last executing test programs: 10m7.389139448s ago: executing program 3 (id=772): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) socket(0x1e, 0x4, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000080) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl0\x00', r9, 0x4, 0x0, 0x7, 0x26, 0x1, @local, @mcast2, 0x700, 0x7, 0x3, 0x5}}) 10m6.367824385s ago: executing program 3 (id=773): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000400), 0x100, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r4 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) pipe2$9p(&(0x7f00000000c0), 0x80080) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r3, 0x0, 0x0, 0x0, 0x80800}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x80, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:apm_bios_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xa}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x4081}, 0x840) io_uring_enter(r4, 0x3516, 0x3e44, 0x8, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x50, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x48000}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000048) r10 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$yama_ptrace_scope(r10, &(0x7f0000000100)='3\x00', 0x2) 10m4.348622881s ago: executing program 3 (id=778): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) kexec_load(0x0, 0x0, &(0x7f0000000180), 0x0) 10m0.961867366s ago: executing program 3 (id=786): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x1d, &(0x7f00000000c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @val={@void, {0x8100, 0x5}}, {@generic={0xa01, "273e75ec9feee7f898d82f"}}}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x39, &(0x7f00000003c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x2b, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x17, 0x0, @gue={{0x2, 0x1, 0x2, 0xb, 0x100}, "02adabc312c9a7"}}}}}}, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r2, 0x0, 0x4004005) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000001c0)={0x0, 0x5, 0x1, "ff"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0x9) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e00000090000000000000000020001000000000000e0000200000000030005000000000002000000e0000001"], 0x50}}, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000700)='signal_generate\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 10m0.315044682s ago: executing program 3 (id=788): socket(0x40000000015, 0x5, 0x0) r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x0, 0x80, 0x3}, 0x18) r1 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0x8c36, 0x800, 0x3, 0x37d}, &(0x7f0000000340), &(0x7f0000000280)) io_uring_enter(r1, 0x60a3, 0x8006cd6, 0x4b, 0x0, 0x0) syz_io_uring_setup(0x890, &(0x7f00000010c0)={0x0, 0xc941, 0x400, 0x5, 0x141, 0x0, r1}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x20, 0x0, r0, 0x80, &(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x4}, 0x3}}, 0x0, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuseblk(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0xbff066, 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r7 = epoll_create1(0x0) epoll_pwait2(r7, &(0x7f0000000100)=[{}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5992000000000000140003006d61637674617030000000000000000044002b800500270004000000"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000100)='./file1\x00') mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) keyctl$dh_compute(0x17, &(0x7f0000001200), 0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001340)={'hmac(streebog512)\x00'}}) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r9, 0xffffffff80000800, 0xee01, &(0x7f00000003c0)={0x0, 0x5, 0x1000, 0x472, 0x4000000000000000, 0xfffffffffffffffc, 0x23, 0x0, 0xfeff}) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) 9m58.862456355s ago: executing program 3 (id=792): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x1d, &(0x7f00000000c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @val={@void, {0x8100, 0x5}}, {@generic={0xa01, "273e75ec9feee7f898d82f"}}}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x9b, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e21, 0x79, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/97}}}}}}, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r2, 0x0, 0x4004005) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000001c0)={0x0, 0x5, 0x1, "ff"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0x9) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e00000090000000000000000020001000000000000e0000200000000030005000000000002000000e0000001"], 0x50}}, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000700)='signal_generate\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 9m43.534837635s ago: executing program 32 (id=792): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x1d, &(0x7f00000000c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @val={@void, {0x8100, 0x5}}, {@generic={0xa01, "273e75ec9feee7f898d82f"}}}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x9b, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e21, 0x79, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/97}}}}}}, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r2, 0x0, 0x4004005) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000001c0)={0x0, 0x5, 0x1, "ff"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0x9) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e00000090000000000000000020001000000000000e0000200000000030005000000000002000000e0000001"], 0x50}}, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000700)='signal_generate\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 12.248535048s ago: executing program 0 (id=2664): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0], 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea000bffff7fe08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a4", 0x24}], 0x2) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000000)=[0x597c, 0xf0]) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) 9.425213028s ago: executing program 5 (id=2669): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x74, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xd, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa, [{0x200, 0x500, 0x3, 0xe}, {0x6783, 0x2, 0x8001, 0x10}, {0x40000, 0x53, 0xa9, 0x80000001}]}}]}}]}, 0x74}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x3}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) (fail_nth: 6) 8.875592398s ago: executing program 0 (id=2671): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000080), 0x10) listen(r0, 0x0) accept4$llc(r0, 0x0, 0x0, 0x0) r1 = getpid() r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="020300020c00000027bd7000000000000300060000000000020010000000000000000000000000000200010000000000000009fc000000c0030005000000000002000000ac1414aa00000000000000000200080008"], 0x60}, 0x1, 0x7}, 0x0) syz_pidfd_open(r1, 0x0) r3 = fsopen(&(0x7f00000001c0)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000700)='\x00\x00u\x1fC3', &(0x7f0000000000)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x0f\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x00\x00K&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xff\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\xa8&t&A0\xa7\xef\x9cL\x8e1Kg\x83\x1c\x9e\x117\\X1\xbd\x11\xbf\xa8\xc6\xbf)\xf7\x83\a\xb0c{T\xc5\xe7\xdf.B\xd6\xb4w\xc8y\xc8Q\x18\xd7\xb4F\x9d\x0eO?\bx\x11\xd7\'\xf8\x12#\x9f\xcd\xedr\xa7\xa8\x97\xc9P\x15\x8a\x8f\v\xfd\t\x03W\xd2\x1cQ\xe4\xd3\xb4fAw\xa4U\xc5\xe4\xb8\x13\xecp\xb9~\xf9\xf8\xca8\x8f\x1diG}\xc8Ph\x00\xc3DN\xeeNLu\x95\xdelQaq\x0e\xd3\xb7^8\x9a\'\x16^\f|\xd8\xb4\xeb\x01v\xde', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc}) r5 = socket$inet6(0xa, 0x800, 0x5) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c03000b000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000010008"], 0x40003) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x60581, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000500)={@local, @local, @void, {@mpls_uc={0x8847, {[{0x3460}, {0x1}], @llc={@snap={0x1, 0xaa, "84bc", "cfd820", 0xf9, "a572af0bb74307a0053a682d4f65dff222a5f4ab8ce8731bc6f60a3612623b4bbed857990a7299"}}}}}}, 0x0) syz_io_uring_setup(0x2501, &(0x7f0000000280)={0x0, 0xf36e, 0x200}, &(0x7f0000000240), &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 8.801213173s ago: executing program 5 (id=2673): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x6, @none, 0xffff}, 0xe) r2 = socket(0x10, 0x803, 0x0) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d00)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES8, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa14"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000008c0)=0x2, 0x4) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r3, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004c040}, 0x20008050) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x5a}, 0x48) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 7.932834695s ago: executing program 4 (id=2674): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file1\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES8=r4], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r6, r5, 0x26}, 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r6, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r4}, 0x20) recvmmsg(r4, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/151, 0x97}], 0x1}, 0x7f}], 0x2, 0x140, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r8, 0x40045542, &(0x7f0000000180)=0xf) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x2) close_range(r7, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08030700000004000000000000000600142603600e120800110000810401040016000a00104005000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ed2f31b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e97", 0xd7}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 7.570972406s ago: executing program 5 (id=2677): r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, &(0x7f0000000000)="8a16437216fbeff585365e4100d17244fedc665a304db0ce21cb2a59ec4087d5eab873c56199f1f623233ef1baf513924d97b1ae2b8c60237f5425da390bcd953df81c50ea60ab656b5928cceb12eacb1fdca1bfb2182ff574262720ed84f7d534f0be8d72ccc9bcf9d49299beec73df0cf4db8fc1f88593abf8fa6edadc0502e2566541b2309b3b55abf5537ac1cb23fef471dd8c0a5fe6dea79abe482e6baee442aaecbf6e91387a18fe076816d23d5ae50c30d5b312ccbeb87bde0306562997f3b6f5f57c23c4e28bea72123f7655aefe7335fe028e1dc147cfcb8a93", 0xde, 0x4040040, &(0x7f0000000100)={0x2, 0x0, @private=0xa010100, 0x2}, 0x10) (async) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000140)=0x8, 0x4) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000180)) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000280)) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r1, 0x0, &(0x7f0000000300)) (async) r2 = syz_open_dev$vivid(&(0x7f0000000340), 0x2, 0x2) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000380)={0x7, 0x8, @value=0x4}) (async) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f00000003c0), &(0x7f0000000400)=0x30) (async) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) write$rfkill(r4, &(0x7f0000000480)={0xb93, 0x8, 0x0, 0x0, 0x1}, 0x8) (async) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f00000004c0)) (async) syz_open_dev$MSR(&(0x7f0000000500), 0x1000, 0x0) (async) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000540), &(0x7f0000000580)={'L-', 0x1}, 0x16, 0x3) (async) r6 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100000001) ioctl$TCSETAF(r6, 0x5408, &(0x7f00000005c0)={0x2, 0x5, 0x1, 0x4, 0x9, "f4933c7287ffecb6"}) (async) r7 = socket$rds(0x15, 0x5, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000600)=0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_RM_DEV_V2(r7, 0x5000943a, &(0x7f0000000ac0)={{r4}, r8, 0x0, @inherit={0x78, &(0x7f0000000640)={0x1, 0x6, 0x1, 0x1, {0x4, 0x8000000000000000, 0x4, 0x400}, [0x6, 0x4, 0x9, 0x5, 0xea9, 0x8]}}, @devid=r9}) (async) r10 = socket$inet6(0xa, 0x6, 0x7f) r11 = fcntl$getown(r10, 0x9) ptrace$ARCH_MAP_VDSO_64(0x1e, r11, 0xffffffffffffffff, 0x2003) (async) r12 = syz_open_dev$sg(&(0x7f0000001ac0), 0x2, 0x20040) ioctl$SG_IO(r12, 0x2285, &(0x7f0000003c00)={0x53, 0xfffffffffffffffb, 0x1000, 0x10, @buffer={0x0, 0x8d, &(0x7f0000001b00)=""/141}, &(0x7f0000001bc0)="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", &(0x7f0000002bc0)=""/4096, 0x3, 0x0, 0x1, &(0x7f0000003bc0)}) (async) ioctl$VT_DISALLOCATE(r6, 0x5608) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000003d40)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003d00)={&(0x7f0000003cc0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4004040) 7.528356432s ago: executing program 0 (id=2678): syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x734, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000004c0)={'\x00', 0x4, 0x8, 0x1, 0xffff, 0x5, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x2, &(0x7f0000000540)) syz_usb_connect$cdc_ecm(0x2, 0x6f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x1, 0x6, 0x0, 0x1c, [{{0x9, 0x4, 0x0, 0x7e, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x0, "81"}, {0x5, 0x24, 0x0, 0xf}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x0, 0x5, 0x5}, [@dmm={0x7, 0x24, 0x14, 0x7, 0x2}, @acm={0x4, 0x24, 0x2, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x8, 0x2, 0x94, 0x100, 0x9}, @obex={0x5, 0x24, 0x15, 0x1ff}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0xc, 0x3, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x6, 0x5, 0x10}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0xff, 0x80, 0x6, 0x10, 0x10}, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xa, "48b8f0dab389b9a2f6a1ce07a9b492cf"}]}, 0x7, [{0x5a, &(0x7f0000000180)=@string={0x5a, 0x3, "d7803cc50585daec03bd4dde834fae7ee21a04a2eafef17710403c4f5c7f01d0308f18f77b0d8e94b04e84d797cf7722d7ed756a95d64201cf702117fb2e331002663d0be2071af2b96de71f3dcd96cd271063ae4b35bbab"}}, {0xa5, &(0x7f0000000200)=@string={0xa5, 0x3, "e82d67116e42e95bb0422a0585b4d59d504da8acb206ff23c6c603685295a8cddf9319da5b28a3e44f133e73722a692fcca313b9ef06e09781ffc0937270a02e69f52f9b4ebfab459bd819d55e14f734b3a1295bfcd778251e25316a9b36f227b746bbad99127651a72923ca32a0e99e69413b65ac02348247548a1fcede8d777103570f6356abeb69aa22701d0899230dd06ae95885e3675633fc6dbe1279bbb9f791"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x7e, &(0x7f0000000340)=@string={0x7e, 0x3, "e1a7eae22713b17e8a04ca8e69ff09a7060c7e3e37d52b7de839a1d69ad2c2ec21b13ab52104f066c941e3b620a093196b79bf286e3d9c0d0621eef3342221a6b293667ad8b9a7e843e3431986081822a1b4762b6020b18a5a49bacf79d5ce860f5f08d3852f5c8a15826377a91af84e86f3fcab63f0d7d9f2ea4f18"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x810}}]}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(0x0, 0x0) fsmount(r5, 0x0, 0xa) syz_open_procfs(0x0, &(0x7f0000000280)='gid_map\x00') r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r6}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r8, 0x0, 0x0) 7.38521744s ago: executing program 5 (id=2680): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0xffffff7e) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000080)) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80b000000050104000000000000000003000080540201"], 0xbb8}, 0x1, 0x0, 0x0, 0x2000}, 0x4004040) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000340)={&(0x7f0000006080)=[{0x3, 0x9001, 0x0, 0x0}, {0xfff, 0x19, 0x0, 0x0}], 0x2}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 7.384482909s ago: executing program 4 (id=2681): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @private}, 0x2, 0x4, 0x2, 0x3}}, 0x2e) ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x800, 0x2) r3 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getdents64(r3, &(0x7f0000000fc0)=""/224, 0xe0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000180)={0x5, 0x10, 0xfa00, {&(0x7f0000000480), r6, 0x1}}, 0x18) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000080)={0x2, 0x2, 0x0, {0x0, 0x23, 0x16c, 0xb}}) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x29, 0x3, 0x0) connect$unix(r8, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 6.400984091s ago: executing program 1 (id=2682): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in6=@dev={0xfe, 0x80, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1d}, {0x0, 0x7, 0x7270}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x4, 0x0, 0x400}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x218, 0x1, @empty}, 0x1c) 6.34959234s ago: executing program 1 (id=2683): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "658e57", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x4, 0x0, 0x4, {[@mss={0x2, 0x4, 0xee93}]}}}}}}}}, 0x0) (fail_nth: 6) 5.991880574s ago: executing program 1 (id=2684): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x24040891) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x400720) landlock_create_ruleset(&(0x7f0000000080)={0x4a20, 0x3, 0x2}, 0x18, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f0000000200), 0x6c6c9c9e, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) 4.997048297s ago: executing program 2 (id=2685): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000180)=0x677a, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0xffffffffffffffff, 0x4000, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000300)={0x0, 0x6a}, 0x0, &(0x7f0000000600)="a02e174820539036e778c34da5a59e6e86f60785893bd0d6f3f0b4da8b70a7bee1419bcae251906bf589e3f30ddcc19e021ac90cc9d40a4d399984a4aa788bda76396f5eda92982b7213fc16bf26c571b01a6e4cd8790b8dfca98189c3071cbb906fac62a11b07754296", 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(r2, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x1, 0x4, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000001}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) bind$bt_hci(r1, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000500)) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000080)) 4.74771954s ago: executing program 1 (id=2686): r0 = socket$kcm(0x10, 0x2, 0x4) recvmmsg(r0, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000000, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004600)=@newtaction={0x1d48, 0x30, 0xb, 0x0, 0x0, {}, [{0x1d34, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0x1ce8, 0x2, 0x0, 0x0, {{0xa}, {0x1cbc, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb80, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1aca}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0xc42d4e4d62133ad}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_PARMS={0xe98, 0x2, {{{0x2, 0xbe, 0x10000000, 0x9, 0x1}, 0x6, 0x0, [{0x5, 0x200, 0xfff, 0x0, 0x21, 0x6}, {0x4, 0x3, 0x978, 0x2, 0x1, 0x5}, {0x8, 0x8, 0x9f9c, 0x7, 0xffffffff, 0x81}, {0xf31b, 0x40, 0x9, 0x373, 0xfffffffd, 0x3}, {0x401, 0xa65, 0x3, 0x9, 0x3, 0x2}]}, [{0x3b, 0x3, 0x1, 0x8, 0xe, 0x5}, {0x4, 0x6, 0x8, 0x401, 0x0, 0x5}, {0x8001, 0x4, 0xfd2, 0x38e, 0x6, 0x7}, {0x8, 0xf, 0x5, 0xd, 0x7b, 0x1}, {0x0, 0xff, 0xe81, 0x400, 0x1, 0x6}, {0xfffffff8, 0x9, 0xfffffff7, 0x4, 0x5, 0x3}, {0xb, 0x1c11, 0x38, 0x1, 0xfffffff7, 0xc20}, {0x4, 0xbbca, 0x8000, 0xf, 0xfffffffe, 0xe}, {0x7f, 0x1, 0x3, 0x1ff, 0x7, 0xfffffff3}, {0x6, 0x10000, 0x3ff, 0x800, 0x9, 0x6}, {0xe69fbb3, 0x9, 0x8001, 0x3, 0x6b, 0x248}, {0x7, 0xc2b, 0xe387, 0x2, 0xffff571c, 0x6}, {0x3, 0x80000001, 0x3ff, 0x100, 0x101, 0x7f}, {0x7, 0xc, 0x1, 0x3, 0x6, 0x2}, {0x5, 0x2, 0x8, 0x6, 0xffff8000, 0xfffffffd}, {0xe200000, 0x0, 0x1, 0xee, 0x400, 0x7}, {0x7, 0x2, 0x2, 0x5, 0x1, 0x3}, {0x7, 0x0, 0x4, 0x5, 0x9, 0x6}, {0x8, 0x1, 0x88, 0x1, 0x1, 0xfffffffc}, {0x400000, 0x2, 0x6, 0x4, 0xd, 0x9}, {0x80000001, 0x2b, 0x8, 0x24e, 0xfffffffd, 0x7fffffff}, {0x1, 0x359, 0x8, 0x7, 0xfff, 0xd63}, {0x5, 0x9, 0x6, 0x6, 0x6, 0x80000000}, {0x1, 0x5, 0x8001, 0x10001, 0x3}, {0x3800000, 0x2, 0x200, 0x3, 0x4, 0x6}, {0x0, 0x54, 0x6, 0x80000000, 0x9, 0x10000}, {0x0, 0xa0, 0x5, 0x3, 0x6, 0x3}, {0x2, 0x7, 0xf14a, 0xc, 0x9, 0x3}, {0x0, 0x2, 0x100, 0x51a, 0x2, 0xffff}, {0x0, 0xcc12, 0x7, 0x101, 0x9, 0x4}, {0x10000, 0x7, 0x0, 0x7, 0x400, 0x10000}, {0x5, 0x3800000, 0x7419d7b4, 0x7, 0x6, 0x3}, {0x4, 0x80, 0x3, 0xfbf, 0x401, 0x8}, {0xa2e4, 0x2, 0x5, 0x3, 0xb76f, 0x67}, {0x7, 0x7, 0x1, 0x0, 0x9c5, 0xffff0000}, {0x8000, 0xffff8001, 0x2, 0x0, 0xb, 0x7}, {0x10001, 0x4475864a, 0x9, 0xf, 0x1, 0x7fff}, {0x6, 0x4, 0xad7e, 0x9, 0x87a9, 0x7}, {0x2, 0x6, 0x8, 0x3, 0x4, 0x9}, {0x2, 0x7, 0x8, 0x1ff, 0x8, 0x8}, {0x2, 0x2, 0xffffffff, 0x6, 0x0, 0x7}, {0x4, 0x1, 0xc, 0xfffffff8, 0x3, 0x4}, {0x9, 0x8, 0x8, 0x0, 0x879, 0x8}, {0x4, 0x6, 0x8000, 0x0, 0xc76, 0x85c0}, {0x6, 0x7, 0x3, 0x401, 0x8, 0x2}, {0xbe01cb7, 0x1ff, 0x9, 0x8001, 0x6, 0x7}, {0xff, 0x0, 0x9, 0x27, 0x8, 0x2}, {0x40, 0x6, 0x5, 0x1, 0x10, 0x7}, {0xfffffff8, 0x6f7, 0x7, 0x2, 0xc4, 0xffffffff}, {0x1, 0x6, 0x34a, 0x2, 0x401, 0x7}, {0x3ba7, 0x2699769, 0x1, 0x0, 0x0, 0x5}, {0x2f34f8ef, 0x3, 0x0, 0x6, 0x1}, {0x2, 0x69fe4235, 0x62a, 0x40, 0x5, 0x2}, {0x3, 0x3, 0x6, 0x8, 0x7, 0xb}, {0x0, 0x2, 0x6, 0x6, 0x7, 0x3}, {0x44, 0x2, 0xfff, 0x2000000, 0x90000, 0x5}, {0x4, 0x6, 0x79f9, 0x1337, 0xf3, 0x1000}, {0x9, 0x0, 0x3, 0x4, 0x3, 0xffff}, {0x5, 0x80000000, 0xdcb, 0xff, 0x443, 0xe}, {0x6, 0x200, 0x70e28e5d, 0xc4, 0x101, 0x2}, {0x9, 0x5, 0x7, 0x0, 0x63, 0xa}, {0x3, 0xa64d, 0x3, 0x6, 0xffffff3d, 0x2}, {0x4, 0x0, 0x6, 0x1, 0x10, 0x2}, {0x2, 0x80, 0xdd, 0x1, 0x1, 0x401}, {0x7, 0x4, 0x9, 0x2, 0x1000, 0x100}, {0x6, 0xfd, 0xc96a, 0x3ff, 0x7, 0x3}, {0x3, 0x7, 0x80000001, 0xe, 0x3da, 0x10000}, {0x39710963, 0x0, 0x2, 0x8, 0x5, 0x3}, {0xfffffffd, 0x96d5, 0xfffffffb, 0xfff, 0x830c, 0x7}, {0xa5, 0x0, 0x7f, 0x2c9, 0x10}, {0x8, 0x233a, 0x0, 0x1000, 0x9}, {0x3, 0x6918, 0x20, 0x0, 0x7fffffff, 0x40}, {0x8, 0x4, 0x4, 0x101, 0x2, 0x800}, {0xfffffff7, 0x8, 0x8080, 0x1, 0x0, 0xf5}, {0x2, 0x8, 0x0, 0x0, 0x101, 0x2}, {0x3, 0x4, 0x7, 0x5, 0x6, 0xffffae69}, {0x5, 0x4, 0x5, 0x5, 0x7ff, 0x4}, {0x1, 0x4, 0x5, 0x7fff, 0x9}, {0xc, 0x3, 0x6, 0x6ef, 0xde, 0x1000}, {0xd, 0x8, 0x1c000000, 0x6f0, 0x6, 0x10000}, {0x5, 0x6, 0x1, 0xb, 0x0, 0x5}, {0x8, 0x6, 0x6, 0x401, 0xc3fd, 0x2}, {0x5, 0x6, 0x7fffffff, 0x9, 0x3, 0x2}, {0x6, 0x200, 0x0, 0x1000, 0x7fff, 0x40}, {0x5, 0xffff, 0x5, 0x9, 0xf7, 0x4}, {0x0, 0x0, 0x8, 0x3, 0x3, 0x7}, {0xb, 0x2, 0x2, 0x8, 0x4, 0x200}, {0x4, 0x4, 0x8, 0x4, 0xa2, 0xffffff74}, {0x101, 0x6, 0x1, 0x1f, 0xe, 0x9}, {0x400, 0x2, 0xffffffff, 0x1, 0x200, 0xdb}, {0x8, 0x5, 0xf5f5, 0x2, 0x5}, {0xfff, 0x3, 0x8319, 0x5, 0x200, 0x8}, {0x81, 0xd6cd, 0x4, 0xe, 0xb, 0x5}, {0x2, 0x7f, 0x79a, 0x6, 0x8, 0x7}, {0x7, 0x7, 0x2, 0x870, 0x7ff, 0x2}, {0x0, 0x6cf, 0x6, 0x9, 0x10001, 0x200}, {0xe, 0x400, 0xffff0001, 0x10000, 0x0, 0x81}, {0x2, 0x86, 0x7f, 0xe638, 0x5, 0x50}, {0xe6f, 0x6, 0x6, 0x5, 0x8, 0x4}, {0x5f36, 0x4, 0xfffffe00, 0x9, 0x7, 0x849e}, {0x3ff, 0x7ff, 0x7, 0xb3ec, 0x4, 0x7}, {0x4, 0xfffffff9, 0x200, 0x7, 0x66cd, 0x1}, {0x0, 0x4, 0x9, 0x4, 0xfffffff6, 0x10001}, {0x3ff, 0x8, 0xdc4, 0x80, 0x9, 0x5}, {0x2, 0x1, 0x7, 0x0, 0x5, 0x1000}, {0x0, 0xffffffff, 0xb5, 0x0, 0x7, 0x4}, {0x2, 0x7f, 0x4, 0x10000, 0x7, 0x4}, {0x7fff, 0x7d, 0x2, 0x9, 0x80000001, 0x5}, {0x1, 0x2000000, 0xff, 0x5, 0x81, 0x2}, {0x6, 0x9, 0x200, 0x6, 0x7, 0xdb}, {0x7f, 0x0, 0x1000, 0x8, 0x8, 0x8000}, {0x1, 0x8, 0x41d3291f, 0xfff, 0x4, 0x10001}, {0xc64, 0x7, 0x8, 0x0, 0x0, 0xfff}, {0x3d8, 0x200, 0x8, 0x5, 0x7, 0x7fffffff}, {0x9, 0x401, 0x9, 0x0, 0x6}, {0xe0c, 0x0, 0xff, 0x0, 0x7f}, {0x4, 0x8, 0x6, 0x1, 0x6, 0x5}, {0x3, 0x4, 0x7, 0x0, 0x2, 0xffffffff}, {0x7fff, 0x10, 0x9, 0x8, 0x5, 0x4}, {0x3, 0x6, 0x8, 0x3b, 0x9}, {0x9, 0xfffffffa, 0x5, 0x400, 0x7ff, 0x2}, {0x8e, 0x1, 0x81, 0x6, 0x4, 0xb}, {0x27, 0xba, 0x7f, 0x3, 0x80, 0x5}, {0xf, 0x179, 0x3, 0x2, 0x7, 0x7}, {0x9, 0x4, 0x80000000, 0x0, 0x1204, 0x3}, {0x1, 0x9, 0x100000, 0x0, 0xffffff81, 0x5}, {0x1, 0xfffeffff, 0x5, 0x4, 0x0, 0x1e1}, {0x852, 0x1, 0x70000, 0x200, 0x40, 0x3}], [{0x1, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x0, 0xad40ef68dec1f48e}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x2}, {0x0, 0x1}, {0x4, 0x2}, {0x3}, {0x4, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x188ad300a8c5e8af, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x4}, {}, {0x2, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x5}, {0x4}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x7}, {0x5}, {0x2, 0x1}, {0x5}, {0x5}, {0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0xf, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x5}, {0x4}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x2}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x1d48}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000009c0)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e23, 0x5, @private0, 0x8}}}, &(0x7f0000000040)=0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = syz_io_uring_setup(0x5e9, &(0x7f0000000480)={0x0, 0x9e6e, 0x1000, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r11 = accept4(r10, 0x0, 0x0, 0x0) sendmmsg$alg(r11, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe6074bdf1dc41427cb05cdcc0a6bf308e382bd3b0a7", 0x3d}], 0x1, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40000}], 0x1, 0xc0) recvmmsg(r11, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/96, 0x7}, {&(0x7f0000000940)=""/53, 0x35}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x44, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x24}, 0x1}) io_uring_enter(r7, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000), 0x4) execveat(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={[&(0x7f0000000100)='\x00']}, &(0x7f0000000280)={[&(0x7f0000000200)='\x00', &(0x7f0000000240)='\xaa%-&/@!%\x00']}, 0x1000) 4.274802583s ago: executing program 4 (id=2687): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x6, @none, 0xffff}, 0xe) r2 = socket(0x10, 0x803, 0x0) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d00)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES8, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa14"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000008c0)=0x2, 0x4) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r3, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004c040}, 0x20008050) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x5a}, 0x48) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 4.104781669s ago: executing program 0 (id=2688): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, 'lo\x00'}}, 0x1e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$inet(0x2, 0x80001, 0x84) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r7, &(0x7f0000000200)=[{&(0x7f0000000040)=""/57, 0x39}], 0x1, 0x2000000, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r9, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r8], 0x68}}, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000500)="4c80", 0x2}], 0x1) 4.016909377s ago: executing program 2 (id=2689): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc040) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r0}, &(0x7f00000008c0), &(0x7f0000000900)=r1}, 0x20) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={0xffffffffffffffff, r1}) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x0, @local}, 0x2}}, 0x26) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r8, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="e00000001100010008000000fddbdf256d69636861656c5f6d69630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006f0b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002000"/221], 0xe0}, 0x1, 0x0, 0x0, 0x40050}, 0x14040000) 4.005825493s ago: executing program 5 (id=2690): socket$igmp(0x2, 0x3, 0x2) writev(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x4, 0xfffffffe, 0x717e387b, 0x40, "1ae34e06a6ffffff7f0000000040794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x94, "3eccd8000000000000000010000000040100"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x803, 0x0) syz_io_uring_setup(0x130, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140), &(0x7f0000000280)) syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x101040) 3.40763144s ago: executing program 4 (id=2691): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) socket$kcm(0x2, 0xa, 0x2) (async) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r2], 0x20}}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r2], 0x20}}, 0x0) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) 3.329732906s ago: executing program 1 (id=2692): socket$rds(0x15, 0x5, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x400000000000, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r5, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) 3.075175741s ago: executing program 0 (id=2693): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in6=@dev={0xfe, 0x80, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1d}, {0x0, 0x7, 0x7270}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x4, 0x0, 0x400}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty}, 0x1c) (fail_nth: 5) 3.068255365s ago: executing program 4 (id=2694): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xd, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x40000007}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106}}, 0x20) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) add_key$keyring(&(0x7f0000000800), 0x0, 0x0, 0x0, 0x0) keyctl$session_to_parent(0x12) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x31, 0x1, 0x1, "d569e861dd2f1aeb7ee8589325f457a0c04b14100000000096ba216b1e8ac19e", 0x32344d59}) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0x0, &(0x7f0000000180)={0x0, 0x8}, &(0x7f0000000580)) close(0xffffffffffffffff) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000440), 0x43201, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) syz_open_dev$video(&(0x7f0000000040), 0x7, 0x80000) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r4, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1}}], 0x2, 0x40000121, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x3b, &(0x7f00000000c0)=ANY=[]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="0000020000000000280012800b0001006d616373650100c28000eb11f0719469c489fca32d06050003000d00000000000800050000000000000000004d5e04f4c6cfa25c2a52585ec6cf3c5ebc9ca5e5328906ed9d41dfa3fb8aef42dd7bce913f5dffdb3cb583658e0c4787ab7e900ec7a5f4b8f694feb0c7017b296293a83efcfb2d3a9caec2828a33a7d2fba877f5c09fa1fcb3"], 0x48}}, 0x0) 2.937675701s ago: executing program 0 (id=2695): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000000c0)={0x40, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000600)={0x0, 0xf, 0x4, "3857ee75"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000f40)={0x1c, &(0x7f0000000a80)={0x40, 0xf, 0x4, "68ae5e08"}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, &(0x7f0000000ac0)={0x20, 0x6, 0xdf, {0xdf, 0x22, "08adee8d0c2356ae1a22f7982cc74dbaf246685e2de332b3d442669f84c4b1676f0dc6c6cf7235482e5afd8dbb24bf97c5116795ed1875afa52823f74288499d5bf6c25773ec4962c64305942af902baf14882375bd74a2dce2a01c93fc69684ea01855b58d1ecf1073138f4a8efa1c770e314b9790d2a36470923933453942963f2b67e39a4b54adcc19d3d1a22607c4db11bbf0001a7d410e4a7b846965d3d3aaf5bef4578d0159bf42a86a5e7fa55d996dc37b036afba59d7bd990e305395210103c9c8c600b35bfc635fc1e3b0a670b9f0fe226309558cf9a9601b"}}, &(0x7f0000000c40)={0x0, 0x3, 0x99, @string={0x99, 0x3, "9bf9c08ae716a4427278625c187c2633e256a014951bbf0a408774ed6aac0d37c2542be828f02301e0a5724677d3da2e02e33048576048fa8883c1c5679a6805d4bd07bb8736bef9f9f7662f4f1354588ee4bd2ef795f307683100caac16f60af93f01ff372bbb068d19306b8481b150c88f7b7cd79c39585a487842b358ea3b337bea1f182f25cc2c69708b43abb37e533603fc2566e1"}}, &(0x7f0000000200)={0x0, 0x22, 0xe, {[@global=@item_012={0x0, 0x1, 0x4}, @local=@item_012={0x1, 0x2, 0x4, "c9"}, @local=@item_012={0x1, 0x2, 0x9, "9d"}, @main=@item_012={0x2, 0x0, 0x8, "7f3e"}, @global=@item_4={0x3, 0x1, 0x0, "bfd3e3f0"}, @main=@item_012={0x0, 0x0, 0xa}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7d76, 0x7, 0x1, {0x22, 0xfd1}}}}, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d00)={0x20, 0xf, 0x74, "7c94bf38a0e6b2027443a59ca5cec0ef3e42a7a1d6213e2d0d92d982ee814d074529c9c3b304cd5e1e1e27d57791f633092b6fe13c73ab52f64e1fbd3be6faf27633414cb7b83a083278e10dd18b0cd9f050500ba2096f114f3108ab256f05b4aa0c8dc914fcf0886e8989a2a45d0824c709da5f"}, &(0x7f0000000e00)={0x0, 0xa, 0x1, 0x62}, &(0x7f0000000e40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000e80)={0x20, 0x1, 0xb5, "be31f18610c5fda69e529a615f1cd2ec728b6bb12d21f3b3b97a4422a9394453c1df75eb2e804522d6e73bc5ccf39ac2e600533c663467ccb5aabfa16c8cc115e1724f16f7f926dbf2c7b699462075608eca4663285657cdf2022751aac87171d3861144357238612b7b0ef967c0e00b23b898185c9d8791a33bea20a75826a4837e91ded2d59814fdaaff89a02368cf1c489ff899d280df4c00be06680e58439500a8e31408e8b319cab9fe3ef4e3229a709edb8f"}, &(0x7f0000000f80)={0x20, 0x3, 0x1, 0x3}}) 2.682293399s ago: executing program 2 (id=2696): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18}, 0x18) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r7, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r6, &(0x7f00000004c0)={0x18}, 0x18) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000004200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000340)={0x50, 0x0, r9, {0x7, 0x2b, 0xe62b, 0x27, 0x7ff, 0x8, 0x6, 0x5, 0x0, 0x0, 0x8, 0x10001}}, 0x50) write$FUSE_INIT(r6, &(0x7f0000000200)={0x50, 0x0, r9, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_fscache}]}}) r12 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$FUSE_ATTR(r12, &(0x7f0000000140)={0x78, 0x0, r9, {0x254, 0x4, 0x0, {0x5, 0x10001, 0x7, 0x9, 0x65e6, 0xcf93, 0x3, 0x2, 0x6, 0xa000, 0x8000000, r10, r11, 0x2, 0x80}}}, 0x78) truncate(&(0x7f0000000040)='./file0\x00', 0x10000) 2.561094236s ago: executing program 2 (id=2697): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FITHAW(r1, 0xc0045878) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x680800, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) r6 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0x40000014}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) syz_clone3(&(0x7f00000004c0)={0x11010280, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)=0x0, {0x36}, &(0x7f0000001100)=""/4096, 0x1000, &(0x7f00000003c0)=""/199, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x6}, 0x58) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/partitions\x00', 0x0, 0x0) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000600)={r8, 0x0, 0xffffffffffffffff}, 0xc) r9 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r9, 0x6b, 0x3, &(0x7f0000000840), &(0x7f0000000880)=0x4) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x80, 0x40, 0x10001, 0x28d, {{0x16, 0x4, 0x3, 0x8, 0x58, 0x67, 0x0, 0x1, 0x29, 0x0, @broadcast, @loopback, {[@timestamp_addr={0x44, 0x44, 0xf, 0x1, 0xd, [{@multicast1, 0x8}, {@remote, 0x7ff}, {@empty, 0x45d}, {@loopback, 0x1}, {@loopback, 0x8}, {@broadcast, 0x9}, {@empty, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}]}}}}}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) 1.066624767s ago: executing program 2 (id=2698): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, 0x0, 0x8d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000001600)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0xffffffffffffff0f}, 0x48) r8 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000180)={r6, r7}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) 602.437933ms ago: executing program 5 (id=2699): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FITHAW(r1, 0xc0045878) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x680800, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) r6 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0x40000014}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) syz_clone3(&(0x7f00000004c0)={0x11010280, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)=0x0, {0x36}, &(0x7f0000001100)=""/4096, 0x1000, &(0x7f00000003c0)=""/199, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x6}, 0x58) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/partitions\x00', 0x0, 0x0) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000600)={r8, 0x0, 0xffffffffffffffff}, 0xc) r9 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r9, 0x6b, 0x3, &(0x7f0000000840), &(0x7f0000000880)=0x4) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x80, 0x40, 0x10001, 0x28d, {{0x16, 0x4, 0x3, 0x8, 0x58, 0x67, 0x0, 0x1, 0x29, 0x0, @broadcast, @loopback, {[@timestamp_addr={0x44, 0x44, 0xf, 0x1, 0xd, [{@multicast1, 0x8}, {@remote, 0x7ff}, {@empty, 0x45d}, {@loopback, 0x1}, {@loopback, 0x8}, {@broadcast, 0x9}, {@empty, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}]}}}}}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) 575.915291ms ago: executing program 4 (id=2700): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x6, @none, 0xffff}, 0xe) r1 = socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d00)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES8, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa14"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000008c0)=0x2, 0x4) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r3, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004c040}, 0x20008050) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x5a}, 0x48) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 68.382434ms ago: executing program 1 (id=2701): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x20000045) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x10, 0x1407, 0x1, 0x70bd27, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40844) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x9, 0xfff, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0x2}, @struct={0x5, 0x3, 0x0, 0x4, 0x1, 0x253, [{0xa, 0x5, 0x8}, {0x3, 0x4, 0x8}, {0x3, 0x805}]}, @var={0xb, 0x0, 0x0, 0xe, 0x4, 0x1}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x6c}, 0x28) read$msr(0xffffffffffffffff, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@deltclass={0x24, 0x29, 0x10, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff2}, {0xffe0, 0x3}, {0x8, 0xfff2}}}, 0x24}, 0x1, 0x2b1e, 0x0, 0x40}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup(r3) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e657400000005000400"], 0x64}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x115441) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000240)={{0x3, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) 0s ago: executing program 2 (id=2702): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x6, @none, 0xffff}, 0xe) r2 = socket(0x10, 0x803, 0x0) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d00)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES8, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa14"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000008c0)=0x2, 0x4) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r3, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004c040}, 0x20008050) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x5a}, 0x48) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) kernel console output (not intermixed with test programs): 6bd318eec9 code=0x7ffc0000 [ 819.251065][ T5875] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 819.557871][ T30] audit: type=1326 audit(819.069:3283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15479 comm="syz.5.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6bd318eec9 code=0x7ffc0000 [ 819.615855][ T30] audit: type=1326 audit(819.069:3284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15479 comm="syz.5.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bd318eec9 code=0x7ffc0000 [ 819.640715][ T30] audit: type=1326 audit(819.069:3285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15479 comm="syz.5.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bd318eec9 code=0x7ffc0000 [ 819.664834][T15470] [U] [ 819.700142][ T30] audit: type=1326 audit(819.069:3286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15479 comm="syz.5.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f6bd318eec9 code=0x7ffc0000 [ 819.732039][T15493] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2423'. [ 819.747718][T15493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2423'. [ 819.760259][ T5875] usb 3-1: Using ep0 maxpacket: 32 [ 819.771032][ T5875] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 819.779768][ T5875] usb 3-1: config 0 has no interface number 0 [ 819.792469][ T5875] usb 3-1: config 0 interface 184 has no altsetting 0 [ 819.807698][T15495] binder: 15494:15495 ioctl ae01 2b returned -22 [ 819.817976][ T5875] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 819.832839][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.848102][ T5875] usb 3-1: Product: syz [ 819.850041][ T5942] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 819.852600][ T5875] usb 3-1: Manufacturer: syz [ 819.872410][ T5875] usb 3-1: SerialNumber: syz [ 819.887743][ T5875] usb 3-1: config 0 descriptor?? [ 819.923757][ T5875] smsc75xx v1.0.0 [ 820.070015][ T5835] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 820.077762][ T5942] usb 5-1: device descriptor read/64, error -71 [ 820.535728][ T5835] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 820.572089][ T5942] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 820.605901][ T5835] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 820.618695][ T5835] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 820.635856][ T5835] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 820.647250][ T5835] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 820.659676][ T5835] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 820.668819][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 820.677395][ T5835] usb 6-1: Product: syz [ 820.682118][ T5835] usb 6-1: Manufacturer: syz [ 820.694529][ T5835] cdc_wdm 6-1:1.0: skipping garbage [ 820.701042][ T5835] cdc_wdm 6-1:1.0: skipping garbage [ 820.735428][ T5835] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 820.741745][ T5942] usb 5-1: device descriptor read/64, error -71 [ 820.748598][ T5835] cdc_wdm 6-1:1.0: Unknown control protocol [ 820.764059][T15505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2427'. [ 820.850495][ T5942] usb usb5-port1: attempt power cycle [ 820.918041][T15492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.928907][T15492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.035726][ T5875] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 821.047855][ T5875] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 821.057768][ T5875] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 821.069146][ T5875] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 821.352182][ T5942] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 821.381323][ T5942] usb 5-1: device descriptor read/8, error -71 [ 821.620060][ T5942] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 821.692726][ T5942] usb 5-1: device descriptor read/8, error -71 [ 821.790278][ T5875] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 821.801004][ T5875] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 821.837882][ T5875] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 821.874030][T15516] FAULT_INJECTION: forcing a failure. [ 821.874030][T15516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 821.887202][T15516] CPU: 0 UID: 0 PID: 15516 Comm: syz.1.2430 Not tainted syzkaller #0 PREEMPT(full) [ 821.887227][T15516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 821.887238][T15516] Call Trace: [ 821.887244][T15516] [ 821.887251][T15516] dump_stack_lvl+0x16c/0x1f0 [ 821.887278][T15516] should_fail_ex+0x512/0x640 [ 821.887301][T15516] _copy_from_user+0x2e/0xd0 [ 821.887318][T15516] copy_msghdr_from_user+0x98/0x160 [ 821.887333][T15516] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 821.887360][T15516] ___sys_sendmsg+0xfe/0x1d0 [ 821.887383][T15516] ? __pfx____sys_sendmsg+0x10/0x10 [ 821.887432][T15516] __sys_sendmsg+0x16d/0x220 [ 821.887445][T15516] ? __pfx___sys_sendmsg+0x10/0x10 [ 821.887468][T15516] do_syscall_64+0xcd/0x4e0 [ 821.887483][T15516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.887497][T15516] RIP: 0033:0x7f03c6d8eec9 [ 821.887513][T15516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.887529][T15516] RSP: 002b:00007f03c7cd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 821.887546][T15516] RAX: ffffffffffffffda RBX: 00007f03c6fe5fa0 RCX: 00007f03c6d8eec9 [ 821.887557][T15516] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 821.887567][T15516] RBP: 00007f03c7cd5090 R08: 0000000000000000 R09: 0000000000000000 [ 821.887577][T15516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.887583][T15516] R13: 00007f03c6fe6038 R14: 00007f03c6fe5fa0 R15: 00007ffc5b9cff98 [ 821.887597][T15516] [ 822.047736][ T5942] usb usb5-port1: unable to enumerate USB device [ 822.135140][T15519] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2431'. [ 822.188637][T15522] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2432'. [ 822.198353][T15522] netlink: zone id is out of range [ 822.203587][T15522] netlink: zone id is out of range [ 822.208742][T15522] netlink: zone id is out of range [ 822.215132][T15522] netlink: zone id is out of range [ 822.220559][T15522] netlink: get zone limit has 8 unknown bytes [ 822.616031][ T5875] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 823.195334][ T5835] usb 6-1: USB disconnect, device number 41 [ 823.217289][ T5875] usb 2-1: Using ep0 maxpacket: 8 [ 823.301515][ T5875] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 823.309875][ T5875] usb 2-1: config 179 has no interface number 0 [ 823.325220][ T5875] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 823.337624][ T5894] usb 3-1: USB disconnect, device number 77 [ 823.351485][ T5875] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 823.368498][ T5875] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 823.380038][ T5875] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 823.400753][ T5875] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 823.511738][ T5875] usb 2-1: config 179 interface 65 has no altsetting 0 [ 823.518761][ T5875] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 823.528215][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.546170][ T5875] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input44 [ 823.639240][ T5835] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 823.865853][ T5835] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 823.908798][ T5835] usb 6-1: config 0 interface 0 has no altsetting 0 [ 823.948149][ T5835] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 823.975704][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 824.027007][ T5835] usb 6-1: Product: syz [ 824.042502][ T5835] usb 6-1: Manufacturer: syz [ 824.047785][ T5835] usb 6-1: SerialNumber: syz [ 824.066362][ T5177] input input44: unable to receive magic message: -71 [ 824.071517][ T5835] usb 6-1: config 0 descriptor?? [ 824.083681][ T5177] input input44: unable to receive magic message: -71 [ 824.094548][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 824.094577][ T5835] usb 6-1: selecting invalid altsetting 0 [ 824.102979][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 824.103328][ T5875] usb 2-1: USB disconnect, device number 73 [ 824.124223][ T5817] usb 5-1: new low-speed USB device number 73 using dummy_hcd [ 824.279239][ T5894] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 824.313456][ T5817] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 824.325148][ T5817] usb 5-1: config 0 has no interface number 0 [ 824.335799][ T5817] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 824.346907][ T5817] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 824.358049][ T5817] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 824.372431][ T5817] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 824.384581][ T5817] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 824.395865][ T5817] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 824.409225][ T5817] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 824.433832][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.450563][ T5817] usb 5-1: config 0 descriptor?? [ 824.455614][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 824.461873][T15543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2439'. [ 824.475289][T15531] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 824.484306][T15531] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 824.491808][ T5894] usb 3-1: config 0 has an invalid interface number: 247 but max is 0 [ 824.501030][ T5894] usb 3-1: config 0 has no interface number 0 [ 824.513689][ T5817] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 824.531898][ T5894] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 824.635596][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 824.658011][ T5894] usb 3-1: Product: syz [ 824.662430][ T5894] usb 3-1: Manufacturer: syz [ 824.669868][ T5894] usb 3-1: config 0 descriptor?? [ 824.709443][ T5894] usb 6-1: USB disconnect, device number 42 [ 825.441679][T15545] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2434'. [ 825.645163][T15557] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2440'. [ 825.720318][ T5894] usb 3-1: USB disconnect, device number 78 [ 825.971739][ T5875] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 826.110046][ T5875] usb 1-1: device descriptor read/64, error -71 [ 826.322883][T15561] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2442'. [ 826.362472][ T5875] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 826.392692][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 826.512478][ T5894] usb 5-1: USB disconnect, device number 73 [ 826.531399][ T5894] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 826.535717][ T30] audit: type=1326 audit(826.319:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15559 comm="syz.1.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c6d8eec9 code=0x7ffc0000 [ 826.719878][ T5875] usb 1-1: device descriptor read/64, error -71 [ 826.765755][ T30] audit: type=1326 audit(826.319:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15559 comm="syz.1.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c6d8eec9 code=0x7ffc0000 [ 827.235788][ T5875] usb usb1-port1: attempt power cycle [ 827.242217][ T30] audit: type=1326 audit(826.329:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15559 comm="syz.1.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f03c6d8eec9 code=0x7ffc0000 [ 827.265289][ T30] audit: type=1326 audit(826.329:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15559 comm="syz.1.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c6d8eec9 code=0x7ffc0000 [ 827.340169][ T30] audit: type=1326 audit(826.329:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15559 comm="syz.1.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c6d8eec9 code=0x7ffc0000 [ 827.514962][ T30] audit: type=1326 audit(826.329:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15559 comm="syz.1.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f03c6d8eec9 code=0x7ffc0000 [ 827.538427][ T30] audit: type=1326 audit(826.329:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15559 comm="syz.1.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c6d8eec9 code=0x7ffc0000 [ 827.607834][ T5875] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 827.993330][ T30] audit: type=1326 audit(826.329:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15559 comm="syz.1.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c6d8eec9 code=0x7ffc0000 [ 828.039754][ T30] audit: type=1326 audit(826.329:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15559 comm="syz.1.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f03c6d8eec9 code=0x7ffc0000 [ 828.044024][ T5875] usb 1-1: device descriptor read/8, error -71 [ 828.064901][ T30] audit: type=1326 audit(826.329:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15559 comm="syz.1.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c6d8eec9 code=0x7ffc0000 [ 828.958573][ T5875] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 829.114594][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 829.133169][ T5875] usb 1-1: device descriptor read/8, error -32 [ 829.467708][ T5875] usb usb1-port1: unable to enumerate USB device [ 829.701382][T15594] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2451'. [ 829.738077][T15594] netlink: zone id is out of range [ 829.750042][T15594] netlink: zone id is out of range [ 829.765044][T15594] netlink: zone id is out of range [ 829.810277][T15594] netlink: zone id is out of range [ 829.815443][T15594] netlink: get zone limit has 8 unknown bytes [ 830.270060][ T5942] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 830.312179][T15618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2460'. [ 830.400241][ T5875] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 830.430061][ T5942] usb 5-1: Using ep0 maxpacket: 8 [ 830.453080][ T5942] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 830.472911][ T5942] usb 5-1: config 179 has no interface number 0 [ 830.816055][ T5875] usb 1-1: Using ep0 maxpacket: 32 [ 831.630677][T15626] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 831.637121][T15626] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 831.643723][ T5942] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 831.662595][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 831.662613][ T30] audit: type=1800 audit(830.519:3341): pid=15624 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2461" name="bus" dev="overlay" ino=2722 res=0 errno=0 [ 831.666305][ T5875] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 831.680573][ T30] audit: type=1400 audit(830.639:3342): avc: denied { write } for pid=15619 comm="syz.2.2461" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 831.690513][ T5875] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 831.730027][ T5942] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 831.732797][ T5875] usb 1-1: config 0 interface 0 has no altsetting 0 [ 831.747822][T15626] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 831.766269][ T30] audit: type=1400 audit(830.649:3343): avc: denied { ioctl } for pid=15619 comm="syz.2.2461" path="/dev/ptp0" dev="devtmpfs" ino=1264 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 831.790725][ C0] vkms_vblank_simulate: vblank timer overrun [ 831.797453][ T5942] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 831.809196][ T5875] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=dc.8e [ 831.818658][T15626] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 831.825796][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.834253][ T5875] usb 1-1: Product: syz [ 831.838470][ T5875] usb 1-1: Manufacturer: syz [ 831.843873][ T5875] usb 1-1: SerialNumber: syz [ 831.858673][ T5875] usb 1-1: config 0 descriptor?? [ 831.870354][T15626] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 831.876911][ T5942] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 831.892037][T15626] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 831.900269][ T5942] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 831.918606][T15626] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 831.920955][ T5942] usb 5-1: config 179 interface 65 has no altsetting 0 [ 831.932779][T15626] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 831.939305][T15626] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 831.940223][ T5942] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 831.955412][T15626] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 831.962939][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.964217][T15626] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 831.971147][ T5835] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 831.977577][T15626] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 831.996418][T15626] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 832.004677][T15626] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 832.018089][ T5942] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input46 [ 832.084185][T15631] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 832.103766][ T5177] input input46: unable to receive magic message: -110 [ 832.113989][ T5177] input input46: unable to receive magic message: -32 [ 832.222259][ T5177] input input46: unable to receive magic message: -32 [ 832.233540][ T5835] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.244202][ T5835] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 832.246274][ T5894] usb 5-1: USB disconnect, device number 74 [ 832.253192][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 832.267647][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 832.756622][ T5875] gs_usb 1-1:0.0: Couldn't get device config: (err=-121) [ 832.763936][ T5875] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 833.673977][ T5835] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 833.683129][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.693382][ T9] usb 1-1: USB disconnect, device number 66 [ 833.766481][ T5835] usb 6-1: config 0 descriptor?? [ 834.097756][T15643] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2467'. [ 834.111683][ T30] audit: type=1400 audit(834.089:3344): avc: denied { ioctl } for pid=15642 comm="syz.4.2467" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 ioctlcmd=0x640b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 834.137869][ C0] vkms_vblank_simulate: vblank timer overrun [ 834.173878][ T30] audit: type=1400 audit(834.089:3345): avc: denied { ioctl } for pid=15642 comm="syz.4.2467" path="socket:[54524]" dev="sockfs" ino=54524 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 834.208558][T15649] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2466'. [ 834.240151][T15629] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2462'. [ 834.252533][T15629] netlink: 'syz.5.2462': attribute type 1 has an invalid length. [ 834.391848][ T9] usb 6-1: USB disconnect, device number 43 [ 834.901338][ T30] audit: type=1400 audit(834.869:3346): avc: denied { ioctl } for pid=15662 comm="syz.0.2471" path="socket:[53884]" dev="sockfs" ino=53884 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 834.925806][ C0] vkms_vblank_simulate: vblank timer overrun [ 834.971385][T15666] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.2472'. [ 835.370563][T15670] FAULT_INJECTION: forcing a failure. [ 835.370563][T15670] name failslab, interval 1, probability 0, space 0, times 0 [ 835.383357][ T30] audit: type=1400 audit(834.879:3347): avc: denied { setopt } for pid=15662 comm="syz.0.2471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 835.402570][ C0] vkms_vblank_simulate: vblank timer overrun [ 835.440654][T15670] CPU: 1 UID: 0 PID: 15670 Comm: syz.0.2473 Not tainted syzkaller #0 PREEMPT(full) [ 835.440671][T15670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 835.440678][T15670] Call Trace: [ 835.440682][T15670] [ 835.440687][T15670] dump_stack_lvl+0x16c/0x1f0 [ 835.440706][T15670] should_fail_ex+0x512/0x640 [ 835.440721][T15670] ? __kmalloc_noprof+0xca/0x880 [ 835.440739][T15670] should_failslab+0xc2/0x120 [ 835.440760][T15670] __kmalloc_noprof+0xdd/0x880 [ 835.440776][T15670] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 835.440799][T15670] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 835.440817][T15670] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 835.440837][T15670] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 835.440855][T15670] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 835.440877][T15670] ? bpf_lsm_capable+0x9/0x10 [ 835.440891][T15670] ? security_capable+0x7e/0x260 [ 835.440910][T15670] ? ns_capable+0xd7/0x110 [ 835.440927][T15670] genl_rcv_msg+0x55c/0x800 [ 835.440945][T15670] ? __pfx_genl_rcv_msg+0x10/0x10 [ 835.440962][T15670] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 835.440976][T15670] ? __pfx_nl80211_new_key+0x10/0x10 [ 835.440985][T15670] ? __pfx_nl80211_post_doit+0x10/0x10 [ 835.441007][T15670] netlink_rcv_skb+0x155/0x420 [ 835.441022][T15670] ? __pfx_genl_rcv_msg+0x10/0x10 [ 835.441039][T15670] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 835.441060][T15670] ? netlink_deliver_tap+0x1ae/0xd30 [ 835.441076][T15670] genl_rcv+0x28/0x40 [ 835.441090][T15670] netlink_unicast+0x5aa/0x870 [ 835.441108][T15670] ? __pfx_netlink_unicast+0x10/0x10 [ 835.441122][T15670] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 835.441141][T15670] netlink_sendmsg+0x8c8/0xdd0 [ 835.441158][T15670] ? __pfx_netlink_sendmsg+0x10/0x10 [ 835.441178][T15670] ____sys_sendmsg+0xa95/0xc70 [ 835.441196][T15670] ? copy_msghdr_from_user+0x10a/0x160 [ 835.441210][T15670] ? __pfx_____sys_sendmsg+0x10/0x10 [ 835.441232][T15670] ___sys_sendmsg+0x134/0x1d0 [ 835.441247][T15670] ? __pfx____sys_sendmsg+0x10/0x10 [ 835.441277][T15670] __sys_sendmsg+0x16d/0x220 [ 835.441290][T15670] ? __pfx___sys_sendmsg+0x10/0x10 [ 835.441313][T15670] do_syscall_64+0xcd/0x4e0 [ 835.441328][T15670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.441339][T15670] RIP: 0033:0x7f6c12f8eec9 [ 835.441349][T15670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 835.441359][T15670] RSP: 002b:00007f6c13d63038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 835.441370][T15670] RAX: ffffffffffffffda RBX: 00007f6c131e5fa0 RCX: 00007f6c12f8eec9 [ 835.441377][T15670] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 835.441384][T15670] RBP: 00007f6c13d63090 R08: 0000000000000000 R09: 0000000000000000 [ 835.441390][T15670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 835.441397][T15670] R13: 00007f6c131e6038 R14: 00007f6c131e5fa0 R15: 00007ffd2f9d4188 [ 835.441410][T15670] [ 835.761399][ T5875] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 835.879521][T15676] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 836.010491][ T5875] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 836.018518][ T5875] usb 2-1: config 0 has no interface number 0 [ 836.026274][ T5875] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 836.035338][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.066386][ T5875] usb 2-1: config 0 descriptor?? [ 836.512371][ T5875] usb 2-1: selecting invalid altsetting 1 [ 836.619089][ T5875] dvb_ttusb_budget: ttusb_init_controller: error [ 836.645920][ T5875] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 837.394121][ T5875] DVB: Unable to find symbol cx22700_attach() [ 837.460250][T15689] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2478'. [ 837.545109][ T5875] DVB: Unable to find symbol tda10046_attach() [ 837.553998][ T5875] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 837.629846][ T5875] usb 2-1: USB disconnect, device number 74 [ 837.804266][T15697] FAULT_INJECTION: forcing a failure. [ 837.804266][T15697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 837.843099][T15697] CPU: 0 UID: 0 PID: 15697 Comm: syz.5.2483 Not tainted syzkaller #0 PREEMPT(full) [ 837.843128][T15697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 837.843138][T15697] Call Trace: [ 837.843145][T15697] [ 837.843154][T15697] dump_stack_lvl+0x16c/0x1f0 [ 837.843183][T15697] should_fail_ex+0x512/0x640 [ 837.843206][T15697] _copy_from_user+0x2e/0xd0 [ 837.843229][T15697] ioctl_standard_iw_point+0x513/0xca0 [ 837.843254][T15697] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 837.843278][T15697] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 837.843300][T15697] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 837.843323][T15697] ? __pfx___mutex_lock+0x10/0x10 [ 837.843348][T15697] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 837.843368][T15697] ioctl_standard_call+0x166/0x1d0 [ 837.843390][T15697] ? __pfx_ioctl_standard_call+0x10/0x10 [ 837.843409][T15697] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 837.843428][T15697] wireless_process_ioctl.constprop.0+0x291/0x3d0 [ 837.843453][T15697] wext_handle_ioctl+0x226/0x2a0 [ 837.843476][T15697] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 837.843501][T15697] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 837.843527][T15697] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 837.843549][T15697] sock_ioctl+0x3a1/0x6b0 [ 837.843561][T15697] ? __pfx_sock_ioctl+0x10/0x10 [ 837.843569][T15697] ? hook_file_ioctl_common+0x145/0x410 [ 837.843589][T15697] ? selinux_file_ioctl+0x180/0x270 [ 837.843602][T15697] ? selinux_file_ioctl+0xb4/0x270 [ 837.843615][T15697] ? __pfx_sock_ioctl+0x10/0x10 [ 837.843625][T15697] __x64_sys_ioctl+0x18e/0x210 [ 837.843643][T15697] do_syscall_64+0xcd/0x4e0 [ 837.843658][T15697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.843670][T15697] RIP: 0033:0x7f6bd318eec9 [ 837.843680][T15697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 837.843691][T15697] RSP: 002b:00007f6bd3fe6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 837.843703][T15697] RAX: ffffffffffffffda RBX: 00007f6bd33e5fa0 RCX: 00007f6bd318eec9 [ 837.843710][T15697] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000004 [ 837.843716][T15697] RBP: 00007f6bd3fe6090 R08: 0000000000000000 R09: 0000000000000000 [ 837.843723][T15697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 837.843729][T15697] R13: 00007f6bd33e6038 R14: 00007f6bd33e5fa0 R15: 00007ffd1cfecf38 [ 837.843751][T15697] [ 837.850035][ T42] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 838.452000][ T42] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 838.493466][ T42] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 838.508401][ T42] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 838.519341][ T42] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 838.530592][ T42] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 838.544412][ T42] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 838.587795][ T42] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 838.616818][ T42] usb 5-1: Product: syz [ 838.621367][ T42] usb 5-1: Manufacturer: syz [ 838.642562][ T42] cdc_wdm 5-1:1.0: skipping garbage [ 838.647882][ T42] cdc_wdm 5-1:1.0: skipping garbage [ 838.670912][ T42] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 838.680898][ T42] cdc_wdm 5-1:1.0: Unknown control protocol [ 838.855848][T15691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.865998][T15691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.867931][ T52] Bluetooth: hci1: ISO packet too small [ 839.068253][T15717] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 840.043888][T15734] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 840.051929][T15734] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 840.116076][T15734] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 840.139832][T15734] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 840.153121][T15734] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 840.160414][ T42] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 840.168272][T15734] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 840.176438][T15739] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 840.177879][T15734] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 840.195691][T15734] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 840.205862][T15734] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 840.212953][T15734] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 840.219394][T15734] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 840.227738][T15734] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 840.237321][T15734] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 840.245819][T15734] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 840.361925][ T42] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 840.485770][ T42] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 840.505873][ T42] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 840.708358][ T9] usb 5-1: USB disconnect, device number 75 [ 841.030266][ T42] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 841.090222][ T42] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 841.214162][ T42] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 841.230851][ T42] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 841.239400][ T42] usb 6-1: Product: syz [ 841.243793][ T42] usb 6-1: Manufacturer: syz [ 841.263607][ T42] cdc_wdm 6-1:1.0: skipping garbage [ 841.268857][ T42] cdc_wdm 6-1:1.0: skipping garbage [ 841.282460][ T42] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 841.292078][ T42] cdc_wdm 6-1:1.0: Unknown control protocol [ 841.315378][T15754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2498'. [ 841.434775][ T30] audit: type=1326 audit(841.409:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15758 comm="syz.1.2501" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f03c6d8eec9 code=0x0 [ 841.479762][T15728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 841.489869][T15728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 841.848577][ C0] wdm_int_callback: 7 callbacks suppressed [ 841.848602][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 841.861018][ C0] wdm_int_callback: 7 callbacks suppressed [ 841.861036][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 841.877473][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 841.884094][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 841.890429][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 841.897018][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 841.903400][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 841.909983][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 841.916222][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 841.922807][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 841.929072][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 841.935655][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 841.941906][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 841.948489][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 841.954739][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 841.961319][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 841.967557][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 841.974139][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 841.980436][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 841.987023][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 842.005824][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 842.015033][ T9] usb 6-1: USB disconnect, device number 44 [ 842.166749][ T30] audit: type=1400 audit(842.139:3349): avc: denied { create } for pid=15770 comm="syz.4.2504" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 842.491711][T15775] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 842.499779][T15775] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 842.508645][T15775] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 842.516492][T15775] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 843.468642][ T30] audit: type=1400 audit(842.509:3350): avc: denied { connect } for pid=15770 comm="syz.4.2504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 843.564314][ T30] audit: type=1400 audit(842.509:3351): avc: denied { write } for pid=15770 comm="syz.4.2504" lport=28195 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 843.635627][ T30] audit: type=1400 audit(843.609:3352): avc: denied { unlink } for pid=5826 comm="syz-executor" name="file0" dev="tmpfs" ino=2718 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 844.402122][ T5875] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 844.664439][ T5875] usb 6-1: config index 0 descriptor too short (expected 65307, got 27) [ 844.690562][ T5875] usb 6-1: config 49 has too many interfaces: 255, using maximum allowed: 32 [ 844.715181][ T5875] usb 6-1: config 49 has an invalid descriptor of length 54, skipping remainder of the config [ 844.736538][ T5875] usb 6-1: config 49 has 0 interfaces, different from the descriptor's value: 255 [ 844.746284][ T5875] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 844.757725][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.902854][T15800] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.2510'. [ 845.018354][ T30] audit: type=1400 audit(844.989:3353): avc: denied { append } for pid=15781 comm="syz.5.2507" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 845.166509][T15782] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2507'. [ 845.320042][ T9] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 845.330052][T15782] hsr_slave_1 (unregistering): left promiscuous mode [ 845.376163][ T5875] usb 6-1: string descriptor 0 read error: -71 [ 845.393982][ T5875] usb 6-1: USB disconnect, device number 45 [ 845.985059][ T5835] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 846.012407][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 846.020476][ T9] usb 3-1: config 0 has no interface number 0 [ 846.027645][ T9] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 846.037731][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.063806][ T9] usb 3-1: config 0 descriptor?? [ 846.081397][ T9] usb 3-1: selecting invalid altsetting 1 [ 846.114778][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 846.135597][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 846.156519][ T5835] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 846.198314][ T5835] usb 1-1: config 0 interface 0 has no altsetting 0 [ 846.271064][T15820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2517'. [ 846.292500][ T9] DVB: Unable to find symbol cx22700_attach() [ 846.302378][ T5835] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 846.313436][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 846.325062][ T5835] usb 1-1: Product: syz [ 846.329249][ T5835] usb 1-1: Manufacturer: syz [ 846.334610][ T5835] usb 1-1: SerialNumber: syz [ 846.350473][ T5835] usb 1-1: config 0 descriptor?? [ 846.357629][T15820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2517'. [ 846.383707][T15821] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2515'. [ 846.396383][ T5835] usb 1-1: selecting invalid altsetting 0 [ 846.413649][ T9] DVB: Unable to find symbol tda10046_attach() [ 846.444632][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 846.502531][ T30] audit: type=1400 audit(846.459:3354): avc: denied { map } for pid=15823 comm="syz.4.2518" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 846.652630][ T30] audit: type=1400 audit(846.459:3355): avc: denied { execute } for pid=15823 comm="syz.4.2518" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 846.732876][ T9] usb 3-1: USB disconnect, device number 79 [ 846.949104][ T5835] usb 1-1: USB disconnect, device number 67 [ 847.164736][T15829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2512'. [ 847.207259][T15833] netlink: 'syz.1.2520': attribute type 33 has an invalid length. [ 847.215344][T15833] netlink: 51 bytes leftover after parsing attributes in process `syz.1.2520'. [ 847.286651][T15834] fuse: Unknown parameter 'f]' [ 847.297068][ T30] audit: type=1400 audit(847.259:3356): avc: denied { setattr } for pid=15832 comm="syz.4.2521" name="card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 847.319649][ C1] vkms_vblank_simulate: vblank timer overrun [ 848.170626][T15850] usb usb5: usbfs: process 15850 (syz.1.2526) did not claim interface 0 before use [ 848.190456][T15850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2526'. [ 848.199473][T15850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2526'. [ 848.273981][ T30] audit: type=1400 audit(848.139:3357): avc: denied { bind } for pid=15844 comm="syz.1.2526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 848.847691][T15851] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 848.884976][T15851] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 848.890080][T15856] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2528'. [ 849.185798][T15855] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.193192][T15855] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.255349][T15878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2532'. [ 849.413460][T15878] hfs: unable to load iocharset "io#harset" [ 850.064959][T15855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 850.112379][T15855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 850.667474][T15901] comedi comedi3: pcl812: I/O port conflict (0xfffffffffffffffe,16) [ 851.482589][T15857] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 851.490429][T15857] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 851.663609][ T67] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.692254][ T67] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.715847][ T67] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.729828][ T67] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.804693][T15917] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2542'. [ 851.931213][T15882] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 851.940066][ T42] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 852.080359][T15890] usb 5-1: new low-speed USB device number 76 using dummy_hcd [ 852.091314][T15882] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 852.102472][T15882] usb 6-1: config 0 interface 0 has no altsetting 0 [ 852.103645][ T42] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 852.109203][T15882] usb 6-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 852.119816][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 852.128379][T15882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.136977][ T42] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 852.145219][T15882] usb 6-1: config 0 descriptor?? [ 852.157525][ T42] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 852.157551][ T42] usb 2-1: Product: syz [ 852.157566][ T42] usb 2-1: Manufacturer: syz [ 852.157583][ T42] usb 2-1: SerialNumber: syz [ 852.175578][T15911] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 852.194837][ T42] usb 2-1: config 0 descriptor?? [ 852.253845][T15890] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 852.262964][T15890] usb 5-1: config 0 has no interface number 0 [ 852.269229][T15890] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 852.281363][T15890] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 852.295386][ T42] usb 2-1: selecting invalid altsetting 0 [ 852.303667][T15890] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 852.316419][T15890] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 852.329373][T15890] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 852.343804][T15890] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 852.362891][T15890] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 852.372036][T15890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.403452][T15890] usb 5-1: config 0 descriptor?? [ 852.418183][T15919] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 852.428300][T15919] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 852.447391][T15890] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 852.695281][T15929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57847 sclass=netlink_route_socket pid=15929 comm=syz.2.2546 [ 852.734286][ T30] audit: type=1400 audit(852.689:3358): avc: denied { listen } for pid=15926 comm="syz.2.2546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 852.970069][T15890] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 853.328704][T15890] usb 3-1: device descriptor read/64, error -71 [ 853.361675][ T24] usb 2-1: USB disconnect, device number 75 [ 853.990012][T15890] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 854.013667][T15933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2540'. [ 854.120009][T15890] usb 3-1: device descriptor read/64, error -71 [ 854.138144][T15882] usbhid 6-1:0.0: can't add hid device: -71 [ 854.153941][T15882] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 854.272138][T15890] usb usb3-port1: attempt power cycle [ 854.335407][T15882] usb 6-1: USB disconnect, device number 46 [ 854.811942][T15890] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 854.831007][T15890] usb 3-1: device descriptor read/8, error -71 [ 854.968816][T15882] usb 5-1: USB disconnect, device number 76 [ 855.010243][T15885] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 855.025764][T15882] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 855.080053][T15890] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 855.148837][T15890] usb 3-1: device descriptor read/8, error -71 [ 855.181941][T15885] usb 1-1: unable to get BOS descriptor or descriptor too short [ 855.191781][T15885] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 855.205224][T15948] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2550'. [ 855.215832][T15885] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 855.242808][T15885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 855.265687][T15885] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 855.290195][T15951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2550'. [ 855.301791][T15885] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 855.302317][T15890] usb usb3-port1: unable to enumerate USB device [ 855.311259][T15885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.326683][T15885] usb 1-1: Product: syz [ 855.332788][T15885] usb 1-1: Manufacturer: syz [ 855.337560][T15885] usb 1-1: SerialNumber: syz [ 855.345244][T15885] usb 1-1: config 0 descriptor?? [ 855.365856][T15944] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 855.375222][ C0] usb 1-1: NFC: Urb failure (status -71) [ 855.398164][T15885] usb 1-1: NFC: Unable to get FW version [ 855.425840][T15885] pn533_usb 1-1:0.0: probe with driver pn533_usb failed with error -90 [ 856.372195][T15944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.443307][T15944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.532079][T15944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2549'. [ 856.553550][T15944] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2549'. [ 856.720084][ T30] audit: type=1400 audit(856.679:3359): avc: denied { read write } for pid=15970 comm="syz.1.2557" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 856.743206][T15885] usb 1-1: USB disconnect, device number 68 [ 856.746816][ T30] audit: type=1400 audit(856.679:3360): avc: denied { open } for pid=15970 comm="syz.1.2557" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 857.609785][T15890] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 857.700181][T15986] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.2560'. [ 858.084850][T15990] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.2561'. [ 858.230055][T15885] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 858.258908][T15980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 858.271429][T15980] 8021q: adding VLAN 0 to HW filter on device team0 [ 858.285822][T15980] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 858.326231][T15890] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 858.389959][T15890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.404292][T15885] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 858.412602][T15885] usb 3-1: config 0 has no interface number 0 [ 858.414053][T15890] usb 6-1: config 0 descriptor?? [ 858.504604][T15885] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 858.516393][T15890] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 858.516768][T15885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.570789][T15885] usb 3-1: config 0 descriptor?? [ 858.584892][T15885] usb 3-1: selecting invalid altsetting 1 [ 858.749276][T15885] dvb_ttusb_budget: ttusb_init_controller: error [ 858.777176][ T24] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 858.827099][T15885] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 858.926281][T15885] DVB: Unable to find symbol cx22700_attach() [ 858.931874][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 858.978403][ T24] usb 5-1: config 0 has no interface number 0 [ 858.995991][ T24] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 859.007211][T15885] DVB: Unable to find symbol tda10046_attach() [ 859.015872][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.024783][T15885] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 859.048087][T15885] usb 3-1: USB disconnect, device number 84 [ 859.068087][ T24] usb 5-1: config 0 descriptor?? [ 859.089280][ T24] usb 5-1: selecting invalid altsetting 1 [ 859.124021][ T24] dvb_ttusb_budget: ttusb_init_controller: error [ 859.200259][ T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 859.343599][ T24] DVB: Unable to find symbol cx22700_attach() [ 859.453230][ T24] DVB: Unable to find symbol tda10046_attach() [ 859.460027][ T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 860.362171][T15890] usb 6-1: USB disconnect, device number 47 [ 860.430971][ T24] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 860.810362][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 860.823147][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 860.834686][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 860.950140][T15890] usb 2-1: new low-speed USB device number 76 using dummy_hcd [ 861.293389][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 861.315316][T15884] usb 5-1: USB disconnect, device number 77 [ 861.356144][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 861.373515][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 861.394438][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.672812][ T24] usb 3-1: GET_CAPABILITIES returned 0 [ 861.678411][ T24] usbtmc 3-1:16.0: can't read capabilities [ 861.956434][T15890] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 861.968372][T15890] usb 2-1: config 0 has no interface number 0 [ 861.977238][ T24] usb 3-1: USB disconnect, device number 85 [ 861.987615][T15890] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 862.000688][T15890] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 862.025581][T15890] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 862.039533][T15890] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 862.051962][T15890] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 862.062981][T15890] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 862.076134][T15890] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 862.085537][T15890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.102447][T15890] usb 2-1: config 0 descriptor?? [ 862.112604][T16023] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 862.126334][T16023] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 862.148537][T15890] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 863.498110][T16063] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2580'. [ 863.663407][T16064] fuseblk: Unknown parameter '[`v>}tߊTSc-!gS&' [ 863.772085][ T30] audit: type=1400 audit(863.639:3361): avc: denied { mounton } for pid=16055 comm="syz.2.2580" path="/531/file0/file0" dev="afs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 864.306953][T15884] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 864.331828][ T24] usb 2-1: USB disconnect, device number 76 [ 864.469847][ T24] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 864.770020][T15884] usb 1-1: Using ep0 maxpacket: 8 [ 865.045861][T15884] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 865.058867][T15884] usb 1-1: config 179 has no interface number 0 [ 865.366764][T15884] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 865.399412][T15884] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 865.436752][T15884] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 865.510249][T15884] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 865.544687][T15884] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 865.673196][T15884] usb 1-1: config 179 interface 65 has no altsetting 0 [ 865.680561][T15884] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 865.689746][T15884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.800868][T16098] 9pnet_fd: Insufficient options for proto=fd [ 866.260667][T15884] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input47 [ 866.333783][ T5177] input input47: unable to receive magic message: -110 [ 866.647670][ T5177] input input47: unable to receive magic message: -32 [ 866.762486][T16103] FAULT_INJECTION: forcing a failure. [ 866.762486][T16103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 866.790040][T16103] CPU: 0 UID: 0 PID: 16103 Comm: syz.2.2592 Not tainted syzkaller #0 PREEMPT(full) [ 866.790068][T16103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 866.790079][T16103] Call Trace: [ 866.790085][T16103] [ 866.790093][T16103] dump_stack_lvl+0x16c/0x1f0 [ 866.790124][T16103] should_fail_ex+0x512/0x640 [ 866.790150][T16103] strncpy_from_user+0x3b/0x2e0 [ 866.790172][T16103] getname_flags.part.0+0x8f/0x550 [ 866.790199][T16103] getname_flags+0x93/0xf0 [ 866.790216][T16103] __ia32_compat_sys_execve+0x72/0xc0 [ 866.790235][T16103] do_int80_emulation+0x104/0x3e0 [ 866.790259][T16103] asm_int80_emulation+0x1a/0x20 [ 866.790277][T16103] RIP: 0033:0x200000000006 [ 866.790295][T16103] Code: Unable to access opcode bytes at 0x1fffffffffdc. [ 866.790303][T16103] RSP: 002b:00007ff92b2f9338 EFLAGS: 00000202 ORIG_RAX: 000000000000000b [ 866.790321][T16103] RAX: ffffffffffffffda RBX: 00007ff92a5e5fa0 RCX: 00007ff92a38eec9 [ 866.790333][T16103] RDX: 00007ff92b2f9340 RSI: 00007ff92b2f9470 RDI: 000000000000000d [ 866.790344][T16103] RBP: 00007ff92b2fa090 R08: 0000000000000000 R09: 0000000000000000 [ 866.790354][T16103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 866.790364][T16103] R13: 00007ff92a5e6038 R14: 00007ff92a5e5fa0 R15: 00007ffe1fc36d48 [ 866.790390][T16103] [ 866.926758][ C0] vkms_vblank_simulate: vblank timer overrun [ 867.010571][ T5177] input input47: unable to receive magic message: -32 [ 867.022201][ T5177] input input47: unable to receive magic message: -32 [ 867.080546][T15890] usb 1-1: USB disconnect, device number 69 [ 867.080659][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 867.095387][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 867.122561][T16106] FAULT_INJECTION: forcing a failure. [ 867.122561][T16106] name failslab, interval 1, probability 0, space 0, times 0 [ 867.545297][T16106] CPU: 1 UID: 0 PID: 16106 Comm: syz.5.2593 Not tainted syzkaller #0 PREEMPT(full) [ 867.545323][T16106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 867.545333][T16106] Call Trace: [ 867.545338][T16106] [ 867.545345][T16106] dump_stack_lvl+0x16c/0x1f0 [ 867.545368][T16106] should_fail_ex+0x512/0x640 [ 867.545382][T16106] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 867.545401][T16106] should_failslab+0xc2/0x120 [ 867.545416][T16106] kmem_cache_alloc_noprof+0x75/0x6e0 [ 867.545433][T16106] ? vm_area_dup+0x27/0x8d0 [ 867.545452][T16106] ? vm_area_dup+0x27/0x8d0 [ 867.545467][T16106] vm_area_dup+0x27/0x8d0 [ 867.545484][T16106] __split_vma+0x18e/0x1070 [ 867.545502][T16106] ? __pfx___split_vma+0x10/0x10 [ 867.545520][T16106] ? lockdep_hardirqs_on+0x7c/0x110 [ 867.545545][T16106] vms_gather_munmap_vmas+0x1cb/0x1340 [ 867.545564][T16106] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 867.545583][T16106] ? mas_walk+0x6f5/0x980 [ 867.545600][T16106] __mmap_region+0x434/0x27a0 [ 867.545610][T16106] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 867.545626][T16106] ? __pfx___mmap_region+0x10/0x10 [ 867.545636][T16106] ? kvm_sched_clock_read+0x11/0x20 [ 867.545647][T16106] ? sched_clock+0x38/0x60 [ 867.545657][T16106] ? sched_clock_cpu+0x6c/0x530 [ 867.545670][T16106] ? __pfx_sched_clock_cpu+0x10/0x10 [ 867.545686][T16106] ? rcu_is_watching+0x12/0xc0 [ 867.545702][T16106] ? trace_sched_exit_tp+0xd1/0x120 [ 867.545717][T16106] ? __schedule+0x11a3/0x5de0 [ 867.545729][T16106] ? rcu_is_watching+0x12/0xc0 [ 867.545777][T16106] mmap_region+0x32b/0x3f0 [ 867.545798][T16106] do_mmap+0xa3e/0x1210 [ 867.545825][T16106] ? __pfx_do_mmap+0x10/0x10 [ 867.545847][T16106] ? __pfx_down_write_killable+0x10/0x10 [ 867.545877][T16106] vm_mmap_pgoff+0x29e/0x470 [ 867.545905][T16106] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 867.545932][T16106] ? __fget_files+0x20e/0x3c0 [ 867.545959][T16106] ksys_mmap_pgoff+0x32c/0x5c0 [ 867.545980][T16106] ? __pfx_ksys_write+0x10/0x10 [ 867.546002][T16106] __x64_sys_mmap+0x125/0x190 [ 867.546025][T16106] do_syscall_64+0xcd/0x4e0 [ 867.546050][T16106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.546069][T16106] RIP: 0033:0x7f6bd318eec9 [ 867.546084][T16106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 867.546100][T16106] RSP: 002b:00007f6bd3fc5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 867.546119][T16106] RAX: ffffffffffffffda RBX: 00007f6bd33e6090 RCX: 00007f6bd318eec9 [ 867.546131][T16106] RDX: 000000000280000b RSI: 0000000000001000 RDI: 0000200000ffc000 [ 867.546142][T16106] RBP: 00007f6bd3fc5090 R08: 0000000000000003 R09: 0000000077066000 [ 867.546153][T16106] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000001 [ 867.546164][T16106] R13: 00007f6bd33e6128 R14: 00007f6bd33e6090 R15: 00007ffd1cfecf38 [ 867.546189][T16106] [ 868.992799][T16120] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.2596'. [ 869.495488][T15883] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 869.918573][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.925256][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.932875][T15884] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 870.111806][T15883] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 870.145208][T15883] usb 2-1: config 0 has no interface number 0 [ 870.152810][T15884] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 870.163635][T15883] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 870.184848][T15884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.274994][T15883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.285591][T16133] FAULT_INJECTION: forcing a failure. [ 870.285591][T16133] name failslab, interval 1, probability 0, space 0, times 0 [ 870.290863][T15884] usb 6-1: config 0 descriptor?? [ 870.333923][T15883] usb 2-1: config 0 descriptor?? [ 870.359557][T16133] CPU: 1 UID: 0 PID: 16133 Comm: syz.2.2600 Not tainted syzkaller #0 PREEMPT(full) [ 870.359583][T16133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 870.359593][T16133] Call Trace: [ 870.359599][T16133] [ 870.359606][T16133] dump_stack_lvl+0x16c/0x1f0 [ 870.359632][T16133] should_fail_ex+0x512/0x640 [ 870.359653][T16133] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 870.359684][T16133] should_failslab+0xc2/0x120 [ 870.359706][T16133] kmem_cache_alloc_node_noprof+0x78/0x770 [ 870.359732][T16133] ? __alloc_skb+0x2b2/0x380 [ 870.359756][T16133] ? __alloc_skb+0x2b2/0x380 [ 870.359773][T16133] __alloc_skb+0x2b2/0x380 [ 870.359792][T16133] ? __pfx___alloc_skb+0x10/0x10 [ 870.359810][T16133] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 870.359840][T16133] netlink_ack+0x15d/0xb80 [ 870.359873][T16133] netlink_rcv_skb+0x332/0x420 [ 870.359896][T16133] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 870.359923][T16133] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 870.359954][T16133] ? netlink_deliver_tap+0x1ae/0xd30 [ 870.359981][T16133] netlink_unicast+0x5aa/0x870 [ 870.360008][T16133] ? __pfx_netlink_unicast+0x10/0x10 [ 870.360031][T16133] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 870.360062][T16133] netlink_sendmsg+0x8c8/0xdd0 [ 870.360090][T16133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 870.360122][T16133] ____sys_sendmsg+0xa95/0xc70 [ 870.360149][T16133] ? copy_msghdr_from_user+0x10a/0x160 [ 870.360171][T16133] ? __pfx_____sys_sendmsg+0x10/0x10 [ 870.360208][T16133] ___sys_sendmsg+0x134/0x1d0 [ 870.360239][T16133] ? __pfx____sys_sendmsg+0x10/0x10 [ 870.360291][T16133] __sys_sendmsg+0x16d/0x220 [ 870.360313][T16133] ? __pfx___sys_sendmsg+0x10/0x10 [ 870.360350][T16133] do_syscall_64+0xcd/0x4e0 [ 870.360374][T16133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.360392][T16133] RIP: 0033:0x7ff92a38eec9 [ 870.360407][T16133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 870.360424][T16133] RSP: 002b:00007ff92b2fa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 870.360442][T16133] RAX: ffffffffffffffda RBX: 00007ff92a5e5fa0 RCX: 00007ff92a38eec9 [ 870.360454][T16133] RDX: 00000000040008c0 RSI: 0000200000000640 RDI: 0000000000000003 [ 870.360464][T16133] RBP: 00007ff92b2fa090 R08: 0000000000000000 R09: 0000000000000000 [ 870.360478][T16133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 870.360488][T16133] R13: 00007ff92a5e6038 R14: 00007ff92a5e5fa0 R15: 00007ffe1fc36d48 [ 870.360512][T16133] [ 870.366644][T15884] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 870.623380][T15883] usb 2-1: selecting invalid altsetting 1 [ 870.630183][T15883] dvb_ttusb_budget: ttusb_init_controller: error [ 870.648881][T15883] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 870.976037][T15883] DVB: Unable to find symbol cx22700_attach() [ 871.537740][T15883] DVB: Unable to find symbol tda10046_attach() [ 871.545425][T15883] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 871.584735][T15883] usb 2-1: USB disconnect, device number 77 [ 872.394258][T15884] usb 6-1: USB disconnect, device number 48 [ 874.340160][T16188] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2609'. [ 874.419148][ T30] audit: type=1326 audit(874.339:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16181 comm="syz.2.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92a38eec9 code=0x7ffc0000 [ 874.524205][ T30] audit: type=1326 audit(874.349:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16181 comm="syz.2.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92a38eec9 code=0x7ffc0000 [ 874.558784][ T30] audit: type=1326 audit(874.349:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16181 comm="syz.2.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff92a38eec9 code=0x7ffc0000 [ 874.623634][ T30] audit: type=1326 audit(874.349:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16181 comm="syz.2.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92a38eec9 code=0x7ffc0000 [ 874.663193][ T30] audit: type=1326 audit(874.349:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16181 comm="syz.2.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92a38eec9 code=0x7ffc0000 [ 874.688545][ T30] audit: type=1326 audit(874.349:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16181 comm="syz.2.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff92a38eec9 code=0x7ffc0000 [ 874.712025][ T30] audit: type=1326 audit(874.349:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16181 comm="syz.2.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92a38eec9 code=0x7ffc0000 [ 874.736859][ T30] audit: type=1326 audit(874.349:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16181 comm="syz.2.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7ff92a38eec9 code=0x7ffc0000 [ 874.760378][T15890] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 874.823392][ T30] audit: type=1326 audit(874.359:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16181 comm="syz.2.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92a38eec9 code=0x7ffc0000 [ 874.848228][ T30] audit: type=1326 audit(874.359:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16181 comm="syz.2.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92a38eec9 code=0x7ffc0000 [ 874.872607][T16203] netlink: 'syz.0.2614': attribute type 10 has an invalid length. [ 874.920379][T15890] usb 6-1: Using ep0 maxpacket: 32 [ 874.928946][T15890] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 874.942780][T16203] team0: Port device geneve1 added [ 874.958416][T15890] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 874.978096][T15890] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 874.998157][T15890] usb 6-1: Product: syz [ 875.008240][T15890] usb 6-1: Manufacturer: syz [ 875.018327][T15890] usb 6-1: SerialNumber: syz [ 875.030974][T15890] usb 6-1: config 0 descriptor?? [ 875.036457][T16179] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 875.315037][ T24] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 875.827422][T16218] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2618'. [ 875.875945][T16218] FAULT_INJECTION: forcing a failure. [ 875.875945][T16218] name failslab, interval 1, probability 0, space 0, times 0 [ 875.888723][T16218] CPU: 0 UID: 0 PID: 16218 Comm: syz.4.2618 Not tainted syzkaller #0 PREEMPT(full) [ 875.888750][T16218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 875.888761][T16218] Call Trace: [ 875.888767][T16218] [ 875.888774][T16218] dump_stack_lvl+0x16c/0x1f0 [ 875.888801][T16218] should_fail_ex+0x512/0x640 [ 875.888822][T16218] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 875.888853][T16218] should_failslab+0xc2/0x120 [ 875.888876][T16218] kmem_cache_alloc_noprof+0x75/0x6e0 [ 875.888903][T16218] ? security_file_alloc+0x34/0x2b0 [ 875.888930][T16218] ? security_file_alloc+0x34/0x2b0 [ 875.888951][T16218] security_file_alloc+0x34/0x2b0 [ 875.888973][T16218] init_file+0x93/0x4c0 [ 875.888997][T16218] alloc_empty_file+0x73/0x1e0 [ 875.889022][T16218] path_openat+0xda/0x2cb0 [ 875.889049][T16218] ? __pfx_path_openat+0x10/0x10 [ 875.889076][T16218] do_filp_open+0x20b/0x470 [ 875.889096][T16218] ? __pfx_do_filp_open+0x10/0x10 [ 875.889134][T16218] ? alloc_fd+0x471/0x7d0 [ 875.889160][T16218] do_sys_openat2+0x11b/0x1d0 [ 875.889184][T16218] ? __pfx_do_sys_openat2+0x10/0x10 [ 875.889210][T16218] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 875.889243][T16218] __x64_sys_openat+0x174/0x210 [ 875.889267][T16218] ? __pfx___x64_sys_openat+0x10/0x10 [ 875.889296][T16218] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 875.889325][T16218] do_syscall_64+0xcd/0x4e0 [ 875.889354][T16218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.889372][T16218] RIP: 0033:0x7febd7f8eec9 [ 875.889386][T16218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 875.889403][T16218] RSP: 002b:00007febd8e46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 875.889421][T16218] RAX: ffffffffffffffda RBX: 00007febd81e6090 RCX: 00007febd7f8eec9 [ 875.889433][T16218] RDX: 00000000000e0203 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 875.889444][T16218] RBP: 00007febd8e46090 R08: 0000000000000000 R09: 0000000000000000 [ 875.889454][T16218] R10: 0000000000000143 R11: 0000000000000246 R12: 0000000000000001 [ 875.889465][T16218] R13: 00007febd81e6128 R14: 00007febd81e6090 R15: 00007ffe3af51c88 [ 875.889490][T16218] [ 876.176144][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 876.203584][ T24] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 876.406514][T16218] fuseblk: Unknown parameter '0x0000000000000008' [ 876.444220][ T24] usb 2-1: config 0 has no interface number 0 [ 876.450728][ T24] usb 2-1: config 0 interface 151 has no altsetting 0 [ 876.491142][ T24] usb 2-1: New USB device found, idVendor=2770, idProduct=9051, bcdDevice=d9.3e [ 876.510224][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.528728][ T24] usb 2-1: Product: syz [ 876.662712][T16226] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2621'. [ 876.808616][ T24] usb 2-1: Manufacturer: syz [ 876.821963][ T24] usb 2-1: SerialNumber: syz [ 876.915400][ T24] usb 2-1: config 0 descriptor?? [ 876.923853][ T24] gspca_main: sq905c-2.14.0 probing 2770:9051 [ 877.372405][T16227] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2619'. [ 878.562700][ T24] gspca_sq905c: sq905c_read: usb_control_msg failed (-32) [ 878.574436][ T24] sq905c 2-1:0.151: Reading version command failed [ 878.590122][ T24] sq905c 2-1:0.151: probe with driver sq905c failed with error -32 [ 879.570208][T15884] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 880.131767][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 880.131784][ T30] audit: type=1400 audit(880.049:3395): avc: denied { getopt } for pid=16232 comm="syz.2.2622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 882.002675][T15883] usb 2-1: USB disconnect, device number 78 [ 882.057822][T16242] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2623'. [ 882.123359][ T24] usb 6-1: USB disconnect, device number 49 [ 882.314308][T16250] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2625'. [ 882.467890][T16248] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 882.480714][T16248] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 882.892326][T16248] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 882.917867][T16248] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 882.931493][T16248] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 882.946298][T16248] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 882.957069][T16248] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 882.977769][T16248] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 882.991869][T16248] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 883.025526][T16248] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 883.032327][T16248] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 883.041233][T16248] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 883.119349][T16248] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 883.179475][T16248] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 883.410105][ T24] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 883.512337][T15890] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 883.611690][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 883.622076][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 883.633382][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 883.643235][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 883.860353][T15884] usb 1-1: device descriptor read/64, error -71 [ 884.060333][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 884.069479][ T24] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 884.077659][T15890] usb 2-1: Using ep0 maxpacket: 8 [ 884.083618][ T24] usb 3-1: Manufacturer: syz [ 884.100074][T15884] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 884.100720][ T24] usb 3-1: config 0 descriptor?? [ 884.115658][T15890] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 884.127780][T15890] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 884.137938][T15890] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 884.148070][T15890] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 884.162526][T15890] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 884.171700][T15890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.263174][T15884] usb 1-1: unable to get BOS descriptor or descriptor too short [ 884.279608][T15884] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 884.290608][T15884] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 884.310648][T15884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 884.326288][T15884] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 884.393091][T16273] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2632'. [ 884.578751][ T30] audit: type=1326 audit(884.409:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16271 comm="syz.4.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd7f8eec9 code=0x7ffc0000 [ 884.604632][ T30] audit: type=1326 audit(884.409:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16271 comm="syz.4.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd7f8eec9 code=0x7ffc0000 [ 884.615359][T15884] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 884.628721][T15890] usb 2-1: GET_CAPABILITIES returned 0 [ 884.647979][T15890] usbtmc 2-1:16.0: can't read capabilities [ 884.807090][ T30] audit: type=1326 audit(884.419:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16271 comm="syz.4.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7febd7f8eec9 code=0x7ffc0000 [ 884.844686][T15884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.856452][T15884] usb 1-1: Product: syz [ 884.857596][T16260] overlayfs: missing 'lowerdir' [ 884.869561][T15884] usb 1-1: Manufacturer: syz [ 884.874213][T15884] usb 1-1: SerialNumber: syz [ 884.879130][ T30] audit: type=1326 audit(884.419:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16271 comm="syz.4.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd7f8eec9 code=0x7ffc0000 [ 884.940339][ T30] audit: type=1326 audit(884.419:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16271 comm="syz.4.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd7f8eec9 code=0x7ffc0000 [ 884.989504][ T30] audit: type=1326 audit(884.429:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16271 comm="syz.4.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7febd7f8eec9 code=0x7ffc0000 [ 885.009574][T15884] usb 1-1: config 0 descriptor?? [ 885.033493][T16264] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 885.061144][T16281] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2634'. [ 885.070797][T16281] unsupported nlmsg_type 40 [ 885.079785][ T30] audit: type=1326 audit(884.429:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16271 comm="syz.4.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd7f8eec9 code=0x7ffc0000 [ 885.110622][ C0] usb 1-1: NFC: Urb failure (status -71) [ 885.116668][T15884] usb 1-1: NFC: Unable to get FW version [ 885.122843][T15884] pn533_usb 1-1:0.0: probe with driver pn533_usb failed with error -90 [ 885.161455][ T30] audit: type=1326 audit(884.429:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16271 comm="syz.4.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7febd7f8eec9 code=0x7ffc0000 [ 885.189931][T15879] usb 2-1: USB disconnect, device number 79 [ 885.291205][ T30] audit: type=1326 audit(884.429:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16271 comm="syz.4.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd7f8eec9 code=0x7ffc0000 [ 885.348541][T16282] tmpfs: Unknown parameter 'grpquota' [ 885.357076][T16264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.378186][T16264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.390602][ T30] audit: type=1326 audit(884.439:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16271 comm="syz.4.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7febd7f8eec9 code=0x7ffc0000 [ 885.420571][T16264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2630'. [ 885.429689][T16264] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2630'. [ 885.439043][ T30] audit: type=1326 audit(884.439:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16271 comm="syz.4.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd7f8eec9 code=0x7ffc0000 [ 885.524784][T15890] usb 1-1: USB disconnect, device number 71 [ 885.653434][ T30] audit: type=1326 audit(884.439:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16271 comm="syz.4.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd7f8eec9 code=0x7ffc0000 [ 885.678531][ T30] audit: type=1326 audit(884.439:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16271 comm="syz.4.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7febd7f8eec9 code=0x7ffc0000 [ 885.703227][ T30] audit: type=1326 audit(884.439:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16271 comm="syz.4.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd7f8eec9 code=0x7ffc0000 [ 885.726496][ T30] audit: type=1326 audit(884.439:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16271 comm="syz.4.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd7f8eec9 code=0x7ffc0000 [ 885.749680][ T30] audit: type=1326 audit(884.449:3411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16271 comm="syz.4.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7febd7f8eec9 code=0x7ffc0000 [ 885.772786][ T30] audit: type=1326 audit(884.449:3412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16271 comm="syz.4.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd7f8eec9 code=0x7ffc0000 [ 886.878777][T16302] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 886.887185][T16302] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 886.901147][T16302] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 886.907588][T16302] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 886.927750][T16302] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 886.942476][T16302] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 887.069013][T16302] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 887.075684][T16302] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 887.082471][T16302] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 887.093316][T16302] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 887.113903][T16302] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 887.120981][T16302] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 887.127817][T16302] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 887.136252][T16302] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 887.144154][ T24] rc_core: IR keymap rc-hauppauge not found [ 887.150542][ T24] Registered IR keymap rc-empty [ 887.155593][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 887.200035][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 887.221518][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 887.304321][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input48 [ 887.343546][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 887.504708][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 887.540326][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 887.616900][T15884] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 887.772585][T15884] usb 5-1: unable to get BOS descriptor or descriptor too short [ 887.800531][T15884] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 887.834349][T15884] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 887.845715][T15884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 887.857383][T15884] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 887.876018][T15884] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 887.885425][T15879] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 887.896908][T15884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.907567][T15884] usb 5-1: Product: syz [ 887.914484][T15884] usb 5-1: Manufacturer: syz [ 887.919231][T15884] usb 5-1: SerialNumber: syz [ 887.925723][T15884] usb 5-1: config 0 descriptor?? [ 887.930269][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 887.940162][T16319] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 887.948949][ C0] usb 5-1: NFC: Urb failure (status -71) [ 887.950033][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 887.954824][T15884] usb 5-1: NFC: Unable to get FW version [ 887.970187][T15890] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 887.975288][T15884] pn533_usb 5-1:0.0: probe with driver pn533_usb failed with error -90 [ 887.980065][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 888.010048][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 888.030293][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 888.050310][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 888.050692][T15879] usb 6-1: Using ep0 maxpacket: 8 [ 888.064029][T15879] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 888.070012][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 888.072438][T15879] usb 6-1: config 179 has no interface number 0 [ 888.085680][T15879] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 888.091361][ T24] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 888.096932][T15879] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 888.105970][ T24] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 888.116268][T15879] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 888.116296][T15879] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 888.116322][T15879] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 888.116347][T15879] usb 6-1: config 179 interface 65 has no altsetting 0 [ 888.116377][T15879] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 888.116397][T15879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.128735][T15879] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input49 [ 888.141033][ T24] usb 3-1: USB disconnect, device number 86 [ 888.202736][T15890] usb 1-1: Using ep0 maxpacket: 32 [ 888.209268][T15890] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 888.290757][T15890] usb 1-1: config 0 has no interface number 0 [ 888.301517][T15890] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 888.312568][T15890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.325528][T15890] usb 1-1: Product: syz [ 888.339586][T13507] input input49: unable to receive magic message: -110 [ 888.343393][T15890] usb 1-1: Manufacturer: syz [ 888.351847][T15890] usb 1-1: SerialNumber: syz [ 888.352682][T16319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.360885][T15890] usb 1-1: config 0 descriptor?? [ 888.366400][T16319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.442866][T15890] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 888.452627][ T5177] input input49: unable to receive magic message: -32 [ 888.465513][T15890] usb 1-1: selecting invalid altsetting 1 [ 888.472672][ T5177] input input49: unable to receive magic message: -32 [ 888.480521][ T5177] input input49: unable to receive magic message: -32 [ 888.489689][T15890] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 888.504069][ T5177] input input49: unable to receive magic message: -32 [ 888.512116][T16319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2646'. [ 888.523925][T15890] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 888.540681][T16319] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2646'. [ 888.551476][T15879] usb 6-1: USB disconnect, device number 50 [ 888.557432][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 888.561303][T15890] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 888.579183][T15884] usb 5-1: USB disconnect, device number 78 [ 888.588449][T15890] usb 1-1: media controller created [ 888.617405][T15890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 888.694554][ T24] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 888.860432][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 888.878051][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 19, changing to 8 [ 888.968457][ T24] usb 3-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 889.004249][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.018442][ T24] usb 3-1: config 0 descriptor?? [ 889.148966][T16333] FAULT_INJECTION: forcing a failure. [ 889.148966][T16333] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 889.162499][T16333] CPU: 1 UID: 0 PID: 16333 Comm: syz.5.2649 Not tainted syzkaller #0 PREEMPT(full) [ 889.162523][T16333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 889.162537][T16333] Call Trace: [ 889.162543][T16333] [ 889.162550][T16333] dump_stack_lvl+0x16c/0x1f0 [ 889.162577][T16333] should_fail_ex+0x512/0x640 [ 889.162601][T16333] should_fail_alloc_page+0xe7/0x130 [ 889.162625][T16333] prepare_alloc_pages+0x3c2/0x610 [ 889.162651][T16333] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 889.162678][T16333] ? __alloc_frozen_pages_noprof+0x292/0x2470 [ 889.162717][T16333] ? find_held_lock+0x2b/0x80 [ 889.162741][T16333] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 889.162766][T16333] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 889.162795][T16333] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 889.162827][T16333] ? __kernel_text_address+0xd/0x40 [ 889.162848][T16333] ? unwind_get_return_address+0x59/0xa0 [ 889.162876][T16333] ? __lock_acquire+0xb97/0x1ce0 [ 889.162892][T16333] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 889.162919][T16333] ? policy_nodemask+0xea/0x4e0 [ 889.162942][T16333] alloc_pages_mpol+0x1fb/0x550 [ 889.162964][T16333] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 889.162985][T16333] ? do_raw_spin_lock+0x12c/0x2b0 [ 889.163006][T16333] ? find_held_lock+0x2b/0x80 [ 889.163035][T16333] alloc_pages_noprof+0x131/0x390 [ 889.163057][T16333] __pmd_alloc+0x3b/0x8b0 [ 889.163078][T16333] ? __pud_alloc+0x51f/0x6b0 [ 889.163102][T16333] __handle_mm_fault+0xada/0x2aa0 [ 889.163131][T16333] ? mt_find+0x3e2/0xa20 [ 889.163162][T16333] ? __pfx___handle_mm_fault+0x10/0x10 [ 889.163186][T16333] ? __pfx_mt_find+0x10/0x10 [ 889.163222][T16333] ? find_vma+0xbf/0x140 [ 889.163239][T16333] ? __pfx_find_vma+0x10/0x10 [ 889.163254][T16333] handle_mm_fault+0x589/0xd10 [ 889.163271][T16333] ? trace_raw_output_exceptions+0x141/0x150 [ 889.163286][T16333] do_user_addr_fault+0x7a6/0x1370 [ 889.163300][T16333] ? rcu_is_watching+0x12/0xc0 [ 889.163318][T16333] exc_page_fault+0x5c/0xb0 [ 889.163332][T16333] asm_exc_page_fault+0x26/0x30 [ 889.163342][T16333] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 889.163360][T16333] Code: 24 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 889.163371][T16333] RSP: 0018:ffffc9000ec97900 EFLAGS: 00050202 [ 889.163382][T16333] RAX: 0000000000000001 RBX: 0000200000000000 RCX: 00000000000000f0 [ 889.163389][T16333] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffc9000ec97a0c [ 889.163395][T16333] RBP: 00000000000000f0 R08: 0000000000000001 R09: fffff52001d92f5f [ 889.163402][T16333] R10: ffffc9000ec97afb R11: 0000000000000000 R12: 0000000000000000 [ 889.163412][T16333] R13: ffffc9000ec97a0c R14: ffffc9000ec97a0c R15: dffffc0000000000 [ 889.163434][T16333] _copy_from_user+0x98/0xd0 [ 889.163458][T16333] do_sys_poll+0x1d5/0xdf0 [ 889.163474][T16333] ? is_bpf_text_address+0x94/0x1a0 [ 889.163492][T16333] ? kernel_text_address+0x8d/0x100 [ 889.163505][T16333] ? __kernel_text_address+0xd/0x40 [ 889.163520][T16333] ? arch_stack_walk+0xa6/0x100 [ 889.163535][T16333] ? __pfx_do_sys_poll+0x10/0x10 [ 889.163560][T16333] ? __lock_acquire+0x62e/0x1ce0 [ 889.163599][T16333] ? __pfx_timespec64_add_safe+0x10/0x10 [ 889.163612][T16333] ? ktime_get_ts64+0x2d2/0x400 [ 889.163623][T16333] ? read_tsc+0x9/0x20 [ 889.163637][T16333] ? ktime_get_ts64+0x256/0x400 [ 889.163652][T16333] __x64_sys_poll+0x1a6/0x450 [ 889.163664][T16333] ? __pfx___x64_sys_poll+0x10/0x10 [ 889.163674][T16333] ? syscall_trace_enter+0x1cb/0x240 [ 889.163690][T16333] ? rcu_is_watching+0x12/0xc0 [ 889.163707][T16333] do_syscall_64+0xcd/0x4e0 [ 889.163722][T16333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.163733][T16333] RIP: 0033:0x7f6bd318eec9 [ 889.163742][T16333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 889.163752][T16333] RSP: 002b:00007f6bd3fe6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 889.163762][T16333] RAX: ffffffffffffffda RBX: 00007f6bd33e5fa0 RCX: 00007f6bd318eec9 [ 889.163769][T16333] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 889.163776][T16333] RBP: 00007f6bd3fe6090 R08: 0000000000000000 R09: 0000000000000000 [ 889.163783][T16333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 889.163789][T16333] R13: 00007f6bd33e6038 R14: 00007f6bd33e5fa0 R15: 00007ffd1cfecf38 [ 889.163803][T16333] [ 889.821331][T15890] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 889.829596][T15890] zl10353_read_register: readreg error (reg=127, ret==-110) [ 889.838117][T16331] usb 1-1: dvb_usb_ce6230: I2C read not implemented [ 889.888537][T15890] usb 1-1: USB disconnect, device number 72 [ 889.977259][ T24] hid_parser_main: 48 callbacks suppressed [ 889.977273][ T24] asus 0003:0B05:17E0.000E: unknown main item tag 0x0 [ 889.992898][ T24] asus 0003:0B05:17E0.000E: unknown main item tag 0x0 [ 889.999797][ T24] asus 0003:0B05:17E0.000E: unknown main item tag 0x0 [ 890.006635][ T24] asus 0003:0B05:17E0.000E: unknown main item tag 0x0 [ 890.013544][ T24] asus 0003:0B05:17E0.000E: unknown main item tag 0x0 [ 890.022552][ T24] asus 0003:0B05:17E0.000E: unknown main item tag 0x0 [ 890.030110][ T24] asus 0003:0B05:17E0.000E: unknown main item tag 0x0 [ 890.040064][ T24] asus 0003:0B05:17E0.000E: unknown main item tag 0x0 [ 890.049427][ T24] asus 0003:0B05:17E0.000E: unknown main item tag 0x0 [ 890.056440][ T5894] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 890.064059][ T5817] usb 5-1: new low-speed USB device number 79 using dummy_hcd [ 890.072664][ T24] asus 0003:0B05:17E0.000E: unknown main item tag 0x0 [ 890.112896][ T24] asus 0003:0B05:17E0.000E: hidraw0: USB HID v5.59 Device [HID 0b05:17e0] on usb-dummy_hcd.2-1/input0 [ 890.124008][ T24] asus 0003:0B05:17E0.000E: Asus input not registered [ 890.133531][ T24] asus 0003:0B05:17E0.000E: probe with driver asus failed with error -12 [ 890.219992][ T5894] usb 6-1: Using ep0 maxpacket: 32 [ 890.227524][ T5894] usb 6-1: config 1 has an invalid interface number: 236 but max is 0 [ 890.237543][ T5817] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 890.248138][ T5894] usb 6-1: config 1 has no interface number 0 [ 890.268932][ T5817] usb 5-1: config 0 has no interface number 0 [ 890.275547][ T5894] usb 6-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 890.330346][T16349] netlink: 'syz.2.2645': attribute type 4 has an invalid length. [ 890.349056][T16349] netlink: 'syz.2.2645': attribute type 4 has an invalid length. [ 890.480575][ T5817] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 890.492393][ T5894] usb 6-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 890.517200][ T5817] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 890.533949][ T5894] usb 6-1: config 1 interface 236 has no altsetting 0 [ 890.628413][ T5817] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 890.638924][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.647715][ T5894] usb 6-1: config 1 has an invalid interface number: 236 but max is 0 [ 890.655908][ T5894] usb 6-1: config 1 has no interface number 0 [ 890.663026][ T5894] usb 6-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 890.695742][ T5894] usb 6-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 890.860081][ T5817] usb 5-1: config 0 descriptor?? [ 890.867880][ T5894] usb 6-1: config 1 interface 236 has no altsetting 0 [ 890.869889][T16344] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 890.908003][ T5817] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 891.107258][ T24] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 891.146199][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 891.146215][ T30] audit: type=1400 audit(890.749:3417): avc: denied { accept } for pid=16351 comm="syz.0.2655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 891.177354][ T5894] usb 6-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 891.219702][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.257941][ T5894] usb 6-1: Product: syz [ 891.270269][ T5894] usb 6-1: Manufacturer: syz [ 891.279759][ T5894] usb 6-1: SerialNumber: syz [ 891.283851][T15884] usb 5-1: USB disconnect, device number 79 [ 891.301053][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 891.333256][ T24] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 891.344819][ T5894] ti_usb_3410_5052 6-1:1.236: TI USB 5052 2 port adapter converter detected [ 891.369982][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.434517][ T24] usb 1-1: Product: syz [ 891.439005][ T24] usb 1-1: Manufacturer: syz [ 891.454575][ T24] usb 1-1: SerialNumber: syz [ 891.481276][ T24] usb 1-1: config 0 descriptor?? [ 891.495049][ T24] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 891.551907][ T5817] usb 6-1: USB disconnect, device number 51 [ 891.581969][T16359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=16359 comm=syz.1.2657 [ 891.600233][T16359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=16359 comm=syz.1.2657 [ 891.683975][ T5894] usb 3-1: USB disconnect, device number 87 [ 891.919989][T15884] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 892.070828][T15884] usb 2-1: Using ep0 maxpacket: 32 [ 892.084932][T15884] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 892.094607][T15884] usb 2-1: config 0 has no interface number 0 [ 892.103335][T15884] usb 2-1: config 0 interface 151 has no altsetting 0 [ 892.123750][T15884] usb 2-1: New USB device found, idVendor=2770, idProduct=9051, bcdDevice=d9.3e [ 892.133325][T15884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.141868][T15884] usb 2-1: Product: syz [ 892.146496][T15884] usb 2-1: Manufacturer: syz [ 892.151458][T15884] usb 2-1: SerialNumber: syz [ 892.176754][T15884] usb 2-1: config 0 descriptor?? [ 892.202615][T15884] gspca_main: sq905c-2.14.0 probing 2770:9051 [ 892.239740][T16369] netlink: 2384 bytes leftover after parsing attributes in process `syz.5.2661'. [ 892.290342][ T5894] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 892.480315][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 892.492017][ T5894] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 892.500423][ T5894] usb 5-1: config 179 has no interface number 0 [ 892.508773][ T5894] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 892.520385][ T5894] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 892.531893][ T5894] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 892.543330][ T5894] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 892.555094][ T5894] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 892.568563][ T5894] usb 5-1: config 179 interface 65 has no altsetting 0 [ 892.576801][ T5894] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 892.603988][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.613149][T15884] gspca_sq905c: sq905c_read: usb_control_msg failed (-32) [ 892.622396][T15884] sq905c 2-1:0.151: Reading version command failed [ 892.632559][T15884] sq905c 2-1:0.151: probe with driver sq905c failed with error -32 [ 892.640544][T15885] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 892.768223][ T5894] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input50 [ 892.841552][ T5177] input input50: unable to receive magic message: -110 [ 892.991669][ T5177] input input50: unable to receive magic message: -32 [ 893.012563][ T24] gspca_ov534_9: reg_w failed -110 [ 893.173636][ T5177] input input50: unable to receive magic message: -32 [ 893.186112][ T5177] input input50: unable to receive magic message: -32 [ 893.205634][ T5177] input input50: unable to receive magic message: -32 [ 893.217373][ T5177] input input50: unable to receive magic message: -32 [ 893.228276][ T5177] input input50: unable to receive magic message: -32 [ 893.242227][T15885] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 893.254164][T15885] usb 6-1: config 0 has no interface number 0 [ 893.260531][T15885] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 893.269608][T15885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.284379][T15885] usb 6-1: config 0 descriptor?? [ 893.304028][T15885] usb 6-1: selecting invalid altsetting 1 [ 893.309873][T15885] dvb_ttusb_budget: ttusb_init_controller: error [ 893.440515][T15885] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 893.442508][ T5817] usb 5-1: USB disconnect, device number 80 [ 893.449015][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 893.490014][ T24] gspca_ov534_9: Unknown sensor 0000 [ 893.490081][ T24] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 893.588959][T15885] DVB: Unable to find symbol cx22700_attach() [ 893.647035][T15885] DVB: Unable to find symbol tda10046_attach() [ 893.657354][T15885] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 893.672803][T15885] usb 6-1: USB disconnect, device number 52 [ 893.817428][ T5817] usb 1-1: USB disconnect, device number 73 [ 893.870493][ T24] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 894.021135][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 894.027716][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 894.040274][ T24] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 894.049296][ T24] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 894.057885][ T24] usb 3-1: Product: syz [ 894.062116][ T24] usb 3-1: Manufacturer: syz [ 894.066706][ T24] usb 3-1: SerialNumber: syz [ 894.072840][ T24] usb 3-1: config 0 descriptor?? [ 894.078525][T16376] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 894.159978][ T5817] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 894.258019][ T30] audit: type=1400 audit(894.229:3418): avc: denied { mount } for pid=16387 comm="syz.5.2667" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 894.280206][T15885] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 894.290300][ T5817] usb 1-1: device descriptor read/64, error -71 [ 894.452284][T15885] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 894.461120][T15885] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 894.471589][T15885] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 894.480778][T15885] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 894.491864][T15885] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 894.505397][T15885] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 894.514714][T15885] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 894.522884][T15885] usb 5-1: Product: syz [ 894.527320][T15885] usb 5-1: Manufacturer: syz [ 894.538923][T15885] cdc_wdm 5-1:1.0: skipping garbage [ 894.545938][T15885] cdc_wdm 5-1:1.0: skipping garbage [ 894.551646][ T5817] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 894.552890][T15885] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 894.565537][T15885] cdc_wdm 5-1:1.0: Unknown control protocol [ 894.591522][ T24] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 894.694226][ T5817] usb 1-1: device descriptor read/64, error -71 [ 894.747574][ T5894] usb 2-1: USB disconnect, device number 80 [ 894.753591][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 894.774843][ T24] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 894.794401][ T24] usb 6-1: config 0 has no interface number 0 [ 894.801082][ T24] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.814420][T16386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.823841][ T24] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 894.825033][T16386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 894.835781][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00 [ 894.851068][ T5817] usb usb1-port1: attempt power cycle [ 894.857557][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.972181][ T24] usb 6-1: config 0 descriptor?? [ 895.640288][ T5817] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 895.648006][ T5894] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 895.670755][ T5817] usb 1-1: device descriptor read/8, error -71 [ 895.794377][ T24] hid_parser_main: 1 callbacks suppressed [ 895.794390][ T24] logitech-djreceiver 0003:046D:C51B.000F: unknown main item tag 0x0 [ 895.808469][ T5894] usb 2-1: Using ep0 maxpacket: 8 [ 895.814117][ T24] logitech-djreceiver 0003:046D:C51B.000F: unknown main item tag 0x0 [ 895.822997][ T24] logitech-djreceiver 0003:046D:C51B.000F: unknown main item tag 0x0 [ 895.832067][ T24] logitech-djreceiver 0003:046D:C51B.000F: unknown main item tag 0x0 [ 895.840658][ T5894] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 895.849840][ T24] logitech-djreceiver 0003:046D:C51B.000F: unknown main item tag 0x0 [ 895.858319][ T5894] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 895.872715][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 895.884158][ T24] logitech-djreceiver 0003:046D:C51B.000F: hidraw0: USB HID v0.09 Device [HID 046d:c51b] on usb-dummy_hcd.5-1/input128 [ 895.913201][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 895.930138][ T5817] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 895.939229][ T5894] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 895.948911][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.957402][ T5894] usb 2-1: Product: syz [ 895.962239][ T5817] usb 1-1: device descriptor read/8, error -71 [ 895.968524][ T5894] usb 2-1: Manufacturer: syz [ 895.973761][ T5894] usb 2-1: SerialNumber: syz [ 895.982983][ T5894] usb 2-1: config 0 descriptor?? [ 895.995849][T16393] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 896.014234][ T24] usb 6-1: USB disconnect, device number 53 [ 896.040656][T16397] fido_id[16397]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 896.072118][ T5817] usb usb1-port1: unable to enumerate USB device [ 896.335530][ T5894] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 896.353591][ T5894] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input51 [ 896.373351][ C1] powermate: config urb returned -71 [ 896.379064][ C1] powermate: config urb returned -71 [ 896.384572][ C1] powermate: config urb returned -71 [ 896.390311][ C1] powermate: config urb returned -71 [ 896.410809][ T5894] usb 2-1: USB disconnect, device number 81 [ 896.416744][ C1] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 896.634373][ T5817] usb 3-1: USB disconnect, device number 88 [ 896.801090][T16404] FAULT_INJECTION: forcing a failure. [ 896.801090][T16404] name failslab, interval 1, probability 0, space 0, times 0 [ 896.814204][T16404] CPU: 0 UID: 0 PID: 16404 Comm: syz.5.2669 Not tainted syzkaller #0 PREEMPT(full) [ 896.814228][T16404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 896.814237][T16404] Call Trace: [ 896.814244][T16404] [ 896.814251][T16404] dump_stack_lvl+0x16c/0x1f0 [ 896.814276][T16404] should_fail_ex+0x512/0x640 [ 896.814295][T16404] ? __kmalloc_cache_noprof+0x5f/0x780 [ 896.814322][T16404] should_failslab+0xc2/0x120 [ 896.814343][T16404] __kmalloc_cache_noprof+0x72/0x780 [ 896.814368][T16404] ? hfsc_change_class+0x68f/0x4020 [ 896.814392][T16404] ? __nla_parse+0x40/0x60 [ 896.814419][T16404] ? hfsc_change_class+0x68f/0x4020 [ 896.814440][T16404] hfsc_change_class+0x68f/0x4020 [ 896.814468][T16404] ? __pfx_hfsc_change_class+0x10/0x10 [ 896.814492][T16404] ? __lock_acquire+0xb97/0x1ce0 [ 896.814516][T16404] ? qdisc_match_from_root+0x16f/0x260 [ 896.814542][T16404] ? __pfx_hfsc_change_class+0x10/0x10 [ 896.814562][T16404] tc_ctl_tclass+0x59d/0x16c0 [ 896.814584][T16404] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 896.814609][T16404] ? trace_contention_end+0xdd/0x130 [ 896.814629][T16404] ? __mutex_lock+0x1c5/0x1060 [ 896.814653][T16404] ? __lock_acquire+0x62e/0x1ce0 [ 896.814691][T16404] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 896.814720][T16404] rtnetlink_rcv_msg+0x3c9/0xe90 [ 896.814746][T16404] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 896.814777][T16404] ? ref_tracker_free+0x37c/0x830 [ 896.814811][T16404] netlink_rcv_skb+0x155/0x420 [ 896.814836][T16404] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 896.814861][T16404] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 896.814896][T16404] ? netlink_deliver_tap+0x1ae/0xd30 [ 896.814924][T16404] netlink_unicast+0x5aa/0x870 [ 896.814952][T16404] ? __pfx_netlink_unicast+0x10/0x10 [ 896.814987][T16404] netlink_sendmsg+0x8c8/0xdd0 [ 896.815013][T16404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 896.815044][T16404] ____sys_sendmsg+0xa95/0xc70 [ 896.815071][T16404] ? copy_msghdr_from_user+0x10a/0x160 [ 896.815097][T16404] ? __pfx_____sys_sendmsg+0x10/0x10 [ 896.815136][T16404] ___sys_sendmsg+0x134/0x1d0 [ 896.815160][T16404] ? __pfx____sys_sendmsg+0x10/0x10 [ 896.815216][T16404] __sys_sendmsg+0x16d/0x220 [ 896.815239][T16404] ? __pfx___sys_sendmsg+0x10/0x10 [ 896.815278][T16404] do_syscall_64+0xcd/0x4e0 [ 896.815304][T16404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.815322][T16404] RIP: 0033:0x7f6bd318eec9 [ 896.815338][T16404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 896.815356][T16404] RSP: 002b:00007f6bd3fe6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 896.815374][T16404] RAX: ffffffffffffffda RBX: 00007f6bd33e5fa0 RCX: 00007f6bd318eec9 [ 896.815387][T16404] RDX: 0000000004000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 896.815399][T16404] RBP: 00007f6bd3fe6090 R08: 0000000000000000 R09: 0000000000000000 [ 896.815409][T16404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 896.815420][T16404] R13: 00007f6bd33e6038 R14: 00007f6bd33e5fa0 R15: 00007ffd1cfecf38 [ 896.815445][T16404] [ 897.177627][T15884] usb 5-1: USB disconnect, device number 81 [ 897.500280][ T5894] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 897.603053][ T30] audit: type=1400 audit(897.579:3419): avc: denied { listen } for pid=16407 comm="syz.0.2671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 897.622485][ T30] audit: type=1400 audit(897.599:3420): avc: denied { accept } for pid=16407 comm="syz.0.2671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 897.765195][T16419] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2673'. [ 898.216205][T16424] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2673'. [ 898.301211][T16412] netlink: 'syz.0.2671': attribute type 3 has an invalid length. [ 898.322299][T16412] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2671'. [ 898.400253][ T5894] usb 2-1: device not accepting address 82, error -71 [ 898.606024][ T30] audit: type=1400 audit(898.579:3421): avc: denied { setattr } for pid=16439 comm="syz.5.2677" name="video5" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 898.958260][T16454] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2679'. [ 899.358006][T16452] netlink: 2384 bytes leftover after parsing attributes in process `syz.5.2680'. [ 899.411773][T15885] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 899.742123][T15885] usb 1-1: not running at top speed; connect to a high speed hub [ 899.761351][T15885] usb 1-1: config 1 interface 0 altsetting 126 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 899.774751][T15885] usb 1-1: config 1 interface 0 altsetting 126 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 899.786268][T15885] usb 1-1: config 1 interface 0 altsetting 126 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 899.799642][T15884] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 899.826258][T15885] usb 1-1: config 1 interface 0 has no altsetting 0 [ 899.839469][T15885] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 899.848794][T15885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.856889][T15885] usb 1-1: Product: э [ 899.861153][T15885] usb 1-1: Manufacturer: ⷨᅧ䉮審䊰Ԫ뒅鷕䵐겨ڲ⏿웆栃镒춨鏟⡛ፏ猾⩲⽩ꏌ뤓ۯ韠ﾁ鏀灲⺠鬯뽎䖫픙ᑞ㓷ꆳ嬩퟼╸┞樱㚛⟲䚷궻ኙ其⦧쨣ꀲ黩䅩攻ʬ舴呇ᾊ瞍ͱབྷ噣ꩩ瀢ࠝ⎙퀍蕘柣㍖淼ኾ뭹 [ 899.885960][T15885] usb 1-1: SerialNumber: 䰊 [ 900.006092][T16442] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 900.013857][T16442] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 900.073785][T15884] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 900.098849][T15884] usb 6-1: config 0 has no interface number 0 [ 900.110040][T15884] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 900.119642][T15884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.138191][T15884] usb 6-1: config 0 descriptor?? [ 900.416174][T15884] usb 6-1: selecting invalid altsetting 1 [ 900.438484][T15884] dvb_ttusb_budget: ttusb_init_controller: error [ 900.450828][T15884] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 901.009483][T15884] DVB: Unable to find symbol cx22700_attach() [ 901.053512][T15884] DVB: Unable to find symbol tda10046_attach() [ 901.059761][T15884] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 901.101800][T15884] usb 6-1: USB disconnect, device number 54 [ 901.869699][T16480] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2687'. [ 902.041686][T15885] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 902.059795][T16483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2687'. [ 902.101427][T15885] usb 1-1: USB disconnect, device number 78 [ 902.178402][T16492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2688'. [ 902.520061][T15879] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 902.721079][T15879] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 902.753262][T15879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.773745][T15879] usb 6-1: config 0 descriptor?? [ 902.813511][T15879] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 903.060389][ T5817] usb 2-1: new low-speed USB device number 84 using dummy_hcd [ 903.231745][ T5817] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 903.242741][ T5817] usb 2-1: config 0 has no interface number 0 [ 903.249055][ T5817] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 903.262797][ T5817] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 903.274877][ T5817] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 903.287035][ T5817] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 903.299598][ T5817] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 903.312051][ T5817] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 903.325571][ T5817] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 903.334917][ T5894] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 903.343198][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.369198][ T5817] usb 2-1: config 0 descriptor?? [ 903.378450][T16501] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 903.387156][T16501] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 903.414176][ T5817] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 903.423586][ T24] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 903.510073][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 903.516679][ T5894] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 903.525437][ T5894] usb 5-1: config 179 has no interface number 0 [ 903.531856][ T5894] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 903.543189][ T5894] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 903.554891][ T5894] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 903.566384][ T5894] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 903.578031][ T5894] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 903.591790][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 903.597289][ T5894] usb 5-1: config 179 interface 65 has no altsetting 0 [ 903.605827][ T24] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 903.617866][ T5894] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 903.630321][ T24] usb 1-1: config 0 has no interface number 0 [ 903.636444][ T24] usb 1-1: config 0 interface 184 has no altsetting 0 [ 903.758921][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.764929][T15879] gspca_stv06xx: I2C: Read error writing address: -71 [ 904.261194][T15879] usb 6-1: USB disconnect, device number 55 [ 904.304701][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 904.315761][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.325435][ T24] usb 1-1: Product: syz [ 904.329877][ T24] usb 1-1: Manufacturer: syz [ 904.355838][ T5894] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input52 [ 904.388425][ T24] usb 1-1: SerialNumber: syz [ 904.656634][ T24] usb 1-1: config 0 descriptor?? [ 904.670082][ T5177] input input52: unable to receive magic message: -110 [ 904.684287][ T24] smsc75xx v1.0.0 [ 904.711884][ T5177] input input52: unable to receive magic message: -32 [ 904.803950][ T5177] input input52: unable to receive magic message: -32 [ 904.822456][ T5177] input input52: unable to receive magic message: -32 [ 904.859033][ T5177] input input52: unable to receive magic message: -32 [ 904.898206][ T5177] input input52: unable to receive magic message: -32 [ 904.905353][ T5894] usb 5-1: USB disconnect, device number 82 [ 904.905414][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 904.905458][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 905.297526][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 905.310650][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 905.355866][T16522] Mount JFS Failure: -5 [ 905.522577][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 905.533936][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 905.543655][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 905.553432][ T24] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 905.574475][T16528] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2700'. [ 905.958705][T15884] usb 2-1: USB disconnect, device number 84 [ 906.005962][T16532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2700'. [ 906.018267][T15884] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 906.186145][T16541] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2702'. [ 906.190092][ T30] audit: type=1400 audit(906.149:3422): avc: denied { map } for pid=16534 comm="syz.1.2701" path="/dev/dri/card0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 906.218135][ C0] vkms_vblank_simulate: vblank timer overrun [ 906.229090][T16540] ================================================================== [ 906.237176][T16540] BUG: KASAN: slab-out-of-bounds in __cpa_addr+0x1d3/0x220 [ 906.244399][T16540] Read of size 8 at addr ffff88805fe68c60 by task syz.1.2701/16540 [ 906.252276][T16540] [ 906.254580][T16540] CPU: 1 UID: 0 PID: 16540 Comm: syz.1.2701 Not tainted syzkaller #0 PREEMPT(full) [ 906.254595][T16540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 906.254603][T16540] Call Trace: [ 906.254607][T16540] [ 906.254612][T16540] dump_stack_lvl+0x116/0x1f0 [ 906.254632][T16540] print_report+0xcd/0x630 [ 906.254647][T16540] ? __virt_addr_valid+0x81/0x610 [ 906.254666][T16540] ? __phys_addr+0xe8/0x180 [ 906.254683][T16540] ? __cpa_addr+0x1d3/0x220 [ 906.254695][T16540] kasan_report+0xe0/0x110 [ 906.254709][T16540] ? __cpa_addr+0x1d3/0x220 [ 906.254726][T16540] __cpa_addr+0x1d3/0x220 [ 906.254739][T16540] cpa_flush+0x28b/0x8a0 [ 906.254753][T16540] ? __pfx_cpa_flush+0x10/0x10 [ 906.254766][T16540] ? pgprot2cachemode+0x9a/0x130 [ 906.254783][T16540] ? __pfx_pgprot2cachemode+0x10/0x10 [ 906.254801][T16540] ? drm_gem_get_pages+0x6a0/0xa10 [ 906.254817][T16540] change_page_attr_set_clr+0x34e/0x4a0 [ 906.254832][T16540] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 906.254852][T16540] _set_pages_array+0x1ab/0x2c0 [ 906.254867][T16540] drm_gem_shmem_get_pages_locked+0x384/0x490 [ 906.254881][T16540] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 906.254893][T16540] ? __pfx___might_resched+0x10/0x10 [ 906.254911][T16540] drm_gem_shmem_mmap+0xc9/0x550 [ 906.254922][T16540] ? __pfx_drm_gem_shmem_object_mmap+0x10/0x10 [ 906.254935][T16540] drm_gem_mmap_obj+0x1b5/0x560 [ 906.254949][T16540] drm_gem_mmap+0x40b/0x620 [ 906.254962][T16540] ? __pfx_drm_gem_mmap+0x10/0x10 [ 906.254975][T16540] ? vm_area_alloc+0x1f/0x160 [ 906.254992][T16540] ? lockdep_init_map_type+0x5c/0x280 [ 906.255007][T16540] __mmap_region+0x1306/0x27a0 [ 906.255019][T16540] ? __pfx___mmap_region+0x10/0x10 [ 906.255030][T16540] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 906.255047][T16540] ? audit_log_end+0x1f/0x30 [ 906.255061][T16540] ? audit_log_end+0x1f/0x30 [ 906.255072][T16540] ? common_lsm_audit+0x260/0x300 [ 906.255098][T16540] ? __lock_acquire+0xb97/0x1ce0 [ 906.255112][T16540] mmap_region+0x32b/0x3f0 [ 906.255123][T16540] do_mmap+0xa3e/0x1210 [ 906.255138][T16540] ? __pfx_do_mmap+0x10/0x10 [ 906.255151][T16540] ? __pfx_down_write_killable+0x10/0x10 [ 906.255169][T16540] vm_mmap_pgoff+0x29e/0x470 [ 906.255184][T16540] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 906.255198][T16540] ? __fget_files+0x20e/0x3c0 [ 906.255212][T16540] ksys_mmap_pgoff+0x32c/0x5c0 [ 906.255227][T16540] __x64_sys_mmap+0x125/0x190 [ 906.255240][T16540] do_syscall_64+0xcd/0x4e0 [ 906.255255][T16540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.255267][T16540] RIP: 0033:0x7f03c6d8eec9 [ 906.255279][T16540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 906.255291][T16540] RSP: 002b:00007f03c7cb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 906.255303][T16540] RAX: ffffffffffffffda RBX: 00007f03c6fe6090 RCX: 00007f03c6d8eec9 [ 906.255310][T16540] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 906.255318][T16540] RBP: 00007f03c6e11f91 R08: 0000000000000006 R09: 0000000100000000 [ 906.255325][T16540] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 906.255332][T16540] R13: 00007f03c6fe6128 R14: 00007f03c6fe6090 R15: 00007ffc5b9cff98 [ 906.255342][T16540] [ 906.255346][T16540] [ 906.293418][ T30] audit: type=1400 audit(906.149:3423): avc: denied { execute } for pid=16534 comm="syz.1.2701" path="/dev/dri/card0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 906.294866][T16540] Allocated by task 16540: [ 906.602896][T16540] kasan_save_stack+0x33/0x60 [ 906.607549][T16540] kasan_save_track+0x14/0x30 [ 906.612195][T16540] __kasan_kmalloc+0xaa/0xb0 [ 906.616760][T16540] __kvmalloc_node_noprof+0x3a3/0x9c0 [ 906.622103][T16540] drm_gem_get_pages+0x144/0xa10 [ 906.627014][T16540] drm_gem_shmem_get_pages_locked+0x1e6/0x490 [ 906.633054][T16540] drm_gem_shmem_mmap+0xc9/0x550 [ 906.637959][T16540] drm_gem_mmap_obj+0x1b5/0x560 [ 906.642794][T16540] drm_gem_mmap+0x40b/0x620 [ 906.647269][T16540] __mmap_region+0x1306/0x27a0 [ 906.652003][T16540] mmap_region+0x32b/0x3f0 [ 906.656386][T16540] do_mmap+0xa3e/0x1210 [ 906.660513][T16540] vm_mmap_pgoff+0x29e/0x470 [ 906.665084][T16540] ksys_mmap_pgoff+0x32c/0x5c0 [ 906.669820][T16540] __x64_sys_mmap+0x125/0x190 [ 906.674472][T16540] do_syscall_64+0xcd/0x4e0 [ 906.678954][T16540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.684818][T16540] [ 906.687115][T16540] The buggy address belongs to the object at ffff88805fe68c40 [ 906.687115][T16540] which belongs to the cache kmalloc-32 of size 32 [ 906.700961][T16540] The buggy address is located 0 bytes to the right of [ 906.700961][T16540] allocated 32-byte region [ffff88805fe68c40, ffff88805fe68c60) [ 906.715331][T16540] [ 906.717624][T16540] The buggy address belongs to the physical page: [ 906.724002][T16540] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5fe68 [ 906.732731][T16540] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 906.739808][T16540] page_type: f5(slab) [ 906.743762][T16540] raw: 00fff00000000000 ffff88801b026780 ffffea0001f25cc0 dead000000000004 [ 906.752314][T16540] raw: 0000000000000000 0000000000400040 00000000f5000000 0000000000000000 [ 906.760863][T16540] page dumped because: kasan: bad access detected [ 906.767242][T16540] page_owner tracks the page as allocated [ 906.772924][T16540] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 9249, tgid 9249 (cmp), ts 329371434700, free_ts 328771431791 [ 906.791394][T16540] post_alloc_hook+0x1c0/0x230 [ 906.796136][T16540] get_page_from_freelist+0x10a3/0x3a30 [ 906.801656][T16540] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 906.807526][T16540] alloc_pages_mpol+0x1fb/0x550 [ 906.812363][T16540] new_slab+0x24a/0x360 [ 906.816530][T16540] ___slab_alloc+0xdc4/0x1ae0 [ 906.821217][T16540] __slab_alloc.constprop.0+0x63/0x110 [ 906.826665][T16540] __kmalloc_noprof+0x501/0x880 [ 906.831490][T16540] tomoyo_encode2+0x100/0x3e0 [ 906.836140][T16540] tomoyo_encode+0x29/0x50 [ 906.840527][T16540] tomoyo_realpath_from_path+0x18f/0x6e0 [ 906.846130][T16540] tomoyo_check_open_permission+0x2ab/0x3c0 [ 906.851993][T16540] tomoyo_file_open+0x6b/0x90 [ 906.856647][T16540] security_file_open+0x84/0x1e0 [ 906.861557][T16540] do_dentry_open+0x596/0x1530 [ 906.866292][T16540] vfs_open+0x82/0x3f0 [ 906.870334][T16540] page last free pid 50 tgid 50 stack trace: [ 906.876291][T16540] __free_frozen_pages+0x7df/0x1160 [ 906.881474][T16540] tlb_remove_table_rcu+0x121/0x320 [ 906.886662][T16540] rcu_core+0x799/0x1530 [ 906.890905][T16540] handle_softirqs+0x219/0x8e0 [ 906.895655][T16540] __irq_exit_rcu+0x109/0x170 [ 906.900307][T16540] irq_exit_rcu+0x9/0x30 [ 906.904525][T16540] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 906.910140][T16540] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 906.916091][T16540] [ 906.918384][T16540] Memory state around the buggy address: [ 906.923982][T16540] ffff88805fe68b00: 00 00 00 00 fc fc fc fc 00 00 00 01 fc fc fc fc [ 906.932011][T16540] ffff88805fe68b80: 00 00 00 06 fc fc fc fc 00 00 00 06 fc fc fc fc [ 906.940039][T16540] >ffff88805fe68c00: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 906.948066][T16540] ^ [ 906.955227][T16540] ffff88805fe68c80: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 906.963257][T16540] ffff88805fe68d00: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 906.971284][T16540] ================================================================== [ 907.022351][T16540] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 907.029578][T16540] CPU: 1 UID: 0 PID: 16540 Comm: syz.1.2701 Not tainted syzkaller #0 PREEMPT(full) [ 907.038969][T16540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 907.049028][T16540] Call Trace: [ 907.052319][T16540] [ 907.055257][T16540] dump_stack_lvl+0x3d/0x1f0 [ 907.059862][T16540] vpanic+0x640/0x6f0 [ 907.063859][T16540] panic+0xca/0xd0 [ 907.067589][T16540] ? __pfx_panic+0x10/0x10 [ 907.072020][T16540] ? __cpa_addr+0x1d3/0x220 [ 907.076528][T16540] ? preempt_schedule_common+0x44/0xc0 [ 907.081995][T16540] ? preempt_schedule_thunk+0x16/0x30 [ 907.087391][T16540] check_panic_on_warn+0xab/0xb0 [ 907.092344][T16540] end_report+0x107/0x170 [ 907.096688][T16540] kasan_report+0xee/0x110 [ 907.101117][T16540] ? __cpa_addr+0x1d3/0x220 [ 907.105626][T16540] __cpa_addr+0x1d3/0x220 [ 907.109946][T16540] cpa_flush+0x28b/0x8a0 [ 907.114174][T16540] ? __pfx_cpa_flush+0x10/0x10 [ 907.118920][T16540] ? pgprot2cachemode+0x9a/0x130 [ 907.123845][T16540] ? __pfx_pgprot2cachemode+0x10/0x10 [ 907.129205][T16540] ? drm_gem_get_pages+0x6a0/0xa10 [ 907.134301][T16540] change_page_attr_set_clr+0x34e/0x4a0 [ 907.139831][T16540] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 907.145892][T16540] _set_pages_array+0x1ab/0x2c0 [ 907.150729][T16540] drm_gem_shmem_get_pages_locked+0x384/0x490 [ 907.156784][T16540] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 907.163351][T16540] ? __pfx___might_resched+0x10/0x10 [ 907.168630][T16540] drm_gem_shmem_mmap+0xc9/0x550 [ 907.173548][T16540] ? __pfx_drm_gem_shmem_object_mmap+0x10/0x10 [ 907.179680][T16540] drm_gem_mmap_obj+0x1b5/0x560 [ 907.184516][T16540] drm_gem_mmap+0x40b/0x620 [ 907.189001][T16540] ? __pfx_drm_gem_mmap+0x10/0x10 [ 907.194006][T16540] ? vm_area_alloc+0x1f/0x160 [ 907.198671][T16540] ? lockdep_init_map_type+0x5c/0x280 [ 907.204026][T16540] __mmap_region+0x1306/0x27a0 [ 907.208771][T16540] ? __pfx___mmap_region+0x10/0x10 [ 907.213861][T16540] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 907.219827][T16540] ? audit_log_end+0x1f/0x30 [ 907.224404][T16540] ? audit_log_end+0x1f/0x30 [ 907.228976][T16540] ? common_lsm_audit+0x260/0x300 [ 907.234012][T16540] ? __lock_acquire+0xb97/0x1ce0 [ 907.238935][T16540] mmap_region+0x32b/0x3f0 [ 907.243335][T16540] do_mmap+0xa3e/0x1210 [ 907.247475][T16540] ? __pfx_do_mmap+0x10/0x10 [ 907.252049][T16540] ? __pfx_down_write_killable+0x10/0x10 [ 907.257669][T16540] vm_mmap_pgoff+0x29e/0x470 [ 907.262245][T16540] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 907.267339][T16540] ? __fget_files+0x20e/0x3c0 [ 907.271999][T16540] ksys_mmap_pgoff+0x32c/0x5c0 [ 907.276745][T16540] __x64_sys_mmap+0x125/0x190 [ 907.281405][T16540] do_syscall_64+0xcd/0x4e0 [ 907.285897][T16540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.291772][T16540] RIP: 0033:0x7f03c6d8eec9 [ 907.296168][T16540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 907.315757][T16540] RSP: 002b:00007f03c7cb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 907.324150][T16540] RAX: ffffffffffffffda RBX: 00007f03c6fe6090 RCX: 00007f03c6d8eec9 [ 907.332101][T16540] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 907.340052][T16540] RBP: 00007f03c6e11f91 R08: 0000000000000006 R09: 0000000100000000 [ 907.348004][T16540] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 907.355954][T16540] R13: 00007f03c6fe6128 R14: 00007f03c6fe6090 R15: 00007ffc5b9cff98 [ 907.363910][T16540] [ 907.367099][T16540] Kernel Offset: disabled [ 907.371405][T16540] Rebooting in 86400 seconds..