgsigqueueinfo(r0, r7, 0x22, &(0x7f0000001500)={0x6, 0x2, 0xf7}) clock_gettime(0x0, &(0x7f00000015c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000001600)={0x0, 0x0}) utimensat(r5, &(0x7f0000001580)='./file0\x00', &(0x7f0000001640)={{r8, r9/1000+10000}, {r10, r11/1000+60000}}, 0x100) syz_usb_ep_write(r6, 0xff, 0x9e, &(0x7f0000001680)="531a2e82ef67632de0864da857e3a68f3bed1f63f526774f5918184ed7f963f81883ba5104751a89e67784ff8d44590af3720ea1a48a842f64e28621755e18eaf966feccd68d82286cc7f49f5b9d003c51ba18989bfff526ca1ae15d7d1110db01399d69460605933d623b92e44ab30f1c3f2166c34dfa4dc0b5d1377f9cc664f0873d3e7a65469078483a84e1136f86723bc2830ee4a791e74bef58bfa8") r12 = gettid() ptrace$ARCH_MAP_VDSO_64(0x1e, r12, 0x101, 0x2003) r13 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000003, 0x20010, r2, 0x8000000) r14 = mmap$IORING_OFF_SQES(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1800009, 0x10010, r5, 0x10000000) syz_io_uring_submit(r13, r14, &(0x7f0000001740)=@IORING_OP_FADVISE={0x18, 0xa, 0x0, @fd_index=0x9, 0x2, 0x0, 0x7f, 0xb4528b7174a83216, 0x1}) recvmmsg(r4, &(0x7f0000004480)=[{{&(0x7f0000001780)=@phonet, 0x80, &(0x7f0000001900)=[{&(0x7f0000001800)=""/232, 0xe8}], 0x1, &(0x7f0000001940)=""/4096, 0x1000}, 0x7036}, {{&(0x7f0000002940)=@tipc=@name, 0x80, &(0x7f0000003cc0)=[{&(0x7f00000029c0)=""/92, 0x5c}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/165, 0xa5}, {&(0x7f0000003b00)=""/254, 0xfe}, {&(0x7f0000003c00)=""/136, 0x88}], 0x5, &(0x7f0000003d40)=""/158, 0x9e}, 0xaebb}, {{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000003e00)=""/37, 0x25}, {&(0x7f0000003e40)}, {&(0x7f0000003e80)=""/241, 0xf1}], 0x3, &(0x7f0000003fc0)=""/196, 0xc4}, 0x25a}, {{&(0x7f00000040c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000004180)=[{&(0x7f0000004140)=""/33, 0x21}], 0x1}, 0x7}, {{&(0x7f00000041c0)=@nfc, 0x80, &(0x7f0000004400)=[{&(0x7f0000004240)=""/139, 0x8b}, {&(0x7f0000004300)=""/255, 0xff}], 0x2, &(0x7f0000004440)}, 0x7}], 0x5, 0x141, &(0x7f0000004600)) 9.132017574s ago: executing program 1 (id=6924): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004004}, 0x8014) 8.202497158s ago: executing program 1 (id=6926): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c9b41, 0x8) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'veth1_vlan\x00', &(0x7f0000000040)=@ethtool_rxnfc={0x32, 0xb, 0x6, {0x0, @hdata="c3b467aca79221c2e4d626bfd283e0a10e23d2fa504990e9ce34004c56937b82a7c45294652cad4e6b3175264e735c411738e756", {0x0, @remote, 0x7f, 0xb6, [0x8, 0x7]}, @esp_ip6_spec={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x9, 0x40}, {0x0, @link_local, 0x5, 0xd6, [0x1ff, 0x8]}, 0xaf, 0xf1}}}) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1ab44cca9d33a2c97690eab6e4f4b4fc42cbb88a02b85f6e4b3d8cb3b811a29904e3d8d2d21ca47ccc837cfe7607fffeebc8b7a54169c82f414ff71674d5ada4bb084c8b45da886765612d526c4ed46279ca95c71d9df52838cba9e3ec3cbfe6028d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xf, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='sched_switch\x00', r1}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x1}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1ff}]}, 0x50}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0xee00, 0xee01}}, './file0\x00'}) openat$vcs(0xffffffffffffff9c, &(0x7f00000007c0), 0x40a400, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r8 = dup(r7) readv(r8, &(0x7f0000004e00)=[{&(0x7f0000004bc0)=""/23, 0x17}], 0x1) dup(0xffffffffffffffff) syz_emit_ethernet(0x14, &(0x7f00000003c0)=ANY=[@ANYRES16=r2], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r9 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r6], 0x14}}, 0x0) fcntl$getownex(r8, 0x10, &(0x7f0000000400)={0x0, 0x0}) sched_setaffinity(r10, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r9, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e) 8.038515706s ago: executing program 5 (id=6927): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xf, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000240)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) 7.481390953s ago: executing program 5 (id=6928): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e22, @empty}, {0x0, @remote}, 0x48, {0x2, 0x0, @empty}, 'lo\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 7.313459625s ago: executing program 3 (id=6929): r0 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket(0x10, 0x3, 0x0) recvmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c020400) msgsnd(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x5800) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfc}}, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r7, 0x0, 0x0, 0x4890, &(0x7f0000000040)={0xa, 0x0, 0xfffffffd, @mcast1, 0x6, 0x4}, 0x20) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1) shutdown(r1, 0x1) 7.044788653s ago: executing program 1 (id=6930): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = fsopen(&(0x7f00000000c0)='hpfs\x00', 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16, @ANYRESHEX=r3], 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) ioctl$FBIOGET_VSCREENINFO(r4, 0x4600, &(0x7f0000000200)) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000080), &(0x7f00000000c0)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000240), &(0x7f0000000340)=r6}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r7, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) sendto$inet(r7, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) 7.043514542s ago: executing program 5 (id=6931): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x3, 0x6, 0x448, '\x00', 0x9}, 0x1, [0x7, 0xd5, 0x5, 0x9, 0x6, 0xa, 0x2, 0x5, 0xfffffffffffffffb, 0xbd, 0x80000000, 0x102d, 0x8, 0x1, 0x3, 0xffffffffffffffff, 0x1, 0x1ed40, 0x6, 0x1ff, 0x80, 0x7, 0x7, 0x7, 0xc, 0x2, 0x9, 0x7, 0xffffffffffffffff, 0x3, 0x8fffffffe, 0x403, 0x1, 0x4, 0x1, 0x3, 0x3, 0x1, 0x0, 0x6, 0x9, 0x4, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba58, 0x6, 0xa, 0x9, 0x6, 0xe000000000000000, 0xfffffffffffffffd, 0x403, 0x3, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x8, 0x9, 0x1800000, 0x4, 0x82b, 0x8, 0x5, 0x0, 0x4, 0xfffffffffffffffa, 0x5, 0x100000000000006, 0xca4f, 0x2f, 0x1, 0x7, 0x40, 0x2, 0x42843379, 0x1, 0x6, 0x201, 0x77d, 0xb3, 0x5, 0x539, 0x623b, 0x6, 0x0, 0x7, 0x4, 0x7fffffffffffffff, 0x7, 0x8, 0x0, 0x9, 0x93, 0x5, 0x401, 0x2, 0x2775e12f, 0x680000000000, 0x5, 0x40007, 0xe88, 0x80000004, 0x0, 0xfffffffffffffffa, 0x10001, 0x5, 0x8, 0x1000, 0x0, 0x5, 0x7, 0xfffffffffffff000, 0x8, 0x7ffd, 0xfffffffffffffff7, 0x6, 0x100000001, 0x8, 0x80000000005, 0x4, 0x20000000004, 0xc3, 0x7f, 0x3]}) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r2], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000"], 0x0) syz_usb_control_io(r3, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x82, 0x2, 'j\x00'}, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000040)={0x14, 0x0, 0x0}, &(0x7f0000000600)={0x44, &(0x7f00000002c0)={0x0, 0x6, 0x2, "9d4c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300060c1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r4], 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xff, r7}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r8, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) 6.231458935s ago: executing program 3 (id=6933): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x4f2a, 0x2, 0x4, 0x4, 0x5, 0x6, 0x6, 0x7, 0xa, 0x100, 0x2, 0x80000, 0x1, 0x8, 0x1000, 0x1, 0x0, 0x1a449, 0x3, 0x6, 0x81, 0xcaa7, 0x4, 0x1e58, 0xfffffbba, 0x2000003, 0x3c, 0x8, 0x6, 0x0, 0x5]}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="5800000015", 0x5}], 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r6, 0x5) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r7, 0x1) flock(r7, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) write$UHID_CREATE(r8, &(0x7f0000000200)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000180)=""/109, 0x6d, 0x8, 0x8, 0x9, 0x6, 0x9}}, 0x120) 6.009410416s ago: executing program 0 (id=6934): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000540)=[{0x3, 0x1, 0x7, 0x2}, {0x4, 0x3, 0x8, 0x7}]}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f00000003c0)=ANY=[], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) 5.899375624s ago: executing program 4 (id=6935): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xf, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r4, 0x0, 0x79) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x68}}, 0x20050800) bind$inet(0xffffffffffffffff, 0x0, 0x0) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) 5.444415415s ago: executing program 4 (id=6936): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xd1) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="020000000c00ebffffff0100020000", @ANYRES32=0x0, @ANYBLOB="040000000000000010000300000000002000000000000000"], 0x2c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019640)=""/102392, 0x18ff8) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 5.432275943s ago: executing program 0 (id=6937): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi4\x00', 0x42002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)) sendmsg$BATADV_CMD_SET_HARDIF(r0, 0x0, 0x20004804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a37055437", 0x1f) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x1, 0x32, 0xb}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x4, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x300, 0x300, 0x0, 0x54}, 0x9c) recvmmsg(r4, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1}, 0x6}], 0x1, 0x1, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 4.439712499s ago: executing program 0 (id=6938): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000003c0)={0x1f, 0xffffffffffffffff, 0x5}, 0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x20, 0x2, 0x0, 0xfffff03c}, {0x6}]}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket(0x25, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getsockopt$llc_int(r4, 0x10c, 0x3, 0x0, &(0x7f00000000c0)) writev(r5, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r6 = socket(0x2, 0x80805, 0x0) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x7}, 0x8) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) ioctl$I2C_SLAVE(r7, 0x703, 0x26b) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r8, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r9 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r9, 0x29, 0x40, &(0x7f0000000140)={'mangle\x00', 0x0, [0x7ff, 0x4000105, 0x38e, 0x3, 0x82]}, &(0x7f0000000400)=0x54) syz_open_dev$media(&(0x7f0000000040), 0xc9c, 0x400) 4.358017667s ago: executing program 3 (id=6939): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = fsopen(&(0x7f00000000c0)='hpfs\x00', 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16, @ANYRESHEX=r3], 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) ioctl$FBIOGET_VSCREENINFO(r4, 0x4600, &(0x7f0000000200)) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000080), &(0x7f00000000c0)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000240), &(0x7f0000000340)=r6}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r7, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) sendto$inet(r7, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) 4.116977583s ago: executing program 4 (id=6940): syz_emit_ethernet(0x16, &(0x7f0000006a00)={@dev, @empty, @val, {@generic={0x88ca}}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000580)='gid', 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) set_mempolicy(0x2, &(0x7f0000000180)=0x9, 0x7) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0x2, 0x20001000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) 3.479275553s ago: executing program 1 (id=6941): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000006000000040000000000000f03000000a5c18c000000010000006700000000180033ada04790753445ca32ec2b1df2ea6073e015fcf2f831f20237a72b9e94e4b4f5d83c8c1cce456566c2d0f437a110bfc486c567222fd7fe06e52001fb6a7cfd29a01e3b48e71887c9b5abdcdac9bfb5bdfc9eaf897036d2ae444294144e07aff0054a82a82cea829d1d393dbdf05472a36f90ebe99c5aa77f0e895ef806e62beafd3d2dd14bf31b19b12341289fec4cd65661300df8d4868d9f69244a5b739366fe2d5bfb0fea3e53614669014fe4b5253a"], 0x0, 0x3a, 0x0, 0x1}, 0x28) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x1f) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd=r0, 0x6, 0x0, 0x0, 0xa}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(r1, 0x627, 0xc1040000, 0x43, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000020000"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) move_pages(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141082) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (fail_nth: 3) 3.192912108s ago: executing program 4 (id=6942): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x2}, 0x94) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r1, 0x8000000000000006, {0x0, 0x0, 0x3}, 0x2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x10000000000, 0x0, 0x9, 0x0, 0x1, 0x9}, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) r6 = epoll_create(0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) splice(r7, 0x0, r9, 0x0, 0x725e65a6, 0x0) r10 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r10, &(0x7f00000005c0)="23000000220021bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r10, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000a45300", 0x6, 0x20000080, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='q', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r8, &(0x7f0000000000)=ANY=[], 0xfffffd88) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000080)) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000012200d4071040803dfe4000000010902b901010000003f0904"], 0x0) 3.104629036s ago: executing program 0 (id=6943): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000640)=0xe000, 0x1fff, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0x10a, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_set$pid(0x3, 0x0, 0x0) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x6, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/194, 0xc2}], 0x2}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.288343148s ago: executing program 3 (id=6944): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3}, {0x61}, {}, {}, {0x6}]}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x700, 0x80, 0x0, 0x6, {{0x6, 0x4, 0x0, 0x8, 0x18, 0x66, 0x0, 0x7, 0x4, 0x0, @private=0xa010102, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}]}}}}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0xfff, 0xffff672e, 0x8, 0x402, 0xffffffffffffffff, 0x5, '\x00', r2, r1, 0x3, 0x4, 0x0, 0xe}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180074bc3e0b0000000000000000c88ef49238bcf9689594e54b3b77e8393cf7351b1a76e159e25c7cbdf6a697c8631870102daaaf152460033e0230981318f960a396ab2ec9eadd25360d6c0492800cba0b03fd5d7d5117b8c0c0f4d1e2656abde4c51df42177fe0fb6c2b5f6ababd04c1e60e7a473e2826eb2986d63ce56e884812ae251de4e81e7fdc1b25cc41c00b9655c1fb535cac111172f40ae1ea57b2613e789866c880f4c55b16730874cdaa1043cb6e8ae0e5b08cb98142e44b2768d01aa90bc", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x2c, 0x0, &(0x7f0000000180)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x5, @pix={0x5, 0x98, 0x50565559, 0x1, 0x8264, 0x101, 0x6, 0x8, 0x1, 0x7, 0x0, 0x1}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 2.203648896s ago: executing program 1 (id=6945): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000001fc0)='fd\x00') fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x900, 0x80) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000002080)={0xfd, {"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", 0xa75}}, 0x1006) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) (fail_nth: 3) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x7e) ftruncate(r0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000071108f0000000000950000000000000080b89c536a737e449c83fb3e06992fd7ad80ca3bcce7ca5f5845cfd232def8868d105088baaeed4939eab36289d723699b4f44c96b76676c60c24991adcedb3a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) unshare(0x22020600) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@private=0xa010101, @in6=@empty, 0x4e25, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {0x2, 0x9, 0x3, 0x6, 0x9, 0xbffffffffffffffd, 0x5, 0x2000000000000000}, {0x800000fa, 0x1000000000008, 0x2, 0x5da143f3}, 0x0, 0x2, 0x1, 0x0, 0x6, 0x2}, {{@in=@local, 0x4cf, 0x6c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x19}, 0x3506, 0x1, 0x0, 0x0, 0x4, 0x80000001}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0x0, 0x0) 1.981627566s ago: executing program 3 (id=6946): ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c001}, 0x4008090) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000994bd740f60d5600b5a0000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.632409936s ago: executing program 1 (id=6947): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) statx(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x200, &(0x7f0000000380)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d30000000109021200"], 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000180)=""/174, &(0x7f0000000040)=0xae) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) listen(r0, 0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_create(0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (fail_nth: 1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x62, 0x5, 0x3e0, 0x0, 0x178, 0xffffffff, 0x0, 0x2a0, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x5, 0x0, {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {0x22e}, [@common=@unspec=@state={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x25, {0x3, @local, @broadcast}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote, @empty, @gre_key, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'batadv0\x00', 'bond0\x00'}, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@addrtype={{0x30}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast1, @multicast2, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="12000000070000000b0000002200000000000000", @ANYRES32, @ANYBLOB="00000000000000004822e503a896497f0000006cc3000000001000002b08d3b1c1ae12890c7a954ba78d2eb4de45e13c03904ff1bafda5f6ede1ef134616a0e9bc834aa6a8a725c13597fac0f221041237f9b1edb02804afd330ebf0809606f2b94731b63c10e0d4a5e1f0e62711733985800182374aed3e532fc7a5deeb00100dde946baac32dd42dd5c2614bd39927fb860a16c1448305de51777c4edda38f2510cf395ae64dced7ab04fd40f615d97cc1777427e6461618a344c292c40a7904b9c6dd1e4855152883f1d393f82894409ee052071a060b5463d3f5add944df382962cffdc48d45e71d7975264953177c7f0050bf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') 1.503527851s ago: executing program 5 (id=6948): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x701, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40000) r3 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0xc0884123, &(0x7f0000000080)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[], 0x4c}}, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) read(r4, &(0x7f00000000c0)=""/81, 0x51) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006000)=[{{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000240)="e89eced1092e0da934c9d222544b6b8cbeef5d63f275c23993ac913fd44704adf3f910c0", 0x24}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000000340)="993224c2e9f3317549974993f1f620e9893a2125c7c3b2a0bdf5ea182da7aed0e77e64a9f3ee07519b8083408bf1cacbc7efc97de509416457a8f0b29a9a3a22cae4ffdcfc0238826996c86e72bee40d5b1f900d0c71522ae5ee96d9836cf420b6b80950064a6ac18538696e92fd7801dfe50e98", 0x74}, {&(0x7f0000000400)="a393b97d43356dd77eaf9cd81788662581a84c505a5f3e869410c4851089b309578a0bb7415512db8529fbe5b98afd1c3d4ac418d4aa72c3d8147972cd9b610770f483f0271ba523353b242256e3432ae3940101267f0d514d5ada11e82e238ef4f3d61ff6153760c0627e8a3aaa76633aa3686ae10e37350f49427a1342c273891e6217918f", 0x86}], 0x4, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x30, 0x1, 0x1, [r0, r1, r1, r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90, 0xc080}}, {{&(0x7f0000003ac0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004100)=[{&(0x7f0000003b40)="c88f9b16ed3e49b3d0a911ec7f5821a0fccd61a504bb03e9bfdb7cd3a60d9720727446d25f8bd74e6b3236b7590629f7d835a68a78bafe519f954cb97b1d8fe02f65ff8c4d68a56bc0c28bb5e0e66f7fb867d4e8bab990737c1dd0dd93da9cac1cc5d364aac88551f86fd133", 0x6c}, {&(0x7f0000003bc0)="15ad7293b022955e81d23f93dcd72650e2e719e264a0ce33ed557796141039543119a443bf8e66bb2d28a09aaef2a28173d1048734206f65215dbd0209c1ae1644dcdf8276f9a55b5d5fe4e43313a86fe601c162e5b724135ff13a1e7e8bb76dc25e01967d6c21c1dd9b2a7fda701e37c459e5d2af6924a76002028b76af2db72785a7e372779506e874262fc294f0cd6d95ae0f2d74438044c01045685275bb1b2c8faa900d98148a2ccd0caee90a2306fdf17af2a3c17afcb974353c4d2ef206a855a81c6b09e740c0d24b5c04da16b179bc0d70c49a954faabb3ad6b7e123a921f84dd4f342a067ffc2023a889f887acdc8ed384d12", 0xf7}, {&(0x7f0000003cc0)="bef05f5fb0495ad0b80da726f968d72c9db8f8615389706402bf85ab852cb1925c0c1aa11f56383cdfc3d7926c7fb8e16ea6c54869ee13d1b2c8b3dbcef11cd88a6b143e54eb9ce58982bae59c093d4f5278fa18bb5cccaa2e4f1cf38b4928af6071f56d5e363221155307954bc0ebdb91b78ca9f05f4026de378d222444fdc860ccfa54bb77ade185eff58bf7c03f3021d629bebace4f0fb7c70b43e2e8bc", 0x9f}, {&(0x7f00000009c0)="24312711cd408af240a367ea639faeafc1c5e401d659159e0a2affa4f808a45a3a7c", 0x22}, {&(0x7f0000003d80)="6af37ce2be6bc810e746d13d0d1bcfdba7be1aed8cdaa579bdf25ce341a6a3182183b802026af3361f0d16295ab14eeb38bc0f3b123cf5711110af8192aa4084482e6ef2f350fc24a81b91976cf7d0bccf168a6d32fd48d309635411ff8b4a61a60a8d3840a9d7cb47df1687383100859d3c6b103f38d8407a6c2486abb7e8a67ba59b836d6c416d3aa967feefdb000861b8ed2d826aed01ac20860f3410d10a3e3ddf71b1520d1c68423d481cbe411d4c0379f3d6c839166372a5c8c5fd2179e4699dc5f4de526c9d620fbe9cd62f48b268ba1065f0181dfc32", 0xda}, {&(0x7f0000003e80)="feab2f912dc1b09e4047a0463635cca00d138fa26fa965b7c7dc9dbe2d3a7832a660d8ef930b2becdd4022887fcb59b4458dc03da2e60665cbcb1373bc806ac54255838a31928393c319a0edb5f0d40f1338c630b02d4682afb3476575689e15cd7a7be34c1cd326c7213e1dbf988cb6b03d76c32112b36d4db699dd58dec55ffd79127832f676193e08a654bf59eb153dc41db47b51d3d6f9818682b5cd695b", 0xa0}, {&(0x7f0000003f80)="039f79745dde6872f67efd0fdb0c6055801a850938ed31b411f32bad1d7993e5fb2bf608774e13887214d23522a0ac6e2d6870742c425435a1a8da7fad204dfac7efa7113ca49402d22e28e2aa04f426a2a36d544ad72bd873cd3f0f7db53070e9a5a0ef82d486d0622713b0332eddc6a4fbece99d7a3b3815510c4b9674746b4f251dc211e718e5dd54c2b971549430e54f62f6263a4da0ec268f1aed771b781ed0c698573c1ac0911a31f2a5df7d7c7e35fc6a1b66fa943ba5382c65bfd11c93fcfb023801ff8e2e5e47d6b67dbcc60d198e9dab107eb74713dd8d26", 0xdd}, {&(0x7f0000004080)="52b1e8b1fe395766b87ae4dd5ad23992f6e2fdbcc175bf7ff505e84bdc92126ebe4b7df3761973ae1f27409a360434cea94b7f8ffc951069f894ba691f1b443995fa86aa8fe3a519", 0x48}], 0x8, &(0x7f0000004180)=[@rights={{0x20, 0x1, 0x1, [r2, r1, 0xffffffffffffffff, r1]}}, @rights={{0x18, 0x1, 0x1, [r1, r2]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58, 0x8c4}}, {{0x0, 0x0, &(0x7f00000058c0)=[{&(0x7f0000004200)="6c7434d7f91c69d4ac157f18b3585ea9d837a92823f1e719ca93b1c0a933d135c733a3cb96466690b23880382db220e30dea1207aa5e858567ef0c3fb171187a69961da6924d8b4fad67fa269b27218faeb590aa186678099a05a0e13683121a78d7a3b50bfa5e9fc12692c033942d8fda3e70aa588c0e2f3d89c368d70099abb272405f4bb7b52959e770fd755406a5a007fda69e6c3b0e9c593cfcb0586dd15be222972fb9b3b28d77471e2c3d", 0xae}, {0x0}, {&(0x7f00000043c0)="21aaac8bb71459231124a62971c1f0c0b31d91e6d2ffc475b9b19d5bf30adfdd5742838b7d40b1ee01875add0bae4b87e70d60ef600933fb1b47027a14722460ec5abc16d8ec19546c07db57a28884b0645f2355f2b5012a008ff96dda87b44cc6e0df5937c280853d7407866ee09b4cf77b87359fc615f58da550b1e00acccbf80a00eb034ad25c35ab6d77578145021abf3173d55bffc62c52ce83c2aba4ad63d603a2edb64cfa1ff00a93aa7abd0740f0feca0f2c650ce41b16ffc328adb3895a573e86d05eb77c5af9", 0xcb}, {&(0x7f00000044c0)="76fe800c291714abc398d416b691f0555fa792c89ea0ccd6fb60e18fcdd567a40fa7c0fe5f68bb7c04dedb4a7468b48fbe4401d5beca312da1975b59d950d0acb61d7e428eb976ca1b048196a90d197e00a232cc97fb7defa557c345014ac3ee317b0478d131400eeaca557a90f5e2ac90810bfa28d8c703be3ef67ae6c4a0a63257f41ae99755499772e07a3719e065f15cb1fe0bd5c733154ce1b6b853544a8529a0cc857f6135681ff27883a4e0aadc4ca5654de217c15e45af4157dd292729f908ef03c8604fc37a5ca142", 0xcd}, {&(0x7f00000045c0)="30cbbd99ca2098ae257a790a47e3a840292c7108077c5aa836a7619b3a02e74d9ffce28aee6389d0eab5b3a6e889a6aa041f439ab848525c630a66ba1683d8293ce6872d5cc226b42cc15a68fb036f6d29d8fa70db6c6249ca5700b6d08c010ee4fd8bc080be4ae1b5691890fe28db2052181be83ab928fcd707ca5b9a57bf06671897bdb810686e67cfc6ef2a5c71628289916624381fe4b4cb50ed972640b757d13094fca50efbf94e25f29a6ef27d79940a0ef7b2adc817b1879412124291725402", 0xc3}, {&(0x7f00000046c0)="acaf6da99787a4a8dad126a47942e5ded58ca8cefe7f11ac5d3428dc6c235803c013246aa64c558e532b32c4590555adeb4bbd798cb2bb6b504d871653c506dcb57aa32f8238f8e4ec7773952be0efbdd699d825097377216a5c8df00d50623f3eda2d731c6922a9e28299977869bf8e299fc6785a0357c9937275fc2a4385bc9225b898b6d3326e051d2b57a5b9a1311d267a581429ecbeaf141b8caffe13c823af44e9470a497a06bf1525ed898a8feaafee99852f90c15088d3db737226c08a86b45362c4e83c253605e724c0d5cdbb2c063be57c811bb2d10915522f07f00e1b45955b1dc2feca4f5e17d090fdb82112dad4999a5a4ffeb1c27a6ac8d828df4f60730a61e4e3bff9aff09691591c6bc7b3ee404094bd27da735870113d63ce7ae36c14ffc9d59a8eaf2c543d549911abdd79e43641383ae3ad3ebe82dd1cb1aa89b3f372765c1282a57c303c5d5b254ded84aab951d94addd3259437b6b6f0ebe5badbc2c6cc6cef862dbc92d0c374a7f920eb9f0e0253bfcf3efcc64bd75087e475b9b2e180f0bd6c7eec2d0ce60b56a01539f836243135e9e9f16fd939df42a0f4635c0c95ffd8408c95b67b6d715957a685820d30c8a6bcf7afdcec135fd565a23f6eb8376b54a717752bbb791cee911a0e7847c065621d8c158182fc81e8ee61a4e180f089dca904862d9c693ad972454b2caac40caf4cead7504e4799d77cf36597c3356f51cadd62a5820025b7562bcea4b8a4e9261146ae4fa1c28ad29679de6a9d061fa96405bf944a5c4782463359ab260a8cf15fe0c150e362950af9036b7ea534b6b478b74cb6348be5c95b11470685b9ee84d7a81cd6dd090b92f7840b4e622baa71824d6779158b4398bae339ed6e230194ccf250159690d698119f6c412e612e86832844517437230d017027751e31ce78d3bf44f209c260af85224e32dd229ba5ca15cae02dafd3b868aa68db7e76f18cc84dddf8f6ba489fcc730fa82befb3613d35606f6a16b2264dbfa697374caae151d15afbe84e9ed58747ed40e64cde91bac246b7b29f22fc40028a919f2f04a469590299f6bf197fc2ba5095a7b08322d4397461e039f788700122f55914bd432c3d4f89650c87d90bb9efb7e1dddbee0e3607841c5def910e7cf65f854fd728bfb635c68559788c18a2511ca9f059eb093070be08057570df939ec6cda4e5782ee38024df14da453c65722ce945b29d756e3976f249d0be8137c49f0b89061ec9f25fa5dce3062704cee303c209b1b0c12030a5aea83bb412f5d6ae7a6945dcc441aa216e25e1acc0f5e39ed230b473f503fba14e2f0f4d332fdb9f0b28006fca5e4c80971d9bb873436d2ea8ea6678b985e0adbc6a6241bfb8131eab7faf82a03afbac47ba9e969c07728717280916603eff67e2f4a43febc14024651882c87aab3220f092e2c3f0a35e97269f074531fe0f7e0667187025473d5dc66f573f1a84166075400e5c2ab06fda2cc469655aa2690b0382fb18f3193236774640f87b24b789809d45ddf3b25d76500e2c812c45e3d12fc032ebd264cffbe0b69fa6d6e181be05a2dcf163452b61fb3df5af559188022504cb31700b0a2bd1d26bc4e323bdda397d1c67385fa262a62a336a238887a90224664c5b5e79090d4ffb11918271140843b235b87e747ce2311ebe9410f8dfad53ee3dbe08fb6857c0b58c1c11d9d9aa59c206d23e7e3ecbb59982bd31d8620bdab6559cac31db52a97f326b0a9b763d930373e12bfa427fd90632abe48b6fe36ac89f07c47d90b9e6a0dcd5a431092a42a3296139f31d4701bd4cde448b5fcfc34b4a6d597fdc0e172cd0930ef706394f07e5e335f0694d7ad194747bf3807727665b1cd048a627d6a6bb37b59e5159a2588260e159198356d7fabbc2db6a29a39985e07d43fda555b395da2fdfda90493ff5a522fa76ac63d974e04a4361f7fd2b4df3863b8476b98022eda51bee0facded6eb60c2eb09acc17afbeba8d937280e2ae42ebf28b27d53f220594f0d037ab17fefac7a23fa673b054201407a197db492c856444221c8aa4da11435d7f387982ba33034e4ad0a5d2afa5588cc237b18433e96de89c8d1d463751dd7b4461102ba2380b0f3e5045a41539caf491e79471569b8da75acc5b6ca745606f994c5178894ea624fc16e5a95e0d1467f383a90d7593dd8fe46477087ab2ac5237c6a7cbe8eda8727c77590e65674bcb3709b90c69ef7539be9fcfd71ce70273b3b15be02638e585fcf31ed06f9361d8045fde14343a005be31051f52a5eee2ccfc0c668a293f15699cad9ae494eaade642a9b9653ce280c0e503a3f3f8f6aab9a1065956fe62616849df1fdac456b01e700ac4d2ef1d973a3249a53d9eb27528777d0601dd41a40f37deff7f38042a7ecd356583e3bea85ad99a0e11e7c3c0461df56f17d8f3b8407f1678ffde29165adbbeb90936ad5c05b719ce414eb730c1493fe350a3e0f984b4fb3cf8ecfdc6d9d9ac5e5d199d89bd43e116ebc3c4b0b78dd1aeff93de34bda7ca834adb6c35b34d8302d5908f53ba1076fa76a7b9abf1d9fa416316d77ba4b4dfca2eb9838dd1fe32c0196bbfb6dad047a7fbf0f1ebfa46740f72f29939d374ef2ea8565adf0ba503b4c5c7e01f12466f0dc2ab2a4047c3e927427c36be4dc0ee52fd96314eb1904756d4e3a81b2481c87e2ef38bf0e735498f9d9a2c4ccd3ab698186eec7722e0086276274609883fef9a568f62a809c0c88d25b349361a90094361ff7a1d9ecc1002e67f203e4a64ea73d9ae17dfbbc70d2a0aa6dd3454beb20eef5b2b25b8434843629d13782efa003866a5f9172506b995a469f89965b27994c92cf69167ea5769c77f6208ab0207ee5c513b0aca538a2b4d0993c084257ee658ed043ec93541647756d82056855117255e1043293be5aea506c57400c46ea1f4cb2f86ce6cf23e7ffaf561447688423f4b9038d3e300ede4991bb39cde2a88fb97a03b0a738e8a782bcc0fe5992bb9a2fe5c5474d0bc8c49b02930e180a005ee93f1aa788154c18180553504943076fd285c54cb1c0c06e5af6bcfe39912aed4a2af3e6182c6102e94eec835c9372866889627b2379f0bc5047fa6d8b92cf6948dace3ee07a10bd0c6b9086720b05be94fe2461aab329b2c25958adbf7ffcf07c35cfe2165817267ed269e1a5861a607e506e4c7be9d9e41c5fe7bc10e19dafdbc56188830cb8c84c10032ccae57b6337ca21f09e4f05946092371408a018727617cb9d800b80d0f0bb1ed991e338fce1cad4a5cbfa4593c6b0f18a06cfe51f64e746b1ee7f4efe55362ca2b1a93aff0acfbf1cf0d5043e160f37a1540b2812e3c1269117f415d068123d9f77df4164cbf4858c9db228d1e565f89b6af1d75950f3410a1f8d2911dd903e340577a16ada83ee28473c3b7d858fcf9e9e45e5f3081b52d52fedd2571a56645a02b410e9fc68da985d5913802c8cdc23d24f8e07fc168a1cdb6eb65d2a52491ec48c7eea2becdf4a6d82ee488078406c85672adf21a9e94d66201077ed541b90ca3752ec392b443336bf51e0d9439f4d8d0f07a14f35d28c5cf2113c587ce87bab1a8706a60645fd851bdf03fcef81bc3d6f2b9b6ad9941eb1ae7d7d867476dd62bfddb363f403881e52ac3b4ec4006ab4c2c22ebf941668ea40207f74fe33d12a0a564f6f0669a71d87d9959ddedc77ca4af5ddce63e63db267717c244699f7c1d2e0fd26946ddbc9cab8f669a42a7fe75644d0350fe118d0b4099e4f677b50f07c742d3a6525d4b87a67898e24d04a8aef96fe1dd2e0c4f76b242b1cdba406f72269eabc0ba881153ecc1be8d580224cbb43ca63f02971d13600a63cfd7b35b68de9bdfdb15dc7289433515fcd505128c4eb58194684675fb99af64dd3c899af9cd70d54f6f69b0e368e7b6e9a425521f524ad172d115c6f97b23b3fc5c6ebe10f95702ab1b105f64dbe618452da741e6a83dfe17435266795d8eb6f8d7603b7332db0998f3b4ec1eb514fd6df22365d6fa059e933d629d035792b1db8b5a5e0df23308f1dd09252c4343ccf6caa54c2c7ba3214c08efcb3d65015b5910b976d45be2da7e064748cc80bd21e5b6a9297ea456704e231fdd75a9ba9b1887dcc53205326ab19b5ad032647c04f30f17220d58bd914811714540768ccbfaad781e3c5de91bddcefd1a9fb994a3a547cf8022f355dabe2acc0853b0f243e2664f8019e100fcee97cb733fa07e61c3598d6378dd73aa13ecb6d4441b600e18e0165d8ca2fc5dc077ecba39b2710860d6266df959fdf18a7dc2678e09d98c1c2f4450932df1105e1c56eb58327eeb81be9993b7f178186b4de8c64bcaad8c3dd71af008d44afbcc0bea2b955ee5953bff9fb6ad2025f6a72cca16ee2534e93f26ffc6da04be9853d770cd92216527eacf632b4f880727651aa3d9463f08cb9b7d8557f59de60385ace040882da4d05375d48f688d118f74bff26230a4592569538dd42759db95b186a50408385ea7db1e3328f254f02cac172affd3395ccce73122b8c8724faef7e2824ac2dacf69b8c2291dce993ad05a40aa2491b77bd80d44c4edaf31c6bf219be768b4e2178d858965c5e566e551fb0025d6b4d88575d87968952abbb019fc71373d7bbdb4435b1d88c457fb84d98ccdc6636c7c643ec2a14699949704beac138e155350c867e51f530f05cfd33112f63a694b62954ec3341a027152d0542e47bf720a80dfaa6242e9a63fbe56df641381e5c444c2c2d2c59a99841ef6746510ddae7ed5db1e8d64791e1924d53169689d6949b6d56184598d7424a68bb243767a08b42c584ef943be6bff329cfd47d8135a9d16e49da7b3b148c14496aa8328ab101744a1c6178cb963cf2cf86ed21324a85c9aea3932357c411a265de209b53d5642160652978d7d4f346c939bb6e7aec0afc435297a7238fe78b073b9d6a28977a44fd8618eb66d429205a215e240785d126e7d2f14614e97ca17d096ed56d1583b31dd7985f09c76eee84cf92b6eb778b40788aef1d33cc422401761a889e7661c001f09869222688dea72c2e9781ce1c54693aacd349f6cf105ccc2c9de6a790acac359a7519893dfe5fde441e41c048e6a8ff88a78a075493b1c165651cdba97354d2399f83293f2820f80f127786cb75861f84dd2b50c4b0a35344dc054f59cc7a256201eed44659dbff6ff2b3cc5d262b995251333c7404a2d69093103a8b882ac209c476a5e69e63a3dd74e3e99354b2de1ed165293688dc44b4543e1b7cac1c2d5099660ccc9224dc3fcad8e83964be1a1d01ce473ec1a6f1948972736ed5395899e4e02a18b8a40e778c804b91cfd7541b51b8b949b6d9b549c884580967016594d478a41ecbb437dae1855a49197fdc5aba7a965e83d9643dcaeb87a52837141711bf10a5e5c1171a253ae781e98d82c4d4a80d19a53a9945dd1e0d0c4dcd3193332fa84d3d657c7c2eeb41e5290409cd30fe6c24e90fffa56782298c142aeea15133cf771ce14a8e41db43936fc7410c5e092c72bf640bb94803ccbbc7fbf4617a1e2bbdc1f3c482b87299f583115658a3a205f9736f2ed3ebf9e4646b10c1bd80eba7285962a927c8a16c8ed7b457ee536e0ee7d5f5b9f4eb5fcbc6f1169bb4667356bb83ebe2eb3e2ad2a6d9f23462e970b857254d4903976b542b0ef99dae48e88e4a58917b6f25bf2c54dd2f13c3d4f96c3e52234c30f24d91bfdbdc48ccd6e7f5bc093db6e67c031a11b80aa488eca88a567499d4d32ec6f97bb97", 0x1000}, {&(0x7f00000056c0)="29f6ddd17cd94d2a8a6e673f87adecb4a91969bad115e8132bca53c8f7f967e3bb8d12d73d688cd4d62ef23f410ce87b82cac49ca46d451d9347ef4f2f09c58c6f86d5ab9a892a680df0d7a049f19fbe51d8", 0x52}, {&(0x7f0000005740)="2fbd31cb83d13a5605fba2e7491fb19eb92a34b06102114f298d7bb70ed4c1a8e105269601346a1c8bbdb622cdff44941a33d15ac32cb1d5a99693788403aea1ad80e44945aefe3a9fde7617cad2708ce04cc7c621b315d109b78efb738076ee720cee07d849", 0x66}, {&(0x7f0000005800)}], 0x9, &(0x7f0000005980)=[@rights={{0x30, 0x1, 0x1, [r4, r0, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, r1, r2]}}], 0x30, 0x8040}}, {{&(0x7f00000059c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005c40)=[{&(0x7f0000005a40)=':', 0x1}, {&(0x7f0000005a80)="b946d282448d7fe6a9c8c35668a870a269d5fb00b78f67dd343f7b3f2c194eb135a7032f406455503bd8ed02ba1c2af1a1cdd4ad5778b7dbc6bb3a4617067e4059f85d893fa9774645d0aa832302219a701cdc208460b09ad8c8a1e49f743ad808dcae61f7989202b27df5bc0874af9f7998ac759b17c5038f01d8dc6f3d2ef5f952fabcae12e93939298b6578b134052b91a340b697f92b9807dc3b9946e1ffb526f7ff54517790d56aa73a6faadb2378a231c0f385867ed0a0370d2be2f6e8431f7547", 0xc4}, {&(0x7f0000005b80)="5dab4f34d523feb33b75405d01e041f285035da83c4310a43e3278ec12f945e35bcc70d1246d55d5192a33ae4f902603fd94434ea6e0ad4757240190ff6d9c7818586b16cb9d246e820fab274b93864fbbbfeda406d112f380b5561fb284947b7560c1b72a041cf88c3dbc943e91521220946f5a54a0d1ec8cbe29c22860f8f75da48fa171ae8b1decaa228a", 0x8c}], 0x3, &(0x7f0000005c80)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0xc4}}, {{&(0x7f0000005cc0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000005dc0)=[{&(0x7f0000005d40)="63665ca8cfb521f5c1c5c7c30ec6e517a0635068fb19fc0a2078325db64ee9856810c4a417e1dd59f6aab8a1a62ee38e1a384094e324f3c1ee8cbaab871826b77cfd66e0d9b5daa5c469aa", 0x4b}], 0x1, &(0x7f0000005f00)=[@rights={{0x24, 0x1, 0x1, [r0, r2, 0xffffffffffffffff, r0, r2]}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, r2]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}], 0xb0, 0x4004}}], 0x5, 0x40804) open_by_handle_at(r2, &(0x7f0000000100)=@ocfs2={0xc, 0x300fe, {0x1, 0x0, 0x2}}, 0x88800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) msgget(0x2, 0x20) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000700)={0x40, 0xb, 0x4, "eb5f9bb9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000030a030000000000000000000300000009000b0073797a30000000000900010073797a30"], 0xcc}}, 0x0) 918.887874ms ago: executing program 5 (id=6949): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="5800000015", 0x5}], 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r6, 0x5) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r7, 0x1) flock(r7, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) write$UHID_CREATE(r8, &(0x7f0000000200)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000180)=""/109, 0x6d, 0x8, 0x8, 0x9, 0x6, 0x9}}, 0x120) 195.802502ms ago: executing program 3 (id=6950): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xd1) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="020000000c00ebffffff0100020000", @ANYRES32=0x0, @ANYBLOB="040000000000000010000300000000002000000000000000"], 0x2c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019640)=""/102392, 0x18ff8) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 68.096395ms ago: executing program 4 (id=6951): bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x1b, 0x9, 0x8, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r0}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000513000/0x3000)=nil, 0x3000, 0xb635773f05ebbee6, 0x40010, 0xffffffffffffffff, 0x7e020000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0xa0000) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000180)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000040)={&(0x7f0000000500)={{@my=0x1, 0x9}, {@local, 0x100}, 0x400, "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"}, 0x418, 0x8000}) 0s ago: executing program 4 (id=6952): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f00000002c0)={0x5d, 0x3ff, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000005c0), 0x10) recvmmsg(r5, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x8}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000000903000000000000000000070000000900010073797a3000000000640002001400018008000100e000000208000200000000000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000240001800a000100726564697200000014000280080001400000001208000240000000"], 0xf8}}, 0x0) socket(0x840000000002, 0x3, 0x100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000005c0)={0x1, @pix_mp={0x3, 0xe, 0x32314d56, 0x0, 0x6, [{0x23, 0x2c}, {0x200, 0x39}, {0x0, 0x5}, {0x5, 0x4}, {0x6, 0x1000}, {0x9, 0x2009}, {0x291, 0x10000}, {0xe8cc}], 0x3, 0x5, 0x8, 0x1, 0x4}}) kernel console output (not intermixed with test programs): SB webcam detected. [ 2092.105177][ T5941] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2092.114635][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2092.131646][ T5941] usb 4-1: Product: syz [ 2092.137686][ T5941] usb 4-1: Manufacturer: syz [ 2092.155898][ T5941] usb 4-1: SerialNumber: syz [ 2092.618323][T29066] netlink: 'syz.3.6331': attribute type 1 has an invalid length. [ 2092.629926][ T9] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 2092.643459][ T9] usb 6-1: USB disconnect, device number 52 [ 2092.659872][T29066] netlink: 15918 bytes leftover after parsing attributes in process `syz.3.6331'. [ 2092.719358][T16485] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2092.736112][T16485] pwc: recv_control_msg error -32 req 02 val 2700 [ 2092.783974][T16485] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2092.853607][T29071] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2092.901854][T16485] pwc: recv_control_msg error -32 req 04 val 1000 [ 2093.276544][T16485] pwc: recv_control_msg error -32 req 04 val 1400 [ 2093.294072][T16485] pwc: recv_control_msg error -71 req 02 val 2000 [ 2093.301908][T16485] pwc: recv_control_msg error -71 req 02 val 2100 [ 2093.334069][T16485] pwc: recv_control_msg error -71 req 04 val 1500 [ 2093.844029][T16485] pwc: recv_control_msg error -71 req 02 val 2500 [ 2093.851317][T16485] pwc: recv_control_msg error -71 req 02 val 2400 [ 2093.858900][T16485] pwc: recv_control_msg error -71 req 02 val 2600 [ 2093.866461][T16485] pwc: recv_control_msg error -71 req 02 val 2900 [ 2093.874202][T16485] pwc: recv_control_msg error -71 req 02 val 2800 [ 2093.887220][T16485] pwc: recv_control_msg error -71 req 04 val 1100 [ 2093.894308][T16485] pwc: recv_control_msg error -71 req 04 val 1200 [ 2093.904487][T16485] pwc: Registered as video103. [ 2093.910111][T16485] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input155 [ 2093.926052][T16485] usb 2-1: USB disconnect, device number 88 [ 2093.934003][T29080] FAULT_INJECTION: forcing a failure. [ 2093.934003][T29080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2093.953898][T29080] CPU: 1 UID: 0 PID: 29080 Comm: syz.4.6336 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 2093.953923][T29080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2093.953933][T29080] Call Trace: [ 2093.953939][T29080] [ 2093.953945][T29080] dump_stack_lvl+0x16c/0x1f0 [ 2093.953973][T29080] should_fail_ex+0x512/0x640 [ 2093.953999][T29080] _copy_to_user+0x32/0xd0 [ 2093.954031][T29080] rtc_dev_ioctl+0x33e/0xdd0 [ 2093.954057][T29080] ? __pfx_rtc_dev_ioctl+0x10/0x10 [ 2093.954077][T29080] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2093.954118][T29080] ? selinux_file_ioctl+0x180/0x270 [ 2093.954140][T29080] ? selinux_file_ioctl+0xb4/0x270 [ 2093.954162][T29080] ? __pfx_rtc_dev_ioctl+0x10/0x10 [ 2093.954185][T29080] __x64_sys_ioctl+0x18e/0x210 [ 2093.954207][T29080] do_syscall_64+0xcd/0x4c0 [ 2093.954233][T29080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2093.954249][T29080] RIP: 0033:0x7f08d0f8e929 [ 2093.954263][T29080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2093.954279][T29080] RSP: 002b:00007f08d1e36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2093.954295][T29080] RAX: ffffffffffffffda RBX: 00007f08d11b6080 RCX: 00007f08d0f8e929 [ 2093.954306][T29080] RDX: 00002000000000c0 RSI: 0000000080247008 RDI: 0000000000000008 [ 2093.954316][T29080] RBP: 00007f08d1e36090 R08: 0000000000000000 R09: 0000000000000000 [ 2093.954325][T29080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2093.954335][T29080] R13: 0000000000000000 R14: 00007f08d11b6080 R15: 00007ffef5fac648 [ 2093.954357][T29080] [ 2094.500061][T16485] usb 4-1: USB disconnect, device number 11 [ 2094.981721][T16485] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 2095.263167][T29092] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2095.264943][T29091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6340'. [ 2095.502542][T16485] usb 4-1: Using ep0 maxpacket: 32 [ 2095.511981][T29091] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6340'. [ 2095.522946][T16485] usb 4-1: config 0 has an invalid interface number: 233 but max is 0 [ 2095.534635][T16485] usb 4-1: config 0 has no interface number 0 [ 2095.547164][T16485] usb 4-1: New USB device found, idVendor=1608, idProduct=0302, bcdDevice=d3.4f [ 2095.548106][ T9] libceph: connect (1)[c::]:6789 error -101 [ 2095.558060][T16485] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2095.572707][T16485] usb 4-1: Product: syz [ 2095.575701][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 2095.576865][T16485] usb 4-1: Manufacturer: syz [ 2095.576883][T16485] usb 4-1: SerialNumber: syz [ 2095.595186][T29094] ceph: No mds server is up or the cluster is laggy [ 2095.596018][T16485] usb 4-1: config 0 descriptor?? [ 2095.613252][T16485] io_ti 4-1:0.233: required endpoints missing [ 2095.800773][T14306] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 2095.815063][T29086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2095.823887][T29086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2095.857656][ T30] audit: type=1804 audit(1752017144.603:1733): pid=29100 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.6342" name="/newroot/48/file0" dev="tmpfs" ino=284 res=1 errno=0 [ 2095.981836][T14306] usb 2-1: device descriptor read/64, error -71 [ 2096.231590][T14306] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 2096.641711][T14306] usb 2-1: device descriptor read/64, error -71 [ 2096.771394][T14306] usb usb2-port1: attempt power cycle [ 2096.911523][ T5941] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 2097.131294][T14306] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 2097.141052][T25757] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 2097.151432][ T5941] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2097.172166][T14306] usb 2-1: device descriptor read/8, error -71 [ 2097.176827][ T5941] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2097.206151][ T5941] usb 6-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 2097.216235][ T5941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2097.226413][ T5941] usb 6-1: config 0 descriptor?? [ 2097.301545][T25757] usb 5-1: Using ep0 maxpacket: 16 [ 2097.318501][T25757] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2097.351750][T25757] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2097.377992][T25757] usb 5-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2097.419735][T25757] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2097.434505][T25757] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 2097.443879][T25757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2097.452362][T25757] usb 5-1: Product: syz [ 2097.457740][T25757] usb 5-1: Manufacturer: syz [ 2097.463463][T25757] usb 5-1: SerialNumber: syz [ 2097.471608][T14306] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 2097.493173][T14306] usb 2-1: device descriptor read/8, error -71 [ 2097.546885][ T5941] usb 4-1: USB disconnect, device number 12 [ 2097.602013][T14306] usb usb2-port1: unable to enumerate USB device [ 2097.981629][T29122] random: crng reseeded on system resumption [ 2099.066941][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.246377][ T973] usb 6-1: USB disconnect, device number 53 [ 2099.390475][T29127] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2099.720049][T16485] libceph: connect (1)[c::]:6789 error -101 [ 2099.729198][T16485] libceph: mon0 (1)[c::]:6789 connect error [ 2100.001875][T16485] libceph: connect (1)[c::]:6789 error -101 [ 2100.015186][T16485] libceph: mon0 (1)[c::]:6789 connect error [ 2100.463572][ T30] audit: type=1804 audit(1752017149.033:1734): pid=29143 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.6355" name="/newroot/382/file0" dev="tmpfs" ino=2087 res=1 errno=0 [ 2100.486075][ C0] vkms_vblank_simulate: vblank timer overrun [ 2100.532040][T16485] libceph: connect (1)[c::]:6789 error -101 [ 2100.538069][T16485] libceph: mon0 (1)[c::]:6789 connect error [ 2100.587700][T29130] ceph: No mds server is up or the cluster is laggy [ 2100.944967][T29151] FAULT_INJECTION: forcing a failure. [ 2100.944967][T29151] name failslab, interval 1, probability 0, space 0, times 0 [ 2100.958305][T29151] CPU: 1 UID: 0 PID: 29151 Comm: syz.1.6356 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 2100.958330][T29151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2100.958341][T29151] Call Trace: [ 2100.958348][T29151] [ 2100.958356][T29151] dump_stack_lvl+0x16c/0x1f0 [ 2100.958391][T29151] should_fail_ex+0x512/0x640 [ 2100.958421][T29151] should_failslab+0xc2/0x120 [ 2100.958447][T29151] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2100.958472][T29151] ? skb_clone+0x190/0x3f0 [ 2100.958500][T29151] skb_clone+0x190/0x3f0 [ 2100.958526][T29151] netlink_deliver_tap+0xabd/0xd30 [ 2100.958559][T29151] netlink_unicast+0x5df/0x7f0 [ 2100.958580][T29151] ? __pfx_netlink_unicast+0x10/0x10 [ 2100.958606][T29151] netlink_sendmsg+0x8d1/0xdd0 [ 2100.958628][T29151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2100.958656][T29151] ____sys_sendmsg+0xa95/0xc70 [ 2100.958676][T29151] ? copy_msghdr_from_user+0x10a/0x160 [ 2100.958699][T29151] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2100.958809][T29151] ? __lock_acquire+0xb8a/0x1c90 [ 2100.958840][T29151] ___sys_sendmsg+0x134/0x1d0 [ 2100.958868][T29151] ? __pfx____sys_sendmsg+0x10/0x10 [ 2100.958889][T29151] ? __lock_acquire+0x622/0x1c90 [ 2100.958939][T29151] __sys_sendmsg+0x16d/0x220 [ 2100.958963][T29151] ? __pfx___sys_sendmsg+0x10/0x10 [ 2100.959016][T29151] do_syscall_64+0xcd/0x4c0 [ 2100.959044][T29151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2100.959063][T29151] RIP: 0033:0x7fb8a358e929 [ 2100.959078][T29151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2100.959095][T29151] RSP: 002b:00007fb8a4493038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2100.959113][T29151] RAX: ffffffffffffffda RBX: 00007fb8a37b6160 RCX: 00007fb8a358e929 [ 2100.959125][T29151] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000008 [ 2100.959136][T29151] RBP: 00007fb8a4493090 R08: 0000000000000000 R09: 0000000000000000 [ 2100.959147][T29151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2100.959158][T29151] R13: 0000000000000000 R14: 00007fb8a37b6160 R15: 00007ffd5955e1a8 [ 2100.959183][T29151] [ 2101.194813][T25757] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 2101.221464][T29154] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2101.375407][T25757] usb 5-1: USB disconnect, device number 63 [ 2102.965521][T29174] Invalid logical block size (768) [ 2102.973845][ T30] audit: type=1400 audit(1752017151.733:1735): avc: denied { create } for pid=29173 comm="syz.0.6364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 2103.024743][T29176] sock: sock_set_timeout: `syz.0.6364' (pid 29176) tries to set negative timeout [ 2103.432401][ T973] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 2103.751650][ T24] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 2103.793715][ T973] usb 4-1: Using ep0 maxpacket: 16 [ 2103.801821][ T973] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2103.812786][ T973] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2103.831581][ T973] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2103.847226][ T973] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2103.862111][ T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2103.870294][ T973] usb 4-1: Product: syz [ 2103.876761][ T973] usb 4-1: Manufacturer: syz [ 2103.885980][ T973] usb 4-1: SerialNumber: syz [ 2103.926980][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2103.938122][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2103.956729][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2104.032053][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2104.043064][ T24] usb 2-1: Product: syz [ 2104.047250][ T24] usb 2-1: Manufacturer: syz [ 2104.052808][ T24] usb 2-1: SerialNumber: syz [ 2104.120650][T25757] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 2104.410779][T29198] netlink: 'syz.1.6368': attribute type 1 has an invalid length. [ 2104.484870][T29198] netlink: 15918 bytes leftover after parsing attributes in process `syz.1.6368'. [ 2104.679183][ T973] usb 4-1: 0:2 : does not exist [ 2104.703238][T25757] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 2104.721526][T25757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2104.734538][T25757] usb 5-1: config 0 descriptor?? [ 2105.330164][ T973] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 2105.358785][ T973] usb 4-1: USB disconnect, device number 13 [ 2105.531165][ T24] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 2105.683410][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2105.695221][ T24] usb 6-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 2105.705247][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2105.715467][ T24] usb 6-1: config 0 descriptor?? [ 2105.723032][ T24] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 2105.804889][T25757] hackrf 5-1:0.0: usb_control_msg() failed -110 request 0e [ 2105.812651][T25757] hackrf 5-1:0.0: Could not detect board [ 2105.818302][T25757] hackrf 5-1:0.0: probe with driver hackrf failed with error -110 [ 2105.864696][T29212] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6373'. [ 2105.916571][ T30] audit: type=1400 audit(1752017154.673:1736): avc: denied { bind } for pid=29213 comm="syz.3.6374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2107.026041][T25757] usb 2-1: USB disconnect, device number 93 [ 2107.064905][ T973] usb 5-1: USB disconnect, device number 64 [ 2108.906583][T29237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6380'. [ 2109.226720][ T24] pwc: send_video_command error -71 [ 2109.271837][ T24] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2109.306893][ T24] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 2109.313186][T29241] FAULT_INJECTION: forcing a failure. [ 2109.313186][T29241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2109.350534][ T24] usb 6-1: USB disconnect, device number 54 [ 2109.390485][T29241] CPU: 1 UID: 0 PID: 29241 Comm: syz.3.6382 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 2109.390511][T29241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2109.390521][T29241] Call Trace: [ 2109.390527][T29241] [ 2109.390534][T29241] dump_stack_lvl+0x16c/0x1f0 [ 2109.390563][T29241] should_fail_ex+0x512/0x640 [ 2109.390589][T29241] _copy_to_user+0x32/0xd0 [ 2109.390616][T29241] copy_siginfo_to_user+0x27/0xc0 [ 2109.390640][T29241] x64_setup_rt_frame+0x811/0xcf0 [ 2109.390667][T29241] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 2109.390696][T29241] arch_do_signal_or_restart+0x5e4/0x7d0 [ 2109.390718][T29241] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2109.390753][T29241] exit_to_user_mode_loop+0x84/0x110 [ 2109.390775][T29241] do_syscall_64+0x3f6/0x4c0 [ 2109.390801][T29241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2109.390820][T29241] RIP: 0033:0x7f3fba38e927 [ 2109.390834][T29241] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 2109.390851][T29241] RSP: 002b:00007f3fbb199038 EFLAGS: 00000246 ORIG_RAX: 0000000000000114 [ 2109.390868][T29241] RAX: 0000000000000114 RBX: 00007f3fba5b5fa0 RCX: 00007f3fba38e929 [ 2109.390887][T29241] RDX: 0000060000000000 RSI: 0000000000000009 RDI: 0000000000000006 [ 2109.390898][T29241] RBP: 00007f3fbb199090 R08: 0000000000000000 R09: 0000000000000000 [ 2109.390908][T29241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2109.390918][T29241] R13: 0000000000000000 R14: 00007f3fba5b5fa0 R15: 00007fffdc9267e8 [ 2109.390941][T29241] [ 2109.734996][ T30] audit: type=1804 audit(1752017158.483:1737): pid=29245 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.6383" name="/newroot/387/file0" dev="tmpfs" ino=2115 res=1 errno=0 [ 2111.811967][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 2111.973026][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2111.993756][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2112.001443][T29264] fuse: Bad value for 'fd' [ 2112.395207][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2112.422833][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2112.444355][ T9] usb 4-1: Product: syz [ 2112.448983][ T9] usb 4-1: Manufacturer: syz [ 2112.455636][ T9] usb 4-1: SerialNumber: syz [ 2112.734018][T29273] FAULT_INJECTION: forcing a failure. [ 2112.734018][T29273] name failslab, interval 1, probability 0, space 0, times 0 [ 2112.747655][T29273] CPU: 0 UID: 0 PID: 29273 Comm: syz.0.6391 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 2112.747681][T29273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2112.747692][T29273] Call Trace: [ 2112.747698][T29273] [ 2112.747706][T29273] dump_stack_lvl+0x16c/0x1f0 [ 2112.747735][T29273] should_fail_ex+0x512/0x640 [ 2112.747758][T29273] ? __kvmalloc_node_noprof+0x124/0x620 [ 2112.747783][T29273] should_failslab+0xc2/0x120 [ 2112.747810][T29273] __kvmalloc_node_noprof+0x137/0x620 [ 2112.747833][T29273] ? __nf_hook_entries_try_shrink+0x15f/0x400 [ 2112.747864][T29273] ? __nf_hook_entries_try_shrink+0x15f/0x400 [ 2112.747888][T29273] __nf_hook_entries_try_shrink+0x15f/0x400 [ 2112.747920][T29273] __nf_unregister_net_hook+0x2e5/0x680 [ 2112.747950][T29273] nf_unregister_net_hooks+0x11b/0x160 [ 2112.747979][T29273] ip_vs_unregister_hooks+0xd8/0x140 [ 2112.748010][T29273] ip_vs_unlink_service+0x9a4/0xbf0 [ 2112.748031][T29273] ? ip_vs_flush+0x187/0x230 [ 2112.748054][T29273] ip_vs_flush+0x1c0/0x230 [ 2112.748075][T29273] do_ip_vs_set_ctl+0xe9a/0x11d0 [ 2112.748101][T29273] ? __mutex_trylock_common+0x50/0x250 [ 2112.748120][T29273] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 2112.748141][T29273] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2112.748160][T29273] ? __pfx___might_resched+0x10/0x10 [ 2112.748193][T29273] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 2112.748211][T29273] ? find_held_lock+0x2b/0x80 [ 2112.748236][T29273] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 2112.748284][T29273] ? nf_setsockopt+0x8a/0xf0 [ 2112.748299][T29273] nf_setsockopt+0x8a/0xf0 [ 2112.748319][T29273] ip_setsockopt+0xcb/0xf0 [ 2112.748344][T29273] sctp_setsockopt+0x16c/0xb870 [ 2112.748368][T29273] ? irqentry_exit+0x3b/0x90 [ 2112.748393][T29273] ? __pfx_sctp_setsockopt+0x10/0x10 [ 2112.748414][T29273] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2112.748445][T29273] ? __pfx_sctp_setsockopt+0x10/0x10 [ 2112.748468][T29273] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2112.748496][T29273] do_sock_setsockopt+0x221/0x470 [ 2112.748523][T29273] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 2112.748566][T29273] __sys_setsockopt+0x1a0/0x230 [ 2112.748594][T29273] __x64_sys_setsockopt+0xbd/0x160 [ 2112.748620][T29273] ? do_syscall_64+0x91/0x4c0 [ 2112.748644][T29273] ? lockdep_hardirqs_on+0x7c/0x110 [ 2112.748667][T29273] do_syscall_64+0xcd/0x4c0 [ 2112.748693][T29273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2112.748711][T29273] RIP: 0033:0x7f68ffd8e929 [ 2112.748727][T29273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2112.748744][T29273] RSP: 002b:00007f6900be0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2112.748762][T29273] RAX: ffffffffffffffda RBX: 00007f68fffb6160 RCX: 00007f68ffd8e929 [ 2112.748774][T29273] RDX: 0000000000000485 RSI: 0000000000000000 RDI: 0000000000000005 [ 2112.748785][T29273] RBP: 00007f6900be0090 R08: 0000000000000000 R09: 0000000000000000 [ 2112.748796][T29273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2112.748807][T29273] R13: 0000000000000000 R14: 00007f68fffb6160 R15: 00007ffc8ab015e8 [ 2112.748832][T29273] [ 2113.056447][ C0] vkms_vblank_simulate: vblank timer overrun [ 2113.063702][ T5897] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 2113.071999][ T9] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 2113.093728][T25757] IPVS: starting estimator thread 0... [ 2113.118090][T29277] netlink: 'syz.3.6387': attribute type 1 has an invalid length. [ 2113.129191][T29277] netlink: 15918 bytes leftover after parsing attributes in process `syz.3.6387'. [ 2113.181213][T29274] IPVS: using max 43 ests per chain, 103200 per kthread [ 2113.243406][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2113.255185][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2113.265838][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2113.280485][ T9] usb 5-1: config 0 descriptor?? [ 2113.281521][ T5897] usb 6-1: Using ep0 maxpacket: 16 [ 2113.299257][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 2113.299923][ T5897] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2113.318543][ T5897] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2113.329655][ T5897] usb 6-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2113.397480][ T5897] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2113.420759][ T5897] usb 6-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 2114.369677][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2114.388431][ T5897] usb 6-1: Product: syz [ 2114.393484][ T5897] usb 6-1: Manufacturer: syz [ 2114.399178][ T5897] usb 6-1: SerialNumber: syz [ 2114.413298][ T24] usb 4-1: USB disconnect, device number 14 [ 2114.508740][T17089] Bluetooth: hci6: unexpected subevent 0x01 length: 11 < 18 [ 2114.664388][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2114.679683][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 2114.699483][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2114.709334][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 2114.871749][T25765] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 2114.918355][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 2114.926209][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 2114.933314][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 2114.940120][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 2114.947238][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 2114.955672][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 2114.963043][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 2114.969880][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 2114.977871][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 2114.985218][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 2114.992523][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 2115.001975][ T9] pwc: Registered as video103. [ 2115.008202][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input156 [ 2115.030484][ T9] usb 5-1: USB disconnect, device number 65 [ 2115.043830][T25765] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 2115.061825][T25765] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2115.092623][T25765] usb 4-1: New USB device found, idVendor=ff26, idProduct=0000, bcdDevice= 0.00 [ 2115.102575][T25765] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2115.115421][T25765] usb 4-1: config 0 descriptor?? [ 2115.598792][T25765] usb 4-1: string descriptor 0 read error: -71 [ 2115.772585][ T30] audit: type=1804 audit(1752017164.523:1738): pid=29295 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.6399" name="/newroot/59/file0" dev="tmpfs" ino=353 res=1 errno=0 [ 2115.972191][T25765] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2116.472357][T25765] usb 4-1: USB disconnect, device number 15 [ 2116.678525][ T5897] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 2116.856293][ T5897] usb 6-1: USB disconnect, device number 55 [ 2118.198836][ T5897] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 2118.352042][ T5897] usb 6-1: Using ep0 maxpacket: 32 [ 2118.364334][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2118.592365][ T30] audit: type=1400 audit(1752017167.343:1739): avc: denied { ioctl } for pid=29317 comm="syz.4.6407" path="socket:[124471]" dev="sockfs" ino=124471 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2118.622352][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2118.633881][ T5897] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2118.643858][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2118.665183][ T5897] usb 6-1: config 0 descriptor?? [ 2118.684573][ T5897] hub 6-1:0.0: USB hub found [ 2118.868495][T25765] libceph: connect (1)[c::]:6789 error -101 [ 2118.875845][T25765] libceph: mon0 (1)[c::]:6789 connect error [ 2118.894188][ T5897] hub 6-1:0.0: 1 port detected [ 2119.152403][T25765] libceph: connect (1)[c::]:6789 error -101 [ 2119.172495][T25765] libceph: mon0 (1)[c::]:6789 connect error [ 2119.405380][ T30] audit: type=1804 audit(1752017168.083:1740): pid=29341 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.6411" name="/newroot/53/file0" dev="tmpfs" ino=319 res=1 errno=0 [ 2119.498315][ T24] hub 6-1:0.0: activate --> -90 [ 2119.753038][T29344] overlayfs: failed to resolve './file0': -2 [ 2119.789605][T25765] libceph: connect (1)[c::]:6789 error -101 [ 2119.809643][T25765] libceph: mon0 (1)[c::]:6789 connect error [ 2119.816223][T29333] ceph: No mds server is up or the cluster is laggy [ 2120.017823][ T5897] usb 6-1: USB disconnect, device number 56 [ 2120.028555][ T24] usb 6-1-port1: config error [ 2120.826679][T29354] geneve2: entered promiscuous mode [ 2120.832314][T29354] geneve2: entered allmulticast mode [ 2120.882488][T29355] 9pnet_fd: Insufficient options for proto=fd [ 2122.834310][T25765] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 2123.175222][T25765] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2123.186726][T25765] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2123.198378][T25765] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2123.223429][T25765] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2123.229880][T29359] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2478884680 (19831077440 ns) > initial count (8667399736 ns). Using initial count to start timer. [ 2123.262454][T25765] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2123.276178][T25765] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2123.286632][T29379] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2123.467827][T25765] usb 2-1: Product: syz [ 2123.473111][T25765] usb 2-1: Manufacturer: syz [ 2124.021801][T29385] overlayfs: failed to resolve './file0': -2 [ 2124.277882][T25765] cdc_wdm 2-1:1.0: skipping garbage [ 2124.286059][T25765] cdc_wdm 2-1:1.0: skipping garbage [ 2124.292383][T25765] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2124.401904][T25765] libceph: connect (1)[c::]:6789 error -101 [ 2124.414987][T25765] libceph: mon0 (1)[c::]:6789 connect error [ 2124.426989][T29397] veth0: entered promiscuous mode [ 2124.445451][ T24] usb 2-1: USB disconnect, device number 94 [ 2125.049011][T25765] libceph: connect (1)[c::]:6789 error -101 [ 2125.140075][T29406] veth0: left promiscuous mode [ 2125.196768][T29390] ceph: No mds server is up or the cluster is laggy [ 2125.325131][T25765] libceph: mon0 (1)[c::]:6789 connect error [ 2125.420883][T25765] libceph: connect (1)[c::]:6789 error -101 [ 2125.428319][T25765] libceph: mon0 (1)[c::]:6789 connect error [ 2125.698385][ T30] audit: type=1804 audit(1752017174.453:1741): pid=29425 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.6431" name="/newroot/89/file0" dev="tmpfs" ino=540 res=1 errno=0 [ 2125.699613][T25757] libceph: connect (1)[c::]:6789 error -101 [ 2125.841215][T29428] input: syz0 as /devices/virtual/input/input158 [ 2125.975036][T25757] libceph: mon0 (1)[c::]:6789 connect error [ 2126.267607][T29409] ceph: No mds server is up or the cluster is laggy [ 2126.512030][T29431] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6435'. [ 2126.589001][T29431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6435'. [ 2126.612620][T29435] FAULT_INJECTION: forcing a failure. [ 2126.612620][T29435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2126.791788][T29435] CPU: 1 UID: 0 PID: 29435 Comm: syz.0.6436 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 2126.791815][T29435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2126.791825][T29435] Call Trace: [ 2126.791832][T29435] [ 2126.791839][T29435] dump_stack_lvl+0x16c/0x1f0 [ 2126.791869][T29435] should_fail_ex+0x512/0x640 [ 2126.791896][T29435] _copy_from_user+0x2e/0xd0 [ 2126.791920][T29435] kstrtouint_from_user+0xd6/0x1d0 [ 2126.791939][T29435] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2126.791957][T29435] ? __lock_acquire+0xb8a/0x1c90 [ 2126.791983][T29435] proc_fail_nth_write+0x83/0x250 [ 2126.792005][T29435] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2126.792033][T29435] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2126.792053][T29435] vfs_write+0x2a0/0x1150 [ 2126.792077][T29435] ? __pfx___mutex_lock+0x10/0x10 [ 2126.792101][T29435] ? __pfx_vfs_write+0x10/0x10 [ 2126.792130][T29435] ? __fget_files+0x20e/0x3c0 [ 2126.792161][T29435] ksys_write+0x12a/0x250 [ 2126.792183][T29435] ? __pfx_ksys_write+0x10/0x10 [ 2126.792213][T29435] do_syscall_64+0xcd/0x4c0 [ 2126.792237][T29435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2126.792255][T29435] RIP: 0033:0x7f68ffd8d3df [ 2126.792270][T29435] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 2126.792286][T29435] RSP: 002b:00007f6900c22030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2126.792302][T29435] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f68ffd8d3df [ 2126.792314][T29435] RDX: 0000000000000001 RSI: 00007f6900c220a0 RDI: 0000000000000004 [ 2126.792324][T29435] RBP: 00007f6900c22090 R08: 0000000000000000 R09: 0000000000000000 [ 2126.792335][T29435] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2126.792345][T29435] R13: 0000000000000000 R14: 00007f68fffb5fa0 R15: 00007ffc8ab015e8 [ 2126.792370][T29435] [ 2127.105485][T17089] Bluetooth: hci4: command 0x0406 tx timeout [ 2127.186324][T29431] hsr_slave_1 (unregistering): left promiscuous mode [ 2127.411996][T29446] overlayfs: failed to resolve './file0': -2 [ 2127.581369][ T24] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 2128.435025][T29455] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2128.458473][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2128.468807][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2128.483231][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2128.495183][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2128.515001][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2128.583268][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2128.764717][ T24] usb 5-1: Product: syz [ 2128.773539][ T24] usb 5-1: Manufacturer: syz [ 2128.816691][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 2128.854379][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 2128.859687][ T24] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2128.956995][ T9] libceph: connect (1)[c::]:6789 error -101 [ 2128.967816][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 2128.977336][ T30] audit: type=1800 audit(1752017177.733:1742): pid=29467 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.6447" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 2129.028884][T29471] input: syz1 as /devices/virtual/input/input159 [ 2129.048903][ T9] usb 5-1: USB disconnect, device number 66 [ 2129.670182][T25765] libceph: connect (1)[c::]:6789 error -101 [ 2129.681130][T25765] libceph: mon0 (1)[c::]:6789 connect error [ 2129.760263][T29460] ceph: No mds server is up or the cluster is laggy [ 2129.921779][T25757] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 2130.341724][ T5897] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 2130.492615][T25757] usb 2-1: Using ep0 maxpacket: 32 [ 2130.513541][T29490] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2130.585111][T25757] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 2130.657928][ T5897] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2130.668317][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2130.728556][T25757] usb 2-1: config 0 has no interface number 0 [ 2130.729050][ T5897] usb 4-1: config 0 descriptor?? [ 2130.756709][T25757] usb 2-1: config 0 interface 184 has no altsetting 0 [ 2130.926764][T25757] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2130.952134][T29493] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2130.987516][T25757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2131.001069][T29487] syz_tun: entered allmulticast mode [ 2131.030100][T25757] usb 2-1: Product: syz [ 2131.047279][T25757] usb 2-1: Manufacturer: syz [ 2131.056131][T25757] usb 2-1: SerialNumber: syz [ 2131.080803][T25757] usb 2-1: config 0 descriptor?? [ 2131.125164][T29499] overlayfs: failed to resolve './file1': -2 [ 2131.160759][T25757] smsc75xx v1.0.0 [ 2131.241293][T29485] syz_tun: left allmulticast mode [ 2131.256826][ T5897] ath6kl: Failed to submit usb control message: -71 [ 2131.297436][ T5897] ath6kl: unable to send the bmi data to the device: -71 [ 2131.333310][ T5897] ath6kl: Unable to send get target info: -71 [ 2131.366800][ T5897] ath6kl: Failed to init ath6kl core: -71 [ 2131.383202][ T5897] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2131.428130][ T5897] usb 4-1: USB disconnect, device number 16 [ 2131.776114][T25757] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 2131.813199][T25757] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2131.826707][T29505] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2132.058978][T25757] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 2132.081547][T25757] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 2132.091707][T25757] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 2132.105043][T25757] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 2133.503809][T25765] usb 2-1: USB disconnect, device number 95 [ 2133.510778][T29527] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2133.999490][ T5941] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 2134.178257][T29533] overlayfs: failed to resolve './file1': -2 [ 2134.401923][ T5941] usb 4-1: config 2 has an invalid descriptor of length 45, skipping remainder of the config [ 2134.418105][ T5941] usb 4-1: too many endpoints for config 2 interface 0 altsetting 237: 88, using maximum allowed: 30 [ 2134.449031][ T5941] usb 4-1: config 2 interface 0 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 88 [ 2134.483134][ T5941] usb 4-1: config 2 interface 0 has no altsetting 0 [ 2134.502538][ T5941] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 2134.512790][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2134.520878][ T5941] usb 4-1: Product: syz [ 2134.528431][ T5941] usb 4-1: Manufacturer: syz [ 2134.535548][ T5941] usb 4-1: SerialNumber: syz [ 2134.538022][T29542] netlink: 'syz.1.6473': attribute type 11 has an invalid length. [ 2134.550212][T29542] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6473'. [ 2134.701806][ T5897] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 2134.743693][T25765] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 2134.757663][ T5941] usb 4-1: USB disconnect, device number 17 [ 2134.851420][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 2134.857251][ T5897] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 2134.866380][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2134.879184][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2134.890584][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2134.902263][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2134.913913][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2134.913938][T25765] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2134.932034][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2134.937836][T25765] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2134.944545][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2134.957089][T25765] usb 6-1: config 0 descriptor?? [ 2134.963692][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2134.978447][ T5897] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 2134.989299][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 2134.997919][ T5897] usb 5-1: SerialNumber: syz [ 2135.005419][ T5897] usb 5-1: config 0 descriptor?? [ 2135.014408][ T5897] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input160 [ 2136.446144][T25765] ath6kl: Failed to submit usb control message: -110 [ 2136.478016][T25765] ath6kl: unable to send the bmi data to the device: -110 [ 2136.486146][T25765] ath6kl: Unable to send get target info: -110 [ 2136.500270][T25765] ath6kl: Failed to init ath6kl core: -110 [ 2136.508810][T25765] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 2136.599646][T29537] input: syz1 as /devices/virtual/input/input161 [ 2136.653358][ T5186] bcm5974 5-1:0.0: could not read from device [ 2136.722376][ T5941] usb 6-1: USB disconnect, device number 57 [ 2136.756240][ T5186] bcm5974 5-1:0.0: could not read from device [ 2136.773629][T29554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6477'. [ 2136.778149][ T5897] usb 5-1: USB disconnect, device number 67 [ 2136.794556][ T5186] bcm5974 5-1:0.0: could not read from device [ 2136.796630][T29557] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2137.891921][T29569] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2138.311745][ T5941] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 2138.462860][T29576] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2138.691100][ T5941] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2138.749678][ T30] audit: type=1804 audit(1752017187.503:1743): pid=29581 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.6486" name="/newroot/106/file0" dev="tmpfs" ino=631 res=1 errno=0 [ 2138.777639][ T5941] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2138.816953][ T5941] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2138.837246][ T5941] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2138.876409][ T5941] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2139.004568][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2139.013118][ T5941] usb 6-1: Product: syz [ 2139.021606][ T5941] usb 6-1: Manufacturer: syz [ 2139.045318][ T5941] cdc_wdm 6-1:1.0: skipping garbage [ 2139.050610][ T5941] cdc_wdm 6-1:1.0: skipping garbage [ 2139.097622][ T5941] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2139.682876][T25765] usb 6-1: USB disconnect, device number 58 [ 2140.277409][T29600] input: syz0 as /devices/virtual/input/input162 [ 2140.634672][T29606] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2141.682920][ T5941] libceph: connect (1)[c::]:6789 error -101 [ 2141.694360][ T5941] libceph: mon0 (1)[c::]:6789 connect error [ 2141.837984][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 2141.847708][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 2141.856981][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 2141.863584][ T5941] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 2141.874162][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 2142.039722][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 2142.048411][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 2142.554096][T29632] ceph: No mds server is up or the cluster is laggy [ 2142.580216][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 2142.587207][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 2142.594212][ T24] libceph: connect (1)[c::]:6789 error -101 [ 2142.600273][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 2142.607031][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2142.618667][ T5941] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2142.628442][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2142.651689][ T5941] usb 5-1: config 0 descriptor?? [ 2142.703312][T29638] ceph: No mds server is up or the cluster is laggy [ 2142.894204][ T5941] usbhid 5-1:0.0: can't add hid device: -71 [ 2142.900187][ T5941] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2142.963606][ T5941] usb 5-1: USB disconnect, device number 68 [ 2143.014674][T29656] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2143.323344][T29658] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 2143.326046][ T30] audit: type=1400 audit(1752017191.833:1744): avc: denied { read } for pid=29653 comm="syz.1.6503" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2143.456329][T29662] IPv6: syztnl0: Disabled Multicast RS [ 2143.467233][ T30] audit: type=1400 audit(1752017192.223:1745): avc: denied { connect } for pid=29660 comm="syz.5.6506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2143.521629][ T5941] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 2143.771728][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 2143.818010][T29670] overlayfs: failed to resolve './file1': -2 [ 2143.823050][ T5941] usb 5-1: Using ep0 maxpacket: 16 [ 2143.999629][T29671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6507'. [ 2144.027333][T29671] ipvlan2: entered promiscuous mode [ 2144.070470][ T30] audit: type=1400 audit(1752017192.823:1746): avc: denied { write } for pid=29663 comm="syz.1.6507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2144.114299][ T30] audit: type=1400 audit(1752017192.863:1747): avc: denied { accept } for pid=29663 comm="syz.1.6507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2144.146545][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2144.179055][ T5941] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2144.210379][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2144.298915][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 2144.310916][ T5941] usb 5-1: config 0 descriptor?? [ 2144.332558][ T5941] usb 5-1: can't set config #0, error -71 [ 2144.347271][ T24] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2144.448083][ T30] audit: type=1400 audit(1752017193.203:1748): avc: denied { setattr } for pid=29680 comm="syz.5.6510" name="/" dev="configfs" ino=1158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2144.513959][ T5941] usb 5-1: USB disconnect, device number 69 [ 2144.520607][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2144.532499][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2144.544510][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2144.555223][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2144.568922][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2144.781403][T29687] fuse: Bad value for 'fd' [ 2145.046179][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2145.277967][T29694] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6515'. [ 2145.278280][ T24] usb 4-1: GET_CAPABILITIES returned 0 [ 2145.296234][ T24] usbtmc 4-1:16.0: can't read capabilities [ 2145.351526][T16485] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 2145.351732][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 2145.521692][T16485] usb 2-1: device descriptor read/64, error -32 [ 2145.672112][T29699] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2145.778475][ T24] usb 4-1: USB disconnect, device number 18 [ 2145.791673][T16485] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 2146.111694][T16485] usb 2-1: Using ep0 maxpacket: 16 [ 2146.146744][T16485] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2146.157674][T16485] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2146.169021][T16485] usb 2-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2146.189470][T16485] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2146.250884][T16485] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 2146.301574][T16485] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2146.490177][T16485] usb 2-1: Product: syz [ 2146.500245][T16485] usb 2-1: Manufacturer: syz [ 2146.516749][T16485] usb 2-1: SerialNumber: syz [ 2147.562805][T29712] lo speed is unknown, defaulting to 1000 [ 2147.604107][ T36] Bluetooth: Error in BCSP hdr checksum [ 2147.637570][ T30] audit: type=1400 audit(1752017196.393:1749): avc: denied { override_creds } for pid=29713 comm="syz.4.6521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2148.033132][ T30] audit: type=1400 audit(1752017196.783:1750): avc: denied { lock } for pid=29719 comm="syz.3.6522" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 2148.056437][ C1] vkms_vblank_simulate: vblank timer overrun [ 2148.158901][T29726] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6523'. [ 2148.742565][T16485] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 2148.765075][T16485] usb 2-1: USB disconnect, device number 97 [ 2149.007324][T29737] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2149.238136][T29742] input: syz0 as /devices/virtual/input/input163 [ 2149.641874][T17089] Bluetooth: hci1: command 0x1003 tx timeout [ 2149.651614][T29028] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 2149.681947][T29743] overlayfs: statfs failed on './file0' [ 2150.037587][T29759] lo speed is unknown, defaulting to 1000 [ 2152.295197][T29773] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6537'. [ 2153.929379][ T30] audit: type=1804 audit(1752017202.683:1751): pid=29785 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.6540" name="/newroot/83/file0" dev="tmpfs" ino=482 res=1 errno=0 [ 2154.176716][T29787] FAULT_INJECTION: forcing a failure. [ 2154.176716][T29787] name failslab, interval 1, probability 0, space 0, times 0 [ 2154.241160][T29787] CPU: 1 UID: 0 PID: 29787 Comm: syz.3.6542 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 2154.241188][T29787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2154.241200][T29787] Call Trace: [ 2154.241206][T29787] [ 2154.241214][T29787] dump_stack_lvl+0x16c/0x1f0 [ 2154.241244][T29787] should_fail_ex+0x512/0x640 [ 2154.241268][T29787] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2154.241293][T29787] should_failslab+0xc2/0x120 [ 2154.241319][T29787] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2154.241343][T29787] ? ptlock_alloc+0x1f/0x70 [ 2154.241366][T29787] ptlock_alloc+0x1f/0x70 [ 2154.241385][T29787] pte_alloc_one+0x82/0x3a0 [ 2154.241404][T29787] __pte_alloc+0x6d/0x3c0 [ 2154.241429][T29787] ? __pfx___pte_alloc+0x10/0x10 [ 2154.241454][T29787] ? _raw_spin_unlock+0x28/0x50 [ 2154.241473][T29787] ? __pmd_alloc+0x3fb/0x930 [ 2154.241491][T29787] __handle_mm_fault+0x4358/0x5490 [ 2154.241518][T29787] ? __pfx___handle_mm_fault+0x10/0x10 [ 2154.241542][T29787] ? __pfx_mt_find+0x10/0x10 [ 2154.241584][T29787] ? find_vma+0xbf/0x140 [ 2154.241609][T29787] ? __pfx_find_vma+0x10/0x10 [ 2154.241638][T29787] handle_mm_fault+0x589/0xd10 [ 2154.241659][T29787] ? __pkru_allows_pkey+0x51/0xb0 [ 2154.241685][T29787] do_user_addr_fault+0x7a6/0x1370 [ 2154.241712][T29787] ? rcu_is_watching+0x12/0xc0 [ 2154.241737][T29787] exc_page_fault+0x5c/0xb0 [ 2154.241761][T29787] asm_exc_page_fault+0x26/0x30 [ 2154.241777][T29787] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 2154.241797][T29787] Code: 11 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 4f 11 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 2154.241814][T29787] RSP: 0018:ffffc9000e787a88 EFLAGS: 00050206 [ 2154.241830][T29787] RAX: 0000000000000001 RBX: 0000000000008000 RCX: 0000000000008000 [ 2154.241841][T29787] RDX: 0000000000000000 RSI: ffff888058bf0000 RDI: 00002000000002c0 [ 2154.241852][T29787] RBP: 00002000000002c0 R08: 0000000000000000 R09: ffffed100b17efff [ 2154.241863][T29787] R10: ffff888058bf7fff R11: 0000000000000000 R12: ffff888058bf0000 [ 2154.241874][T29787] R13: 00002000000082c0 R14: 00007ffffffff000 R15: 0000000000000000 [ 2154.241900][T29787] _copy_to_user+0xbb/0xd0 [ 2154.241926][T29787] semctl_main+0xa34/0x2a30 [ 2154.241947][T29787] ? find_held_lock+0x2b/0x80 [ 2154.241972][T29787] ? __pfx_semctl_main+0x10/0x10 [ 2154.242038][T29787] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 2154.242071][T29787] ksys_semctl.constprop.0+0x27a/0x2f0 [ 2154.242092][T29787] ? __fget_files+0x20e/0x3c0 [ 2154.242116][T29787] ? __pfx_ksys_semctl.constprop.0+0x10/0x10 [ 2154.242155][T29787] do_syscall_64+0xcd/0x4c0 [ 2154.242182][T29787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2154.242200][T29787] RIP: 0033:0x7f3fba38e929 [ 2154.242214][T29787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2154.242231][T29787] RSP: 002b:00007f3fbb199038 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 2154.242246][T29787] RAX: ffffffffffffffda RBX: 00007f3fba5b5fa0 RCX: 00007f3fba38e929 [ 2154.242257][T29787] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 2154.242267][T29787] RBP: 00007f3fbb199090 R08: 0000000000000000 R09: 0000000000000000 [ 2154.242278][T29787] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 2154.242288][T29787] R13: 0000000000000000 R14: 00007f3fba5b5fa0 R15: 00007fffdc9267e8 [ 2154.242312][T29787] [ 2154.584823][ C1] vkms_vblank_simulate: vblank timer overrun [ 2154.609039][T29788] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2154.689390][T29790] input: syz0 as /devices/virtual/input/input164 [ 2155.090892][T29794] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2155.984391][ T9] libceph: connect (1)[c::]:6789 error -101 [ 2155.990573][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 2156.191572][T25757] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 2156.384569][ T9] libceph: connect (1)[c::]:6789 error -101 [ 2156.390863][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 2156.454691][ T30] audit: type=1400 audit(1752017205.213:1752): avc: denied { lock } for pid=29819 comm="syz.0.6553" path="socket:[126398]" dev="sockfs" ino=126398 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 2156.561538][T25757] usb 5-1: Using ep0 maxpacket: 16 [ 2156.625694][T29028] Bluetooth: hci3: unexpected event for opcode 0x0c7b [ 2156.872032][T29798] ceph: No mds server is up or the cluster is laggy [ 2156.891531][T16485] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 2156.903250][T25757] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2156.913039][T25757] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2156.926357][ T9] libceph: connect (1)[c::]:6789 error -101 [ 2156.937085][T25757] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2156.947667][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 2156.965240][T25757] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2156.988226][T25757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2157.079000][T25757] usb 5-1: Product: syz [ 2157.113489][T25757] usb 5-1: Manufacturer: syz [ 2157.158504][T25757] usb 5-1: SerialNumber: syz [ 2157.654138][T16485] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2157.666186][T16485] usb 2-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 2157.730852][T16485] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2157.752300][T16485] usb 2-1: config 0 descriptor?? [ 2157.764028][T16485] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 2157.834216][T25757] usb 5-1: 0:2 : does not exist [ 2157.921411][T29834] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2158.657958][T25757] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 2158.723092][T25757] usb 5-1: USB disconnect, device number 70 [ 2159.150676][T16485] pwc: send_video_command error -71 [ 2159.184431][T16485] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2159.236124][T16485] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 2159.290193][T16485] usb 2-1: USB disconnect, device number 98 [ 2159.499585][T29847] FAULT_INJECTION: forcing a failure. [ 2159.499585][T29847] name failslab, interval 1, probability 0, space 0, times 0 [ 2159.500458][T29848] input: syz0 as /devices/virtual/input/input165 [ 2159.512882][T29847] CPU: 0 UID: 0 PID: 29847 Comm: syz.4.6560 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 2159.512910][T29847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2159.512920][T29847] Call Trace: [ 2159.512926][T29847] [ 2159.512932][T29847] dump_stack_lvl+0x16c/0x1f0 [ 2159.512960][T29847] should_fail_ex+0x512/0x640 [ 2159.512980][T29847] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 2159.513003][T29847] should_failslab+0xc2/0x120 [ 2159.513025][T29847] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2159.513043][T29847] ? alloc_mnt_ns+0xd2/0x520 [ 2159.513066][T29847] alloc_mnt_ns+0xd2/0x520 [ 2159.513086][T29847] vfs_open_tree+0x37c/0x910 [ 2159.513106][T29847] ? irqentry_exit+0x3b/0x90 [ 2159.513128][T29847] ? __pfx_vfs_open_tree+0x10/0x10 [ 2159.513157][T29847] __x64_sys_open_tree+0x84/0x130 [ 2159.513181][T29847] do_syscall_64+0xcd/0x4c0 [ 2159.513205][T29847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2159.513222][T29847] RIP: 0033:0x7f08d0f8e929 [ 2159.513236][T29847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2159.513251][T29847] RSP: 002b:00007f08d1e36038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 2159.513267][T29847] RAX: ffffffffffffffda RBX: 00007f08d11b6080 RCX: 00007f08d0f8e929 [ 2159.513277][T29847] RDX: 0000000000081901 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 2159.513287][T29847] RBP: 00007f08d1e36090 R08: 0000000000000000 R09: 0000000000000000 [ 2159.513297][T29847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2159.513306][T29847] R13: 0000000000000000 R14: 00007f08d11b6080 R15: 00007ffef5fac648 [ 2159.513327][T29847] [ 2160.580453][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.720567][T29857] lo speed is unknown, defaulting to 1000 [ 2162.424224][T25757] libceph: connect (1)[c::]:6789 error -101 [ 2162.466480][T25757] libceph: mon0 (1)[c::]:6789 connect error [ 2162.742042][T25765] libceph: connect (1)[c::]:6789 error -101 [ 2162.748064][T25765] libceph: mon0 (1)[c::]:6789 connect error [ 2162.944223][T25757] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 2163.181538][T25757] usb 5-1: Using ep0 maxpacket: 16 [ 2163.198254][T29864] ceph: No mds server is up or the cluster is laggy [ 2163.448421][T25765] libceph: connect (1)[c::]:6789 error -101 [ 2163.469064][T25757] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 21, changing to 8 [ 2163.483447][T25765] libceph: mon0 (1)[c::]:6789 connect error [ 2163.491558][T25757] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25939, setting to 1024 [ 2163.555673][T25757] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2163.624567][T25757] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2163.640800][T25757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2163.668451][T29028] Bluetooth: hci6: unexpected event for opcode 0x2042 [ 2163.791227][T25757] usb 5-1: config 0 descriptor?? [ 2163.796904][T29871] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2164.261782][ T5897] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 2164.280571][T25757] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 2164.325049][T25757] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 2164.361476][T25757] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 2164.447434][ T5897] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2164.514451][ T5897] usb 2-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 2164.550627][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2164.605597][ T5897] usb 2-1: config 0 descriptor?? [ 2164.636627][ T5897] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 2164.669325][T25757] microsoft 0003:045E:07DA.0039: ignoring exceeding usage max [ 2164.756591][T25757] microsoft 0003:045E:07DA.0039: unknown main item tag 0x6 [ 2164.781771][T25757] microsoft 0003:045E:07DA.0039: unknown main item tag 0x4 [ 2164.802202][T25757] microsoft 0003:045E:07DA.0039: unknown main item tag 0x5 [ 2164.809482][T25757] microsoft 0003:045E:07DA.0039: unbalanced collection at end of report description [ 2164.841716][T25757] microsoft 0003:045E:07DA.0039: parse failed [ 2164.848219][T25757] microsoft 0003:045E:07DA.0039: probe with driver microsoft failed with error -22 [ 2165.585112][T29900] lo speed is unknown, defaulting to 1000 [ 2166.213418][T29907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2080 sclass=netlink_route_socket pid=29907 comm=syz.0.6575 [ 2166.956083][T29916] input: syz0 as /devices/virtual/input/input167 [ 2167.002850][ T973] usb 5-1: USB disconnect, device number 71 [ 2167.048096][ T5897] pwc: send_video_command error -71 [ 2167.056841][ T5897] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2167.127430][ T5897] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 2167.175836][ T5897] usb 2-1: USB disconnect, device number 99 [ 2167.670296][T29928] netlink: 'syz.1.6581': attribute type 1 has an invalid length. [ 2167.705815][T29928] bond1: entered promiscuous mode [ 2167.712304][T29928] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2167.723739][T29028] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 2167.732927][T29028] Bluetooth: hci6: Injecting HCI hardware error event [ 2167.741685][T29028] Bluetooth: hci6: hardware error 0x00 [ 2167.828978][T29928] bond1: (slave veth3): making interface the new active one [ 2167.855866][T29928] veth3: entered promiscuous mode [ 2167.869795][T29928] bond1: (slave veth3): Enslaving as an active interface with an up link [ 2168.980678][T29944] hub 9-0:1.0: USB hub found [ 2168.986490][T29944] hub 9-0:1.0: 1 port detected [ 2169.801820][T29028] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 2171.131478][T29981] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2171.373522][T29978] input: syz0 as /devices/virtual/input/input169 [ 2172.366865][T29996] hub 9-0:1.0: USB hub found [ 2172.373723][T29996] hub 9-0:1.0: 1 port detected [ 2172.380460][T29996] ubi: mtd0 is already attached to ubi31 [ 2172.451197][T30004] tty tty1: ldisc open failed (-12), clearing slot 0 [ 2172.645855][T30006] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2173.268973][T30016] FAULT_INJECTION: forcing a failure. [ 2173.268973][T30016] name failslab, interval 1, probability 0, space 0, times 0 [ 2173.282800][T30016] CPU: 0 UID: 0 PID: 30016 Comm: syz.3.6605 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 2173.282824][T30016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2173.282835][T30016] Call Trace: [ 2173.282842][T30016] [ 2173.282849][T30016] dump_stack_lvl+0x16c/0x1f0 [ 2173.282878][T30016] should_fail_ex+0x512/0x640 [ 2173.282902][T30016] ? fs_reclaim_acquire+0xae/0x150 [ 2173.282922][T30016] ? tomoyo_encode2+0x100/0x3e0 [ 2173.282946][T30016] should_failslab+0xc2/0x120 [ 2173.282971][T30016] __kmalloc_noprof+0xd2/0x510 [ 2173.282994][T30016] ? d_absolute_path+0x136/0x1a0 [ 2173.283018][T30016] tomoyo_encode2+0x100/0x3e0 [ 2173.283045][T30016] tomoyo_encode+0x29/0x50 [ 2173.283068][T30016] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2173.283101][T30016] tomoyo_path_number_perm+0x245/0x580 [ 2173.283120][T30016] ? tomoyo_path_number_perm+0x237/0x580 [ 2173.283142][T30016] ? finish_task_switch.isra.0+0x1d4/0xc10 [ 2173.283166][T30016] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2173.283186][T30016] ? rcu_is_watching+0x12/0xc0 [ 2173.283209][T30016] ? lockdep_hardirqs_on+0x7c/0x110 [ 2173.283257][T30016] ? find_held_lock+0x2b/0x80 [ 2173.283278][T30016] ? hook_file_ioctl_common+0x145/0x410 [ 2173.283302][T30016] ? __fget_files+0x20e/0x3c0 [ 2173.283331][T30016] security_file_ioctl+0x9b/0x240 [ 2173.283356][T30016] __x64_sys_ioctl+0xb7/0x210 [ 2173.283383][T30016] do_syscall_64+0xcd/0x4c0 [ 2173.283410][T30016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2173.283428][T30016] RIP: 0033:0x7f3fba38e929 [ 2173.283444][T30016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2173.283462][T30016] RSP: 002b:00007f3fbb157038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2173.283480][T30016] RAX: ffffffffffffffda RBX: 00007f3fba5b6160 RCX: 00007f3fba38e929 [ 2173.283492][T30016] RDX: 0000200000000380 RSI: 0000000000004601 RDI: 0000000000000005 [ 2173.283503][T30016] RBP: 00007f3fbb157090 R08: 0000000000000000 R09: 0000000000000000 [ 2173.283515][T30016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2173.283525][T30016] R13: 0000000000000000 R14: 00007f3fba5b6160 R15: 00007fffdc9267e8 [ 2173.283551][T30016] [ 2173.283625][T30016] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2176.222755][T30051] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2176.329602][T30052] input: syz0 as /devices/virtual/input/input170 [ 2176.667762][ T30] audit: type=1400 audit(1752017225.423:1753): avc: denied { read } for pid=30055 comm="syz.4.6617" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2176.692124][ C1] vkms_vblank_simulate: vblank timer overrun [ 2176.849976][ T30] audit: type=1400 audit(1752017225.423:1754): avc: denied { open } for pid=30055 comm="syz.4.6617" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2176.874791][ C1] vkms_vblank_simulate: vblank timer overrun [ 2176.908007][T30060] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6620'. [ 2176.929381][T30060] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6620'. [ 2176.940588][ T30] audit: type=1400 audit(1752017225.463:1755): avc: denied { setattr } for pid=30055 comm="syz.4.6617" name="NETLINK" dev="sockfs" ino=127609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2177.541002][ T30] audit: type=1400 audit(1752017225.663:1756): avc: denied { bind } for pid=30059 comm="syz.0.6620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2177.608108][ T30] audit: type=1326 audit(1752017226.343:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30065 comm="syz.0.6621" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f68ffd8e929 code=0x0 [ 2177.840984][ T30] audit: type=1400 audit(1752017226.593:1758): avc: denied { append } for pid=30065 comm="syz.0.6621" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 2177.933504][ T30] audit: type=1400 audit(1752017226.593:1759): avc: denied { map } for pid=30065 comm="syz.0.6621" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 2177.957869][ T30] audit: type=1400 audit(1752017226.593:1760): avc: denied { write execute } for pid=30065 comm="syz.0.6621" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 2178.083383][T30075] IPVS: Error connecting to the multicast addr [ 2178.220391][T30082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2178.341291][T25757] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 2178.631621][T25757] usb 5-1: Using ep0 maxpacket: 32 [ 2178.773537][T25757] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2178.821643][T25757] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2178.840844][T25757] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2178.861870][T25757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2178.966727][T25757] usb 5-1: config 0 descriptor?? [ 2179.211755][ T5897] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 2179.427685][T25757] savu 0003:1E7D:2D5A.003A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 2179.482200][ T5897] usb 6-1: Using ep0 maxpacket: 16 [ 2179.494908][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 21, changing to 8 [ 2179.517559][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25939, setting to 1024 [ 2179.532134][ T5897] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2179.549723][ T5897] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2179.764091][T30105] syz.0.6632: attempt to access beyond end of device [ 2179.764091][T30105] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2179.777924][T30105] (syz.0.6632,30105,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 2179.786164][T30105] (syz.0.6632,30105,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 2179.794094][T30105] (syz.0.6632,30105,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 2179.803578][T30105] (syz.0.6632,30105,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 2180.131538][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2180.143722][ T5897] usb 6-1: config 0 descriptor?? [ 2180.149360][T30093] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2180.158924][T30102] input: syz0 as /devices/virtual/input/input171 [ 2181.602762][T25765] usb 5-1: reset high-speed USB device number 72 using dummy_hcd [ 2182.362496][ T30] audit: type=1400 audit(1752017228.973:1761): avc: denied { setopt } for pid=30077 comm="syz.4.6624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2182.629733][ T5897] usbhid 6-1:0.0: can't add hid device: -71 [ 2182.673681][ T5897] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2182.779824][ T5897] usb 6-1: USB disconnect, device number 59 [ 2184.294127][T25757] usb 5-1: USB disconnect, device number 72 [ 2184.940416][T30125] FAULT_INJECTION: forcing a failure. [ 2184.940416][T30125] name failslab, interval 1, probability 0, space 0, times 0 [ 2185.107363][T30125] CPU: 1 UID: 0 PID: 30125 Comm: syz.3.6636 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 2185.107389][T30125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2185.107400][T30125] Call Trace: [ 2185.107406][T30125] [ 2185.107413][T30125] dump_stack_lvl+0x16c/0x1f0 [ 2185.107442][T30125] should_fail_ex+0x512/0x640 [ 2185.107463][T30125] ? fs_reclaim_acquire+0xae/0x150 [ 2185.107482][T30125] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2185.107506][T30125] should_failslab+0xc2/0x120 [ 2185.107529][T30125] __kmalloc_noprof+0xd2/0x510 [ 2185.107557][T30125] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2185.107582][T30125] ? tomoyo_profile+0x47/0x60 [ 2185.107610][T30125] tomoyo_path_number_perm+0x245/0x580 [ 2185.107629][T30125] ? tomoyo_path_number_perm+0x237/0x580 [ 2185.107648][T30125] ? finish_task_switch.isra.0+0x1d4/0xc10 [ 2185.107672][T30125] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2185.107690][T30125] ? rcu_is_watching+0x12/0xc0 [ 2185.107712][T30125] ? lockdep_hardirqs_on+0x7c/0x110 [ 2185.107758][T30125] ? find_held_lock+0x2b/0x80 [ 2185.107778][T30125] ? hook_file_ioctl_common+0x145/0x410 [ 2185.107800][T30125] ? __fget_files+0x20e/0x3c0 [ 2185.107827][T30125] security_file_ioctl+0x9b/0x240 [ 2185.107851][T30125] __x64_sys_ioctl+0xb7/0x210 [ 2185.107872][T30125] do_syscall_64+0xcd/0x4c0 [ 2185.107896][T30125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2185.107913][T30125] RIP: 0033:0x7f3fba38e929 [ 2185.107927][T30125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2185.107943][T30125] RSP: 002b:00007f3fbb178038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2185.107959][T30125] RAX: ffffffffffffffda RBX: 00007f3fba5b6080 RCX: 00007f3fba38e929 [ 2185.107971][T30125] RDX: 0000200000001300 RSI: 0000000000008924 RDI: 000000000000000a [ 2185.107982][T30125] RBP: 00007f3fbb178090 R08: 0000000000000000 R09: 0000000000000000 [ 2185.107992][T30125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2185.108002][T30125] R13: 0000000000000000 R14: 00007f3fba5b6080 R15: 00007fffdc9267e8 [ 2185.108025][T30125] [ 2185.108140][T30125] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2185.494127][T30123] bridge0: port 2(bridge_slave_1) entered disabled state [ 2185.501666][T30123] bridge0: port 1(bridge_slave_0) entered disabled state [ 2185.869745][T30123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2185.884682][T30123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2185.932889][T30123] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2185.943719][T30123] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2185.953337][T30123] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2185.964746][T30123] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2185.999353][T30131] vlan0: entered promiscuous mode [ 2186.531514][T30146] syz.4.6644: attempt to access beyond end of device [ 2186.531514][T30146] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2186.544917][T30146] (syz.4.6644,30146,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 2186.553442][T30146] (syz.4.6644,30146,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 2186.560859][T30146] (syz.4.6644,30146,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 2186.569611][T30146] (syz.4.6644,30146,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 2187.285113][T30156] input: syz0 as /devices/virtual/input/input172 [ 2187.471024][ T973] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 2188.427598][ T973] usb 5-1: Using ep0 maxpacket: 16 [ 2188.472941][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2188.484562][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2188.527334][ T973] usb 5-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 2188.541611][ T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2188.577849][ T973] usb 5-1: config 0 descriptor?? [ 2189.102992][ T973] waltop 0003:172F:0034.003B: unbalanced collection at end of report description [ 2189.116162][ T973] waltop 0003:172F:0034.003B: probe with driver waltop failed with error -22 [ 2191.769236][ T5905] usb 5-1: USB disconnect, device number 73 [ 2191.966928][T30194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6658'. [ 2191.991664][T30194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6658'. [ 2192.072042][T30195] 9pnet_virtio: no channels available for device syz [ 2192.375454][T29028] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 2193.345037][T30215] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2194.086172][T30222] tmpfs: Bad value for 'mpol' [ 2194.735807][T30237] lo speed is unknown, defaulting to 1000 [ 2196.261187][ T24] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 2196.627039][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2196.771095][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2196.831524][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2196.908412][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2197.146159][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2197.161618][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2197.170470][ T24] usb 5-1: Product: syz [ 2197.355135][T30268] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2197.873072][ T24] usb 5-1: Manufacturer: syz [ 2197.925941][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 2197.936750][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 2197.949412][ T24] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2198.315974][ T24] usb 5-1: USB disconnect, device number 74 [ 2198.429690][T30280] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2199.811490][T30292] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2200.845738][T30311] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 2200.862360][T30311] batman_adv: batadv0: Adding interface: gretap1 [ 2200.868729][T30311] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2200.894811][T30311] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 2201.211570][ T973] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 2201.597719][ T973] usb 5-1: config 2 has an invalid interface number: 164 but max is 0 [ 2201.630599][ T973] usb 5-1: config 2 has an invalid interface number: 34 but max is 0 [ 2201.645583][ T973] usb 5-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 2201.656771][ T973] usb 5-1: config 2 has no interface number 0 [ 2201.664087][ T973] usb 5-1: config 2 has no interface number 1 [ 2201.683562][ T973] usb 5-1: config 2 interface 164 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2201.698945][ T973] usb 5-1: config 2 interface 164 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 2201.714855][ T973] usb 5-1: too many endpoints for config 2 interface 34 altsetting 155: 97, using maximum allowed: 30 [ 2201.729787][ T973] usb 5-1: config 2 interface 34 altsetting 155 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 2201.850756][ T973] usb 5-1: config 2 interface 34 has no altsetting 0 [ 2202.449289][ T973] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=d2.54 [ 2202.480733][ T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2202.505038][ T973] usb 5-1: Product: syz [ 2202.522591][ T973] usb 5-1: Manufacturer: syz [ 2202.655815][ T973] usb 5-1: SerialNumber: syz [ 2202.702372][ T973] option 5-1:2.164: GSM modem (1-port) converter detected [ 2202.832305][ T5941] IPVS: starting estimator thread 0... [ 2202.921714][T30326] IPVS: using max 40 ests per chain, 96000 per kthread [ 2203.250104][T30307] kAFS: Can only specify source 'none' with -o dyn [ 2203.269948][T30307] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=30307 comm=syz.4.6689 [ 2203.319477][ T973] usb 5-1: USB disconnect, device number 75 [ 2203.345757][ T973] option 5-1:2.164: device disconnected [ 2204.227208][T30337] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2204.669474][ T5941] libceph: connect (1)[c::]:6789 error -101 [ 2204.677512][ T5941] libceph: mon0 (1)[c::]:6789 connect error [ 2204.708333][ T5941] libceph: connect (1)[c::]:6789 error -101 [ 2204.718366][T30353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6701'. [ 2205.096254][ T5941] libceph: mon0 (1)[c::]:6789 connect error [ 2205.104283][ T24] libceph: connect (1)[c::]:6789 error -101 [ 2205.117028][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 2205.135054][T30359] IPVS: set_ctl: invalid protocol: 179 224.0.0.1:20002 [ 2205.163194][T30343] ceph: No mds server is up or the cluster is laggy [ 2205.404368][ T24] libceph: connect (1)[c::]:6789 error -101 [ 2206.106680][T30347] ceph: No mds server is up or the cluster is laggy [ 2206.114081][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 2206.429543][ T30] audit: type=1400 audit(1752017255.183:1762): avc: denied { read } for pid=30374 comm="syz.0.6708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2206.810643][ T24] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 2206.986661][ T24] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 2207.017281][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2207.085252][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2207.112788][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2207.134224][ T24] usb 6-1: config 0 descriptor?? [ 2207.336773][ T30] audit: type=1400 audit(1752017256.083:1763): avc: denied { getopt } for pid=30383 comm="syz.0.6711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2207.537932][T30389] netlink: 'syz.0.6711': attribute type 1 has an invalid length. [ 2207.650330][T30389] netlink: 208 bytes leftover after parsing attributes in process `syz.0.6711'. [ 2207.717089][T30394] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 2207.881993][ T5941] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 2208.083300][ T5941] usb 4-1: config 2 has an invalid descriptor of length 146, skipping remainder of the config [ 2208.126130][ T24] usb 6-1: string descriptor 0 read error: -71 [ 2208.138025][ T5941] usb 4-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2208.183384][ T24] usb 6-1: USB disconnect, device number 60 [ 2208.211686][ T5941] usb 4-1: config 2 interface 0 has no altsetting 0 [ 2208.222259][ T5941] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 2208.242657][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2208.374869][ T5941] usb 4-1: Product: syz [ 2208.411281][ T5941] usb 4-1: Manufacturer: syz [ 2208.958958][ T5941] usb 4-1: SerialNumber: syz [ 2209.395542][T30405] input: syz0 as /devices/virtual/input/input174 [ 2209.679812][ T5941] ims_pcu 4-1:2.0: Missing CDC union descriptor [ 2209.687795][ T5941] ims_pcu 4-1:2.0: probe with driver ims_pcu failed with error -22 [ 2209.706297][ T5941] usb 4-1: USB disconnect, device number 19 [ 2209.889759][ T30] audit: type=1400 audit(1752017258.643:1764): avc: denied { relabelfrom } for pid=30406 comm="syz.5.6717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 2210.006667][ T30] audit: type=1400 audit(1752017258.643:1765): avc: denied { relabelto } for pid=30406 comm="syz.5.6717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 2211.298892][T30420] lo speed is unknown, defaulting to 1000 [ 2211.444105][ T30] audit: type=1400 audit(1752017259.883:1766): avc: denied { write } for pid=30411 comm="syz.4.6719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2211.811620][ T5941] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 2212.001496][ T5941] usb 2-1: Using ep0 maxpacket: 8 [ 2212.022544][T30430] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2212.052380][ T5941] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2212.072524][ T5941] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 2212.257050][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2212.322980][ T5941] usb 2-1: config 0 descriptor?? [ 2212.438859][ T5941] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 2213.017354][T30442] FAULT_INJECTION: forcing a failure. [ 2213.017354][T30442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2213.031111][T30442] CPU: 0 UID: 0 PID: 30442 Comm: syz.5.6725 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 2213.031136][T30442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2213.031147][T30442] Call Trace: [ 2213.031153][T30442] [ 2213.031159][T30442] dump_stack_lvl+0x16c/0x1f0 [ 2213.031189][T30442] should_fail_ex+0x512/0x640 [ 2213.031216][T30442] _copy_from_iter+0x29f/0x16f0 [ 2213.031244][T30442] ? __alloc_skb+0x200/0x380 [ 2213.031267][T30442] ? __pfx__copy_from_iter+0x10/0x10 [ 2213.031293][T30442] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2213.031330][T30442] netlink_sendmsg+0x829/0xdd0 [ 2213.031351][T30442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2213.031372][T30442] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 2213.031397][T30442] ____sys_sendmsg+0xa95/0xc70 [ 2213.031415][T30442] ? copy_msghdr_from_user+0x10a/0x160 [ 2213.031438][T30442] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2213.031459][T30442] ? __lock_acquire+0xb8a/0x1c90 [ 2213.031482][T30442] ___sys_sendmsg+0x134/0x1d0 [ 2213.031508][T30442] ? __pfx____sys_sendmsg+0x10/0x10 [ 2213.031529][T30442] ? __lock_acquire+0x622/0x1c90 [ 2213.031577][T30442] __sys_sendmsg+0x16d/0x220 [ 2213.031601][T30442] ? __pfx___sys_sendmsg+0x10/0x10 [ 2213.031640][T30442] do_syscall_64+0xcd/0x4c0 [ 2213.031667][T30442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2213.031686][T30442] RIP: 0033:0x7f9c3758e929 [ 2213.031700][T30442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2213.031718][T30442] RSP: 002b:00007f9c3842a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2213.031735][T30442] RAX: ffffffffffffffda RBX: 00007f9c377b6160 RCX: 00007f9c3758e929 [ 2213.031746][T30442] RDX: 0000000000000008 RSI: 0000200000000400 RDI: 0000000000000006 [ 2213.031757][T30442] RBP: 00007f9c3842a090 R08: 0000000000000000 R09: 0000000000000000 [ 2213.031768][T30442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2213.031779][T30442] R13: 0000000000000000 R14: 00007f9c377b6160 R15: 00007ffcbfc93a08 [ 2213.031810][T30442] [ 2213.472310][ T5941] gspca_vc032x: reg_w err -71 [ 2213.477072][ T5941] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 2213.498519][ T5941] usb 2-1: USB disconnect, device number 100 [ 2214.056763][ T30] audit: type=1400 audit(1752017262.813:1767): avc: denied { getopt } for pid=30453 comm="syz.1.6730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2214.080133][ T30] audit: type=1400 audit(1752017262.833:1768): avc: denied { ioctl } for pid=30453 comm="syz.1.6730" path="socket:[128947]" dev="sockfs" ino=128947 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2214.174362][T30455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6730'. [ 2215.025154][T30459] netlink: 'syz.1.6732': attribute type 11 has an invalid length. [ 2215.033633][T30459] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6732'. [ 2215.059958][ T30] audit: type=1400 audit(1752017263.813:1769): avc: denied { setopt } for pid=30456 comm="syz.0.6731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 2215.659777][ T30] audit: type=1400 audit(1752017264.413:1770): avc: denied { load_policy } for pid=30470 comm="syz.1.6737" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 2215.698207][T30471] SELinux: failed to load policy [ 2215.752840][T30471] overlayfs: failed to resolve './file0': -2 [ 2215.765359][T30471] overlayfs: failed to resolve './file1': -2 [ 2215.954419][T30478] FAULT_INJECTION: forcing a failure. [ 2215.954419][T30478] name failslab, interval 1, probability 0, space 0, times 0 [ 2215.967664][T30478] CPU: 0 UID: 0 PID: 30478 Comm: syz.4.6738 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 2215.967689][T30478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2215.967699][T30478] Call Trace: [ 2215.967706][T30478] [ 2215.967714][T30478] dump_stack_lvl+0x16c/0x1f0 [ 2215.967744][T30478] should_fail_ex+0x512/0x640 [ 2215.967774][T30478] ? fs_reclaim_acquire+0xae/0x150 [ 2215.967795][T30478] ? tomoyo_encode2+0x100/0x3e0 [ 2215.967818][T30478] should_failslab+0xc2/0x120 [ 2215.967844][T30478] __kmalloc_noprof+0xd2/0x510 [ 2215.967873][T30478] tomoyo_encode2+0x100/0x3e0 [ 2215.967901][T30478] tomoyo_encode+0x29/0x50 [ 2215.967924][T30478] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2215.967951][T30478] ? tomoyo_profile+0x47/0x60 [ 2215.967981][T30478] tomoyo_path_number_perm+0x245/0x580 [ 2215.968001][T30478] ? tomoyo_path_number_perm+0x237/0x580 [ 2215.968022][T30478] ? finish_task_switch.isra.0+0x1d4/0xc10 [ 2215.968047][T30478] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2215.968068][T30478] ? rcu_is_watching+0x12/0xc0 [ 2215.968091][T30478] ? lockdep_hardirqs_on+0x7c/0x110 [ 2215.968139][T30478] ? find_held_lock+0x2b/0x80 [ 2215.968161][T30478] ? hook_file_ioctl_common+0x145/0x410 [ 2215.968184][T30478] ? __fget_files+0x20e/0x3c0 [ 2215.968213][T30478] security_file_ioctl+0x9b/0x240 [ 2215.968239][T30478] __x64_sys_ioctl+0xb7/0x210 [ 2215.968262][T30478] do_syscall_64+0xcd/0x4c0 [ 2215.968288][T30478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2215.968306][T30478] RIP: 0033:0x7f08d0f8e929 [ 2215.968320][T30478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2215.968338][T30478] RSP: 002b:00007f08d1e15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2215.968356][T30478] RAX: ffffffffffffffda RBX: 00007f08d11b6160 RCX: 00007f08d0f8e929 [ 2215.968368][T30478] RDX: 0000200000000640 RSI: 00000000c048aec8 RDI: 000000000000000b [ 2215.968379][T30478] RBP: 00007f08d1e15090 R08: 0000000000000000 R09: 0000000000000000 [ 2215.968390][T30478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2215.968401][T30478] R13: 0000000000000000 R14: 00007f08d11b6160 R15: 00007ffef5fac648 [ 2215.968426][T30478] [ 2215.968491][T30478] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2216.445703][T30489] netlink: 'syz.3.6743': attribute type 33 has an invalid length. [ 2216.622709][T30492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6743'. [ 2216.853226][T30489] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6743'. [ 2217.706907][T30504] netlink: 'syz.1.6746': attribute type 11 has an invalid length. [ 2217.736074][T30504] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6746'. [ 2218.336527][T30515] tipc: Started in network mode [ 2218.345441][T30510] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2218.371540][T30515] tipc: Node identity e6ec38a001ad, cluster identity 4711 [ 2218.375068][ T30] audit: type=1400 audit(1752017267.123:1771): avc: denied { create } for pid=30509 comm="syz.5.6749" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 2218.551532][ T5941] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 2218.559339][ T30] audit: type=1400 audit(1752017267.123:1772): avc: denied { link } for pid=30509 comm="syz.5.6749" name="file1" dev="ramfs" ino=130119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 2218.582280][ T30] audit: type=1400 audit(1752017267.123:1773): avc: denied { rename } for pid=30509 comm="syz.5.6749" name="file1" dev="overlay" ino=130119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 2218.587624][T30515] tipc: Enabled bearer , priority 0 [ 2218.605794][ T30] audit: type=1400 audit(1752017267.123:1774): avc: denied { unlink } for pid=30509 comm="syz.5.6749" name="file0" dev="overlay" ino=130119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 2218.616765][T30517] syzkaller0: entered promiscuous mode [ 2218.652713][T30517] syzkaller0: entered allmulticast mode [ 2218.811689][ T30] audit: type=1400 audit(1752017267.123:1775): avc: denied { setattr } for pid=30509 comm="syz.5.6749" name="#6f" dev="tmpfs" ino=2450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 2218.984856][T30515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6750'. [ 2218.984856][ T30] audit: type=1400 audit(1752017267.743:1776): avc: denied { watch watch_reads } for pid=30514 comm="syz.0.6750" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 2219.339146][T30514] tipc: Resetting bearer [ 2219.734880][T25765] tipc: Node number set to 3879811232 [ 2219.772323][T30514] tipc: Disabling bearer [ 2219.791594][T30524] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2220.734136][T30536] netlink: 'syz.3.6755': attribute type 3 has an invalid length. [ 2221.769863][T30557] input: syz0 as /devices/virtual/input/input175 [ 2221.888078][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.913899][T30566] netlink: 348 bytes leftover after parsing attributes in process `syz.1.6765'. [ 2223.046837][T30573] tmpfs: Unknown parameter 'eDÞR°¿t°6' [ 2223.521511][T25765] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 2223.682952][T25765] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2223.697450][T25765] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2223.716589][T25765] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2223.734239][T25765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2223.744997][T25765] usb 2-1: Product: syz [ 2223.749257][T25765] usb 2-1: Manufacturer: syz [ 2223.754447][T25765] usb 2-1: SerialNumber: syz [ 2224.488979][T30592] blktrace: Concurrent blktraces are not allowed on sg0 [ 2224.506797][ T30] audit: type=1400 audit(1752017273.243:1777): avc: denied { append } for pid=30590 comm="syz.3.6773" name="sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2224.522572][T30592] lo speed is unknown, defaulting to 1000 [ 2225.632331][T30606] netlink: 'syz.0.6776': attribute type 11 has an invalid length. [ 2225.647372][T30606] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6776'. [ 2225.751508][ T973] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 2226.523915][T25765] usb 2-1: USB disconnect, device number 101 [ 2226.686645][ T973] usb 5-1: Using ep0 maxpacket: 16 [ 2226.697382][ T973] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2226.706996][ T973] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2226.717666][ T973] usb 5-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2226.732353][ T973] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2226.760168][ T973] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 2226.770163][ T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2226.793377][ T973] usb 5-1: Product: syz [ 2226.797596][ T973] usb 5-1: Manufacturer: syz [ 2226.813433][ T973] usb 5-1: SerialNumber: syz [ 2227.669333][T30625] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2228.030612][T25757] libceph: connect (1)[c::]:6789 error -101 [ 2228.037028][T25757] libceph: mon0 (1)[c::]:6789 connect error [ 2228.555768][T25757] libceph: connect (1)[c::]:6789 error -101 [ 2228.562889][T25757] libceph: mon0 (1)[c::]:6789 connect error [ 2228.815799][T30634] ceph: No mds server is up or the cluster is laggy [ 2229.225511][T30649] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 2229.232058][T30649] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2229.248203][T30649] vhci_hcd vhci_hcd.0: Device attached [ 2229.481398][T14306] usb 33-1: new high-speed USB device number 4 using vhci_hcd [ 2229.559165][T30656] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6791'. [ 2230.268315][T25757] IPVS: starting estimator thread 0... [ 2230.405662][ T973] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 2230.413986][T30664] IPVS: using max 36 ests per chain, 86400 per kthread [ 2230.440504][ T973] usb 5-1: USB disconnect, device number 76 [ 2230.547496][T30670] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6796'. [ 2230.904132][ T30] audit: type=1400 audit(1752017279.613:1778): avc: denied { ioctl } for pid=30671 comm="syz.3.6797" path="pid:[4026532800]" dev="nsfs" ino=4026532800 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2230.928912][ C0] vkms_vblank_simulate: vblank timer overrun [ 2232.143186][T25757] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 2232.181894][T30652] vhci_hcd: connection reset by peer [ 2232.187776][ T7463] vhci_hcd: stop threads [ 2232.192823][ T7463] vhci_hcd: release socket [ 2232.197348][ T7463] vhci_hcd: disconnect device [ 2232.313541][T25757] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2232.335359][T25757] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2232.466460][T25757] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2232.500933][T25757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2232.525082][T25757] usb 5-1: SerialNumber: syz [ 2232.565592][T30695] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6803'. [ 2232.777326][T30665] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 2232.786307][T29028] Bluetooth: Frame is too long (len 16, expected len 4) [ 2232.789849][T25757] usb 5-1: 0:2 : does not exist [ 2232.808597][T25757] usb 5-1: USB disconnect, device number 77 [ 2233.411536][T30665] usb 2-1: Using ep0 maxpacket: 16 [ 2233.437993][T30665] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2233.540782][T30665] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2233.553851][T30665] usb 2-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2233.601992][T30665] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2233.687925][T30665] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 2233.700389][T30665] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2233.713951][T30665] usb 2-1: Product: syz [ 2233.718124][T30665] usb 2-1: Manufacturer: syz [ 2233.726866][T30665] usb 2-1: SerialNumber: syz [ 2233.901499][ T5905] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 2234.654265][ T5905] usb 4-1: config 8 has an invalid interface number: 22 but max is 0 [ 2234.671582][T14306] vhci_hcd: vhci_device speed not set [ 2234.680563][ T5905] usb 4-1: config 8 has no interface number 0 [ 2234.700295][ T5905] usb 4-1: config 8 interface 22 has no altsetting 0 [ 2234.721177][ T5905] usb 4-1: New USB device found, idVendor=057c, idProduct=8403, bcdDevice=42.7d [ 2234.730618][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2234.751551][ T5905] usb 4-1: Product: syz [ 2234.760168][ T5905] usb 4-1: Manufacturer: syz [ 2234.796699][ T5905] usb 4-1: SerialNumber: syz [ 2235.073365][T30702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2235.110866][T30702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2235.714356][T30665] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 2235.808563][ T5905] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 2235.817547][T30665] usb 2-1: USB disconnect, device number 102 [ 2235.819683][ T5905] usb 4-1: USB disconnect, device number 21 [ 2237.280325][T30744] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2239.281525][ T30] audit: type=1400 audit(1752017286.643:1779): avc: denied { mounton } for pid=30746 comm="syz.1.6820" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 2240.783871][T30783] FAULT_INJECTION: forcing a failure. [ 2240.783871][T30783] name failslab, interval 1, probability 0, space 0, times 0 [ 2240.797468][T30783] CPU: 1 UID: 0 PID: 30783 Comm: syz.3.6828 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 2240.797492][T30783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2240.797503][T30783] Call Trace: [ 2240.797511][T30783] [ 2240.797518][T30783] dump_stack_lvl+0x16c/0x1f0 [ 2240.797547][T30783] should_fail_ex+0x512/0x640 [ 2240.797569][T30783] ? __kmalloc_noprof+0xbf/0x510 [ 2240.797598][T30783] ? kernfs_fop_write_iter+0x237/0x510 [ 2240.797617][T30783] should_failslab+0xc2/0x120 [ 2240.797643][T30783] __kmalloc_noprof+0xd2/0x510 [ 2240.797672][T30783] kernfs_fop_write_iter+0x237/0x510 [ 2240.797696][T30783] vfs_write+0x6c4/0x1150 [ 2240.797719][T30783] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 2240.797741][T30783] ? __pfx___mutex_lock+0x10/0x10 [ 2240.797766][T30783] ? __pfx_vfs_write+0x10/0x10 [ 2240.797807][T30783] ksys_write+0x12a/0x250 [ 2240.797834][T30783] ? __pfx_ksys_write+0x10/0x10 [ 2240.797864][T30783] do_syscall_64+0xcd/0x4c0 [ 2240.797892][T30783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2240.797910][T30783] RIP: 0033:0x7f3fba38e929 [ 2240.797925][T30783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2240.797942][T30783] RSP: 002b:00007f3fbb157038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2240.797959][T30783] RAX: ffffffffffffffda RBX: 00007f3fba5b6160 RCX: 00007f3fba38e929 [ 2240.797971][T30783] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000003 [ 2240.797982][T30783] RBP: 00007f3fbb157090 R08: 0000000000000000 R09: 0000000000000000 [ 2240.797994][T30783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2240.798005][T30783] R13: 0000000000000000 R14: 00007f3fba5b6160 R15: 00007fffdc9267e8 [ 2240.798030][T30783] [ 2241.051499][ T9] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 2241.212798][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 2241.222786][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2241.242824][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2241.256453][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 2241.266540][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2241.283711][ T9] usb 2-1: config 0 descriptor?? [ 2241.462343][T30787] netlink: 'syz.0.6831': attribute type 1 has an invalid length. [ 2241.490274][T30787] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2241.524120][T30790] loop4: detected capacity change from 0 to 7 [ 2241.582574][T30787] vlan0: entered allmulticast mode [ 2241.587817][T30787] geneve1: entered allmulticast mode [ 2241.599323][T30787] bond1: (slave vlan0): making interface the new active one [ 2241.644230][T30790] Dev loop4: unable to read RDB block 7 [ 2241.655046][T30787] bond1: (slave vlan0): Enslaving as an active interface with an up link [ 2241.678436][T30790] loop4: AHDI p1 [ 2241.698355][T30790] loop4: partition table partially beyond EOD, truncated [ 2241.769716][ T9] hid-picolcd 0003:04D8:F002.003C: unknown main item tag 0x0 [ 2242.151755][ T9] hid-picolcd 0003:04D8:F002.003C: No report with id 0xf4 found [ 2242.229224][ T9] hid-picolcd 0003:04D8:F002.003C: No report with id 0xf3 found [ 2242.364864][ T9] usb 2-1: USB disconnect, device number 103 [ 2242.924284][T30814] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6840'. [ 2243.124718][T30814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6840'. [ 2243.238520][T30821] syz.4.6841: attempt to access beyond end of device [ 2243.238520][T30821] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2243.252471][T30821] (syz.4.6841,30821,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 2243.260175][T30821] (syz.4.6841,30821,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 2243.268142][T30821] (syz.4.6841,30821,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 2243.277407][T30821] (syz.4.6841,30821,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 2243.837451][T30830] pim6reg: entered allmulticast mode [ 2243.847536][T30831] FAULT_INJECTION: forcing a failure. [ 2243.847536][T30831] name failslab, interval 1, probability 0, space 0, times 0 [ 2243.847613][T30831] CPU: 1 UID: 0 PID: 30831 Comm: syz.5.6844 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 2243.847636][T30831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2243.847648][T30831] Call Trace: [ 2243.847654][T30831] [ 2243.847662][T30831] dump_stack_lvl+0x16c/0x1f0 [ 2243.847690][T30831] should_fail_ex+0x512/0x640 [ 2243.847716][T30831] ? fs_reclaim_acquire+0xae/0x150 [ 2243.847739][T30831] should_failslab+0xc2/0x120 [ 2243.847765][T30831] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2243.847794][T30831] ? security_inode_alloc+0x3b/0x2b0 [ 2243.847821][T30831] security_inode_alloc+0x3b/0x2b0 [ 2243.847844][T30831] inode_init_always_gfp+0xce4/0x1030 [ 2243.847874][T30831] alloc_inode+0x86/0x240 [ 2243.847894][T30831] new_inode+0x22/0x1c0 [ 2243.847915][T30831] proc_pid_make_inode+0x22/0x160 [ 2243.847943][T30831] proc_fd_instantiate+0x57/0x240 [ 2243.847966][T30831] proc_fill_cache+0x35e/0x470 [ 2243.847991][T30831] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 2243.848015][T30831] ? __pfx_proc_fill_cache+0x10/0x10 [ 2243.848039][T30831] ? __pfx_vsnprintf+0x10/0x10 [ 2243.848070][T30831] ? snprintf+0xc7/0x100 [ 2243.848099][T30831] ? _raw_spin_unlock+0x28/0x50 [ 2243.848120][T30831] ? fget_task_next+0x2b0/0x580 [ 2243.848150][T30831] proc_readfd_common+0x1ef/0x620 [ 2243.848171][T30831] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 2243.848195][T30831] ? __pfx_proc_readfd_common+0x10/0x10 [ 2243.848217][T30831] ? down_read_killable+0x220/0x4b0 [ 2243.848246][T30831] ? __pfx_down_read_killable+0x10/0x10 [ 2243.848274][T30831] ? gfs2_hole_size+0xa00/0xef0 [ 2243.848306][T30831] iterate_dir+0x293/0xb40 [ 2243.848332][T30831] __x64_sys_getdents64+0x13c/0x2c0 [ 2243.848356][T30831] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 2243.848376][T30831] ? fput+0x70/0xf0 [ 2243.848392][T30831] ? __pfx_filldir64+0x10/0x10 [ 2243.848423][T30831] do_syscall_64+0xcd/0x4c0 [ 2243.848449][T30831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2243.848467][T30831] RIP: 0033:0x7f9c3758e929 [ 2243.848482][T30831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2243.848499][T30831] RSP: 002b:00007f9c3842a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 2243.848516][T30831] RAX: ffffffffffffffda RBX: 00007f9c377b6160 RCX: 00007f9c3758e929 [ 2243.848528][T30831] RDX: 0000000000001000 RSI: 0000200000000f80 RDI: 0000000000000007 [ 2243.848539][T30831] RBP: 00007f9c3842a090 R08: 0000000000000000 R09: 0000000000000000 [ 2243.848549][T30831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2243.848560][T30831] R13: 0000000000000001 R14: 00007f9c377b6160 R15: 00007ffcbfc93a08 [ 2243.848586][T30831] [ 2245.508655][ T24] IPVS: starting estimator thread 0... [ 2245.614507][T30852] IPVS: using max 38 ests per chain, 91200 per kthread [ 2246.352900][T30865] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2246.942376][T30879] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2249.206546][T30887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6860'. [ 2249.262864][T30888] netlink: 256 bytes leftover after parsing attributes in process `syz.5.6860'. [ 2249.606917][T30897] loop6: detected capacity change from 0 to 524287999 [ 2250.450209][T30899] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6861'. [ 2250.483811][ T9] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 2251.023526][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2251.038927][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2251.059079][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2251.069125][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2251.083876][ T9] usb 6-1: Product: syz [ 2251.088167][ T9] usb 6-1: Manufacturer: syz [ 2251.096352][ T9] usb 6-1: SerialNumber: syz [ 2251.860294][T30916] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2253.263085][ T9] usb 6-1: USB disconnect, device number 61 [ 2253.841338][T30941] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2255.975638][ T30] audit: type=1400 audit(1752017304.713:1780): avc: denied { mount } for pid=30962 comm="syz.5.6883" name="/" dev="rpc_pipefs" ino=132103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 2256.135538][ T30] audit: type=1400 audit(1752017304.783:1781): avc: denied { unmount } for pid=22580 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 2257.134444][T30986] lo speed is unknown, defaulting to 1000 [ 2259.002815][T31011] fuse: Bad value for 'fd' [ 2261.359383][T31032] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2261.768287][ T5897] IPVS: starting estimator thread 0... [ 2262.195262][ T30] audit: type=1400 audit(1752017310.903:1782): avc: denied { ioctl } for pid=31044 comm="syz.3.6905" path="socket:[133317]" dev="sockfs" ino=133317 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2262.241533][T31047] IPVS: using max 44 ests per chain, 105600 per kthread [ 2262.961222][T14306] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 2263.111003][T14306] usb 5-1: Using ep0 maxpacket: 16 [ 2263.152174][T14306] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2263.168668][T14306] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2263.184812][T14306] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2263.201762][T14306] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2263.217301][T14306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2263.234759][T14306] usb 5-1: Product: syz [ 2263.253538][T14306] usb 5-1: Manufacturer: syz [ 2263.269124][T14306] usb 5-1: SerialNumber: syz [ 2263.451545][T31055] Bluetooth: MGMT ver 1.23 [ 2263.470782][ T30] audit: type=1400 audit(1752017312.223:1783): avc: denied { execmod } for pid=31054 comm="syz.5.6907" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=132321 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 2263.699978][T14306] usb 5-1: 0:2 : does not exist [ 2264.520758][T31073] fuse: Unknown parameter 'grou00000000000000000000' [ 2267.435479][ T5897] usb 5-1: USB disconnect, device number 78 [ 2267.511674][T31110] 9pnet_fd: Insufficient options for proto=fd [ 2269.282208][T31129] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2269.541066][T31133] netlink: 'syz.5.6928': attribute type 4 has an invalid length. [ 2270.522649][ T30] audit: type=1400 audit(1752017319.273:1784): avc: denied { unmount } for pid=25561 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 2270.714059][ T9] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 2270.944579][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 2271.061552][T31153] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2271.131412][ T9] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2271.229705][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2271.276226][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2271.292418][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2271.333689][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2271.369465][ T9] usb 6-1: Product: syz [ 2271.386849][ T9] usb 6-1: Manufacturer: syz [ 2271.408094][ T9] usb 6-1: SerialNumber: syz [ 2272.497538][T31166] lo speed is unknown, defaulting to 1000 [ 2272.642498][ T9] usb 6-1: 0:2 : does not exist [ 2274.150572][T31189] FAULT_INJECTION: forcing a failure. [ 2274.150572][T31189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2274.165159][T31189] CPU: 0 UID: 0 PID: 31189 Comm: syz.1.6941 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 2274.165184][T31189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2274.165194][T31189] Call Trace: [ 2274.165201][T31189] [ 2274.165208][T31189] dump_stack_lvl+0x16c/0x1f0 [ 2274.165238][T31189] should_fail_ex+0x512/0x640 [ 2274.165265][T31189] _copy_to_user+0x32/0xd0 [ 2274.165298][T31189] simple_read_from_buffer+0xcb/0x170 [ 2274.165324][T31189] proc_fail_nth_read+0x197/0x270 [ 2274.165348][T31189] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2274.165372][T31189] ? rw_verify_area+0xcf/0x680 [ 2274.165392][T31189] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2274.165415][T31189] vfs_read+0x1e1/0xc60 [ 2274.165440][T31189] ? __pfx___mutex_lock+0x10/0x10 [ 2274.165466][T31189] ? __pfx_vfs_read+0x10/0x10 [ 2274.165495][T31189] ? __fget_files+0x20e/0x3c0 [ 2274.165528][T31189] ksys_read+0x12a/0x250 [ 2274.165549][T31189] ? __pfx_ksys_read+0x10/0x10 [ 2274.165572][T31189] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 2274.165598][T31189] do_syscall_64+0xcd/0x4c0 [ 2274.165625][T31189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2274.165643][T31189] RIP: 0033:0x7fb8a358d33c [ 2274.165659][T31189] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2274.165676][T31189] RSP: 002b:00007fb8a44a1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2274.165694][T31189] RAX: ffffffffffffffda RBX: 00007fb8a37b6080 RCX: 00007fb8a358d33c [ 2274.165706][T31189] RDX: 000000000000000f RSI: 00007fb8a44a10a0 RDI: 000000000000000e [ 2274.165717][T31189] RBP: 00007fb8a44a1090 R08: 0000000000000000 R09: 0000000000000000 [ 2274.165728][T31189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2274.165739][T31189] R13: 0000000000000000 R14: 00007fb8a37b6080 R15: 00007ffd5955e1a8 [ 2274.165764][T31189] [ 2274.681463][T25757] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 2274.697951][T31198] FAULT_INJECTION: forcing a failure. [ 2274.697951][T31198] name failslab, interval 1, probability 0, space 0, times 0 [ 2274.697983][T31198] CPU: 1 UID: 0 PID: 31198 Comm: syz.1.6945 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 2274.698006][T31198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2274.698017][T31198] Call Trace: [ 2274.698024][T31198] [ 2274.698031][T31198] dump_stack_lvl+0x16c/0x1f0 [ 2274.698060][T31198] should_fail_ex+0x512/0x640 [ 2274.698083][T31198] ? fs_reclaim_acquire+0xae/0x150 [ 2274.698105][T31198] should_failslab+0xc2/0x120 [ 2274.698131][T31198] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2274.698155][T31198] ? security_inode_alloc+0x3b/0x2b0 [ 2274.698185][T31198] security_inode_alloc+0x3b/0x2b0 [ 2274.698208][T31198] inode_init_always_gfp+0xce4/0x1030 [ 2274.698238][T31198] alloc_inode+0x86/0x240 [ 2274.698257][T31198] new_inode+0x22/0x1c0 [ 2274.698278][T31198] proc_pid_make_inode+0x22/0x160 [ 2274.698305][T31198] proc_fd_instantiate+0x57/0x240 [ 2274.698329][T31198] proc_fill_cache+0x35e/0x470 [ 2274.698354][T31198] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 2274.698376][T31198] ? __pfx_proc_fill_cache+0x10/0x10 [ 2274.698401][T31198] ? __pfx_vsnprintf+0x10/0x10 [ 2274.698433][T31198] ? snprintf+0xc7/0x100 [ 2274.698461][T31198] ? _raw_spin_unlock+0x28/0x50 [ 2274.698482][T31198] ? fget_task_next+0x2b0/0x580 [ 2274.698512][T31198] proc_readfd_common+0x1ef/0x620 [ 2274.698533][T31198] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 2274.698563][T31198] ? __pfx_proc_readfd_common+0x10/0x10 [ 2274.698584][T31198] ? down_read_killable+0x220/0x4b0 [ 2274.698613][T31198] ? __pfx_down_read_killable+0x10/0x10 [ 2274.698641][T31198] ? gfs2_hole_size+0xa00/0xef0 [ 2274.698673][T31198] iterate_dir+0x293/0xb40 [ 2274.698700][T31198] __x64_sys_getdents64+0x13c/0x2c0 [ 2274.698723][T31198] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 2274.698743][T31198] ? fput+0x70/0xf0 [ 2274.698759][T31198] ? __pfx_filldir64+0x10/0x10 [ 2274.698790][T31198] do_syscall_64+0xcd/0x4c0 [ 2274.698817][T31198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2274.698835][T31198] RIP: 0033:0x7fb8a358e929 [ 2274.698850][T31198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2274.698867][T31198] RSP: 002b:00007fb8a4493038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 2274.698884][T31198] RAX: ffffffffffffffda RBX: 00007fb8a37b6160 RCX: 00007fb8a358e929 [ 2274.698896][T31198] RDX: 0000000000001000 RSI: 0000200000000f80 RDI: 0000000000000007 [ 2274.698907][T31198] RBP: 00007fb8a4493090 R08: 0000000000000000 R09: 0000000000000000 [ 2274.698919][T31198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2274.698930][T31198] R13: 0000000000000001 R14: 00007fb8a37b6160 R15: 00007ffd5955e1a8 [ 2274.698955][T31198] [ 2274.842833][T25757] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2274.842867][T25757] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2274.842896][T25757] usb 5-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 2274.842917][T25757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2274.847966][T25757] usb 5-1: config 0 descriptor?? [ 2275.126039][T25757] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 2275.251453][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 2275.270493][ T5897] usb 6-1: USB disconnect, device number 62 [ 2275.309661][T31206] netlink: 'syz.5.6948': attribute type 11 has an invalid length. [ 2275.317881][T31206] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6948'. [ 2275.411363][ T5941] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 2275.423321][ T9] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 2275.433025][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2275.443712][ T9] usb 4-1: config 0 descriptor?? [ 2275.562986][ T5941] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2275.579808][ T5941] usb 2-1: config 0 has no interfaces? [ 2275.586044][ T5941] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 2275.595979][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2275.606119][ T5941] usb 2-1: config 0 descriptor?? [ 2275.957344][ T9] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2275.968322][ T9] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 2275.979021][ T9] asix 4-1:0.0: probe with driver asix failed with error -71 [ 2275.989340][ T9] usb 4-1: USB disconnect, device number 22 [ 2276.073950][T31211] FAULT_INJECTION: forcing a failure. [ 2276.073950][T31211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2276.088280][T31211] CPU: 1 UID: 0 PID: 31211 Comm: syz.1.6947 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 2276.088304][T31211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2276.088315][T31211] Call Trace: [ 2276.088321][T31211] [ 2276.088329][T31211] dump_stack_lvl+0x16c/0x1f0 [ 2276.088357][T31211] should_fail_ex+0x512/0x640 [ 2276.088384][T31211] strncpy_from_user+0x3b/0x2e0 [ 2276.088409][T31211] strncpy_from_sockptr+0x15f/0x1a0 [ 2276.088429][T31211] ? __pfx_strncpy_from_sockptr+0x10/0x10 [ 2276.088450][T31211] ? avc_has_perm+0x11a/0x1c0 [ 2276.088472][T31211] do_tcp_setsockopt+0x431/0x2640 [ 2276.088496][T31211] ? rcu_is_watching+0x12/0xc0 [ 2276.088523][T31211] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 2276.088552][T31211] ? sock_has_perm+0x259/0x2f0 [ 2276.088576][T31211] ? __pfx_sock_has_perm+0x10/0x10 [ 2276.088596][T31211] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 2276.088621][T31211] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 2276.088651][T31211] ? __pfx___schedule+0x10/0x10 [ 2276.088679][T31211] tcp_setsockopt+0xe2/0x100 [ 2276.088704][T31211] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2276.088733][T31211] do_sock_setsockopt+0x221/0x470 [ 2276.088758][T31211] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 2276.088785][T31211] ? lockdep_hardirqs_on+0x7c/0x110 [ 2276.088823][T31211] __sys_setsockopt+0x1a0/0x230 [ 2276.088850][T31211] __x64_sys_setsockopt+0xbd/0x160 [ 2276.088871][T31211] ? do_syscall_64+0x91/0x4c0 [ 2276.088894][T31211] ? lockdep_hardirqs_on+0x7c/0x110 [ 2276.088917][T31211] do_syscall_64+0xcd/0x4c0 [ 2276.088943][T31211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2276.088961][T31211] RIP: 0033:0x7fb8a358e929 [ 2276.088976][T31211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2276.088993][T31211] RSP: 002b:00007fb8a4493038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2276.089012][T31211] RAX: ffffffffffffffda RBX: 00007fb8a37b6160 RCX: 00007fb8a358e929 [ 2276.089024][T31211] RDX: 000000000000001f RSI: 0000000000000006 RDI: 0000000000000008 [ 2276.089034][T31211] RBP: 00007fb8a4493090 R08: 0000000000000004 R09: 0000000000000000 [ 2276.089044][T31211] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 2276.089055][T31211] R13: 0000000000000000 R14: 00007fb8a37b6160 R15: 00007ffd5955e1a8 [ 2276.089079][T31211] [ 2276.323007][ C1] vkms_vblank_simulate: vblank timer overrun [ 2276.334411][T31211] Cannot find add_set index 0 as target [ 2276.715313][T25757] pwc: send_video_command error -71 [ 2276.728582][T25757] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2276.737672][T25757] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 2276.755165][T25757] usb 5-1: USB disconnect, device number 79 [ 2276.803497][T31207] ================================================================== [ 2276.811573][T31207] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 2276.819704][T31207] Read of size 1 at addr ffff88802608a6b0 by task syz.5.6949/31207 [ 2276.827566][T31207] [ 2276.829871][T31207] CPU: 1 UID: 0 PID: 31207 Comm: syz.5.6949 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 2276.829886][T31207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2276.829893][T31207] Call Trace: [ 2276.829897][T31207] [ 2276.829902][T31207] dump_stack_lvl+0x116/0x1f0 [ 2276.829919][T31207] print_report+0xcd/0x680 [ 2276.829936][T31207] ? __virt_addr_valid+0x81/0x610 [ 2276.829949][T31207] ? __phys_addr+0xe8/0x180 [ 2276.829962][T31207] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 2276.829974][T31207] kasan_report+0xe0/0x110 [ 2276.829989][T31207] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 2276.830003][T31207] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 2276.830016][T31207] __kasan_check_byte+0x36/0x50 [ 2276.830032][T31207] lock_acquire+0xfc/0x350 [ 2276.830044][T31207] _raw_spin_lock_irqsave+0x3a/0x60 [ 2276.830057][T31207] ? remove_wait_queue+0x25/0x180 [ 2276.830072][T31207] remove_wait_queue+0x25/0x180 [ 2276.830087][T31207] ep_remove_wait_queue+0x85/0x1d0 [ 2276.830101][T31207] ep_clear_and_put+0x186/0x440 [ 2276.830115][T31207] ? __pfx_ep_eventpoll_release+0x10/0x10 [ 2276.830128][T31207] ep_eventpoll_release+0x3e/0x60 [ 2276.830141][T31207] __fput+0x3ff/0xb70 [ 2276.830152][T31207] task_work_run+0x14d/0x240 [ 2276.830165][T31207] ? __pfx_task_work_run+0x10/0x10 [ 2276.830176][T31207] ? __pfx___do_sys_close_range+0x10/0x10 [ 2276.830195][T31207] exit_to_user_mode_loop+0xeb/0x110 [ 2276.830208][T31207] do_syscall_64+0x3f6/0x4c0 [ 2276.830225][T31207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2276.830236][T31207] RIP: 0033:0x7f9c3758e929 [ 2276.830245][T31207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2276.830256][T31207] RSP: 002b:00007ffcbfc93b68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 2276.830267][T31207] RAX: 0000000000000000 RBX: 00007f9c377b7ba0 RCX: 00007f9c3758e929 [ 2276.830276][T31207] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 2276.830282][T31207] RBP: 00007f9c377b7ba0 R08: 0000000000000c38 R09: 00000015bfc93e5f [ 2276.830289][T31207] R10: 00007f9c377b7ac0 R11: 0000000000000246 R12: 000000000022bd63 [ 2276.830296][T31207] R13: 00007f9c377b6080 R14: ffffffffffffffff R15: 00007ffcbfc93c80 [ 2276.830307][T31207] [ 2276.830311][T31207] [ 2277.054342][T31207] Allocated by task 18803: [ 2277.058734][T31207] kasan_save_stack+0x33/0x60 [ 2277.063397][T31207] kasan_save_track+0x14/0x30 [ 2277.068058][T31207] __kasan_kmalloc+0xaa/0xb0 [ 2277.072633][T31207] comedi_device_postconfig+0x2cb/0xc80 [ 2277.078164][T31207] comedi_device_attach+0x3cf/0x900 [ 2277.083345][T31207] do_devconfig_ioctl+0x1a7/0x580 [ 2277.088358][T31207] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 2277.093799][T31207] __x64_sys_ioctl+0x18e/0x210 [ 2277.098545][T31207] do_syscall_64+0xcd/0x4c0 [ 2277.103035][T31207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2277.108908][T31207] [ 2277.111212][T31207] Freed by task 31208: [ 2277.115255][T31207] kasan_save_stack+0x33/0x60 [ 2277.119923][T31207] kasan_save_track+0x14/0x30 [ 2277.124583][T31207] kasan_save_free_info+0x3b/0x60 [ 2277.129589][T31207] __kasan_slab_free+0x51/0x70 [ 2277.134337][T31207] kfree+0x2b4/0x4d0 [ 2277.138216][T31207] comedi_device_detach+0x2a4/0x9e0 [ 2277.143398][T31207] do_devconfig_ioctl+0x46c/0x580 [ 2277.148410][T31207] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 2277.153850][T31207] __x64_sys_ioctl+0x18e/0x210 [ 2277.158595][T31207] do_syscall_64+0xcd/0x4c0 [ 2277.163083][T31207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2277.168956][T31207] [ 2277.171266][T31207] The buggy address belongs to the object at ffff88802608a600 [ 2277.171266][T31207] which belongs to the cache kmalloc-256 of size 256 [ 2277.185299][T31207] The buggy address is located 176 bytes inside of [ 2277.185299][T31207] freed 256-byte region [ffff88802608a600, ffff88802608a700) [ 2277.199073][T31207] [ 2277.201379][T31207] The buggy address belongs to the physical page: [ 2277.207767][T31207] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2608a [ 2277.216505][T31207] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2277.224982][T31207] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2277.232505][T31207] page_type: f5(slab) [ 2277.236469][T31207] raw: 00fff00000000040 ffff88801b841b40 ffffea0000a94b80 dead000000000002 [ 2277.245033][T31207] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 2277.253599][T31207] head: 00fff00000000040 ffff88801b841b40 ffffea0000a94b80 dead000000000002 [ 2277.262249][T31207] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 2277.270904][T31207] head: 00fff00000000001 ffffea0000982281 00000000ffffffff 00000000ffffffff [ 2277.279556][T31207] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 2277.288201][T31207] page dumped because: kasan: bad access detected [ 2277.294590][T31207] page_owner tracks the page as allocated [ 2277.300281][T31207] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5828, tgid 5828 (syz-executor), ts 75543038342, free_ts 75522478676 [ 2277.321621][T31207] post_alloc_hook+0x1c0/0x230 [ 2277.326367][T31207] get_page_from_freelist+0x1321/0x3890 [ 2277.331898][T31207] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 2277.337774][T31207] alloc_pages_mpol+0x1fb/0x550 [ 2277.342611][T31207] new_slab+0x23b/0x330 [ 2277.346747][T31207] ___slab_alloc+0xd9c/0x1940 [ 2277.351405][T31207] __slab_alloc.constprop.0+0x56/0xb0 [ 2277.356759][T31207] __kmalloc_noprof+0x2f2/0x510 [ 2277.361595][T31207] fib_create_info+0x53f/0x46b0 [ 2277.366431][T31207] fib_table_insert+0x177/0x1c40 [ 2277.371354][T31207] fib_magic+0x4d4/0x5c0 [ 2277.375576][T31207] fib_add_ifaddr+0x16d/0x580 [ 2277.380234][T31207] fib_inetaddr_event+0x147/0x270 [ 2277.385243][T31207] notifier_call_chain+0xbc/0x410 [ 2277.390258][T31207] blocking_notifier_call_chain+0x69/0xa0 [ 2277.395972][T31207] __inet_insert_ifa+0x925/0xcd0 [ 2277.400896][T31207] page last free pid 5190 tgid 5190 stack trace: [ 2277.407202][T31207] __free_frozen_pages+0x7fe/0x1180 [ 2277.412382][T31207] __put_partials+0x16d/0x1c0 [ 2277.417043][T31207] qlist_free_all+0x4d/0x120 [ 2277.421619][T31207] kasan_quarantine_reduce+0x195/0x1e0 [ 2277.427064][T31207] __kasan_slab_alloc+0x69/0x90 [ 2277.431899][T31207] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 2277.437775][T31207] __alloc_skb+0x2b2/0x380 [ 2277.442176][T31207] alloc_skb_with_frags+0xe0/0x860 [ 2277.447276][T31207] sock_alloc_send_pskb+0x7fb/0x990 [ 2277.452460][T31207] unix_dgram_sendmsg+0x41a/0x1840 [ 2277.457555][T31207] __sys_sendto+0x4a0/0x520 [ 2277.462043][T31207] __x64_sys_sendto+0xe0/0x1c0 [ 2277.466790][T31207] do_syscall_64+0xcd/0x4c0 [ 2277.471280][T31207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2277.477168][T31207] [ 2277.479472][T31207] Memory state around the buggy address: [ 2277.485078][T31207] ffff88802608a580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2277.493119][T31207] ffff88802608a600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2277.501166][T31207] >ffff88802608a680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2277.509209][T31207] ^ [ 2277.514816][T31207] ffff88802608a700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2277.522858][T31207] ffff88802608a780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2277.530896][T31207] ================================================================== [ 2277.538935][T31207] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2277.546107][T31207] CPU: 1 UID: 0 PID: 31207 Comm: syz.5.6949 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 2277.558149][T31207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2277.568185][T31207] Call Trace: [ 2277.571446][T31207] [ 2277.574360][T31207] dump_stack_lvl+0x3d/0x1f0 [ 2277.578938][T31207] panic+0x71c/0x800 [ 2277.582824][T31207] ? __pfx_panic+0x10/0x10 [ 2277.587231][T31207] ? __pfx__printk+0x10/0x10 [ 2277.591810][T31207] ? end_report+0x4c/0x170 [ 2277.596214][T31207] ? check_panic_on_warn+0x1f/0xb0 [ 2277.601320][T31207] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 2277.606681][T31207] check_panic_on_warn+0xab/0xb0 [ 2277.611617][T31207] end_report+0x107/0x170 [ 2277.615939][T31207] kasan_report+0xee/0x110 [ 2277.620345][T31207] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 2277.625706][T31207] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 2277.631072][T31207] __kasan_check_byte+0x36/0x50 [ 2277.635924][T31207] lock_acquire+0xfc/0x350 [ 2277.640326][T31207] _raw_spin_lock_irqsave+0x3a/0x60 [ 2277.645510][T31207] ? remove_wait_queue+0x25/0x180 [ 2277.650523][T31207] remove_wait_queue+0x25/0x180 [ 2277.655364][T31207] ep_remove_wait_queue+0x85/0x1d0 [ 2277.660464][T31207] ep_clear_and_put+0x186/0x440 [ 2277.665299][T31207] ? __pfx_ep_eventpoll_release+0x10/0x10 [ 2277.671003][T31207] ep_eventpoll_release+0x3e/0x60 [ 2277.676011][T31207] __fput+0x3ff/0xb70 [ 2277.679975][T31207] task_work_run+0x14d/0x240 [ 2277.684551][T31207] ? __pfx_task_work_run+0x10/0x10 [ 2277.689644][T31207] ? __pfx___do_sys_close_range+0x10/0x10 [ 2277.695357][T31207] exit_to_user_mode_loop+0xeb/0x110 [ 2277.700628][T31207] do_syscall_64+0x3f6/0x4c0 [ 2277.705209][T31207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2277.711084][T31207] RIP: 0033:0x7f9c3758e929 [ 2277.715479][T31207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2277.735073][T31207] RSP: 002b:00007ffcbfc93b68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 2277.743470][T31207] RAX: 0000000000000000 RBX: 00007f9c377b7ba0 RCX: 00007f9c3758e929 [ 2277.751431][T31207] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 2277.759389][T31207] RBP: 00007f9c377b7ba0 R08: 0000000000000c38 R09: 00000015bfc93e5f [ 2277.767345][T31207] R10: 00007f9c377b7ac0 R11: 0000000000000246 R12: 000000000022bd63 [ 2277.775297][T31207] R13: 00007f9c377b6080 R14: ffffffffffffffff R15: 00007ffcbfc93c80 [ 2277.783258][T31207] [ 2277.786453][T31207] Kernel Offset: disabled [ 2277.790751][T31207] Rebooting in 86400 seconds..