last executing test programs: 13.326485604s ago: executing program 1 (id=1410): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f00009bf000/0x3000)=nil, 0x3000, 0xf, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000e39000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x6dda87c55e1b1fc, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000180)={0xc}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x4a8, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0xfff2, 0x12}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x47c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0x40, 0x8d, 0x80, 0xb7eb}, {0x9, 0x83, 0x8a, 0x8}, {0x6aa, 0x42, 0x1, 0x8}, {0x7, 0x6, 0xe, 0x3}, {0x4, 0xe, 0x3, 0x3}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x343, 0xe9fb, 0x1000005, 0x5b91, 0x4, 0x1, 0x800, 0x5, 0x3, 0x3, 0x8000, 0x4, 0x6, 0x3, 0x0, 0x1ff, 0x77, 0x43, 0x4, 0x2, 0x5d, 0x8, 0x8001, 0x4, 0x3, 0x0, 0xfffff989, 0x8, 0x6, 0x71dbd584, 0x2, 0x7, 0x7, 0x9, 0x4, 0x3, 0xfffffffe, 0x5, 0x9a, 0x1, 0x3, 0x80000001, 0x1, 0x2, 0xfffffffb, 0x7fffffff, 0x2, 0x8, 0x8, 0x10, 0x10, 0x1, 0x2, 0x4, 0x8, 0x7fff, 0x5, 0x0, 0x0, 0x6, 0x9, 0x2, 0x0, 0x3, 0x7, 0x91400, 0x8b9d, 0xff, 0x80, 0xfffffffa, 0xb, 0x8000, 0xb26f, 0x6, 0x4c, 0xff, 0x7d, 0x36, 0x81, 0x80000100, 0xfc9, 0x6, 0xfffffff0, 0x9, 0x5, 0x9, 0x80008010, 0xe, 0x2, 0x80000000, 0xff, 0x4, 0x7, 0x1, 0xa6dd, 0x7, 0xfffffff9, 0x8, 0x82, 0xff, 0x9, 0x3, 0xbdb, 0x1ff, 0x1, 0xc, 0x40, 0xffff8001, 0xffff, 0x8, 0x7fff, 0x402, 0x2, 0x2, 0x7, 0x2, 0xbce, 0x8, 0xd, 0x80, 0x4, 0xacda, 0x4, 0x3542, 0x7, 0xf79, 0x7, 0x3, 0x7, 0x0, 0x7, 0x6, 0x5, 0x100, 0x1, 0x2, 0x80000001, 0x200, 0x1, 0x9, 0x2, 0x0, 0xe200000, 0x6, 0x80000001, 0xaf6, 0x3, 0x10001, 0xe47b, 0x8, 0x3, 0x4, 0x4, 0x5, 0x100000, 0x985, 0x5, 0xd, 0xf4d, 0x7, 0x8001, 0x1c4fd68f, 0x1, 0x5, 0x7fff, 0x0, 0xc2, 0x0, 0x5, 0x81, 0x3, 0x1c37, 0x3, 0xab, 0x2, 0x3, 0xb171, 0x8, 0xf, 0x2cb6, 0x6, 0x2, 0x2, 0x70, 0x80, 0x2, 0xfd, 0x5, 0xb417, 0x2, 0x400, 0x6d, 0xb, 0x401, 0x4, 0x2223, 0x2, 0x200, 0x1, 0x4, 0x1, 0x1, 0xab0, 0xd, 0x80, 0x3ff, 0xcdf6, 0x7, 0x7, 0x7, 0xfffffffa, 0xc54, 0xfffffd18, 0x9, 0x7, 0x7, 0x2, 0x3, 0x9, 0x6, 0x7fff, 0x4, 0xffff, 0x1, 0x381, 0x400, 0x4, 0x274, 0x8001, 0x5, 0x4, 0x5, 0x8, 0x1, 0x8000, 0x2, 0xc9a6, 0xfff, 0x0, 0x4, 0x9, 0x4a78, 0xdf5, 0x5, 0xfffffffe, 0x5, 0x7ff, 0x6, 0xdb, 0x4d, 0x19, 0x7ff, 0x2, 0x5, 0xff6d, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x1000, 0x4, 0x3, {0xb, 0x2, 0x200, 0x4684, 0x80, 0xfffffffe}, {0x0, 0x2, 0x4, 0x1ff, 0x7b}, 0xfb, 0x3, 0x5}}]}]}}]}, 0x4a8}, 0x1, 0x0, 0x0, 0x1}, 0x800) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x800, &(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYRES8=r4, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRES8=r0, @ANYRES16=r2, @ANYRESHEX=r3, @ANYBLOB, @ANYRES16=r7]) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) sendfile(r8, r8, &(0x7f0000000000)=0x7fffffffffffffff, 0x200) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c000000060a0904000000000000000002000000200004801c0001800a00010072616e67650000000c00028008000140000000080900010073797a30000000000900020073797a32000000bd1400000011000100f2000000000000000000000a"], 0x74}}, 0x0) read$FUSE(r2, &(0x7f0000006380)={0x2020}, 0x2020) r10 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xffffffff, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e123, 0xf, 0x4, 0x4000, 0x3}, 0x26, 0x200, 0x8, 0x0, 0x0, 0x6, 0x0}) 9.585455552s ago: executing program 0 (id=1420): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000600)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18, 0x9}}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x7}) r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0x0, 0x80000001, {0x0}, {}, 0x6, 0x8}) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r3, 0x1, 0x3, &(0x7f0000000480)=""/260, &(0x7f0000000100)=0x104) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, r5}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb01001800000000000000180049ec2e240bdea6c600000d00000000000002030000000900000000000012050000000000f69c5670447d1d58054ddfed2021e25b329847a96ffc8aeeb263795b1d92216c6a31f599c400d2c9d194a624ffda5490ee9156bab73c88bab2b61156b34b97ab2cf5b95bfac5b124f72d"], 0x0, 0x32, 0x0, 0x0, 0x5}, 0x28) syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0xe0000, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x800448d2, &(0x7f00000000c0)="321795792243c3d755fcd4e1fd2e8b29060674040738ab3456a297775b7b54343ea182231b5c11a3c3594e5a8daa85f75039d6d7908011bc6d9495cab5e080b13b30993398ffef08db76f342017d4b2b4d21c4609c12cd98576215f2324c7a50abdc6a892cd0bb9d28e545") 9.38739071s ago: executing program 1 (id=1422): openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x20000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x468, 0x30, 0x401, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_ct={0x40, 0x2, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "b21c2ba41aa4614d149c418dea4b7557"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x6}}}]}, {0x4}, {0xc}, {0xc}}}]}, {0x3c8, 0x1, [@m_csum={0x1a0, 0x0, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x40, 0xffffffffffffffff, 0x9, 0x7}, 0x52}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fffffff, 0x0, 0x1, 0x9}, 0x40}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x1, 0x8, 0x6, 0xac}}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x6, 0xffffffffffffffff, 0x0, 0x4}, 0x6b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffff81, 0x4c, 0x5, 0x7, 0x1}, 0x5c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000000, 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x18}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x687, 0x1ff, 0x0, 0x0, 0x1}, 0x7}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xfa, 0x59c1736ef8911bfd, 0x2, 0x9}, 0x2f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x809, 0x2, 0x100, 0xc}, 0x6d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x6, 0x0, 0xfc}, 0x7}}]}, {0x5c, 0x6, "fa73775bf46b51fa79377943dea0a06386d81cca55ab0653c55c09b2af5abf54ddb0ab1b16122f694b458279260761646a23a9e939bafbf254e4e3b4d84de4cd44ca093923edda965ad99b19a95c9df06a2f289048c6317b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0xfc, 0x1a, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @broadcast}]}, {0xc7, 0x6, "e9d37ac738bd5efab017f03794101301e7b0ee527fd75d43b51d06a399708e93da0341560e289adbe7ca5f62c0f955076b4773767ae3b9ec644c9c7a73fca850b0e3da51c071b230599c7c4b7a391b1186f195b7de6230e1191a6081007c8284efe1b327de8d4bd61783d68b87caab00a82d4c6c5489303216fc256186d4ba12f43154414de79192379bc023b2b7f57d1ead596f305183797d72241a0c6c45efec17b497410476a3ebb387dbc37b02e4c71a178e5b5193ebd5881b88e177f8422394a9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0x128, 0x5, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'ife\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'ife\x00'}]}, {0xe2, 0x6, "1f4101d0a33bafedb2153f76367f92506e591ddc783b5a6745440914ebd168b608f3ebab0ee2e3684048fead071839ec6fa821bd203420a9491ecb4f5ce637d0b34f8aaa0057ba46504cae4ec2ce62365c891f11aea24bfdeb0641138a8b68be3563c59efc12a4dca2ecc5d9422f2272941a41031dfa828d05f74a6eca427ce6fdd3b969c764fd5074fb0a8039721b0d452dc058c2c7a8c99bf4a20953a3946b375c8b5250edbfe611990e39daf68aa15a7bda02ed9d3d65032df5caebe64900767d4cc8f2bc5a0eed810ce2ed33d9f9c46dd6894f0eadd5b5fb45511757"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x468}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount(0x0, 0x0, &(0x7f0000000040)='binder\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)={0x7, 'team_slave_1\x00', {0x9}}) r3 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r3, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000980)=ANY=[@ANYBLOB="201532"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000c80)={0x84, &(0x7f00000009c0)={0x40, 0x7, 0x2, "facd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000440)={0x20, 0x16, 0x4, "30398e18"}, 0x0, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x8}, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x1}, 0x0, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000740)={0x40, 0x13, 0x6}, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x9}, 0x0, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x1}}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) 8.897098705s ago: executing program 3 (id=1424): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000340)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a06", 0x20}], 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="1105fbfffffefefffff605000000", @ANYRES32], 0x21}}, 0xa000000) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fcdbdf2505000000080004000200000008000c00d9e43eed6b9fdeeef9f84956694538a5b5bde30af01d70d5d49f04f17edea4ceb22312ec442a5fb4e7fa2724ed6bf9ddf96e65d8108279c859ba9cdd5ed8cf79c5681e59561586ab00b660fcb69ad8b0ac3d2a9684d1e5856317e9ccbe2812808451811e761cf7081856bff483fe5d5e1f4ec6d147b6bca1dc3ade4285ed2c1262729266af358c000000000000000000000000000088073032404e31bcae777ae172efdd516eef1f2fea404211b6c9596be1a6d032070d58a3140ccf7aa89175ba16cbee62b90d76d93fcad0a5642dc68064b9661a8141f413b2ebc228a02d4051b81608ff7fb6d96a7c22c6d9cbc93bc075c393886e9d13fac05a06b67194bf123b57687390901ec39280f137b7"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x44001) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r2, &(0x7f0000002080)=0x64, 0x21c) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000680)={{{@in=@multicast1, @in=@multicast2}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000000080)=0xffffffffffffff52) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r2, &(0x7f0000006180)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00220f0000000b2e"], 0x0}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) 8.418032301s ago: executing program 2 (id=1425): syz_open_dev$loop(0x0, 0x47d, 0x0) setresgid(0xee00, 0xee01, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000340)=[@free_buffer], 0x0, 0x0, 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RELDISP(r2, 0x5605) r3 = syz_open_procfs(0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f00000001c0)=0x4, 0x4) 8.332781399s ago: executing program 0 (id=1426): r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002280)=ANY=[@ANYRES64=r0, @ANYBLOB="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", @ANYRES8=r0, @ANYBLOB="28b38abcde9468d91e39deb2a645167d94851bd3eb36f40081e6e597147aa43f0a5b56a379436c3ef8c0e0ea30782d437e3fe10f9f70b5a1bdab2c2d2baa9e147c07ae92ab0a4b908985f0f0be5fd18797c0a8ddb21a6bfc5325ad62be4808afb9ff34c22fa4b985736577fc210e4e6184825dd83a0a07cc643568aef8cd9061b2cd74cc9e9bd558927b6a1981567e93c3291311be0253dc3bb2880f757b306f2b7ecd1f50250c54f6a458955a10e46b13d45d465fa40fa0653c75051d46553185732fd3"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x10) r3 = timerfd_create(0x7, 0x0) timerfd_gettime(r3, &(0x7f0000001200)) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0xc) write(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x3, r4, 0x4004) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) sched_setattr(r4, &(0x7f0000000100)={0x38, 0x3, 0x8, 0x1, 0x80000001, 0x5, 0x9032, 0x0, 0x41f1e862, 0x1}, 0x0) close(0x3) 7.304769442s ago: executing program 0 (id=1428): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc\x00\x00\x00\x00\x00\x00\x00\x00D\x00\x00v4\x00\x00s/\xdaL!\xe1\xdc\x1f\v\x04\xf44.\xab%nN\xd4\xfc\x11\x00\xd1l,'}, 0x30) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x7, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3fd, 0x4000009, 0x200, 0xe2df, 0x9, 0x1, 0x4, 0x40000, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) 7.038020953s ago: executing program 2 (id=1429): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xec}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='vegas', 0x5) socket$inet(0x2, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) setpriority(0x2, 0x0, 0x6) syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x4}, 0x0, 0xfffffffffffffffc) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r8, 0x7a5, &(0x7f0000000240)={{@any, 0x6}, 0x1, 0x2, 0x964}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7a8, &(0x7f0000000280)={{@host, 0x5}, @host, 0x2, 0x200, 0x0, 0x8000000000000001, 0xabb, 0x80000001, 0x9}) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r9, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x3c0, 0x300, 0x3c00, 0x1000, 0xbb3a, 0x2, 0x0, 0x100, {0x0, 0x40002000}, {0x0, 0x2, 0x1}, {0x4000000, 0x7}, {0xfe, 0x8, 0x40000}, 0x0, 0x3f0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}) 5.540104881s ago: executing program 1 (id=1430): r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@nl=@unspec, &(0x7f00000000c0)=0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x0, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x1, 0x1, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xda, &(0x7f0000000180)=""/218, 0xf6054b9c49695e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400}, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000600)="23e8d32682044b1aea93aa4555b24dafb496d785d0dbf07b4316168cc5a6a8dd21f376d97d75ce4960fc9312fb9bdc83b7949c4f2a43ab467980eeb1b152c47e352bd726a5133cd8015eb017ad81487f280481d1f9c4c0ce0b6b9fea711f5c639afeb7d2d788954750788986380c0a98ee1f118b24199ede4094292b9f6b62dd2a1913cc58fd7a3ac49f633632ac7e8c521596401e51844dae173a238d87f07168a59c64c68f5c5b64581739ebbd9df4b0834a26e2190aab93a140b21dbae9762b89d98b48399d1a365f028649b8f106c6c9d9b19b39bdbbca9022dffb05d58c9fee01cf884f4214", 0xe8}, {&(0x7f0000000940)="447ee3b4212bcf35d142a87fda51c05cb118230e7a8a5a6f798db6e01cacb544f783a87cf17cd21e4338f7de5c6650ac158eb6002be85f5b8ac59e399b42e5ce19a463fabafee56ad00b8ab03fd98a9dd0bcec9910762b65bfd84af48626bb83398890ed03555a7cfe19ad55a4acb18418366625066bad998fcec03d8e2299d8cb46dab90d5af855a252620a4263866013764f842f4f887a7b264257fe4b2bea9d83d004caa5907778082b6720553e7a5f069c4d19cf4198d0eaf78b190abd3b78aa8e27fec3aac72bbf1a0877b9786d9741a6d1dcaed3466123bf3946ac5b582c6333e11971a5fbc6388416e8a9595bf8faac17", 0xf4}, {&(0x7f0000000a40)="8f02e3565c52b0383438d682e9cec9094f652e51e7f42678ebc6cd97fd941160dac5cd0d308a6c3cdbeb0581a389241e31c4c1a3c7abb00e34d43f71680a0dcff53558527d9a680a7b19d151801ceb713158d845ef407bf9a371b48e7f6ac0702843f9790c371494ced6dcc0d3114240afe13b182d361f3171c48c7811ec2880ff0265c73f3856f6dacb8316d99d42336a6bbe3c81a438269e71efb8db01d1d2d31720ab6b3ef7985caf53d23bc3ecd7a4bed188d07f39dc9bf0474e3af67cb61d8c4504697f065527e14f1c761e50139194aac59785aaa8ac9707f2c2fc7a", 0xdf}, {&(0x7f0000000540)="7ac19d79dbd587f797c6100b33847253c4b3bfdb880c8f8ea479386ad5ac110de0863105748dd4c6bb2847ea8e6b2ecfdfc189b63f", 0x35}, {&(0x7f0000000700)="1ebbfa809aed1fe935bf788625d5ba4ea092b3d1c3d4cacd94c6adf2e4564b2d80bcce66c257c4e27a16b51a407df5e40a6bb8f7e0c12d90e56c8490cbaffe39f9cdf808a45a7f667252ca016ca9b7c06ba1dd5dc86085f5dcc755484863496628abb0efb358af8c0373652cde4a", 0x6e}, {0x0}, {0x0}], 0x7, &(0x7f0000001d00)=[{0x18, 0x109, 0x400, "df"}, {0xc8, 0x88, 0x101, "d5bf05e7729cfa9f9355fe9def836b05ede6f32877b284065ca11fc037ed04497d3106656f151acf318533b157e5578ec8c44fc3c765a13ba5e17708b493de3d70865cdec15b0c98bbbd21577673ec006b1eb5f59a50bf27d344ef928f2b8254b67ce224dabed9e17fa490bbfcacea439ce56c4c109944afbb9c6b11b66d6d2b0602a7e27322491b13a7ca28e04914b864f8e1df07a843cea5a1e6a2cb1444e2974113923f089931af26352852f4c74850d70d4757dbe2f3"}, {0x90, 0x119, 0x0, "773e8e4df532d20f3c2f81f71ffb9cb18647f3351b5f678a5fe7e77a3be5aa8780a852fcd0e246eb3911827e9318699078038001c587f0b8200727c0909172bb699348b2a6a652995d09e4fb00c97a881e183bc8a344da683f281d5b995f0e7c3f8d3b4fb198eafe1366c5ce255b471ec1a4b0310eecb90c49"}, {0x20, 0x0, 0x8, "185f99848be7001ec8"}, {0x18, 0x52, 0x40000000, "b126"}, {0x60, 0x108, 0x7, "fa2200eb483cbe7f12c99314532740cde9a519987833fe8f12e197d59b0c6c815b87b16c714dbbb1c0e119f2228ee8350fde9e8f2e9f7bb8248ea0cc4e973365c3e4a06b93fd0f5764"}], 0x208}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'}) sendto$packet(r4, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb1", 0x11, 0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) 5.084189172s ago: executing program 2 (id=1431): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000001ec0), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x5000) 4.858100904s ago: executing program 4 (id=1432): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB], 0x34}, {&(0x7f0000000980)={0x200, 0x3c, 0x2, 0x70bd2d, 0x25dfdbfd, "", [@nested={0x1ed, 0x108, 0x0, 0x1, [@nested={0x159, 0xa5, 0x0, 0x1, [@nested={0x4, 0x11}, @typed={0xdd, 0x3c, 0x0, 0x0, @binary="4accca875a00ca7086e7c14066a2420b48a2cdbd067db987c001f9d59bbd822458a96fb955391bce8d20cae98f703d4521aa06e835a50debf2852a21e60bb756872a6b14cfd4324a3e7ac46db09001d790b6936bf97c5667af68c6589663ab4b7f50de9017c6ec5b18a7bf4110ef95070e2fc96bfe1d0db42ca20827b8b977535b646a7e5456dea43d71505670bd7d1ede4e7ee8216def76cde2c1845042adfd893e0b0f7c36834e7585b64b2da34ed2dcbc6c68c464c21185096ed583364da6fb8bf0b4815f489ea49414bd13bc02fa00facfaa2bf0223387"}, @nested={0x4, 0x56}, @typed={0xc, 0x6a, 0x0, 0x0, @u64=0x505}, @generic="234732695f0e575c668bf7f7618c5ecd166a675295e646177df24e9410de710f4a4051d8cbbf0a28373cca31cd6cc08c04d1b9b0afa5b4a22842755c7616f28e3e864d187d0df763cc4e1435fec4ffbf52cd1f30a65d454e5e3f7b6cdd", @nested={0x4, 0x9b}]}, @generic="b4c15156101c9b408a284dfe788c5a19bc12c29b6af5e67e7b1f463c47b926e3b0fd3c86aaff07aad0b332feb572127c", @generic="58df81e72559d0f3617285c7f30c0921331c665219ec0997d59ba5131fb9cec06e3b0b2a51347c9b094f893b3736a97e6b6ac52212c2e992ace55caeb7d787040b176920911e85d8a8", @typed={0x14, 0x8a, 0x0, 0x0, @ipv6=@loopback}]}]}, 0x200}], 0x2}, 0x800) 4.83417977s ago: executing program 2 (id=1433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80d02, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000380)='anon_inodefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00'}) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000340)=0x400008, 0x4) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x2000, 0xfffffffc, 0x0, 0x0, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fremovexattr(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="74224b87089dd08998"]) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) 4.783855723s ago: executing program 3 (id=1434): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) r3 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x6c90, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000009001000280b000000dbdf2500080003004f97bfb570ef3d233e32f8c6c357f8419913b814930dfd362465857a51a7", @ANYRES32=r3, @ANYRES16=r1, @ANYBLOB="080001000300000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2c048010}, 0x20000000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f00000002c0)={0x1, 0xc}, 0x2) write$USERIO_CMD_REGISTER(r4, &(0x7f0000000000)={0x0, 0x5}, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x5, 0x1) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x714000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000280)=""/34) ioctl$KVM_SET_TSC_KHZ_cpu(0xffffffffffffffff, 0xaea2, 0x7ff) 4.779264634s ago: executing program 0 (id=1435): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x890c, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket(0x2b, 0x1, 0x1) (fail_nth: 2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, '\x00', "2c9e910757c2725dd5795f705ac44b9d43498e33fe93a0c9001c5c65f7107d0d", "00aa0c00", "2bcfff7c6a10073b"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace030000f5", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d03a", "29a78ab9b0a4e8ae"}, 0x38) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) accept$packet(r2, &(0x7f0000004ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="610200000609000000", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) socket$igmp(0x2, 0x3, 0x2) 4.22089296s ago: executing program 4 (id=1436): r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x4200) mount_setattr(r0, &(0x7f0000000000)='./file0\x00', 0x1d00, &(0x7f0000000180)={0x100001, 0x4, 0x160000, {r0}}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa0d81) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000400)={0xd46, 0xd749, 0x1000, {0x8000008, 0x103}, 0x1, 0xfe}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'team0\x00'}) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040b0b08c9"], 0xe) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c000000000000000000000001"], 0x40}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3e) dup(0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f000001a900)=""/102385, 0x18ff1) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000540)="44b6ca05c681c366fa2f9d7fe025623e6f43324dfa7a6bb430ba9a52c49623e03dd18bb6c4fc8acc5af089d9291597037c8c5577134933f1087759bbfad6e96698491a8858792d823e4459c6bf6c052c510b163f4a1c2d02c1f1d9b86a3998f82a7e0c410786e6f5ea98dde4432a8eb26fa93c4584c048306b4ced9e2230042e6d7d8bf46d07e346048bff1ba6add7de6266e2402da6e83b42aeb0a591b26edc89a096b51442bcec0964397adcb599526692db2b83e30817949946c22cc498b16c0ad4078f03880186c473c0dd5ccb3fe68eb80dd1a549ecccd206baf4907b7cdbaedd6c", 0xe4}, {&(0x7f0000000040)="1ae78a6f6ba78b6289daeb2676d584d84333f9ad81104294ad377ac86e76e5ffad528e271dca366e5d5ffa91148caf40e07b", 0x32}, {&(0x7f0000000640)="1e4064195adbec857f0969ef", 0xc}, {&(0x7f0000000700)="562b4305ea112b39afa623ac91559d5e5a36b3af181b31c4b8729f1ba1430afb8da41c04e21b426d0240a84634a106b877e55a5c89c0c678fdc8727a372a3693b94618c20bf94f", 0x47}], 0x4, &(0x7f0000000b40)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r6, r5, r3]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r6, r7, r9, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r1, r7, r10, 0xffffffffffffffff, r11, r0]}}, @rights={{0x1c, 0x1, 0x1, [r2, 0xffffffffffffffff, r1]}}], 0xe8, 0xc884}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0d00000002000000040000000640000005000000", @ANYRES32=r9, @ANYBLOB="0000111db8bd4799377bbddcacbab600000000000000000000a5c9b2267b37bf834037b66bf04de3490b6e298cc0e512943dbd0cabab3db1664a3e8fb6554603efa9d4c866a03f8c052a45463afe47a21e14461d64195ff6ce8c09ce5edceee801de18579fef80002dfc7aed693eb76a61f8621709c4dea7ca8237ad34", @ANYRES32=0x0, @ANYRES16=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) syz_init_net_socket$ax25(0x3, 0x3, 0xca) 4.056011855s ago: executing program 2 (id=1437): syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104e380102030109021b00010000100009045902019b042a00090582"], 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, 0x0, 0x8891) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x2001c0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = io_uring_setup(0x2f35, &(0x7f0000000000)={0x0, 0xfca1, 0x2, 0x2, 0x1e}) lstat(&(0x7f00000003c0)='.\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) chown(&(0x7f00000003c0)='./file0\x00', r6, r7) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x8, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,vser_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB=',max_read=0x0000000000000004,allow_other,default_permissions,default_permissions,max_read=0x0000000000000002,max_read=0x0000000000000004,default_permissions,blksize=0x0000000000000800,blksize=0x0000000000001200,max_read=0x0000000000000008,\x00']) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x13, &(0x7f0000001bc0), 0x2) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x10, 0x70bd26, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0xc004}, 0x4004004) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x50bd2f, 0xfffffffc, {0x60, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xc}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xb, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x3004408c) r10 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0xa800) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0xc00, 0x2}, 0x20) ioctl$DRM_IOCTL_GET_CAP(r10, 0xc010640c, &(0x7f0000000040)={0x4}) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0x1) 4.05567909s ago: executing program 0 (id=1438): syz_open_dev$loop(0x0, 0x47d, 0x0) setresgid(0xee00, 0xee01, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xc, 0x1, 0x8, 0x6}, {0xa, 0x3, 0x8, 0x101}, {0x8, 0xc, 0x7, 0x4}]}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa3, 0x0, &(0x7f0000000340)=[@dead_binder_done, @free_buffer], 0x0, 0x0, 0x0}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r2, 0x0, 0x200000) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f00000001c0)=0x4, 0x4) 4.054919722s ago: executing program 4 (id=1439): syz_open_dev$loop(0x0, 0x47d, 0x0) setresgid(0xee00, 0xee01, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000340)=[@free_buffer], 0x0, 0x0, 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RELDISP(r2, 0x5605) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/hci\x00') setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, 0x0, 0x0) 2.502760139s ago: executing program 1 (id=1440): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc\x00\x00\x00\x00\x00\x00\x00\x00D\x00\x00v4\x00\x00s/\xdaL!\xe1\xdc\x1f\v\x04\xf44.\xab%nN\xd4\xfc\x11\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x7, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3fd, 0x4000009, 0x200, 0xe2df, 0x9, 0x1, 0x4, 0x40000, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) 2.462715091s ago: executing program 3 (id=1441): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc\x00\x00\x00\x00\x00\x00\x00\x00D\x00\x00v4\x00\x00s/\xdaL!\xe1\xdc\x1f\v\x04\xf44.\xab%nN\xd4\xfc\x11\x00\xd1l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x7, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3fd, 0x4000009, 0x200, 0xe2df, 0x9, 0x1, 0x4, 0x40000, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) 2.30416485s ago: executing program 4 (id=1442): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000600)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18, 0x9}}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x7}) r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0x0, 0x80000001, {0x0}, {}, 0x6, 0x8}) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r3, 0x1, 0x3, &(0x7f0000000480)=""/260, &(0x7f0000000100)=0x104) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, r5}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb01001800000000000000180049ec2e240bdea6c600000d00000000000002030000000900000000000012050000000000f69c5670447d1d58054ddfed2021e25b329847a96ffc8aeeb263795b1d92216c6a31f599c400d2c9d194a624ffda5490ee9156bab73c88bab2b61156b34b97ab2cf5b95bfac5b124f72d"], 0x0, 0x32, 0x0, 0x0, 0x5}, 0x28) syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r6, 0x800448d2, &(0x7f00000000c0)="321795792243c3d755fcd4e1fd2e8b29060674040738ab3456a297775b7b54343ea182231b5c11a3c3594e5a8daa85f75039d6d7908011bc6d9495cab5e080b13b30993398ffef08db76f342017d4b2b4d21c4609c12cd98576215f2324c7a50abdc6a892cd0bb9d28e545") write(r6, &(0x7f00000002c0)="23000000010006", 0x7) 1.83435039s ago: executing program 0 (id=1443): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) poll(&(0x7f0000000040)=[{r0, 0x2000}], 0x1, 0x7) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="100025207c2416a1"], 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) r7 = memfd_create(&(0x7f00000002c0)=',\xea\xfa', 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f0000000280)={0x0, 0xfffffffffffffd7c, &(0x7f0000000240)={&(0x7f0000000340)={0x5c, 0x0, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xfffffffffffffdfb, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x80000001, @remote, 0x5e}}, {0x20, 0x2, @in={0x2, 0x4e24, @private=0xa010100}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x20040840) preadv(r7, 0x0, 0x0, 0x800002, 0x20006) r9 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, &(0x7f00000001c0)) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) syz_emit_vhci(&(0x7f0000000940)=ANY=[@ANYBLOB="042ff904"], 0x3fc) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) 1.516373499s ago: executing program 4 (id=1444): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000001ec0), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x5000) 1.264046384s ago: executing program 4 (id=1445): io_setup(0x3, 0x0) io_destroy(0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r0 = eventfd(0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = eventfd2(0xc2eb, 0x801) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) io_submit(0x0, 0x2, &(0x7f00000006c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0xb, 0xffffffffffffffff, &(0x7f00000003c0)="2067a0f3ab72e58662bcdcd9f718f6dcfb26243aa0368b5d54882c4a98c87d329716463fab7d3e4d3fa2de16b19707d393ca2d1e41c6c476c9976b3516271ab5fe284fed0d210017ab6fe923eecacf7f0adefbde3e088460a01906d104049c2a5bf86695a5927455ee48cdd795ba4dcca67b77fa81d6e2ffbdae79c8f215bcd70cb394c24ee0801a7667c2fd8770cd505bc3750c97bd1fd494a6113789720d02961ccd4d5e823336d7ee23c5b108a4c55e2e6a3a09e1", 0xb6, 0x100000001, 0x0, 0x1, r0}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x7fff, r1, &(0x7f0000000540)="c30939bef9511a7bec8623ee03de6f959ead499c257478531956b472b74a5012a5fa10b9756c851d3d59f6925d0156a58cae6dfc06321eafe222044c12a8d90b5d8bee0e108be9b1c34f0b67a803b736ec4815531174a7438bd213", 0x5b, 0x5b7d, 0x0, 0x1, r2}]) r5 = socket(0x11, 0x800000003, 0x0) r6 = socket(0x10, 0x3, 0x0) membarrier(0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2]}, [@TCA_MQPRIO_MIN_RATE64={0x4}]}}}]}, 0x8c}}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)={0x20, 0x22, 0xb, {0xb, 0x2870f3559bcd1475, "1aa802b1ab0542e10a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000380)={0x20, 0x1, 0x3, "34feb7"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x5cce}, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000180)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) 1.144953328s ago: executing program 3 (id=1446): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB], 0x34}, {&(0x7f0000000980)={0x200, 0x3c, 0x2, 0x70bd2d, 0x25dfdbfd, "", [@nested={0x1ed, 0x108, 0x0, 0x1, [@nested={0x159, 0xa5, 0x0, 0x1, [@nested={0x4, 0x11}, @typed={0xdd, 0x3c, 0x0, 0x0, @binary="4accca875a00ca7086e7c14066a2420b48a2cdbd067db987c001f9d59bbd822458a96fb955391bce8d20cae98f703d4521aa06e835a50debf2852a21e60bb756872a6b14cfd4324a3e7ac46db09001d790b6936bf97c5667af68c6589663ab4b7f50de9017c6ec5b18a7bf4110ef95070e2fc96bfe1d0db42ca20827b8b977535b646a7e5456dea43d71505670bd7d1ede4e7ee8216def76cde2c1845042adfd893e0b0f7c36834e7585b64b2da34ed2dcbc6c68c464c21185096ed583364da6fb8bf0b4815f489ea49414bd13bc02fa00facfaa2bf0223387"}, @nested={0x4, 0x56}, @typed={0xc, 0x6a, 0x0, 0x0, @u64=0x505}, @generic="234732695f0e575c668bf7f7618c5ecd166a675295e646177df24e9410de710f4a4051d8cbbf0a28373cca31cd6cc08c04d1b9b0afa5b4a22842755c7616f28e3e864d187d0df763cc4e1435fec4ffbf52cd1f30a65d454e5e3f7b6cdd", @nested={0x4, 0x9b}]}, @generic="b4c15156101c9b408a284dfe788c5a19bc12c29b6af5e67e7b1f463c47b926e3b0fd3c86aaff07aad0b332feb572127c", @generic="58df81e72559d0f3617285c7f30c0921331c665219ec0997d59ba5131fb9cec06e3b0b2a51347c9b094f893b3736a97e6b6ac52212c2e992ace55caeb7d787040b176920911e85d8a8", @typed={0x14, 0x8a, 0x0, 0x0, @ipv6=@loopback}]}]}, 0x200}], 0x2}, 0x800) 997.679658ms ago: executing program 1 (id=1447): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a", 0xa}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0xffff, 0xffff}, {0x0, 0xa}}}, 0x24}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300", 0x69}, {&(0x7f00000007c0)}, {&(0x7f0000001400)="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", 0xfb6}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6", 0x4d}], 0x2}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 989.502123ms ago: executing program 3 (id=1448): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80d02, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000380)='anon_inodefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00'}) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000340)=0x400008, 0x4) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x2000, 0xfffffffc, 0x0, 0x0, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fremovexattr(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="74224b87089dd08998"]) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) 897.699053ms ago: executing program 2 (id=1449): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f00000000c0)=@framed={{0x6d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000100)=0x3) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = fsopen(&(0x7f0000000080)='affs\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000000180)={0x0, 0x6, 0x6, 0x79, '\x00', 0x80000000}) socket$inet(0x2, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0xce9f, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x280449c, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r4 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000100)=""/200, 0xc8}], 0x1, 0x1000, 0x3f2f0fde) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f00000002c0)={0x0, 0x4, 0xfffffffe}) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000340), 0x8) getsockopt$inet6_opts(r5, 0x29, 0x3b, 0x0, &(0x7f00000002c0)=0xa4) getrlimit(0x6, &(0x7f0000000200)) fsmount(r2, 0x1, 0xe) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) lsetxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300), &(0x7f0000000380), 0x2, 0x1) 620.109857ms ago: executing program 1 (id=1450): r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@nl=@unspec, &(0x7f00000000c0)=0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x0, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x1, 0x1, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xda, &(0x7f0000000180)=""/218, 0xf6054b9c49695e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x3, 0x1}, 0x8}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000600)="23e8d32682044b1aea93aa4555b24dafb496d785d0dbf07b4316168cc5a6a8dd21f376d97d75ce4960fc9312fb9bdc83b7949c4f2a43ab467980eeb1b152c47e352bd726a5133cd8015eb017ad81487f280481d1f9c4c0ce0b6b9fea711f5c639afeb7d2d788954750788986380c0a98ee1f118b24199ede4094292b9f6b62dd2a1913cc58fd7a3ac49f633632ac7e8c521596401e51844dae173a238d87f07168a59c64c68f5c5b64581739ebbd9df4b0834a26e2190aab93a140b21dbae9762b89d98b48399d1a365f028649b8f106c6c9d9b19b39bdbbca9022dffb05d58c9fee01cf884f4214", 0xe8}, {&(0x7f0000000940)="447ee3b4212bcf35d142a87fda51c05cb118230e7a8a5a6f798db6e01cacb544f783a87cf17cd21e4338f7de5c6650ac158eb6002be85f5b8ac59e399b42e5ce19a463fabafee56ad00b8ab03fd98a9dd0bcec9910762b65bfd84af48626bb83398890ed03555a7cfe19ad55a4acb18418366625066bad998fcec03d8e2299d8cb46dab90d5af855a252620a4263866013764f842f4f887a7b264257fe4b2bea9d83d004caa5907778082b6720553e7a5f069c4d19cf4198d0eaf78b190abd3b78aa8e27fec3aac72bbf1a0877b9786d9741a6d1dcaed3466123bf3946ac5b582c6333e11971a5fbc6388416e8a9595bf8faac17", 0xf4}, {&(0x7f0000000a40)="8f02e3565c52b0383438d682e9cec9094f652e51e7f42678ebc6cd97fd941160dac5cd0d308a6c3cdbeb0581a389241e31c4c1a3c7abb00e34d43f71680a0dcff53558527d9a680a7b19d151801ceb713158d845ef407bf9a371b48e7f6ac0702843f9790c371494ced6dcc0d3114240afe13b182d361f3171c48c7811ec2880ff0265c73f3856f6dacb8316d99d42336a6bbe3c81a438269e71efb8db01d1d2d31720ab6b3ef7985caf53d23bc3ecd7a4bed188d07f39dc9bf0474e3af67cb61d8c4504697f065527e14f1c761e50139194aac59785aaa8ac9707f2c2fc7a", 0xdf}, {&(0x7f0000000700)="1ebbfa809aed1fe935bf788625d5ba4ea092b3d1c3d4cacd94c6adf2e4564b2d80bcce66c257c4e27a16b51a407df5e40a6bb8f7e0c12d90e56c8490cbaffe39f9cdf808a45a7f667252ca016ca9b7c06ba1dd5dc86085f5dcc755484863496628abb0efb358af8c0373652cde4a", 0x6e}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'}) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb1", 0x11, 0x0, 0x0, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) 0s ago: executing program 3 (id=1451): io_setup(0x3, 0x0) io_destroy(0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r0 = eventfd(0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = eventfd2(0xc2eb, 0x801) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) io_submit(0x0, 0x3, &(0x7f00000006c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0xb, 0xffffffffffffffff, &(0x7f00000003c0)="2067a0f3ab72e58662bcdcd9f718f6dcfb26243aa0368b5d54882c4a98c87d329716463fab7d3e4d3fa2de16b19707d393ca2d1e41c6c476c9976b3516271ab5fe284fed0d210017ab6fe923eecacf7f0adefbde3e088460a01906d104049c2a5bf86695a5927455ee48cdd795ba4dcca67b77fa81d6e2ffbdae79c8f215bcd70cb394c24ee0801a7667c2fd8770cd505bc3750c97bd1fd494a6113789720d02961ccd4d5e823336d7ee23c5b108a4c55e2e6a3a09e1", 0xb6, 0x100000001, 0x0, 0x1, r0}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x7fff, r1, &(0x7f0000000540)="c30939bef9511a7bec8623ee03de6f959ead499c257478531956b472b74a5012a5fa10b9756c851d3d59f6925d0156a58cae6dfc06321eafe222044c12a8d90b5d8bee0e108be9b1c34f0b67a803b736ec4815531174a7438bd213", 0x5b, 0x5b7d, 0x0, 0x1, r2}, 0x0]) r5 = socket(0x11, 0x800000003, 0x0) r6 = socket(0x10, 0x3, 0x0) membarrier(0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2]}, [@TCA_MQPRIO_MIN_RATE64={0x4}]}}}]}, 0x8c}}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)={0x20, 0x22, 0xb, {0xb, 0x2870f3559bcd1475, "1aa802b1ab0542e10a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000380)={0x20, 0x1, 0x3, "34feb7"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x5cce}, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000180)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) kernel console output (not intermixed with test programs): 04236][ T9570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.104257][ T9570] RIP: 0033:0x7f03a6b8e17f [ 330.104274][ T9570] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 330.104292][ T9570] RSP: 002b:00007f03a7acc030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 330.104311][ T9570] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f03a6b8e17f [ 330.104324][ T9570] RDX: 0000000000000001 RSI: 00007f03a7acc0a0 RDI: 0000000000000003 [ 330.104336][ T9570] RBP: 00007f03a7acc090 R08: 0000000000000000 R09: 0000000000000000 [ 330.104348][ T9570] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 330.104359][ T9570] R13: 00007f03a6de6038 R14: 00007f03a6de5fa0 R15: 00007fff58e38978 [ 330.104391][ T9570] [ 330.301129][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 330.307957][ T9549] ceph: No mds server is up or the cluster is laggy [ 330.397140][ T24] usb 3-1: USB disconnect, device number 36 [ 330.483867][ T9577] netlink: 20 bytes leftover after parsing attributes in process `syz.3.959'. [ 330.542354][ T9577] netlink: 20 bytes leftover after parsing attributes in process `syz.3.959'. [ 330.564802][ T30] audit: type=1400 audit(1762731959.437:340): avc: denied { create } for pid=9567 comm="syz.4.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 330.914184][ T30] audit: type=1400 audit(1762731959.527:341): avc: denied { write } for pid=9574 comm="syz.1.958" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 331.156556][ T5889] hid_parser_main: 13 callbacks suppressed [ 331.156575][ T5889] hid-generic 0003:0004:0000.0032: unknown main item tag 0x0 [ 331.170098][ T5889] hid-generic 0003:0004:0000.0032: unknown main item tag 0x0 [ 331.179146][ T5889] hid-generic 0003:0004:0000.0032: unknown main item tag 0x0 [ 331.201446][ T5889] hid-generic 0003:0004:0000.0032: unknown main item tag 0x0 [ 331.220025][ T5889] hid-generic 0003:0004:0000.0032: unknown main item tag 0x0 [ 331.240059][ T5889] hid-generic 0003:0004:0000.0032: unknown main item tag 0x0 [ 331.256115][ T5889] hid-generic 0003:0004:0000.0032: unknown main item tag 0x0 [ 331.295089][ T5889] hid-generic 0003:0004:0000.0032: unknown main item tag 0x0 [ 331.313886][ T5889] hid-generic 0003:0004:0000.0032: unknown main item tag 0x0 [ 331.326442][ T5889] hid-generic 0003:0004:0000.0032: unknown main item tag 0x0 [ 331.453783][ T5889] hid-generic 0003:0004:0000.0032: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 331.719759][ T9601] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.963'. [ 331.867579][ T9596] fido_id[9596]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 331.914976][ T9608] random: crng reseeded on system resumption [ 331.926232][ T30] audit: type=1400 audit(1762731960.787:342): avc: denied { append } for pid=9600 comm="syz.4.965" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 332.024958][ T30] audit: type=1400 audit(1762731960.787:343): avc: denied { open } for pid=9600 comm="syz.4.965" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 332.054618][ T9607] FAULT_INJECTION: forcing a failure. [ 332.054618][ T9607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.109837][ T9607] CPU: 1 UID: 0 PID: 9607 Comm: syz.1.966 Not tainted syzkaller #0 PREEMPT(full) [ 332.109867][ T9607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 332.109879][ T9607] Call Trace: [ 332.109886][ T9607] [ 332.109894][ T9607] dump_stack_lvl+0x16c/0x1f0 [ 332.109929][ T9607] should_fail_ex+0x512/0x640 [ 332.109957][ T9607] _copy_from_user+0x2e/0xd0 [ 332.109982][ T9607] kstrtouint_from_user+0xd6/0x1d0 [ 332.110012][ T9607] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 332.110041][ T9607] ? __lock_acquire+0xb8a/0x1c90 [ 332.110082][ T9607] proc_fail_nth_write+0x83/0x220 [ 332.110104][ T9607] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 332.110138][ T9607] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 332.110156][ T9607] vfs_write+0x2a0/0x11d0 [ 332.110177][ T9607] ? __pfx___mutex_lock+0x10/0x10 [ 332.110196][ T9607] ? __pfx_vfs_write+0x10/0x10 [ 332.110222][ T9607] ? __fget_files+0x20e/0x3c0 [ 332.110247][ T9607] ksys_write+0x12a/0x250 [ 332.110265][ T9607] ? __pfx_ksys_write+0x10/0x10 [ 332.110292][ T9607] do_syscall_64+0xcd/0xfa0 [ 332.110314][ T9607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.110335][ T9607] RIP: 0033:0x7f029f18e17f [ 332.110349][ T9607] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 332.110367][ T9607] RSP: 002b:00007f02a0075030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 332.110385][ T9607] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f029f18e17f [ 332.110397][ T9607] RDX: 0000000000000001 RSI: 00007f02a00750a0 RDI: 0000000000000003 [ 332.110409][ T9607] RBP: 00007f02a0075090 R08: 0000000000000000 R09: 0000000000000000 [ 332.110421][ T9607] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 332.110431][ T9607] R13: 00007f029f3e6038 R14: 00007f029f3e5fa0 R15: 00007ffeb37b74d8 [ 332.110462][ T9607] [ 332.361905][ T5811] Bluetooth: hci0: unexpected event 0x2f length: 1017 > 260 [ 332.543710][ T9608] warning: `syz.4.965' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 332.673006][ T9619] misc userio: Begin command sent, but we're already running [ 333.592994][ T5816] vhci_hcd: vhci_device speed not set [ 333.608774][ T9622] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 333.615295][ T9622] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 333.623081][ T9622] vhci_hcd vhci_hcd.0: Device attached [ 333.872187][ T5889] usb 39-1: new high-speed USB device number 6 using vhci_hcd [ 333.892218][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 334.258060][ T24] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 334.342735][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.366793][ T24] usb 4-1: Product: syz [ 334.381126][ T9625] SELinux: ebitmap start bit (7340096) is beyond the end of the bitmap (1472) [ 334.391742][ T24] usb 4-1: Manufacturer: syz [ 334.397274][ T24] usb 4-1: SerialNumber: syz [ 334.523288][ T24] usb 4-1: config 0 descriptor?? [ 334.566470][ T9625] SELinux: failed to load policy [ 335.051234][ T9627] vhci_hcd: connection reset by peer [ 335.072519][ T60] vhci_hcd: stop threads [ 335.072796][ T24] mos7840 4-1:0.0: required endpoints missing [ 335.076919][ T60] vhci_hcd: release socket [ 335.088731][ T24] usb 4-1: USB disconnect, device number 20 [ 335.111158][ T60] vhci_hcd: disconnect device [ 335.143007][ T5875] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 335.326420][ T5875] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 335.592167][ T24] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 335.716848][ T5875] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 335.716881][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.747366][ T5875] usb 2-1: can't set config #2, error -71 [ 335.748748][ T5875] usb 2-1: USB disconnect, device number 25 [ 335.895877][ T9654] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.976'. [ 336.043913][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.043963][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 336.043992][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 336.044016][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 336.045341][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 336.045370][ T24] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 336.045391][ T24] usb 1-1: Manufacturer: syz [ 336.049259][ T24] usb 1-1: config 0 descriptor?? [ 336.430041][ T30] audit: type=1400 audit(1762731965.237:344): avc: denied { map } for pid=9659 comm="syz.3.979" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 336.430097][ T30] audit: type=1400 audit(1762731965.237:345): avc: denied { execute } for pid=9659 comm="syz.3.979" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 336.430140][ T30] audit: type=1400 audit(1762731965.297:346): avc: denied { map } for pid=9659 comm="syz.3.979" path="/proc/711/task/712/net" dev="proc" ino=27091 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 336.492261][ T42] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 336.492368][ T24] rc_core: IR keymap rc-hauppauge not found [ 336.492381][ T24] Registered IR keymap rc-empty [ 336.492848][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 336.522223][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 336.553500][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 336.667666][ T9667] FAULT_INJECTION: forcing a failure. [ 336.667666][ T9667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.682417][ T9667] CPU: 0 UID: 0 PID: 9667 Comm: syz.3.980 Not tainted syzkaller #0 PREEMPT(full) [ 336.682445][ T9667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 336.682455][ T9667] Call Trace: [ 336.682462][ T9667] [ 336.682469][ T9667] dump_stack_lvl+0x16c/0x1f0 [ 336.682505][ T9667] should_fail_ex+0x512/0x640 [ 336.682533][ T9667] _copy_to_user+0x32/0xd0 [ 336.682551][ T9667] simple_read_from_buffer+0xcb/0x170 [ 336.682570][ T9667] proc_fail_nth_read+0x197/0x240 [ 336.682583][ T9667] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 336.682597][ T9667] ? rw_verify_area+0xcf/0x6c0 [ 336.682612][ T9667] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 336.682624][ T9667] vfs_read+0x1e4/0xcf0 [ 336.682637][ T9667] ? __pfx___mutex_lock+0x10/0x10 [ 336.682648][ T9667] ? __pfx_vfs_read+0x10/0x10 [ 336.682662][ T9667] ? __fget_files+0x20e/0x3c0 [ 336.682678][ T9667] ksys_read+0x12a/0x250 [ 336.682687][ T9667] ? __pfx_ksys_read+0x10/0x10 [ 336.682708][ T9667] do_syscall_64+0xcd/0xfa0 [ 336.682719][ T9667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.682731][ T9667] RIP: 0033:0x7fe9c1f8e0dc [ 336.682740][ T9667] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 336.682751][ T9667] RSP: 002b:00007fe9c2e47030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 336.682762][ T9667] RAX: ffffffffffffffda RBX: 00007fe9c21e6180 RCX: 00007fe9c1f8e0dc [ 336.682769][ T9667] RDX: 000000000000000f RSI: 00007fe9c2e470a0 RDI: 0000000000000006 [ 336.682776][ T9667] RBP: 00007fe9c2e47090 R08: 0000000000000000 R09: 0000000000000000 [ 336.682783][ T9667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.682789][ T9667] R13: 00007fe9c21e6218 R14: 00007fe9c21e6180 R15: 00007ffc5672ecc8 [ 336.682805][ T9667] [ 336.990573][ T42] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 337.054546][ T9668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.080958][ T42] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 337.163931][ T9668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.187929][ T42] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 337.199188][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input22 [ 337.226235][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.242605][ T30] audit: type=1400 audit(1762731966.097:347): avc: denied { getopt } for pid=9657 comm="syz.1.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 337.268375][ T9673] overlayfs: empty lowerdir [ 337.304597][ T9656] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 337.311885][ T9656] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 337.380651][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 337.491752][ T42] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 337.498880][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 337.522338][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 337.552841][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 337.624941][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 337.891934][ T9681] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 337.902801][ T9681] SELinux: failed to load policy [ 338.222372][ T42] usb 5-1: USB disconnect, device number 20 [ 338.246794][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 338.302936][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 338.342735][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 338.386228][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 338.412547][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 338.451144][ T24] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 338.471451][ T24] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 338.517488][ T24] usb 1-1: USB disconnect, device number 19 [ 338.893730][ T9687] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 339.182215][ T5889] vhci_hcd: vhci_device speed not set [ 339.369345][ T9693] FAULT_INJECTION: forcing a failure. [ 339.369345][ T9693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.400464][ T9693] CPU: 0 UID: 0 PID: 9693 Comm: syz.2.984 Not tainted syzkaller #0 PREEMPT(full) [ 339.400494][ T9693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 339.400505][ T9693] Call Trace: [ 339.400512][ T9693] [ 339.400520][ T9693] dump_stack_lvl+0x16c/0x1f0 [ 339.400555][ T9693] should_fail_ex+0x512/0x640 [ 339.400581][ T9693] strncpy_from_user+0x3b/0x2e0 [ 339.400606][ T9693] getname_flags.part.0+0x8f/0x550 [ 339.400636][ T9693] getname_flags+0x93/0xf0 [ 339.400656][ T9693] do_sys_openat2+0xb8/0x1d0 [ 339.400681][ T9693] ? __pfx_do_sys_openat2+0x10/0x10 [ 339.400706][ T9693] ? __fget_files+0x20e/0x3c0 [ 339.400734][ T9693] __x64_sys_creat+0xcc/0x120 [ 339.400759][ T9693] ? __pfx___x64_sys_creat+0x10/0x10 [ 339.400783][ T9693] ? __pfx_ksys_write+0x10/0x10 [ 339.400806][ T9693] ? rcu_is_watching+0x12/0xc0 [ 339.400831][ T9693] ? do_syscall_64+0x91/0xfa0 [ 339.400851][ T9693] do_syscall_64+0xcd/0xfa0 [ 339.400871][ T9693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.400891][ T9693] RIP: 0033:0x7f6e37f8f6c9 [ 339.400907][ T9693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.400927][ T9693] RSP: 002b:00007f6e38eaa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 339.400946][ T9693] RAX: ffffffffffffffda RBX: 00007f6e381e6090 RCX: 00007f6e37f8f6c9 [ 339.400959][ T9693] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 339.400971][ T9693] RBP: 00007f6e38eaa090 R08: 0000000000000000 R09: 0000000000000000 [ 339.400983][ T9693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.400995][ T9693] R13: 00007f6e381e6128 R14: 00007f6e381e6090 R15: 00007ffee5e83658 [ 339.401026][ T9693] [ 339.859878][ T9699] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 339.866418][ T9699] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 339.876109][ T9699] vhci_hcd vhci_hcd.0: Device attached [ 341.019173][ T979] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 341.062499][ T5889] usb 39-1: device descriptor read/64, error -110 [ 341.383703][ T9720] syz.2.994 uses obsolete (PF_INET,SOCK_PACKET) [ 341.396471][ T9720] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 342.131339][ T979] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 342.164230][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.183285][ T5889] usb 39-1: new high-speed USB device number 7 using vhci_hcd [ 342.195578][ T9726] mkiss: ax0: crc mode is auto. [ 342.216006][ T979] usb 4-1: Product: syz [ 342.299011][ T979] usb 4-1: Manufacturer: syz [ 342.459390][ T5924] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 342.503556][ T976] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 343.048913][ T9701] vhci_hcd: connection reset by peer [ 343.060189][ T979] usb 4-1: SerialNumber: syz [ 343.060295][ T60] vhci_hcd: stop threads [ 343.072128][ T60] vhci_hcd: release socket [ 343.073053][ T5924] usb 1-1: Using ep0 maxpacket: 32 [ 343.077544][ T60] vhci_hcd: disconnect device [ 343.085589][ T979] usb 4-1: config 0 descriptor?? [ 343.135434][ T976] usb 3-1: Using ep0 maxpacket: 32 [ 343.148334][ T976] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 343.235096][ T979] usb 4-1: can't set config #0, error -71 [ 343.243568][ T5924] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 343.255393][ T5924] usb 1-1: config 0 has no interface number 0 [ 343.261511][ T5924] usb 1-1: config 0 interface 184 has no altsetting 0 [ 343.270319][ T979] usb 4-1: USB disconnect, device number 21 [ 343.289177][ T5924] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 343.298924][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.302764][ T976] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 343.316046][ T5924] usb 1-1: Product: syz [ 343.328939][ T5924] usb 1-1: Manufacturer: syz [ 343.339093][ T5924] usb 1-1: SerialNumber: syz [ 343.357005][ T9743] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 343.365254][ T5924] usb 1-1: config 0 descriptor?? [ 343.376214][ T5924] smsc75xx v1.0.0 [ 343.412138][ T42] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 343.839645][ T976] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 343.874856][ T976] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 343.890009][ T976] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 343.898810][ T976] usb 3-1: Product: syz [ 343.908480][ T976] usb 3-1: Manufacturer: syz [ 343.920619][ T976] usb 3-1: SerialNumber: syz [ 343.955991][ T976] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input24 [ 343.970580][ T30] audit: type=1400 audit(1762731972.837:348): avc: denied { write } for pid=9749 comm="syz.4.1002" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 343.993733][ T30] audit: type=1400 audit(1762731972.837:349): avc: denied { open } for pid=9749 comm="syz.4.1002" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 344.038090][ T5924] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 344.049161][ T5924] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 344.057511][ T42] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 344.070118][ T5924] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 344.081352][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.098638][ T5924] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 344.113775][ T42] usb 2-1: Product: syz [ 344.114762][ T9752] FAULT_INJECTION: forcing a failure. [ 344.114762][ T9752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.117999][ T42] usb 2-1: Manufacturer: syz [ 344.159671][ T9752] CPU: 0 UID: 0 PID: 9752 Comm: syz.3.1003 Not tainted syzkaller #0 PREEMPT(full) [ 344.159696][ T9752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 344.159705][ T9752] Call Trace: [ 344.159712][ T9752] [ 344.159720][ T9752] dump_stack_lvl+0x16c/0x1f0 [ 344.159756][ T9752] should_fail_ex+0x512/0x640 [ 344.159789][ T9752] _copy_from_user+0x2e/0xd0 [ 344.159815][ T9752] kstrtouint_from_user+0xd6/0x1d0 [ 344.159852][ T9752] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 344.159879][ T9752] ? __lock_acquire+0xb8a/0x1c90 [ 344.159924][ T9752] proc_fail_nth_write+0x83/0x220 [ 344.159945][ T9752] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 344.159973][ T9752] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 344.159991][ T9752] vfs_write+0x2a0/0x11d0 [ 344.160012][ T9752] ? __pfx___mutex_lock+0x10/0x10 [ 344.160032][ T9752] ? __pfx_vfs_write+0x10/0x10 [ 344.160059][ T9752] ? __fget_files+0x20e/0x3c0 [ 344.160089][ T9752] ksys_write+0x12a/0x250 [ 344.160107][ T9752] ? __pfx_ksys_write+0x10/0x10 [ 344.160137][ T9752] do_syscall_64+0xcd/0xfa0 [ 344.160158][ T9752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.160179][ T9752] RIP: 0033:0x7fe9c1f8e17f [ 344.160196][ T9752] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 344.160216][ T9752] RSP: 002b:00007fe9c2e89030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 344.160235][ T9752] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe9c1f8e17f [ 344.160248][ T9752] RDX: 0000000000000001 RSI: 00007fe9c2e890a0 RDI: 0000000000000003 [ 344.160261][ T9752] RBP: 00007fe9c2e89090 R08: 0000000000000000 R09: 0000000000000000 [ 344.160273][ T9752] R10: 0000000020008000 R11: 0000000000000293 R12: 0000000000000001 [ 344.160284][ T9752] R13: 00007fe9c21e6038 R14: 00007fe9c21e5fa0 R15: 00007ffc5672ecc8 [ 344.160315][ T9752] [ 344.356580][ T5816] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 344.416892][ T976] usb 3-1: USB disconnect, device number 37 [ 344.416934][ C1] appletouch 3-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 344.631860][ T5816] usb 5-1: config 4 has an invalid interface number: 28 but max is 0 [ 344.640137][ T5816] usb 5-1: config 4 has no interface number 0 [ 344.651367][ T5816] usb 5-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 344.662816][ T42] usb 2-1: SerialNumber: syz [ 344.673171][ T42] usb 2-1: config 0 descriptor?? [ 344.694251][ T42] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 344.703398][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.711763][ T5816] usb 5-1: Product: syz [ 344.716812][ T976] appletouch 3-1:1.0: input: appletouch disconnected [ 344.716939][ T5816] usb 5-1: Manufacturer: syz [ 344.725533][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 344.729989][ T5816] usb 5-1: SerialNumber: syz [ 345.250368][ T30] audit: type=1400 audit(1762731973.737:350): avc: denied { create } for pid=9753 comm="syz.3.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 345.280522][ T42] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 345.383079][ T42] usb 2-1: media controller created [ 345.390573][ T5816] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.28/input/input25 [ 345.404522][ T9738] binder: 9737:9738 ioctl c0306201 200000000640 returned -22 [ 345.419146][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 345.432691][ T5875] usb 1-1: USB disconnect, device number 20 [ 345.511346][ T5168] bcm5974 5-1:4.28: could not read from device [ 345.524629][ T30] audit: type=1400 audit(1762731974.367:351): avc: denied { ioctl } for pid=9749 comm="syz.4.1002" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x9416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 345.579021][ T5816] bcm5974 5-1:4.28: could not read from device [ 345.750977][ T42] DVB: Unable to find symbol mt352_attach() [ 345.796610][ T42] DVB: Unable to find symbol nxt6000_attach() [ 346.309003][ T42] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 346.335706][ T42] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input26 [ 346.386760][ T5168] bcm5974 5-1:4.28: could not read from device [ 346.429791][ T5816] input: failed to attach handler mousedev to device input25, error: -5 [ 346.486793][ T5168] bcm5974 5-1:4.28: could not read from device [ 346.505142][ T42] dvb-usb: schedule remote query interval to 1000 msecs. [ 346.505435][ T5816] usb 5-1: USB disconnect, device number 21 [ 346.579522][ T42] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 346.665461][ T42] dvb-usb: bulk message failed: -22 (7/0) [ 346.706672][ T42] dvb-usb: bulk message failed: -22 (7/0) [ 346.881388][ T42] usb 2-1: USB disconnect, device number 26 [ 347.002263][ T976] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 347.015304][ T9778] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 347.155320][ T42] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 347.222137][ T976] usb 1-1: Using ep0 maxpacket: 8 [ 347.242926][ T976] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.253120][ T976] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 347.272253][ T5889] vhci_hcd: vhci_device speed not set [ 347.278125][ T9785] fuse: Unknown parameter 'user_id00000000000000000000' [ 347.293665][ T976] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 347.302895][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.319847][ T9786] misc userio: Begin command sent, but we're already running [ 347.347029][ T30] audit: type=1400 audit(1762731976.217:352): avc: denied { remount } for pid=9777 comm="syz.3.1010" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 347.378163][ T976] usb 1-1: Product: syz [ 347.400732][ T976] usb 1-1: Manufacturer: syz [ 347.445803][ T976] usb 1-1: SerialNumber: syz [ 347.486895][ T976] usb 1-1: config 0 descriptor?? [ 348.398688][ T9799] FAULT_INJECTION: forcing a failure. [ 348.398688][ T9799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.419543][ T9799] CPU: 0 UID: 0 PID: 9799 Comm: syz.3.1015 Not tainted syzkaller #0 PREEMPT(full) [ 348.419561][ T9799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 348.419567][ T9799] Call Trace: [ 348.419571][ T9799] [ 348.419576][ T9799] dump_stack_lvl+0x16c/0x1f0 [ 348.419597][ T9799] should_fail_ex+0x512/0x640 [ 348.419613][ T9799] _copy_from_user+0x2e/0xd0 [ 348.419627][ T9799] kstrtouint_from_user+0xd6/0x1d0 [ 348.419644][ T9799] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 348.419659][ T9799] ? __lock_acquire+0xb8a/0x1c90 [ 348.419684][ T9799] proc_fail_nth_write+0x83/0x220 [ 348.419703][ T9799] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 348.419732][ T9799] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 348.419751][ T9799] vfs_write+0x2a0/0x11d0 [ 348.419777][ T9799] ? __pfx___mutex_lock+0x10/0x10 [ 348.419789][ T9799] ? __pfx_vfs_write+0x10/0x10 [ 348.419804][ T9799] ? __fget_files+0x20e/0x3c0 [ 348.419820][ T9799] ksys_write+0x12a/0x250 [ 348.419830][ T9799] ? __pfx_ksys_write+0x10/0x10 [ 348.419844][ T9799] do_syscall_64+0xcd/0xfa0 [ 348.419855][ T9799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.419867][ T9799] RIP: 0033:0x7fe9c1f8e17f [ 348.419877][ T9799] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 348.419887][ T9799] RSP: 002b:00007fe9c2e89030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 348.419899][ T9799] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe9c1f8e17f [ 348.419906][ T9799] RDX: 0000000000000001 RSI: 00007fe9c2e890a0 RDI: 0000000000000004 [ 348.419913][ T9799] RBP: 00007fe9c2e89090 R08: 0000000000000000 R09: 0000000000000000 [ 348.419919][ T9799] R10: 0000000000000004 R11: 0000000000000293 R12: 0000000000000001 [ 348.419925][ T9799] R13: 00007fe9c21e6038 R14: 00007fe9c21e5fa0 R15: 00007ffc5672ecc8 [ 348.419942][ T9799] [ 349.770704][ T5816] usb 1-1: USB disconnect, device number 21 [ 349.912759][ T5811] Bluetooth: hci0: unexpected event 0x2f length: 1017 > 260 [ 350.030318][ T30] audit: type=1400 audit(1762731978.897:353): avc: denied { ioctl } for pid=9825 comm="syz.4.1022" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 351.212934][ T5811] Bluetooth: hci2: unexpected event 0x2f length: 1017 > 260 [ 351.272488][ T976] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 351.552173][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 351.570766][ T976] usb 3-1: Using ep0 maxpacket: 16 [ 351.609165][ T976] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 351.705260][ T30] audit: type=1400 audit(1762731980.577:354): avc: denied { setopt } for pid=9835 comm="syz.4.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 351.795062][ T976] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.829037][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 351.837928][ T976] usb 3-1: config 0 has no interface number 0 [ 351.862587][ T976] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 351.880660][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.902902][ T976] usb 3-1: Product: syz [ 351.907852][ T976] usb 3-1: Manufacturer: syz [ 351.930722][ T976] usb 3-1: SerialNumber: syz [ 351.970199][ T976] usb 3-1: config 0 descriptor?? [ 352.094727][ T9837] ceph: No mds server is up or the cluster is laggy [ 352.183597][ T9849] FAULT_INJECTION: forcing a failure. [ 352.183597][ T9849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.208822][ T9849] CPU: 1 UID: 0 PID: 9849 Comm: syz.4.1029 Not tainted syzkaller #0 PREEMPT(full) [ 352.208847][ T9849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 352.208859][ T9849] Call Trace: [ 352.208866][ T9849] [ 352.208873][ T9849] dump_stack_lvl+0x16c/0x1f0 [ 352.208908][ T9849] should_fail_ex+0x512/0x640 [ 352.208933][ T9849] _copy_from_user+0x2e/0xd0 [ 352.208959][ T9849] kstrtouint_from_user+0xd6/0x1d0 [ 352.208987][ T9849] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 352.209015][ T9849] ? __lock_acquire+0xb8a/0x1c90 [ 352.209058][ T9849] proc_fail_nth_write+0x83/0x220 [ 352.209083][ T9849] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 352.209114][ T9849] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 352.209134][ T9849] vfs_write+0x2a0/0x11d0 [ 352.209159][ T9849] ? __pfx___mutex_lock+0x10/0x10 [ 352.209179][ T9849] ? __pfx_vfs_write+0x10/0x10 [ 352.209207][ T9849] ? __fget_files+0x20e/0x3c0 [ 352.209235][ T9849] ksys_write+0x12a/0x250 [ 352.209252][ T9849] ? __pfx_ksys_write+0x10/0x10 [ 352.209279][ T9849] do_syscall_64+0xcd/0xfa0 [ 352.209300][ T9849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.209322][ T9849] RIP: 0033:0x7f87e938e17f [ 352.209338][ T9849] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 352.209356][ T9849] RSP: 002b:00007f87ea232030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 352.209374][ T9849] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f87e938e17f [ 352.209387][ T9849] RDX: 0000000000000001 RSI: 00007f87ea2320a0 RDI: 0000000000000003 [ 352.209399][ T9849] RBP: 00007f87ea232090 R08: 0000000000000000 R09: 0000000000000000 [ 352.209411][ T9849] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 352.209423][ T9849] R13: 00007f87e95e6038 R14: 00007f87e95e5fa0 R15: 00007ffff1de8588 [ 352.209455][ T9849] [ 352.396593][ C1] vkms_vblank_simulate: vblank timer overrun [ 352.442928][ T976] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 352.462309][ T976] uvcvideo 3-1:0.105: No valid video chain found. [ 352.474576][ T976] usb 3-1: USB disconnect, device number 38 [ 352.975398][ T9860] netlink: 'syz.0.1033': attribute type 1 has an invalid length. [ 353.003887][ T9857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1032'. [ 353.015633][ T9857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1032'. [ 353.045820][ T30] audit: type=1400 audit(1762731981.877:355): avc: denied { bind } for pid=9854 comm="syz.4.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 353.118714][ T30] audit: type=1400 audit(1762731981.877:356): avc: denied { setopt } for pid=9854 comm="syz.4.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 353.244490][ T9866] FAULT_INJECTION: forcing a failure. [ 353.244490][ T9866] name failslab, interval 1, probability 0, space 0, times 0 [ 353.257630][ T9866] CPU: 0 UID: 0 PID: 9866 Comm: syz.1.1035 Not tainted syzkaller #0 PREEMPT(full) [ 353.257657][ T9866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 353.257668][ T9866] Call Trace: [ 353.257674][ T9866] [ 353.257681][ T9866] dump_stack_lvl+0x16c/0x1f0 [ 353.257715][ T9866] should_fail_ex+0x512/0x640 [ 353.257737][ T9866] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 353.257769][ T9866] should_failslab+0xc2/0x120 [ 353.257789][ T9866] kmem_cache_alloc_node_noprof+0x78/0x770 [ 353.257813][ T9866] ? __alloc_skb+0x2b2/0x380 [ 353.257840][ T9866] ? __alloc_skb+0x2b2/0x380 [ 353.257859][ T9866] ? __pfx_netlink_insert+0x10/0x10 [ 353.257884][ T9866] __alloc_skb+0x2b2/0x380 [ 353.257906][ T9866] ? __pfx___alloc_skb+0x10/0x10 [ 353.257930][ T9866] ? netlink_autobind.isra.0+0x158/0x370 [ 353.257965][ T9866] netlink_alloc_large_skb+0x69/0x140 [ 353.257995][ T9866] netlink_sendmsg+0x698/0xdd0 [ 353.258026][ T9866] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.258064][ T9866] ____sys_sendmsg+0xa98/0xc70 [ 353.258083][ T9866] ? copy_msghdr_from_user+0x10a/0x160 [ 353.258106][ T9866] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.258138][ T9866] ___sys_sendmsg+0x134/0x1d0 [ 353.258164][ T9866] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.258186][ T9866] ? __lock_acquire+0x622/0x1c90 [ 353.258249][ T9866] __sys_sendmsg+0x16d/0x220 [ 353.258272][ T9866] ? __pfx___sys_sendmsg+0x10/0x10 [ 353.258316][ T9866] do_syscall_64+0xcd/0xfa0 [ 353.258343][ T9866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.258363][ T9866] RIP: 0033:0x7f029f18f6c9 [ 353.258380][ T9866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.258398][ T9866] RSP: 002b:00007f02a0054038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.258418][ T9866] RAX: ffffffffffffffda RBX: 00007f029f3e6090 RCX: 00007f029f18f6c9 [ 353.258431][ T9866] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 353.258442][ T9866] RBP: 00007f02a0054090 R08: 0000000000000000 R09: 0000000000000000 [ 353.258454][ T9866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.258466][ T9866] R13: 00007f029f3e6128 R14: 00007f029f3e6090 R15: 00007ffeb37b74d8 [ 353.258496][ T9866] [ 353.522738][ T5816] hid_parser_main: 8 callbacks suppressed [ 353.522751][ T5816] hid-generic 0003:0004:0000.0033: unknown main item tag 0x0 [ 353.535937][ T5816] hid-generic 0003:0004:0000.0033: unknown main item tag 0x0 [ 353.542149][ T976] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 353.543849][ T5816] hid-generic 0003:0004:0000.0033: unknown main item tag 0x0 [ 353.558939][ T5816] hid-generic 0003:0004:0000.0033: unknown main item tag 0x0 [ 353.566779][ T5816] hid-generic 0003:0004:0000.0033: unknown main item tag 0x0 [ 353.574249][ T5816] hid-generic 0003:0004:0000.0033: unknown main item tag 0x0 [ 353.581668][ T5816] hid-generic 0003:0004:0000.0033: unknown main item tag 0x0 [ 353.589547][ T5816] hid-generic 0003:0004:0000.0033: unknown main item tag 0x0 [ 353.597258][ T5816] hid-generic 0003:0004:0000.0033: unknown main item tag 0x0 [ 353.605279][ T5816] hid-generic 0003:0004:0000.0033: unknown main item tag 0x0 [ 353.614660][ T5816] hid-generic 0003:0004:0000.0033: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 353.822215][ T976] usb 3-1: Using ep0 maxpacket: 8 [ 353.922150][ T976] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.990723][ T976] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 354.210882][ T976] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 354.397240][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.398773][ T9876] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 354.411763][ T9876] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 354.421455][ T9871] fido_id[9871]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 354.443712][ T976] usb 3-1: Product: syz [ 354.447977][ T976] usb 3-1: Manufacturer: syz [ 354.547718][ T976] usb 3-1: SerialNumber: syz [ 354.564545][ T9876] vhci_hcd vhci_hcd.0: Device attached [ 354.570433][ T976] usb 3-1: config 0 descriptor?? [ 354.602648][ T5924] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 354.984876][ T9890] misc userio: Begin command sent, but we're already running [ 355.121351][ T5889] usb 41-1: new high-speed USB device number 8 using vhci_hcd [ 355.725176][ T5924] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 355.740005][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.862684][ T5924] usb 5-1: Product: syz [ 355.884746][ T5924] usb 5-1: Manufacturer: syz [ 355.919323][ T5924] usb 5-1: SerialNumber: syz [ 355.985452][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1044'. [ 355.996132][ T9905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1044'. [ 356.005950][ T9905] netlink: 'syz.0.1044': attribute type 11 has an invalid length. [ 356.015853][ T9905] netlink: 'syz.0.1044': attribute type 13 has an invalid length. [ 356.244326][ T5924] usb 5-1: config 0 descriptor?? [ 356.359274][ T976] usb 3-1: USB disconnect, device number 39 [ 356.541040][ T9882] vhci_hcd: connection reset by peer [ 356.547971][ T5924] mos7840 5-1:0.0: required endpoints missing [ 356.566734][ T1132] vhci_hcd: stop threads [ 356.571011][ T1132] vhci_hcd: release socket [ 356.575798][ T1132] vhci_hcd: disconnect device [ 356.827628][ T5924] usb 5-1: USB disconnect, device number 22 [ 356.937354][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 357.202617][ T5924] libceph: mon0 (1)[c::]:6789 connect error [ 357.681157][ T9912] ceph: No mds server is up or the cluster is laggy [ 357.713033][ T5924] libceph: mon0 (1)[c::]:6789 connect error [ 357.874354][ T9931] FAULT_INJECTION: forcing a failure. [ 357.874354][ T9931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.932677][ T9931] CPU: 1 UID: 0 PID: 9931 Comm: syz.3.1051 Not tainted syzkaller #0 PREEMPT(full) [ 357.932714][ T9931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 357.932726][ T9931] Call Trace: [ 357.932733][ T9931] [ 357.932741][ T9931] dump_stack_lvl+0x16c/0x1f0 [ 357.932776][ T9931] should_fail_ex+0x512/0x640 [ 357.932804][ T9931] _copy_from_user+0x2e/0xd0 [ 357.932829][ T9931] kstrtouint_from_user+0xd6/0x1d0 [ 357.932859][ T9931] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 357.932888][ T9931] ? __lock_acquire+0xb8a/0x1c90 [ 357.932929][ T9931] proc_fail_nth_write+0x83/0x220 [ 357.932951][ T9931] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 357.932981][ T9931] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 357.933001][ T9931] vfs_write+0x2a0/0x11d0 [ 357.933025][ T9931] ? __pfx___mutex_lock+0x10/0x10 [ 357.933045][ T9931] ? __pfx_vfs_write+0x10/0x10 [ 357.933073][ T9931] ? __fget_files+0x20e/0x3c0 [ 357.933102][ T9931] ksys_write+0x12a/0x250 [ 357.933120][ T9931] ? __pfx_ksys_write+0x10/0x10 [ 357.933148][ T9931] do_syscall_64+0xcd/0xfa0 [ 357.933169][ T9931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.933190][ T9931] RIP: 0033:0x7fe9c1f8e17f [ 357.933207][ T9931] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 357.933226][ T9931] RSP: 002b:00007fe9c2e89030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 357.933245][ T9931] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe9c1f8e17f [ 357.933258][ T9931] RDX: 0000000000000001 RSI: 00007fe9c2e890a0 RDI: 0000000000000003 [ 357.933269][ T9931] RBP: 00007fe9c2e89090 R08: 0000000000000000 R09: 0000000000000000 [ 357.933281][ T9931] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 357.933293][ T9931] R13: 00007fe9c21e6038 R14: 00007fe9c21e5fa0 R15: 00007ffc5672ecc8 [ 357.933324][ T9931] [ 358.361580][ T9942] input: syz1 as /devices/virtual/input/input27 [ 359.012510][ T5811] Bluetooth: unknown link type 128 [ 359.199005][ T30] audit: type=1400 audit(1762731987.327:357): avc: denied { mount } for pid=9934 comm="syz.3.1055" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 359.502257][ T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 359.692730][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 359.736256][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.817372][ T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 359.876881][ T24] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 359.900289][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.957151][ T24] usb 1-1: Product: syz [ 359.996712][ T24] usb 1-1: Manufacturer: syz [ 360.350640][ T24] usb 1-1: SerialNumber: syz [ 360.363259][ T30] audit: type=1400 audit(1762731988.817:358): avc: denied { getopt } for pid=9944 comm="syz.4.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 360.400131][ T24] usb 1-1: config 0 descriptor?? [ 360.783681][ T9951] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 360.790214][ T9951] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 360.811507][ T9951] vhci_hcd vhci_hcd.0: Device attached [ 360.822545][ T5889] vhci_hcd: vhci_device speed not set [ 360.992648][ T5924] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 361.021770][ T5811] Bluetooth: hci0: unexpected event 0x2f length: 1017 > 260 [ 361.042313][ T24] usb 35-1: new high-speed USB device number 8 using vhci_hcd [ 361.057778][ T5811] Bluetooth: hci0: command 0x0406 tx timeout [ 361.099029][ T9960] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 361.109084][ T9960] SELinux: failed to load policy [ 362.549763][ T5816] usb 1-1: USB disconnect, device number 22 [ 362.735125][ T9967] FAULT_INJECTION: forcing a failure. [ 362.735125][ T9967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.765404][ T9967] CPU: 0 UID: 0 PID: 9967 Comm: syz.0.1062 Not tainted syzkaller #0 PREEMPT(full) [ 362.765421][ T9967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 362.765427][ T9967] Call Trace: [ 362.765431][ T9967] [ 362.765438][ T9967] dump_stack_lvl+0x16c/0x1f0 [ 362.765459][ T9967] should_fail_ex+0x512/0x640 [ 362.765474][ T9967] _copy_to_user+0x32/0xd0 [ 362.765492][ T9967] userio_char_read+0x5a8/0x770 [ 362.765508][ T9967] ? __pfx_userio_char_read+0x10/0x10 [ 362.765520][ T9967] ? __pfx_autoremove_wake_function+0x10/0x10 [ 362.765539][ T9967] ? security_file_permission+0x71/0x210 [ 362.765555][ T9967] ? iov_iter_advance+0x1e3/0x6c0 [ 362.765665][ T9967] ? rw_verify_area+0xcf/0x6c0 [ 362.765682][ T9967] ? __pfx_userio_char_read+0x10/0x10 [ 362.765693][ T9967] vfs_readv+0x5c1/0x8b0 [ 362.765713][ T9967] ? __pfx_vfs_readv+0x10/0x10 [ 362.765729][ T9967] ? find_held_lock+0x2b/0x80 [ 362.765752][ T9967] ? __fget_files+0x20e/0x3c0 [ 362.765767][ T9967] ? do_preadv+0x1a6/0x270 [ 362.765782][ T9967] do_preadv+0x1a6/0x270 [ 362.765798][ T9967] ? __pfx_do_preadv+0x10/0x10 [ 362.765817][ T9967] do_syscall_64+0xcd/0xfa0 [ 362.765829][ T9967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.765841][ T9967] RIP: 0033:0x7f03a6b8f6c9 [ 362.765851][ T9967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.765862][ T9967] RSP: 002b:00007f03a7acc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 362.765873][ T9967] RAX: ffffffffffffffda RBX: 00007f03a6de5fa0 RCX: 00007f03a6b8f6c9 [ 362.765881][ T9967] RDX: 0000000000000002 RSI: 0000200000002ec0 RDI: 0000000000000003 [ 362.765887][ T9967] RBP: 00007f03a7acc090 R08: 0000000000000003 R09: 0000000000000000 [ 362.765894][ T9967] R10: 0000000000000167 R11: 0000000000000246 R12: 0000000000000001 [ 362.765901][ T9967] R13: 00007f03a6de6038 R14: 00007f03a6de5fa0 R15: 00007fff58e38978 [ 362.765916][ T9967] [ 363.135051][ T5924] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 363.145324][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.155587][ T5924] usb 2-1: Product: syz [ 363.165701][ T5924] usb 2-1: Manufacturer: syz [ 363.173281][ T5924] usb 2-1: SerialNumber: syz [ 363.184903][ T5924] usb 2-1: config 0 descriptor?? [ 363.397199][ T5924] mos7840 2-1:0.0: required endpoints missing [ 363.416647][ T9954] vhci_hcd: connection reset by peer [ 363.419850][ T9972] fuse: Unknown parameter '0x0000000000000003' [ 363.433779][ T5924] usb 2-1: USB disconnect, device number 27 [ 363.463810][ T3472] vhci_hcd: stop threads [ 363.468073][ T3472] vhci_hcd: release socket [ 363.492013][ T3472] vhci_hcd: disconnect device [ 364.352721][ T9984] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 364.506586][ T9994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1067'. [ 364.587787][ T9994] bond3: (slave geneve2): Opening slave failed [ 364.613929][ T9996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1067'. [ 365.178918][ T9996] bond3 (unregistering): Released all slaves [ 366.521532][ T24] vhci_hcd: vhci_device speed not set [ 368.304599][ T5816] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 368.502861][ T5816] usb 3-1: Using ep0 maxpacket: 8 [ 368.526390][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 165, changing to 11 [ 368.881660][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50610, setting to 1024 [ 368.927007][T10032] SELinux: failed to load policy [ 368.985947][ T5816] usb 3-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 369.327581][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.430319][ T5816] usb 3-1: config 0 descriptor?? [ 369.473110][T10033] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 369.541339][T10050] binder: 10049:10050 ioctl 4018620d 0 returned -22 [ 369.550279][T10050] binder: 10049:10050 unknown command 0 [ 369.557029][T10050] binder: 10049:10050 ioctl c0306201 2000000002c0 returned -22 [ 370.001987][ T5889] libceph: mon0 (1)[c::]:6789 connect error [ 370.568105][ T5889] libceph: mon0 (1)[c::]:6789 connect error [ 371.047032][ T5816] hid_parser_main: 8 callbacks suppressed [ 371.047054][ T5816] cherry 0003:046A:0027.0034: unknown main item tag 0x0 [ 371.047086][ T5816] cherry 0003:046A:0027.0034: unknown main item tag 0x0 [ 371.047115][ T5816] cherry 0003:046A:0027.0034: unknown main item tag 0x0 [ 371.047143][ T5816] cherry 0003:046A:0027.0034: unknown main item tag 0x0 [ 371.047170][ T5816] cherry 0003:046A:0027.0034: unknown main item tag 0x0 [ 371.047197][ T5816] cherry 0003:046A:0027.0034: unknown main item tag 0x0 [ 371.047224][ T5816] cherry 0003:046A:0027.0034: unknown main item tag 0x0 [ 371.047251][ T5816] cherry 0003:046A:0027.0034: unknown main item tag 0x0 [ 371.047277][ T5816] cherry 0003:046A:0027.0034: unknown main item tag 0x0 [ 371.047304][ T5816] cherry 0003:046A:0027.0034: unknown main item tag 0x0 [ 371.056990][ T5816] cherry 0003:046A:0027.0034: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.2-1/input0 [ 371.081653][T10054] ceph: No mds server is up or the cluster is laggy [ 371.082446][ T5889] libceph: mon0 (1)[c::]:6789 connect error [ 371.666936][ T976] usb 3-1: USB disconnect, device number 40 [ 372.126804][T10076] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 372.133337][T10076] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 372.177086][T10079] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 372.183623][T10079] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 372.191409][T10079] vhci_hcd vhci_hcd.0: Device attached [ 372.284230][T10076] vhci_hcd vhci_hcd.0: Device attached [ 372.518191][ T5924] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 372.530928][ T5816] usb 39-1: new high-speed USB device number 8 using vhci_hcd [ 372.532177][ T5889] usb 41-1: new high-speed USB device number 9 using vhci_hcd [ 372.862159][ T5875] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 372.870530][ T979] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 373.032506][ T979] usb 2-1: Using ep0 maxpacket: 8 [ 373.047451][ T979] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 373.058101][ T5924] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 373.542488][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.550766][ T5924] usb 4-1: Product: syz [ 373.556199][ T979] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 373.565496][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.574114][ T5924] usb 4-1: Manufacturer: syz [ 373.582568][ T5924] usb 4-1: SerialNumber: syz [ 373.588120][ T979] usb 2-1: Product: syz [ 373.588250][ T5875] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 373.602569][ T979] usb 2-1: Manufacturer: syz [ 373.628536][ T5924] usb 4-1: config 0 descriptor?? [ 373.633884][ T979] usb 2-1: SerialNumber: syz [ 373.638493][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.833762][ T979] usb 2-1: config 0 descriptor?? [ 374.041320][ T5875] usb 5-1: Product: syz [ 374.047169][ T5875] usb 5-1: Manufacturer: syz [ 374.057521][ T5875] usb 5-1: SerialNumber: syz [ 374.074351][ T5875] usb 5-1: config 0 descriptor?? [ 374.345118][T10077] vhci_hcd: connection reset by peer [ 374.355483][ T12] vhci_hcd: stop threads [ 374.502178][ T12] vhci_hcd: release socket [ 374.510608][ T5875] mos7840 5-1:0.0: required endpoints missing [ 374.526658][ T12] vhci_hcd: disconnect device [ 375.307693][T10080] vhci_hcd: connection reset by peer [ 375.322523][ T5875] usb 5-1: USB disconnect, device number 23 [ 375.330518][ T5924] mos7840 4-1:0.0: required endpoints missing [ 375.337338][ T1156] vhci_hcd: stop threads [ 375.353599][ T1156] vhci_hcd: release socket [ 375.382267][ T1156] vhci_hcd: disconnect device [ 375.452800][ T24] usb 2-1: USB disconnect, device number 28 [ 375.453963][ T5924] usb 4-1: USB disconnect, device number 22 [ 376.640603][T10122] binder: 10121:10122 ioctl 4018620d 0 returned -22 [ 376.647806][T10122] binder: 10121:10122 unknown command 0 [ 376.653690][T10122] binder: 10121:10122 ioctl c0306201 2000000002c0 returned -22 [ 376.702478][ T30] audit: type=1400 audit(1762732005.537:359): avc: denied { write } for pid=10123 comm="syz.2.1100" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 376.740918][ T52] Bluetooth: hci4: unexpected event 0x2f length: 1017 > 260 [ 378.022244][ T5816] vhci_hcd: vhci_device speed not set [ 378.062192][ T5889] vhci_hcd: vhci_device speed not set [ 378.811009][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.821608][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.562121][ T976] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 380.022359][ T976] usb 1-1: Using ep0 maxpacket: 8 [ 380.032498][ T976] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 380.046006][ T976] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 380.056654][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.076257][ T976] usb 1-1: Product: syz [ 380.174415][ T976] usb 1-1: Manufacturer: syz [ 380.216638][ T976] usb 1-1: SerialNumber: syz [ 380.272653][ T976] usb 1-1: config 0 descriptor?? [ 382.441353][ T5875] usb 1-1: USB disconnect, device number 23 [ 382.807996][ T976] hid_parser_main: 54 callbacks suppressed [ 382.808014][ T976] hid-generic 0003:0004:0000.0035: unknown main item tag 0x0 [ 382.832344][ T976] hid-generic 0003:0004:0000.0035: unknown main item tag 0x0 [ 382.839772][ T976] hid-generic 0003:0004:0000.0035: unknown main item tag 0x0 [ 382.898428][ T976] hid-generic 0003:0004:0000.0035: unknown main item tag 0x0 [ 382.913320][ T976] hid-generic 0003:0004:0000.0035: unknown main item tag 0x0 [ 382.920867][ T976] hid-generic 0003:0004:0000.0035: unknown main item tag 0x0 [ 383.014669][ T976] hid-generic 0003:0004:0000.0035: unknown main item tag 0x0 [ 383.433005][ T976] hid-generic 0003:0004:0000.0035: unknown main item tag 0x0 [ 383.544357][ T976] hid-generic 0003:0004:0000.0035: unknown main item tag 0x0 [ 383.576478][ T976] hid-generic 0003:0004:0000.0035: unknown main item tag 0x0 [ 383.596464][ T976] hid-generic 0003:0004:0000.0035: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 383.608374][T10194] nvme_fabrics: missing parameter 'transport=%s' [ 383.626031][T10194] nvme_fabrics: missing parameter 'nqn=%s' [ 383.692790][ T5875] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 383.844319][T10202] input: syz1 as /devices/virtual/input/input33 [ 383.892617][ T5875] usb 3-1: Using ep0 maxpacket: 32 [ 383.996420][ T52] Bluetooth: unknown link type 128 [ 384.067808][T10199] fido_id[10199]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 385.057924][ T5875] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.112621][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 386.788722][ T5875] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 386.858503][ T5875] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 386.914103][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.942558][ T5875] usb 3-1: config 0 descriptor?? [ 386.964279][ T5875] usb 3-1: can't set config #0, error -71 [ 387.422735][T10219] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 387.430168][T10219] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 387.439610][ T5875] usb 3-1: USB disconnect, device number 41 [ 388.402457][T10235] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 388.450502][T10235] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 388.657126][ T5875] hid_parser_main: 8 callbacks suppressed [ 388.657139][ T5875] hid-generic 0003:0004:0000.0036: unknown main item tag 0x0 [ 388.689241][ T5889] libceph: mon0 (1)[c::]:6789 connect error [ 388.859508][ T5875] hid-generic 0003:0004:0000.0036: unknown main item tag 0x0 [ 388.961559][ T5882] libceph: mon0 (1)[c::]:6789 connect error [ 388.967724][T10248] misc userio: Begin command sent, but we're already running [ 389.034297][ T5875] hid-generic 0003:0004:0000.0036: unknown main item tag 0x0 [ 389.067553][ T5875] hid-generic 0003:0004:0000.0036: unknown main item tag 0x0 [ 389.096776][ T5875] hid-generic 0003:0004:0000.0036: unknown main item tag 0x0 [ 389.127444][ T5875] hid-generic 0003:0004:0000.0036: unknown main item tag 0x0 [ 389.138787][ T5875] hid-generic 0003:0004:0000.0036: unknown main item tag 0x0 [ 389.148555][ T5875] hid-generic 0003:0004:0000.0036: unknown main item tag 0x0 [ 389.157638][ T5875] hid-generic 0003:0004:0000.0036: unknown main item tag 0x0 [ 389.167407][ T5875] hid-generic 0003:0004:0000.0036: unknown main item tag 0x0 [ 389.181346][ T5875] hid-generic 0003:0004:0000.0036: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 389.255319][T10237] ceph: No mds server is up or the cluster is laggy [ 389.265185][T10251] fido_id[10251]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 390.238855][ T5889] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 390.478367][ T5889] usb 3-1: Using ep0 maxpacket: 32 [ 390.764404][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.778125][T10274] FAULT_INJECTION: forcing a failure. [ 390.778125][T10274] name failslab, interval 1, probability 0, space 0, times 0 [ 390.794725][T10274] CPU: 0 UID: 0 PID: 10274 Comm: syz.4.1141 Not tainted syzkaller #0 PREEMPT(full) [ 390.794753][T10274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 390.794764][T10274] Call Trace: [ 390.794771][T10274] [ 390.794779][T10274] dump_stack_lvl+0x16c/0x1f0 [ 390.794815][T10274] should_fail_ex+0x512/0x640 [ 390.794838][T10274] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 390.794871][T10274] should_failslab+0xc2/0x120 [ 390.794894][T10274] kmem_cache_alloc_node_noprof+0x78/0x770 [ 390.794922][T10274] ? __alloc_skb+0x2b2/0x380 [ 390.794951][T10274] ? __alloc_skb+0x2b2/0x380 [ 390.794972][T10274] ? __pfx_netlink_insert+0x10/0x10 [ 390.794998][T10274] __alloc_skb+0x2b2/0x380 [ 390.795021][T10274] ? __pfx___alloc_skb+0x10/0x10 [ 390.795045][T10274] ? netlink_autobind.isra.0+0x158/0x370 [ 390.795080][T10274] netlink_alloc_large_skb+0x69/0x140 [ 390.795110][T10274] netlink_sendmsg+0x698/0xdd0 [ 390.795143][T10274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.795182][T10274] ____sys_sendmsg+0xa98/0xc70 [ 390.795204][T10274] ? copy_msghdr_from_user+0x10a/0x160 [ 390.795229][T10274] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.795262][T10274] ___sys_sendmsg+0x134/0x1d0 [ 390.795295][T10274] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.795317][T10274] ? __lock_acquire+0x622/0x1c90 [ 390.795383][T10274] __sys_sendmsg+0x16d/0x220 [ 390.795409][T10274] ? __pfx___sys_sendmsg+0x10/0x10 [ 390.795454][T10274] do_syscall_64+0xcd/0xfa0 [ 390.795476][T10274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.795497][T10274] RIP: 0033:0x7f87e938f6c9 [ 390.795513][T10274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.795533][T10274] RSP: 002b:00007f87ea232038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.795553][T10274] RAX: ffffffffffffffda RBX: 00007f87e95e5fa0 RCX: 00007f87e938f6c9 [ 390.795566][T10274] RDX: 00000000040000c0 RSI: 0000200000000000 RDI: 0000000000000004 [ 390.795578][T10274] RBP: 00007f87ea232090 R08: 0000000000000000 R09: 0000000000000000 [ 390.795591][T10274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.795603][T10274] R13: 00007f87e95e6038 R14: 00007f87e95e5fa0 R15: 00007ffff1de8588 [ 390.795633][T10274] [ 390.799380][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.062831][ T5889] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 391.071980][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.198382][ T5889] usb 3-1: config 0 descriptor?? [ 392.150168][T10283] SELinux: failed to load policy [ 392.447693][ T5889] koneplus 0003:1E7D:2D51.0037: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 392.897162][T10297] binder: 10295:10297 ioctl 4018620d 0 returned -22 [ 393.183536][T10296] binder: 10295:10296 unknown command 0 [ 393.189777][T10296] binder: 10295:10296 ioctl c0306201 2000000002c0 returned -22 [ 393.318839][ T5882] usb 3-1: USB disconnect, device number 42 [ 394.680320][T10306] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 394.688503][T10306] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 395.612829][T10337] afs: Unknown parameter '01777777777777777777777' [ 396.482625][ T5882] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 396.820373][T10342] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 397.182799][ T5882] usb 1-1: Using ep0 maxpacket: 32 [ 397.203921][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.216362][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.227835][ T5882] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 397.238308][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.284866][ T5882] usb 1-1: config 0 descriptor?? [ 397.864826][ T5882] koneplus 0003:1E7D:2D51.0038: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 398.719682][T10366] FAULT_INJECTION: forcing a failure. [ 398.719682][T10366] name failslab, interval 1, probability 0, space 0, times 0 [ 398.761779][T10355] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 398.768310][T10355] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 398.779224][T10344] SELinux: failed to load policy [ 398.812003][T10366] CPU: 0 UID: 0 PID: 10366 Comm: syz.1.1165 Not tainted syzkaller #0 PREEMPT(full) [ 398.812035][T10366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 398.812044][T10366] Call Trace: [ 398.812051][T10366] [ 398.812058][T10366] dump_stack_lvl+0x16c/0x1f0 [ 398.812090][T10366] should_fail_ex+0x512/0x640 [ 398.812115][T10366] should_failslab+0xc2/0x120 [ 398.812137][T10366] kmem_cache_alloc_node_noprof+0x78/0x770 [ 398.812166][T10366] ? __alloc_skb+0x2b2/0x380 [ 398.812195][T10366] ? __alloc_skb+0x2b2/0x380 [ 398.812215][T10366] ? __pfx_netlink_insert+0x10/0x10 [ 398.812245][T10366] __alloc_skb+0x2b2/0x380 [ 398.812268][T10366] ? __pfx___alloc_skb+0x10/0x10 [ 398.812294][T10366] ? netlink_autobind.isra.0+0xa8/0x370 [ 398.812328][T10366] netlink_alloc_large_skb+0x69/0x140 [ 398.812358][T10366] netlink_sendmsg+0x698/0xdd0 [ 398.812397][T10366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.812436][T10366] ____sys_sendmsg+0xa98/0xc70 [ 398.812457][T10366] ? copy_msghdr_from_user+0x10a/0x160 [ 398.812483][T10366] ? __pfx_____sys_sendmsg+0x10/0x10 [ 398.812516][T10366] ___sys_sendmsg+0x134/0x1d0 [ 398.812544][T10366] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.812567][T10366] ? __lock_acquire+0x622/0x1c90 [ 398.812633][T10366] __sys_sendmsg+0x16d/0x220 [ 398.812659][T10366] ? __pfx___sys_sendmsg+0x10/0x10 [ 398.812705][T10366] do_syscall_64+0xcd/0xfa0 [ 398.812726][T10366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.812747][T10366] RIP: 0033:0x7f029f18f6c9 [ 398.812764][T10366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.812782][T10366] RSP: 002b:00007f02a0054038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.812802][T10366] RAX: ffffffffffffffda RBX: 00007f029f3e6090 RCX: 00007f029f18f6c9 [ 398.812816][T10366] RDX: 0000000000040040 RSI: 0000200000000680 RDI: 0000000000000004 [ 398.812828][T10366] RBP: 00007f02a0054090 R08: 0000000000000000 R09: 0000000000000000 [ 398.812840][T10366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.812852][T10366] R13: 00007f029f3e6128 R14: 00007f029f3e6090 R15: 00007ffeb37b74d8 [ 398.812883][T10366] [ 399.028010][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.180968][T10355] vhci_hcd vhci_hcd.0: Device attached [ 399.359842][ T979] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 399.540836][ T979] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 399.550057][ T5816] usb 41-1: new high-speed USB device number 10 using vhci_hcd [ 399.589804][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.666305][ T979] usb 5-1: Product: syz [ 399.695235][ T5882] usb 1-1: USB disconnect, device number 24 [ 399.704591][ T979] usb 5-1: Manufacturer: syz [ 399.710567][ T979] usb 5-1: SerialNumber: syz [ 399.781001][ T979] usb 5-1: config 0 descriptor?? [ 400.023410][T10360] vhci_hcd: connection reset by peer [ 400.031710][ T6707] vhci_hcd: stop threads [ 400.039983][ T979] mos7840 5-1:0.0: required endpoints missing [ 400.054410][ T6707] vhci_hcd: release socket [ 400.068169][ T6707] vhci_hcd: disconnect device [ 400.109202][ T979] usb 5-1: USB disconnect, device number 24 [ 400.125657][ T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 400.174836][T10382] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 400.186922][T10382] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 400.296243][ T24] usb 4-1: config 4 has an invalid interface number: 28 but max is 0 [ 400.305262][ T24] usb 4-1: config 4 has no interface number 0 [ 400.308030][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 400.323132][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.331445][ T24] usb 4-1: Product: syz [ 400.336331][ T24] usb 4-1: Manufacturer: syz [ 400.336352][ T24] usb 4-1: SerialNumber: syz [ 400.363686][ T24] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:4.28/input/input34 [ 400.596152][ T5168] bcm5974 4-1:4.28: could not read from device [ 400.598905][ T24] bcm5974 4-1:4.28: could not read from device [ 400.601399][ T5168] bcm5974 4-1:4.28: could not read from device [ 400.617639][ T24] input: failed to attach handler mousedev to device input34, error: -5 [ 400.620168][ T5168] bcm5974 4-1:4.28: could not read from device [ 400.627934][ T24] usb 4-1: USB disconnect, device number 23 [ 400.679850][ T5168] bcm5974 4-1:4.28: could not read from device [ 401.182159][ T979] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 401.840199][ T979] usb 5-1: config 4 has an invalid interface number: 28 but max is 0 [ 402.188435][ T979] usb 5-1: config 4 has no interface number 0 [ 402.199463][ T979] usb 5-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 402.210451][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.219474][ T979] usb 5-1: Product: syz [ 402.223943][ T979] usb 5-1: Manufacturer: syz [ 402.228553][ T979] usb 5-1: SerialNumber: syz [ 402.243708][ T979] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.28/input/input35 [ 402.670562][ T5168] bcm5974 5-1:4.28: could not read from device [ 402.775030][ T5168] bcm5974 5-1:4.28: could not read from device [ 403.031117][ T979] bcm5974 5-1:4.28: could not read from device [ 403.061887][ T979] input: failed to attach handler mousedev to device input35, error: -5 [ 403.064856][ T5168] bcm5974 5-1:4.28: could not read from device [ 403.075685][ T5168] bcm5974 5-1:4.28: could not read from device [ 403.407332][ T979] usb 5-1: USB disconnect, device number 25 [ 403.515799][T10400] SELinux: failed to load policy [ 404.656979][ T30] audit: type=1400 audit(1762732033.517:360): avc: denied { read } for pid=10421 comm="syz.3.1184" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 404.681281][ C1] vkms_vblank_simulate: vblank timer overrun [ 404.771809][ T5816] vhci_hcd: vhci_device speed not set [ 405.514492][ T30] audit: type=1400 audit(1762732033.517:361): avc: denied { open } for pid=10421 comm="syz.3.1184" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 405.514577][ T30] audit: type=1400 audit(1762732033.787:362): avc: denied { ioctl } for pid=10421 comm="syz.3.1184" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 405.514622][ T30] audit: type=1400 audit(1762732033.967:363): avc: denied { getopt } for pid=10421 comm="syz.3.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 405.684575][T10435] input: syz1 as /devices/virtual/input/input36 [ 405.804558][ T5133] Bluetooth: unknown link type 128 [ 406.964267][T10449] FAULT_INJECTION: forcing a failure. [ 406.964267][T10449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.002123][ T5882] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 407.004822][T10449] CPU: 0 UID: 0 PID: 10449 Comm: syz.1.1192 Not tainted syzkaller #0 PREEMPT(full) [ 407.004849][T10449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 407.004861][T10449] Call Trace: [ 407.004867][T10449] [ 407.004874][T10449] dump_stack_lvl+0x16c/0x1f0 [ 407.004911][T10449] should_fail_ex+0x512/0x640 [ 407.004944][T10449] _copy_from_user+0x2e/0xd0 [ 407.004968][T10449] kstrtouint_from_user+0xd6/0x1d0 [ 407.004997][T10449] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 407.005025][T10449] ? __lock_acquire+0xb8a/0x1c90 [ 407.005068][T10449] proc_fail_nth_write+0x83/0x220 [ 407.005090][T10449] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 407.005121][T10449] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 407.005142][T10449] vfs_write+0x2a0/0x11d0 [ 407.005165][T10449] ? __pfx___mutex_lock+0x10/0x10 [ 407.005184][T10449] ? __pfx_vfs_write+0x10/0x10 [ 407.005211][T10449] ? __fget_files+0x20e/0x3c0 [ 407.005240][T10449] ksys_write+0x12a/0x250 [ 407.005257][T10449] ? __pfx_ksys_write+0x10/0x10 [ 407.005275][T10449] ? fdget+0x187/0x210 [ 407.005300][T10449] do_syscall_64+0xcd/0xfa0 [ 407.005320][T10449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.005340][T10449] RIP: 0033:0x7f029f18e17f [ 407.005355][T10449] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 407.005374][T10449] RSP: 002b:00007f02a0075030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 407.005392][T10449] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f029f18e17f [ 407.005405][T10449] RDX: 0000000000000001 RSI: 00007f02a00750a0 RDI: 0000000000000003 [ 407.005417][T10449] RBP: 00007f02a0075090 R08: 0000000000000000 R09: 0000000000000000 [ 407.005429][T10449] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 407.005440][T10449] R13: 00007f029f3e6038 R14: 00007f029f3e5fa0 R15: 00007ffeb37b74d8 [ 407.005470][T10449] [ 407.256380][ T5816] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 407.307562][T10460] binder: 10456:10460 ioctl 4018620d 0 returned -22 [ 407.326473][T10460] binder: 10456:10460 ioctl c0306201 0 returned -14 [ 407.419415][T10461] input: syz1 as /devices/virtual/input/input37 [ 408.512857][ T5133] Bluetooth: hci4: command 0x0406 tx timeout [ 408.519579][ T5882] usb 4-1: config 4 has an invalid interface number: 28 but max is 0 [ 408.533062][ T5882] usb 4-1: config 4 has no interface number 0 [ 408.567222][ T5882] usb 4-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 408.577675][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.586152][ T5882] usb 4-1: Product: syz [ 408.590450][ T5882] usb 4-1: Manufacturer: syz [ 408.592590][ T5816] usb 3-1: Using ep0 maxpacket: 32 [ 408.595123][ T5882] usb 4-1: SerialNumber: syz [ 408.603568][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.620606][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.629802][ T5882] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:4.28/input/input38 [ 408.639704][ T5816] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 408.650203][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.669703][ T5816] usb 3-1: config 0 descriptor?? [ 408.730846][ T5816] hub 3-1:0.0: USB hub found [ 409.017247][ T5168] bcm5974 4-1:4.28: could not read from device [ 409.133496][ T5168] bcm5974 4-1:4.28: could not read from device [ 409.165422][ T5882] bcm5974 4-1:4.28: could not read from device [ 409.190994][ T5882] input: failed to attach handler mousedev to device input38, error: -5 [ 409.226408][ T5168] bcm5974 4-1:4.28: could not read from device [ 409.255825][ T5816] hub 3-1:0.0: config failed, hub has too many ports! (err -19) [ 409.255897][ T5882] usb 4-1: USB disconnect, device number 24 [ 410.348990][T10474] SELinux: failed to load policy [ 410.700584][T10475] misc userio: Begin command sent, but we're already running [ 410.789687][ T5816] usbhid 3-1:0.0: can't add hid device: -71 [ 411.140811][ T5816] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 411.199669][ T5816] usb 3-1: USB disconnect, device number 43 [ 411.348010][ T30] audit: type=1400 audit(1762732040.217:364): avc: denied { mounton } for pid=10489 comm="syz.0.1208" path="cgroup:[4026533077]" dev="nsfs" ino=4026533077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 411.558644][T10495] binder: 10494:10495 ioctl 4018620d 0 returned -22 [ 411.565902][T10495] binder: 10494:10495 ioctl c0306201 0 returned -14 [ 411.572833][ T5889] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 411.752157][ T5889] usb 4-1: Using ep0 maxpacket: 8 [ 411.765293][ T5889] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 411.765312][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.765324][ T5889] usb 4-1: Product: syz [ 411.765332][ T5889] usb 4-1: Manufacturer: syz [ 411.765341][ T5889] usb 4-1: SerialNumber: syz [ 411.766837][ T5889] usb 4-1: config 0 descriptor?? [ 411.769702][ T5889] gspca_main: se401-2.14.0 probing 047d:5003 [ 412.822136][ T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 413.364245][T10509] SELinux: failed to load policy [ 414.356570][ T24] usb 5-1: config 4 has an invalid interface number: 28 but max is 0 [ 414.364719][ T24] usb 5-1: config 4 has no interface number 0 [ 414.384679][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 414.393879][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.402207][ T24] usb 5-1: Product: syz [ 414.413023][ T24] usb 5-1: Manufacturer: syz [ 414.417936][ T24] usb 5-1: SerialNumber: syz [ 414.577464][ T5889] gspca_se401: read req failed req 0x06 error -19 [ 414.775717][ T5889] usb 4-1: USB disconnect, device number 25 [ 414.783244][T10517] misc userio: Begin command sent, but we're already running [ 414.803176][ T24] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.28/input/input41 [ 414.838154][ T5168] bcm5974 5-1:4.28: could not read from device [ 414.874462][ T24] usb 5-1: USB disconnect, device number 26 [ 414.886199][ T5168] bcm5974 5-1:4.28: could not read from device [ 414.979083][ T6974] udevd[6974]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 415.014750][ T6974] udevd[6974]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 415.089545][T10531] bridge4: entered promiscuous mode [ 415.162754][ T6974] udevd[6974]: Error opening device "/dev/input/event4": No such file or directory [ 415.172241][ T6974] udevd[6974]: Unable to EVIOCGABS device "/dev/input/event4" [ 415.181931][ T6974] udevd[6974]: Unable to EVIOCGABS device "/dev/input/event4" [ 415.192328][ T6974] udevd[6974]: Unable to EVIOCGABS device "/dev/input/event4" [ 415.200330][ T6974] udevd[6974]: Unable to EVIOCGABS device "/dev/input/event4" [ 415.979118][T10529] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 415.994059][T10529] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 416.528957][T10547] binder: 10545:10547 ioctl 4018620d 0 returned -22 [ 416.557825][T10547] binder: 10545:10547 ioctl c0306201 0 returned -14 [ 417.262184][ T979] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 417.302491][T10555] input: syz1 as /devices/virtual/input/input43 [ 417.428349][ T5133] Bluetooth: unknown link type 128 [ 418.343284][ T979] usb 2-1: Using ep0 maxpacket: 32 [ 418.473035][ T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.488554][ T979] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 418.498393][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.553399][ T979] usb 2-1: config 0 descriptor?? [ 418.571194][ T979] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 418.789789][T10567] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 418.797227][ T24] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 418.806605][T10567] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 419.038746][ T24] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 419.451317][ T5133] Bluetooth: hci0: command 0x0406 tx timeout [ 419.562764][ T24] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 419.571873][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.674469][ T24] usb 5-1: can't set config #2, error -71 [ 419.685640][ T24] usb 5-1: USB disconnect, device number 27 [ 419.982148][ T976] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 420.182519][ T5816] usb 2-1: USB disconnect, device number 29 [ 420.841656][ T976] usb 1-1: config 4 has an invalid interface number: 28 but max is 0 [ 420.880313][ T976] usb 1-1: config 4 has no interface number 0 [ 420.903774][ T976] usb 1-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 420.917130][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.922563][T10584] binder: 10583:10584 ioctl 4018620d 0 returned -22 [ 420.934683][T10584] binder: 10583:10584 unknown command 0 [ 420.940465][T10584] binder: 10583:10584 ioctl c0306201 2000000002c0 returned -22 [ 421.020824][ T976] usb 1-1: Product: syz [ 421.028897][ T976] usb 1-1: Manufacturer: syz [ 421.092092][ T976] usb 1-1: SerialNumber: syz [ 421.134897][ T976] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:4.28/input/input44 [ 421.371984][T10597] binder: 10593:10597 ioctl 4018620d 0 returned -22 [ 421.416438][ T5168] bcm5974 1-1:4.28: could not read from device [ 421.429477][ T976] bcm5974 1-1:4.28: could not read from device [ 421.439091][ T5168] bcm5974 1-1:4.28: could not read from device [ 421.773817][ T976] input: failed to attach handler mousedev to device input44, error: -5 [ 421.787087][ T5168] bcm5974 1-1:4.28: could not read from device [ 421.799609][ T976] usb 1-1: USB disconnect, device number 25 [ 421.817014][ T5168] bcm5974 1-1:4.28: could not read from device [ 421.966720][ T30] audit: type=1400 audit(1762732050.837:365): avc: denied { create } for pid=10589 comm="syz.3.1237" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 421.987407][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.032097][ T30] audit: type=1400 audit(1762732050.897:366): avc: denied { unlink } for pid=5806 comm="syz-executor" name="file0" dev="tmpfs" ino=1481 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 422.054706][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.123764][T10605] binder: 10603:10605 ioctl 4018620d 0 returned -22 [ 422.131503][T10605] binder: 10603:10605 unknown command 0 [ 422.137347][T10605] binder: 10603:10605 ioctl c0306201 2000000002c0 returned -22 [ 422.219986][ T5882] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 422.479787][ T5882] usb 5-1: Using ep0 maxpacket: 32 [ 422.532264][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.605516][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.617710][ T5882] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 422.628957][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.659761][ T5882] usb 5-1: config 0 descriptor?? [ 423.225307][T10617] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 423.231850][T10617] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 423.287922][T10617] vhci_hcd vhci_hcd.0: Device attached [ 423.598742][ T5816] usb 33-1: new high-speed USB device number 9 using vhci_hcd [ 423.803549][ T979] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 423.859280][ T5882] koneplus 0003:1E7D:2D51.0039: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0 [ 424.248934][ T979] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 424.276124][ T5882] usb 5-1: USB disconnect, device number 28 [ 424.287664][ T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.307057][T10626] fido_id[10626]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 424.341517][ T979] usb 1-1: Product: syz [ 424.345866][ T979] usb 1-1: Manufacturer: syz [ 424.351589][ T979] usb 1-1: SerialNumber: syz [ 424.374615][ T979] usb 1-1: config 0 descriptor?? [ 424.776950][T10618] vhci_hcd: connection reset by peer [ 424.795180][ T979] mos7840 1-1:0.0: required endpoints missing [ 424.801352][ T50] vhci_hcd: stop threads [ 424.819137][ T50] vhci_hcd: release socket [ 424.855606][ T50] vhci_hcd: disconnect device [ 424.877101][ T979] usb 1-1: USB disconnect, device number 26 [ 425.259515][T10639] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 425.266077][T10639] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 425.274074][T10639] vhci_hcd vhci_hcd.0: Device attached [ 425.517101][T10651] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 425.523639][T10651] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 425.538949][T10651] vhci_hcd vhci_hcd.0: Device attached [ 425.557723][ T5882] usb 35-1: new high-speed USB device number 9 using vhci_hcd [ 425.822202][ T976] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 425.822361][ T5889] usb 41-1: new high-speed USB device number 11 using vhci_hcd [ 425.866489][T10660] binder: 10659:10660 ioctl 4018620d 0 returned -22 [ 425.922364][ T979] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 425.986673][ T976] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 425.986705][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.986726][ T976] usb 2-1: Product: syz [ 425.986744][ T976] usb 2-1: Manufacturer: syz [ 425.986761][ T976] usb 2-1: SerialNumber: syz [ 425.998242][ T976] usb 2-1: config 0 descriptor?? [ 426.135440][T10665] input: syz1 as /devices/virtual/input/input45 [ 426.194533][ T5133] Bluetooth: unknown link type 128 [ 426.565324][ T979] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 426.565345][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.565356][ T979] usb 5-1: Product: syz [ 426.565365][ T979] usb 5-1: Manufacturer: syz [ 426.565377][ T979] usb 5-1: SerialNumber: syz [ 426.840622][ T979] usb 5-1: config 0 descriptor?? [ 426.981308][T10646] vhci_hcd: connection reset by peer [ 427.014013][ T13] vhci_hcd: stop threads [ 427.025522][ T976] mos7840 2-1:0.0: required endpoints missing [ 427.031762][ T13] vhci_hcd: release socket [ 427.061934][ T13] vhci_hcd: disconnect device [ 427.097783][ T976] usb 2-1: USB disconnect, device number 30 [ 427.132591][ T979] mos7840 5-1:0.0: required endpoints missing [ 427.141933][ T979] usb 5-1: USB disconnect, device number 29 [ 427.193629][T10652] vhci_hcd: connection reset by peer [ 427.211543][ T13] vhci_hcd: stop threads [ 427.217123][ T13] vhci_hcd: release socket [ 427.221702][ T13] vhci_hcd: disconnect device [ 427.371868][T10670] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1260'. [ 427.863453][T10671] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 427.871197][T10671] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 427.959930][T10682] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 427.967648][T10682] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 428.135164][T10689] misc userio: Begin command sent, but we're already running [ 428.273366][ T5133] Bluetooth: hci3: command 0x0406 tx timeout [ 428.329794][T10690] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 428.337985][T10690] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 429.152672][ T5816] vhci_hcd: vhci_device speed not set [ 429.192752][T10696] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 429.199295][T10696] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 429.306255][T10696] vhci_hcd vhci_hcd.0: Device attached [ 429.590984][T10699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1267'. [ 429.642128][ T979] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 429.654812][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1267'. [ 430.159646][ T979] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 430.168968][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.168996][ T979] usb 2-1: Product: syz [ 430.169012][ T979] usb 2-1: Manufacturer: syz [ 430.169029][ T979] usb 2-1: SerialNumber: syz [ 430.231176][ T979] usb 2-1: config 0 descriptor?? [ 430.491235][T10719] binder: 10717:10719 ioctl 4018620d 0 returned -22 [ 430.773762][ T979] mos7840 2-1:0.0: required endpoints missing [ 430.774786][T10697] vhci_hcd: connection closed [ 430.775039][ T1132] vhci_hcd: stop threads [ 430.775063][ T1132] vhci_hcd: release socket [ 430.776080][ T1132] vhci_hcd: disconnect device [ 430.779345][ T979] usb 2-1: USB disconnect, device number 31 [ 430.867420][ T5882] vhci_hcd: vhci_device speed not set [ 430.953276][ T5889] vhci_hcd: vhci_device speed not set [ 431.086179][T10725] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1273'. [ 431.228654][T10726] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 431.688550][T10731] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 431.863114][T10731] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 432.411316][T10742] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 433.406454][ T30] audit: type=1400 audit(1762732062.267:367): avc: denied { mount } for pid=10737 comm="syz.2.1280" name="/" dev="autofs" ino=32492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 433.430223][ T5882] hid_parser_main: 8 callbacks suppressed [ 433.430236][ T5882] hid-generic 0003:0004:0000.003A: unknown main item tag 0x0 [ 433.500939][ T5882] hid-generic 0003:0004:0000.003A: unknown main item tag 0x0 [ 433.549092][T10738] nvme_fabrics: missing parameter 'transport=%s' [ 433.555482][T10738] nvme_fabrics: missing parameter 'nqn=%s' [ 433.626845][ T5882] hid-generic 0003:0004:0000.003A: unknown main item tag 0x0 [ 433.643334][ T30] audit: type=1400 audit(1762732062.347:368): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 433.929630][ T5882] hid-generic 0003:0004:0000.003A: unknown main item tag 0x0 [ 433.960694][ T5882] hid-generic 0003:0004:0000.003A: unknown main item tag 0x0 [ 433.975012][ T5882] hid-generic 0003:0004:0000.003A: unknown main item tag 0x0 [ 434.046381][ T5882] hid-generic 0003:0004:0000.003A: unknown main item tag 0x0 [ 434.056557][ T5882] hid-generic 0003:0004:0000.003A: unknown main item tag 0x0 [ 434.082284][ T5882] hid-generic 0003:0004:0000.003A: unknown main item tag 0x0 [ 434.105516][ T5882] hid-generic 0003:0004:0000.003A: unknown main item tag 0x0 [ 434.135686][T10764] binder: 10758:10764 ioctl 4018620d 0 returned -22 [ 434.143246][T10764] binder: 10758:10764 unknown command 0 [ 434.149645][T10764] binder: 10758:10764 ioctl c0306201 2000000002c0 returned -22 [ 434.298029][ T5882] hid-generic 0003:0004:0000.003A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 435.417455][T10777] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 436.175083][T10782] binder: 10778:10782 ioctl 4018620d 0 returned -22 [ 436.539512][T10780] nvme_fabrics: missing parameter 'transport=%s' [ 436.585914][T10780] nvme_fabrics: missing parameter 'nqn=%s' [ 436.967757][T10786] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 436.974280][T10786] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 437.282306][ T5889] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 437.573230][T10786] vhci_hcd vhci_hcd.0: Device attached [ 438.241997][ T5816] usb 35-1: new high-speed USB device number 10 using vhci_hcd [ 438.631927][ T5889] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 438.673379][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.681464][ T5889] usb 2-1: Product: syz [ 438.695205][ T5889] usb 2-1: Manufacturer: syz [ 438.714579][ T5889] usb 2-1: SerialNumber: syz [ 438.881119][ T5889] usb 2-1: config 0 descriptor?? [ 439.405758][T10787] vhci_hcd: connection reset by peer [ 439.412409][ T50] vhci_hcd: stop threads [ 439.412427][ T50] vhci_hcd: release socket [ 439.412465][ T50] vhci_hcd: disconnect device [ 439.413959][ T5889] mos7840 2-1:0.0: required endpoints missing [ 439.450807][ T5889] usb 2-1: USB disconnect, device number 32 [ 439.764594][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.770940][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.950946][T10822] Failed to initialize the IGMP autojoin socket (err -2) [ 439.958772][ T30] audit: type=1400 audit(1762732068.797:369): avc: denied { bind } for pid=10816 comm="syz.2.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 440.269433][ T5889] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 440.288478][T10824] misc userio: Begin command sent, but we're already running [ 440.985056][ T5889] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 441.001296][ T5889] usb 3-1: can't read configurations, error -61 [ 441.183539][T10837] input: syz1 as /devices/virtual/input/input46 [ 441.362516][ T5889] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 443.442844][ T5816] vhci_hcd: vhci_device speed not set [ 444.100020][T10847] binder: 10845:10847 ioctl 4018620d 0 returned -22 [ 444.129074][T10847] binder: 10845:10847 unknown command 0 [ 444.134730][T10847] binder: 10845:10847 ioctl c0306201 2000000002c0 returned -22 [ 444.362557][T10843] binder: 10840:10843 ioctl 4018620d 0 returned -22 [ 446.864058][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1312'. [ 446.998074][T10868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1312'. [ 450.418746][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 450.591892][T10911] ceph: No mds server is up or the cluster is laggy [ 450.800264][T10925] misc userio: Begin command sent, but we're already running [ 452.424113][ T30] audit: type=1326 audit(1762732081.187:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.3.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c1f8f6c9 code=0x7ffc0000 [ 452.448013][ T30] audit: type=1326 audit(1762732081.187:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.3.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c1f8f6c9 code=0x7ffc0000 [ 452.471403][ C1] vkms_vblank_simulate: vblank timer overrun [ 452.479131][ T30] audit: type=1326 audit(1762732081.187:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.3.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9c1f8f6c9 code=0x7ffc0000 [ 452.502515][ C1] vkms_vblank_simulate: vblank timer overrun [ 453.063351][ T30] audit: type=1326 audit(1762732081.187:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.3.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c1f8f6c9 code=0x7ffc0000 [ 453.086760][ C1] vkms_vblank_simulate: vblank timer overrun [ 453.096648][ T30] audit: type=1326 audit(1762732081.187:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.3.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c1f8f6c9 code=0x7ffc0000 [ 453.121438][ C1] vkms_vblank_simulate: vblank timer overrun [ 453.175185][ T30] audit: type=1326 audit(1762732081.187:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.3.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9c1f8f6c9 code=0x7ffc0000 [ 453.202001][ T30] audit: type=1326 audit(1762732081.187:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.3.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c1f8f6c9 code=0x7ffc0000 [ 453.232395][ T30] audit: type=1326 audit(1762732081.187:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.3.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c1f8f6c9 code=0x7ffc0000 [ 453.255773][ C1] vkms_vblank_simulate: vblank timer overrun [ 453.480780][ T30] audit: type=1326 audit(1762732081.187:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.3.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9c1f8f6c9 code=0x7ffc0000 [ 453.481114][ T30] audit: type=1326 audit(1762732081.187:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.3.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c1f8f6c9 code=0x7ffc0000 [ 454.075109][T10952] tty tty4: ldisc open failed (-12), clearing slot 3 [ 454.964622][T10973] input: syz1 as /devices/virtual/input/input47 [ 455.630773][ T5133] Bluetooth: unknown link type 128 [ 455.985199][ T976] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 456.740811][ T976] usb 2-1: Using ep0 maxpacket: 32 [ 456.871779][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.910652][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.981742][ T976] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 457.002645][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.020145][ T976] usb 2-1: config 0 descriptor?? [ 457.750243][ T5133] Bluetooth: hci4: command 0x0406 tx timeout [ 458.133344][T10987] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 458.140786][T10987] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 459.022957][ T976] usbhid 2-1:0.0: can't add hid device: -71 [ 459.052186][ T976] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 459.085727][ T976] usb 2-1: USB disconnect, device number 33 [ 459.210335][T10997] binder: 10993:10997 ioctl 4018620d 0 returned -22 [ 459.233358][T10997] binder: 10993:10997 unknown command 0 [ 459.240995][T10997] binder: 10993:10997 ioctl c0306201 2000000002c0 returned -22 [ 459.842213][ T5133] Bluetooth: hci4: command 0x0406 tx timeout [ 460.797456][ T979] hid_parser_main: 8 callbacks suppressed [ 460.797475][ T979] hid-generic 0003:0004:0000.003B: unknown main item tag 0x0 [ 460.842407][ T979] hid-generic 0003:0004:0000.003B: unknown main item tag 0x0 [ 461.138904][ T979] hid-generic 0003:0004:0000.003B: unknown main item tag 0x0 [ 461.161985][ T979] hid-generic 0003:0004:0000.003B: unknown main item tag 0x0 [ 461.182524][ T979] hid-generic 0003:0004:0000.003B: unknown main item tag 0x0 [ 461.190130][ T979] hid-generic 0003:0004:0000.003B: unknown main item tag 0x0 [ 461.198544][ T979] hid-generic 0003:0004:0000.003B: unknown main item tag 0x0 [ 461.206979][ T979] hid-generic 0003:0004:0000.003B: unknown main item tag 0x0 [ 461.221720][ T979] hid-generic 0003:0004:0000.003B: unknown main item tag 0x0 [ 461.253006][ T979] hid-generic 0003:0004:0000.003B: unknown main item tag 0x0 [ 461.624271][ T979] hid-generic 0003:0004:0000.003B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 461.922286][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 461.987927][ T979] libceph: mon0 (1)[c::]:6789 connect error [ 462.126176][T11033] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 462.134228][T11033] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 462.159500][T11028] fido_id[11028]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 462.276151][ T979] libceph: mon0 (1)[c::]:6789 connect error [ 462.397710][T11040] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 462.420797][T11026] ceph: No mds server is up or the cluster is laggy [ 462.421017][T11040] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 462.823379][T11047] misc userio: Begin command sent, but we're already running [ 463.146242][T11051] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 464.231088][T11054] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 464.237609][T11054] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 464.275849][T11054] vhci_hcd vhci_hcd.0: Device attached [ 464.352480][ T979] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 464.418437][T11061] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1364'. [ 464.508830][ T979] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 464.518376][ T5867] usb 39-1: new high-speed USB device number 9 using vhci_hcd [ 464.526676][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.552326][ T979] usb 4-1: Product: syz [ 464.567062][ T979] usb 4-1: Manufacturer: syz [ 464.579189][ T979] usb 4-1: SerialNumber: syz [ 464.601708][ T979] usb 4-1: config 0 descriptor?? [ 465.578389][T11056] vhci_hcd: connection reset by peer [ 465.587861][ T52] Bluetooth: hci2: unexpected event 0x2f length: 1017 > 260 [ 465.591859][ T1132] vhci_hcd: stop threads [ 465.592977][ T979] mos7840 4-1:0.0: required endpoints missing [ 465.716958][ T979] usb 4-1: USB disconnect, device number 26 [ 465.735298][ T1132] vhci_hcd: release socket [ 465.740238][ T1132] vhci_hcd: disconnect device [ 465.744763][ T5882] libceph: mon0 (1)[c::]:6789 connect error [ 466.006859][T11073] ceph: No mds server is up or the cluster is laggy [ 466.042394][ T5882] libceph: mon0 (1)[c::]:6789 connect error [ 466.252262][T11087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1370'. [ 466.354102][T11088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1370'. [ 467.171559][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 467.171574][ T30] audit: type=1400 audit(1762732096.037:399): avc: denied { wake_alarm } for pid=11094 comm="syz.2.1373" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 467.496946][ T52] Bluetooth: hci4: unexpected event 0x2f length: 1017 > 260 [ 467.552163][ T5882] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 467.742149][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 467.750401][ T5882] usb 3-1: config 4 has an invalid interface number: 75 but max is 0 [ 467.759084][ T5882] usb 3-1: config 4 has no interface number 0 [ 467.767038][ T5882] usb 3-1: config 4 interface 75 altsetting 4 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 467.784311][ T5882] usb 3-1: config 4 interface 75 has no altsetting 0 [ 467.798038][ T5882] usb 3-1: New USB device found, idVendor=0a5c, idProduct=9acd, bcdDevice=f0.3d [ 467.807503][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.815880][ T5882] usb 3-1: Product: syz [ 467.820130][ T5882] usb 3-1: Manufacturer: syz [ 467.825244][ T5882] usb 3-1: SerialNumber: syz [ 467.979518][T11114] FAULT_INJECTION: forcing a failure. [ 467.979518][T11114] name failslab, interval 1, probability 0, space 0, times 0 [ 468.002842][T11114] CPU: 0 UID: 0 PID: 11114 Comm: syz.3.1379 Not tainted syzkaller #0 PREEMPT(full) [ 468.002871][T11114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 468.002883][T11114] Call Trace: [ 468.002890][T11114] [ 468.002898][T11114] dump_stack_lvl+0x16c/0x1f0 [ 468.002933][T11114] should_fail_ex+0x512/0x640 [ 468.002954][T11114] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 468.002973][T11114] should_failslab+0xc2/0x120 [ 468.002988][T11114] kmem_cache_alloc_node_noprof+0x78/0x770 [ 468.003003][T11114] ? __alloc_skb+0x2b2/0x380 [ 468.003026][T11114] ? __alloc_skb+0x2b2/0x380 [ 468.003046][T11114] ? __pfx_netlink_insert+0x10/0x10 [ 468.003075][T11114] __alloc_skb+0x2b2/0x380 [ 468.003098][T11114] ? __pfx___alloc_skb+0x10/0x10 [ 468.003112][T11114] ? netlink_autobind.isra.0+0x158/0x370 [ 468.003131][T11114] netlink_alloc_large_skb+0x69/0x140 [ 468.003147][T11114] netlink_sendmsg+0x698/0xdd0 [ 468.003170][T11114] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.003210][T11114] ____sys_sendmsg+0xa98/0xc70 [ 468.003231][T11114] ? copy_msghdr_from_user+0x10a/0x160 [ 468.003254][T11114] ? __pfx_____sys_sendmsg+0x10/0x10 [ 468.003272][T11114] ___sys_sendmsg+0x134/0x1d0 [ 468.003286][T11114] ? __pfx____sys_sendmsg+0x10/0x10 [ 468.003299][T11114] ? __lock_acquire+0x622/0x1c90 [ 468.003366][T11114] __sys_sendmsg+0x16d/0x220 [ 468.003390][T11114] ? __pfx___sys_sendmsg+0x10/0x10 [ 468.003414][T11114] do_syscall_64+0xcd/0xfa0 [ 468.003426][T11114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.003438][T11114] RIP: 0033:0x7fe9c1f8f6c9 [ 468.003447][T11114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.003466][T11114] RSP: 002b:00007fe9c2e89038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.003485][T11114] RAX: ffffffffffffffda RBX: 00007fe9c21e5fa0 RCX: 00007fe9c1f8f6c9 [ 468.003499][T11114] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000004 [ 468.003512][T11114] RBP: 00007fe9c2e89090 R08: 0000000000000000 R09: 0000000000000000 [ 468.003524][T11114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.003534][T11114] R13: 00007fe9c21e6038 R14: 00007fe9c21e5fa0 R15: 00007ffc5672ecc8 [ 468.003550][T11114] [ 468.279218][ T30] audit: type=1400 audit(1762732097.127:400): avc: denied { read } for pid=11094 comm="syz.2.1373" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 468.302320][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.308644][ T5889] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 468.338868][ T30] audit: type=1400 audit(1762732097.127:401): avc: denied { open } for pid=11094 comm="syz.2.1373" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 468.410531][ T5882] usb 3-1: USB disconnect, device number 46 [ 468.493653][ T5889] usb 1-1: Using ep0 maxpacket: 8 [ 468.710924][ T5889] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 468.823812][ T5889] usb 1-1: config 179 has no interface number 0 [ 468.830122][ T5889] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 468.894514][ T5889] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 468.922631][ T5889] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 468.989402][T11123] input: syz1 as /devices/virtual/input/input48 [ 469.122163][ T5889] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 469.261024][ T5889] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 469.672658][ T5867] vhci_hcd: vhci_device speed not set [ 469.731245][ T5889] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 470.037083][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.323842][T11112] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 470.344191][ T30] audit: type=1400 audit(1762732099.217:402): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 470.660770][ T979] libceph: mon0 (1)[c::]:6789 connect error [ 471.056673][ T979] libceph: mon0 (1)[c::]:6789 connect error [ 471.202996][ T5897] usb 1-1: USB disconnect, device number 27 [ 471.208975][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 471.209029][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 471.297356][ T5889] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 471.497911][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 471.620678][T11160] ceph: No mds server is up or the cluster is laggy [ 471.629797][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.641072][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.655622][ T5889] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 471.672420][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.781517][ T5889] usb 2-1: config 0 descriptor?? [ 472.456855][ T52] Bluetooth: hci4: unexpected event 0x2f length: 1017 > 260 [ 472.587443][ T5889] koneplus 0003:1E7D:2D51.003C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0 [ 472.699475][T11189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1391'. [ 472.963303][T11190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1391'. [ 473.186149][ T5882] usb 2-1: USB disconnect, device number 34 [ 473.227702][T11194] fido_id[11194]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 473.912470][ T5882] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 474.076088][ T5882] usb 1-1: Using ep0 maxpacket: 32 [ 474.216837][T11207] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1397'. [ 474.232989][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.249176][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.273766][ T5882] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 474.303169][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.482154][ T5882] usb 1-1: config 0 descriptor?? [ 474.572996][ T979] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 474.942141][ T979] usb 4-1: Using ep0 maxpacket: 32 [ 474.959557][ T979] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 474.979020][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.373474][ T979] usb 4-1: config 0 descriptor?? [ 475.417959][ T5882] usbhid 1-1:0.0: can't add hid device: -71 [ 475.433579][ T5882] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 475.455441][ T5882] usb 1-1: USB disconnect, device number 28 [ 475.587581][ T979] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 475.660965][ T979] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 476.148273][ T979] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 476.168001][ T979] usb 4-1: media controller created [ 476.225867][ T979] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 476.465605][ T979] DVB: Unable to find symbol dib7000p_attach() [ 476.493413][ T979] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 476.508742][T11230] FAULT_INJECTION: forcing a failure. [ 476.508742][T11230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.548526][T11230] CPU: 0 UID: 0 PID: 11230 Comm: syz.4.1404 Not tainted syzkaller #0 PREEMPT(full) [ 476.548555][T11230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 476.548567][T11230] Call Trace: [ 476.548574][T11230] [ 476.548582][T11230] dump_stack_lvl+0x16c/0x1f0 [ 476.548618][T11230] should_fail_ex+0x512/0x640 [ 476.548645][T11230] _copy_from_iter+0x29f/0x1720 [ 476.548677][T11230] ? __pfx__copy_from_iter+0x10/0x10 [ 476.548701][T11230] ? find_held_lock+0x2b/0x80 [ 476.548726][T11230] ? dev_get_by_index+0x17c/0x380 [ 476.548760][T11230] packet_sendmsg+0x1cef/0x5850 [ 476.548795][T11230] ? __lock_acquire+0xb8a/0x1c90 [ 476.548832][T11230] ? sock_has_perm+0x259/0x2f0 [ 476.548862][T11230] ? __pfx_sock_has_perm+0x10/0x10 [ 476.548895][T11230] ? __pfx_packet_sendmsg+0x10/0x10 [ 476.548938][T11230] __sys_sendto+0x4a3/0x520 [ 476.548962][T11230] ? __pfx___sys_sendto+0x10/0x10 [ 476.549010][T11230] ? ksys_write+0x1ac/0x250 [ 476.549029][T11230] ? __pfx_ksys_write+0x10/0x10 [ 476.549053][T11230] __x64_sys_sendto+0xe0/0x1c0 [ 476.549076][T11230] ? do_syscall_64+0x91/0xfa0 [ 476.549094][T11230] ? lockdep_hardirqs_on+0x7c/0x110 [ 476.549123][T11230] do_syscall_64+0xcd/0xfa0 [ 476.549144][T11230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.549165][T11230] RIP: 0033:0x7f87e938f6c9 [ 476.549182][T11230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.549201][T11230] RSP: 002b:00007f87ea232038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 476.549226][T11230] RAX: ffffffffffffffda RBX: 00007f87e95e5fa0 RCX: 00007f87e938f6c9 [ 476.549240][T11230] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 476.549253][T11230] RBP: 00007f87ea232090 R08: 0000200000000140 R09: 0000000000000014 [ 476.549266][T11230] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 476.549277][T11230] R13: 00007f87e95e6038 R14: 00007f87e95e5fa0 R15: 00007ffff1de8588 [ 476.549308][T11230] [ 476.825804][ T979] rc_core: IR keymap rc-dib0700-rc5 not found [ 476.832202][ T979] Registered IR keymap rc-empty [ 476.846295][ T979] dvb-usb: could not initialize remote control. [ 476.854351][ T979] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 476.943066][ T979] usb 4-1: USB disconnect, device number 27 [ 477.051711][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 477.177394][ T979] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 477.312413][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 477.320126][T11247] FAULT_INJECTION: forcing a failure. [ 477.320126][T11247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.333730][T11247] CPU: 1 UID: 0 PID: 11247 Comm: syz.1.1409 Not tainted syzkaller #0 PREEMPT(full) [ 477.333758][T11247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 477.333769][T11247] Call Trace: [ 477.333775][T11247] [ 477.333781][T11247] dump_stack_lvl+0x16c/0x1f0 [ 477.333813][T11247] should_fail_ex+0x512/0x640 [ 477.333837][T11247] strncpy_from_user+0x3b/0x2e0 [ 477.333859][T11247] getname_flags.part.0+0x8f/0x550 [ 477.333905][T11247] getname_flags+0x93/0xf0 [ 477.333923][T11247] do_sys_openat2+0xb8/0x1d0 [ 477.333945][T11247] ? __pfx_do_sys_openat2+0x10/0x10 [ 477.333971][T11247] ? __fget_files+0x20e/0x3c0 [ 477.333997][T11247] __x64_sys_openat+0x174/0x210 [ 477.334019][T11247] ? __pfx___x64_sys_openat+0x10/0x10 [ 477.334032][T11247] ? ksys_write+0x1ac/0x250 [ 477.334048][T11247] do_syscall_64+0xcd/0xfa0 [ 477.334059][T11247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.334070][T11247] RIP: 0033:0x7f029f18f6c9 [ 477.334080][T11247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.334091][T11247] RSP: 002b:00007f02a0075038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 477.334102][T11247] RAX: ffffffffffffffda RBX: 00007f029f3e5fa0 RCX: 00007f029f18f6c9 [ 477.334109][T11247] RDX: 0000000000002040 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 477.334116][T11247] RBP: 00007f02a0075090 R08: 0000000000000000 R09: 0000000000000000 [ 477.334123][T11247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.334130][T11247] R13: 00007f029f3e6038 R14: 00007f029f3e5fa0 R15: 00007ffeb37b74d8 [ 477.334146][T11247] [ 477.505594][ C1] vkms_vblank_simulate: vblank timer overrun [ 477.524325][T11234] ceph: No mds server is up or the cluster is laggy [ 477.645295][ T52] Bluetooth: hci2: unexpected event 0x2f length: 1017 > 260 [ 477.922696][T11260] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 477.942903][T11260] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 477.961617][T11259] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 477.975769][T11259] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 480.333145][ T5867] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 481.045200][ T5867] usb 5-1: Using ep0 maxpacket: 8 [ 481.087122][ T5867] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 481.087142][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.087154][ T5867] usb 5-1: Product: syz [ 481.087163][ T5867] usb 5-1: Manufacturer: syz [ 481.087172][ T5867] usb 5-1: SerialNumber: syz [ 481.088682][ T5867] usb 5-1: config 0 descriptor?? [ 481.090422][ T5867] gspca_main: se401-2.14.0 probing 047d:5003 [ 481.410171][T11284] input: syz1 as /devices/virtual/input/input50 [ 481.437325][ T52] Bluetooth: unknown link type 128 [ 481.492694][ T5867] gspca_se401: Wrong descriptor type [ 481.789048][ T24] usb 5-1: USB disconnect, device number 30 [ 481.882384][ T5889] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 482.372137][ T5889] usb 2-1: unable to get BOS descriptor or descriptor too short [ 482.392926][ T5889] usb 2-1: not running at top speed; connect to a high speed hub [ 482.424776][ T5889] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 482.452494][ T5889] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 482.528979][ T5889] usb 2-1: string descriptor 0 read error: -22 [ 482.550630][T11301] binder: 11300:11301 ioctl 4018620d 0 returned -22 [ 482.560206][ T5889] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 482.607935][ T30] audit: type=1326 audit(1762732111.477:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11302 comm="syz.0.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a6b8f6c9 code=0x7ffc0000 [ 482.612069][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.749250][ T30] audit: type=1326 audit(1762732111.477:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11302 comm="syz.0.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a6b8f6c9 code=0x7ffc0000 [ 482.816377][T11297] Bluetooth: MGMT ver 1.23 [ 482.821161][T11297] Bluetooth: hci1: too big key_count value 11787 [ 482.833055][ T30] audit: type=1326 audit(1762732111.477:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11302 comm="syz.0.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03a6b8f6c9 code=0x7ffc0000 [ 482.835357][ T5889] usb 2-1: 0:2 : does not exist [ 483.356178][ T30] audit: type=1326 audit(1762732111.477:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11302 comm="syz.0.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a6b8f6c9 code=0x7ffc0000 [ 483.382233][ T30] audit: type=1326 audit(1762732111.477:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11302 comm="syz.0.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a6b8f6c9 code=0x7ffc0000 [ 483.449247][ T30] audit: type=1326 audit(1762732111.507:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11302 comm="syz.0.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03a6b8f6c9 code=0x7ffc0000 [ 483.562252][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 483.568382][ T30] audit: type=1326 audit(1762732111.507:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11302 comm="syz.0.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a6b8f6c9 code=0x7ffc0000 [ 483.594146][ T52] Bluetooth: hci4: unexpected event 0x2f length: 1017 > 260 [ 483.598342][ T30] audit: type=1326 audit(1762732111.507:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11302 comm="syz.0.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a6b8f6c9 code=0x7ffc0000 [ 483.631241][ T30] audit: type=1326 audit(1762732111.507:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11302 comm="syz.0.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03a6b8f6c9 code=0x7ffc0000 [ 483.657073][ T30] audit: type=1326 audit(1762732111.507:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11302 comm="syz.0.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a6b8f6c9 code=0x7ffc0000 [ 484.735268][ T5889] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 484.749706][ T5889] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 484.967219][ T5889] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 485.003095][ T5889] usb 2-1: USB disconnect, device number 35 [ 485.997924][T11298] syz.3.1424 (11298): drop_caches: 2 [ 486.432067][T11338] FAULT_INJECTION: forcing a failure. [ 486.432067][T11338] name failslab, interval 1, probability 0, space 0, times 0 [ 486.432247][T11338] CPU: 0 UID: 0 PID: 11338 Comm: syz.0.1435 Not tainted syzkaller #0 PREEMPT(full) [ 486.432271][T11338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 486.432282][T11338] Call Trace: [ 486.432289][T11338] [ 486.432296][T11338] dump_stack_lvl+0x16c/0x1f0 [ 486.432328][T11338] should_fail_ex+0x512/0x640 [ 486.432351][T11338] ? fs_reclaim_acquire+0xae/0x150 [ 486.432376][T11338] should_failslab+0xc2/0x120 [ 486.432404][T11338] kmem_cache_alloc_noprof+0x75/0x6e0 [ 486.432429][T11338] ? __pfx_map_id_range_down+0x10/0x10 [ 486.432452][T11338] ? security_inode_alloc+0x3b/0x2b0 [ 486.432478][T11338] ? security_inode_alloc+0x3b/0x2b0 [ 486.432496][T11338] security_inode_alloc+0x3b/0x2b0 [ 486.432518][T11338] inode_init_always_gfp+0xce4/0x1030 [ 486.432544][T11338] alloc_inode+0x86/0x240 [ 486.432569][T11338] sock_alloc+0x40/0x280 [ 486.432598][T11338] __sock_create+0xc1/0x8d0 [ 486.432618][T11338] ? __pfx___schedule+0x10/0x10 [ 486.432649][T11338] __sys_socket+0x14d/0x260 [ 486.432669][T11338] ? __pfx___sys_socket+0x10/0x10 [ 486.432698][T11338] __x64_sys_socket+0x72/0xb0 [ 486.432717][T11338] ? lockdep_hardirqs_on+0x7c/0x110 [ 486.432746][T11338] do_syscall_64+0xcd/0xfa0 [ 486.432766][T11338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.432787][T11338] RIP: 0033:0x7f03a6b8f6c9 [ 486.432802][T11338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.432821][T11338] RSP: 002b:00007f03a7aab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 486.432839][T11338] RAX: ffffffffffffffda RBX: 00007f03a6de6090 RCX: 00007f03a6b8f6c9 [ 486.432853][T11338] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000000002b [ 486.432865][T11338] RBP: 00007f03a7aab090 R08: 0000000000000000 R09: 0000000000000000 [ 486.432877][T11338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.432889][T11338] R13: 00007f03a6de6128 R14: 00007f03a6de6090 R15: 00007fff58e38978 [ 486.432919][T11338] [ 486.433185][T11338] socket: no more sockets [ 486.919833][T11347] binder: 11345:11347 ioctl 4018620d 0 returned -22 [ 487.005169][T11351] binder: 11346:11351 ioctl 4018620d 0 returned -22 [ 487.009169][T11351] binder: 11346:11351 unknown command 0 [ 487.009205][T11351] binder: 11346:11351 ioctl c0306201 2000000002c0 returned -22 [ 487.173018][ T979] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 487.448545][ T979] usb 3-1: Using ep0 maxpacket: 32 [ 487.495881][ T979] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 487.495912][ T979] usb 3-1: config 0 has no interface number 0 [ 487.495950][ T979] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 487.495974][ T979] usb 3-1: config 0 interface 89 has no altsetting 0 [ 487.504069][ T979] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 487.504115][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.504137][ T979] usb 3-1: Product: syz [ 487.504153][ T979] usb 3-1: Manufacturer: syz [ 487.504170][ T979] usb 3-1: SerialNumber: syz [ 487.566731][ T979] usb 3-1: config 0 descriptor?? [ 487.674084][ T979] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 487.674111][ T979] em28xx 3-1:0.89: Video interface 89 found: [ 488.972948][ T979] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 489.069976][ T979] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 489.108745][ T979] em28xx 3-1:0.89: board has no eeprom [ 489.382571][ T979] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 489.389899][ T979] em28xx 3-1:0.89: analog set to bulk mode. [ 489.408259][ T5816] em28xx 3-1:0.89: Registering V4L2 extension [ 489.618314][ T52] Bluetooth: hci2: unexpected event 0x2f length: 1017 > 260 [ 489.634142][ T5816] em28xx 3-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 489.663559][ T5816] em28xx 3-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 489.684936][ T5816] em28xx 3-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 489.727795][ T5816] em28xx 3-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 489.746757][ T5816] em28xx 3-1:0.89: Config register raw data: 0xfffffffb [ 489.972525][ T976] usb 3-1: USB disconnect, device number 47 [ 489.979547][ T976] em28xx 3-1:0.89: Disconnecting em28xx [ 490.183940][ T5816] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 490.224626][ T5816] em28xx 3-1:0.89: No AC97 audio processor [ 490.232510][ T979] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 490.272526][ T5816] usb 3-1: Decoder not found [ 490.397819][ T5816] em28xx 3-1:0.89: failed to create media graph [ 490.704634][ T979] usb 5-1: Using ep0 maxpacket: 32 [ 490.716022][ T5816] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 490.733645][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.853793][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.853843][ T979] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 490.853867][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.865923][ T979] usb 5-1: config 0 descriptor?? [ 490.869956][T11389] ================================================================== [ 490.899333][T11389] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 [ 490.906772][T11389] Read of size 8 at addr ffff88807d880740 by task v4l_id/11389 [ 490.914289][T11389] [ 490.916598][T11389] CPU: 1 UID: 0 PID: 11389 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 490.916614][T11389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 490.916621][T11389] Call Trace: [ 490.916627][T11389] [ 490.916632][T11389] dump_stack_lvl+0x116/0x1f0 [ 490.916653][T11389] print_report+0xcd/0x630 [ 490.916665][T11389] ? __virt_addr_valid+0x81/0x610 [ 490.916680][T11389] ? __phys_addr+0xe8/0x180 [ 490.916694][T11389] ? v4l2_fh_init+0x27d/0x2c0 [ 490.916704][T11389] kasan_report+0xe0/0x110 [ 490.916716][T11389] ? v4l2_fh_init+0x27d/0x2c0 [ 490.916727][T11389] v4l2_fh_init+0x27d/0x2c0 [ 490.916737][T11389] v4l2_fh_open+0x64/0xa0 [ 490.916746][T11389] em28xx_v4l2_open+0x24e/0x7e0 [ 490.916759][T11389] v4l2_open+0x1d2/0x5e0 [ 490.916774][T11389] ? __pfx_v4l2_open+0x10/0x10 [ 490.916789][T11389] chrdev_open+0x234/0x6a0 [ 490.916801][T11389] ? __pfx_chrdev_open+0x10/0x10 [ 490.916813][T11389] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 490.916832][T11389] do_dentry_open+0x982/0x1530 [ 490.916842][T11389] ? __pfx_chrdev_open+0x10/0x10 [ 490.916855][T11389] vfs_open+0x82/0x3f0 [ 490.916869][T11389] path_openat+0x1de4/0x2cb0 [ 490.916883][T11389] ? __pfx_path_openat+0x10/0x10 [ 490.916893][T11389] ? __lock_acquire+0xb8a/0x1c90 [ 490.916911][T11389] do_filp_open+0x20b/0x470 [ 490.916922][T11389] ? __pfx_do_filp_open+0x10/0x10 [ 490.916938][T11389] ? alloc_fd+0x471/0x7d0 [ 490.916951][T11389] do_sys_openat2+0x11b/0x1d0 [ 490.916964][T11389] ? __pfx_do_sys_openat2+0x10/0x10 [ 490.916976][T11389] ? find_held_lock+0x2b/0x80 [ 490.916989][T11389] ? handle_mm_fault+0x2ab/0xd10 [ 490.917006][T11389] __x64_sys_openat+0x174/0x210 [ 490.917019][T11389] ? __pfx___x64_sys_openat+0x10/0x10 [ 490.917033][T11389] ? do_user_addr_fault+0x843/0x1370 [ 490.917046][T11389] do_syscall_64+0xcd/0xfa0 [ 490.917057][T11389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.917069][T11389] RIP: 0033:0x7fb023ea7407 [ 490.917080][T11389] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 490.917091][T11389] RSP: 002b:00007fffd36f9390 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 490.917102][T11389] RAX: ffffffffffffffda RBX: 00007fb023db9880 RCX: 00007fb023ea7407 [ 490.917109][T11389] RDX: 0000000000000000 RSI: 00007fffd36faf1d RDI: ffffffffffffff9c [ 490.917117][T11389] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 490.917124][T11389] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 490.917134][T11389] R13: 00007fffd36f95e0 R14: 00007fb02463e000 R15: 0000561eca36f4d8 [ 490.917156][T11389] [ 490.917162][T11389] [ 491.177069][T11389] Allocated by task 5816: [ 491.181370][T11389] kasan_save_stack+0x33/0x60 [ 491.186026][T11389] kasan_save_track+0x14/0x30 [ 491.190677][T11389] __kasan_kmalloc+0xaa/0xb0 [ 491.195241][T11389] em28xx_v4l2_init+0x114/0x4080 [ 491.200155][T11389] em28xx_init_extension+0x13a/0x200 [ 491.205427][T11389] request_module_async+0x61/0x70 [ 491.210429][T11389] process_one_work+0x9cf/0x1b70 [ 491.215344][T11389] worker_thread+0x6c8/0xf10 [ 491.219914][T11389] kthread+0x3c5/0x780 [ 491.223976][T11389] ret_from_fork+0x675/0x7d0 [ 491.228559][T11389] ret_from_fork_asm+0x1a/0x30 [ 491.233314][T11389] [ 491.235630][T11389] Freed by task 5816: [ 491.239597][T11389] kasan_save_stack+0x33/0x60 [ 491.244257][T11389] kasan_save_track+0x14/0x30 [ 491.248907][T11389] __kasan_save_free_info+0x3b/0x60 [ 491.254084][T11389] __kasan_slab_free+0x5f/0x80 [ 491.258822][T11389] kfree+0x2b8/0x6d0 [ 491.262696][T11389] em28xx_v4l2_init+0x22b5/0x4080 [ 491.267695][T11389] em28xx_init_extension+0x13a/0x200 [ 491.272956][T11389] request_module_async+0x61/0x70 [ 491.277957][T11389] process_one_work+0x9cf/0x1b70 [ 491.282871][T11389] worker_thread+0x6c8/0xf10 [ 491.287439][T11389] kthread+0x3c5/0x780 [ 491.291486][T11389] ret_from_fork+0x675/0x7d0 [ 491.296066][T11389] ret_from_fork_asm+0x1a/0x30 [ 491.300815][T11389] [ 491.303113][T11389] The buggy address belongs to the object at ffff88807d880000 [ 491.303113][T11389] which belongs to the cache kmalloc-8k of size 8192 [ 491.317141][T11389] The buggy address is located 1856 bytes inside of [ 491.317141][T11389] freed 8192-byte region [ffff88807d880000, ffff88807d882000) [ 491.331089][T11389] [ 491.333398][T11389] The buggy address belongs to the physical page: [ 491.339792][T11389] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d880 [ 491.348530][T11389] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 491.357010][T11389] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 491.364973][T11389] page_type: f5(slab) [ 491.368932][T11389] raw: 00fff00000000040 ffff88813ffa7280 ffffea0000d8aa00 0000000000000005 [ 491.377494][T11389] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 491.386061][T11389] head: 00fff00000000040 ffff88813ffa7280 ffffea0000d8aa00 0000000000000005 [ 491.394715][T11389] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 491.403366][T11389] head: 00fff00000000003 ffffea0001f62001 00000000ffffffff 00000000ffffffff [ 491.412018][T11389] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 491.420664][T11389] page dumped because: kasan: bad access detected [ 491.427084][T11389] page_owner tracks the page as allocated [ 491.432779][T11389] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11097, tgid 11094 (syz.2.1373), ts 468260608763, free_ts 467978919566 [ 491.454293][T11389] post_alloc_hook+0x1c0/0x230 [ 491.459046][T11389] get_page_from_freelist+0x10a3/0x3a30 [ 491.464572][T11389] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 491.470448][T11389] alloc_pages_mpol+0x1fb/0x550 [ 491.475277][T11389] new_slab+0x24a/0x360 [ 491.479414][T11389] ___slab_alloc+0xd79/0x1a50 [ 491.484072][T11389] __slab_alloc.constprop.0+0x63/0x110 [ 491.489513][T11389] __kmalloc_cache_noprof+0x477/0x780 [ 491.494872][T11389] ptp_open+0xe4/0x550 [ 491.498931][T11389] posix_clock_open+0x17b/0x290 [ 491.503775][T11389] chrdev_open+0x234/0x6a0 [ 491.508172][T11389] do_dentry_open+0x982/0x1530 [ 491.512940][T11389] vfs_open+0x82/0x3f0 [ 491.517008][T11389] path_openat+0x1de4/0x2cb0 [ 491.521579][T11389] do_filp_open+0x20b/0x470 [ 491.526066][T11389] do_sys_openat2+0x11b/0x1d0 [ 491.530819][T11389] page last free pid 11114 tgid 11113 stack trace: [ 491.537296][T11389] __free_frozen_pages+0x7df/0x1160 [ 491.542485][T11389] __put_partials+0x130/0x170 [ 491.547149][T11389] qlist_free_all+0x4d/0x120 [ 491.551715][T11389] kasan_quarantine_reduce+0x195/0x1e0 [ 491.557153][T11389] __kasan_slab_alloc+0x69/0x90 [ 491.561982][T11389] kmem_cache_alloc_lru_noprof+0x254/0x6e0 [ 491.567773][T11389] sock_alloc_inode+0x25/0x1c0 [ 491.572523][T11389] alloc_inode+0x64/0x240 [ 491.576845][T11389] sock_alloc+0x40/0x280 [ 491.581087][T11389] __sock_create+0xc1/0x8d0 [ 491.585568][T11389] __sys_socket+0x14d/0x260 [ 491.590057][T11389] __x64_sys_socket+0x72/0xb0 [ 491.594722][T11389] do_syscall_64+0xcd/0xfa0 [ 491.599212][T11389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.605086][T11389] [ 491.607388][T11389] Memory state around the buggy address: [ 491.612996][T11389] ffff88807d880600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 491.621042][T11389] ffff88807d880680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 491.629086][T11389] >ffff88807d880700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 491.637124][T11389] ^ [ 491.643250][T11389] ffff88807d880780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 491.651286][T11389] ffff88807d880800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 491.659330][T11389] ================================================================== [ 491.667444][ C1] vkms_vblank_simulate: vblank timer overrun [ 491.674433][ T5816] em28xx 3-1:0.89: Registering snapshot button... [ 491.685517][ T5816] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input51 [ 491.690235][T11389] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 491.690253][T11389] CPU: 1 UID: 0 PID: 11389 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 491.690277][T11389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 491.690289][T11389] Call Trace: [ 491.690296][T11389] [ 491.690304][T11389] dump_stack_lvl+0x3d/0x1f0 [ 491.690337][T11389] vpanic+0x640/0x6f0 [ 491.690365][T11389] panic+0xca/0xd0 [ 491.690391][T11389] ? __pfx_panic+0x10/0x10 [ 491.690418][T11389] ? v4l2_fh_init+0x27d/0x2c0 [ 491.690437][T11389] ? preempt_schedule_common+0x44/0xc0 [ 491.690467][T11389] ? preempt_schedule_thunk+0x16/0x30 [ 491.690498][T11389] ? check_panic_on_warn+0x1f/0xb0 [ 491.690527][T11389] check_panic_on_warn+0xab/0xb0 [ 491.690555][T11389] end_report+0x107/0x170 [ 491.690576][T11389] kasan_report+0xee/0x110 [ 491.690599][T11389] ? v4l2_fh_init+0x27d/0x2c0 [ 491.690620][T11389] v4l2_fh_init+0x27d/0x2c0 [ 491.690639][T11389] v4l2_fh_open+0x64/0xa0 [ 491.690657][T11389] em28xx_v4l2_open+0x24e/0x7e0 [ 491.690679][T11389] v4l2_open+0x1d2/0x5e0 [ 491.690705][T11389] ? __pfx_v4l2_open+0x10/0x10 [ 491.690730][T11389] chrdev_open+0x234/0x6a0 [ 491.690752][T11389] ? __pfx_chrdev_open+0x10/0x10 [ 491.690774][T11389] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 491.690799][T11389] do_dentry_open+0x982/0x1530 [ 491.690818][T11389] ? __pfx_chrdev_open+0x10/0x10 [ 491.690843][T11389] vfs_open+0x82/0x3f0 [ 491.690867][T11389] path_openat+0x1de4/0x2cb0 [ 491.690892][T11389] ? __pfx_path_openat+0x10/0x10 [ 491.690912][T11389] ? __lock_acquire+0xb8a/0x1c90 [ 491.690943][T11389] do_filp_open+0x20b/0x470 [ 491.690968][T11389] ? __pfx_do_filp_open+0x10/0x10 [ 491.690999][T11389] ? alloc_fd+0x471/0x7d0 [ 491.691022][T11389] do_sys_openat2+0x11b/0x1d0 [ 491.691045][T11389] ? __pfx_do_sys_openat2+0x10/0x10 [ 491.691068][T11389] ? find_held_lock+0x2b/0x80 [ 491.691091][T11389] ? handle_mm_fault+0x2ab/0xd10 [ 491.691120][T11389] __x64_sys_openat+0x174/0x210 [ 491.691145][T11389] ? __pfx___x64_sys_openat+0x10/0x10 [ 491.691170][T11389] ? do_user_addr_fault+0x843/0x1370 [ 491.691195][T11389] do_syscall_64+0xcd/0xfa0 [ 491.691214][T11389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.691234][T11389] RIP: 0033:0x7fb023ea7407 [ 491.691249][T11389] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 491.691268][T11389] RSP: 002b:00007fffd36f9390 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 491.691288][T11389] RAX: ffffffffffffffda RBX: 00007fb023db9880 RCX: 00007fb023ea7407 [ 491.691302][T11389] RDX: 0000000000000000 RSI: 00007fffd36faf1d RDI: ffffffffffffff9c [ 491.691315][T11389] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 491.691327][T11389] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 491.691339][T11389] R13: 00007fffd36f95e0 R14: 00007fb02463e000 R15: 0000561eca36f4d8 [ 491.691362][T11389] [ 491.698647][T11389] Kernel Offset: disabled